@indigoai-us/hq-cli 5.312.2-beta.0 → 5.314.0

package/dist/commands/core.js

@@ -30,24 +30,9 @@
  */
 import { Option } from "commander";
 import { registerCoreCheckpointCommand } from "./core-checkpoint.js";
-import { registerCoreDelegateCommand } from "./core-delegate.js";
-import { registerCoreDelegateW1b } from "./core-delegate-w1b.js";
-import { registerCoreHandoffCommand } from "./core-handoff.js";
-import { registerCoreOntologyCommand } from "./core-ontology.js";
-import { registerCoreKnowledgePrefsCommand } from "./core-knowledge-prefs.js";
-import { registerCorePolicyCommand } from "./core-policy.js";
-import { registerCoreJobsNativeCommand } from "./core-job-native.js";
-import { registerCoreResolveCompanyNativeCommand } from "./core-resolve-company-command.js";
-import { registerCoreCheckpointGateSettingCommand } from "./core-checkpoint-gate-setting.js";
-import { registerCoreAuditLogNative } from "./core-audit-log-native.js";
-import { registerCoreDmBindNative } from "./core-dm-bind-native.js";
-import { registerCoreGitPackExtensionCheckNative } from "./core-git-pack-extension-check-native.js";
-import { registerCorePinNative } from "./core-pin-native.js";
-import { registerCoreRefreshVaultAccessNative } from "./core-refresh-vault-access-native.js";
-import { registerCoreWorkMeshBindTrustedNative } from "./core-work-mesh-bind-trusted-native.js";
 import { resolveLiveRoot } from "../utils/hq-roots.js";
-import { interpreterFor, runBundledScript } from "../utils/run-bundled-script.js";
-import { CompanyIndexUserError, renderIndexTarget } from "../lib/index-render/index.js";
+import { runBundledScript } from "../utils/run-bundled-script.js";
+import { renderIndexTarget } from "../lib/index-render/index.js";
 import { generateWorkersRegistry } from "../lib/workers-registry/index.js";
 import { scanPackages } from "../lib/scan-packages/index.js";
 import { detectStaleCorePolicyMirror } from "../lib/core-utils/detect-stale-core-policy-mirror.js";
@@ -61,27 +46,21 @@ import { archiveOldThreads } from "../lib/core-utils/archive-old-threads.js";
 import { qmdReindexAfterSync } from "../lib/core-utils/qmd-reindex-after-sync.js";
 import { softTimeoutCommand } from "../lib/core-utils/soft-timeout.js";
 import { timeoutGuardCommand } from "../lib/core-utils/timeout-guard.js";
-import { readSentryReportStdin, reportSentryEvent } from "../lib/core-utils/sentry-report.js";
-import { CLEAN_HANDOFF_ASSET, RESUME_LOCK_ASSET, VERIFY_DELIVERABLES_ASSET, WORKTREE_GC_ASSET, runCleanWorktreeReconcileHandoff, runResumeThreadLock, runVerifyStoryDeliverables, runWorktreeGc, } from "../lib/core-utils/worktree-resume.js";
-import { coreNativeHandoffEnabled } from "./core-native-handoff-flag.js";
-import { coreCompanyIndexScopeEnabled } from "./core-company-index-scope-flag.js";
-import { runWorkerSkillCommand } from "./core-worker-skills-command.js";
-import { describeCoreCommand, registeredCoreCommandListing, } from "./core-command-catalog.js";
 /**
  * These commands are now native implementations. Their retained shell assets
  * are deliberately claimed in SCAFFOLD_ONLY_ASSETS: loose HQ trees still ship
  * them for legacy callers, but `hq core` never dispatches through them again.
  */
 export const NATIVE_UTILITY_COMMANDS = [
-    { name: "detect-stale-core-policy-mirror", asset: "core/scripts/detect-stale-core-policy-mirror.sh", root: "live", summary: "Find (and prune) stale personal-policy mirrors in core", run: (args, context) => detectStaleCorePolicyMirror(args, { root: context.hqRoot }) },
-    { name: "hq-status-summary", asset: "core/scripts/hq-status-summary.sh", root: "cwd", summary: "Summarize working-tree status across the HQ tree", run: (args, context) => summarizeHqStatus(args, { cwd: context.cwd, root: context.hqRoot }) },
-    { name: "ontology-readme-drift", asset: "core/scripts/ontology-readme-drift.sh", root: "live", summary: "Check a company's ontology README for drift", run: (args, context) => ontologyReadmeDrift(args, { root: context.hqRoot }) },
-    { name: "resize-screenshot", asset: "core/scripts/resize-screenshot.sh", root: "cwd", summary: "Downscale a screenshot for context efficiency", run: (args) => resizeScreenshot(args) },
-    { name: "token-usage-report", asset: "core/scripts/token-usage-report.sh", root: "cwd", summary: "Report session token usage", run: (args) => tokenUsageReport(args) },
-    { name: "worktree", asset: "core/scripts/worktree.sh", root: "live", summary: "Create a git worktree under workspace/worktrees/", run: (args, context) => createWorktree(args, { cwd: context.cwd, hqRoot: context.hqRoot }) },
-    { name: "codex-skill-bridge", asset: "core/scripts/codex-skill-bridge.sh", root: "live", summary: "Install/inspect the Codex skill bridge", run: (args, context) => runCodexSkillBridgeCommand(args, { root: context.hqRoot ?? context.cwd }) },
-    { name: "archive-old-threads", asset: "core/scripts/archive-old-threads.sh", root: "live", summary: "Archive aged session-thread files", run: (args, context) => archiveOldThreads(args, { hqRoot: context.hqRoot ?? context.cwd }) },
-    { name: "qmd-reindex-after-sync", asset: "core/scripts/qmd-reindex-after-sync.sh", root: "cwd", summary: "Refresh qmd collections after a sync", run: (args, context) => qmdReindexAfterSync(args, { cwd: context.cwd }) },
+    { name: "detect-stale-core-policy-mirror", root: "live", summary: "Find (and prune) stale personal-policy mirrors in core", run: (args, context) => detectStaleCorePolicyMirror(args, { root: context.hqRoot }) },
+    { name: "hq-status-summary", root: "cwd", summary: "Summarize working-tree status across the HQ tree", run: (args, context) => summarizeHqStatus(args, { cwd: context.cwd, root: context.hqRoot }) },
+    { name: "ontology-readme-drift", root: "live", summary: "Check a company's ontology README for drift", run: (args, context) => ontologyReadmeDrift(args, { root: context.hqRoot }) },
+    { name: "resize-screenshot", root: "cwd", summary: "Downscale a screenshot for context efficiency", run: (args) => resizeScreenshot(args) },
+    { name: "token-usage-report", root: "cwd", summary: "Report session token usage", run: (args) => tokenUsageReport(args) },
+    { name: "worktree", root: "live", summary: "Create a git worktree under workspace/worktrees/", run: (args, context) => createWorktree(args, { cwd: context.cwd, hqRoot: context.hqRoot }) },
+    { name: "codex-skill-bridge", root: "live", summary: "Install/inspect the Codex skill bridge", run: (args, context) => runCodexSkillBridgeCommand(args, { root: context.hqRoot ?? context.cwd }) },
+    { name: "archive-old-threads", root: "live", summary: "Archive aged session-thread files", run: (args, context) => archiveOldThreads(args, { hqRoot: context.hqRoot ?? context.cwd }) },
+    { name: "qmd-reindex-after-sync", root: "cwd", summary: "Refresh qmd collections after a sync", run: (args, context) => qmdReindexAfterSync(args, { cwd: context.cwd }) },
 ];
 export const NATIVE_SCAFFOLD_COMMANDS = [
     {
@@ -129,61 +108,51 @@ export const WORKER_SUBCOMMANDS = [
 export const REBUILD_INDEX_TARGETS = [
     {
         target: "all",
-        asset: "core/scripts/rebuild-all-indexes.sh",
         renderer: "all",
         summary: "Regenerate every INDEX.md across the HQ tree",
     },
     {
         target: "companies",
-        asset: "core/scripts/rebuild-companies-index.sh",
         renderer: "companies",
         summary: "Regenerate companies/INDEX.md",
     },
     {
         target: "company-knowledge",
-        asset: "core/scripts/rebuild-company-knowledge-index.sh",
         renderer: "company-knowledge",
         summary: "Regenerate a company's knowledge INDEX.md",
     },
     {
         target: "orchestrator",
-        asset: "core/scripts/rebuild-orchestrator-index.sh",
         renderer: "orchestrator",
         summary: "Regenerate the orchestrator workspace INDEX.md",
     },
     {
         target: "projects",
-        asset: "core/scripts/rebuild-projects-index.sh",
         renderer: "projects",
         summary: "Regenerate the projects INDEX.md",
     },
     {
         target: "public-knowledge",
-        asset: "core/scripts/rebuild-public-knowledge-index.sh",
         renderer: "public-knowledge",
         summary: "Regenerate core/knowledge/public/INDEX.md",
     },
     {
         target: "reports",
-        asset: "core/scripts/rebuild-reports-index.sh",
         renderer: "reports",
         summary: "Regenerate the reports INDEX.md",
     },
     {
         target: "social-drafts",
-        asset: "core/scripts/rebuild-social-drafts-index.sh",
         renderer: "social-drafts",
         summary: "Regenerate workspace/social-drafts/INDEX.md",
     },
     {
         target: "threads",
-        asset: "core/scripts/rebuild-threads-index.sh",
         renderer: "threads",
         summary: "Regenerate the session-threads INDEX.md",
     },
     {
         target: "workers",
-        asset: "core/scripts/rebuild-workers-index.sh",
         renderer: "workers",
         summary: "Regenerate the workers INDEX.md",
     },
@@ -222,16 +191,6 @@ export const SCAFFOLD_COMMANDS = [
  * direct `hq core` command.
  */
 export const SCAFFOLD_ONLY_ASSETS = [
-    { asset: "core/scripts/resolve-company.sh", root: "live", summary: "Rollback companion for native resolve-company" },
-    { asset: "core/scripts/jobs-schedule-parse.sh", root: "live", summary: "Rollback companion for native jobs schedule-parse" },
-    { asset: "core/scripts/jobs-validate.sh", root: "live", summary: "Rollback companion for native jobs validate" },
-    { asset: "core/scripts/outpost-jobs-reconcile.sh", root: "live", summary: "Rollback companion for native jobs reconcile" },
-    { asset: "core/scripts/hq-job-probe.sh", root: "live", summary: "Scheduled jobs readiness probe used by the reconcile rollback path" },
-    { asset: "core/scripts/hq-job-run.sh", root: "live", summary: "Scheduled jobs runner used by generated systemd units" },
-    { asset: "core/scripts/hq-job-notify.sh", root: "live", summary: "Scheduled jobs failure notification helper" },
-    { asset: "core/scripts/hq-job-remediate.sh", root: "live", summary: "Scheduled jobs bounded remediation helper" },
-    { asset: "core/scripts/hq-dm-bind.sh", root: "live", summary: "Rollback shell for native dm-bind" },
-    { asset: "core/scripts/work-mesh-live-bind-trusted.sh", root: "live", summary: "Rollback shell for native work-mesh-bind-trusted" },
     // Shared shell libs sourced by the two relocated scripts (and hooks). Never
     // dispatched on their own (so no `hq core` command), but they MUST ship in the
     // tarball, or the bundled hq-session / checkpoint-stop-gate die at `source`
@@ -240,65 +199,65 @@ export const SCAFFOLD_ONLY_ASSETS = [
     { asset: "core/scripts/lib/session-scope-capability.sh", root: "live", summary: "Session scope-capability lib sourced by hq-session" },
     { asset: "core/scripts/lib/session-id.sh", root: "live", summary: "Session-id resolver lib sourced by hq-session" },
     { asset: "core/scripts/lib/work-mesh-enqueue.sh", root: "live", summary: "Work Mesh Live spool enqueue lib sourced by hooks" },
-    // Wave 2 handoff/worktree commands retain their old scripts for one release,
-    // behind the shared default-off rollback flag.
-    { asset: WORKTREE_GC_ASSET, root: "live", summary: "Rollback companion for native worktree-gc" },
-    { asset: CLEAN_HANDOFF_ASSET, root: "cwd", summary: "Rollback companion for native clean-worktree-reconcile-handoff" },
-    { asset: RESUME_LOCK_ASSET, root: "live", summary: "Rollback companion for native resume-thread-lock" },
-    { asset: VERIFY_DELIVERABLES_ASSET, root: "live", summary: "Rollback companion for native verify-story-deliverables" },
-    // Wave 1a delegate shells remain bundled as the default-off rollback path.
-    // Their roots mirror the original scripts; pickup does not read an HQ root.
-    { asset: "core/scripts/hq-delegate-resolve.sh", root: "live", summary: "Rollback shell for native delegate resolve" },
-    { asset: "core/scripts/hq-delegate-pickup.sh", root: "cwd", summary: "Rollback shell for native delegate pickup (root independent)" },
-    { asset: "core/scripts/hq-delegate-repo.sh", root: "live", summary: "Rollback shell for native delegate repo" },
-    { asset: "core/scripts/hq-delegate-secrets.sh", root: "live", summary: "Rollback shell for native delegate secrets" },
-    { asset: "core/scripts/hq-delegate-transfer.sh", root: "live", summary: "Rollback shell for native delegate transfer" },
-    { asset: "core/scripts/hq-delegate-bundle.sh", root: "live", summary: "Rollback shell for native delegate bundle" },
-    { asset: "core/scripts/hq-delegate-grant.sh", root: "live", summary: "Rollback shell for native delegate grant" },
-    { asset: "core/scripts/hq-delegate-publish.sh", root: "live", summary: "Rollback shell for native delegate publish" },
-    { asset: "core/scripts/hq-delegate-send.sh", root: "live", summary: "Rollback shell for native delegate send" },
-    { asset: "core/scripts/hq-delegate-verify.sh", root: "live", summary: "Rollback shell for native delegate verify" },
-    { asset: "core/scripts/lib/secret-patterns.sh", root: "live", summary: "Secret-pattern library sourced by the delegate rollback shells" },
-    // Retained rollback companions for the gated native ontology commands. These
-    // are loose HQ-tree assets, but `hq core ontology` dispatches natively.
-    { asset: "core/scripts/ontology-audience-grant.sh", root: "live", summary: "Rollback companion for native ontology audience grant" },
-    { asset: "core/scripts/ontology-brief.mjs", root: "live", summary: "Rollback companion for native ontology brief" },
-    { asset: "core/scripts/ontology-candidate.sh", root: "live", summary: "Rollback companion for native ontology candidate" },
-    { asset: "core/scripts/ontology-garden.mjs", root: "live", summary: "Rollback companion for native ontology garden" },
-    { asset: "core/scripts/ontology-source-worklist.sh", root: "live", summary: "Rollback companion for native ontology source worklist" },
-    { asset: "core/scripts/source-yaml-validate.sh", root: "cwd", summary: "Rollback companion for native source YAML validation" },
-    // Shared by native knowledge-prefs and the ontology candidate shell fallback.
-    { asset: "core/scripts/knowledge-prefs.sh", root: "live", summary: "Sibling dependency for ontology candidate rollback companion" },
-    // Rollback companions for the default-off native knowledge and policy routes.
-    // policy-retire also runs the scaffold validator in-process when native, but
-    // its bundled shell fallback needs both helper assets at these exact paths.
-    { asset: "core/scripts/policy-age-report.sh", root: "live", summary: "Rollback companion for native policy age-report" },
-    { asset: "core/scripts/policy-retire.sh", root: "live", summary: "Rollback companion for native policy retire" },
-    { asset: "core/scripts/read-policy-frontmatter.sh", root: "cwd", summary: "Rollback companion for native policy frontmatter" },
-    { asset: "core/scripts/eval-trigger.sh", root: "live", summary: "Trigger grammar helper used by the policy validator companion" },
-    { asset: ".claude/hooks/validate-policy-frontmatter.sh", root: "live", summary: "Policy validator companion used by policy-retire rollback" },
-    // Wave 2a handoff shells remain bundled as the default-off rollback path.
-    { asset: "core/scripts/handoff-finalize.sh", root: "live", summary: "Rollback shell for native handoff finalize" },
-    { asset: "core/scripts/handoff-post.sh", root: "live", summary: "Rollback shell for native handoff post" },
-    { asset: "core/scripts/handoff-open-steps.sh", root: "live", summary: "Rollback shell for native handoff open-steps" },
-    { asset: "core/scripts/qmd-reindex-bg.sh", root: "live", summary: "Rollback handoff reindex forwarder" },
-    // Wave 5 native utility rollback companions, sourced verbatim from staging
-    // because these assets were not present in the hq-cli bundle at launch.
-    { asset: "core/scripts/audit-log.sh", root: "live", summary: "Rollback shell for native audit-log" },
-    { asset: "core/scripts/git-pack-extension-check.sh", root: "cwd", summary: "Rollback shell for native git-pack-extension-check" },
-    { asset: "core/scripts/hq-pin.sh", root: "live", summary: "Rollback shell for native pin" },
-    { asset: "core/scripts/refresh-vault-access.sh", root: "cwd", summary: "Rollback shell for native refresh-vault-access" },
-    { asset: "core/scripts/lib/portable.sh", root: "live", summary: "Shared portable helpers sourced by the audit-log rollback shell" },
-    ...NATIVE_UTILITY_COMMANDS.map(({ asset, root, summary }) => ({
-        asset,
-        root,
-        summary: `Scaffold-only native utility companion: ${summary}`,
-    })),
-    ...REBUILD_INDEX_TARGETS.map(({ asset }) => ({
-        asset,
+    { asset: "core/scripts/archive-old-threads.sh", root: "live", summary: "Scaffold-only native utility companion" },
+    { asset: "core/scripts/codex-skill-bridge.sh", root: "live", summary: "Scaffold-only native utility companion" },
+    { asset: "core/scripts/qmd-reindex-after-sync.sh", root: "cwd", summary: "Scaffold-only native utility companion" },
+    { asset: "core/scripts/detect-stale-core-policy-mirror.sh", root: "live", summary: "Scaffold-only native utility companion" },
+    { asset: "core/scripts/hq-status-summary.sh", root: "cwd", summary: "Scaffold-only native utility companion" },
+    { asset: "core/scripts/ontology-readme-drift.sh", root: "live", summary: "Scaffold-only native utility companion" },
+    { asset: "core/scripts/resize-screenshot.sh", root: "cwd", summary: "Scaffold-only native utility companion" },
+    { asset: "core/scripts/token-usage-report.sh", root: "cwd", summary: "Scaffold-only native utility companion" },
+    { asset: "core/scripts/worktree.sh", root: "live", summary: "Scaffold-only native utility companion" },
+    {
+        asset: "core/scripts/rebuild-all-indexes.sh",
+        root: "cwd",
+        summary: "Scaffold-only native rebuild-index companion",
+    },
+    {
+        asset: "core/scripts/rebuild-companies-index.sh",
+        root: "cwd",
+        summary: "Scaffold-only native rebuild-index companion",
+    },
+    {
+        asset: "core/scripts/rebuild-company-knowledge-index.sh",
+        root: "cwd",
+        summary: "Scaffold-only native rebuild-index companion",
+    },
+    {
+        asset: "core/scripts/rebuild-orchestrator-index.sh",
+        root: "cwd",
+        summary: "Scaffold-only native rebuild-index companion",
+    },
+    {
+        asset: "core/scripts/rebuild-projects-index.sh",
+        root: "cwd",
+        summary: "Scaffold-only native rebuild-index companion",
+    },
+    {
+        asset: "core/scripts/rebuild-public-knowledge-index.sh",
+        root: "cwd",
+        summary: "Scaffold-only native rebuild-index companion",
+    },
+    {
+        asset: "core/scripts/rebuild-reports-index.sh",
+        root: "cwd",
+        summary: "Scaffold-only native rebuild-index companion",
+    },
+    {
+        asset: "core/scripts/rebuild-social-drafts-index.sh",
+        root: "cwd",
+        summary: "Scaffold-only native rebuild-index companion",
+    },
+    {
+        asset: "core/scripts/rebuild-threads-index.sh",
+        root: "cwd",
+        summary: "Scaffold-only native rebuild-index companion",
+    },
+    {
+        asset: "core/scripts/rebuild-workers-index.sh",
         root: "cwd",
         summary: "Scaffold-only native rebuild-index companion",
-    })),
+    },
 ];
 /** Every claimed bundled asset, used by packaging and interpreter tests. */
 export const SCAFFOLD_ASSETS = [
@@ -341,9 +300,6 @@ function runEntry(entry, scope, args) {
         args,
         cwd,
         hqRoot,
-        env: entry.asset === "core/scripts/hq-session.sh"
-            ? { HQ_HQ_SESSION_NO_CLI: "1" }
-            : undefined,
     });
     // Propagate verbatim. Several of these scripts use their exit code as their
     // interface (drift detected, lint failed), so remapping it would break the
@@ -358,7 +314,6 @@ export function registerCoreCommands(program) {
     const core = program
         .command("core", { hidden: true })
         .description("HQ scaffold scripts hosted by the CLI (core; not a stable surface)")
-        .addHelpText("afterAll", "exact-company-directory-match-v1")
         // The root override lives on the GROUP, not the subcommands, so it can never
         // collide with a wrapped script's own flags — everything after the
         // subcommand name is passed through untouched.
@@ -366,62 +321,11 @@ export function registerCoreCommands(program) {
     // This group primarily hosts manifest-driven bundled assets, but it also
     // hosts native TypeScript plumbing when a scaffold contract needs it.
     registerCoreCheckpointCommand(core);
-    registerCoreOntologyCommand(core);
-    registerCoreCheckpointGateSettingCommand(core);
-    registerCoreDelegateCommand(core, registerCoreDelegateW1b);
-    registerCoreHandoffCommand(core);
-    registerCoreKnowledgePrefsCommand(core);
-    registerCorePolicyCommand(core);
-    registerCoreJobsNativeCommand(core);
-    registerCoreResolveCompanyNativeCommand(core);
-    registerCoreAuditLogNative(core);
-    registerCoreGitPackExtensionCheckNative(core);
-    registerCorePinNative(core);
-    registerCoreRefreshVaultAccessNative(core);
-    registerCoreDmBindNative(core);
-    registerCoreWorkMeshBindTrustedNative(core);
-    // Wave 2 handoff/worktree commands retain their byte-identical shell assets
-    // as a default-off rollback path for one release. Keep the gate helper small
-    // so sibling Wave 2 work can reuse it without editing this command table.
-    const handoffCommands = [
-        { name: "worktree-gc", asset: WORKTREE_GC_ASSET, root: "live", summary: "Safely collect old, preserved HQ worktrees", run: (args, root) => runWorktreeGc(args, root) },
-        { name: "clean-worktree-reconcile-handoff", asset: CLEAN_HANDOFF_ASSET, root: "cwd", summary: "Remove only byte-identical incoming handoff mirrors", run: (args) => runCleanWorktreeReconcileHandoff(args) },
-        { name: "resume-thread-lock", asset: RESUME_LOCK_ASSET, root: "live", summary: "Inspect or acquire a durable resumework lock", run: (args, root) => runResumeThreadLock(args, root) },
-        { name: "verify-story-deliverables", asset: VERIFY_DELIVERABLES_ASSET, root: "live", summary: "Check declared and returned story deliverables", run: (args, root) => runVerifyStoryDeliverables(args, root) },
-    ];
-    for (const entry of handoffCommands) {
-        const command = core
-            .command(entry.name)
-            .description(entry.summary)
-            .allowUnknownOption()
-            .allowExcessArguments()
-            .helpOption(false)
-            .argument("[args...]")
-            .action(async (args = [], _options, cmd) => {
-            const scope = core.opts();
-            const operands = cmd.args.length > 0 ? cmd.args : args;
-            if (!await coreNativeHandoffEnabled()) {
-                if (entry.root === "live")
-                    runEntry(entry, scope, operands);
-                else {
-                    const result = runBundledScript({ asset: entry.asset, args: operands, cwd: process.cwd() });
-                    if (result.code !== 0)
-                        process.exit(result.code);
-                }
-                return;
-            }
-            const { cwd, hqRoot } = resolveEntryRoot(entry, scope);
-            const code = await entry.run(operands, hqRoot ?? cwd);
-            if (code !== 0)
-                process.exit(code);
-        });
-        describeCoreCommand(command, { execution: "native", asset: entry.asset, root: entry.root });
-    }
     // These command names intentionally own native implementations. Their
     // similarly named scaffold assets are forwarders, so sending them through
     // runEntry would recurse back into this command forever.
     for (const entry of NATIVE_SCAFFOLD_COMMANDS) {
-        const command = core
+        core
             .command(entry.name)
             .description(entry.summary)
             .allowUnknownOption()
@@ -437,14 +341,9 @@ export function registerCoreCommands(program) {
             if (result.status !== 0)
                 process.exit(result.status);
         });
-        describeCoreCommand(command, {
-            execution: "native",
-            asset: entry.asset,
-            root: entry.root,
-        });
     }
     for (const entry of NATIVE_UTILITY_COMMANDS) {
-        const command = core
+        core
             .command(entry.name)
             .description(entry.summary)
             .allowUnknownOption()
@@ -459,11 +358,6 @@ export function registerCoreCommands(program) {
             if (code !== 0)
                 process.exit(code);
         });
-        describeCoreCommand(command, {
-            execution: "native",
-            asset: entry.asset,
-            root: entry.root,
-        });
     }
     // `hq core worker <name>` — a nested subgroup for worker-scoped skill
     // maintenance. Nested (rather than flat `hq core worker-<name>`) so the two
@@ -472,7 +366,7 @@ export function registerCoreCommands(program) {
         .command("worker")
         .description("Worker-scoped skill maintenance (lint, share)");
     for (const entry of WORKER_SUBCOMMANDS) {
-        const command = worker
+        worker
             .command(entry.name)
             .description(entry.summary)
             // Pure passthrough: the wrapped script owns its own argument grammar.
@@ -480,15 +374,10 @@ export function registerCoreCommands(program) {
             .allowExcessArguments()
             .helpOption(false)
             .argument("[args...]", "arguments passed through to the script")
-            .action(async (args = [], _opts, cmd) => {
+            .action((args = [], _opts, cmd) => {
             const scope = core.opts();
             const operands = cmd.args.length > 0 ? cmd.args : args;
-            await runWorkerSkillCommand(entry.name, operands, resolveEntryRoot(entry, scope));
-        });
-        describeCoreCommand(command, {
-            execution: interpreterFor(entry.asset) === "node" ? "bundled-node" : "bundled-shell",
-            asset: entry.asset,
-            root: entry.root,
+            runEntry(entry, scope, operands);
         });
     }
     const runCommand = (entry, args = [], cmd, target) => {
@@ -501,7 +390,7 @@ export function registerCoreCommands(program) {
         runEntry(entry, scope, passthrough);
     };
     const validTargets = REBUILD_INDEX_TARGETS.map((entry) => entry.target);
-    const rebuildCommand = core
+    core
         .command("rebuild-index <target> [args...]")
         .description(`Regenerate one index (target: ${validTargets.join(", ")})`)
         // Pure passthrough: the wrapped script owns its own argument grammar, so
@@ -516,49 +405,12 @@ export function registerCoreCommands(program) {
             throw expectedUserError(`Unknown rebuild-index target "${target}". Valid targets: ${validTargets.join(", ")}.`);
         }
         const scope = core.opts();
-        const operands = cmd.args.length > 0 ? cmd.args : args;
-        const passthrough = operands.slice(1);
-        const force = passthrough.includes("--accept");
-        const rendererArgs = passthrough.filter((arg) => arg !== "--accept");
-        const isCompaniesTarget = entry.renderer === "companies";
-        const wantsHelp = rendererArgs.some((arg) => arg === "--help" || arg === "-h");
-        if (isCompaniesTarget && wantsHelp) {
-            renderIndexTarget(entry.renderer, { root: "", output: (message) => process.stdout.write(message) }, rendererArgs);
-            return;
-        }
-        const requestsCompanyScope = isCompaniesTarget && rendererArgs.some((arg) => arg === "--company" || arg.startsWith("--company="));
-        if (requestsCompanyScope && !coreCompanyIndexScopeEnabled()) {
-            throw expectedUserError("rebuild-index companies --company is disabled; enable cli.rebuild-index-company-scope for a canary.");
-        }
         const hqRoot = resolveLiveRoot({ hqRoot: scope.hqRoot });
-        const refused = [];
-        try {
-            renderIndexTarget(entry.renderer, {
-                root: hqRoot,
-                log: (message) => process.stderr.write(`${message}\n`),
-                force,
-                refused,
-            }, rendererArgs);
-        }
-        catch (error) {
-            if (error instanceof CompanyIndexUserError)
-                throw expectedUserError(error.message);
-            throw error;
-        }
-        if (refused.length > 0) {
-            throw expectedUserError(`rebuild-index: refused to overwrite ${refused.length} hand-edited INDEX.md file(s). Re-run with --accept to overwrite.`);
-        }
-    });
-    describeCoreCommand(rebuildCommand, {
-        entries: REBUILD_INDEX_TARGETS.map((entry) => ({
-            name: `rebuild-index ${entry.target}`,
-            execution: "native",
-            asset: entry.asset,
-            root: "live",
-        })),
+        const operands = cmd.args.length > 0 ? cmd.args : args;
+        renderIndexTarget(entry.renderer, { root: hqRoot, log: (message) => process.stderr.write(`${message}\n`) }, operands.slice(1));
     });
     for (const entry of SCAFFOLD_COMMANDS) {
-        const command = core
+        core
             .command(entry.name)
             .description(entry.summary)
             // Pure passthrough: the wrapped script owns its own argument grammar, so
@@ -571,17 +423,12 @@ export function registerCoreCommands(program) {
             .action((args = [], _opts, cmd) => {
             runCommand(entry, args, cmd);
         });
-        describeCoreCommand(command, {
-            execution: interpreterFor(entry.asset) === "node" ? "bundled-node" : "bundled-shell",
-            asset: entry.asset,
-            root: entry.root,
-        });
     }
     // `hq core soft-timeout <interval> [--hard-cap <spec>] [--label <name>] -- <cmd…>`
     // Async and bespoke (the NATIVE_UTILITY_COMMANDS table is synchronous), since
     // it spawns a child and warns over time. Warn-don't-kill primitive for
     // finding 2.1 — the CLI-hosted twin of core/scripts/lib/soft-timeout.sh.
-    const softTimeout = core
+    core
         .command("soft-timeout")
         .description("Run a command under a soft (warn, don't kill) timeout")
         // Passthrough: the wrapped command owns everything after `--`.
@@ -595,11 +442,10 @@ export function registerCoreCommands(program) {
         if (code !== 0)
             process.exit(code);
     });
-    describeCoreCommand(softTimeout, { execution: "native", root: "cwd" });
     // `hq core timeout-guard` — PreToolUse decision for the foreground-timeout
     // guard (finding 2.1). Reads the hook JSON on stdin and exits 2 to block, 0
     // to allow. The shipped .claude hook is a thin shim over this.
-    const timeoutGuard = core
+    core
         .command("timeout-guard")
         .description("PreToolUse guard: block over-ceiling foreground timeouts (reads hook JSON on stdin)")
         .helpOption(false)
@@ -607,46 +453,10 @@ export function registerCoreCommands(program) {
         const chunks = [];
         for await (const chunk of process.stdin)
             chunks.push(chunk);
-        const code = await timeoutGuardCommand(Buffer.concat(chunks).toString("utf8"));
+        const code = timeoutGuardCommand(Buffer.concat(chunks).toString("utf8"));
         if (code !== 0)
             process.exit(code);
     });
-    describeCoreCommand(timeoutGuard, { execution: "native", root: "cwd" });
-    // `hq core sentry report` — constrained, stderr-diagnostic-only transport
-    // for hook health events. Event data is accepted only on stdin so it never
-    // appears in the process list shared by the fleet.
-    const sentryReport = core
-        .command("sentry")
-        .description("Constrained diagnostics transport for HQ hooks")
-        .command("report")
-        .description("Report one validated hook diagnostic from stdin")
-        .option("--dry-run", "validate and print the scrubbed Sentry event projection without sending")
-        .option("--timeout-ms <milliseconds>", "bounded Sentry flush budget (1-5000ms)")
-        .action(async (options) => {
-        const stdin = await readSentryReportStdin(process.stdin);
-        const timeoutMs = options.timeoutMs === undefined ? undefined : Number(options.timeoutMs);
-        const scope = core.opts();
-        const hqRoot = scope.hqRoot ? resolveLiveRoot({ hqRoot: scope.hqRoot }) : undefined;
-        const result = await reportSentryEvent(stdin ?? "", {
-            dryRun: options.dryRun,
-            timeoutMs,
-            hqRoot,
-        });
-        if (result.code !== 0)
-            process.exitCode = result.code;
-    });
-    describeCoreCommand(sentryReport, { execution: "native", root: "live" });
-    const commands = core
-        .command("commands", { hidden: true })
-        .description("List registered hq core commands as JSON")
-        .option("--json", "Print the command catalog as JSON")
-        .action((options) => {
-        if (!options.json) {
-            throw expectedUserError("Usage: hq core commands --json");
-        }
-        process.stdout.write(`${JSON.stringify(registeredCoreCommandListing(core))}\n`);
-    });
-    describeCoreCommand(commands, { execution: "native", root: "cwd" });
     return core;
 }
 //# sourceMappingURL=core.js.map

package/dist/commands/crm.js

@@ -19,54 +19,6 @@ const CRM_ENTITY_TYPES = [
     "invoice",
     "company",
 ];
-const CRM_SETTINGS_PRECHECK_TIMEOUT_MS = 3_000;
-const CRM_DISABLED_HINT_PREFIX = "CRM is not enabled for this company. Enable it first: ";
-function printCrmDisabledHint(companySlug) {
-    console.error(chalk.red(CRM_DISABLED_HINT_PREFIX +
-        `hq company settings set --company ${companySlug} --crm-enabled true`));
-    process.exit(1);
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/**
- * CRM settings are a best-effort precheck. Only an explicit false prevents the
- * write; unavailable or malformed settings leave hq-pro authoritative.
- */
-async function crmIsExplicitlyDisabled(token, companyUid) {
-    try {
-        const response = await vaultApiFetch({
-            token,
-            path: "/company-settings",
-            query: { companyUid },
-            signal: AbortSignal.timeout(CRM_SETTINGS_PRECHECK_TIMEOUT_MS),
-        });
-        if (!response.ok) {
-            console.error(chalk.red(`CRM settings precheck returned HTTP ${response.status}; continuing to let the server decide.`));
-            return false;
-        }
-        let body;
-        try {
-            body = await response.json();
-        }
-        catch (err) {
-            const errorName = err instanceof Error ? err.name : "unknown error";
-            console.error(chalk.red(`CRM settings precheck returned invalid JSON (${errorName}); continuing to let the server decide.`));
-            return false;
-        }
-        if (!isRecord(body))
-            return false;
-        const settings = isRecord(body.companySettings)
-            ? body.companySettings
-            : body;
-        return settings.crmEnabled === false;
-    }
-    catch (err) {
-        const errorName = err instanceof Error ? err.name : "unknown error";
-        console.error(chalk.red(`CRM settings precheck failed (${errorName}); continuing to let the server decide.`));
-        return false;
-    }
-}
 /**
  * Read the `--json <file|->` payload: a single entity object or an array of
  * entities. `-` reads from stdin. Returns the entities array (always
@@ -175,9 +127,6 @@ export function registerCrmCommand(program) {
             }
             const token = await ensureCognitoToken();
             const companyUid = await getEntityUid(token, { companySlug });
-            if (await crmIsExplicitlyDisabled(token, companyUid)) {
-                printCrmDisabledHint(companySlug);
-            }
             const res = await vaultApiFetch({
                 token,
                 path: "/crm/entities",
@@ -188,7 +137,9 @@ export function registerCrmCommand(program) {
                 const body = (await res.json().catch(() => ({})));
                 // CrmDisabledError surfaces as a 403 with a helpful message.
                 if (res.status === 403 && body.code === "CRM_DISABLED") {
-                    printCrmDisabledHint(companySlug);
+                    console.error(chalk.red("CRM is not enabled for this company. Enable it first: " +
+                        `hq company settings set --company ${companySlug} --crm-enabled true`));
+                    process.exit(1);
                 }
                 console.error(chalk.red(`Failed to upsert entities: ${body.error ?? res.statusText}`));
                 process.exit(1);