@indigoai-us/hq-cli 5.109.16 → 5.111.0

package/dist/lib/bot/company-bind.js

@@ -0,0 +1,62 @@
+/**
+ * Company bind for worker-sourced bots (local-bots Feature 4).
+ *
+ * HQ's company hooks key on workspace/sessions/<sid>/meta.yaml `company_slug`,
+ * where <sid> is the Claude session id carried in the hook payload. A bot that
+ * runs a company worker writes that file for the session id it is about to
+ * use, before every turn, so the hooks resolve the company exactly as they do
+ * for the owner. Idempotent: an existing file keeps its other keys and only
+ * has `company_slug` replaced.
+ *
+ * Coverage note: Claude bots get the full company hook set (their session id
+ * is in the hook payload). Codex/Grok bots only see HQ_SESSION_ID in the env.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+export const defaultCompanyBindFs = {
+    existsSync: (p) => fs.existsSync(p),
+    readFileSync: (p) => fs.readFileSync(p, "utf8"),
+    writeFileSync: (p, body) => fs.writeFileSync(p, body, { mode: 0o644 }),
+    mkdirSync: (p) => fs.mkdirSync(p, { recursive: true }),
+};
+const SESSION_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+const COMPANY_SLUG_RE = /^[a-z0-9][a-z0-9_-]{0,63}$/;
+export function botSessionMetaRelPath(sessionId) {
+    return path.join("workspace", "sessions", sessionId, "meta.yaml");
+}
+export function ensureBotSessionMeta(hqRoot, sessionId, companySlug, io = defaultCompanyBindFs, now = () => new Date()) {
+    if (!SESSION_ID_RE.test(sessionId))
+        throw new Error(`Invalid session id for company bind: "${sessionId}"`);
+    if (!COMPANY_SLUG_RE.test(companySlug))
+        throw new Error(`Invalid company slug for company bind: "${companySlug}"`);
+    const file = path.join(hqRoot, botSessionMetaRelPath(sessionId));
+    io.mkdirSync(path.dirname(file));
+    if (!io.existsSync(file)) {
+        const body = `session_id: ${sessionId}\nstarted_at: "${now().toISOString()}"\ncompany_slug: ${companySlug}\n`;
+        io.writeFileSync(file, body);
+        return { path: file, created: true, changed: true };
+    }
+    const current = io.readFileSync(file);
+    const lines = current.split("\n");
+    let replaced = false;
+    const next = lines.map((line) => {
+        if (/^company_slug\s*:/.test(line)) {
+            replaced = true;
+            return `company_slug: ${companySlug}`;
+        }
+        return line;
+    });
+    if (!replaced) {
+        while (next.length > 0 && next[next.length - 1] === "")
+            next.pop();
+        next.push(`company_slug: ${companySlug}`);
+    }
+    if (!next.some((l) => /^session_id\s*:/.test(l)))
+        next.unshift(`session_id: ${sessionId}`);
+    const body = `${next.join("\n").replace(/\n+$/, "")}\n`;
+    if (body === current)
+        return { path: file, created: false, changed: false };
+    io.writeFileSync(file, body);
+    return { path: file, created: false, changed: true };
+}
+//# sourceMappingURL=company-bind.js.map

package/dist/lib/bot/config.d.ts

@@ -0,0 +1,106 @@
+/**
+ * bot.json — non-secret per-bot configuration (local-bots US-003/US-005).
+ */
+export declare const BOT_RUNTIMES: readonly ["claude", "codex", "grok"];
+export type BotRuntimeId = (typeof BOT_RUNTIMES)[number];
+export declare function isBotRuntimeId(value: unknown): value is BotRuntimeId;
+/** Longest `intro` (first-start hello DM) a bot may store. */
+export declare const BOT_INTRO_MAX_CHARS = 500;
+/** Longest `kickoff` (first-start model turn prompt) a bot may store. */
+export declare const BOT_KICKOFF_MAX_CHARS = 2000;
+/**
+ * Where a bot keeps its memory: "synced" = personal/workers/<name>/memory
+ * inside the HQ tree (follows the owner across machines); "local" =
+ * ~/.hq/bots/<name>/memory, outside the synced tree (this computer only).
+ */
+export declare const BOT_MEMORY_MODES: readonly ["synced", "local"];
+export type BotMemoryMode = (typeof BOT_MEMORY_MODES)[number];
+export declare function isBotMemoryMode(value: unknown): value is BotMemoryMode;
+/**
+ * Thinking ("effort") levels each runtime's CLI accepts, verified 2026-09-12:
+ * `claude --effort`, `codex -c model_reasoning_effort=…`, `grok --reasoning-effort`.
+ */
+export declare const BOT_EFFORT_LEVELS: Record<BotRuntimeId, readonly string[]>;
+/** Every bot thinks at medium unless its owner picks otherwise: quick chat replies. */
+export declare const DEFAULT_BOT_EFFORT = "medium";
+/** The thinking level a bot actually runs with. */
+export declare function effectiveBotEffort(config: Pick<BotConfig, "effort">): string;
+/**
+ * A thinking level for this runtime, or undefined for "default" / empty
+ * (the bot then runs at DEFAULT_BOT_EFFORT). Throws an expected error otherwise.
+ */
+export declare function validateBotEffort(runtime: BotRuntimeId, value: string): string | undefined;
+/**
+ * A model id for the runtime CLI, or undefined for "default" / empty (the
+ * CLI's own default for the owner's account). Throws an expected error when
+ * it cannot be a model id.
+ */
+export declare function validateBotModel(value: string): string | undefined;
+/** Trim and bound the intro text; throws an expected error when unusable. */
+export declare function validateBotIntro(text: string): string;
+/** Trim and bound the kickoff prompt; throws an expected error when unusable. */
+export declare function validateBotKickoff(text: string): string;
+export interface BotConfig {
+    v: 1;
+    name: string;
+    /** The bot's own agt_ identity (owned by `ownerUid`). */
+    agentUid: string;
+    /** The person (prs_) who created and owns the bot. */
+    ownerUid: string;
+    runtime: BotRuntimeId;
+    /** Optional model override handed to the runtime CLI (unset = the CLI's own default). */
+    model?: string;
+    /** Thinking level for the runtime CLI (see BOT_EFFORT_LEVELS; unset = DEFAULT_BOT_EFFORT). */
+    effort?: string;
+    /** HQ root the session starts in (and the cwd of every model turn). */
+    hqRoot: string;
+    /**
+     * Run the model with every permission pre-approved (default true): a bot
+     * answers DMs headlessly and cannot show an approval prompt, so a gated
+     * command simply fails. Set false to keep the runtime's normal gates.
+     */
+    autoApprove?: boolean;
+    /**
+     * Worker folder relative to hqRoot: personal/workers/<name> for a scaffolded
+     * bot, or companies/<co>/workers/<id> when the bot runs a company worker.
+     */
+    workerDir: string;
+    /** Where the worker definition came from (default "scaffold"). */
+    workerSource?: "scaffold" | "worker";
+    /** Registry id of the company worker this bot runs (workerSource "worker"). */
+    workerId?: string;
+    /** Company the bot is bound to on every turn (workerSource "worker"). */
+    companySlug?: string;
+    /**
+     * Memory folder: hqRoot-relative for "synced" memory (default
+     * `${workerDir}/memory`; a worker-sourced bot keeps its own memory in
+     * personal/workers/<name>/memory so the shared company tree is never
+     * written to), or an absolute path for "local" memory that lives outside
+     * the synced tree (~/.hq/bots/<name>/memory).
+     */
+    memoryDir?: string;
+    /**
+     * Verbatim hello the bot DMs its owner when it first comes online (and on
+     * `hq bot intro`). Unset = the default introduction.
+     */
+    intro?: string;
+    /**
+     * Prompt for ONE model turn the bot runs on its first start, right after the
+     * intro DM, as if the owner had sent it (same session, system prompt and
+     * permissions); the answer is DMed to the owner. Runs once, never on restart.
+     */
+    kickoff?: string;
+    createdAt: string;
+    /** When `false` the run loop exits 0 immediately (launchd does not respawn). */
+    enabled: boolean;
+    /** Set once the bot has introduced itself to the owner (US-008 intro). */
+    introSentAt?: string;
+}
+export declare function readBotConfig(dir: string): BotConfig | null;
+export declare function writeBotConfig(dir: string, config: BotConfig): void;
+/** "local" when the memory folder is an absolute path outside the HQ tree. */
+export declare function botMemoryMode(config: Pick<BotConfig, "memoryDir">): BotMemoryMode;
+/** Absolute memory folder for a bot (synced memory is resolved against hqRoot). */
+export declare function resolveBotMemoryDir(config: Pick<BotConfig, "hqRoot" | "workerDir" | "memoryDir">): string;
+export declare function patchBotConfig(dir: string, patch: Partial<BotConfig>): BotConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/lib/bot/config.js

@@ -0,0 +1,141 @@
+/**
+ * bot.json — non-secret per-bot configuration (local-bots US-003/US-005).
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { botConfigPath } from "./paths.js";
+export const BOT_RUNTIMES = ["claude", "codex", "grok"];
+export function isBotRuntimeId(value) {
+    return typeof value === "string" && BOT_RUNTIMES.includes(value);
+}
+/** Longest `intro` (first-start hello DM) a bot may store. */
+export const BOT_INTRO_MAX_CHARS = 500;
+/** Longest `kickoff` (first-start model turn prompt) a bot may store. */
+export const BOT_KICKOFF_MAX_CHARS = 2000;
+/**
+ * Where a bot keeps its memory: "synced" = personal/workers/<name>/memory
+ * inside the HQ tree (follows the owner across machines); "local" =
+ * ~/.hq/bots/<name>/memory, outside the synced tree (this computer only).
+ */
+export const BOT_MEMORY_MODES = ["synced", "local"];
+export function isBotMemoryMode(value) {
+    return typeof value === "string" && BOT_MEMORY_MODES.includes(value);
+}
+/**
+ * Thinking ("effort") levels each runtime's CLI accepts, verified 2026-09-12:
+ * `claude --effort`, `codex -c model_reasoning_effort=…`, `grok --reasoning-effort`.
+ */
+export const BOT_EFFORT_LEVELS = {
+    claude: ["low", "medium", "high", "xhigh", "max"],
+    codex: ["minimal", "low", "medium", "high", "xhigh"],
+    grok: ["low", "medium", "high", "xhigh"],
+};
+/** Every bot thinks at medium unless its owner picks otherwise: quick chat replies. */
+export const DEFAULT_BOT_EFFORT = "medium";
+/** The thinking level a bot actually runs with. */
+export function effectiveBotEffort(config) {
+    return config.effort?.trim() || DEFAULT_BOT_EFFORT;
+}
+/**
+ * A thinking level for this runtime, or undefined for "default" / empty
+ * (the bot then runs at DEFAULT_BOT_EFFORT). Throws an expected error otherwise.
+ */
+export function validateBotEffort(runtime, value) {
+    const v = (value ?? "").trim().toLowerCase();
+    if (!v || v === "default")
+        return undefined;
+    const levels = BOT_EFFORT_LEVELS[runtime];
+    if (!levels.includes(v)) {
+        throw Object.assign(new Error(`--effort for ${runtime} must be one of ${levels.join(", ")} (or default).`), { expected: true });
+    }
+    return v;
+}
+/**
+ * A model id for the runtime CLI, or undefined for "default" / empty (the
+ * CLI's own default for the owner's account). Throws an expected error when
+ * it cannot be a model id.
+ */
+export function validateBotModel(value) {
+    const v = (value ?? "").trim();
+    if (!v || v.toLowerCase() === "default")
+        return undefined;
+    if (v.length > 100 || !/^[A-Za-z0-9][\w.:\[\]/-]*$/.test(v)) {
+        throw Object.assign(new Error(`--model "${v.slice(0, 40)}" is not a model id (letters, digits, . _ - : / [ ]).`), { expected: true });
+    }
+    return v;
+}
+/** Trim and bound the intro text; throws an expected error when unusable. */
+export function validateBotIntro(text) {
+    const trimmed = (text ?? "").replace(/\r\n/g, "\n").trim();
+    if (!trimmed) {
+        throw Object.assign(new Error("--intro needs some text (the hello the bot sends you when it first comes online)."), {
+            expected: true,
+        });
+    }
+    if (trimmed.length > BOT_INTRO_MAX_CHARS) {
+        throw Object.assign(new Error(`--intro is too long (${trimmed.length} chars); keep it under ${BOT_INTRO_MAX_CHARS}.`), {
+            expected: true,
+        });
+    }
+    return trimmed;
+}
+/** Trim and bound the kickoff prompt; throws an expected error when unusable. */
+export function validateBotKickoff(text) {
+    const trimmed = (text ?? "").replace(/\r\n/g, "\n").trim();
+    if (!trimmed) {
+        throw Object.assign(new Error("--kickoff needs some text (the first task the bot starts on, right after its hello)."), {
+            expected: true,
+        });
+    }
+    if (trimmed.length > BOT_KICKOFF_MAX_CHARS) {
+        throw Object.assign(new Error(`--kickoff is too long (${trimmed.length} chars); keep it under ${BOT_KICKOFF_MAX_CHARS}.`), {
+            expected: true,
+        });
+    }
+    return trimmed;
+}
+export function readBotConfig(dir) {
+    const p = botConfigPath(dir);
+    if (!fs.existsSync(p))
+        return null;
+    try {
+        const raw = JSON.parse(fs.readFileSync(p, "utf8"));
+        if (raw.v !== 1 || typeof raw.name !== "string" || typeof raw.agentUid !== "string") {
+            return null;
+        }
+        if (!isBotRuntimeId(raw.runtime))
+            return null;
+        const { intro: rawIntro, kickoff: rawKickoff, ...rest } = raw;
+        const intro = typeof rawIntro === "string" && rawIntro.trim() ? rawIntro : undefined;
+        const kickoff = typeof rawKickoff === "string" && rawKickoff.trim() ? rawKickoff : undefined;
+        return { ...rest, ...(intro ? { intro } : {}), ...(kickoff ? { kickoff } : {}), enabled: raw.enabled !== false };
+    }
+    catch {
+        return null;
+    }
+}
+export function writeBotConfig(dir, config) {
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const dest = botConfigPath(dir);
+    const tmp = path.join(dir, `.bot.tmp.${process.pid}.${Date.now()}`);
+    fs.writeFileSync(tmp, `${JSON.stringify(config, null, 2)}\n`, { mode: 0o600 });
+    fs.renameSync(tmp, dest);
+}
+/** "local" when the memory folder is an absolute path outside the HQ tree. */
+export function botMemoryMode(config) {
+    return config.memoryDir && path.isAbsolute(config.memoryDir) ? "local" : "synced";
+}
+/** Absolute memory folder for a bot (synced memory is resolved against hqRoot). */
+export function resolveBotMemoryDir(config) {
+    const rel = config.memoryDir?.trim() ? config.memoryDir.replace(/\/+$/, "") : path.join(config.workerDir, "memory");
+    return path.isAbsolute(rel) ? rel : path.join(config.hqRoot, rel);
+}
+export function patchBotConfig(dir, patch) {
+    const current = readBotConfig(dir);
+    if (!current)
+        throw new Error(`No bot config at ${botConfigPath(dir)}`);
+    const next = { ...current, ...patch, v: 1 };
+    writeBotConfig(dir, next);
+    return next;
+}
+//# sourceMappingURL=config.js.map

package/dist/lib/bot/continuity-download.d.ts

@@ -0,0 +1,28 @@
+import { ensureCognitoIdToken } from "../../utils/cognito-session.js";
+import { vaultApiFetch } from "../../utils/vault-api.js";
+declare function readOwnVault(input: {
+    bucket: string;
+    key: string;
+    credentials: {
+        accessKeyId: string;
+        secretAccessKey: string;
+        sessionToken: string;
+    };
+}): Promise<{
+    body: ReadableStream<any>;
+    close: () => void;
+}>;
+/** The box uses its own HQ machine login; its shared EC2 role gets no vault access. */
+export declare function downloadContinuitySnapshot(input: {
+    agentUid: string;
+    key: string;
+    sha256: string;
+    bytes: number;
+    destination: string;
+}, deps?: {
+    credential: typeof ensureCognitoIdToken;
+    api: typeof vaultApiFetch;
+    download: typeof readOwnVault;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=continuity-download.d.ts.map

package/dist/lib/bot/continuity-download.js

@@ -0,0 +1,75 @@
+import { createHash, randomUUID } from "node:crypto";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { ensureCognitoIdToken } from "../../utils/cognito-session.js";
+import { S3Client, GetObjectCommand } from "@aws-sdk/client-s3";
+import { vaultApiFetch } from "../../utils/vault-api.js";
+async function readOwnVault(input) {
+    const client = new S3Client({ region: "us-east-1", credentials: input.credentials });
+    try {
+        const response = await client.send(new GetObjectCommand({ Bucket: input.bucket, Key: input.key }), { abortSignal: AbortSignal.timeout(30000) });
+        if (!response.Body)
+            throw new Error("Promotion snapshot download failed");
+        return { body: response.Body.transformToWebStream(), close: () => client.destroy() };
+    }
+    catch (error) {
+        client.destroy();
+        throw error;
+    }
+}
+/** The box uses its own HQ machine login; its shared EC2 role gets no vault access. */
+export async function downloadContinuitySnapshot(input, deps = { credential: ensureCognitoIdToken, api: vaultApiFetch, download: readOwnVault }) {
+    if (!/^agt_[0-9A-HJKMNP-TV-Z]{26}$/.test(input.agentUid) || !/^[a-f0-9]{64}$/.test(input.sha256) ||
+        !Number.isSafeInteger(input.bytes) || input.bytes < 1 || input.bytes > 48 * 1024 * 1024 ||
+        !new RegExp(`^personal/bots/${input.agentUid}/promotions/[A-Za-z0-9_-]{16,128}/${input.sha256}\\.json$`).test(input.key)) {
+        throw new Error("Invalid promotion snapshot scope");
+    }
+    const token = await deps.credential({ interactive: false, tokenSource: "machine" });
+    const response = await deps.api({ token, path: "/sts/vend-self", method: "POST",
+        body: { personUid: input.agentUid, durationSeconds: 900 }, signal: AbortSignal.timeout(10000) });
+    if (!response.ok)
+        throw new Error(`Promotion snapshot authorization failed (${response.status})`);
+    const payload = await response.json();
+    const credentials = payload.credentials;
+    if (!credentials || !credentials.accessKeyId || !credentials.secretAccessKey || !credentials.sessionToken)
+        throw new Error("Promotion snapshot access was not granted");
+    const bucket = `hq-vault-agt-${input.agentUid.slice(4).toLowerCase()}`;
+    const download = await deps.download({ bucket, key: input.key, credentials: {
+            accessKeyId: credentials.accessKeyId, secretAccessKey: credentials.secretAccessKey, sessionToken: credentials.sessionToken,
+        } });
+    const chunks = [];
+    let count = 0;
+    const reader = download.body.getReader();
+    try {
+        while (true) {
+            const next = await reader.read();
+            if (next.done)
+                break;
+            count += next.value.length;
+            if (count > input.bytes)
+                throw new Error("Promotion snapshot exceeded its expected size");
+            chunks.push(Buffer.from(next.value));
+        }
+    }
+    finally {
+        await reader.cancel().catch(() => { });
+        download.close();
+    }
+    const bytes = Buffer.concat(chunks);
+    if (bytes.length !== input.bytes || createHash("sha256").update(bytes).digest("hex") !== input.sha256) {
+        throw new Error("Promotion snapshot integrity check failed");
+    }
+    const destination = path.resolve(input.destination);
+    if (fs.realpathSync(path.dirname(destination)) !== path.dirname(destination))
+        throw new Error("Snapshot directory cannot use symlinks");
+    const temporary = `${destination}.${randomUUID()}.tmp`;
+    try {
+        fs.writeFileSync(temporary, bytes, { mode: 0o600, flag: "wx" });
+        fs.renameSync(temporary, destination);
+    }
+    finally {
+        bytes.fill(0);
+        fs.rmSync(temporary, { force: true });
+    }
+}
+//# sourceMappingURL=continuity-download.js.map

package/dist/lib/bot/continuity-install.d.ts

@@ -0,0 +1,14 @@
+import { type BotContinuityBundle, type ContinuityTarget } from "./continuity.js";
+export declare function installFleetContinuity(bundle: BotContinuityBundle, target: ContinuityTarget, fleetHome: string): {
+    version: number;
+    agentUid: string;
+    ownerUid: string;
+    sourceDigest: string;
+    soulSha256: string;
+    files: {
+        path: string;
+        sha256: string;
+        sourceSha256: string;
+    }[];
+};
+//# sourceMappingURL=continuity-install.d.ts.map

package/dist/lib/bot/continuity-install.js

@@ -0,0 +1,101 @@
+/** On-box import before the first gateway start. Never replaces an existing bot. */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { createHash } from "node:crypto";
+import { planFleetContinuity } from "./continuity.js";
+function hash(bytes) { return createHash("sha256").update(bytes).digest("hex"); }
+function directory(root) {
+    const absolute = path.resolve(root);
+    let cursor = path.parse(absolute).root;
+    for (const part of absolute.slice(cursor.length).split(path.sep).filter(Boolean)) {
+        cursor = path.join(cursor, part);
+        try {
+            fs.mkdirSync(cursor, { mode: 0o700 });
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        const stat = fs.lstatSync(cursor);
+        if (!stat.isDirectory() || stat.isSymbolicLink())
+            throw new Error("Continuity destination must use real directories");
+    }
+}
+function verify(file, digest, executable = false) {
+    const fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+    try {
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.size > 32 * 1024 * 1024 || hash(fs.readFileSync(fd)) !== digest ||
+            Boolean(stat.mode & 0o111) !== executable || Boolean(stat.mode & 0o077)) {
+            throw new Error("Continuity readback failed");
+        }
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+function exclusive(file, bytes, executable = false) {
+    const fd = fs.openSync(file, fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL | fs.constants.O_NOFOLLOW, executable ? 0o700 : 0o600);
+    try {
+        fs.writeFileSync(fd, bytes);
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    verify(file, hash(bytes), executable);
+}
+export function installFleetContinuity(bundle, target, fleetHome) {
+    // Validate every byte, path, tenant and reference before the first mutation.
+    const plan = planFleetContinuity(bundle, target);
+    if (!path.isAbsolute(fleetHome))
+        throw new Error("Fleet home must be absolute");
+    const prefix = `personal/bots/${target.agentUid}/continuity/`;
+    const destination = path.join(target.hqRoot, prefix);
+    const parent = path.dirname(destination);
+    const soulPath = path.join(fleetHome, "SOUL.md");
+    directory(target.hqRoot);
+    directory(parent);
+    directory(fleetHome);
+    // An existing customized or default persona requires an explicit coordinator
+    // decision. Never overwrite it, including when a retry races another import.
+    if (fs.existsSync(soulPath) || fs.lstatSync(fleetHome).isSymbolicLink())
+        verify(soulPath, plan.soulSha256);
+    const receipt = {
+        version: 1, agentUid: target.agentUid, ownerUid: target.ownerUid,
+        sourceDigest: bundle.digest, soulSha256: plan.soulSha256,
+        files: plan.files.map(file => ({ path: file.path, sha256: file.sha256, sourceSha256: file.sourceSha256 })),
+    };
+    const receiptBytes = JSON.stringify(receipt) + "\n";
+    if (!fs.existsSync(destination)) {
+        const staging = fs.mkdtempSync(path.join(parent, ".continuity-import-"));
+        try {
+            directory(path.join(staging, "memory"));
+            for (const file of plan.files) {
+                const dest = path.join(staging, file.path.slice(prefix.length));
+                directory(path.dirname(dest));
+                exclusive(dest, file.bytes, file.executable);
+            }
+            exclusive(path.join(staging, "receipt.json"), receiptBytes);
+            // Policy is last: memory cannot become active with unverified imports.
+            exclusive(path.join(staging, "memory-policy.json"), plan.memoryPolicy.content);
+            fs.renameSync(staging, destination);
+        }
+        finally {
+            if (fs.existsSync(staging))
+                fs.rmSync(staging, { recursive: true });
+        }
+    }
+    directory(destination);
+    verify(path.join(destination, "receipt.json"), hash(receiptBytes));
+    for (const file of plan.files) {
+        directory(path.dirname(path.join(target.hqRoot, file.path)));
+        verify(path.join(target.hqRoot, file.path), file.sha256, file.executable);
+    }
+    verify(path.join(destination, "memory-policy.json"), plan.memoryPolicy.sha256);
+    if (!fs.existsSync(soulPath))
+        exclusive(soulPath, plan.soul);
+    verify(soulPath, plan.soulSha256);
+    return receipt;
+}
+//# sourceMappingURL=continuity-install.js.map

package/dist/lib/bot/continuity.d.ts

@@ -0,0 +1,66 @@
+import type { BotConfig } from "./config.js";
+export interface ContinuityFile {
+    area: "worker" | "memory";
+    path: string;
+    bytes: number;
+    sha256: string;
+    executable: boolean;
+    base64: string;
+}
+export interface BotContinuityBundle {
+    version: 1;
+    agentUid: string;
+    ownerUid: string;
+    name: string;
+    companySlug?: string;
+    source: {
+        hqRoot: string;
+        workerDir: string;
+        memoryDir: string;
+    };
+    files: ContinuityFile[];
+    digest: string;
+}
+/** Capture original bytes, including supporting scripts and Mac-only memory. */
+export declare function snapshotBotContinuity(config: BotConfig, stateDir: string): BotContinuityBundle;
+/** Validate all bytes and ownership before planning any destination write. */
+export declare function validateBotContinuity(bundle: BotContinuityBundle, identity: {
+    agentUid: string;
+    ownerUid: string;
+}): void;
+export interface ContinuityImportFile {
+    path: string;
+    bytes: Buffer;
+    executable: boolean;
+    sourceSha256: string;
+    sha256: string;
+}
+export interface ContinuityTarget {
+    agentUid: string;
+    ownerUid: string;
+    hqRoot: string;
+    companySlug?: string;
+}
+/** Produce a reviewable write plan, never mutate a live Fleet installation.
+ * Source files remain in the bundle. Only known source roots are relocated;
+ * unaccounted Mac paths fail rather than silently producing broken skills.
+ */
+export declare function planBotContinuityImport(bundle: BotContinuityBundle, target: ContinuityTarget): ContinuityImportFile[];
+/** Prepare the existing Fleet SOUL seam before the first gateway session.
+ * This is generated from the private continuity copy, not the owner's overlay.
+ * Installation, prompt-cache invalidation and gateway activation remain the
+ * provisioning coordinator's responsibility; this function performs no writes.
+ */
+export declare function planFleetContinuity(bundle: BotContinuityBundle, target: ContinuityTarget): {
+    files: ContinuityImportFile[];
+    soul: string;
+    soulSha256: string;
+    sourceDigest: string;
+    /** Install only after all imported file hashes have been verified. */
+    memoryPolicy: {
+        path: string;
+        content: string;
+        sha256: string;
+    };
+};
+//# sourceMappingURL=continuity.d.ts.map