@indigoai-us/hq-cli 5.309.0 → 5.309.1

package/dist/commands/mcp-registration.js

@@ -242,10 +242,6 @@ export function isCodexInstalled(env) {
 export function claudeConfigPath(env) {
     return path.join(env.home, '.claude.json');
 }
-/** `~/.mcp.json` — the project-pinned Claude surface (a symlink on this host). */
-export function mcpJsonPath(env) {
-    return path.join(env.home, '.mcp.json');
-}
 /**
  * Built-in JSON {@link ConfigFormat} for the Claude surfaces. Pretty-prints with
  * a trailing newline; an empty doc is `{}`. Parsing the empty string is the
@@ -368,9 +364,9 @@ export function sanitizeParserMessage(message) {
 // Advisory O_EXCL lock (held across read->merge->write).
 // ---------------------------------------------------------------------------
 /** Default stale-lock timeout — a lock older than this whose PID is dead is broken. */
-export const DEFAULT_LOCK_STALE_MS = 30_000;
+const DEFAULT_LOCK_STALE_MS = 30_000;
 /** Default total time to wait for a held lock before giving up. */
-export const DEFAULT_LOCK_WAIT_MS = 10_000;
+const DEFAULT_LOCK_WAIT_MS = 10_000;
 /** The lockfile path for a target: `~/.<basename>.hqlock` (a sibling, hidden). */
 export function lockPathFor(target) {
     const dir = path.dirname(target);

package/dist/lib/core-utils/sentry-report.d.ts

@@ -18,7 +18,6 @@
 import * as Sentry from "@sentry/node";
 import type { CaptureContext, SeverityLevel } from "@sentry/node";
 export declare const DEFAULT_SENTRY_REPORT_TIMEOUT_MS = 750;
-export declare const MAX_SENTRY_REPORT_TIMEOUT_MS = 5000;
 export declare const MAX_SENTRY_REPORT_PAYLOAD_BYTES = 2048;
 export declare const MAX_SENTRY_REPORT_METADATA_VALUE_BYTES = 256;
 /**
@@ -34,11 +33,11 @@ export type HookSequenceEntry = {
     event: string;
     ms: number;
 };
-export type HookTimeoutDebugPhaseTiming = {
+type HookTimeoutDebugPhaseTiming = {
     phase: string;
     elapsed_ms: number;
 };
-export type HookTimeoutDebugContext = {
+type HookTimeoutDebugContext = {
     hook_name: string;
     hook_event: string;
     budget_ms: number;
@@ -52,9 +51,9 @@ export type HookTimeoutDebugContext = {
     spawn_ms?: number | "unavailable";
     process_count?: number | "unavailable";
 };
-export type SentryReportMetadataValue = string | number | boolean | HookSequenceEntry[] | HookTimeoutDebugContext;
+type SentryReportMetadataValue = string | number | boolean | HookSequenceEntry[] | HookTimeoutDebugContext;
 export type SentryReportMetadata = Record<string, SentryReportMetadataValue>;
-export type SentryReportEvent = {
+type SentryReportEvent = {
     type: string;
     message: string;
     fingerprint: string;
@@ -102,12 +101,6 @@ export type SentryReportResult = {
 export declare function readSentryReportStdin(stdin: AsyncIterable<Buffer | string>): Promise<string | null>;
 /** Unknown metadata is ignored before this cap is evaluated. */
 export declare function exceedsSentryReportMetadataKeyCap(keys: Iterable<string>): boolean;
-/**
- * Parse and validate the closed report schema without touching Sentry. The
- * function intentionally returns an ordinary result instead of throwing so a
- * hook can ignore the CLI exit code without creating an unhandled rejection.
- */
-export declare function parseSentryReportEvent(stdin: string): SentryReportResult;
 /**
  * Capture one validated Sentry message and wait only for the supplied bounded
  * flush budget. A zero result means the event entered the local transport and
@@ -117,4 +110,5 @@ export declare function parseSentryReportEvent(stdin: string): SentryReportResul
  * transport errors cannot echo event data back to a hook.
  */
 export declare function reportSentryEvent(stdin: string, options?: SentryReportOptions, dependencies?: SentryReportDependencies): Promise<SentryReportResult>;
+export {};
 //# sourceMappingURL=sentry-report.d.ts.map

package/dist/lib/core-utils/sentry-report.js

@@ -25,7 +25,7 @@ import { beforeSend } from "../../sentry-before-send.js";
 import { resolveLiveRoot } from "../../utils/hq-roots.js";
 import { hookTimeoutDebugContextEnabled } from "./hook-timeout-debug-context-flag.js";
 export const DEFAULT_SENTRY_REPORT_TIMEOUT_MS = 750;
-export const MAX_SENTRY_REPORT_TIMEOUT_MS = 5_000;
+const MAX_SENTRY_REPORT_TIMEOUT_MS = 5_000;
 export const MAX_SENTRY_REPORT_PAYLOAD_BYTES = 2_048;
 export const MAX_SENTRY_REPORT_METADATA_VALUE_BYTES = 256;
 const MAX_SENTRY_REPORT_TYPE_BYTES = 64;
@@ -349,7 +349,7 @@ function invalidInput() {
  * function intentionally returns an ordinary result instead of throwing so a
  * hook can ignore the CLI exit code without creating an unhandled rejection.
  */
-export function parseSentryReportEvent(stdin) {
+function parseSentryReportEvent(stdin) {
     if (byteLength(stdin) > MAX_SENTRY_REPORT_PAYLOAD_BYTES)
         return invalidInput();
     let parsed;

package/dist/lib/db/local.d.ts

@@ -23,11 +23,6 @@ export interface LocalDbStatus {
     /** Fingerprint of path for logs that prefer not to echo full home paths. */
     pathFingerprint: string;
 }
-/**
- * Short non-reversible fingerprint of a path (for status display).
- * Not a secret — just avoids dumping full home paths when preferred.
- */
-export declare function fingerprintPath(filePath: string): string;
 /**
  * Open (and create if missing) the company local vault DB with WAL mode.
  * Idempotent: reopening an existing file does not recreate or wipe it.

package/dist/lib/db/local.js

@@ -12,7 +12,7 @@ const MIGRATIONS_TABLE = "hq_schema_migrations";
  * Short non-reversible fingerprint of a path (for status display).
  * Not a secret — just avoids dumping full home paths when preferred.
  */
-export function fingerprintPath(filePath) {
+function fingerprintPath(filePath) {
     let h = 2166136261;
     for (let i = 0; i < filePath.length; i++) {
         h ^= filePath.charCodeAt(i);

package/dist/lib/db/migrate.d.ts

@@ -5,9 +5,7 @@
  *   companies/{company}/db/migrations/*.sql
  * Applied versions are recorded in hq_schema_migrations inside the local DB.
  */
-import type { LocalDb } from "./local.js";
 import type { LocalDbPathEnv } from "./paths.js";
-export declare const MIGRATIONS_TABLE = "hq_schema_migrations";
 export interface MigrateOptions extends LocalDbPathEnv {
     company: string;
     /**
@@ -24,16 +22,6 @@ export interface MigrateResult {
     head: string | null;
 }
 export declare function resolveMigrationsDir(hqRoot: string, companySlug: string): string;
-/**
- * Ensure migrations directory exists (creates empty dir on first migrate).
- */
-export declare function ensureMigrationsDir(hqRoot: string, companySlug: string): string;
-/**
- * List pending migration files in lexical/version order (filename sort).
- */
-export declare function listMigrationFiles(migrationsDir: string): string[];
-export declare function ensureMigrationsLedger(db: LocalDb): void;
-export declare function listAppliedVersions(db: LocalDb): Set<string>;
 /**
  * Apply pending migrations. On failure, does not mark the failed file applied.
  */

package/dist/lib/db/migrate.js

@@ -9,7 +9,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { openLocalDb, readMigrationHead } from "./local.js";
 import { normalizeCompanySlugForLocalDb } from "./paths.js";
-export const MIGRATIONS_TABLE = "hq_schema_migrations";
+const MIGRATIONS_TABLE = "hq_schema_migrations";
 export function resolveMigrationsDir(hqRoot, companySlug) {
     const slug = normalizeCompanySlugForLocalDb(companySlug);
     return path.join(hqRoot, "companies", slug, "db", "migrations");
@@ -17,7 +17,7 @@ export function resolveMigrationsDir(hqRoot, companySlug) {
 /**
  * Ensure migrations directory exists (creates empty dir on first migrate).
  */
-export function ensureMigrationsDir(hqRoot, companySlug) {
+function ensureMigrationsDir(hqRoot, companySlug) {
     const dir = resolveMigrationsDir(hqRoot, companySlug);
     fs.mkdirSync(dir, { recursive: true });
     return dir;
@@ -25,7 +25,7 @@ export function ensureMigrationsDir(hqRoot, companySlug) {
 /**
  * List pending migration files in lexical/version order (filename sort).
  */
-export function listMigrationFiles(migrationsDir) {
+function listMigrationFiles(migrationsDir) {
     if (!fs.existsSync(migrationsDir))
         return [];
     return fs
@@ -33,7 +33,7 @@ export function listMigrationFiles(migrationsDir) {
         .filter((f) => f.endsWith(".sql"))
         .sort((a, b) => a.localeCompare(b, "en"));
 }
-export function ensureMigrationsLedger(db) {
+function ensureMigrationsLedger(db) {
     db.exec(`
     CREATE TABLE IF NOT EXISTS ${MIGRATIONS_TABLE} (
       version TEXT PRIMARY KEY NOT NULL,
@@ -41,7 +41,7 @@ export function ensureMigrationsLedger(db) {
     );
   `);
 }
-export function listAppliedVersions(db) {
+function listAppliedVersions(db) {
     ensureMigrationsLedger(db);
     const rows = db
         .prepare(`SELECT version FROM ${MIGRATIONS_TABLE} ORDER BY version`)

package/dist/lib/db/sql.d.ts

@@ -27,14 +27,6 @@ export interface SqlRunResult {
     changes: number;
     readonly: boolean;
 }
-export declare function stripSqlNoise(sql: string): string;
-export declare function isWriteSql(sql: string): boolean;
-/**
- * Statements that must never run via `hq db sql`, even with --write.
- * ATTACH/DETACH would let a company-scoped session open another company's
- * vault.db by absolute path (category-1 isolation).
- */
-export declare function assertSqlAllowed(sql: string): void;
 /**
  * Resolve which file path to open, enforcing company isolation by default.
  */
@@ -44,6 +36,4 @@ export declare function resolveSqlDbPath(opts: SqlRunOptions): string;
  */
 export declare function runLocalSql(opts: SqlRunOptions): SqlRunResult;
 export declare function formatSqlResult(result: SqlRunResult, format?: "jsonl" | "table"): string;
-/** Test helper: company dir for isolation assertions. */
-export declare function companyLocalDbDir(company: string, env?: LocalDbPathEnv): string;
 //# sourceMappingURL=sql.d.ts.map

package/dist/lib/db/sql.js

@@ -7,17 +7,17 @@
  */
 import Database from "better-sqlite3";
 import { openLocalDb } from "./local.js";
-import { normalizeCompanySlugForLocalDb, resolveLocalDbDir, resolveLocalDbPath, } from "./paths.js";
+import { normalizeCompanySlugForLocalDb, resolveLocalDbPath, } from "./paths.js";
 const WRITE_PATTERN = /^\s*(INSERT|UPDATE|DELETE|REPLACE|CREATE|DROP|ALTER|TRUNCATE|REINDEX|VACUUM|BEGIN|COMMIT|ROLLBACK)\b/i;
 /** Always forbidden — opens other files/DBs and breaks company path isolation. */
 const FORBIDDEN_SQL_PATTERN = /\b(ATTACH|DETACH|LOAD_EXTENSION)\b/i;
-export function stripSqlNoise(sql) {
+function stripSqlNoise(sql) {
     return sql
         .replace(/^\s*--[^\n]*\n/gm, "")
         .replace(/^\s*\/\*[\s\S]*?\*\//gm, "")
         .trim();
 }
-export function isWriteSql(sql) {
+function isWriteSql(sql) {
     return WRITE_PATTERN.test(stripSqlNoise(sql));
 }
 /**
@@ -25,7 +25,7 @@ export function isWriteSql(sql) {
  * ATTACH/DETACH would let a company-scoped session open another company's
  * vault.db by absolute path (category-1 isolation).
  */
-export function assertSqlAllowed(sql) {
+function assertSqlAllowed(sql) {
     const stripped = stripSqlNoise(sql);
     if (FORBIDDEN_SQL_PATTERN.test(stripped)) {
         throw new Error("ATTACH/DETACH/LOAD_EXTENSION are not allowed via hq db sql (tenant isolation); use the company-canonical local path only");
@@ -122,8 +122,4 @@ export function formatSqlResult(result, format = "jsonl") {
         .join("\n");
     return body ? `${header}\n${body}` : header;
 }
-/** Test helper: company dir for isolation assertions. */
-export function companyLocalDbDir(company, env) {
-    return resolveLocalDbDir(company, env);
-}
 //# sourceMappingURL=sql.js.map

package/dist/lib/doctor/checks/codex-wiring.js

@@ -42,6 +42,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { parse as parseToml } from "smol-toml";
+import { collectCommands, fileState } from "../shared.js";
 import { ALLOWED_DIVERGENCE_RELPATH, loadAllowedDivergence, } from "../allowed-divergence.js";
 /** Basename of the single-adapter script the current architecture routes to. */
 const CODEX_ADAPTER_BASENAME = "hq-codex-hook-adapter.sh";
@@ -549,44 +550,11 @@ function extractBraceBlock(source, from) {
     return source.slice(open + 1);
 }
 // --- shared low-level helpers --------------------------------------------------
-/** Collect every `command` string from a `{hooks:{Event:[{hooks:[…]}]}}` doc. */
-function collectCommands(parsed) {
-    const commands = [];
-    if (!parsed || typeof parsed !== "object")
-        return commands;
-    const hooks = parsed.hooks;
-    if (!hooks || typeof hooks !== "object")
-        return commands;
-    for (const entries of Object.values(hooks)) {
-        if (!Array.isArray(entries))
-            continue;
-        for (const entry of entries) {
-            const inner = entry?.hooks;
-            if (!Array.isArray(inner))
-                continue;
-            for (const hook of inner) {
-                const command = hook?.command;
-                if (typeof command === "string")
-                    commands.push(command);
-            }
-        }
-    }
-    return commands;
-}
 function resolvePath(hqRoot, target) {
     if (!target)
         return null;
     return path.isAbsolute(target) ? target : path.resolve(hqRoot, target);
 }
-function fileState(target) {
-    try {
-        const stat = fs.statSync(target);
-        return { present: stat.isFile(), executable: (stat.mode & 0o111) !== 0 };
-    }
-    catch {
-        return { present: false, executable: false };
-    }
-}
 function filesEqual(a, b) {
     try {
         return fs.readFileSync(a).equals(fs.readFileSync(b));

package/dist/lib/doctor/checks/grok-wiring.js

@@ -22,6 +22,7 @@
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
+import { collectCommands, fileState } from "../shared.js";
 /** The command a user runs to install the user-global Grok bridge. */
 export const GROK_TRUST_REMEDIATION = "bash core/scripts/grok-trust.sh";
 /** Files that grok-trust.sh installs into `~/.grok/hooks/` for the bridge. */
@@ -149,38 +150,4 @@ function bridgeInstalled(bridgeDir) {
     }
     return false;
 }
-// --- shared low-level helpers --------------------------------------------------
-/** Collect every `command` string from a `{hooks:{Event:[{hooks:[…]}]}}` doc. */
-function collectCommands(parsed) {
-    const commands = [];
-    if (!parsed || typeof parsed !== "object")
-        return commands;
-    const hooks = parsed.hooks;
-    if (!hooks || typeof hooks !== "object")
-        return commands;
-    for (const entries of Object.values(hooks)) {
-        if (!Array.isArray(entries))
-            continue;
-        for (const entry of entries) {
-            const inner = entry?.hooks;
-            if (!Array.isArray(inner))
-                continue;
-            for (const hook of inner) {
-                const command = hook?.command;
-                if (typeof command === "string")
-                    commands.push(command);
-            }
-        }
-    }
-    return commands;
-}
-function fileState(target) {
-    try {
-        const stat = fs.statSync(target);
-        return { present: stat.isFile(), executable: (stat.mode & 0o111) !== 0 };
-    }
-    catch {
-        return { present: false, executable: false };
-    }
-}
 //# sourceMappingURL=grok-wiring.js.map

package/dist/lib/doctor/deep/effects.js

@@ -36,6 +36,7 @@ import { spawnSync } from "node:child_process";
 import { createHash } from "node:crypto";
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { isRecord } from "../shared.js";
 /**
  * Parse a fixture case's `effects:` field into a list of {@link
  * EffectExpectation}. Returns the list, or an error string naming what was
@@ -223,7 +224,4 @@ function hashFile(abs) {
         return null;
     }
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 //# sourceMappingURL=effects.js.map

package/dist/lib/doctor/deep/sandbox.js

@@ -39,6 +39,7 @@ import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
 import * as yaml from "js-yaml";
+import { isRecord } from "../shared.js";
 import { classifyCaseStatus, looksLikeFixture, } from "../fixtures/schema.js";
 import { HOOK_TESTS_RELDIR, registeredHookIds } from "../fixtures/discover.js";
 import { isSideEffectingHookId } from "./classify.js";
@@ -566,7 +567,4 @@ function oneLine(text) {
     const collapsed = text.replace(/\s+/g, " ").trim();
     return collapsed.length > 200 ? `${collapsed.slice(0, 197)}…` : collapsed;
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 //# sourceMappingURL=sandbox.js.map

package/dist/lib/doctor/fixtures/schema.js

@@ -27,6 +27,7 @@
  *     module owns only the classification semantics, so both the doctor and its
  *     tests agree on what a case outcome means.
  */
+import { isRecord } from "../shared.js";
 /**
  * Every fixture schema version this build of the CLI can interpret. A fixture
  * declaring a version outside this set is reported UNKNOWN, never PASS — see
@@ -242,7 +243,4 @@ export function classifyCaseStatus(met, expectedFailure) {
         return met ? "WARN" : "KNOWN-DEFECT";
     return met ? "PASS" : "FAIL";
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 //# sourceMappingURL=schema.js.map

package/dist/lib/doctor/shared.d.ts

@@ -0,0 +1,8 @@
+/** Collect every `command` string from a `{hooks:{Event:[{hooks:[…]}]}}` doc. */
+export declare function collectCommands(parsed: unknown): string[];
+export declare function fileState(target: string): {
+    present: boolean;
+    executable: boolean;
+};
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+//# sourceMappingURL=shared.d.ts.map

package/dist/lib/doctor/shared.js

@@ -0,0 +1,38 @@
+import * as fs from "node:fs";
+/** Collect every `command` string from a `{hooks:{Event:[{hooks:[…]}]}}` doc. */
+export function collectCommands(parsed) {
+    const commands = [];
+    if (!parsed || typeof parsed !== "object")
+        return commands;
+    const hooks = parsed.hooks;
+    if (!hooks || typeof hooks !== "object")
+        return commands;
+    for (const entries of Object.values(hooks)) {
+        if (!Array.isArray(entries))
+            continue;
+        for (const entry of entries) {
+            const inner = entry?.hooks;
+            if (!Array.isArray(inner))
+                continue;
+            for (const hook of inner) {
+                const command = hook?.command;
+                if (typeof command === "string")
+                    commands.push(command);
+            }
+        }
+    }
+    return commands;
+}
+export function fileState(target) {
+    try {
+        const stat = fs.statSync(target);
+        return { present: stat.isFile(), executable: (stat.mode & 0o111) !== 0 };
+    }
+    catch {
+        return { present: false, executable: false };
+    }
+}
+export function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=shared.js.map

package/dist/lib/lanes/autopilot.js

@@ -3,6 +3,7 @@ import * as path from "node:path";
 import { laneRunsOnHost } from "./admission.js";
 import { appendDropboxMessage } from "./dropbox.js";
 import { LanesError } from "./errors.js";
+import { resolveLaneCompany } from "./lane-company.js";
 import { readLanesRegistryFlag } from "./registry-flag.js";
 import { readAllLanes } from "./store.js";
 export const LEAD_AUTOPILOT_FLAG = "lanes.lead-autopilot";
@@ -418,7 +419,8 @@ async function runLeadAutopilotPassUnlocked(input) {
             result.skipped.push({ lead_lane: registered.lane, reason: "lead_lane_missing" });
             continue;
         }
-        if (lead.company === null) {
+        const company = resolveLaneCompany(hqRoot, lead).company;
+        if (!company) {
             result.skipped.push({ lead_lane: lead.lane_id, reason: "lead_company_unresolved" });
             continue;
         }
@@ -433,16 +435,16 @@ async function runLeadAutopilotPassUnlocked(input) {
         }
         let stateChanged = false;
         try {
-            const enabled = await (input.readFlag ?? readLanesRegistryFlag)(LEAD_AUTOPILOT_FLAG, { company: lead.company });
+            const enabled = await (input.readFlag ?? readLanesRegistryFlag)(LEAD_AUTOPILOT_FLAG, { company });
             if (!enabled) {
                 result.skipped.push({ lead_lane: lead.lane_id, reason: "flag_off" });
                 continue;
             }
-            const status = readStatus(hqRoot, registered.status, lead.company.slug);
+            const status = readStatus(hqRoot, registered.status, company.slug);
             const statusUpdatedAt = typeof status.updated_at === "string" && Number.isFinite(Date.parse(status.updated_at))
                 ? new Date(Date.parse(status.updated_at)).toISOString()
                 : undefined;
-            const stories = projectStories(hqRoot, registered.prd, lead.company.slug, lead.project_id);
+            const stories = projectStories(hqRoot, registered.prd, company.slug, lead.project_id);
             const children = lanes.filter((lane) => lane.senior.kind === "lane" && lane.senior.id === lead.lane_id);
             const planned = planLeadAutopilotWakes({
                 lead,

package/dist/lib/monitor.d.ts

@@ -4,15 +4,12 @@ export declare const MONITOR_FLAG = "monitor.enabled";
 export declare const MONITOR_FLAG_DEFAULT = false;
 export declare const MONITOR_DEFAULT_TIMEOUT_MS: number;
 export declare const MONITOR_DEFAULT_CHECKIN_MS: number;
-export declare const MONITOR_PROMPT_CACHE_TTL_MS: number;
 export declare const MONITOR_BATCH_WINDOW_MS = 200;
 export declare const MONITOR_POLL_INTERVAL_MS = 1000;
 export declare const MONITOR_RATE_WINDOW_MS = 10000;
 /** Sustained stdout floods stop after 3 windows; the per-window cap can be overridden with HQ_MONITOR_MAX_EVENTS_PER_WINDOW. */
 export declare const MONITOR_MAX_EVENTS_PER_WINDOW = 60;
 export declare const MONITOR_MAX_FLOOD_WINDOWS = 3;
-export declare const MONITOR_LOCK_STALE_MS = 30000;
-export declare const MONITOR_MAX_TIMER_DELAY_MS = 2147000000;
 export type MonitorTarget = {
     kind: "lane";
     laneId: string;
@@ -38,7 +35,7 @@ export interface NearestMonitorRuntime {
 export interface MonitorRuntimeIdentity extends NearestMonitorRuntime {
     starttime: number;
 }
-export interface MonitorSessionOwner {
+interface MonitorSessionOwner {
     pid: number;
     starttime: number | null;
 }
@@ -107,7 +104,6 @@ export interface MonitorCheckinResult {
 /** This guard is first in monitor start so a conflicting invocation has no side effects. */
 export declare function assertMonitorTimeoutCompatibility(persistent: boolean, timeoutProvided: boolean): void;
 export declare function parseMonitorDuration(value: string, kind: "timeout" | "checkin"): number;
-export declare function assertMonitorSessionId(sessionId: string): void;
 export declare function parseMonitorTarget(value: string): MonitorTarget;
 export declare function monitorTargetKey(target: MonitorTarget): string;
 export declare function detectMonitorTarget(options: DetectMonitorTargetOptions): MonitorTarget;
@@ -119,7 +115,6 @@ export declare function findNearestMonitorRuntime(options: {
 export declare function monitorSessionDir(hqRoot: string, provider: LaneProvider, sessionId: string): string;
 export declare function monitorSessionHasActiveMarkers(hqRoot: string, provider: LaneProvider, sessionId: string): boolean;
 export declare function monitorSessionHasActiveMarkerForOwner(hqRoot: string, provider: LaneProvider, sessionId: string, owner: MonitorRuntimeIdentity): boolean;
-export declare function monitorSessionHasInboxFile(hqRoot: string, provider: LaneProvider, sessionId: string): boolean;
 export declare function monitorSessionInboxHasEvents(hqRoot: string, provider: LaneProvider, sessionId: string): boolean;
 export declare function monitorSessionHasWork(hqRoot: string, provider: LaneProvider, sessionId: string): boolean;
 export declare function monitorDir(hqRoot: string, monitorId: string): string;
@@ -150,4 +145,5 @@ export declare function recordMonitorTargetDeliveryAtPath(activityPath: string,
 export declare function formatElapsed(ms: number): string;
 export declare function runMonitorCheckinTick(hqRoot: string, targetKey: string, deps: MonitorCheckinDeps): Promise<MonitorCheckinResult>;
 export declare function readMonitorPidLiveness(pid: number | null, starttime: number | null, readStarttime?: (pid: number) => number | null): boolean;
+export {};
 //# sourceMappingURL=monitor.d.ts.map

package/dist/lib/monitor.js

@@ -9,15 +9,15 @@ export const MONITOR_FLAG = "monitor.enabled";
 export const MONITOR_FLAG_DEFAULT = false;
 export const MONITOR_DEFAULT_TIMEOUT_MS = 5 * 60_000;
 export const MONITOR_DEFAULT_CHECKIN_MS = 55 * 60_000;
-export const MONITOR_PROMPT_CACHE_TTL_MS = 60 * 60_000;
+const MONITOR_PROMPT_CACHE_TTL_MS = 60 * 60_000;
 export const MONITOR_BATCH_WINDOW_MS = 200;
 export const MONITOR_POLL_INTERVAL_MS = 1_000;
 export const MONITOR_RATE_WINDOW_MS = 10_000;
 /** Sustained stdout floods stop after 3 windows; the per-window cap can be overridden with HQ_MONITOR_MAX_EVENTS_PER_WINDOW. */
 export const MONITOR_MAX_EVENTS_PER_WINDOW = 60;
 export const MONITOR_MAX_FLOOD_WINDOWS = 3;
-export const MONITOR_LOCK_STALE_MS = 30_000;
-export const MONITOR_MAX_TIMER_DELAY_MS = 2_147_000_000;
+const MONITOR_LOCK_STALE_MS = 30_000;
+const MONITOR_MAX_TIMER_DELAY_MS = 2_147_000_000;
 const SESSION_ID_RE = /^[A-Za-z0-9_-]{1,128}$/;
 const SAFE_LANE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 const RUNTIME_ENV = {
@@ -59,7 +59,7 @@ function assertLaneTargetId(laneId) {
         throw monitorError("monitor_target_invalid", `Invalid lane target ${JSON.stringify(laneId)}.`, { lane_id: laneId });
     }
 }
-export function assertMonitorSessionId(sessionId) {
+function assertMonitorSessionId(sessionId) {
     if (!SESSION_ID_RE.test(sessionId)) {
         throw monitorError("monitor_session_id_invalid", "Session ids must contain only letters, numbers, underscores, or hyphens and be 1–128 characters long.", { session_id: sessionId });
     }
@@ -154,7 +154,7 @@ export function monitorSessionHasActiveMarkerForOwner(hqRoot, provider, sessionI
             && markerOwner.starttime === owner.starttime;
     });
 }
-export function monitorSessionHasInboxFile(hqRoot, provider, sessionId) {
+function monitorSessionHasInboxFile(hqRoot, provider, sessionId) {
     return fs.existsSync(path.join(monitorSessionDir(hqRoot, provider, sessionId), "dropbox", "inbox.jsonl"));
 }
 export function monitorSessionInboxHasEvents(hqRoot, provider, sessionId) {

package/dist/lib/report-publish.d.ts

@@ -1,9 +1,5 @@
-/** Mirrors the deploy skill's static-report guardrails. */
-export declare const REPORT_SOURCE_MAX_BYTES: number;
-export declare const REPORT_BUNDLE_MAX_BYTES: number;
-export declare const REPORT_SOURCE_MAX_FILES = 100;
 export declare const REPORT_CSP = "default-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'none'; frame-src 'none'; form-action 'none'";
-export type ReportLastRun = {
+type ReportLastRun = {
     at: string;
     status: "running" | "succeeded" | "failed";
     reason?: string;
@@ -175,10 +171,5 @@ type BuiltTarball = {
 };
 /** hq-deploy static payload format: index.html stays at the archive root. */
 export declare function buildReportTarball(files: StaticFile[]): BuiltTarball;
-/** Isolated test helper for creating a compliant report source. */
-export declare function makeReportFixture(html: string): {
-    directory: string;
-    cleanup: () => void;
-};
 export {};
 //# sourceMappingURL=report-publish.d.ts.map

package/dist/lib/report-publish.js

@@ -13,9 +13,9 @@ import { gzipSync } from "node:zlib";
 import { REPORT_PREVIEW_FILE } from "./report-snapshot.js";
 import { loadUpdateReportRunbook } from "./report-templates.js";
 /** Mirrors the deploy skill's static-report guardrails. */
-export const REPORT_SOURCE_MAX_BYTES = 25 * 1024 * 1024;
-export const REPORT_BUNDLE_MAX_BYTES = 10 * 1024 * 1024;
-export const REPORT_SOURCE_MAX_FILES = 100;
+const REPORT_SOURCE_MAX_BYTES = 25 * 1024 * 1024;
+const REPORT_BUNDLE_MAX_BYTES = 10 * 1024 * 1024;
+const REPORT_SOURCE_MAX_FILES = 100;
 export const REPORT_CSP = "default-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'none'; frame-src 'none'; form-action 'none'";
 /**
  * Write the files exactly as they will be published, protected index.html
@@ -418,10 +418,4 @@ function writeOctal(buffer, value, offset, length) {
     buffer.write(value.toString(8).padStart(length - 1, "0").slice(-length + 1), offset, length - 1, "ascii");
     buffer[offset + length - 1] = 0;
 }
-/** Isolated test helper for creating a compliant report source. */
-export function makeReportFixture(html) {
-    const directory = fs.mkdtempSync(path.join(os.tmpdir(), "hq-report-test-"));
-    fs.writeFileSync(path.join(directory, "index.html"), html);
-    return { directory, cleanup: () => fs.rmSync(directory, { recursive: true, force: true }) };
-}
 //# sourceMappingURL=report-publish.js.map

package/dist/lib/search-index/index.d.ts

@@ -11,6 +11,7 @@ export type QmdProcessResult = {
      */
     signal?: NodeJS.Signals | string | null;
 };
+export type QmdUpdateEntryPath = 'index-sync';
 export type QmdProcessRunner = (bin: string, args: string[], options: {
     cwd?: string;
     env?: NodeJS.ProcessEnv;
@@ -113,6 +114,10 @@ export declare class QmdExitError extends Error {
     readonly stdout: string;
     readonly stderr: string;
     name: string;
+    /** Safe route labels for telemetry; raw qmd streams remain local to the error. */
+    entryPath?: QmdUpdateEntryPath;
+    /** Present only when the invoked executable is the bundled qmd. */
+    qmdVersion?: string;
     constructor(message: string, args: string[], status: number | null, stdout: string, stderr: string);
 }
 export declare class QmdCollectionMissingError extends QmdExitError {
@@ -507,6 +512,8 @@ export type ResolveQmdInvocationOptions = {
 export declare function resolveQmdInvocation(options?: ResolveQmdInvocationOptions): QmdInvocation;
 export type RunQmdOptions = {
     bin?: string;
+    /** Source of an update failure, used only for bounded Sentry tags. */
+    entryPath?: QmdUpdateEntryPath;
     cwd?: string;
     env?: NodeJS.ProcessEnv;
     runner?: QmdProcessRunner;