@indigoai-us/hq-cli 5.131.0 → 5.132.0

package/dist/lib/mesh/live/emit-evidence.d.ts

@@ -37,6 +37,17 @@ export interface BuildEmitEvidenceInput {
     readMeta?: (sessionId: string, hqRoot: string | undefined) => string | undefined;
     /** Injectable work-tree finder (tests). */
     findRepo?: (startDir: string) => string | null;
+    /**
+     * Env for HQ_SPAWN_COMPANY and the identity file. Defaults to empty so a
+     * unit test does not inherit the developer shell. Callers that emit pass
+     * `process.env`.
+     */
+    env?: NodeJS.ProcessEnv;
+    /** Injectable machine-company reader (tests). */
+    readMachineCompany?: (env: NodeJS.ProcessEnv) => {
+        slug?: string;
+        uid?: string;
+    } | undefined;
 }
 /** Dedupe absolute-ish paths, preserving first-seen order. */
 export declare function normalizeTouchedPaths(paths: Array<string | undefined | null>): string[];
@@ -46,4 +57,12 @@ export declare function normalizeTouchedPaths(paths: Array<string | undefined |
  * first touched file). All fields are omitted when empty.
  */
 export declare function buildEmitEvidence(input: BuildEmitEvidenceInput): EmitEvidence;
+/**
+ * A machine credential with no company must not be posted. The server would
+ * file it as company NONE. Hold it instead.
+ */
+export declare function machineEmitDisposition(input: {
+    machine: boolean;
+    companySlug?: string;
+}): "post" | "hold";
 //# sourceMappingURL=emit-evidence.d.ts.map

package/dist/lib/mesh/live/emit-evidence.js

@@ -9,7 +9,7 @@
  * work-tree off disk. Never reads prompts/tokens; never hits the network.
  */
 import * as path from "node:path";
-import { readMetaCompanySlug } from "../../work-context/company.js";
+import { readMachineCompanyBinding, readMetaCompanySlug } from "../../work-context/company.js";
 import { findWorkTreeRoot } from "../../work-context/repo-remote.js";
 function clean(v) {
     return typeof v === "string" && v.trim() ? v.trim() : undefined;
@@ -41,7 +41,16 @@ export function buildEmitEvidence(input) {
     const cwd = clean(input.cwd);
     const hqRoot = clean(input.hqRoot);
     const touchedPaths = normalizeTouchedPaths(input.touchedPaths ?? []);
-    const companySlug = clean(input.companySlug) ?? clean(readMeta(input.sessionId, hqRoot));
+    const env = input.env ?? {};
+    const machine = (input.readMachineCompany ?? readMachineCompanyBinding)(env);
+    const spawned = clean(env.HQ_SPAWN_COMPANY);
+    // Explicit, spawn, session meta, then the box binding (slug, else uid).
+    // A uid with no slug still rides companySlug so the event is not company NONE.
+    const companySlug = clean(input.companySlug) ??
+        spawned ??
+        clean(readMeta(input.sessionId, hqRoot)) ??
+        (machine && machine.slug !== spawned ? clean(machine.slug) : undefined) ??
+        clean(machine?.uid);
     let repoPath = clean(input.repoPath);
     if (!repoPath) {
         // Search from the cwd (a directory) or the directory of the first touched
@@ -69,6 +78,15 @@ export function buildEmitEvidence(input) {
         evidence.task = task;
     return evidence;
 }
+/**
+ * A machine credential with no company must not be posted. The server would
+ * file it as company NONE. Hold it instead.
+ */
+export function machineEmitDisposition(input) {
+    if (input.machine && !clean(input.companySlug))
+        return "hold";
+    return "post";
+}
 /** Directory of the first absolute touched file, for work-tree discovery. */
 function firstFileDir(touchedPaths) {
     const abs = touchedPaths.find((p) => path.isAbsolute(p));

package/dist/lib/work-context/company.d.ts

@@ -77,7 +77,23 @@ export declare const DEFAULT_AGENT_IDENTITY_FILE = "/var/lib/hq-agent/identity.j
  * Missing/unreadable/malformed → undefined
  * (never throws; never logs file contents).
  */
+export interface AgentIdentityCompany {
+    uid?: string;
+    slug?: string;
+}
+/** Company uid and slug from the fleet identity file. Missing file → undefined. */
+export declare function readAgentIdentityCompany(env?: NodeJS.ProcessEnv): AgentIdentityCompany | undefined;
 export declare function readAgentIdentityCompanyUid(env?: NodeJS.ProcessEnv): string | undefined;
+/**
+ * Company named for a machine session.
+ * Order: HQ_SPAWN_COMPANY, identity-file slug, identity-file uid.
+ * Session meta is not included; callers place it between spawn and the file.
+ * No company → undefined. Never invents NONE.
+ */
+export declare function readMachineCompanyBinding(env?: NodeJS.ProcessEnv): {
+    slug?: string;
+    uid?: string;
+} | undefined;
 /**
  * Agent boxes must never infer a human device default. The file itself is the
  * machine marker; legacy identity files do not necessarily contain a company

package/dist/lib/work-context/company.js

@@ -38,13 +38,7 @@ function normalizeSlug(value) {
         return undefined;
     return s;
 }
-/**
- * Read `companyUid` from the agent identity file when
- * `HQ_AGENT_IDENTITY_FILE` is set, or the conventional fleet path otherwise.
- * Missing/unreadable/malformed → undefined
- * (never throws; never logs file contents).
- */
-export function readAgentIdentityCompanyUid(env = process.env) {
+function readAgentIdentityRecord(env) {
     // An explicit override (including empty/missing paths) never falls back to
     // another identity. This prevents accidental attribution to a different box.
     const file = (env[HQ_AGENT_IDENTITY_FILE_ENV] ?? DEFAULT_AGENT_IDENTITY_FILE).trim();
@@ -54,15 +48,49 @@ export function readAgentIdentityCompanyUid(env = process.env) {
         if (!fs.existsSync(file))
             return undefined;
         const raw = JSON.parse(fs.readFileSync(file, "utf8"));
-        const uid = raw.companyUid;
-        return typeof uid === "string" && uid.trim().length > 0
-            ? uid.trim()
-            : undefined;
+        if (!raw || typeof raw !== "object" || Array.isArray(raw))
+            return undefined;
+        return raw;
     }
     catch {
         return undefined;
     }
 }
+/** Company uid and slug from the fleet identity file. Missing file → undefined. */
+export function readAgentIdentityCompany(env = process.env) {
+    const raw = readAgentIdentityRecord(env);
+    if (!raw)
+        return undefined;
+    const uid = typeof raw.companyUid === "string" ? raw.companyUid.trim() : "";
+    const slug = normalizeSlug(typeof raw.companySlug === "string" ? raw.companySlug : undefined);
+    if (!uid && !slug)
+        return undefined;
+    return {
+        ...(uid ? { uid } : {}),
+        ...(slug ? { slug } : {}),
+    };
+}
+export function readAgentIdentityCompanyUid(env = process.env) {
+    return readAgentIdentityCompany(env)?.uid;
+}
+/**
+ * Company named for a machine session.
+ * Order: HQ_SPAWN_COMPANY, identity-file slug, identity-file uid.
+ * Session meta is not included; callers place it between spawn and the file.
+ * No company → undefined. Never invents NONE.
+ */
+export function readMachineCompanyBinding(env = process.env) {
+    const spawn = normalizeSlug(env.HQ_SPAWN_COMPANY);
+    const identity = readAgentIdentityCompany(env);
+    if (spawn)
+        return { slug: spawn, ...(identity?.uid ? { uid: identity.uid } : {}) };
+    if (!identity?.slug && !identity?.uid)
+        return undefined;
+    return {
+        ...(identity?.slug ? { slug: identity.slug } : {}),
+        ...(identity?.uid ? { uid: identity.uid } : {}),
+    };
+}
 /**
  * Agent boxes must never infer a human device default. The file itself is the
  * machine marker; legacy identity files do not necessarily contain a company
@@ -273,11 +301,15 @@ export function resolveCompany(input) {
     // 4. Agent-box identity file (HQ_AGENT_IDENTITY_FILE). Prefer as the
     // device-default role with source trusted_explicit — never device_default /
     // "default company mode". Below HQ_SPAWN_COMPANY; above device default.
-    const identityUid = readAgentIdentityCompanyUid(env);
-    if (identityUid) {
+    const identity = readAgentIdentityCompany(env);
+    if (identity?.uid || identity?.slug) {
         return {
             status: "resolved",
-            company: { uid: identityUid, source: "trusted_explicit" },
+            company: {
+                ...(identity.slug ? { slug: identity.slug } : {}),
+                ...(identity.uid ? { uid: identity.uid } : {}),
+                source: "trusted_explicit",
+            },
         };
     }
     // 4b. Persisted per-repo company map (gap 4). A person answered once for this

package/dist/utils/self-update.js

@@ -282,7 +282,10 @@ async function updateAndReexec(argv, flavor, known, deps) {
     // A resident mesh daemon keeps the old JS loaded after a global install.
     // Service restart is best-effort and cannot turn a successful update red.
     try {
-        const restart = (deps.restartDaemon ?? restartDaemonServiceIfInstalled)();
+        const restart = (deps.restartDaemon ?? (() => restartDaemonServiceIfInstalled({
+            env,
+            hqRoot: env.HQ_ROOT,
+        })))();
         if (restart?.message)
             console.error(chalk.yellow(`  ${restart.message}`));
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.131.0",
+  "version": "5.132.0",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {