@indigoai-us/hq-cli 5.312.0 → 5.312.1

package/assets/scaffold/core/scripts/work-mesh-live-rebind.sh

@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+# hq-core: public
+# US-011 — enqueue session_end/session_start when project binding changes.
+# Usage:
+#   work-mesh-live-rebind.sh --session <sid>
+#     Read state file and rebind if project changed vs live-binding marker.
+#   work-mesh-live-rebind.sh --session <sid> \
+#     --old-company C --old-project P [--old-task T] \
+#     --company C2 --project P2 [--task T2]
+set -euo pipefail
+
+ROOT="${HQ_ROOT:-${CLAUDE_PROJECT_DIR:-}}"
+if [ -z "$ROOT" ]; then
+  ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+fi
+export HQ_ROOT="$ROOT"
+
+# shellcheck source=lib/work-mesh-enqueue.sh
+. "$ROOT/core/scripts/lib/work-mesh-enqueue.sh"
+# shellcheck source=lib/work-mesh-live-hook.sh
+. "$ROOT/core/scripts/lib/work-mesh-live-hook.sh" 2>/dev/null || true
+# shellcheck source=lib/work-mesh-live-rebind.sh
+. "$ROOT/core/scripts/lib/work-mesh-live-rebind.sh"
+
+SID=""
+OLD_CO="" OLD_PR="" OLD_TK=""
+NEW_CO="" NEW_PR="" NEW_TK=""
+FROM_STATE=0
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --session|--session-id) SID="${2:-}"; shift 2 ;;
+    --old-company) OLD_CO="${2:-}"; shift 2 ;;
+    --old-project) OLD_PR="${2:-}"; shift 2 ;;
+    --old-task) OLD_TK="${2:-}"; shift 2 ;;
+    --company|--company-slug) NEW_CO="${2:-}"; shift 2 ;;
+    --project) NEW_PR="${2:-}"; shift 2 ;;
+    --task) NEW_TK="${2:-}"; shift 2 ;;
+    --from-state) FROM_STATE=1; shift ;;
+    *) shift ;;
+  esac
+done
+
+[ -n "$SID" ] || { echo "usage: work-mesh-live-rebind.sh --session <sid> ..." >&2; exit 1; }
+
+if [ "$FROM_STATE" -eq 1 ] || [ -z "$NEW_PR" ]; then
+  work_mesh_live_maybe_rebind_from_state "$SID"
+else
+  if [ -z "$OLD_PR" ]; then
+    work_mesh_live_read_binding_marker "$SID"
+    old=$REPLY
+    OLD_CO="${old%%|*}"
+    rest="${old#*|}"
+    OLD_PR="${rest%%|*}"
+    OLD_TK="${rest#*|}"
+  fi
+  work_mesh_live_rebind "$SID" "$OLD_CO" "$OLD_PR" "$OLD_TK" "$NEW_CO" "$NEW_PR" "$NEW_TK"
+fi
+exit 0

package/dist/command-catalog.generated.d.ts

@@ -3826,6 +3826,19 @@ export declare const COMMAND_CATALOG: readonly [{
             }];
             readonly subcommands: readonly [];
         }];
+    }, {
+        readonly name: "rename";
+        readonly description: "Rename a cloud-backed company display name";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <new-name>";
+        readonly arguments: readonly [{
+            readonly name: "new-name";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "settings";
         readonly description: "Per-company settings (owner-only)";
@@ -5867,6 +5880,58 @@ export declare const COMMAND_CATALOG: readonly [{
         }];
         readonly options: readonly [];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "eval-trigger";
+        readonly description: "Evaluate policy trigger expressions";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[args...]";
+        readonly arguments: readonly [{
+            readonly name: "args";
+            readonly required: false;
+            readonly variadic: true;
+        }];
+        readonly options: readonly [];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "migrate-policy-triggers";
+        readonly description: "Backfill policy trigger frontmatter";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[args...]";
+        readonly arguments: readonly [{
+            readonly name: "args";
+            readonly required: false;
+            readonly variadic: true;
+        }];
+        readonly options: readonly [];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "register-project";
+        readonly description: "Register a project with Work Mesh";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[args...]";
+        readonly arguments: readonly [{
+            readonly name: "args";
+            readonly required: false;
+            readonly variadic: true;
+        }];
+        readonly options: readonly [];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "work-mesh-live-rebind";
+        readonly description: "Rebind a live Work Mesh session to its current project";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[args...]";
+        readonly arguments: readonly [{
+            readonly name: "args";
+            readonly required: false;
+            readonly variadic: true;
+        }];
+        readonly options: readonly [];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "worktree-gc";
         readonly description: "Safely collect old, preserved HQ worktrees";

package/dist/command-catalog.generated.js

@@ -4940,6 +4940,22 @@ export const COMMAND_CATALOG = [
                     }
                 ]
             },
+            {
+                "name": "rename",
+                "description": "Rename a cloud-backed company display name",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] <new-name>",
+                "arguments": [
+                    {
+                        "name": "new-name",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [],
+                "subcommands": []
+            },
             {
                 "name": "settings",
                 "description": "Per-company settings (owner-only)",
@@ -7553,6 +7569,70 @@ export const COMMAND_CATALOG = [
                 "options": [],
                 "subcommands": []
             },
+            {
+                "name": "eval-trigger",
+                "description": "Evaluate policy trigger expressions",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[args...]",
+                "arguments": [
+                    {
+                        "name": "args",
+                        "required": false,
+                        "variadic": true
+                    }
+                ],
+                "options": [],
+                "subcommands": []
+            },
+            {
+                "name": "migrate-policy-triggers",
+                "description": "Backfill policy trigger frontmatter",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[args...]",
+                "arguments": [
+                    {
+                        "name": "args",
+                        "required": false,
+                        "variadic": true
+                    }
+                ],
+                "options": [],
+                "subcommands": []
+            },
+            {
+                "name": "register-project",
+                "description": "Register a project with Work Mesh",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[args...]",
+                "arguments": [
+                    {
+                        "name": "args",
+                        "required": false,
+                        "variadic": true
+                    }
+                ],
+                "options": [],
+                "subcommands": []
+            },
+            {
+                "name": "work-mesh-live-rebind",
+                "description": "Rebind a live Work Mesh session to its current project",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[args...]",
+                "arguments": [
+                    {
+                        "name": "args",
+                        "required": false,
+                        "variadic": true
+                    }
+                ],
+                "options": [],
+                "subcommands": []
+            },
             {
                 "name": "worktree-gc",
                 "description": "Safely collect old, preserved HQ worktrees",

package/dist/commands/company-rename-flag.d.ts

@@ -0,0 +1,4 @@
+export declare const CLI_COMPANY_RENAME_FLAG = "cli.company-rename";
+/** Company display-name updates stay unavailable until hq-flags enables them. */
+export declare function companyRenameEnabled(): boolean;
+//# sourceMappingURL=company-rename-flag.d.ts.map

package/dist/commands/company-rename-flag.js

@@ -0,0 +1,7 @@
+import { resolveProcessFlagGate } from "../lib/flag-registry.js";
+export const CLI_COMPANY_RENAME_FLAG = "cli.company-rename";
+/** Company display-name updates stay unavailable until hq-flags enables them. */
+export function companyRenameEnabled() {
+    return resolveProcessFlagGate(CLI_COMPANY_RENAME_FLAG, { fallback: false }, () => false);
+}
+//# sourceMappingURL=company-rename-flag.js.map

package/dist/commands/company-rename.d.ts

@@ -0,0 +1,4 @@
+import { Command } from "commander";
+/** Register `hq company rename <new name>` for the selected/current company. */
+export declare function registerCompanyRenameCommand(company: Command): void;
+//# sourceMappingURL=company-rename.d.ts.map

package/dist/commands/company-rename.js

@@ -0,0 +1,90 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import * as yaml from "js-yaml";
+import chalk from "chalk";
+import { resolveDefaultHqRoot } from "../utils/hq-root-resolver.js";
+import { parseUserYaml } from "../utils/user-yaml-error.js";
+import { ensureCognitoToken } from "../utils/cognito-session.js";
+import { getEntityUid, vaultApiFetch } from "../utils/vault-api.js";
+import { companyRenameEnabled } from "./company-rename-flag.js";
+function fail(message) {
+    console.error(chalk.red(message));
+    process.exit(1);
+    throw new Error(message);
+}
+function resolveManifestTarget(hqRoot, requestedSlug, companyUid) {
+    const manifestPath = path.join(hqRoot, "companies", "manifest.yaml");
+    if (!fs.existsSync(manifestPath)) {
+        throw new Error(`companies/manifest.yaml not found at ${manifestPath}`);
+    }
+    const raw = fs.readFileSync(manifestPath, "utf8");
+    const parsed = parseUserYaml(raw, manifestPath);
+    if (!parsed || !parsed.companies || typeof parsed.companies !== "object") {
+        throw new Error("companies/manifest.yaml is malformed — missing top-level .companies map");
+    }
+    const slug = requestedSlug ?? Object.entries(parsed.companies).find(([, entry]) => entry && typeof entry === "object" && entry.cloud_uid === companyUid)?.[0];
+    if (!slug) {
+        throw new Error(`No local company manifest entry is bound to ${companyUid}; run from the HQ root or pass --company <slug>.`);
+    }
+    const value = parsed.companies[slug];
+    if (!value || typeof value !== "object") {
+        throw new Error(`Company '${slug}' is not present in companies/manifest.yaml.`);
+    }
+    if (requestedSlug && value.cloud_uid !== companyUid) {
+        throw new Error(`Company '${slug}' has no matching cloud_uid in companies/manifest.yaml.`);
+    }
+    return { slug, path: manifestPath, document: parsed, entry: value };
+}
+function writeManifestName(target, name) {
+    target.entry.name = name;
+    target.document.companies[target.slug] = target.entry;
+    const mode = fs.statSync(target.path).mode;
+    const temporaryPath = `${target.path}.tmp.${process.pid}`;
+    fs.writeFileSync(temporaryPath, yaml.dump(target.document, { lineWidth: -1, noRefs: true }), { mode });
+    fs.chmodSync(temporaryPath, mode);
+    fs.renameSync(temporaryPath, target.path);
+}
+/** Register `hq company rename <new name>` for the selected/current company. */
+export function registerCompanyRenameCommand(company) {
+    company
+        .command("rename <new-name>")
+        .description("Rename a cloud-backed company display name")
+        .action(async (newName) => {
+        if (!companyRenameEnabled()) {
+            fail("Company rename is not available yet.");
+        }
+        const name = newName.trim();
+        if (!name)
+            fail("Company name cannot be empty.");
+        try {
+            const requestedSlug = company.opts().company;
+            const token = await ensureCognitoToken();
+            const companyUid = await getEntityUid(token, { companySlug: requestedSlug });
+            const hqRoot = resolveDefaultHqRoot({ onMissing: "throw" });
+            const manifestTarget = resolveManifestTarget(hqRoot, requestedSlug, companyUid);
+            const response = await vaultApiFetch({
+                token,
+                path: `/entity/${encodeURIComponent(companyUid)}`,
+                method: "PATCH",
+                body: { name },
+            });
+            if (!response.ok) {
+                if (response.status === 403) {
+                    fail("Only a company owner can rename this company.");
+                }
+                if (response.status === 404) {
+                    fail("Company not found in HQ Cloud.");
+                }
+                fail(`Could not rename company (HTTP ${response.status}).`);
+            }
+            writeManifestName(manifestTarget, name);
+            console.log(chalk.green(`Company renamed to ${name}.`));
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.startsWith("process.exit"))
+                throw error;
+            fail(error instanceof Error ? error.message : String(error));
+        }
+    });
+}
+//# sourceMappingURL=company-rename.js.map

package/dist/commands/company.js

@@ -2,6 +2,7 @@ import chalk from "chalk";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, getEntityUid } from "../utils/vault-api.js";
 import { registerCompanyTransferCommand } from "./company-transfer.js";
+import { registerCompanyRenameCommand } from "./company-rename.js";
 import { describeRefreshOutcome, refreshCheckpointGateSetting, } from "./core-checkpoint-gate-setting.js";
 /**
  * Parse a `--flag <true|false>` string into a boolean, or throw. Commander
@@ -23,6 +24,7 @@ export function registerCompanyCommand(program) {
         .option("--company <slug>", "Company slug (resolves to companyUid)");
     // `hq company transfer …` — ownership handover (client-service-pack US-010).
     registerCompanyTransferCommand(company);
+    registerCompanyRenameCommand(company);
     const settings = company
         .command("settings")
         .description("Per-company settings (owner-only)");

package/dist/commands/core-checkpoint-stop-gate-native.js

@@ -481,6 +481,11 @@ export function executeCheckpointStopGate(input, context, overrides = {}) {
         return { code: 0, stdout: "", stderr: "" };
     }
     const evidence = payloadReplyEvidence(payload);
+    // The shell's jq-backed input_fields assignment exits successfully before
+    // any state work when jq is unavailable. Keep that early-exit ordering even
+    // though the native parser does not otherwise need jq.
+    if (!deps.commandExists("jq", env))
+        return { code: 0, stdout: "", stderr: "" };
     const transcriptPath = toShellString(payload.transcript_path);
     const sessionId = toShellString(payload.session_id);
     if (env.HQ_CHECKPOINT_SIBLING === "1")
@@ -517,6 +522,13 @@ export function executeCheckpointStopGate(input, context, overrides = {}) {
     else
         return { code: 0, stdout: "", stderr };
     const stateDir = path.join(root, "workspace", "orchestrator", "hook-state");
+    try {
+        deps.mkdir(stateDir);
+    }
+    catch {
+        // hook-lib.sh runs `mkdir -p ... 2>/dev/null || true`; the directory and
+        // write checks below determine whether this invocation can continue.
+    }
     if (!deps.isDirectory(stateDir) || !deps.canWrite(stateDir))
         return { code: 0, stdout: "", stderr };
     const eligibilityFile = path.join(stateDir, `checkpoint-gate-eligible-${runtime}`);

package/dist/commands/core-eval-trigger-native.d.ts

@@ -0,0 +1,4 @@
+export { checkTriggerExpressions, evaluateTrigger } from "../utils/core-eval-trigger.js";
+export declare const EVAL_TRIGGER_ASSET = "core/scripts/eval-trigger.sh";
+export declare function runEvalTriggerFast(args: readonly string[], stdin: string, _cwd: string, _root: string | undefined): Promise<number>;
+//# sourceMappingURL=core-eval-trigger-native.d.ts.map

package/dist/commands/core-eval-trigger-native.js

@@ -0,0 +1,12 @@
+/** Native implementation of core/scripts/eval-trigger.sh. */
+import { checkTriggerExpressions, evaluateTrigger } from "../utils/core-eval-trigger.js";
+export { checkTriggerExpressions, evaluateTrigger } from "../utils/core-eval-trigger.js";
+export const EVAL_TRIGGER_ASSET = "core/scripts/eval-trigger.sh";
+export async function runEvalTriggerFast(args, stdin, _cwd, _root) {
+    if (args[0] === "--check") {
+        process.stdout.write(checkTriggerExpressions(stdin));
+        return 0;
+    }
+    return evaluateTrigger(args[0] ?? "", args[1] ?? "");
+}
+//# sourceMappingURL=core-eval-trigger-native.js.map

package/dist/commands/core-migrate-policy-triggers-native.d.ts

@@ -0,0 +1,21 @@
+import * as fs from "node:fs";
+export declare const MIGRATE_POLICY_TRIGGERS_ASSET = "core/scripts/migrate-policy-triggers.sh";
+export type MigratePolicyDependencies = {
+    root: string;
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    now: () => Date;
+    fs: typeof fs;
+    evaluatorExists?: () => boolean;
+    runFlock?: (lockFd: number, cwd: string, pathValue: string) => {
+        status: number | null;
+        error?: Error;
+    };
+};
+export declare function runMigratePolicyTriggers(args: readonly string[], deps: MigratePolicyDependencies): {
+    code: number;
+    stdout: string;
+    stderr: string;
+};
+export declare function runMigratePolicyTriggersFast(args: readonly string[], _stdin: string, cwd: string, root?: string): Promise<number>;
+//# sourceMappingURL=core-migrate-policy-triggers-native.d.ts.map