@indigoai-us/hq-cli 5.108.20 → 5.108.22

package/CHANGELOG.md

@@ -2,6 +2,39 @@
 
 ## [Unreleased]
 
+## [5.108.22] — 2026-09-07
+
+### Fixed
+
+- Work Mesh registrations now retain the runtime harness in the durable outbox
+  and send it to the server, including a compatible fallback for older queued
+  operations. Fleet sessions discover their company from the standard agent
+  identity file without requiring a launcher environment variable, and transcript
+  registration uses the shared company precedence and conflict rules.
+
+## [5.108.21] — 2026-09-07
+
+### Fixed
+
+- A large `hq files cat`/`hq files get`/`hq files browse`/`hq files search`
+  download no longer dies part-way through with an unexplained crash (Sentry
+  HQ-CLI-5 — 7596554539). Every company-mode vault read goes through a presigned
+  GET, and the CLI handed the caller the download's response body *before anyone
+  started reading it*. Node's bundled `undici` builds that body stream with a
+  zero high-water mark, so the first chunk pauses its HTTP parser until a
+  consumer pulls — and the download loop ran a synchronous `mkdirSync` before it
+  began pulling. When S3 closed the connection inside that gap, undici's
+  socket-end handler tripped an internal `assert(!this.paused)` and threw an
+  `AssertionError` from a background tick that no `try/catch` around the download
+  could see, so `@sentry/node` filed it as a fatal and the process exited
+  mid-download. The presigned GET is now drained into memory before its body is
+  handed on whenever the response declares a length at or below 32 MiB (which
+  covers every object the CLI reads today), removing the paused-parser window
+  entirely; larger or unmeasured responses keep streaming, and the destination
+  directory is now created *before* the download is issued so no synchronous
+  filesystem call sits inside the read window on that path either. The observable
+  output of every `hq files` subcommand is unchanged.
+
 ## [5.108.20] — 2026-09-07
 
 ### Fixed

package/dist/commands/files-browse.d.ts

@@ -403,6 +403,28 @@ export interface RunGetResult {
  * HQ root itself, which is too broad to do implicitly.
  */
 export declare function runGet(input: RunGetInput): Promise<RunGetResult>;
+/**
+ * Upper bound (bytes) on a presigned download we drain into memory before
+ * handing the caller a Body (HQ-CLI-5).
+ *
+ * fetch()'s response body is an undici ReadableStream with a zero high-water
+ * mark: the first chunk drives desiredSize to 0 and undici PAUSES its llhttp
+ * parser until a consumer pulls. `getObject` used to hand that still-paused
+ * stream straight to the orchestrators, which each run a synchronous fs call
+ * before they start pulling. If S3 sends its connection FIN inside that gap,
+ * undici's socket-end handler trips `assert(!this.paused)` in Parser.finish and
+ * throws an AssertionError from a process tick — outside any try/catch — that
+ * @sentry/node files as an uncaught fatal and that kills the CLI mid-download.
+ *
+ * Draining the body up front removes the pause entirely (the same
+ * buffer-then-rewrap posture peekPlanLimitStatus uses in vault-api.ts). We cap
+ * it so a very large object still streams and never buffers into a small agent
+ * box's memory; a response above the ceiling (or with no declared length) keeps
+ * the streaming path, whose residual window is narrowed by the mkdirSync hoist
+ * in runGet/runCat. 32 MiB comfortably covers every object hq-cli reads today
+ * (vault JSON + images) while staying well under a 4 GB host's headroom.
+ */
+export declare const PRESIGN_BUFFER_MAX_BYTES: number;
 /**
  * Build a COMPANY-mode browse client backed by the list + presign API. The
  * access token + companyUid are captured here; the orchestrator just calls

package/dist/commands/files-browse.js

@@ -318,6 +318,15 @@ export async function runCat(input) {
         // COMPANY mode (HQ-59): GetObject → presign GET. No STS vend, no direct S3.
         s3 = requireCompanyClient(input.companyClient)({ companyUid: entity.uid });
     }
+    // HQ-CLI-5: when writing to --out, create the parent directory BEFORE issuing
+    // the presigned GET, so no synchronous filesystem call sits between receiving
+    // the body and the nextTick resume that starts pulling it — that gap is what
+    // left undici's HTTP parser paused into the socket FIN. The guard above
+    // already validated absOut is outside the protected companies/ tree, so its
+    // parent is outside too.
+    if (absOut !== undefined) {
+        fs.mkdirSync(path.dirname(absOut), { recursive: true });
+    }
     const resp = (await s3.send(new GetObjectCommand({ Bucket: bucket, Key: s3Key })));
     if (!resp.Body) {
         throw new Error(`GetObject for '${key}' returned no body.`);
@@ -331,10 +340,6 @@ export async function runCat(input) {
         bytesWritten += Buffer.isBuffer(chunk) ? chunk.length : Buffer.byteLength(chunk);
     });
     if (absOut !== undefined) {
-        // Ensure the parent directory exists — but ONLY if it's also outside
-        // the protected tree (the guard already validated absOut itself; the
-        // parent of an outside-tree path is by definition outside too).
-        fs.mkdirSync(path.dirname(absOut), { recursive: true });
         await pipeline(body, fs.createWriteStream(absOut));
         return {
             bytesWritten,
@@ -536,12 +541,17 @@ export async function runGet(input) {
         else {
             destAbs = path.join(hqRoot, "companies", slug, key);
         }
+        // HQ-CLI-5: create the destination directory BEFORE issuing the presigned
+        // GET, so no synchronous filesystem call sits between receiving the body
+        // and starting to pull it — that gap is what left undici's HTTP parser
+        // paused into the socket FIN. Buffered downloads no longer keep a live
+        // socket at all; this also closes the window on the streaming branch.
+        fs.mkdirSync(path.dirname(destAbs), { recursive: true });
         const resp = (await s3.send(new GetObjectCommand({ Bucket: bucket, Key: key })));
         if (!resp.Body) {
             throw new Error(`GetObject for '${key}' returned no body.`);
         }
         const body = resp.Body;
-        fs.mkdirSync(path.dirname(destAbs), { recursive: true });
         await pipeline(body, fs.createWriteStream(destAbs));
         bytesWritten += fs.statSync(destAbs).size;
         destinations.push(destAbs);
@@ -557,6 +567,28 @@ export async function runGet(input) {
 }
 // ── CLI registration ────────────────────────────────────────────────────────
 const defaultS3Factory = ({ region, credentials }) => new S3Client({ region, credentials });
+/**
+ * Upper bound (bytes) on a presigned download we drain into memory before
+ * handing the caller a Body (HQ-CLI-5).
+ *
+ * fetch()'s response body is an undici ReadableStream with a zero high-water
+ * mark: the first chunk drives desiredSize to 0 and undici PAUSES its llhttp
+ * parser until a consumer pulls. `getObject` used to hand that still-paused
+ * stream straight to the orchestrators, which each run a synchronous fs call
+ * before they start pulling. If S3 sends its connection FIN inside that gap,
+ * undici's socket-end handler trips `assert(!this.paused)` in Parser.finish and
+ * throws an AssertionError from a process tick — outside any try/catch — that
+ * @sentry/node files as an uncaught fatal and that kills the CLI mid-download.
+ *
+ * Draining the body up front removes the pause entirely (the same
+ * buffer-then-rewrap posture peekPlanLimitStatus uses in vault-api.ts). We cap
+ * it so a very large object still streams and never buffers into a small agent
+ * box's memory; a response above the ceiling (or with no declared length) keeps
+ * the streaming path, whose residual window is narrowed by the mkdirSync hoist
+ * in runGet/runCat. 32 MiB comfortably covers every object hq-cli reads today
+ * (vault JSON + images) while staying well under a 4 GB host's headroom.
+ */
+export const PRESIGN_BUFFER_MAX_BYTES = 32 * 1024 * 1024;
 /**
  * Build a COMPANY-mode browse client backed by the list + presign API. The
  * access token + companyUid are captured here; the orchestrator just calls
@@ -616,9 +648,31 @@ export function createCompanyPresignClient(input) {
         if (!dl.ok) {
             throw new Error(`Failed to download '${key}' (HTTP ${dl.status})`);
         }
-        // fetch() yields a web ReadableStream; the orchestrators consume Body as a
-        // Node Readable (body.on('data') + stream pipeline), so adapt it. An empty
-        // body (no stream) becomes an empty Readable.
+        // HQ-CLI-5: when the response declares a length at or below the ceiling,
+        // DRAIN it here — read the whole body before send() resolves and replay it
+        // from memory. That removes undici's paused-parser window entirely: by the
+        // time the orchestrators pull, there is no live socket left to hit
+        // `assert(!this.paused)` on its FIN. `Number(null)` is 0, so guard the
+        // absent header explicitly (NaN) — an unmeasured body must keep streaming,
+        // never look like a zero-length buffer.
+        const declaredLengthHeader = dl.headers.get("content-length");
+        const declaredLength = declaredLengthHeader === null ? NaN : Number(declaredLengthHeader);
+        const canBuffer = Number.isFinite(declaredLength) &&
+            declaredLength >= 0 &&
+            declaredLength <= PRESIGN_BUFFER_MAX_BYTES;
+        if (canBuffer) {
+            const buf = Buffer.from(await dl.arrayBuffer());
+            return {
+                Body: Readable.from(buf),
+                $metadata: {},
+            };
+        }
+        // Above the ceiling, or no declared length: keep streaming so a very large
+        // object is never buffered whole. fetch() yields a web ReadableStream; the
+        // orchestrators consume Body as a Node Readable (body.on('data') + stream
+        // pipeline), so adapt it. An empty body (no stream) becomes an empty
+        // Readable. The mkdirSync hoist in runGet/runCat narrows the residual
+        // paused-parser window on this branch.
         const nodeBody = dl.body
             ? Readable.fromWeb(dl.body)
             : Readable.from([]);

package/dist/lib/doctor/checks/runtime-probe.js

@@ -300,7 +300,7 @@ export function checkRuntimeProbe(context) {
                 status: "PASS",
                 checkId,
                 target,
-                message: `Host platform is agents-v2 (hermes fleet): the on-box adapter wrote the ` +
+                message: `Host platform is the Agents v2 runtime: the on-box adapter wrote the ` +
                     `policy-trigger ledger through the same .claude hooks, so hook dispatch was ` +
                     `observed this session — the ledger has an entry${scope}.`,
             },

package/dist/lib/mesh/client.js

@@ -24,6 +24,8 @@ export function createWorkSessionDeliverer(opts) {
             contractVersion: 1,
             companyUid,
             sessionId: op.sessionId,
+            // Pre-upgrade outbox records have no harness; do not invent a provider.
+            harness: op.harness?.trim() || "unknown",
             clientOperationId: op.clientOperationId,
             operationId: op.operationId,
             digest: op.digest,

package/dist/lib/mesh/live/daemon/transcript-watch.d.ts

@@ -219,10 +219,11 @@ export declare function isTranscriptHookCovered(sessionId: string, opts: {
 }): boolean;
 /**
  * Resolve local registration for a transcript session. Never asks, never
- * creates a project. Uses deterministic cwd/remote mapping only.
+ * creates a project. Shares reconcile's company precedence and conflict rules.
  */
 export declare function resolveTranscriptRegistration(input: {
     sessionId: string;
+    env?: NodeJS.ProcessEnv;
     cwd?: string;
     hqRoot?: string;
     workContextRoot: string;

package/dist/lib/mesh/live/daemon/transcript-watch.js

@@ -29,8 +29,7 @@ import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
 import { CLI_VERSION } from "../../../../cli-version.js";
-import { companySlugFromCwd, projectIdFromCwd, resolveDeterministicCompany, } from "../../../work-context/company.js";
-import { getDefaultCompany } from "../../../work-context/config.js";
+import { companySlugFromCwd, projectIdFromCwd, resolveCompany, } from "../../../work-context/company.js";
 import { WORK_CONTEXT_CONTRACT_VERSION } from "../../../work-context/contract.js";
 import { reconcileObservation, } from "../../../work-context/reconcile.js";
 import { deriveRemoteOwnerSlug } from "../../../work-context/repo-remote.js";
@@ -441,7 +440,7 @@ export function isTranscriptHookCovered(sessionId, opts) {
 }
 /**
  * Resolve local registration for a transcript session. Never asks, never
- * creates a project. Uses deterministic cwd/remote mapping only.
+ * creates a project. Shares reconcile's company precedence and conflict rules.
  */
 export function resolveTranscriptRegistration(input) {
     const now = input.now ?? (() => new Date());
@@ -449,33 +448,26 @@ export function resolveTranscriptRegistration(input) {
     const remoteOwnerSlug = input.cwd
         ? deriveRemoteOwnerSlug({ cwd: input.cwd, hqRoot: input.hqRoot })
         : null;
-    const deterministic = resolveDeterministicCompany({
+    const resolution = resolveCompany({
+        root: input.workContextRoot,
+        sessionId: input.sessionId,
+        env: input.env,
         cwd: input.cwd,
         hqRoot: input.hqRoot,
         remoteOwnerSlug,
     });
-    const projectId = projectIdFromCwd(input.cwd, input.hqRoot);
-    // Prefer company slug from deterministic evidence; optionally adopt uid when
-    // the enabled device default names the same slug (no conflict ask).
-    const companySlug = deterministic?.slug ?? companySlugFromCwd(input.cwd, input.hqRoot);
-    let companyUid;
-    const device = getDefaultCompany({ root: input.workContextRoot });
-    if (companySlug &&
-        device?.enabled &&
-        device.slug &&
-        device.slug.toLowerCase() === companySlug.toLowerCase()) {
-        companyUid = device.uid;
-    }
-    let contextStatus;
-    if (!companySlug) {
-        contextStatus = "needs_company";
-    }
-    else if (projectId) {
-        contextStatus = "needs_task";
-    }
-    else {
-        contextStatus = "unresolved";
-    }
+    const company = resolution.status === "resolved" ? resolution.company : undefined;
+    const companySlug = company?.slug;
+    const companyUid = company?.uid;
+    // A cwd project belongs to its cwd company, never to a higher-precedence
+    // identity or explicit scope naming another (or not-yet-mapped) company.
+    const cwdCompany = companySlugFromCwd(input.cwd, input.hqRoot);
+    const projectId = companySlug && cwdCompany?.toLowerCase() === companySlug.toLowerCase()
+        ? projectIdFromCwd(input.cwd, input.hqRoot)
+        : undefined;
+    const contextStatus = resolution.status === "company_conflict"
+        ? "company_conflict"
+        : !company ? "needs_company" : projectId ? "needs_task" : "unresolved";
     const state = {
         contractVersion: WORK_CONTEXT_CONTRACT_VERSION,
         sessionId: input.sessionId,

package/dist/lib/work-context/company.d.ts

@@ -58,9 +58,11 @@ export interface CompanyResolveInput {
 }
 /** Env naming the on-box identity.json (fleet agent boxes). */
 export declare const HQ_AGENT_IDENTITY_FILE_ENV = "HQ_AGENT_IDENTITY_FILE";
+export declare const DEFAULT_AGENT_IDENTITY_FILE = "/var/lib/hq-agent/identity.json";
 /**
  * Read `companyUid` from the agent identity file when
- * `HQ_AGENT_IDENTITY_FILE` is set. Missing/unreadable/malformed → undefined
+ * `HQ_AGENT_IDENTITY_FILE` is set, or the conventional fleet path otherwise.
+ * Missing/unreadable/malformed → undefined
  * (never throws; never logs file contents).
  */
 export declare function readAgentIdentityCompanyUid(env?: NodeJS.ProcessEnv): string | undefined;

package/dist/lib/work-context/company.js

@@ -26,6 +26,7 @@ export function companyCorrectionPath(sessionId) {
 const SLUG_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 /** Env naming the on-box identity.json (fleet agent boxes). */
 export const HQ_AGENT_IDENTITY_FILE_ENV = "HQ_AGENT_IDENTITY_FILE";
+export const DEFAULT_AGENT_IDENTITY_FILE = "/var/lib/hq-agent/identity.json";
 function normalizeSlug(value) {
     if (!value)
         return undefined;
@@ -36,11 +37,14 @@ function normalizeSlug(value) {
 }
 /**
  * Read `companyUid` from the agent identity file when
- * `HQ_AGENT_IDENTITY_FILE` is set. Missing/unreadable/malformed → undefined
+ * `HQ_AGENT_IDENTITY_FILE` is set, or the conventional fleet path otherwise.
+ * Missing/unreadable/malformed → undefined
  * (never throws; never logs file contents).
  */
 export function readAgentIdentityCompanyUid(env = process.env) {
-    const file = env[HQ_AGENT_IDENTITY_FILE_ENV]?.trim();
+    // An explicit override (including empty/missing paths) never falls back to
+    // another identity. This prevents accidental attribution to a different box.
+    const file = (env[HQ_AGENT_IDENTITY_FILE_ENV] ?? DEFAULT_AGENT_IDENTITY_FILE).trim();
     if (!file)
         return undefined;
     try {

package/dist/lib/work-context/outbox.d.ts

@@ -5,7 +5,7 @@
 import type { DeliveryState } from "./contract.js";
 import { WORK_CONTEXT_CONTRACT_VERSION } from "./contract.js";
 /** Fields allowed on a durable outbox operation (privacy allowlist). */
-export declare const OUTBOX_ALLOWLIST: readonly ["contractVersion", "operationId", "clientOperationId", "sessionId", "companyUid", "companySlug", "projectId", "taskId", "kind", "digest", "delivery", "createdAt", "updatedAt", "attemptCount", "lastErrorCode", "receiptId", "destinationCompanyUid", "destinationCompanySlug", "nextAttemptAt"];
+export declare const OUTBOX_ALLOWLIST: readonly ["contractVersion", "operationId", "clientOperationId", "sessionId", "harness", "companyUid", "companySlug", "projectId", "taskId", "kind", "digest", "delivery", "createdAt", "updatedAt", "attemptCount", "lastErrorCode", "receiptId", "destinationCompanyUid", "destinationCompanySlug", "nextAttemptAt"];
 /** Base delay for outbox retry backoff (attempt 1 → 30s). */
 export declare const OUTBOX_RETRY_BASE_MS = 30000;
 /** Cap for outbox retry backoff (6 hours). */
@@ -20,6 +20,7 @@ export interface OutboxOperation {
     operationId: string;
     clientOperationId: string;
     sessionId: string;
+    harness?: string;
     companyUid?: string;
     companySlug?: string;
     projectId?: string;
@@ -41,6 +42,7 @@ export interface OutboxOperation {
 export interface OutboxEnqueueInput {
     clientOperationId: string;
     sessionId: string;
+    harness?: string;
     companyUid?: string;
     companySlug?: string;
     projectId?: string;
@@ -54,6 +56,7 @@ export declare function clearOutboxListCache(): void;
 export declare function stableOperationId(clientOperationId: string, sessionId: string): string;
 export declare function digestOperation(parts: {
     sessionId: string;
+    harness?: string;
     clientOperationId: string;
     companyUid?: string;
     companySlug?: string;

package/dist/lib/work-context/outbox.js

@@ -15,6 +15,7 @@ export const OUTBOX_ALLOWLIST = [
     "operationId",
     "clientOperationId",
     "sessionId",
+    "harness",
     "companyUid",
     "companySlug",
     "projectId",
@@ -59,6 +60,7 @@ export function digestOperation(parts) {
     const canonical = JSON.stringify({
         v: 1,
         sessionId: parts.sessionId,
+        ...(parts.harness ? { harness: parts.harness } : {}),
         clientOperationId: parts.clientOperationId,
         companyUid: parts.companyUid ?? null,
         companySlug: parts.companySlug ?? null,
@@ -83,6 +85,8 @@ function projectOutbox(op) {
         updatedAt: op.updatedAt,
         attemptCount: op.attemptCount,
     };
+    if (op.harness)
+        out.harness = op.harness;
     if (op.companyUid)
         out.companyUid = op.companyUid;
     if (op.companySlug)
@@ -132,6 +136,7 @@ export function enqueueOutbox(input, root) {
     }
     const digest = digestOperation({
         sessionId: input.sessionId,
+        harness: input.harness,
         clientOperationId: input.clientOperationId,
         companyUid: input.companyUid,
         companySlug: input.companySlug,
@@ -144,7 +149,14 @@ export function enqueueOutbox(input, root) {
     const now = (input.now ?? (() => new Date()))().toISOString();
     const existing = readOutboxOperation(operationId, root);
     if (existing) {
-        if (existing.digest !== digest) {
+        // A pre-upgrade operation has no harness in its digest. Preserve its
+        // original receipt identity when the same observation is enqueued again.
+        const legacyReplay = !existing.harness && input.harness && existing.digest === digestOperation({
+            ...input,
+            harness: undefined,
+            kind,
+        });
+        if (existing.digest !== digest && !legacyReplay) {
             throw new NotTrackingError(`Idempotency conflict for ${operationId}`, "IdempotencyConflictError");
         }
         return existing;
@@ -154,6 +166,7 @@ export function enqueueOutbox(input, root) {
         operationId,
         clientOperationId: input.clientOperationId,
         sessionId: input.sessionId,
+        harness: input.harness,
         companyUid: input.companyUid,
         companySlug: input.companySlug,
         projectId: input.projectId,

package/dist/lib/work-context/reconcile.js

@@ -4,7 +4,7 @@
  */
 import * as fs from "node:fs";
 import { InvalidSessionIdentityError, normalizeSessionIdentity, } from "../mesh/live/session-identity.js";
-import { companyCorrectionPath, resolveCompany, } from "./company.js";
+import { companyCorrectionPath, companySlugFromCwd, resolveCompany, } from "./company.js";
 import { WORK_CONTEXT_CONTRACT_VERSION, normalizeTaskId, } from "./contract.js";
 import { EXIT_INVALID_IDENTITY, EXIT_NOT_TRACKING, EXIT_OK, InvalidDecisionOriginError, NotTrackingError, } from "./errors.js";
 import { decisionFromCandidates, } from "./organize.js";
@@ -385,7 +385,7 @@ export async function reconcileObservation(obs, deps) {
         }
     }
     // Company resolved — resolve project/task (US-007B order).
-    const projectResolved = resolveProjectTask({
+    let projectResolved = resolveProjectTask({
         sessionId,
         env,
         trusted,
@@ -393,6 +393,14 @@ export async function reconcileObservation(obs, deps) {
         hqRoot,
         existingState: prior,
     });
+    // Deterministic cwd projects belong to the cwd company. A higher-precedence
+    // identity UID must not adopt a project from an unrelated/unverified slug.
+    if (projectResolved?.source === "deterministic_cwd") {
+        const cwdCompany = companySlugFromCwd(cwd, hqRoot);
+        if (!resolvedCompany.slug || cwdCompany?.toLowerCase() !== resolvedCompany.slug.toLowerCase()) {
+            projectResolved = null;
+        }
+    }
     const projectId = projectResolved?.projectId;
     const taskId = projectResolved?.taskId;
     // Trusted / deterministic auto-bind never asks.
@@ -475,6 +483,7 @@ export async function reconcileObservation(obs, deps) {
         outboxOp = enqueueOutbox({
             clientOperationId: obs.clientOperationId,
             sessionId,
+            harness: obs.identity.harness,
             companyUid: resolvedCompany.uid,
             companySlug: resolvedCompany.slug,
             projectId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.108.20",
+  "version": "5.108.22",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {