initial commit

Co-authored-by: Copilot <copilot@github.com>

specs/cli_sync.allium

@@ -0,0 +1,68 @@
+-- allium: 1
+-- bDS CLI / App Notification Sync
+-- Scope: extension (Bucket G — MCP + Automation)
+-- Distilled from: src/main/engine/CliNotifier.ts, NotificationWatcher.ts
+
+entity DbNotification {
+    entity_type: String             -- post, media, script, template
+    entity_id: String
+    action: created | updated | deleted
+    from_cli: Boolean
+    seen_at: Timestamp?
+    created_at: Timestamp
+
+    -- Derived
+    is_processed: seen_at != null
+}
+
+surface CliSyncRuntimeSurface {
+    facing _: CliSyncRuntime
+
+    provides:
+        CliMutationPerformed(entity_type, entity_id, action)
+        DbFileChangeDetected()
+}
+
+rule CliWriteNotification {
+    when: CliMutationPerformed(entity_type, entity_id, action)
+    -- CLI inserts notification row; app watches for it
+    ensures: DbNotification.created(
+        entity_type: entity_type,
+        entity_id: entity_id,
+        action: action,
+        from_cli: true,
+        seen_at: null
+    )
+}
+
+rule AppWatchNotifications {
+    when: DbFileChangeDetected()
+    -- Watches the persisted notification store for external mutations
+    -- Debounced at 100ms
+    let unseen = DbNotifications where seen_at = null and from_cli = true
+    for n in unseen:
+        ensures: n.seen_at = now
+        ensures: EngineCacheInvalidated(n.entity_type)
+        ensures: EntityChangedEvent(n.entity_type, n.entity_id, n.action)
+            -- IPC event to renderer for UI refresh
+}
+
+rule PruneProcessedNotifications {
+    when: n: DbNotification.created_at + 1.hour <= now
+    requires: n.is_processed
+    -- Processed rows: prune after 1 hour
+    ensures: not exists n
+}
+
+rule PruneUnprocessedNotifications {
+    when: n: DbNotification.created_at + 24.hours <= now
+    requires: not n.is_processed
+    -- Unprocessed rows: prune after 24 hours
+    ensures: not exists n
+}
+
+invariant AppNoopNotifier {
+    -- The desktop application uses a no-op notifier for its own writes
+    -- It already knows about its own mutations
+    -- Only CLI writes produce notification rows
+}