@indigoai-us/hq-cli 5.292.0 → 5.294.0

package/dist/commands/core-jobs-native.js

@@ -7,7 +7,6 @@ import { serializeJqJson } from "../lib/core-utils/jq-json-serializer.js";
 import { resolveLiveRoot } from "../utils/hq-roots.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
-import { coreNativeJobsEnabled } from "./core-native-jobs-flag.js";
 const SCHEDULE_PARSE_ASSET = "core/scripts/jobs-schedule-parse.sh";
 const VALIDATE_ASSET = "core/scripts/jobs-validate.sh";
 const RECONCILE_ASSET = "core/scripts/outpost-jobs-reconcile.sh";
@@ -518,23 +517,26 @@ function collectJobFiles(args, emit) {
             const stat = fs.statSync(argument);
             if (stat.isFile()) {
                 if (/\.(yaml|yml)$/.test(argument))
-                    files.push(argument);
+                    files.push({ diskPath: argument, displayPath: argument });
                 else
                     emit(argument, "path", "not a .yaml/.yml job file");
                 return;
             }
             if (stat.isDirectory()) {
-                const walk = (directory) => {
+                const strippedArgument = argument.replace(/\/+$/, "") || path.parse(argument).root;
+                const walk = (directory, displayDirectory) => {
                     const entries = fs.readdirSync(directory, { withFileTypes: true });
                     for (const entry of entries) {
                         const file = path.join(directory, entry.name);
+                        const displayFile = `${displayDirectory.replace(/\/$/, "")}/${entry.name}`;
                         if (entry.isDirectory())
-                            walk(file);
-                        else if (entry.isFile() && /\.(yaml|yml)$/.test(entry.name))
-                            files.push(file);
+                            walk(file, displayFile);
+                        else if (entry.isFile() && /\.(yaml|yml)$/.test(entry.name)) {
+                            files.push({ diskPath: file, displayPath: displayFile });
+                        }
                     }
                 };
-                walk(argument);
+                walk(argument, strippedArgument);
                 return;
             }
             emit(argument, "path", "file or directory not found");
@@ -559,19 +561,19 @@ export function validateJobs(args) {
         errors.push(`jobs-validate: ${file}: ${field}: ${message}`);
     };
     const seenIds = [];
-    const files = collectJobFiles(args, emit).sort(comparePathsLikeSort);
+    const files = collectJobFiles(args, emit).sort((left, right) => comparePathsLikeSort(left.diskPath, right.diskPath));
     if (!files.length) {
         for (const error of errors)
             process.stderr.write(`${error}\n`);
         process.stderr.write("jobs-validate: no job YAML files found\n");
         return 1;
     }
-    for (const file of files) {
+    for (const { diskPath, displayPath } of files) {
         try {
-            validateJob(file, parseJobFile(fs.readFileSync(file, "utf8")), seenIds, emit);
+            validateJob(displayPath, parseJobFile(fs.readFileSync(diskPath, "utf8")), seenIds, emit);
         }
         catch {
-            emit(file, "yaml", "failed to parse YAML");
+            emit(displayPath, "yaml", "failed to parse YAML");
         }
     }
     for (const error of errors)
@@ -1292,6 +1294,7 @@ export function registerCoreJobsNativeCommand(core) {
             .action(async (args, _options, current) => {
             const argv = rawArgumentsForCommand(current, args);
             const groupHqRoot = core.opts().hqRoot;
+            const { coreNativeJobsEnabled } = await import("./core-native-jobs-flag.js");
             if (!await coreNativeJobsEnabled()) {
                 const hqRoot = asset === RECONCILE_ASSET && !argv.includes("--hq-root")
                     && !argv.includes("--help") && !argv.includes("-h")
@@ -1328,4 +1331,12 @@ export function rawArgumentsForCommand(command, fallback, raw = process.argv) {
     }
     return start >= 0 ? raw.slice(start) : (command.args.length ? command.args : fallback);
 }
+/** Fast-entry adapter; the shared family flag is resolved before this module loads. */
+export async function runJobsFast(args, _stdin, _cwd, _liveRoot, commandName, hqRootArg) {
+    if (commandName === "schedule-parse")
+        return runScheduleParse([...args]);
+    if (commandName === "validate")
+        return validateJobs([...args]);
+    return runReconcile([...args], hqRootArg ?? process.env.HQ_ROOT);
+}
 //# sourceMappingURL=core-jobs-native.js.map

package/dist/commands/core-knowledge-prefs.d.ts

@@ -6,5 +6,7 @@ export type CoreCommandResult = {
     stderr: string;
 };
 export declare function runKnowledgePrefs(args: readonly string[], root: string): CoreCommandResult;
+/** Fast-entry adapter; family gating and shell fallback happen before import. */
+export declare function runKnowledgePrefsFast(args: readonly string[], _stdin: string, _cwd: string, hqRoot: string | undefined): number;
 export declare function registerCoreKnowledgePrefsCommand(core: Command): void;
 //# sourceMappingURL=core-knowledge-prefs.d.ts.map

package/dist/commands/core-knowledge-prefs.js

@@ -9,7 +9,6 @@ import * as path from 'node:path';
 import { resolveLiveRoot } from '../utils/hq-roots.js';
 import { runBundledScript } from '../utils/run-bundled-script.js';
 import { describeCoreCommand } from './core-command-catalog.js';
-import { coreNativePolicyEnabled } from './core-native-policy-flag.js';
 export const KNOWLEDGE_PREFS_ASSET = 'core/scripts/knowledge-prefs.sh';
 const DEFAULTS = {
     signals_enabled: 'true',
@@ -84,6 +83,18 @@ export function runKnowledgePrefs(args, root) {
         stderr: '',
     };
 }
+/** Fast-entry adapter; family gating and shell fallback happen before import. */
+export function runKnowledgePrefsFast(args, _stdin, _cwd, hqRoot) {
+    const root = hqRoot ?? resolveLiveRoot();
+    const result = runKnowledgePrefs(args, root);
+    if (result.stdout)
+        process.stdout.write(result.stdout);
+    if (result.stderr)
+        process.stderr.write(result.stderr);
+    if (result.code !== 0)
+        process.exitCode = result.code;
+    return result.code;
+}
 export function registerCoreKnowledgePrefsCommand(core) {
     const command = core
         .command('knowledge-prefs')
@@ -97,6 +108,7 @@ export function registerCoreKnowledgePrefsCommand(core) {
         const hqRoot = resolveLiveRoot({
             hqRoot: core.opts().hqRoot,
         });
+        const { coreNativePolicyEnabled } = await import('./core-native-policy-flag.js');
         if (!await coreNativePolicyEnabled()) {
             const result = runBundledScript({
                 asset: KNOWLEDGE_PREFS_ASSET,

package/dist/commands/core-ontology-native.d.ts

@@ -5,6 +5,8 @@ export interface ScriptResult {
     stdout: string;
     stderr: string;
 }
+/** Fast-entry adapter; family gating and shell fallback happen before import. */
+export declare function runOntologyNativeFast(args: readonly string[], _stdin: string, cwd: string, hqRoot: string | undefined, commandName: string): number;
 export declare function sourceYamlValidate(file: string | undefined): ScriptResult;
 export declare function candidateCommand(args: string[], root: string): ScriptResult;
 export declare function briefCommand(args: string[], defaultRoot: string): ScriptResult;

package/dist/commands/core-ontology-native.js

@@ -3,7 +3,6 @@ import { createHash } from "node:crypto";
 import { spawnSync } from "node:child_process";
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { resolveProcessFlagGate } from "../lib/flag-registry.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
 import { resolveBundledAsset } from "../utils/hq-roots.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
@@ -34,6 +33,26 @@ function writeResult(result) {
         process.stderr.write(result.stderr);
     process.exitCode = result.code;
 }
+/** Fast-entry adapter; family gating and shell fallback happen before import. */
+export function runOntologyNativeFast(args, _stdin, cwd, hqRoot, commandName) {
+    const operands = [...args];
+    const root = commandName === "source-yaml-validate" ? cwd : hqRoot ?? cwd;
+    let result;
+    if (commandName === "audience-grant")
+        result = audienceGrant(operands, root);
+    else if (commandName === "brief")
+        result = briefCommand(operands, root);
+    else if (commandName === "candidate")
+        result = candidateCommand(operands, root);
+    else if (commandName === "garden")
+        result = gardenCommand(operands, root);
+    else if (commandName === "source-worklist")
+        result = worklistCommand(operands, root);
+    else
+        result = sourceYamlValidate(operands[0]);
+    writeResult(result);
+    return result.code;
+}
 function runHq(args, output = "capture") {
     const executable = process.env.HQ_BIN || "hq";
     const result = spawnSync(executable, args, {
@@ -869,7 +888,7 @@ export function registerCoreOntologyNativeCommands(ontology, rootFor) {
             .allowExcessArguments()
             .helpOption(false)
             .argument("[args...]", "arguments accepted for shell ABI compatibility")
-            .action((args = [], _options, commandContext) => {
+            .action(async (args = [], _options, commandContext) => {
             const argv = process.argv.slice(2);
             const coreIndex = argv.indexOf("core");
             const ontologyIndex = argv.indexOf("ontology", coreIndex + 1);
@@ -877,6 +896,7 @@ export function registerCoreOntologyNativeCommands(ontology, rootFor) {
             const forwarded = commandIndex >= 0 ? argv.slice(commandIndex + 1)
                 : commandContext.args.length > 0 ? commandContext.args : args;
             const liveRoot = entry.root === "live" ? rootFor() : process.cwd();
+            const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
             if (!resolveProcessFlagGate(FLAG, { fallback: false }, () => false)) {
                 const result = runBundledScript({
                     asset: `${ASSET}${entry.asset}`,

package/dist/commands/core-policy.d.ts

@@ -11,5 +11,7 @@ export type CorePolicyResult = {
 export declare function runPolicyAgeReport(args: readonly string[], root: string, env?: NodeJS.ProcessEnv, nowEpoch?: number): CorePolicyResult;
 export declare function runPolicyFrontmatter(args: readonly string[], cwd: string): FrontmatterResult;
 export declare function runPolicyRetire(args: readonly string[], root: string, cwd: string, env?: NodeJS.ProcessEnv, now?: Date): CorePolicyResult;
+/** Fast-entry adapter; family gating and shell fallback happen before import. */
+export declare function runPolicyFast(args: readonly string[], _stdin: string, cwd: string, hqRoot: string | undefined, commandName: string): number;
 export declare function registerCorePolicyCommand(core: Command): void;
 //# sourceMappingURL=core-policy.d.ts.map

package/dist/commands/core-policy.js

@@ -7,7 +7,6 @@ import { policyValidatorDiagnostic } from '../lib/policy-validator.js';
 import { resolveLiveRoot, resolveBundledAsset } from '../utils/hq-roots.js';
 import { runBundledScript } from '../utils/run-bundled-script.js';
 import { describeCoreCommand } from './core-command-catalog.js';
-import { coreNativePolicyEnabled } from './core-native-policy-flag.js';
 import { runPolicyFrontmatter as runPolicyFrontmatterImpl } from './core-policy-frontmatter.js';
 export const POLICY_AGE_REPORT_ASSET = 'core/scripts/policy-age-report.sh';
 export const POLICY_RETIRE_ASSET = 'core/scripts/policy-retire.sh';
@@ -947,6 +946,21 @@ function writeResult(result) {
     if (result.code !== 0)
         process.exitCode = result.code;
 }
+/** Fast-entry adapter; family gating and shell fallback happen before import. */
+export function runPolicyFast(args, _stdin, cwd, hqRoot, commandName) {
+    let result;
+    if (commandName === "frontmatter") {
+        result = runPolicyFrontmatter(args, cwd);
+    }
+    else {
+        const root = hqRoot ?? resolveLiveRoot();
+        result = commandName === "age-report"
+            ? runPolicyAgeReport(args, root)
+            : runPolicyRetire(args, root, cwd);
+    }
+    writeResult(result);
+    return result.code;
+}
 export function registerCorePolicyCommand(core) {
     const group = core.command('policy').description('Policy maintenance commands');
     const register = (name, asset, summary, rootKind) => {
@@ -963,6 +977,7 @@ export function registerCorePolicyCommand(core) {
     const ageReport = register('age-report', POLICY_AGE_REPORT_ASSET, 'Report policy usage and retirement candidates', 'live');
     ageReport.action(async (args = [], _options, command) => {
         const operands = command.args.length > 0 ? command.args : args;
+        const { coreNativePolicyEnabled } = await import('./core-native-policy-flag.js');
         if (!await coreNativePolicyEnabled()) {
             const root = resolveLiveRoot({ hqRoot: core.opts().hqRoot });
             const result = runBundledScript({ asset: POLICY_AGE_REPORT_ASSET, args: operands, cwd: process.cwd(), hqRoot: root });
@@ -976,6 +991,7 @@ export function registerCorePolicyCommand(core) {
     const retire = register('retire', POLICY_RETIRE_ASSET, 'Retire or restore a policy', 'live');
     retire.action(async (args = [], _options, command) => {
         const operands = command.args.length > 0 ? command.args : args;
+        const { coreNativePolicyEnabled } = await import('./core-native-policy-flag.js');
         if (!await coreNativePolicyEnabled()) {
             const root = resolveLiveRoot({ hqRoot: core.opts().hqRoot });
             const result = runBundledScript({ asset: POLICY_RETIRE_ASSET, args: operands, cwd: process.cwd(), hqRoot: root });
@@ -989,6 +1005,7 @@ export function registerCorePolicyCommand(core) {
     const frontmatter = register('frontmatter', POLICY_FRONTMATTER_ASSET, 'Extract policy frontmatter', 'cwd');
     frontmatter.action(async (args = [], _options, command) => {
         const operands = command.args.length > 0 ? command.args : args;
+        const { coreNativePolicyEnabled } = await import('./core-native-policy-flag.js');
         if (!await coreNativePolicyEnabled()) {
             const result = runBundledScript({ asset: POLICY_FRONTMATTER_ASSET, args: operands, cwd: process.cwd() });
             if (result.code !== 0)

package/dist/commands/core.js

@@ -31,6 +31,7 @@
 import { Option } from "commander";
 import { registerCoreCheckpointCommand } from "./core-checkpoint.js";
 import { registerCoreDelegateCommand } from "./core-delegate.js";
+import { registerCoreDelegateW1b } from "./core-delegate-w1b.js";
 import { registerCoreHandoffCommand } from "./core-handoff.js";
 import { registerCoreOntologyCommand } from "./core-ontology.js";
 import { registerCoreKnowledgePrefsCommand } from "./core-knowledge-prefs.js";
@@ -347,7 +348,7 @@ export function registerCoreCommands(program) {
     registerCoreCheckpointCommand(core);
     registerCoreOntologyCommand(core);
     registerCoreCheckpointGateSettingCommand(core);
-    registerCoreDelegateCommand(core);
+    registerCoreDelegateCommand(core, registerCoreDelegateW1b);
     registerCoreHandoffCommand(core);
     registerCoreKnowledgePrefsCommand(core);
     registerCorePolicyCommand(core);

package/dist/commands/daemon.d.ts

@@ -33,7 +33,8 @@ export interface DaemonCommandDeps {
     readFile: (p: string) => string;
     /** Writes a root-owned file such as /etc/hq/machine-type, creating its folder. */
     writeFile: (p: string, text: string) => void;
-    legacyUnits: () => LegacyUnit[];
+    /** Older units in `home` (default: this user's home). */
+    legacyUnits: (home?: string) => LegacyUnit[];
     resolveHqRoot: (flag: string | undefined) => string | undefined;
     /** Home folder of the login user a box's system unit runs as. */
     userHome: (user: string) => string;

package/dist/commands/daemon.js

@@ -86,9 +86,9 @@ async function loadDefaults(over) {
                 fs.writeFileSync(p, text, { mode: 0o644 });
             }),
         legacyUnits: over.legacyUnits ??
-            (() => findLegacyUnits({
+            ((dir) => findLegacyUnits({
                 platform,
-                home,
+                home: dir ?? home,
                 existsSync: fs.existsSync,
                 listDir: (dir) => fs.readdirSync(dir),
                 windowsTaskExists: (task) => run("schtasks.exe", ["/Query", "/TN", task]).status === 0,
@@ -246,11 +246,25 @@ async function runInstall(d, opts) {
     }
     d.out(`Installed and started: ${result.unitPath}`);
 }
-function migrateDeps(d, paths) {
+/** Root acting for a box's login user needs that user's uid to reach their systemd manager. */
+function loginUid(d, user) {
+    const r = d.run("id", ["-u", user]);
+    const uid = Number(r.stdout.trim());
+    if (r.status !== 0 || !Number.isInteger(uid) || uid < 0 || r.stdout.trim() === "") {
+        throw new DaemonCommandError(`Could not look up the uid of ${user}.`);
+    }
+    return uid;
+}
+/** Where the older units are: a box's login user's home when root runs this for them. */
+function legacyUnitsFor(d, host) {
+    return d.isRoot && host.runAsUser ? d.legacyUnits(d.userHome(host.runAsUser)) : d.legacyUnits();
+}
+function migrateDeps(d, paths, runAsUser) {
     return {
         run: d.run,
         uid: d.uid,
         isRoot: d.isRoot,
+        userUnitsOwner: d.isRoot && runAsUser ? { user: runAsUser, uid: loginUid(d, runAsUser) } : undefined,
         adoptedDir: path.join(paths.root, "adopted"),
         recordPath: path.join(paths.root, "adopted.json"),
         // Box system units: root-owned, outside the login user's daemon folder (which handOver chowns to that user).
@@ -268,7 +282,8 @@ function unrestoredUnits(d, migrate) {
 async function runUninstall(d, opts) {
     const host = currentHost(d);
     const { paths, detected } = host;
-    const migrate = migrateDeps(d, paths);
+    // Only a restore acts on the login user's units.
+    const migrate = migrateDeps(d, paths, opts.restoreLegacy ? host.runAsUser : undefined);
     const adopted = unrestoredUnits(d, migrate);
     if (opts.purge && !opts.restoreLegacy && adopted.length > 0) {
         throw new DaemonCommandError(`hq daemon took over ${adopted.map((u) => u.unitId).join(", ")}, and their original units are kept in ${migrate.adoptedDir}. ` +
@@ -547,13 +562,13 @@ async function runPinHqCloud(d, version, opts) {
     d.out("Run `hq daemon trigger updater`; wait for the hq-cloud update or current-version message in `hq daemon logs updater`, then restart `hq daemon restart sync`, `hq daemon restart heartbeat`, and `hq daemon restart session-host`.");
 }
 async function runMigrate(d, opts) {
-    const units = d.legacyUnits();
+    const host = currentHost(d);
+    const units = legacyUnitsFor(d, host);
     if (units.length === 0) {
         d.out("No older HQ background units found. Nothing to migrate.");
         return;
     }
     if (opts.apply) {
-        const host = currentHost(d);
         // Stopping the older units with nothing installed to replace them would
         // leave their services off.
         const installed = daemonUnitInstalled({
@@ -565,7 +580,7 @@ async function runMigrate(d, opts) {
         if (!installed) {
             throw new DaemonCommandError("hq daemon is not installed here yet. Run `hq daemon install` first, then `hq daemon migrate --apply`.");
         }
-        const result = adoptLegacyUnits(units, migrateDeps(d, host.paths));
+        const result = adoptLegacyUnits(units, migrateDeps(d, host.paths, host.runAsUser));
         handOver(d, host);
         for (const a of result.adopted)
             d.out(`Took over ${a.unitId} from ${describeLegacyUnit(a)}`);

package/dist/commands/lanes-autopilot.d.ts

@@ -0,0 +1,11 @@
+import type { Command } from "commander";
+import { type ReconcileHost } from "../lib/lanes/reconcile.js";
+type WrapHandler = <Args extends unknown[]>(action: (...args: Args) => Promise<void>) => (...args: Args) => Promise<void>;
+export interface LaneAutopilotReportDeps {
+    hqRoot: () => string;
+    now: () => Date;
+    currentHost: () => ReconcileHost;
+}
+export declare function registerLaneAutopilotReportCommand(parent: Command, deps: LaneAutopilotReportDeps, wrap: WrapHandler): void;
+export {};
+//# sourceMappingURL=lanes-autopilot.d.ts.map