@indigoai-us/hq-cli 5.273.0-alpha.0 → 5.274.0

package/dist/commands/report.js

@@ -5,9 +5,9 @@ import * as os from "node:os";
 import * as path from "node:path";
 import { ensureCognitoToken, } from "../utils/cognito-session.js";
 import { vaultApiFetch } from "../utils/vault-api.js";
+import { DEPLOY_API_URL, deployApiRequest, deployHeaders } from "../lib/deploy-api.js";
 import { listReportTemplates } from "../lib/report-templates.js";
 import { adoptReport, buildReportTarball, conventionReportDir, deployOrgContext, ReportPublishError, plainFailureReason, publishReport, } from "../lib/report-publish.js";
-const DEPLOY_API_URL = process.env.HQ_DEPLOY_API_URL ?? "https://api.indigo-hq.com";
 const REPORT_CHANNEL_STATE_FILE = "report-channels.json";
 const MAX_REPORT_DISCOVERY_CHANNELS = 50;
 const JOB_EXECUTION_DISABLED_MESSAGE = "Scheduled jobs are turned off for this company. A company owner can turn them back on.";
@@ -214,22 +214,10 @@ export async function patchReport(token, report, patch) {
         throw new ReportPublishError("Report update response was incomplete.");
     return body.report;
 }
-function deployHeaders(token, json = true, extra = {}) {
-    return {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/json",
-        ...(json ? { "Content-Type": "application/json" } : {}),
-        ...extra,
-    };
-}
 async function deployJson(token, route, method, body, extraHeaders = {}) {
     let res;
     try {
-        res = await fetch(`${DEPLOY_API_URL.replace(/\/+$/, "")}${route}`, {
-            method,
-            headers: deployHeaders(token, body !== undefined, extraHeaders),
-            ...(body === undefined ? {} : { body: JSON.stringify(body) }),
-        });
+        res = await deployApiRequest(token, route, method, body, extraHeaders);
     }
     catch {
         throw new ReportPublishError("Could not reach hq-deploy.");

package/dist/commands/sync-mode.d.ts

@@ -70,15 +70,6 @@ export interface SetSyncModeResult {
 export interface ShowSyncModesOptions {
     vaultClient: SyncModeVaultClient;
 }
-export interface GetSyncModeOptions {
-    companySlug: string;
-    vaultClient: SyncModeVaultClient;
-}
-export interface GetSyncModeResult {
-    membershipId: string;
-    companySlug: string;
-    config: MembershipSyncConfig;
-}
 export interface ShowSyncModesRow {
     companySlug: string;
     companyName?: string;
@@ -109,8 +100,6 @@ export declare function setSyncMode(options: SetSyncModeOptions): Promise<SetSyn
  * stable table output.
  */
 export declare function showSyncModes(options: ShowSyncModesOptions): Promise<ShowSyncModesRow[]>;
-/** Read one company's effective sync mode without hiding API read failures. */
-export declare function getSyncModeForCompany(options: GetSyncModeOptions): Promise<GetSyncModeResult>;
 /**
  * Render the `--show` table as plain text. No external dep — hq-cli doesn't
  * use cli-table3, so we hand-format columns to match the existing chalk +

package/dist/commands/sync-mode.js

@@ -163,36 +163,6 @@ export async function showSyncModes(options) {
     rows.sort((a, b) => a.companySlug.localeCompare(b.companySlug));
     return rows;
 }
-/** Read one company's effective sync mode without hiding API read failures. */
-export async function getSyncModeForCompany(options) {
-    const { companySlug, vaultClient } = options;
-    const memberships = await vaultClient.listMyMemberships();
-    const enriched = await Promise.all(memberships.map(async (membership) => {
-        try {
-            const entity = await vaultClient.entity.get(membership.companyUid);
-            return { ok: true, membership, slug: entity.slug };
-        }
-        catch (error) {
-            return { ok: false, membership, error };
-        }
-    }));
-    const match = enriched.find((row) => row.ok && row.slug === companySlug);
-    if (!match) {
-        const failedLookup = enriched.find((row) => !row.ok);
-        if (failedLookup && !failedLookup.ok)
-            throw failedLookup.error;
-        throw new Error(`No membership found for company '${companySlug}'.`);
-    }
-    for (const failedLookup of enriched) {
-        if (!failedLookup.ok) {
-            const detail = failedLookup.error instanceof Error ? failedLookup.error.message : String(failedLookup.error);
-            console.error(`getSyncModeForCompany: entity lookup failed for membership ${failedLookup.membership.membershipKey} while resolving '${companySlug}': ${detail}`);
-        }
-    }
-    const membershipId = match.membership.membershipKey;
-    const config = await vaultClient.getMembershipSyncConfig(membershipId);
-    return { membershipId, companySlug, config };
-}
 // ── Table rendering (used by CLI action, separable for tests) ──────────────
 /**
  * Render the `--show` table as plain text. No external dep — hq-cli doesn't

package/dist/fast-core.js

@@ -9,7 +9,7 @@
  */
 import { resolveLiveRoot } from "./utils/hq-roots.js";
 import { runBundledScript } from "./utils/run-bundled-script.js";
-import { parseFastCore } from "./commands/scaffold-fast.js";
+import { parseFastCore } from "./fast-scaffold.js";
 /**
  * Run the fast-path scaffold script named in `argv` and exit with its code.
  * Only call when {@link isFastCoreRequest} is true; a non-match returns without

package/dist/{commands/scaffold-fast.d.ts → fast-scaffold.d.ts}

@@ -38,4 +38,4 @@ export type ParsedFastCore = {
 export declare function parseFastCore(argv: readonly string[]): ParsedFastCore | null;
 /** Whether this invocation is a fast-path scaffold dispatch. */
 export declare function isFastCoreRequest(argv: readonly string[]): boolean;
-//# sourceMappingURL=scaffold-fast.d.ts.map
+//# sourceMappingURL=fast-scaffold.d.ts.map

package/dist/{commands/scaffold-fast.js → fast-scaffold.js}

@@ -54,4 +54,4 @@ export function parseFastCore(argv) {
 export function isFastCoreRequest(argv) {
     return parseFastCore(argv) !== null;
 }
-//# sourceMappingURL=scaffold-fast.js.map
+//# sourceMappingURL=fast-scaffold.js.map

package/dist/index.d.ts

@@ -2,7 +2,7 @@
 import "./node-preflight.js";
 import "./node-network-compat.js";
 import { isVersionRequest } from "./version-request.js";
-import { isFastCoreRequest } from "./commands/scaffold-fast.js";
+import { isFastCoreRequest } from "./fast-scaffold.js";
 export declare const __test__: {
     isVersionRequest: typeof isVersionRequest;
     isFastCoreRequest: typeof isFastCoreRequest;

package/dist/index.js

@@ -6,7 +6,7 @@ import "./node-network-compat.js";
 import { isVersionRequest, wantsLabelledVersionReport } from "./version-request.js";
 // Dependency-light: a pure parser + table, no command graph. Safe to load on
 // every path (including --version) without reintroducing the heavy startup.
-import { isFastCoreRequest } from "./commands/scaffold-fast.js";
+import { isFastCoreRequest } from "./fast-scaffold.js";
 // Also dependency-light: registers a process-level rejection boundary; its only
 // heavy import (main.js) is lazy and reached only when a rejection fires.
 import { installProcessRejectionBoundary } from "./unhandled-rejection-boundary.js";
@@ -33,7 +33,7 @@ if (isVersionRequest(process.argv)) {
 else if (isFastCoreRequest(process.argv)) {
     // Hot relocated plumbing (`hq core hq-session`, `hq core checkpoint-stop-gate`)
     // dispatches straight to the bundled-script runner, so it never pays for the
-    // ~60-module command graph main.ts imports. See src/commands/scaffold-fast.ts.
+    // ~60-module command graph main.ts imports. See src/fast-scaffold.ts.
     void import("./fast-core.js").then(({ runFastCore }) => runFastCore(process.argv));
 }
 else {

package/dist/lib/checkpoint-ontology/apply.d.ts

@@ -105,6 +105,14 @@ export declare class ApplyError extends Error {
 }
 /** Validate one raw candidate. Returns the candidate or a rejection reason. */
 export declare function parseCandidate(raw: unknown): Candidate | string;
+/**
+ * checkpoint.ontology.named-evidence: true when `evidence` holds one of
+ * `names` as a word, matching case. A name inside a path, domain, handle, tag
+ * or identifier does not count: `indigoai-us/hq`, `getindigo.ai`,
+ * `C:\\Indigo\\hq`, `scope: company:indigo`, `Indigo:internal`, `@indigo`,
+ * `` `indigo` ``.
+ */
+export declare function evidenceNames(evidence: string, names: string[]): boolean;
 type Resolution = {
     tier: 1;
     target: string;

package/dist/lib/checkpoint-ontology/apply.js

@@ -63,6 +63,25 @@ export function parseCandidate(raw) {
         evidence: typeof c.evidence === "string" ? c.evidence : "",
     };
 }
+/**
+ * checkpoint.ontology.named-evidence: true when `evidence` holds one of
+ * `names` as a word, matching case. A name inside a path, domain, handle, tag
+ * or identifier does not count: `indigoai-us/hq`, `getindigo.ai`,
+ * `C:\\Indigo\\hq`, `scope: company:indigo`, `Indigo:internal`, `@indigo`,
+ * `` `indigo` ``.
+ */
+export function evidenceNames(evidence, names) {
+    for (const raw of names) {
+        const name = raw.trim();
+        if (!name || !evidence)
+            continue;
+        const escaped = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        const word = new RegExp(`(?<![\\p{L}\\p{N}_\\-./\\\\@:\`#])${escaped}(?![\\p{L}\\p{N}_\\-/\\\\@\`]|[.:#][\\p{L}\\p{N}])`, "u");
+        if (word.test(evidence))
+            return true;
+    }
+    return false;
+}
 /** Design section 5.3, tiers 1 to 4. */
 export function resolveCandidate(index, type, canonical) {
     const normalized = normalizeEntityName(canonical, type);
@@ -281,6 +300,9 @@ export function applyOntologyRun(options) {
             if (types.size > 1)
                 crossTypeNames.add(name);
     }
+    // checkpoint.ontology.named-evidence: the company's own company entity.
+    const ownCompanyRel = `ontology/entities/company/${company.slug}.md`;
+    const isOwnCompany = (entity, rel) => entity.type === "company" && (rel === ownCompanyRel || crossTypeKey(entity.canonical_name) === crossTypeKey(company.slug));
     const inputs = liveInputs(options.hqRoot, company, plan);
     const blocked = new Set();
     const updates = new Map();
@@ -339,6 +361,13 @@ export function applyOntologyRun(options) {
                 note(report.rejected, "ambiguous_type");
                 continue;
             }
+            if (plan.named_evidence === true &&
+                input.kind === "knowledge" &&
+                isOwnCompany(linked, resolved.target) &&
+                !evidenceNames(candidate.evidence, [candidate.name, ...candidate.aliases])) {
+                note(report.rejected, "unnamed_in_evidence");
+                continue;
+            }
             report.matched += 1;
             report.links.push({ input: candidate.input, action: "link", type: linked.type, canonical_name: linked.canonical_name, path: resolved.target });
             if (resolved.tier === 1 && resolved.duplicates.length > 0) {
@@ -379,6 +408,10 @@ export function applyOntologyRun(options) {
                 ? [...(index.canonical.get(entityKey("project", normalizeEntityName(canonical, "project"))) ?? [])]
                 : [];
             if (projects.length === 1) {
+                if (plan.named_evidence === true && !evidenceNames(candidate.evidence, [candidate.name, ...candidate.aliases])) {
+                    note(report.rejected, "unnamed_in_evidence");
+                    continue;
+                }
                 const linked = index.byRel.get(projects[0]);
                 report.matched += 1;
                 report.links.push({ input: candidate.input, action: "link", type: linked.type, canonical_name: linked.canonical_name, path: projects[0] });

package/dist/lib/checkpoint-ontology/plan.d.ts

@@ -81,6 +81,19 @@ export declare const SKIP_AMBIGUOUS_CONCEPT_LINKS_FLAG = "checkpoint.ontology.sk
  * to 0.709 at precision 0.747 to 0.731 (61 of the 63 added links are HQ).
  */
 export declare const CONCEPT_PROJECT_LINK_FLAG = "checkpoint.ontology.concept-project-link";
+/**
+ * A knowledge link to the company's own company entity, or a
+ * concept-project-link redirect, needs evidence that names the entity as a
+ * word: the candidate name or one of its aliases, not inside a path, domain,
+ * handle, tag or identifier (`indigoai-us/hq`, `getindigo.ai`,
+ * `scope: company:indigo`). The plan carries `named_evidence: true`, and apply
+ * rejects such a link as `unnamed_in_evidence`. CO-57: on the six CO-52 runs,
+ * 67 of 143 false positives were links to company/indigo and project/HQ, most
+ * on evidence that only held the name inside an identifier; a replay of this
+ * rule raised precision on the concept-project-link arm from 0.705 to 0.750
+ * and lost no gold link.
+ */
+export declare const NAMED_EVIDENCE_FLAG = "checkpoint.ontology.named-evidence";
 export declare const PLAN_FILE = "ontology-plan.json";
 export declare const CANDIDATES_FILE = "ontology-candidates.json";
 export declare const REPORT_FILE = "ontology-report.json";
@@ -153,6 +166,8 @@ export interface OntologyPlan {
     skip_ambiguous_concept_links?: true;
     /** Set by checkpoint.ontology.concept-project-link: apply links a knowledge concept with an ambiguous alias to the one project of that canonical name. */
     concept_project_link?: true;
+    /** Set by checkpoint.ontology.named-evidence: apply rejects a knowledge link to the company's own entity, or a concept-project-link redirect, whose evidence does not name it as a word. */
+    named_evidence?: true;
     inputs: PlanInput[];
     /** The session's summary, decisions and learnings, for the `session` input. */
     session_text: string | null;

package/dist/lib/checkpoint-ontology/plan.js

@@ -85,6 +85,19 @@ export const SKIP_AMBIGUOUS_CONCEPT_LINKS_FLAG = "checkpoint.ontology.skip-ambig
  * to 0.709 at precision 0.747 to 0.731 (61 of the 63 added links are HQ).
  */
 export const CONCEPT_PROJECT_LINK_FLAG = "checkpoint.ontology.concept-project-link";
+/**
+ * A knowledge link to the company's own company entity, or a
+ * concept-project-link redirect, needs evidence that names the entity as a
+ * word: the candidate name or one of its aliases, not inside a path, domain,
+ * handle, tag or identifier (`indigoai-us/hq`, `getindigo.ai`,
+ * `scope: company:indigo`). The plan carries `named_evidence: true`, and apply
+ * rejects such a link as `unnamed_in_evidence`. CO-57: on the six CO-52 runs,
+ * 67 of 143 false positives were links to company/indigo and project/HQ, most
+ * on evidence that only held the name inside an identifier; a replay of this
+ * rule raised precision on the concept-project-link arm from 0.705 to 0.750
+ * and lost no gold link.
+ */
+export const NAMED_EVIDENCE_FLAG = "checkpoint.ontology.named-evidence";
 export const PLAN_FILE = "ontology-plan.json";
 export const CANDIDATES_FILE = "ontology-candidates.json";
 export const REPORT_FILE = "ontology-report.json";
@@ -264,6 +277,7 @@ export async function planOntologyRun(options) {
     const firstNamePeople = await options.readFlag(FIRST_NAME_PEOPLE_FLAG, company);
     const skipAmbiguousConceptLinks = await options.readFlag(SKIP_AMBIGUOUS_CONCEPT_LINKS_FLAG, company);
     const conceptProjectLink = await options.readFlag(CONCEPT_PROJECT_LINK_FLAG, company);
+    const namedEvidence = await options.readFlag(NAMED_EVIDENCE_FLAG, company);
     const touched = sessionTouched(hqRoot, company, payload.files);
     // A first run takes its boundary from the entity tree, so the ledger is
     // refreshed before merge-back moves any `last_updated` forward.
@@ -366,6 +380,7 @@ export async function planOntologyRun(options) {
         ...(firstNamePeople ? { first_name_people: true } : {}),
         ...(skipAmbiguousConceptLinks ? { skip_ambiguous_concept_links: true } : {}),
         ...(conceptProjectLink ? { concept_project_link: true } : {}),
+        ...(namedEvidence ? { named_evidence: true } : {}),
         inputs,
         session_text: sessionText,
         pending_after_run: remaining,

package/dist/lib/daemon/catalog.d.ts

@@ -10,8 +10,6 @@
  * them instead of silently dropping them.
  */
 import type { MachineType } from "./machine-type.js";
-import type { SyncOwner } from "./config.js";
-import { type SyncRunnerProcess } from "./sync-runner.js";
 export declare const SERVICE_NAMES: readonly ["sync", "mesh", "heartbeat", "inbox", "bots", "remote-control", "codex-remote-control", "session-host", "lanes-reconcile", "search-index", "jobs-reconcile", "updater", "housekeeping"];
 export type ServiceName = (typeof SERVICE_NAMES)[number];
 export declare function isServiceName(value: unknown): value is ServiceName;
@@ -53,8 +51,6 @@ export interface UnitPlan {
     restart: "always" | "on-failure";
     intervalSec?: number;
     initialDelaySec?: number;
-    /** Kill and restart this child after silence on its liveness stream. */
-    heartbeatTimeoutMs?: number;
     command: UnitCommand | null;
     env: Record<string, string>;
     blocked?: UnitBlock;
@@ -72,23 +68,11 @@ export interface PlanContext {
     sessionHostRunnerPath: string | null;
     /** Environment retained from legacy outpost sync systemd drop-ins. */
     legacySyncEnv: Record<string, string>;
-    /** Keep the local sync runner stopped until the operator resumes it. */
-    syncPaused: boolean;
-    /** Persisted/effective owner selected for this machine. */
-    syncOwner: SyncOwner;
-    /** A legacy desktop app or sync unit is still managing sync. */
-    desktopAppManagesSync: boolean;
-    /** Full process list, or null when the daemon could not read it. */
-    syncRunnerProcesses: readonly SyncRunnerProcess[] | null;
-    /** PID recorded in the watch-owner status, when it is readable. */
-    syncRunnerOwnerPid: number | null;
-    /** Sync runner children already started by this daemon before their lease is written. */
-    daemonSyncRunnerPids?: ReadonlySet<number>;
-    /** The protocol-event heartbeat watchdog timeout for the sync runner. */
-    syncHeartbeatTimeoutMs: number;
     signedIn: boolean;
     /** ~/.hq-agent/kit.json exists. */
     kitConfigured: boolean;
+    /** The HQ desktop app runs its own sync on this machine. */
+    desktopAppManagesSync: boolean;
     bots: readonly string[];
     /** Name of a pre-daemon unit that still runs this unit id, or null. */
     legacyOwner: (unitId: string) => string | null;

package/dist/lib/daemon/catalog.js

@@ -9,7 +9,6 @@
  * with no entrypoint yet stay in the catalog as `unavailable` so status shows
  * them instead of silently dropping them.
  */
-import { SYNC_RUNNER_OWNER, syncRunnerUnleasedBlockReason } from "./sync-runner.js";
 export const SERVICE_NAMES = [
     "sync",
     "mesh",
@@ -128,29 +127,14 @@ function planService(service, ctx) {
                 command: {
                     type: "node",
                     script: ctx.syncRunnerPath,
-                    args: ["--companies", "--direction", "both", "--on-conflict", "keep", "--hq-root", ctx.hqRoot ?? "", "--watch", "--event-push", "--owner", SYNC_RUNNER_OWNER],
+                    args: ["--companies", "--direction", "both", "--on-conflict", "keep", "--hq-root", ctx.hqRoot ?? "", "--watch", "--event-push"],
                 },
                 env: { ...ctx.legacySyncEnv },
-                heartbeatTimeoutMs: ctx.syncHeartbeatTimeoutMs,
             });
-            let ownerBlock;
-            if (ctx.machineType === "desktop" && ctx.syncOwner === "desktop-app" && ctx.desktopAppManagesSync) {
-                ownerBlock = "the desktop app is still managing sync (run `hq daemon sync take-ownership` after it stops its runner)";
-            }
-            else if (ctx.machineType === "desktop" &&
-                ctx.syncOwner === "daemon" &&
-                !ctx.syncPaused &&
-                ctx.hqRoot &&
-                ctx.signedIn) {
-                ownerBlock = ctx.syncRunnerProcesses === null
-                    ? "could not check for an existing sync runner; waiting to avoid starting a duplicate"
-                    : syncRunnerUnleasedBlockReason(ctx.hqRoot, ctx.syncRunnerProcesses, ctx.syncRunnerOwnerPid, ctx.platform, ctx.daemonSyncRunnerPids);
-            }
             unit.blocked = firstBlock([
-                [ctx.syncPaused, "sync is paused (run `hq daemon sync resume`)"],
+                [ctx.desktopAppManagesSync, "the HQ desktop app is handling sync on this machine"],
                 [!ctx.hqRoot, NO_HQ_ROOT],
                 [!ctx.signedIn, NOT_SIGNED_IN],
-                [!!ownerBlock, ownerBlock ?? ""],
             ]);
             return [unit];
         }

package/dist/lib/daemon/config.d.ts

@@ -12,17 +12,11 @@ export interface DaemonConfig {
     hqRoot?: string;
     /** Exact hq-cloud package version preferred by this daemon, including prereleases. */
     hqCloudVersion?: string;
-    /** Persisted machine-local sync pause. */
-    syncPaused?: boolean;
-    /** Explicit desktop handoff; absent values preserve the legacy per-machine owner. */
-    syncOwner?: SyncOwner;
     /** Services turned on here beyond the machine type's defaults. */
     enable: string[];
     /** Default services turned off here. */
     disable: string[];
 }
-export type SyncOwner = "daemon" | "desktop-app";
-export declare function effectiveSyncOwner(config: Pick<DaemonConfig, "syncOwner">, machineType: MachineType): SyncOwner;
 export declare function emptyDaemonConfig(): DaemonConfig;
 export declare function readDaemonConfig(file: string): DaemonConfig;
 export declare function writeDaemonConfig(file: string, config: DaemonConfig): void;

package/dist/lib/daemon/config.js

@@ -10,11 +10,8 @@ import { valid as validSemver } from "semver";
 import { isServiceName } from "./catalog.js";
 import { isMachineType } from "./machine-type.js";
 import { ensurePrivateDir } from "./paths.js";
-export function effectiveSyncOwner(config, machineType) {
-    return config.syncOwner ?? (machineType === "desktop" ? "desktop-app" : "daemon");
-}
 export function emptyDaemonConfig() {
-    return { version: 1, syncPaused: false, enable: [], disable: [] };
+    return { version: 1, enable: [], disable: [] };
 }
 function stringList(value) {
     return Array.isArray(value) ? value.filter((v) => typeof v === "string") : [];
@@ -39,16 +36,9 @@ export function readDaemonConfig(file) {
     if (!raw || typeof raw !== "object")
         throw new Error(`hq daemon config at ${file} is not a JSON object`);
     const obj = raw;
-    const config = {
-        version: 1,
-        syncPaused: obj.syncPaused === true,
-        enable: stringList(obj.enable),
-        disable: stringList(obj.disable),
-    };
+    const config = { version: 1, enable: stringList(obj.enable), disable: stringList(obj.disable) };
     if (isMachineType(obj.machineType))
         config.machineType = obj.machineType;
-    if (obj.syncOwner === "daemon" || obj.syncOwner === "desktop-app")
-        config.syncOwner = obj.syncOwner;
     if (typeof obj.hqRoot === "string" && obj.hqRoot.trim())
         config.hqRoot = obj.hqRoot;
     if (typeof obj.hqCloudVersion === "string" && validSemver(obj.hqCloudVersion) === obj.hqCloudVersion) {
@@ -66,9 +56,6 @@ export function writeDaemonConfig(file, config) {
         ordered.hqRoot = config.hqRoot;
     if (config.hqCloudVersion)
         ordered.hqCloudVersion = config.hqCloudVersion;
-    ordered.syncPaused = config.syncPaused === true;
-    if (config.syncOwner)
-        ordered.syncOwner = config.syncOwner;
     ordered.enable = config.enable;
     ordered.disable = config.disable;
     fs.writeFileSync(tmp, `${JSON.stringify(ordered, null, 2)}\n`, { mode: 0o600 });

package/dist/lib/daemon/requests.d.ts

@@ -15,10 +15,6 @@ export type ControlRequest = {
     action: "stop";
     unit: string;
 }
-/** Re-read persisted configuration and apply any changed blocks immediately. */
- | {
-    action: "reconcile";
-}
 /** Restart the whole daemon, for example after the updater installed a new CLI. */
  | {
     action: "restart-daemon";

package/dist/lib/daemon/requests.js

@@ -19,8 +19,6 @@ function isControlRequest(value) {
         return typeof v.unit === "string";
     if (v.action === "restart-daemon")
         return true;
-    if (v.action === "reconcile")
-        return true;
     return false;
 }
 // Orders requests written by one process within the same millisecond; the

package/dist/lib/daemon/run.js

@@ -16,7 +16,7 @@ import { agentKitPaths } from "../agent-kit/paths.js";
 import { readBotConfig } from "../bot/config.js";
 import { botsRoot } from "../bot/paths.js";
 import { CLAUDE_RUNNER_SCRIPT, CODEX_RUNNER_SCRIPT, enabledServices, planUnits } from "./catalog.js";
-import { effectiveSyncOwner, readDaemonConfig } from "./config.js";
+import { readDaemonConfig } from "./config.js";
 import { findLegacyUnits, legacyOwnerLookup } from "./legacy.js";
 import { readLegacySyncEnv } from "./legacy-sync-env.js";
 import { acquireDaemonLock, releaseDaemonLock } from "./lock.js";
@@ -26,7 +26,6 @@ import { appendPrivate, daemonPaths, ensurePrivateDir, openPrivateAppend } from
 import { takeControlRequests } from "./requests.js";
 import { currentHqCloud, hqCloudRunners } from "./hq-cloud.js";
 import { runnerSessionName } from "./remote-control.js";
-import { listSyncRunnerProcesses, readWatchRunnerOwnerStatus, syncHeartbeatTimeoutMs, syncRunnerNodeOptions, watchRunnerOwnerStatusPath, } from "./sync-runner.js";
 import { STOP_ESCALATION_MS, createSupervisor } from "./supervisor.js";
 import { userToolDirs } from "./tools.js";
 export const LOG_ROTATE_BYTES = 5 * 1024 * 1024;
@@ -214,10 +213,7 @@ function makeLogger(paths, foreground) {
  * an on-failure unit down. The daemon's updater handles CLI updates.
  */
 export function unitProcessEnv(base, unit) {
-    const env = { ...base, ...unit.env, HQ_DAEMON_UNIT: unit.id, HQ_NO_UPDATE_CHECK: "1" };
-    if (unit.service === "sync")
-        env.NODE_OPTIONS = syncRunnerNodeOptions(env);
-    return env;
+    return { ...base, ...unit.env, HQ_DAEMON_UNIT: unit.id, HQ_NO_UPDATE_CHECK: "1" };
 }
 export async function runDaemon(opts) {
     const env = opts.env ?? process.env;
@@ -262,11 +258,10 @@ export async function runDaemon(opts) {
         return legacyCache.units;
     };
     let warnedMissingPin = null;
-    const daemonSyncRunnerPids = new Set();
     const plan = () => {
         const config = readDaemonConfig(paths.configPath);
         const legacy = legacyUnits();
-        const configured = config.hqRoot ?? (env.HQ_ROOT?.trim() || undefined);
+        const configured = config.hqRoot ?? env.HQ_ROOT?.trim() ?? undefined;
         const hqRoot = configured && fs.existsSync(configured) ? configured : undefined;
         // Re-picked every reconcile, so a newer hq-cloud from the updater is used as soon as it lands.
         const hqCloud = currentHqCloud(paths.root);
@@ -278,33 +273,7 @@ export async function runDaemon(opts) {
             }
         }
         const runners = hqCloud ? hqCloudRunners(hqCloud.root) : { syncRunner: null, heartbeat: null, sessionHost: null };
-        const services = enabledServices(machineType, config);
-        const isSignedIn = signedIn(env, home, log);
-        const syncOwner = effectiveSyncOwner(config, machineType);
-        let syncRunnerProcesses = [];
-        let syncRunnerOwnerPid = null;
-        if (machineType === "desktop" &&
-            syncOwner === "daemon" &&
-            services.includes("sync") &&
-            !config.syncPaused &&
-            hqRoot &&
-            isSignedIn) {
-            const processList = listSyncRunnerProcesses(platform);
-            if (!processList.ok) {
-                syncRunnerProcesses = null;
-                log("warn", `${processList.error}; sync will wait before taking ownership`);
-            }
-            else {
-                syncRunnerProcesses = processList.processes;
-                try {
-                    syncRunnerOwnerPid = readWatchRunnerOwnerStatus(watchRunnerOwnerStatusPath(hqRoot, home, env))?.pid ?? null;
-                }
-                catch (error) {
-                    log("warn", `could not verify the sync watch-owner status: ${error instanceof Error ? error.message : String(error)}`);
-                }
-            }
-        }
-        return planUnits(services, {
+        return planUnits(enabledServices(machineType, config), {
             machineType,
             platform,
             home,
@@ -313,20 +282,14 @@ export async function runDaemon(opts) {
             heartbeatRunnerPath: runners.heartbeat,
             sessionHostRunnerPath: runners.sessionHost,
             legacySyncEnv: readLegacySyncEnv(platform),
-            signedIn: isSignedIn,
+            signedIn: signedIn(env, home, log),
             kitConfigured: fs.existsSync(agentKitPaths(home, env).kitConfigPath),
-            syncPaused: config.syncPaused === true,
-            syncOwner,
             desktopAppManagesSync: desktopAppManagesSync({
                 machineType,
                 host: opts.host,
                 legacy,
                 appRunning: () => desktopAppRunning(platform),
             }),
-            syncRunnerProcesses,
-            syncRunnerOwnerPid,
-            daemonSyncRunnerPids,
-            syncHeartbeatTimeoutMs: syncHeartbeatTimeoutMs(env),
             bots: listLocalBots(),
             legacyOwner: legacyOwnerLookup(legacy),
             cliSelfUpdatable: updatable,
@@ -348,27 +311,20 @@ export async function runDaemon(opts) {
             : command.type === "node"
                 ? [opts.nodeBinary, [command.script, ...command.args]]
                 : [command.file, command.args];
-        const logPath = paths.unitLogPath(unit.id);
-        const logFd = openPrivateAppend(logPath);
-        const logStream = fs.createWriteStream(logPath, { fd: logFd, autoClose: true });
-        logStream.on("error", (err) => log("error", `could not write ${unit.id} log ${logPath}: ${err.message}`));
-        const cwd = unit.env.HQ_ROOT && fs.existsSync(unit.env.HQ_ROOT) ? unit.env.HQ_ROOT : home;
-        const child = spawn(file, args, {
-            cwd,
-            env: unitProcessEnv(env, unit),
-            stdio: ["ignore", "pipe", "pipe"],
-            windowsHide: true,
-        });
-        if (unit.service === "sync" && child.pid !== undefined)
-            daemonSyncRunnerPids.add(child.pid);
-        child.stdout?.pipe(logStream, { end: false });
-        child.stderr?.pipe(logStream, { end: false });
-        child.on("close", () => {
-            if (child.pid !== undefined)
-                daemonSyncRunnerPids.delete(child.pid);
-            logStream.end();
-        });
-        return child;
+        const fd = openPrivateAppend(paths.unitLogPath(unit.id));
+        try {
+            const cwd = unit.env.HQ_ROOT && fs.existsSync(unit.env.HQ_ROOT) ? unit.env.HQ_ROOT : home;
+            const child = spawn(file, args, {
+                cwd,
+                env: unitProcessEnv(env, unit),
+                stdio: ["ignore", fd, fd],
+                windowsHide: true,
+            });
+            return child;
+        }
+        finally {
+            fs.closeSync(fd);
+        }
     };
     // Set once the shutdown path exists below; a restart request before then is dropped.
     let restartDaemon = () => { };
@@ -390,21 +346,6 @@ export async function runDaemon(opts) {
         restartDaemon: () => restartDaemon(),
         writeState: (state) => writeJsonAtomic(paths.statePath, state),
         log,
-        syncOwnerBlockReason: () => {
-            const config = readDaemonConfig(paths.configPath);
-            const hqRoot = config.hqRoot ?? env.HQ_ROOT?.trim();
-            if (!hqRoot)
-                return undefined;
-            const statusPath = watchRunnerOwnerStatusPath(hqRoot, home, env);
-            try {
-                const owner = readWatchRunnerOwnerStatus(statusPath);
-                return owner ? `sync owned by ${owner.owner} pid ${owner.pid}` : undefined;
-            }
-            catch (err) {
-                log("error", `could not read sync owner status at ${statusPath}: ${err instanceof Error ? err.message : String(err)}`);
-                return undefined;
-            }
-        },
     });
     return await new Promise((resolve) => {
         let stopping = false;