@indigoai-us/hq-cli 5.308.0 → 5.309.1

package/dist/lib/lanes/autopilot.js

@@ -1,7 +1,9 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { laneRunsOnHost } from "./admission.js";
 import { appendDropboxMessage } from "./dropbox.js";
 import { LanesError } from "./errors.js";
+import { resolveLaneCompany } from "./lane-company.js";
 import { readLanesRegistryFlag } from "./registry-flag.js";
 import { readAllLanes } from "./store.js";
 export const LEAD_AUTOPILOT_FLAG = "lanes.lead-autopilot";
@@ -406,7 +408,7 @@ function recordOperatorEscalation(hqRoot, record) {
 async function runLeadAutopilotPassUnlocked(input) {
     const { hqRoot, host, now } = input;
     const result = { ok: true, host, evaluated: 0, sent: [], started: [], escalated: [], skipped: [] };
-    const leads = parseRegistry(hqRoot).filter((lead) => lead.host === host || (host === "local" && lead.host === input.hostname));
+    const leads = parseRegistry(hqRoot);
     const lanes = readAllLanes(hqRoot);
     const byId = new Map(lanes.map((lane) => [lane.lane_id, lane]));
     const stateFile = path.join(hqRoot, "workspace", "lane-briefs", "autopilot-state.json");
@@ -417,136 +419,156 @@ async function runLeadAutopilotPassUnlocked(input) {
             result.skipped.push({ lead_lane: registered.lane, reason: "lead_lane_missing" });
             continue;
         }
-        if (lead.company === null) {
+        const company = resolveLaneCompany(hqRoot, lead).company;
+        if (!company) {
             result.skipped.push({ lead_lane: lead.lane_id, reason: "lead_company_unresolved" });
             continue;
         }
         const registeredLocalHost = registered.host === "local" || registered.host === input.hostname;
-        if ((registeredLocalHost && (lead.host.kind !== "local" || lead.host.id !== input.hostname)) ||
-            (!registeredLocalHost && (lead.host.kind !== "outpost" || lead.host.id !== registered.host || input.outpostId !== registered.host))) {
+        const hostMatchesRegistry = registeredLocalHost
+            ? lead.host.kind === "local"
+            : lead.host.kind === "outpost" && lead.host.id === registered.host && input.outpostId === registered.host;
+        if (!hostMatchesRegistry ||
+            !laneRunsOnHost(lead, { hostname: input.hostname, outpostId: input.outpostId })) {
             result.skipped.push({ lead_lane: lead.lane_id, reason: "lead_host_mismatch" });
             continue;
         }
-        const enabled = await (input.readFlag ?? readLanesRegistryFlag)(LEAD_AUTOPILOT_FLAG, { company: lead.company });
-        if (!enabled) {
-            result.skipped.push({ lead_lane: lead.lane_id, reason: "flag_off" });
-            continue;
-        }
-        const status = readStatus(hqRoot, registered.status, lead.company.slug);
-        const statusUpdatedAt = typeof status.updated_at === "string" && Number.isFinite(Date.parse(status.updated_at))
-            ? new Date(Date.parse(status.updated_at)).toISOString()
-            : undefined;
-        result.evaluated += 1;
-        const stories = projectStories(hqRoot, registered.prd, lead.company.slug, lead.project_id);
-        const children = lanes.filter((lane) => lane.senior.kind === "lane" && lane.senior.id === lead.lane_id);
-        const planned = planLeadAutopilotWakes({
-            lead,
-            children,
-            stories,
-            now,
-            managerStatus: status,
-            keepAliveResumed: input.keepAliveResumedLeads?.has(lead.lane_id) === true,
-        });
         let stateChanged = false;
-        const activeKeys = new Set(planned.map((wake) => `${lead.lane_id}:${wake.condition}`));
-        for (const key of Object.keys(state.sent)) {
-            if (key.startsWith(`${lead.lane_id}:`) && !activeKeys.has(key)) {
-                delete state.sent[key];
-                stateChanged = true;
+        try {
+            const enabled = await (input.readFlag ?? readLanesRegistryFlag)(LEAD_AUTOPILOT_FLAG, { company });
+            if (!enabled) {
+                result.skipped.push({ lead_lane: lead.lane_id, reason: "flag_off" });
+                continue;
             }
-        }
-        for (const wake of planned) {
-            const key = `${lead.lane_id}:${wake.condition}`;
-            const prior = state.sent[key];
-            if (prior?.fingerprint === wake.fingerprint) {
-                if (input.dryRun)
-                    continue;
-                let current = prior;
-                const lastWakeAt = Date.parse(prior.last_wake_at ?? prior.at);
-                if (!Number.isFinite(lastWakeAt)) {
-                    throw new LanesError("lead_autopilot_state_invalid", `Invalid wake time for ${lead.lane_id}`, { lead_lane: lead.lane_id, story_id: wake.story_id });
-                }
-                if (statusUpdatedAt === undefined || prior.status_updated_at === undefined) {
-                    throw new LanesError("lead_autopilot_status_activity_unverifiable", `Cannot verify whether lead ${lead.lane_id} acted after its autopilot wake`, { lead_lane: lead.lane_id, story_id: wake.story_id });
-                }
-                if (!prior.acted && Date.parse(statusUpdatedAt) > Date.parse(prior.status_updated_at)) {
-                    current = { ...prior, acted: true };
-                    state.sent[key] = current;
+            const status = readStatus(hqRoot, registered.status, company.slug);
+            const statusUpdatedAt = typeof status.updated_at === "string" && Number.isFinite(Date.parse(status.updated_at))
+                ? new Date(Date.parse(status.updated_at)).toISOString()
+                : undefined;
+            const stories = projectStories(hqRoot, registered.prd, company.slug, lead.project_id);
+            const children = lanes.filter((lane) => lane.senior.kind === "lane" && lane.senior.id === lead.lane_id);
+            const planned = planLeadAutopilotWakes({
+                lead,
+                children,
+                stories,
+                now,
+                managerStatus: status,
+                keepAliveResumed: input.keepAliveResumedLeads?.has(lead.lane_id) === true,
+            });
+            const activeKeys = new Set(planned.map((wake) => `${lead.lane_id}:${wake.condition}`));
+            for (const key of Object.keys(state.sent)) {
+                if (key.startsWith(`${lead.lane_id}:`) && !activeKeys.has(key)) {
+                    delete state.sent[key];
                     stateChanged = true;
                 }
-                if (wake.condition === "fill_grant" && input.startWorker && !current.acted && !current.auto_started) {
-                    const firstWakeAt = Date.parse(current.at);
-                    if (!Number.isFinite(firstWakeAt)) {
-                        throw new LanesError("lead_autopilot_state_invalid", `Invalid fill-grant wake time for ${lead.lane_id}`, { lead_lane: lead.lane_id, story_id: wake.story_id });
+            }
+            for (const wake of planned) {
+                const key = `${lead.lane_id}:${wake.condition}`;
+                const prior = state.sent[key];
+                if (prior?.fingerprint === wake.fingerprint) {
+                    if (input.dryRun)
+                        continue;
+                    let current = prior;
+                    const lastWakeAt = Date.parse(prior.last_wake_at ?? prior.at);
+                    if (!Number.isFinite(lastWakeAt)) {
+                        throw new LanesError("lead_autopilot_state_invalid", `Invalid wake time for ${lead.lane_id}`, { lead_lane: lead.lane_id, story_id: wake.story_id });
+                    }
+                    if (statusUpdatedAt === undefined || prior.status_updated_at === undefined) {
+                        throw new LanesError("lead_autopilot_status_activity_unverifiable", `Cannot verify whether lead ${lead.lane_id} acted after its autopilot wake`, { lead_lane: lead.lane_id, story_id: wake.story_id });
+                    }
+                    if (!prior.acted && Date.parse(statusUpdatedAt) > Date.parse(prior.status_updated_at)) {
+                        current = { ...prior, acted: true };
+                        state.sent[key] = current;
+                        stateChanged = true;
                     }
-                    if (now.getTime() - firstWakeAt >= LEAD_AUTOPILOT_FILL_DELAY_MS) {
-                        const story = stories.find((candidate) => candidate.id === wake.story_id && candidate.status === "todo");
-                        if (!story?.briefPath) {
-                            throw new LanesError("lead_autopilot_story_brief_missing", `Cannot auto-start story ${wake.story_id}: its project record has no valid brief path`, { lead_lane: lead.lane_id, story_id: wake.story_id, project_id: lead.project_id });
+                    if (wake.condition === "fill_grant" && input.startWorker && !current.acted && !current.auto_started) {
+                        const firstWakeAt = Date.parse(current.at);
+                        if (!Number.isFinite(firstWakeAt)) {
+                            throw new LanesError("lead_autopilot_state_invalid", `Invalid fill-grant wake time for ${lead.lane_id}`, { lead_lane: lead.lane_id, story_id: wake.story_id });
                         }
-                        if (lead.state !== "running" && lead.state !== "queued") {
-                            current = { ...current, acted: true };
+                        if (now.getTime() - firstWakeAt >= LEAD_AUTOPILOT_FILL_DELAY_MS) {
+                            const story = stories.find((candidate) => candidate.id === wake.story_id && candidate.status === "todo");
+                            if (!story?.briefPath) {
+                                throw new LanesError("lead_autopilot_story_brief_missing", `Cannot auto-start story ${wake.story_id}: its project record has no valid brief path`, { lead_lane: lead.lane_id, story_id: wake.story_id, project_id: lead.project_id });
+                            }
+                            if (lead.state !== "running" && lead.state !== "queued") {
+                                current = { ...current, acted: true };
+                                state.sent[key] = current;
+                                stateChanged = true;
+                                result.skipped.push({ lead_lane: lead.lane_id, reason: "auto_start_lead_not_active" });
+                            }
+                            else {
+                                const started = await input.startWorker({ lead, story });
+                                current = { ...current, auto_started: true, worker_lane: started.lane_id };
+                                state.sent[key] = current;
+                                stateChanged = true;
+                                result.started.push({ lead_lane: lead.lane_id, story_id: story.id, worker_lane: started.lane_id });
+                            }
+                        }
+                    }
+                    if (!current.acted && !current.auto_started && current.escalated_at === undefined && now.getTime() - lastWakeAt >= LEAD_AUTOPILOT_FILL_DELAY_MS) {
+                        const wakeCount = current.wake_count ?? 1;
+                        if (wakeCount < 2) {
+                            appendDropboxMessage(hqRoot, lead.lane_id, {
+                                at: now.toISOString(),
+                                message_id: `lead-autopilot:${wake.fingerprint}:wake-2`,
+                                kind: "system_notice",
+                                text: wake.prompt,
+                            });
+                            current = { ...current, wake_count: 2, last_wake_at: now.toISOString() };
                             state.sent[key] = current;
                             stateChanged = true;
-                            result.skipped.push({ lead_lane: lead.lane_id, reason: "auto_start_lead_not_active" });
+                            result.sent.push(wake);
                         }
                         else {
-                            const started = await input.startWorker({ lead, story });
-                            current = { ...current, auto_started: true, worker_lane: started.lane_id };
+                            const escalation = { team: registered.team, lead_lane: lead.lane_id, condition: wake.condition, story_id: wake.story_id, at: now.toISOString(), fingerprint: wake.fingerprint };
+                            recordOperatorEscalation(hqRoot, escalation);
+                            current = { ...current, escalated_at: now.toISOString() };
                             state.sent[key] = current;
                             stateChanged = true;
-                            result.started.push({ lead_lane: lead.lane_id, story_id: story.id, worker_lane: started.lane_id });
+                            result.escalated.push(escalation);
                         }
                     }
+                    continue;
                 }
-                if (!current.acted && !current.auto_started && current.escalated_at === undefined && now.getTime() - lastWakeAt >= LEAD_AUTOPILOT_FILL_DELAY_MS) {
-                    const wakeCount = current.wake_count ?? 1;
-                    if (wakeCount < 2) {
-                        appendDropboxMessage(hqRoot, lead.lane_id, {
-                            at: now.toISOString(),
-                            message_id: `lead-autopilot:${wake.fingerprint}:wake-2`,
-                            kind: "system_notice",
-                            text: wake.prompt,
-                        });
-                        current = { ...current, wake_count: 2, last_wake_at: now.toISOString() };
-                        state.sent[key] = current;
-                        stateChanged = true;
-                        result.sent.push(wake);
-                    }
-                    else {
-                        const escalation = { team: registered.team, lead_lane: lead.lane_id, condition: wake.condition, story_id: wake.story_id, at: now.toISOString(), fingerprint: wake.fingerprint };
-                        recordOperatorEscalation(hqRoot, escalation);
-                        current = { ...current, escalated_at: now.toISOString() };
-                        state.sent[key] = current;
-                        stateChanged = true;
-                        result.escalated.push(escalation);
-                    }
+                if (!input.dryRun) {
+                    appendDropboxMessage(hqRoot, lead.lane_id, {
+                        at: now.toISOString(),
+                        message_id: `lead-autopilot:${wake.fingerprint}`,
+                        kind: "system_notice",
+                        text: wake.prompt,
+                    });
+                    state.sent[key] = {
+                        fingerprint: wake.fingerprint,
+                        at: now.toISOString(),
+                        ...(statusUpdatedAt ? { status_updated_at: statusUpdatedAt } : {}),
+                        wake_count: 1,
+                        last_wake_at: now.toISOString(),
+                    };
+                    stateChanged = true;
                 }
-                continue;
+                result.sent.push(wake);
             }
-            if (!input.dryRun) {
-                appendDropboxMessage(hqRoot, lead.lane_id, {
-                    at: now.toISOString(),
-                    message_id: `lead-autopilot:${wake.fingerprint}`,
-                    kind: "system_notice",
-                    text: wake.prompt,
-                });
-                state.sent[key] = {
-                    fingerprint: wake.fingerprint,
-                    at: now.toISOString(),
-                    ...(statusUpdatedAt ? { status_updated_at: statusUpdatedAt } : {}),
-                    wake_count: 1,
-                    last_wake_at: now.toISOString(),
-                };
-                stateChanged = true;
-            }
-            result.sent.push(wake);
+            if (!input.dryRun && stateChanged)
+                writeState(stateFile, state);
+            result.evaluated += 1;
+        }
+        catch (error) {
+            if (!input.dryRun && stateChanged)
+                writeState(stateFile, state);
+            if (!(error instanceof LanesError) || LEAD_AUTOPILOT_PASS_FATAL_ERRORS.has(error.error))
+                throw error;
+            result.skipped.push({ lead_lane: lead.lane_id, reason: error.error });
         }
-        if (!input.dryRun && stateChanged)
-            writeState(stateFile, state);
     }
     return result;
 }
+// Tenant-boundary and path-safety failures stop the whole pass; other per-lead
+// data errors skip only that lead.
+const LEAD_AUTOPILOT_PASS_FATAL_ERRORS = new Set([
+    "lead_autopilot_tenant_mismatch",
+    "lead_autopilot_status_path_invalid",
+    "lead_autopilot_escalation_record_invalid",
+]);
 const LEAD_AUTOPILOT_STALE_LOCK_MAX_AGE_MS = 60 * 60_000;
 function processStartIdentity(pid) {
     try {

package/dist/lib/monitor.d.ts

@@ -4,15 +4,12 @@ export declare const MONITOR_FLAG = "monitor.enabled";
 export declare const MONITOR_FLAG_DEFAULT = false;
 export declare const MONITOR_DEFAULT_TIMEOUT_MS: number;
 export declare const MONITOR_DEFAULT_CHECKIN_MS: number;
-export declare const MONITOR_PROMPT_CACHE_TTL_MS: number;
 export declare const MONITOR_BATCH_WINDOW_MS = 200;
 export declare const MONITOR_POLL_INTERVAL_MS = 1000;
 export declare const MONITOR_RATE_WINDOW_MS = 10000;
 /** Sustained stdout floods stop after 3 windows; the per-window cap can be overridden with HQ_MONITOR_MAX_EVENTS_PER_WINDOW. */
 export declare const MONITOR_MAX_EVENTS_PER_WINDOW = 60;
 export declare const MONITOR_MAX_FLOOD_WINDOWS = 3;
-export declare const MONITOR_LOCK_STALE_MS = 30000;
-export declare const MONITOR_MAX_TIMER_DELAY_MS = 2147000000;
 export type MonitorTarget = {
     kind: "lane";
     laneId: string;
@@ -38,7 +35,7 @@ export interface NearestMonitorRuntime {
 export interface MonitorRuntimeIdentity extends NearestMonitorRuntime {
     starttime: number;
 }
-export interface MonitorSessionOwner {
+interface MonitorSessionOwner {
     pid: number;
     starttime: number | null;
 }
@@ -107,7 +104,6 @@ export interface MonitorCheckinResult {
 /** This guard is first in monitor start so a conflicting invocation has no side effects. */
 export declare function assertMonitorTimeoutCompatibility(persistent: boolean, timeoutProvided: boolean): void;
 export declare function parseMonitorDuration(value: string, kind: "timeout" | "checkin"): number;
-export declare function assertMonitorSessionId(sessionId: string): void;
 export declare function parseMonitorTarget(value: string): MonitorTarget;
 export declare function monitorTargetKey(target: MonitorTarget): string;
 export declare function detectMonitorTarget(options: DetectMonitorTargetOptions): MonitorTarget;
@@ -119,7 +115,6 @@ export declare function findNearestMonitorRuntime(options: {
 export declare function monitorSessionDir(hqRoot: string, provider: LaneProvider, sessionId: string): string;
 export declare function monitorSessionHasActiveMarkers(hqRoot: string, provider: LaneProvider, sessionId: string): boolean;
 export declare function monitorSessionHasActiveMarkerForOwner(hqRoot: string, provider: LaneProvider, sessionId: string, owner: MonitorRuntimeIdentity): boolean;
-export declare function monitorSessionHasInboxFile(hqRoot: string, provider: LaneProvider, sessionId: string): boolean;
 export declare function monitorSessionInboxHasEvents(hqRoot: string, provider: LaneProvider, sessionId: string): boolean;
 export declare function monitorSessionHasWork(hqRoot: string, provider: LaneProvider, sessionId: string): boolean;
 export declare function monitorDir(hqRoot: string, monitorId: string): string;
@@ -150,4 +145,5 @@ export declare function recordMonitorTargetDeliveryAtPath(activityPath: string,
 export declare function formatElapsed(ms: number): string;
 export declare function runMonitorCheckinTick(hqRoot: string, targetKey: string, deps: MonitorCheckinDeps): Promise<MonitorCheckinResult>;
 export declare function readMonitorPidLiveness(pid: number | null, starttime: number | null, readStarttime?: (pid: number) => number | null): boolean;
+export {};
 //# sourceMappingURL=monitor.d.ts.map

package/dist/lib/monitor.js

@@ -9,15 +9,15 @@ export const MONITOR_FLAG = "monitor.enabled";
 export const MONITOR_FLAG_DEFAULT = false;
 export const MONITOR_DEFAULT_TIMEOUT_MS = 5 * 60_000;
 export const MONITOR_DEFAULT_CHECKIN_MS = 55 * 60_000;
-export const MONITOR_PROMPT_CACHE_TTL_MS = 60 * 60_000;
+const MONITOR_PROMPT_CACHE_TTL_MS = 60 * 60_000;
 export const MONITOR_BATCH_WINDOW_MS = 200;
 export const MONITOR_POLL_INTERVAL_MS = 1_000;
 export const MONITOR_RATE_WINDOW_MS = 10_000;
 /** Sustained stdout floods stop after 3 windows; the per-window cap can be overridden with HQ_MONITOR_MAX_EVENTS_PER_WINDOW. */
 export const MONITOR_MAX_EVENTS_PER_WINDOW = 60;
 export const MONITOR_MAX_FLOOD_WINDOWS = 3;
-export const MONITOR_LOCK_STALE_MS = 30_000;
-export const MONITOR_MAX_TIMER_DELAY_MS = 2_147_000_000;
+const MONITOR_LOCK_STALE_MS = 30_000;
+const MONITOR_MAX_TIMER_DELAY_MS = 2_147_000_000;
 const SESSION_ID_RE = /^[A-Za-z0-9_-]{1,128}$/;
 const SAFE_LANE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 const RUNTIME_ENV = {
@@ -59,7 +59,7 @@ function assertLaneTargetId(laneId) {
         throw monitorError("monitor_target_invalid", `Invalid lane target ${JSON.stringify(laneId)}.`, { lane_id: laneId });
     }
 }
-export function assertMonitorSessionId(sessionId) {
+function assertMonitorSessionId(sessionId) {
     if (!SESSION_ID_RE.test(sessionId)) {
         throw monitorError("monitor_session_id_invalid", "Session ids must contain only letters, numbers, underscores, or hyphens and be 1–128 characters long.", { session_id: sessionId });
     }
@@ -154,7 +154,7 @@ export function monitorSessionHasActiveMarkerForOwner(hqRoot, provider, sessionI
             && markerOwner.starttime === owner.starttime;
     });
 }
-export function monitorSessionHasInboxFile(hqRoot, provider, sessionId) {
+function monitorSessionHasInboxFile(hqRoot, provider, sessionId) {
     return fs.existsSync(path.join(monitorSessionDir(hqRoot, provider, sessionId), "dropbox", "inbox.jsonl"));
 }
 export function monitorSessionInboxHasEvents(hqRoot, provider, sessionId) {

package/dist/lib/onboarding/errors.d.ts

@@ -4,7 +4,7 @@
  * Each failure class maps to a distinct step in the onboarding flow,
  * making it easy for the installer to show targeted recovery hints.
  */
-export declare class OnboardingError extends Error {
+declare class OnboardingError extends Error {
     readonly step: string;
     readonly cause?: Error | undefined;
     constructor(message: string, step: string, cause?: Error | undefined);
@@ -30,4 +30,5 @@ export declare class InviteAcceptError extends OnboardingError {
 export declare class StsVerifyError extends OnboardingError {
     constructor(message: string, cause?: Error);
 }
+export {};
 //# sourceMappingURL=errors.d.ts.map

package/dist/lib/onboarding/errors.js

@@ -4,7 +4,7 @@
  * Each failure class maps to a distinct step in the onboarding flow,
  * making it easy for the installer to show targeted recovery hints.
  */
-export class OnboardingError extends Error {
+class OnboardingError extends Error {
     step;
     cause;
     constructor(message, step, cause) {

package/dist/lib/onboarding/index.d.ts

@@ -7,11 +7,7 @@
  * invite/accept into create-company and join-company flows with
  * checkpoint/resume.
  */
-export { createCompanyFlow, joinCompanyFlow, resumeOnboarding, onboardingContract, } from "./orchestrator.js";
-export { readCheckpoint, writeCheckpoint, deleteCheckpoint, getCheckpointPath, isStepComplete, } from "./checkpoint.js";
-export { OnboardingError, PersonCreationError, CompanyCreationError, ProvisioningError, MembershipBootstrapError, FirstSyncError, InviteAcceptError, StsVerifyError, } from "./errors.js";
-export type { OnboardingInput, CreateCompanyInput, JoinCompanyInput, OnboardingConfig, OnboardingResult, OnboardingProgress, OnboardingStep, StepStatus, ProgressCallback, OnboardingCheckpoint, DesktopInstallerContract, HqConfig, } from "./types.js";
+export { readCheckpoint } from "./checkpoint.js";
+export type { OnboardingCheckpoint } from "./types.js";
 export { runOnboardCli } from "./cli/onboard.js";
-export type { OnboardCliOptions, OnboardCliResult } from "./cli/onboard.js";
-export { formatProgress, formatSummary, formatError, validateSlug, validateEmail } from "./cli/prompts.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/onboarding/index.js

@@ -7,10 +7,7 @@
  * invite/accept into create-company and join-company flows with
  * checkpoint/resume.
  */
-export { createCompanyFlow, joinCompanyFlow, resumeOnboarding, onboardingContract, } from "./orchestrator.js";
-export { readCheckpoint, writeCheckpoint, deleteCheckpoint, getCheckpointPath, isStepComplete, } from "./checkpoint.js";
-export { OnboardingError, PersonCreationError, CompanyCreationError, ProvisioningError, MembershipBootstrapError, FirstSyncError, InviteAcceptError, StsVerifyError, } from "./errors.js";
-// CLI
+// The CLI command and identity guard are the only consumers of this barrel.
+export { readCheckpoint } from "./checkpoint.js";
 export { runOnboardCli } from "./cli/onboard.js";
-export { formatProgress, formatSummary, formatError, validateSlug, validateEmail } from "./cli/prompts.js";
 //# sourceMappingURL=index.js.map

package/dist/lib/report-publish.d.ts

@@ -1,9 +1,5 @@
-/** Mirrors the deploy skill's static-report guardrails. */
-export declare const REPORT_SOURCE_MAX_BYTES: number;
-export declare const REPORT_BUNDLE_MAX_BYTES: number;
-export declare const REPORT_SOURCE_MAX_FILES = 100;
 export declare const REPORT_CSP = "default-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'none'; frame-src 'none'; form-action 'none'";
-export type ReportLastRun = {
+type ReportLastRun = {
     at: string;
     status: "running" | "succeeded" | "failed";
     reason?: string;
@@ -175,10 +171,5 @@ type BuiltTarball = {
 };
 /** hq-deploy static payload format: index.html stays at the archive root. */
 export declare function buildReportTarball(files: StaticFile[]): BuiltTarball;
-/** Isolated test helper for creating a compliant report source. */
-export declare function makeReportFixture(html: string): {
-    directory: string;
-    cleanup: () => void;
-};
 export {};
 //# sourceMappingURL=report-publish.d.ts.map

package/dist/lib/report-publish.js

@@ -13,9 +13,9 @@ import { gzipSync } from "node:zlib";
 import { REPORT_PREVIEW_FILE } from "./report-snapshot.js";
 import { loadUpdateReportRunbook } from "./report-templates.js";
 /** Mirrors the deploy skill's static-report guardrails. */
-export const REPORT_SOURCE_MAX_BYTES = 25 * 1024 * 1024;
-export const REPORT_BUNDLE_MAX_BYTES = 10 * 1024 * 1024;
-export const REPORT_SOURCE_MAX_FILES = 100;
+const REPORT_SOURCE_MAX_BYTES = 25 * 1024 * 1024;
+const REPORT_BUNDLE_MAX_BYTES = 10 * 1024 * 1024;
+const REPORT_SOURCE_MAX_FILES = 100;
 export const REPORT_CSP = "default-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'none'; frame-src 'none'; form-action 'none'";
 /**
  * Write the files exactly as they will be published, protected index.html
@@ -418,10 +418,4 @@ function writeOctal(buffer, value, offset, length) {
     buffer.write(value.toString(8).padStart(length - 1, "0").slice(-length + 1), offset, length - 1, "ascii");
     buffer[offset + length - 1] = 0;
 }
-/** Isolated test helper for creating a compliant report source. */
-export function makeReportFixture(html) {
-    const directory = fs.mkdtempSync(path.join(os.tmpdir(), "hq-report-test-"));
-    fs.writeFileSync(path.join(directory, "index.html"), html);
-    return { directory, cleanup: () => fs.rmSync(directory, { recursive: true, force: true }) };
-}
 //# sourceMappingURL=report-publish.js.map

package/dist/lib/search-index/embed-lock.d.ts

@@ -11,13 +11,6 @@ export type EmbedLockProcessEvents = Pick<NodeJS.Process, 'once'> & {
     removeListener?: NodeJS.Process['removeListener'];
 };
 export type EmbedLockRunResult = 'ran' | 'skipped' | 'busy' | 'unavailable';
-/**
- * Serializes QMD writes started through HQ-managed hq-cli paths. A bare `qmd
- * update` / `qmd embed` (or another tool that does not call this module) cannot
- * participate, because qmd is a third-party package and does not know about
- * HQ's lock protocol.
- */
-export declare const EMBED_LOCK_NAME = "qmd-reindex-bg.lock";
 export declare function defaultEmbedLockDependencies(env?: NodeJS.ProcessEnv): EmbedLockDependencies;
 export declare function lockRoot(home: string): string;
 export declare function lockPath(home: string): string;

package/dist/lib/search-index/embed-lock.js

@@ -6,7 +6,7 @@ import * as path from 'node:path';
  * participate, because qmd is a third-party package and does not know about
  * HQ's lock protocol.
  */
-export const EMBED_LOCK_NAME = 'qmd-reindex-bg.lock';
+const EMBED_LOCK_NAME = 'qmd-reindex-bg.lock';
 export function defaultEmbedLockDependencies(env = process.env) {
     return {
         env,

package/dist/lib/search-index/index.d.ts

@@ -11,6 +11,7 @@ export type QmdProcessResult = {
      */
     signal?: NodeJS.Signals | string | null;
 };
+export type QmdUpdateEntryPath = 'index-sync';
 export type QmdProcessRunner = (bin: string, args: string[], options: {
     cwd?: string;
     env?: NodeJS.ProcessEnv;
@@ -113,6 +114,10 @@ export declare class QmdExitError extends Error {
     readonly stdout: string;
     readonly stderr: string;
     name: string;
+    /** Safe route labels for telemetry; raw qmd streams remain local to the error. */
+    entryPath?: QmdUpdateEntryPath;
+    /** Present only when the invoked executable is the bundled qmd. */
+    qmdVersion?: string;
     constructor(message: string, args: string[], status: number | null, stdout: string, stderr: string);
 }
 export declare class QmdCollectionMissingError extends QmdExitError {
@@ -507,6 +512,8 @@ export type ResolveQmdInvocationOptions = {
 export declare function resolveQmdInvocation(options?: ResolveQmdInvocationOptions): QmdInvocation;
 export type RunQmdOptions = {
     bin?: string;
+    /** Source of an update failure, used only for bounded Sentry tags. */
+    entryPath?: QmdUpdateEntryPath;
     cwd?: string;
     env?: NodeJS.ProcessEnv;
     runner?: QmdProcessRunner;

package/dist/lib/search-index/index.js

@@ -76,6 +76,10 @@ export class QmdExitError extends Error {
     stdout;
     stderr;
     name = 'QmdExitError';
+    /** Safe route labels for telemetry; raw qmd streams remain local to the error. */
+    entryPath;
+    /** Present only when the invoked executable is the bundled qmd. */
+    qmdVersion;
     constructor(message, args, status, stdout, stderr) {
         super(message);
         this.args = args;
@@ -1239,6 +1243,21 @@ function finishRunQmd(result, bin, args, attribution) {
     }
     throw exitError;
 }
+function finishRunQmdWithDiagnostics(result, bin, args, options, attribution) {
+    try {
+        return finishRunQmd(result, bin, args, attribution);
+    }
+    catch (error) {
+        if (error instanceof QmdExitError) {
+            if (args[0] === 'update' && options.entryPath)
+                error.entryPath = options.entryPath;
+            const bundledBins = [packageLocalBin(), packageLocalNodeEntry()].filter((candidate) => Boolean(candidate));
+            if (bundledBins.includes(bin))
+                error.qmdVersion = resolveQmdVersion();
+        }
+        throw error;
+    }
+}
 /** Run qmd with captured output and typed failures. */
 export function runQmd(args, options = {}) {
     // Legacy string-bin runner seam (tests and callers that inject a fake process):
@@ -1246,7 +1265,7 @@ export function runQmd(args, options = {}) {
     if (options.runner) {
         const bin = options.bin ?? resolveQmdBin({ env: options.env });
         const result = options.runner(bin, args, { cwd: options.cwd, env: options.env });
-        return finishRunQmd(result, bin, args);
+        return finishRunQmdWithDiagnostics(result, bin, args, options);
     }
     // Default path: resolve the full invocation (shell-free Node launcher preferred)
     // and spawn it through the shared Windows-aware plan. An explicit string bin is
@@ -1279,7 +1298,7 @@ export function runQmd(args, options = {}) {
     // genuinely missing qmd — instead of blaming the launcher for all three
     // (HQ-CLI-1A). `command` is the process actually spawned; `launcher` is qmd's
     // file identity.
-    return finishRunQmd(result, launcher, args, {
+    return finishRunQmdWithDiagnostics(result, launcher, args, options, {
         command: invocation.command,
         launcher,
         cwd: options.cwd,

package/dist/lib/search-index/load-gate.d.ts

@@ -22,10 +22,6 @@ export type LoadGateDependencies = {
     freemem: () => number;
     totalmem: () => number;
 };
-type CpuCounters = {
-    total: number;
-    idle: number;
-};
 export type EmbedLoadDecision = {
     action: 'embed';
     forced: false;
@@ -44,11 +40,8 @@ export declare class LoadGateConfigurationError extends Error {
     constructor(value: string);
 }
 export declare function defaultLoadGateDependencies(env?: NodeJS.ProcessEnv): LoadGateDependencies;
-export declare function parseProcStatAggregate(contents: string): CpuCounters | undefined;
-export declare function cpuBusyPercent(before: CpuCounters, after: CpuCounters): number | undefined;
 /** Sample aggregate CPU busy time over 200 ms, falling back only without /proc/stat. */
 export declare function measureCpuPercent(dependencies: LoadGateDependencies): number;
-export declare function memAvailableFraction(contents: string): number | undefined;
 /** Prefer Linux MemAvailable, because MemFree alone treats reclaimable cache as used memory. */
 export declare function measureMemoryPercent(dependencies: LoadGateDependencies): number;
 export declare function parseLoadThreshold(env: NodeJS.ProcessEnv): number | undefined;
@@ -61,5 +54,4 @@ export declare function loadGateStatePath(home: string): string;
 export declare function checkEmbedLoad(home: string, dependencies: LoadGateDependencies): EmbedLoadDecision;
 /** Reset the starvation counter only after qmd embed has actually returned successfully. */
 export declare function recordSuccessfulEmbed(home: string, dependencies: LoadGateDependencies): void;
-export {};
 //# sourceMappingURL=load-gate.d.ts.map

package/dist/lib/search-index/load-gate.js

@@ -46,7 +46,7 @@ function errorCode(error) {
 function missing(error) {
     return errorCode(error) === 'ENOENT';
 }
-export function parseProcStatAggregate(contents) {
+function parseProcStatAggregate(contents) {
     const line = contents.split('\n').find((candidate) => /^cpu\s+/.test(candidate));
     if (!line)
         return undefined;
@@ -58,7 +58,7 @@ export function parseProcStatAggregate(contents) {
     const idle = values[3] + values[4];
     return total > 0 && Number.isFinite(idle) ? { total, idle } : undefined;
 }
-export function cpuBusyPercent(before, after) {
+function cpuBusyPercent(before, after) {
     const totalDelta = after.total - before.total;
     const idleDelta = after.idle - before.idle;
     if (totalDelta <= 0 || idleDelta < 0)
@@ -117,7 +117,7 @@ export function measureCpuPercent(dependencies) {
         throw new Error('Cannot determine CPU busy time from /proc/stat.');
     return busy;
 }
-export function memAvailableFraction(contents) {
+function memAvailableFraction(contents) {
     const fields = new Map();
     for (const line of contents.split('\n')) {
         const match = /^(MemTotal|MemAvailable):\s+(\d+)\s+kB$/.exec(line.trim());