@indigoai-us/hq-cli 5.310.0 → 5.311.1

package/dist/commands/core-checkpoint.d.ts

@@ -36,21 +36,6 @@ export declare const CHECKPOINT_REPLY_REMINDER: string;
  * demands the findings), so the conditional half still points there.
  */
 export declare const CHECKPOINT_IDLE_REPLY_REMINDER: string;
-/**
- * Kept in TypeScript rather than in a bundled asset: it is an instruction to
- * a locally-installed agent, not a scaffold script that should be packaged.
- */
-export declare const SIBLING_PROMPT_TEMPLATE = "You are the HQ checkpoint sibling \u2014 a background maintenance agent for this\nHQ install. Your parent session's state is in <payloadPath>. Work\nquietly and do not ask questions; if something is ambiguous, record it in the\nreport instead of guessing.\n\n1. Read the payload. If it lists a transcript path that exists, read its tail (~400 lines)\n   both for session context and to extract additional reusable learnings/insights\n   the parent did not pass explicitly. Never quote secrets\n   or tokens from the transcript. If .claude/skills/checkpoint/SKILL.md exists\n   under this HQ root, read it and follow it wherever it goes beyond these instructions;\n   the write bounds below always win over the skill text.\n2. Upgrade the thread file named in the payload IN PLACE: verify/repair its\n   JSON; fill git.remote_url, git.initial_commit, git.commits_made, and\n   git.knowledge_repos by scanning core/knowledge/public/*,\n   core/knowledge/private/*, personal/knowledge/*, and companies/*/knowledge\n   for symlinks or directories containing .git, recording dirty repositories\n   as {\"<name>\": {\"commit\": \"<short>\", \"dirty\": true}}. Fill worker,\n   next_steps, and insights; set type to \"checkpoint\"; then rename the file to\n   drop -auto- from its filename. Use the renamed path in every reference you\n   write afterwards.\n3. For every explicit or transcript-derived learning that is a reusable rule,\n   FIRST search the existing policies for one the learning refines, contradicts\n   or duplicates. Then take exactly one of these actions and name it in the\n   report \u2014 the policy set is curated, not append-only:\n   - AMEND an existing policy in place when the learning sharpens it, narrows\n     its scope, or adds a case, and the rule as written is still correct.\n   - SUPERSEDE it when the learning contradicts it: rewrite the rule to what is\n     now true and record inside the file what changed and why.\n   - MERGE near-duplicates into the single best-named file, then delete the\n     files you merged away.\n   - CREATE a new policy only when no existing policy covers the rule.\n   Follow core/knowledge/public/hq-core/policies-spec.md. Write under\n   personal/policies/ or, only when the payload names a company and the rule is\n   company-specific, companies/<company>/policies/.\n   DELETION BOUNDS: delete a policy only as the MERGE or SUPERSEDE step above,\n   only inside those two directories, and never one whose body marks it HARD \u2014\n   if a hard policy now looks wrong, leave it untouched and flag it in the\n   report for a human to decide. Never delete a file you have not read.\n   Apply the same curation to durable facts (not rules) under\n   personal/knowledge/ or companies/<company>/knowledge/: correct a stale fact\n   in place rather than appending a second, contradictory copy of it.\n   Store up to two explicit or transcript-derived insights per\n   core/knowledge/public/hq-core/insights-spec.md when present, otherwise\n   workspace/insights/.\n4. Close an active session journal fail-soft with\n   bash .claude/skills/_shared/journal.sh close \"<project_dir>\" \"<one-line synthesis>\".\n   Write a legacy checkpoint JSON under workspace/checkpoints/<id>.json with\n   id, created_at, summary, files, and next_steps for backward compatibility.\n5. Update workspace/threads/recent.md and regenerate\n   workspace/threads/INDEX.md. For each company whose knowledge path appears\n   in files_touched, regenerate companies/<company>/knowledge/INDEX.md under\n   core/knowledge/public/hq-core/index-md-spec.md. Mechanical index generation\n   is allowed for those companies, but knowledge/policy content writes remain\n   restricted to the payload's named company.\n<ontologyStep>6. Run .claude/skills/document-release/SKILL.md best-effort when it exists;\n   skip silently on any failure. Hook or automation improvements go ONLY under\n   personal/hooks/ as proposals.\n7. WRITE BOUNDS: you may write only under personal/, workspace/, and companies/<company>/ as constrained above. You must NEVER write into .claude/, core/, .agents/, .codex/, repos/, or anywhere outside the HQ root.\n8. Write <runDir>/report.md \u2014 full prose: what you read, what you changed\n   (paths), and what you skipped and why. List every policy or knowledge file\n   you amended, superseded, merged or deleted with the reason, so a human can\n   audit and reverse it; a deletion you do not name in the report is a defect.\n   Then drain the queue: while\n   workspace/checkpoints/sibling/pending.jsonl exists and is non-empty, claim\n   it atomically by renaming it aside \u2014\n   mv workspace/checkpoints/sibling/pending.jsonl <runDir>/pending-claimed-N.jsonl\n   (N counting up from 2) \u2014 and process the claimed payloads with this same\n   flow. Repeat until a claim finds nothing left, then update the report.\n   NEVER read the queue and truncate it in place: a payload appended between\n   your read and the truncate is lost, and its checkpoint is never enriched.\n";
-/**
- * Rendered into the sibling prompt only when the payload names a company. The
- * flag check happens inside `hq core ontology plan`, in the sibling, because
- * the checkpoint parent performs no network I/O. Only this run's own payload
- * gets the step. A queued payload's company files are recorded as queued
- * touches when it is queued (CO-59), and a later plan for that company takes
- * them while checkpoint.ontology.queued-touches is on; a run with no company
- * of its own gets the step for the company whose touches waited longest.
- */
-export declare const SIBLING_ONTOLOGY_STEP = "5b. ONTOLOGY (this run's own payload only; skip it for claimed queue payloads).\n   Run: hq core ontology plan --run-dir \"<runDir>\" --hq-root \"<hqRoot>\"\n   If it prints \"ontology: skipped\", do nothing more for this step. Otherwise\n   read <runDir>/ontology-plan.json, follow its \"instructions\" exactly, and\n   write <runDir>/ontology-candidates.json. Read only the files and line\n   ranges the plan lists. Then run:\n   hq core ontology apply --run-dir \"<runDir>\" --hq-root \"<hqRoot>\"\n   Never write under the company's ontology/ folder yourself, and never edit\n   payload.json or ontology-plan.json. Copy the command's one-line output into\n   the report. If either command fails, record the error and continue.\n";
 export declare function renderSiblingPrompt(runDir: string, payloadPath: string, options?: {
     company?: string | null;
     hqRoot?: string;
@@ -84,15 +69,6 @@ export declare function autoBackendPreference(preferGrok?: boolean): SpawnableBa
  * registry; a flag change takes effect from the checkpoint after the next plan.
  */
 export declare function companyPrefersGrok(liveRoot: string, companySlug: string | null | undefined): boolean;
-/**
- * Whether the maintenance sibling may run at all. The process environment wins
- * over the settings file, so a one-off `HQ_CHECKPOINT_AGENT=0 hq core
- * checkpoint …` still works and a host that exports the settings `env` block
- * (Claude Code does) agrees with a host that does not.
- */
-export declare function siblingEnabledBySetting(liveRoot: string): boolean;
-/** The sibling's environment: the caller's, minus lane identity. */
-export declare function siblingEnv(base: NodeJS.ProcessEnv, backend: SpawnableBackend): NodeJS.ProcessEnv;
 export declare function siblingArgs(backend: SpawnableBackend, prompt: string): string[];
 /** Attach the native checkpoint command to the hidden `hq core` group. */
 export declare function registerCoreCheckpointCommand(core: Command): void;

package/dist/commands/core-checkpoint.js

@@ -115,7 +115,7 @@ function printError(line) {
  * Kept in TypeScript rather than in a bundled asset: it is an instruction to
  * a locally-installed agent, not a scaffold script that should be packaged.
  */
-export const SIBLING_PROMPT_TEMPLATE = `You are the HQ checkpoint sibling — a background maintenance agent for this
+const SIBLING_PROMPT_TEMPLATE = `You are the HQ checkpoint sibling — a background maintenance agent for this
 HQ install. Your parent session's state is in <payloadPath>. Work
 quietly and do not ask questions; if something is ambiguous, record it in the
 report instead of guessing.
@@ -195,7 +195,7 @@ report instead of guessing.
  * them while checkpoint.ontology.queued-touches is on; a run with no company
  * of its own gets the step for the company whose touches waited longest.
  */
-export const SIBLING_ONTOLOGY_STEP = `5b. ONTOLOGY (this run's own payload only; skip it for claimed queue payloads).
+const SIBLING_ONTOLOGY_STEP = `5b. ONTOLOGY (this run's own payload only; skip it for claimed queue payloads).
    Run: hq core ontology plan --run-dir "<runDir>" --hq-root "<hqRoot>"
    If it prints "ontology: skipped", do nothing more for this step. Otherwise
    read <runDir>/ontology-plan.json, follow its "instructions" exactly, and
@@ -784,7 +784,7 @@ function resolveSwitchSetting(liveRoot, key) {
  * checkpoint …` still works and a host that exports the settings `env` block
  * (Claude Code does) agrees with a host that does not.
  */
-export function siblingEnabledBySetting(liveRoot) {
+function siblingEnabledBySetting(liveRoot) {
     return resolveSwitchSetting(liveRoot, SIBLING_SETTING) ?? true;
 }
 /** Rejects an unknown `--backend` without paying for the probe that resolves one. */
@@ -814,7 +814,7 @@ function resolveBackend(requested, liveRoot, company) {
  */
 const LANE_ENV_KEYS = ["HQ_LANE_ID", "HQ_PROJECT_ID", "HQ_STORY_ID", "HQ_POLICY_WORKER_DIR"];
 /** The sibling's environment: the caller's, minus lane identity. */
-export function siblingEnv(base, backend) {
+function siblingEnv(base, backend) {
     const vars = { ...base };
     for (const name of LANE_ENV_KEYS)
         delete vars[name];

package/dist/commands/core-command-catalog.js

@@ -46,7 +46,7 @@ export function fastScaffoldListingMismatches(listing, fastScripts) {
         else if (fast.kind === "shell" && listed.asset !== fast.asset) {
             mismatches.push(`${fast.name} lists ${listed.asset ?? "no asset"}, fast path uses ${fast.asset ?? "no asset"}`);
         }
-        else if (fast.kind === "native" && (listed.execution !== "native" ||
+        else if (fast.kind === "native" && ((listed.execution !== "native" && listed.execution !== "bundled-shell") ||
             (fast.asset === undefined ? listed.asset !== undefined : listed.asset !== fast.asset))) {
             mismatches.push(`${fast.name} has fast-route metadata that differs from the native command catalog`);
         }

package/dist/commands/core-delegate-w1b.js

@@ -6,7 +6,7 @@ import * as path from "node:path";
 import { serializeJqJson } from "../lib/core-utils/jq-json-serializer.js";
 import { matchingSecretPatterns } from "../lib/core-utils/secret-patterns.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
-import { isRecord, jsonAt, jqFallback, jqRawPath, jqRawPaths, moveFile, readJsonFile, subprocess, writeJsonAtomically, } from "./core-delegate.js";
+import { commandExists, isRecord, jsonAt, jqFallback, jqRawPath, jqRawPaths, moveFile, readJsonFile, subprocess, writeJsonAtomically, } from "./core-delegate.js";
 import { resolveLiveRoot } from "../utils/hq-roots.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
 const FLAG = "core-native-delegate";
@@ -61,6 +61,15 @@ function jsonFile(file) {
         return undefined;
     }
 }
+function malformedJsonFile(file) {
+    try {
+        JSON.parse(fs.readFileSync(file, "utf8"));
+        return false;
+    }
+    catch (error) {
+        return error instanceof SyntaxError;
+    }
+}
 function jsonText(value) { return serializeJqJson(value, "pretty"); }
 function checksum(file) {
     return createHash("sha256").update(fs.readFileSync(file)).digest("hex");
@@ -125,7 +134,21 @@ function parseFlags(args, allowed) {
 }
 function usage(name) { return USAGE[name] ?? ""; }
 function usageFailure(name) { err(usage(name)); return 1; }
-function runBundle(args, context) {
+function runShellFallback(name, args, context) {
+    const result = runBundledScript({
+        asset: ASSETS[name],
+        args,
+        cwd: context.cwd,
+        hqRoot: context.root ?? context.cwd,
+        captureOutput: true,
+    });
+    if (result.stdout?.length)
+        process.stdout.write(result.stdout);
+    if (result.stderr?.length)
+        process.stderr.write(result.stderr);
+    return result.code;
+}
+function runBundle(args, context, onMalformedWhoami) {
     const root = context.root ?? context.cwd;
     if (args[0] !== "build")
         return usageFailure("bundle");
@@ -175,7 +198,9 @@ function runBundle(args, context) {
     try {
         identity = JSON.parse(who.stdout ?? "");
     }
-    catch {
+    catch (error) {
+        if (error instanceof SyntaxError)
+            return onMalformedWhoami ? onMalformedWhoami() : runShellFallback("bundle", args, context);
         identity = undefined;
     }
     const identityValue = isRecord(identity) ? identity : {};
@@ -291,6 +316,32 @@ function runBundle(args, context) {
 function runHq(args, context, stdout = "capture") {
     return subprocess("hq", args, context.cwd, { stdout });
 }
+function commandSubstitutionBytes(value) {
+    const bytes = value.stdoutBytes ?? Buffer.from(value.stdout ?? "");
+    let end = bytes.length;
+    while (end > 0 && bytes[end - 1] === 0x0a)
+        end -= 1;
+    return bytes.subarray(0, end);
+}
+function emitJqParseDiagnostic(input, args, context) {
+    if (!commandExists("jq", context.cwd))
+        return;
+    const result = subprocess("jq", args, context.cwd, { input, stdout: "ignore", stderr: "pipe" });
+    const diagnostic = result.stderrBytes ?? Buffer.from(result.stderr ?? "");
+    if (diagnostic.length)
+        err(diagnostic);
+}
+const RESOLVE_FOUND_FILTER = '.status == "found" and (.person.personUid | type == "string") and (.person.companyUid | type == "string")';
+const RESOLVE_NOT_FOUND_FILTER = '.status == "not_found"';
+const ACL_FILTER = `
+    .schemaVersion == 1 and
+    (
+      .prefix == $prefix or
+      (($prefix | endswith("/*")) and .prefix == ($prefix | sub("\\\\*$"; "")))
+    ) and
+    (.companyUid | type == "string") and ($company == "" or .companyUid == $company) and
+    (.direct | type == "array") and (.exists | type == "boolean")
+  `;
 function runGrant(args, context) {
     const parsed = parseFlags(args, ["--manifest", "--yes"]);
     if (parsed.help) {
@@ -397,7 +448,12 @@ function runGrant(args, context) {
         try {
             response = JSON.parse(resolved.stdout ?? "");
         }
-        catch {
+        catch (error) {
+            if (error instanceof SyntaxError) {
+                const input = commandSubstitutionBytes(resolved);
+                emitJqParseDiagnostic(input, ["-e", RESOLVE_FOUND_FILTER], context);
+                emitJqParseDiagnostic(input, ["-e", RESOLVE_NOT_FOUND_FILTER], context);
+            }
             response = undefined;
         }
         if (isRecord(response) && response.status === "found" && isRecord(response.person) && typeof response.person.personUid === "string" && typeof response.person.companyUid === "string") {
@@ -426,7 +482,11 @@ function runGrant(args, context) {
         try {
             value = JSON.parse(response.stdout ?? "");
         }
-        catch {
+        catch (error) {
+            if (error instanceof SyntaxError) {
+                const input = commandSubstitutionBytes(response);
+                emitJqParseDiagnostic(input, ["-e", "--arg", "prefix", prefix, "--arg", "company", expectedCompany, ACL_FILTER], context);
+            }
             value = undefined;
         }
         const rawPrefix = isRecord(value) ? value.prefix : undefined;
@@ -501,6 +561,22 @@ function runPublish(args, context) {
     if (args[0] !== "--manifest" || !args[1] || !fs.existsSync(args[1]) || !fs.statSync(args[1]).isFile())
         return fail("publish", "usage: --manifest <path>");
     const manifestPath = args[1];
+    if (malformedJsonFile(manifestPath))
+        return runShellFallback("publish", args, context);
+    let preflightManifest;
+    try {
+        preflightManifest = readJsonFile(manifestPath);
+    }
+    catch {
+        preflightManifest = undefined;
+    }
+    if (isRecord(preflightManifest) && jqRawPath(preflightManifest, "mode") === "transfer") {
+        const root = context.root ?? context.cwd;
+        const prd = path.join(root, "companies", jqRawPath(preflightManifest, "company"), "projects", jqRawPath(preflightManifest, "project.name"), "prd.json");
+        if (fs.existsSync(prd) && fs.statSync(prd).isFile() && malformedJsonFile(prd)) {
+            return runShellFallback("publish", args, context);
+        }
+    }
     const lock = `${manifestPath}.send-lock`;
     const lockHeld = args[2] === "--lock-held";
     let ownLock = false;
@@ -658,6 +734,12 @@ function runSend(args, context) {
     const manifest = jsonFile(manifestPath);
     if (!manifest)
         return fail("send", `manifest is not valid JSON: ${manifestPath}`);
+    if (send) {
+        const publishedPath = path.join(context.root ?? context.cwd, jqRawPath(manifest, "publication.manifestPath"));
+        if (fs.existsSync(publishedPath) && fs.statSync(publishedPath).isFile() && malformedJsonFile(publishedPath)) {
+            return runShellFallback("send", args, context);
+        }
+    }
     const lock = `${manifestPath}.send-lock`;
     if (send) {
         try {
@@ -819,14 +901,14 @@ function sleepNative(milliseconds) {
         Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, milliseconds);
 }
 function captureRun(run) {
-    let stdout = "";
-    let stderr = "";
+    const stdout = [];
+    const stderr = [];
     const stdoutWrite = process.stdout.write.bind(process.stdout);
     const stderrWrite = process.stderr.write.bind(process.stderr);
-    process.stdout.write = ((chunk) => { stdout += typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8"); return true; });
-    process.stderr.write = ((chunk) => { stderr += typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8"); return true; });
+    process.stdout.write = ((chunk) => { stdout.push(typeof chunk === "string" ? Buffer.from(chunk) : Buffer.from(chunk)); return true; });
+    process.stderr.write = ((chunk) => { stderr.push(typeof chunk === "string" ? Buffer.from(chunk) : Buffer.from(chunk)); return true; });
     try {
-        return { code: run(), stdout, stderr };
+        return { code: run(), stdout: Buffer.concat(stdout), stderr: Buffer.concat(stderr) };
     }
     finally {
         process.stdout.write = stdoutWrite;
@@ -854,16 +936,29 @@ function runVerify(args, context) {
             return fail("verify", "--dry-run requires --project");
         if (!recipient)
             return fail("verify", "--dry-run requires --to");
-        const plan = captureRun(() => runBundle(["build", "--company", company, "--project", project, "--to", recipient, "--mode", mode, "--dry-run"], context));
-        if (plan.stderr)
+        let malformedWhoamiFallbackCode;
+        const plan = captureRun(() => runBundle(["build", "--company", company, "--project", project, "--to", recipient, "--mode", mode, "--dry-run"], context, () => {
+            malformedWhoamiFallbackCode = runShellFallback("verify", args, context);
+            return malformedWhoamiFallbackCode;
+        }));
+        if (malformedWhoamiFallbackCode !== undefined) {
+            if (plan.stdout.length)
+                out(plan.stdout);
+            if (plan.stderr.length)
+                err(plan.stderr);
+            return malformedWhoamiFallbackCode;
+        }
+        if (plan.stderr.length)
             err(plan.stderr);
         if (plan.code !== 0)
             return fail("verify", "could not derive the delegation plan (see builder error above)");
         let manifest;
         try {
-            manifest = JSON.parse(plan.stdout);
+            manifest = JSON.parse(plan.stdout.toString("utf8"));
         }
-        catch {
+        catch (error) {
+            if (error instanceof SyntaxError)
+                return runShellFallback("verify", args, context);
             return fail("verify", "could not derive the delegation plan (see builder error above)");
         }
         const repoRelative = jqRawPath(manifest, "repo.path");
@@ -893,6 +988,8 @@ function runVerify(args, context) {
         return fail("verify", "--manifest is required (or --dry-run with --company/--project/--to)");
     if (!fs.existsSync(manifestPath) || !fs.statSync(manifestPath).isFile())
         return fail("verify", `manifest not found: ${manifestPath}`);
+    if (malformedJsonFile(manifestPath))
+        return runShellFallback("verify", args, context);
     const manifest = jsonFile(manifestPath);
     if (!manifest)
         return fail("verify", `jq: error: ${manifestPath}: Invalid JSON`);

package/dist/commands/core-delegate.d.ts

@@ -9,12 +9,21 @@ type CommandResult = {
     code: number;
     stdout?: string;
     stderr?: string;
+    stdoutBytes?: Buffer;
+    stderrBytes?: Buffer;
 };
+export type CommandExistsOptions = {
+    platform?: NodeJS.Platform;
+    env?: NodeJS.ProcessEnv;
+    existsSync?: (candidate: string) => boolean;
+};
+export declare function commandExists(name: string, cwd?: string, options?: CommandExistsOptions): boolean;
 export declare function subprocess(command: string, args: string[], cwd: string, options?: {
     input?: Buffer | string;
     stdinFd?: number;
     stderr?: "inherit" | "ignore" | "pipe";
     stdout?: "capture" | "inherit" | "ignore";
+    maxBuffer?: number;
 }): CommandResult;
 type JsonRecord = Record<string, unknown>;
 export declare function isRecord(value: unknown): value is JsonRecord;

package/dist/commands/core-delegate.js

@@ -4,6 +4,7 @@ import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
 import { serializeJqJson } from "../lib/core-utils/jq-json-serializer.js";
+import { resolveWindowsExecutable } from "../lib/bot/runtime/windows.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
 import { resolveLiveRoot } from "../utils/hq-roots.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
@@ -28,6 +29,20 @@ function writeOut(value) {
 function writeErr(value) {
     process.stderr.write(value);
 }
+function runCapturedShell(asset, args, context) {
+    const result = runBundledScript({
+        asset,
+        args,
+        cwd: context.cwd,
+        ...(context.root ? { hqRoot: context.root } : {}),
+        captureOutput: true,
+    });
+    if (result.stdout?.length)
+        process.stdout.write(result.stdout);
+    if (result.stderr?.length)
+        process.stderr.write(result.stderr);
+    return result.code;
+}
 const USAGE_TEXT = {
     resolve: "hq-delegate-resolve.sh — resolve a delegation recipient to a confirmed\nprincipal (person email / prs_ uid, or fleet-agent agt_ uid). Read-only.\n\nUsage:\n  core/scripts/hq-delegate-resolve.sh --company <slug> --to <token>\n\nOutput (stdout, JSON): {kind, principal, displayName, source}\n  kind      — \"person\" | \"agent\"\n  principal — confirmed email, prs_… or agt_… uid\n  source    — \"verbatim\" | \"people-resolve\" | \"agents-list\"\n\nExit codes:\n  0 — resolved\n  1 — usage error (missing/invalid arguments)\n  3 — ambiguous: candidate list printed to stdout as JSON\n      {status:\"ambiguous\", matches:[…]} — caller must present a picker\n  4 — not found (or found with no email): plain message on stderr\n\nTenancy: every lookup is scoped with an explicit --company. This helper\nnever enumerates or falls back across companies — single-company by\nconstruction, matching the /dm skill's resolution contract.\n\nFast path: a token containing \"@\" or starting with prs_ / agt_ passes\nthrough verbatim with NO lookup, preserving existing invocations exactly.\n",
     // Preserve the companion usage function’s historical raw source lines.
@@ -39,8 +54,20 @@ const USAGE_TEXT = {
 function usage(name) {
     return USAGE_TEXT[name];
 }
-function commandPath(name, cwd = process.cwd()) {
-    const directories = (process.env.PATH ?? "").split(path.delimiter);
+function commandPath(name, cwd = process.cwd(), options = {}) {
+    const env = options.env ?? process.env;
+    if ((options.platform ?? process.platform) === "win32") {
+        const existsSync = options.existsSync ?? ((candidate) => {
+            try {
+                return fs.statSync(candidate).isFile();
+            }
+            catch {
+                return false;
+            }
+        });
+        return resolveWindowsExecutable(name, env, existsSync, cwd) ?? undefined;
+    }
+    const directories = (env.PATH ?? "").split(path.delimiter);
     for (const directory of directories) {
         const candidate = path.resolve(cwd, directory || ".", name);
         try {
@@ -56,24 +83,30 @@ function commandPath(name, cwd = process.cwd()) {
     }
     return undefined;
 }
-function commandExists(name, cwd = process.cwd()) {
-    return commandPath(name, cwd) !== undefined;
+export function commandExists(name, cwd = process.cwd(), options = {}) {
+    return commandPath(name, cwd, options) !== undefined;
 }
 export function subprocess(command, args, cwd, options = {}) {
     const result = spawnSync(command, args, {
         cwd,
         env: process.env,
         input: options.input,
-        encoding: "utf8",
-        stdio: [options.stdinFd ?? "inherit", options.stdout === "inherit" ? "inherit" : options.stdout === "ignore" ? "ignore" : "pipe", options.stderr === "pipe" ? "pipe" : options.stderr ?? "inherit"],
+        maxBuffer: options.maxBuffer,
+        encoding: "buffer",
+        stdio: [options.input === undefined ? options.stdinFd ?? "inherit" : "pipe", options.stdout === "inherit" ? "inherit" : options.stdout === "ignore" ? "ignore" : "pipe", options.stderr === "pipe" ? "pipe" : options.stderr ?? "inherit"],
     });
     if (result.error) {
-        return { code: 127, stderr: result.error.message, stdout: "" };
+        const stderr = Buffer.from(result.error.message);
+        return { code: 127, stderr: stderr.toString("utf8"), stderrBytes: stderr, stdout: "", stdoutBytes: Buffer.alloc(0) };
     }
+    const stdoutBytes = Buffer.isBuffer(result.stdout) ? result.stdout : Buffer.alloc(0);
+    const stderrBytes = Buffer.isBuffer(result.stderr) ? result.stderr : Buffer.alloc(0);
     return {
         code: result.status ?? (result.signal ? 128 : 1),
-        stdout: typeof result.stdout === "string" ? result.stdout : "",
-        stderr: typeof result.stderr === "string" ? result.stderr : "",
+        stdout: stdoutBytes.toString("utf8"),
+        stderr: stderrBytes.toString("utf8"),
+        stdoutBytes,
+        stderrBytes,
     };
 }
 export function isRecord(value) {
@@ -82,15 +115,6 @@ export function isRecord(value) {
 export function readJsonText(text) {
     return JSON.parse(text);
 }
-function jqParseDiagnostic(text) {
-    const bareToken = /^\s*([A-Za-z][A-Za-z0-9_-]*)\s*$/.exec(text);
-    if (bareToken && !["null", "true", "false"].includes(bareToken[1] ?? "")) {
-        const line = text.split("\n").length;
-        const column = Buffer.byteLength(text.slice(text.lastIndexOf("\n") + 1));
-        return `jq: parse error: Invalid numeric literal at line ${line}, column ${column}\n`;
-    }
-    return "jq: parse error: Invalid JSON text\n";
-}
 export function readJsonFile(file) {
     return readJsonText(fs.readFileSync(file, "utf8"));
 }
@@ -373,11 +397,8 @@ function runPickup(args, context) {
         document = readJsonFile(file);
     }
     catch (error) {
-        if (error instanceof SyntaxError) {
-            const diagnostic = jqParseDiagnostic(fs.readFileSync(file, "utf8"));
-            for (let index = 0; index < 4; index += 1)
-                writeErr(diagnostic);
-        }
+        if (error instanceof SyntaxError)
+            return runCapturedShell(SCRIPT_ASSETS.pickup, args, context);
         document = {};
     }
     const status = jqRawPath(document, "status");

package/dist/commands/core-hq-session-native.d.ts

@@ -0,0 +1,39 @@
+export declare const HQ_SESSION_ASSET = "core/scripts/hq-session.sh";
+export declare const HQ_SESSION_HELP: string;
+export type HqSessionResult = {
+    code: number;
+    stdout: string;
+    stderr: string;
+};
+export type HqSessionDependencies = {
+    env: NodeJS.ProcessEnv;
+    now: () => Date;
+    readFile: (filePath: string, encoding: BufferEncoding) => string;
+    exists: (filePath: string) => boolean;
+    isFile: (filePath: string) => boolean;
+    isDirectory: (filePath: string) => boolean;
+    isSymlink: (filePath: string) => boolean;
+    listDirectory: (directory: string) => string[];
+    mkdir: (directory: string) => void;
+    writeFile: (filePath: string, contents: string, mode?: number) => void;
+    rename: (from: string, to: string) => void;
+    remove: (filePath: string) => void;
+    makeTempPath: () => string;
+    umask: () => number;
+    findExecutable: (name: string, env?: NodeJS.ProcessEnv) => string | undefined;
+    spawnDetached: (command: string, args: string[], cwd: string, env: NodeJS.ProcessEnv, logFile: string) => void;
+    runCommand: (command: string, args: string[], cwd: string, env: NodeJS.ProcessEnv) => {
+        status: number | null;
+        stdout: string;
+        stderr: string;
+        error?: Error;
+    };
+};
+/** In-process command body, with injectable file access for parity tests. */
+export declare function executeHqSession(argv: readonly string[], context: {
+    cwd: string;
+    hqRoot?: string;
+}, overrides?: Partial<HqSessionDependencies>): HqSessionResult;
+/** Signature consumed by the lightweight fast-core dispatcher. */
+export declare function runHqSessionFast(argv: readonly string[], _stdin: string, cwd: string, hqRoot: string | undefined): Promise<number>;
+//# sourceMappingURL=core-hq-session-native.d.ts.map