@indigoai-us/hq-cli 5.310.0 → 5.311.1

package/dist/lib/mesh/live/daemon/state.d.ts

@@ -5,7 +5,7 @@ import * as fs from "node:fs";
 import type { MqttConnectionState } from "./presence.js";
 import type { FlushSummary } from "../flush.js";
 import type { DroppedPresenceCompany } from "./credentials.js";
-export interface PresenceRefusalState {
+interface PresenceRefusalState {
     code: string;
     status: number;
     nextRetryAt: string;

package/dist/lib/mesh/live/daemon/transcript-watch.d.ts

@@ -51,8 +51,6 @@ export declare const TRANSCRIPT_WATCH_INTERVAL_MAX_MS = 120000;
 export declare const TRANSCRIPT_WATCH_BACKOFF_ENTRIES = 2000;
 /** Double the interval when a tick takes longer than this many ms. */
 export declare const TRANSCRIPT_WATCH_BACKOFF_DURATION_MS = 500;
-/** Hard cap on entries examined (dir stats, readdir children, file stats) per tick. */
-export declare const TRANSCRIPT_WATCH_ENTRY_CAP = 20000;
 /**
  * Even when a directory mtime matches the cache, force a full relist (readdir +
  * re-stat) after this many ms so content appends and coarse mtime granularity
@@ -62,11 +60,6 @@ export declare const TRANSCRIPT_WATCH_REVALIDATE_MS: number;
 export declare const TRANSCRIPT_TURN_QUIET_MS = 5000;
 export declare const TRANSCRIPT_SESSION_END_MS: number;
 export declare const TRANSCRIPT_HOOK_COVER_MS = 60000;
-/** Retry unavailable transcript-start reconciliation without hot-looping. */
-export declare const TRANSCRIPT_START_RETRY_BASE_MS = 30000;
-export declare const TRANSCRIPT_START_RETRY_MAX_MS = 120000;
-/** Ignore cold transcripts whose mtime is older than this on first sight. */
-export declare const TRANSCRIPT_FRESH_MS: number;
 /**
  * Hook-covered sessions skipped as "stale" on first sight never got a quiet
  * session_end (live: skippedHook=411, ended=0). Adopt them for this long after
@@ -75,7 +68,6 @@ export declare const TRANSCRIPT_FRESH_MS: number;
  */
 export declare const TRANSCRIPT_HOOK_QUIET_ADOPT_MS: number;
 export declare const TRANSCRIPT_MARKER: "from transcript";
-export declare const TRANSCRIPT_ADAPTER_VERSION: string;
 /** Network `source` stamped on every synthesized event (AMEND-001). */
 export declare const TRANSCRIPT_EVENT_SOURCE: "transcript";
 /** Fs surface used by the watcher — intentionally no open/readFile. */
@@ -91,7 +83,7 @@ export interface TranscriptFs {
     existsSync: (p: string) => boolean;
 }
 export declare const defaultTranscriptFs: TranscriptFs;
-export type TranscriptKind = "claude" | "codex";
+type TranscriptKind = "claude" | "codex";
 export interface DiscoveredTranscript {
     path: string;
     sessionId: string;
@@ -166,7 +158,7 @@ export interface TranscriptWatchTickResult {
     skippedConcurrent: boolean;
 }
 /** Per-directory mtime + child cache for incremental discovery. */
-export interface TranscriptDirCacheEntry {
+interface TranscriptDirCacheEntry {
     mtimeMs: number;
     files: DiscoveredTranscript[];
     subdirs: string[];
@@ -176,7 +168,7 @@ export interface TranscriptDirCacheEntry {
 export interface TranscriptDiscoverCache {
     dirs: Map<string, TranscriptDirCacheEntry>;
 }
-export interface DiscoverScanMeta {
+interface DiscoverScanMeta {
     entriesExamined: number;
     dirsListed: number;
     dirsSkipped: number;
@@ -318,4 +310,5 @@ export declare function nextTranscriptWatchIntervalMs(currentMs: number, opts: {
     entriesExamined: number;
     durationMs: number;
 }): number;
+export {};
 //# sourceMappingURL=transcript-watch.d.ts.map

package/dist/lib/mesh/live/daemon/transcript-watch.js

@@ -58,7 +58,7 @@ export const TRANSCRIPT_WATCH_BACKOFF_ENTRIES = 2_000;
 /** Double the interval when a tick takes longer than this many ms. */
 export const TRANSCRIPT_WATCH_BACKOFF_DURATION_MS = 500;
 /** Hard cap on entries examined (dir stats, readdir children, file stats) per tick. */
-export const TRANSCRIPT_WATCH_ENTRY_CAP = 20_000;
+const TRANSCRIPT_WATCH_ENTRY_CAP = 20_000;
 /**
  * Even when a directory mtime matches the cache, force a full relist (readdir +
  * re-stat) after this many ms so content appends and coarse mtime granularity
@@ -69,10 +69,10 @@ export const TRANSCRIPT_TURN_QUIET_MS = 5_000;
 export const TRANSCRIPT_SESSION_END_MS = 10 * 60_000;
 export const TRANSCRIPT_HOOK_COVER_MS = 60_000;
 /** Retry unavailable transcript-start reconciliation without hot-looping. */
-export const TRANSCRIPT_START_RETRY_BASE_MS = 30_000;
-export const TRANSCRIPT_START_RETRY_MAX_MS = 120_000;
+const TRANSCRIPT_START_RETRY_BASE_MS = 30_000;
+const TRANSCRIPT_START_RETRY_MAX_MS = 120_000;
 /** Ignore cold transcripts whose mtime is older than this on first sight. */
-export const TRANSCRIPT_FRESH_MS = TRANSCRIPT_SESSION_END_MS;
+const TRANSCRIPT_FRESH_MS = TRANSCRIPT_SESSION_END_MS;
 /**
  * Hook-covered sessions skipped as "stale" on first sight never got a quiet
  * session_end (live: skippedHook=411, ended=0). Adopt them for this long after
@@ -81,7 +81,7 @@ export const TRANSCRIPT_FRESH_MS = TRANSCRIPT_SESSION_END_MS;
  */
 export const TRANSCRIPT_HOOK_QUIET_ADOPT_MS = 2 * 60 * 60 * 1000;
 export const TRANSCRIPT_MARKER = "from transcript";
-export const TRANSCRIPT_ADAPTER_VERSION = CLI_VERSION;
+const TRANSCRIPT_ADAPTER_VERSION = CLI_VERSION;
 /** Network `source` stamped on every synthesized event (AMEND-001). */
 export const TRANSCRIPT_EVENT_SOURCE = "transcript";
 export const defaultTranscriptFs = {

package/dist/lib/work-context/company.d.ts

@@ -20,14 +20,12 @@
  */
 import type { TrustedExplicitContext } from "./contract.js";
 import { type SessionStateFile } from "./state.js";
-export type CompanyResolutionSource = "trusted_explicit" | "existing_scope" | "session_meta" | "repo_map" | "device_default" | "deterministic_cwd" | "deterministic_remote";
+type CompanyResolutionSource = "trusted_explicit" | "existing_scope" | "session_meta" | "repo_map" | "device_default" | "deterministic_cwd" | "deterministic_remote";
 export interface ResolvedCompany {
     slug?: string;
     uid?: string;
     source: CompanyResolutionSource;
 }
-/** Pointer to the US-017B correction client (never auto-switches). */
-export declare const COMPANY_CORRECTION_PATH_PREFIX = "hq mesh context correct --session";
 export declare function companyCorrectionPath(sessionId: string): string;
 export type CompanyResolution = {
     status: "resolved";
@@ -72,18 +70,6 @@ export interface CompanyResolveInput {
 /** Env naming the on-box identity.json (fleet agent boxes). */
 export declare const HQ_AGENT_IDENTITY_FILE_ENV = "HQ_AGENT_IDENTITY_FILE";
 export declare const DEFAULT_AGENT_IDENTITY_FILE = "/var/lib/hq-agent/identity.json";
-/**
- * Read `companyUid` from the agent identity file when
- * `HQ_AGENT_IDENTITY_FILE` is set, or the conventional fleet path otherwise.
- * Missing/unreadable/malformed → undefined
- * (never throws; never logs file contents).
- */
-export interface AgentIdentityCompany {
-    uid?: string;
-    slug?: string;
-}
-/** Company uid and slug from the fleet identity file. Missing file → undefined. */
-export declare function readAgentIdentityCompany(env?: NodeJS.ProcessEnv): AgentIdentityCompany | undefined;
 export declare function readAgentIdentityCompanyUid(env?: NodeJS.ProcessEnv): string | undefined;
 /**
  * Company named for a machine session.
@@ -126,15 +112,6 @@ export declare function projectIdFromCwd(cwd: string | undefined, hqRoot?: strin
  * Read company_slug from workspace/sessions/<sid>/meta.yaml (best-effort, no yaml dep).
  */
 export declare function readMetaCompanySlug(sessionId: string, hqRoot: string | undefined): string | undefined;
-/**
- * Deterministic mapping: exactly one of cwd companies/{slug} or remote owner.
- * Multiple distinct signals that disagree → no deterministic mapping (needs_company
- * unless a higher-precedence source exists). Matching signals collapse to one.
- */
-export declare function resolveDeterministicCompany(input: {
-    cwd?: string;
-    hqRoot?: string;
-    remoteOwnerSlug?: string | null;
-}): ResolvedCompany | null;
 export declare function resolveCompany(input: CompanyResolveInput): CompanyResolution;
+export {};
 //# sourceMappingURL=company.d.ts.map

package/dist/lib/work-context/company.js

@@ -23,7 +23,7 @@ import * as path from "node:path";
 import { getDefaultCompany, getRepoCompany } from "./config.js";
 import { authoritativeCompanyFromState, readSessionState, } from "./state.js";
 /** Pointer to the US-017B correction client (never auto-switches). */
-export const COMPANY_CORRECTION_PATH_PREFIX = "hq mesh context correct --session";
+const COMPANY_CORRECTION_PATH_PREFIX = "hq mesh context correct --session";
 export function companyCorrectionPath(sessionId) {
     return `${COMPANY_CORRECTION_PATH_PREFIX} ${sessionId}`;
 }
@@ -58,7 +58,7 @@ function readAgentIdentityRecord(env) {
     }
 }
 /** Company uid and slug from the fleet identity file. Missing file → undefined. */
-export function readAgentIdentityCompany(env = process.env) {
+function readAgentIdentityCompany(env = process.env) {
     const raw = readAgentIdentityRecord(env);
     if (!raw)
         return undefined;
@@ -209,7 +209,7 @@ export function readMetaCompanySlug(sessionId, hqRoot) {
  * Multiple distinct signals that disagree → no deterministic mapping (needs_company
  * unless a higher-precedence source exists). Matching signals collapse to one.
  */
-export function resolveDeterministicCompany(input) {
+function resolveDeterministicCompany(input) {
     const fromCwd = companySlugFromCwd(input.cwd, input.hqRoot);
     const fromRemote = normalizeSlug(input.remoteOwnerSlug ?? undefined);
     if (fromCwd && fromRemote && fromCwd.toLowerCase() !== fromRemote.toLowerCase()) {

package/dist/lib/work-context/config.d.ts

@@ -4,8 +4,7 @@
  */
 import * as fs from "node:fs";
 import { type WindowsAclCheckOptions } from "./windows-acl.js";
-import { WORK_CONTEXT_CONTRACT_VERSION } from "./contract.js";
-export declare const DEVICE_CONFIG_SCHEMA_VERSION: 1;
+declare const DEVICE_CONFIG_SCHEMA_VERSION: 1;
 export interface DeviceDefaultCompany {
     slug: string;
     uid?: string;
@@ -44,7 +43,7 @@ export interface RepoCompanyMapping {
     uid?: string;
     updatedAt: string;
 }
-export type RepoCompanyMap = Record<string, RepoCompanyMapping>;
+type RepoCompanyMap = Record<string, RepoCompanyMapping>;
 export interface WorkContextDeviceConfig {
     schemaVersion: typeof DEVICE_CONFIG_SCHEMA_VERSION;
     /** Explicit device default. Never copied from activeCompany. */
@@ -77,7 +76,6 @@ export interface DeviceConfigDeps {
     validateMembership?: (slug: string) => Promise<MembershipValidationResult> | MembershipValidationResult;
     now?: () => Date;
 }
-export declare const CONFIG_LOCK_STALE_MS = 30000;
 /** Acquire an interprocess config lock; exported for direct lock regression tests. */
 export declare function acquireDeviceConfigLock(root: string, options?: {
     timeoutMs?: number;
@@ -132,8 +130,5 @@ export declare function setAutoDefaultCompany(membership: DefaultCompanyMembersh
     afterCompareAndSwap?: () => void;
 }): WorkContextDeviceConfig;
 export declare function setRepairHeldWithDefault(enabled: boolean, deps: Pick<DeviceConfigDeps, "root" | "now">): WorkContextDeviceConfig;
-/** Convenience: build deps from HOME / injectable root. */
-export declare function deviceConfigDepsFromHome(home?: string, extras?: Partial<DeviceConfigDeps>): DeviceConfigDeps;
-/** Re-export for callers that stamp contractVersion on related state. */
-export { WORK_CONTEXT_CONTRACT_VERSION };
+export {};
 //# sourceMappingURL=config.d.ts.map

package/dist/lib/work-context/config.js

@@ -6,13 +6,11 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import { atomicWriteJson, ensureOwnerDir, resolveRealTarget } from "./atomic.js";
 import { DefaultCompanyUnavailableError, UnsafeConfigPathError, WorkContextError, } from "./errors.js";
-import { workContextConfigPath, workContextRoot } from "./paths.js";
+import { workContextConfigPath } from "./paths.js";
 import { assertWindowsOwnerOnlyAcl } from "./windows-acl.js";
-import { WORK_CONTEXT_CONTRACT_VERSION } from "./contract.js";
-export const DEVICE_CONFIG_SCHEMA_VERSION = 1;
+const DEVICE_CONFIG_SCHEMA_VERSION = 1;
 const CONFIG_LOCK_TIMEOUT_MS = 5_000;
 const CONFIG_LOCK_RETRY_MS = 10;
-export const CONFIG_LOCK_STALE_MS = 30_000;
 function waitForConfigLock(ms) {
     Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 }
@@ -497,13 +495,4 @@ export function setRepairHeldWithDefault(enabled, deps) {
         return next;
     });
 }
-/** Convenience: build deps from HOME / injectable root. */
-export function deviceConfigDepsFromHome(home, extras = {}) {
-    return {
-        root: extras.root ?? workContextRoot(home),
-        ...extras,
-    };
-}
-/** Re-export for callers that stamp contractVersion on related state. */
-export { WORK_CONTEXT_CONTRACT_VERSION };
 //# sourceMappingURL=config.js.map

package/dist/lib/work-context/state.d.ts

@@ -4,7 +4,7 @@
  */
 import type { ClassificationState } from "./contract.js";
 import { WORK_CONTEXT_CONTRACT_VERSION } from "./contract.js";
-export type DecisionOptionKind = "bind_existing" | "create_project" | "create_task" | "untracked" | "keep_default" | "override_evidence";
+type DecisionOptionKind = "bind_existing" | "create_project" | "create_task" | "untracked" | "keep_default" | "override_evidence";
 export interface SessionDecisionOption {
     optionId: string;
     label?: string;
@@ -27,9 +27,9 @@ export interface SessionDecision {
 /** Local-only origin of the session state writer (never sent on the wire). */
 export type SessionEventSource = "hook" | "transcript";
 /** Local-only harness label when network schema cannot carry it (US-018). */
-export type LocalHarnessLabel = "claude-desktop" | "codex";
+type LocalHarnessLabel = "claude-desktop" | "codex";
 /** Local tracking for an in-flight or completed cross-company migrate (US-017B). */
-export interface SessionMigrationRecord {
+interface SessionMigrationRecord {
     operationId: string;
     digest: string;
     sourceCompanyUid: string;
@@ -133,14 +133,6 @@ export interface AcknowledgedRegisterBinding {
     taskId?: string;
     receiptId: string;
 }
-/** Allowlisted keys that may appear in the durable state projection. */
-export declare const SESSION_STATE_ALLOWLIST: Set<string>;
-/**
- * Serialize a session-state read/modify/write with every state writer. Atomic
- * rename protects readers from torn files, but only this shared lock protects
- * a writer that has to verify the current binding before changing it.
- */
-export declare function withSessionStateLock<T>(sessionId: string, root: string, fn: () => T): T;
 export declare function readSessionState(sessionId: string, root: string): SessionStateFile | null;
 export declare function writeSessionState(state: SessionStateFile, root: string): string;
 /**
@@ -148,8 +140,6 @@ export declare function writeSessionState(state: SessionStateFile, root: string)
  * lock used by ordinary session writers. Returning null declines the write.
  */
 export declare function updateSessionState(sessionId: string, root: string, update: (current: SessionStateFile | null) => SessionStateFile | null): SessionStateFile | null;
-/** Strip any non-allowlisted fields before durable write. */
-export declare function projectSessionState(state: SessionStateFile): SessionStateFile;
 /**
  * Merge prior local fields into a new state write so PostToolUse bumps and
  * reconcile updates do not clobber an acknowledged company binding.
@@ -201,4 +191,5 @@ export declare function authoritativeCompanyFromState(state: SessionStateFile |
  * Carrying it forward makes the server drop every later session-event batch.
  */
 export declare function applyOperatorProjectBinding(state: SessionStateFile, projectId: string, now?: () => Date): SessionStateFile;
+export {};
 //# sourceMappingURL=state.d.ts.map

package/dist/lib/work-context/state.js

@@ -8,34 +8,6 @@ import { WORK_CONTEXT_CONTRACT_VERSION } from "./contract.js";
 import { atomicWriteJson, ensureOwnerDir, resolveRealTarget } from "./atomic.js";
 import { NotTrackingError, UnsafeConfigPathError } from "./errors.js";
 import { isSafeWorkContextSegment, workContextSessionPath, workContextSessionsDir, } from "./paths.js";
-/** Allowlisted keys that may appear in the durable state projection. */
-export const SESSION_STATE_ALLOWLIST = new Set([
-    "contractVersion",
-    "sessionId",
-    "companyUid",
-    "companySlug",
-    "contextStatus",
-    "projectId",
-    "taskId",
-    "bindingEpisodeId",
-    "version",
-    "decision",
-    "migration",
-    "untrackedReceipt",
-    "toolWrites",
-    "startedAt",
-    "hasTurn",
-    "source",
-    "localHarness",
-    "transcriptMarker",
-    "companyConfidence",
-    "projectBindReason",
-    "projectCandidates",
-    "projectGate",
-    "projectHint",
-    "presenceLeave",
-    "updatedAt",
-]);
 const SESSION_STATE_LOCK_TIMEOUT_MS = 5_000;
 const SESSION_STATE_LOCK_RETRY_MS = 10;
 function waitForSessionStateLock(ms) {
@@ -72,7 +44,7 @@ function reclaimStaleSessionStateLock(lockPath) {
  * rename protects readers from torn files, but only this shared lock protects
  * a writer that has to verify the current binding before changing it.
  */
-export function withSessionStateLock(sessionId, root, fn) {
+function withSessionStateLock(sessionId, root, fn) {
     if (!isSafeWorkContextSegment(sessionId)) {
         throw new NotTrackingError(`Unsafe session id for state file: ${sessionId}`, "NOT_TRACKING");
     }
@@ -192,7 +164,7 @@ export function updateSessionState(sessionId, root, update) {
     });
 }
 /** Strip any non-allowlisted fields before durable write. */
-export function projectSessionState(state) {
+function projectSessionState(state) {
     const out = {
         contractVersion: WORK_CONTEXT_CONTRACT_VERSION,
         sessionId: state.sessionId,

package/dist/utils/run-bundled-script.d.ts

@@ -50,10 +50,16 @@ export type RunBundledScriptOptions = {
     hqRoot?: string;
     /** Extra environment for the child, applied last. */
     env?: Record<string, string | undefined>;
+    /** Capture stdout and stderr as bytes instead of inheriting those streams. */
+    captureOutput?: boolean;
 };
 export type RunBundledScriptResult = {
     /** The child's exit code, or 128+signal if it was terminated by one. */
     code: number;
+    /** Present when captureOutput is true. */
+    stdout?: Buffer;
+    /** Present when captureOutput is true. */
+    stderr?: Buffer;
 };
 /**
  * Execute a bundled scaffold script and return its exit code.

package/dist/utils/run-bundled-script.js

@@ -155,7 +155,8 @@ export function runBundledScript(opts) {
     const result = spawnSync(executable, [script, ...(opts.args ?? [])], {
         cwd: opts.cwd,
         env,
-        stdio: "inherit",
+        stdio: opts.captureOutput ? ["inherit", "pipe", "pipe"] : "inherit",
+        ...(opts.captureOutput ? { maxBuffer: Number.MAX_SAFE_INTEGER } : {}),
     });
     if (result.error) {
         const spawnError = result.error;
@@ -166,6 +167,7 @@ export function runBundledScript(opts) {
         }
         throw new Error(`Failed to run bundled script ${opts.asset}: ${result.error.message}`);
     }
+    let code;
     if (result.signal) {
         // Conventional shell encoding, so a caller checking for termination sees it.
         const signals = {
@@ -175,8 +177,17 @@ export function runBundledScript(opts) {
             SIGKILL: 9,
             SIGTERM: 15,
         };
-        return { code: 128 + (signals[result.signal] ?? 0) };
+        code = 128 + (signals[result.signal] ?? 0);
     }
-    return { code: result.status ?? 0 };
+    else {
+        code = result.status ?? 0;
+    }
+    return {
+        code,
+        ...(opts.captureOutput ? {
+            stdout: result.stdout ?? Buffer.alloc(0),
+            stderr: result.stderr ?? Buffer.alloc(0),
+        } : {}),
+    };
 }
 //# sourceMappingURL=run-bundled-script.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.310.0",
+  "version": "5.311.1",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {