fix(cli): share Vault-relative path exclusions

Apply watcher and logical-target exclusions within the selected Vault so
hidden or database-like parent directories do not suppress monitoring.
Protect primary, previous, and view databases, and provide a runtime opt-in
for ordinary database-like directories without changing database ownership.

Cover hidden roots, symlink restarts, exclusion parity, and encrypted
CouchDB create, modify, and delete operations with regression tests.

Refs #1340

src/apps/cli/managers/StorageEventManagerCLI.ts

@@ -6,11 +6,11 @@ import { CLIStorageEventManagerAdapter } from "./CLIStorageEventManagerAdapter";
 import type { IMinimumLiveSyncCommands, LiveSyncBaseCore } from "@/LiveSyncBaseCore";
 import type { ServiceContext } from "@vrtmrz/livesync-commonlib/context";
 import type { IgnoreRules } from "@/apps/cli/serviceModules/IgnoreRules";
+import type { CLIPathFilterOptions } from "@/apps/cli/cliPathFilter";
 import { LOG_LEVEL_NOTICE } from "octagonal-wheels/common/logger";
 import { runtimeScopeDirectory } from "@/apps/cli/runtimeState";
 import type { NodeServiceContext } from "@/apps/cli/services/NodeServiceContext";
 import { path as nodePath } from "@vrtmrz/livesync-commonlib/node";
-// import type { IMinimumLiveSyncCommands } from "@vrtmrz/livesync-commonlib/compat/services/base/IService";
 
 export class StorageEventManagerCLI extends StorageEventManagerBase<CLIStorageEventManagerAdapter> {
     core: LiveSyncBaseCore<ServiceContext, IMinimumLiveSyncCommands>;
@@ -20,7 +20,8 @@ export class StorageEventManagerCLI extends StorageEventManagerBase<CLIStorageEv
         core: LiveSyncBaseCore<ServiceContext, IMinimumLiveSyncCommands>,
         dependencies: StorageEventManagerBaseDependencies,
         ignoreRules?: IgnoreRules,
-        watchEnabled?: boolean
+        watchEnabled?: boolean,
+        pathFilterOptions?: CLIPathFilterOptions
     ) {
         const context = core.services.context as NodeServiceContext;
         const adapter = new CLIStorageEventManagerAdapter(
@@ -33,23 +34,22 @@ export class StorageEventManagerCLI extends StorageEventManagerBase<CLIStorageEv
                     dependencies.APIService.addLog(detail, LOG_LEVEL_NOTICE);
                 }
             },
+            // Fetch/rebuild can change the selected suffix after construction; resolve
+            // the snapshot location when used so it follows the current DB/Vault scope.
             () =>
                 nodePath.join(
                     runtimeScopeDirectory(context.databasePath, dependencies.vaultService.getVaultName(), basePath),
                     "storage-events.json"
-                )
+                ),
+            pathFilterOptions
         );
         super(adapter, dependencies);
         this.core = core;
     }
 
-    /**
-     * Override _watchVaultRawEvents for CLI-specific logic
-     * In CLI, we don't have internal files like Obsidian's .obsidian folder
-     */
+    /** The CLI uses shared exclusions instead of the plug-in's raw internal-file event processing. */
     protected override async _watchVaultRawEvents(path: string) {
-        // No-op in CLI version
-        // Internal file handling is not needed
+        // Hidden and internal entries are intentionally not queued as raw Vault events.
     }
 
     /**