@indigoai-us/hq-cli 5.109.0 → 5.109.1

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 ## [Unreleased]
 
+## [5.109.1] — 2026-09-08
+
+### Added
+
+- `hq access` records each outcome (outcome, company, timestamp only) to
+  `.hq/access-outcomes.jsonl` so the cause mix can be reviewed later.
+
 ## [5.109.0] — 2026-09-08
 
 ### Added

package/dist/commands/access.js

@@ -26,6 +26,7 @@ import { listActiveMembers } from "./members.js";
 import { buildDmBody } from "./dm.js";
 import { peekIdToken } from "../utils/id-token.js";
 import { findRecentAccessRequest, formatTimeAgo, recordAccessRequest, } from "../utils/access-requests.js";
+import { recordAccessOutcome } from "../utils/access-outcomes.js";
 export function outcomeExitCode(outcome) {
     if (outcome === "local" || outcome === "not-synced")
         return 0;
@@ -146,7 +147,25 @@ function aclDenied(tree) {
     const perm = tree.effectivePermission;
     return perm === null || perm === "none" || perm === "deny";
 }
-function finish(outcome, fields) {
+/**
+ * Build the result and record one cause-mix telemetry line. Every exit path
+ * goes through here, so each run is recorded exactly once. The write is
+ * best-effort: a failure adds a step + one stderr warning and never changes
+ * the outcome or exit code. Only outcome, company, and timestamp are stored.
+ */
+function finish(outcome, fields, ctx) {
+    try {
+        recordAccessOutcome(ctx.hqRoot, {
+            outcome,
+            company: fields.company,
+            ts: new Date((ctx.now ?? Date.now)()).toISOString(),
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        fields.steps.push(`telemetry: write failed — ${msg}`);
+        ctx.stderr(`warning: could not record access outcome telemetry: ${msg}`);
+    }
     return { outcome, exitCode: outcomeExitCode(outcome), ...fields };
 }
 export function resolveGrantor(tree, members) {
@@ -194,6 +213,7 @@ export async function runAccess(input) {
     const steps = [];
     const relative = normalizeTarget(input.target, slug);
     const anchored = (key) => `companies/${slug}/${key}`;
+    const finishCtx = { hqRoot: deps.hqRoot, now: deps.now, stderr };
     let vendDenied = false;
     try {
         await deps.vaultClient.sts.vend({ companyUid: deps.companyUid });
@@ -252,7 +272,7 @@ export async function runAccess(input) {
                 company: slug,
                 exists: false,
                 steps,
-            });
+            }, finishCtx);
             emit(input, result, log);
             return result;
         }
@@ -275,7 +295,7 @@ export async function runAccess(input) {
                     exists: false,
                     candidates,
                     steps,
-                });
+                }, finishCtx);
                 emit(input, result, log);
                 return result;
             }
@@ -511,7 +531,7 @@ export async function runAccess(input) {
         ...(requestSentAt ? { requestSentAt } : {}),
         ...(alreadyAskedAt ? { alreadyAskedAt } : {}),
         ...(requestNote ? { requestNote } : {}),
-    });
+    }, finishCtx);
     emit(input, result, log);
     return result;
 }

package/dist/utils/access-outcomes.d.ts

@@ -0,0 +1,23 @@
+import type { AccessOutcome } from "../commands/access.js";
+/**
+ * One line of the `hq access` cause-mix ledger. Deliberately narrow: no path,
+ * requester, or grantor — only enough to review which outcomes users hit.
+ */
+export interface AccessOutcomeRecord {
+    outcome: AccessOutcome;
+    company: string;
+    ts: string;
+}
+export declare function accessOutcomesPath(hqRoot: string): string;
+/**
+ * Append one JSONL line. Best-effort by contract: callers are expected to
+ * catch and downgrade any failure, since telemetry must never change an
+ * `hq access` outcome or exit code.
+ */
+export declare function recordAccessOutcome(hqRoot: string, rec: AccessOutcomeRecord): void;
+/**
+ * Read the ledger. A missing file is the empty ledger; malformed lines are
+ * skipped so one bad append never hides the rest of the history.
+ */
+export declare function readAccessOutcomes(hqRoot: string): AccessOutcomeRecord[];
+//# sourceMappingURL=access-outcomes.d.ts.map

package/dist/utils/access-outcomes.js

@@ -0,0 +1,53 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+export function accessOutcomesPath(hqRoot) {
+    return path.join(hqRoot, ".hq", "access-outcomes.jsonl");
+}
+/**
+ * Append one JSONL line. Best-effort by contract: callers are expected to
+ * catch and downgrade any failure, since telemetry must never change an
+ * `hq access` outcome or exit code.
+ */
+export function recordAccessOutcome(hqRoot, rec) {
+    const file = accessOutcomesPath(hqRoot);
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    const line = JSON.stringify({ outcome: rec.outcome, company: rec.company, ts: rec.ts });
+    fs.appendFileSync(file, `${line}\n`, "utf-8");
+}
+/**
+ * Read the ledger. A missing file is the empty ledger; malformed lines are
+ * skipped so one bad append never hides the rest of the history.
+ */
+export function readAccessOutcomes(hqRoot) {
+    const file = accessOutcomesPath(hqRoot);
+    let raw;
+    try {
+        raw = fs.readFileSync(file, "utf-8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return [];
+        throw err;
+    }
+    const out = [];
+    for (const line of raw.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        try {
+            const parsed = JSON.parse(trimmed);
+            if (parsed &&
+                typeof parsed === "object" &&
+                typeof parsed.outcome === "string" &&
+                typeof parsed.company === "string" &&
+                typeof parsed.ts === "string") {
+                out.push(parsed);
+            }
+        }
+        catch {
+            // malformed line: skip
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=access-outcomes.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.109.0",
+  "version": "5.109.1",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {