
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@cleocode/cleo
Advanced tools
CLEO CLI — the assembled product consuming @cleocode/core.
This is the main CLEO package that brings together all other packages into a unified command-line interface. It provides:
The CLI is a thin wrapper — all business logic lives in @cleocode/core.
Important: As of v2026.4.109, @cleocode/core is now a peer dependency. Both packages must be installed:
npm install -g @cleocode/cleo @cleocode/core
To upgrade from a pre-v2026.4.109 installation, run:
npm install -g @cleocode/core
The postinstall hook in @cleocode/cleo will detect and warn if @cleocode/core is missing.
For local project-level installs, use the same two-package approach:
npm install @cleocode/cleo @cleocode/core
If your project uses pnpm workspaces, dependency resolution is automatic via the workspace protocol. No additional installation steps are needed.
npm install -g @cleocode/cleo-os
This installs cleo, ct, and cleoos binaries with CANT bridge and TUI extensions.
CleoOS automatically includes @cleocode/core via its dependencies.
npx @cleocode/cleo <command>
Note: npx does not install global packages and is best for one-off commands.
cd my-project
cleo init
# Add a task
cleo add "Implement user authentication" --priority high --acceptance "AC1|AC2|AC3"
# Search tasks (returns readiness info: depends, type, size)
cleo find "auth" --status pending
# Start a work session
cleo session start --scope global --name "Auth Feature"
# Show current context
cleo current
# Complete a task
cleo complete T001
# Get help
cleo --help
cleo <command> --help
CLEO provides 100+ commands organized into domains:
| Command | Description |
|---|---|
cleo add <title> | Create a new task |
cleo add-batch --file tasks.json | Batch create tasks from JSON |
cleo list | List all tasks |
cleo show <id> | Show task details |
cleo find <query> | Search tasks (agent-optimized, includes readiness) |
cleo find <query> --verbose | Search with full task fields |
cleo find <query> --fields labels,acceptance | Search with specific extra fields |
cleo complete <id> | Mark task as complete |
cleo update <id> | Update task properties |
cleo delete <id> | Delete a task |
cleo start <id> | Start working on a task |
cleo stop | Stop current task |
cleo current | Show current task |
cleo next | Get next task to work on |
cleo archive <ids...> | Archive completed tasks |
cleo deps <id> | Show task dependencies |
cleo tree <id> | Show task tree |
cleo labels | Manage labels |
cleo blockers | Show blockers |
cleo stats | Task statistics |
cleo history <id> | Task history |
cleo reorder <id> <position> | Reorder tasks |
cleo reparent <id> <parent> | Change parent task |
cleo relates <id> <target> | Add relation |
cleo exists <id> | Check if task exists |
cleo promote <id> | Promote task to root level |
| Command | Description |
|---|---|
cleo session start [--scope] [--name] | Start a new session |
cleo session list | List sessions |
cleo session resume <id> | Resume a session |
cleo session end [id] | End current session |
cleo briefing | Generate session briefing |
cleo phase | Phase management |
cleo checkpoint | Create checkpoint |
cleo safestop | Safe stop with context |
| Command | Description |
|---|---|
cleo memory | Memory operations |
cleo memory-brain | Brain memory search |
cleo observe <text> | Save observation to brain.db |
cleo context | Show context |
cleo inject | Inject context |
cleo sync | Sync memory |
cleo sticky | Sticky notes |
cleo refresh-memory | Refresh memory bridge |
| Command | Description |
|---|---|
cleo validate | Validate tasks |
cleo verify | Verify compliance |
cleo compliance | Compliance checks |
cleo doctor | System health check |
cleo analyze | Analyze project |
| Command | Description |
|---|---|
cleo release | Release management |
cleo lifecycle | Lifecycle operations |
cleo promote <id> | Promote task/stage |
cleo upgrade | Upgrade CLEO |
cleo roadmap | Roadmap planning |
cleo plan | Create plan |
cleo phases | Phase operations |
cleo log | View logs |
cleo issue | Issue management |
cleo add --kind bug --severity Px | Bug tracking (ADR-066) |
| Command | Description |
|---|---|
cleo orchestrate | Orchestration operations |
cleo ops | Operations dashboard |
cleo consensus | Consensus workflow |
cleo contribution | Track contribution |
cleo decomposition | Decompose tasks |
cleo implementation | Implementation guide |
cleo sequence | Task sequencing |
cleo dash | Dashboard |
| Command | Description |
|---|---|
cleo nexus | Nexus operations |
cleo init | Initialize project |
cleo remote | Remote management |
cleo push | Push to remote |
cleo pull | Pull from remote |
cleo snapshot | Create snapshot |
cleo export | Export data |
cleo import | Import data |
| Command | Description |
|---|---|
cleo config | Configuration |
cleo backup | Backup data |
cleo backup export | Pack a portable .cleobundle.tar.gz |
cleo backup import | Restore from a portable bundle |
cleo backup inspect | Print bundle manifest |
cleo restore finalize | Apply resolved conflicts |
cleo skills | Skills management |
cleo self-update | Update CLEO |
cleo grade | Grade session |
cleo migrate | Run migrations |
cleo adr | ADR management |
cleo map | Codebase map |
cleo commands | List all commands |
cleo otel | OpenTelemetry |
cleo token | Token management |
cleo backup export <name> [--scope project|global|all] [--encrypt]
cleo backup import <bundle> [--force]
cleo backup inspect <bundle>
cleo restore finalize
See ADR-038 for the full specification.
# Output format
cleo --json <command> # JSON output
cleo --human <command> # Human-readable output (default)
cleo --quiet <command> # Minimal output
# Field extraction
cleo --field <name> <command> # Extract single field
cleo --fields <names> <command> # Extract multiple fields
# Minimum viable information
cleo --mvi <level> <command> # Control detail level
export CLEO_LOG_LEVEL=debug
export CLEO_PROJECT_ROOT=/path/to/project # Override cwd-based project detection
export CLEO_ROOT=/path/to/project # Alias for CLEO_PROJECT_ROOT
// .cleo/config.json
{
"logging": { "level": "info" },
"session": { "enforcement": { "requiredForMutate": true } },
"lifecycle": { "mode": "advisory" },
"enforcement": {
"acceptance": { "mode": "block", "minimumCriteria": 3 }
}
}
cleo config set logging.level debug
cleo config get logging.level
cleo config list
While the CLI is the primary interface, you can use the core SDK directly:
import { Cleo } from '@cleocode/core';
const cleo = await Cleo.init('./my-project');
// Task operations
await cleo.tasks.add({ title: 'New task' });
// Cleanup
await cleo.destroy();
┌─────────────────────────────────────┐
│ @cleocode/cleo │
│ ┌──────────────────────────────┐ │
│ │ CLI Layer │ │
│ │ 89 commands (commander.js) │ │
│ └──────────────┬───────────────┘ │
│ │ │
│ ┌──────────────┴───────────────┐ │
│ │ Dispatch Layer │ │
│ │ CQRS query/mutate routing │ │
│ │ 12 domain handlers │ │
│ │ 19 engine wrappers │ │
│ │ Middleware pipeline │ │
│ └──────────────┬───────────────┘ │
│ │ │
│ ┌──────────────┴───────────────┐ │
│ │ @cleocode/core │ │
│ │ Tasks • Sessions • Memory │ │
│ │ Orchestration • Lifecycle │ │
│ └──────────────────────────────┘ │
└─────────────────────────────────────┘
"Project not initialized"
cleo init
"Storage migration needed"
cleo upgrade
"Permission denied"
chmod +x $(which cleo)
export CLEO_LOG_LEVEL=debug
cleo <command>
cleo --help
cleo <command> --help
cleo doctor
cleo commands
@cleocode/core — Business logic SDK@cleocode/contracts — Shared type definitions@cleocode/caamp — Provider registry@cleocode/cant — CANT protocol parser@cleocode/lafs — Error envelope protocol@cleocode/runtime — Long-running process layerdrizzle-orm — Database ORMpino — Loggingcleo — Primary commandct — Short aliasMIT License - see LICENSE for details.
FAQs
CLEO CLI — the assembled product consuming @cleocode/core
The npm package @cleocode/cleo receives a total of 414 weekly downloads. As such, @cleocode/cleo popularity was classified as not popular.
We found that @cleocode/cleo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.