@indigoai-us/hq-cli 5.312.2-beta.0 → 5.314.0

package/dist/commands/core-resolve-company-native.js

@@ -1,408 +0,0 @@
-/** Native port of resolve-company.sh. This module stays on the fast import path. */
-import { spawn } from "node:child_process";
-import * as fs from "node:fs";
-import * as path from "node:path";
-export const RESOLVE_COMPANY_ASSET = "core/scripts/resolve-company.sh";
-export const RESOLVE_COMPANY_HELP = [
-    "hq-core: public",
-    "resolve-company.sh — resolve the active company for skills and routing.",
-    "",
-    "Resolution order (first hit wins): explicit manifest slug in the prompt,",
-    "session company_slug, enabled device default, then none. Prompt matching is",
-    "whole-token only; free text never guesses a company.",
-    "",
-    "Output: {\"company\":\"<slug>\",\"source\":\"prompt|session|device_default|none\"}",
-    "Always exits 0 and never writes state.",
-    "",
-    "set -uo pipefail",
-    "",
-    "ROOT=\"\"",
-].join("\n") + "\n";
-const EMPTY_ENV = {};
-const keepSlug = (slug) => slug !== "" && slug !== "_template" && slug !== "companies" && slug !== "unaffiliated_repos";
-function errorCode(error) {
-    return error && typeof error === "object" && "code" in error && typeof error.code === "string"
-        ? error.code
-        : undefined;
-}
-function readFile(filePath, fileSystem) {
-    try {
-        return fileSystem.readFileSync(filePath, "utf8");
-    }
-    catch (error) {
-        const code = errorCode(error);
-        if (code === "ENOENT" || code === "ENOTDIR" || code === "EACCES" || code === "ELOOP")
-            return undefined;
-        throw error;
-    }
-}
-function readManifest(filePath, fileSystem) {
-    try {
-        return fileSystem.readFileSync(filePath, "utf8");
-    }
-    catch (error) {
-        const code = errorCode(error);
-        if (code === "EACCES") {
-            return {
-                code: 0,
-                stdout: Buffer.from('{"company":"","source":"none"}\n'),
-                stderr: Buffer.from("awk: fatal: cannot open file `" + filePath + "' for reading: Permission denied\n"),
-            };
-        }
-        if (code === "ENOENT" || code === "ENOTDIR" || code === "ELOOP")
-            return output("", "none");
-        throw error;
-    }
-}
-function isFile(filePath, fileSystem) {
-    try {
-        return fileSystem.statSync(filePath).isFile();
-    }
-    catch (error) {
-        const code = errorCode(error);
-        if (code === "ENOENT" || code === "ENOTDIR" || code === "EACCES" || code === "ELOOP")
-            return false;
-        throw error;
-    }
-}
-function parseManifestSlugs(text) {
-    const slugs = new Set();
-    let wrapped = false;
-    for (const rawLine of text.split("\n")) {
-        const line = rawLine.endsWith("\r") ? rawLine.slice(0, -1) : rawLine;
-        if (/^companies:[ \t]*$/.test(line)) {
-            wrapped = true;
-            continue;
-        }
-        if (wrapped && /^[^ \t][^:]*:[ \t]*$/.test(line))
-            wrapped = false;
-        if (wrapped) {
-            const match = line.match(/^ {2}([A-Za-z][A-Za-z0-9_-]*):/);
-            if (match && keepSlug(match[1]))
-                slugs.add(match[1]);
-            continue;
-        }
-        const match = line.match(/^([A-Za-z][A-Za-z0-9_-]*):/);
-        if (match && keepSlug(match[1]))
-            slugs.add(match[1]);
-    }
-    return [...slugs];
-}
-function promptSlug(prompt, slugs) {
-    if (!prompt)
-        return "";
-    const asciiLower = (value) => value.replace(/[A-Z]/g, (letter) => String.fromCharCode(letter.charCodeAt(0) + 32));
-    const normalized = asciiLower(prompt).replace(/[^a-z0-9_-]/g, " ");
-    const positions = new Map();
-    normalized.split(/[ \t]+/).forEach((token, index) => {
-        if (token && !positions.has(token))
-            positions.set(token, index + 1);
-    });
-    const matches = new Map();
-    for (const slug of slugs) {
-        const key = asciiLower(slug);
-        if (!positions.has(key))
-            continue;
-        matches.set(key, [...(matches.get(key) ?? []), slug]);
-    }
-    let bestSlug = "";
-    let bestLength = 0;
-    let bestPosition = 0;
-    for (const [key, candidates] of matches) {
-        if (candidates.length !== 1)
-            continue;
-        const slug = candidates[0];
-        const length = slug.length;
-        const position = positions.get(key);
-        if (length > bestLength || (length === bestLength && position < bestPosition)) {
-            bestSlug = slug;
-            bestLength = length;
-            bestPosition = position;
-        }
-    }
-    return bestSlug;
-}
-function validSessionId(value) {
-    return value !== "" && value !== "." && value !== ".." && /^[A-Za-z0-9._-]+$/.test(value);
-}
-function sessionId(root, env, fileSystem) {
-    for (const name of ["HQ_SESSION_ID", "CLAUDE_CODE_SESSION_ID", "CLAUDE_SESSION_ID", "CODEX_SESSION_ID", "CODEX_THREAD_ID", "GROK_SESSION_ID"]) {
-        const value = (env[name] ?? "").replace(/[ \t\n\v\f\r]/g, "");
-        if (validSessionId(value))
-            return value;
-    }
-    const current = readFile(path.join(root, "workspace/sessions/.current"), fileSystem)?.replace(/[ \t\n\v\f\r]/g, "") ?? "";
-    return validSessionId(current) ? current : "";
-}
-function sessionCompany(root, env, fileSystem) {
-    const helper = path.join(root, "core/scripts/hq-session.sh");
-    try {
-        fileSystem.accessSync(helper, fs.constants.X_OK);
-    }
-    catch (error) {
-        const code = errorCode(error);
-        if (code === "ENOENT" || code === "ENOTDIR" || code === "EACCES" || code === "ELOOP")
-            return "";
-        throw error;
-    }
-    // A directory may be executable according to access(2), but `bash directory`
-    // fails without output, just as hq-session.sh does here.
-    if (!isFile(helper, fileSystem))
-        return "";
-    const id = sessionId(root, env, fileSystem);
-    if (!id)
-        return "";
-    const meta = readFile(path.join(root, "workspace/sessions", id, "meta.yaml"), fileSystem);
-    if (meta === undefined)
-        return "";
-    let value = "";
-    for (const line of meta.split("\n")) {
-        const firstField = line.replace(/^[ \t]+/, "").split(/[ \t]+/, 1)[0];
-        if (firstField !== "company_slug:")
-            continue;
-        value = line.replace(/^[^:]+:[ \t]*/, "").replace(/^"|"$/g, "");
-        break;
-    }
-    // The shell's command substitution strips trailing newlines, then tr removes
-    // all remaining whitespace and double quotes from the helper's output.
-    return value.replace(/[ \t\n\v\f\r"]/g, "");
-}
-function fleetIdentityPresent(rootPrefix, env, fileSystem) {
-    if (env.HQ_AGENT_WORKDIR || env.HQ_AGENT_COMPANY_DIR || env.HQ_AGENT_IDENTITY_FILE)
-        return true;
-    const paths = [
-        "/etc/hq-agent/identity.json",
-        "/etc/hq-agent/machine-creds.json",
-        rootPrefix ? `${rootPrefix.replace(/\/$/, "")}/var/lib/hq-agent/identity.json` : "/var/lib/hq-agent/identity.json",
-        "/var/lib/hq-agent/machine-creds.json",
-    ];
-    return paths.some((filePath) => isFile(filePath, fileSystem));
-}
-function parseJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return undefined;
-    }
-}
-function record(value) {
-    return value !== null && typeof value === "object" && !Array.isArray(value)
-        ? value
-        : undefined;
-}
-function normalizeShellValue(value) {
-    return value.replace(/[ \t\n\v\f\r"]/g, "");
-}
-function defaultSlugFromJson(text, knownSlugs) {
-    const root = record(parseJson(text));
-    if (!root)
-        return "";
-    const candidate = root.defaultCompany;
-    const preference = candidate === null || candidate === undefined || candidate === false
-        ? root
-        : record(candidate);
-    if (!preference)
-        return "";
-    if (preference.enabled !== true || (preference.source ?? "") === "disabled" || (preference.needsChoice ?? false) !== false)
-        return "";
-    if (typeof preference.slug !== "string")
-        return "";
-    const slug = normalizeShellValue(preference.slug);
-    return knownSlugs.has(slug) ? slug : "";
-}
-function validPreflight(text, slug, session, operation) {
-    const value = record(parseJson(text));
-    return Boolean(value && value.contractVersion === 1 && value.sessionId === session &&
-        value.clientOperationId === operation &&
-        typeof value.kind === "string" && ["queued", "needs_project", "needs_task", "bound"].includes(value.kind) &&
-        typeof value.classification === "string" && ["needs_project", "needs_task", "bound"].includes(value.classification) &&
-        typeof value.delivery === "string" && ["queued", "acked"].includes(value.delivery) && value.lifecycle === "open" &&
-        value.companySlug === slug &&
-        typeof value.companyUid === "string" && value.companyUid.length > 0);
-}
-function commandOnPath(name, env) {
-    const pathValue = env.PATH ?? "";
-    for (const directory of pathValue.split(path.delimiter)) {
-        const candidate = path.join(directory || ".", name);
-        try {
-            fs.accessSync(candidate, fs.constants.X_OK);
-            return true;
-        }
-        catch {
-            // `command -v` simply advances to the next PATH entry.
-        }
-    }
-    return false;
-}
-function runHq(args, env, timeoutMs, cwd) {
-    return new Promise((resolve) => {
-        let settled = false;
-        let stdout = "";
-        let child;
-        let timeoutKill;
-        let timedOut = false;
-        const signalGroup = (signal) => {
-            if (!child?.pid)
-                return;
-            try {
-                process.kill(-child.pid, signal);
-            }
-            catch (error) {
-                if (errorCode(error) !== "ESRCH")
-                    finish({ code: 1, stdout });
-            }
-        };
-        const finish = (result) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            if (timeoutKill)
-                clearTimeout(timeoutKill);
-            resolve(result);
-        };
-        const timer = setTimeout(() => {
-            timedOut = true;
-            if (child?.pid) {
-                signalGroup("SIGTERM");
-                // The shell wrapper returns shortly after its 2 second deadline. Do
-                // not wait for inherited stdio handles after killing the process group.
-                timeoutKill = setTimeout(() => {
-                    signalGroup("SIGKILL");
-                    finish({ code: 124, stdout });
-                }, 250);
-            }
-            else {
-                finish({ code: 124, stdout });
-            }
-        }, timeoutMs);
-        try {
-            child = spawn("hq", args, { cwd, detached: true, stdio: ["ignore", "pipe", "ignore"], env });
-        }
-        catch {
-            finish({ code: 127, stdout });
-            return;
-        }
-        child.stdout?.setEncoding("utf8");
-        child.stdout?.on("data", (chunk) => { stdout += chunk; });
-        child.once("error", () => finish({ code: 127, stdout }));
-        child.once("exit", (code, signal) => {
-            signalGroup("SIGTERM");
-            finish({ code: timedOut ? 124 : typeof code === "number" ? code : signal ? 128 : 1, stdout });
-        });
-    });
-}
-function output(company, source) {
-    return { code: 0, stdout: Buffer.from(`{"company":"${company}","source":"${source}"}\n`), stderr: Buffer.alloc(0) };
-}
-function parseArgs(args) {
-    let root = "";
-    let prompt = "";
-    let havePrompt = false;
-    for (let index = 0; index < args.length;) {
-        const arg = args[index];
-        if (arg === "--root") {
-            root = args[index + 1] ?? "";
-            index += Math.min(2, args.length - index);
-        }
-        else if (arg === "--prompt") {
-            prompt = args[index + 1] ?? "";
-            havePrompt = true;
-            index += Math.min(2, args.length - index);
-        }
-        else if (arg === "--help" || arg === "-h") {
-            return { root, prompt, havePrompt, help: true };
-        }
-        else {
-            index += 1;
-        }
-    }
-    return { root, prompt, havePrompt, help: false };
-}
-async function readStdin() {
-    const chunks = [];
-    for await (const chunk of process.stdin)
-        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
-    return Buffer.concat(chunks).toString("utf8");
-}
-export async function resolveCompany(args, dependencies) {
-    const env = dependencies.env ?? process.env;
-    const fileSystem = dependencies.fs ?? fs;
-    const parsed = parseArgs(args);
-    if (parsed.help)
-        return { code: 0, stdout: Buffer.from(RESOLVE_COMPANY_HELP), stderr: Buffer.alloc(0) };
-    let prompt = parsed.prompt;
-    if (!parsed.havePrompt && dependencies.stdinIsTty !== true) {
-        prompt = dependencies.stdin ?? await readStdin();
-    }
-    const root = parsed.root || dependencies.hqRoot || env.HQ_ROOT || env.CLAUDE_PROJECT_DIR || dependencies.cwd;
-    const manifest = path.join(root, "companies/manifest.yaml");
-    if (!isFile(manifest, fileSystem))
-        return output("", "none");
-    const manifestResult = readManifest(manifest, fileSystem);
-    if (typeof manifestResult !== "string")
-        return manifestResult;
-    const manifestText = manifestResult;
-    const slugs = parseManifestSlugs(manifestText);
-    if (slugs.length === 0)
-        return output("", "none");
-    const knownSlugs = new Set(slugs);
-    const promptMatch = promptSlug(prompt, slugs);
-    if (promptMatch)
-        return output(promptMatch, "prompt");
-    const sessionMatch = sessionCompany(root, env, fileSystem);
-    if (sessionMatch && knownSlugs.has(sessionMatch))
-        return output(sessionMatch, "session");
-    if (fleetIdentityPresent(env.HQ_AGENT_ROOT_PREFIX ?? "", env, fileSystem))
-        return output("", "none");
-    // jq is intentionally no longer needed. The native route is always hosted by
-    // Node; the old shell route required `node`, `hq`, and `jq` on PATH.
-    if (!commandOnPath("hq", env))
-        return output("", "none");
-    const hqEnv = { ...EMPTY_ENV, ...env };
-    if (dependencies.hqRoot) {
-        hqEnv.HQ_ROOT = dependencies.hqRoot;
-        hqEnv.CLAUDE_PROJECT_DIR = dependencies.hqRoot;
-    }
-    const invoke = dependencies.spawnHq ?? runHq;
-    const defaultResponse = await invoke(["mesh", "context", "default", "get", "--json"], hqEnv, 2_000, root);
-    const defaultSlug = defaultSlugFromJson(defaultResponse.stdout, knownSlugs);
-    if (!defaultSlug)
-        return output("", "none");
-    const pid = dependencies.pid ?? process.pid;
-    const random = dependencies.random ?? Math.random;
-    const session = `resolve-default-${pid}-${Math.floor(random() * 32768)}`;
-    const operation = `resolve-default-op-${pid}-${Math.floor(random() * 32768)}`;
-    const observation = JSON.stringify({
-        contractVersion: 1,
-        clientOperationId: operation,
-        identity: { sessionId: session, harness: "hq-core", adapterVersion: "1" },
-        cwd: root,
-        hqRoot: root,
-    }).replaceAll("\u007f", "\\u007f");
-    const preflight = await invoke([
-        "mesh", "context", "reconcile", "--observation-json", observation, "--machine", "--offline",
-    ], hqEnv, 2_000, root);
-    if (preflight.code === 0 && validPreflight(preflight.stdout, defaultSlug, session, operation)) {
-        return output(defaultSlug, "device_default");
-    }
-    return output("", "none");
-}
-export async function runResolveCompanyFast(args, stdin, cwd, hqRoot, _commandName, _hqRootArg, stdinReader = readStdin) {
-    const parsed = parseArgs(args);
-    const actualStdin = parsed.havePrompt || process.stdin.isTTY === true
-        ? stdin
-        : stdin || await stdinReader();
-    const result = await resolveCompany(args, {
-        cwd,
-        hqRoot,
-        stdin: actualStdin,
-        stdinIsTty: process.stdin.isTTY === true,
-    });
-    process.stdout.write(result.stdout);
-    if (result.stderr.length)
-        process.stderr.write(result.stderr);
-    return result.code;
-}
-//# sourceMappingURL=core-resolve-company-native.js.map

package/dist/commands/core-work-mesh-bind-trusted-native.d.ts

@@ -1,32 +0,0 @@
-/** Native implementation of core/scripts/work-mesh-live-bind-trusted.sh. */
-import * as fs from "node:fs";
-import type { Command } from "commander";
-import { type UtilityOutput } from "./core-native-utilities.js";
-export declare const WORK_MESH_BIND_TRUSTED_ASSET = "core/scripts/work-mesh-live-bind-trusted.sh";
-export declare const WORK_MESH_BIND_TRUSTED_HELP = "hq-core: public\nUS-011 \u2014 write session meta + reconcile with observation.trustedContext.\nNo --trusted CLI flag in hq-cli; trusted bind is the observation field.\nset -euo pipefail\n\nROOT=\"${HQ_ROOT:-${CLAUDE_PROJECT_DIR:-}}\"\nif [ -z \"$ROOT\" ]; then\n";
-export type WorkMeshBindDeps = {
-    root: string;
-    cwd: string;
-    env: NodeJS.ProcessEnv;
-    now: () => Date;
-    fs: typeof fs;
-    runHq: (args: string[], env: NodeJS.ProcessEnv) => {
-        code: number;
-        stdout: string;
-        stderr: string;
-    };
-    runHqSession: (root: string, args: string[], env: NodeJS.ProcessEnv) => {
-        code: number;
-        stdout: string;
-        stderr: string;
-    };
-    spawnHq: (args: string[], env: NodeJS.ProcessEnv) => void;
-    pid: number;
-    tmpDir: string;
-    ulid: (now: Date) => string;
-};
-export declare const createWorkMeshBindDeps: (root: string, cwd: string, env: NodeJS.ProcessEnv, now: () => Date) => WorkMeshBindDeps;
-export declare function resolveWorkMeshBindSessionId(root: string, env: NodeJS.ProcessEnv, fileSystem?: typeof fs): string;
-export declare function runWorkMeshBindTrusted(args: string[], deps: WorkMeshBindDeps): UtilityOutput;
-export declare function registerCoreWorkMeshBindTrustedNative(core: Command): void;
-//# sourceMappingURL=core-work-mesh-bind-trusted-native.d.ts.map

package/dist/commands/core-work-mesh-bind-trusted-native.js

@@ -1,190 +0,0 @@
-/** Native implementation of core/scripts/work-mesh-live-bind-trusted.sh. */
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { spawn, spawnSync } from "node:child_process";
-import { generateUlid } from "../lib/mesh/live/ulid.js";
-import { resolveLiveRoot } from "../utils/hq-roots.js";
-import { registerNativeUtility } from "./core-native-utilities.js";
-export const WORK_MESH_BIND_TRUSTED_ASSET = "core/scripts/work-mesh-live-bind-trusted.sh";
-export const WORK_MESH_BIND_TRUSTED_HELP = `hq-core: public
-US-011 — write session meta + reconcile with observation.trustedContext.
-No --trusted CLI flag in hq-cli; trusted bind is the observation field.
-set -euo pipefail
-
-ROOT="\${HQ_ROOT:-\${CLAUDE_PROJECT_DIR:-}}"
-if [ -z "$ROOT" ]; then
-`;
-export const createWorkMeshBindDeps = (root, cwd, env, now) => ({
-    root, cwd, env, now, fs, pid: process.pid, tmpDir: env.TMPDIR || "/tmp", ulid: (date) => generateUlid(date.getTime()),
-    runHq: (args, childEnv) => {
-        const result = spawnSync("hq", args, { cwd, env: { ...childEnv, HQ_ROOT: root }, encoding: "utf8" });
-        return { code: result.status ?? 127, stdout: result.stdout ?? "", stderr: result.stderr ?? (result.error ? `${result.error.message}\n` : "") };
-    },
-    runHqSession: (scriptRoot, args, childEnv) => {
-        const result = spawnSync("bash", [path.join(scriptRoot, "core/scripts/hq-session.sh"), ...args], { cwd, env: childEnv, encoding: "utf8" });
-        return { code: result.status ?? 127, stdout: result.stdout ?? "", stderr: result.stderr ?? (result.error ? `${result.error.message}\n` : "") };
-    },
-    spawnHq: (args, childEnv) => {
-        const child = spawn("hq", args, { cwd, env: { ...childEnv, HQ_ROOT: root }, detached: true, stdio: "ignore" });
-        child.unref();
-    },
-});
-export function resolveWorkMeshBindSessionId(root, env, fileSystem = fs) {
-    for (const key of ["HQ_SESSION_ID", "CLAUDE_CODE_SESSION_ID", "CLAUDE_SESSION_ID", "CODEX_SESSION_ID", "CODEX_THREAD_ID"]) {
-        const value = (env[key] ?? "").replace(/\s/g, "");
-        if (value)
-            return value;
-    }
-    try {
-        const value = fileSystem.readFileSync(path.join(root, "workspace/sessions/.current"), "utf8").replace(/\s/g, "");
-        return value;
-    }
-    catch {
-        return "";
-    }
-}
-function hasExecutable(deps, command) {
-    for (const directory of (deps.env.PATH ?? "").split(path.delimiter)) {
-        if (!directory)
-            continue;
-        try {
-            const stat = deps.fs.statSync(path.join(directory, command));
-            if (stat.isFile() && (stat.mode & 0o111) !== 0)
-                return true;
-        }
-        catch { /* PATH entry is absent */ }
-    }
-    return false;
-}
-function workMeshJsonQuote(value) {
-    return `"${value.replace(/\\/g, "\\\\").replace(/"/g, "\\\"").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t")}"`;
-}
-function workMeshObservationJson(observation) {
-    const identity = observation.identity;
-    const trusted = observation.trustedContext;
-    let json = `{"contractVersion":1,"clientOperationId":${workMeshJsonQuote(String(observation.clientOperationId))},"identity":{"sessionId":${workMeshJsonQuote(identity.sessionId)},"harness":${workMeshJsonQuote(identity.harness)},"adapterVersion":${workMeshJsonQuote(identity.adapterVersion)}},"cwd":${workMeshJsonQuote(String(observation.cwd))},"hqRoot":${workMeshJsonQuote(String(observation.hqRoot))}`;
-    if (trusted) {
-        json += ',"trustedContext":{';
-        let first = true;
-        for (const [key, value] of Object.entries(trusted)) {
-            if (!first)
-                json += ",";
-            first = false;
-            json += `${workMeshJsonQuote(key)}:${workMeshJsonQuote(value)}`;
-        }
-        json += "}";
-    }
-    return `${json}}`;
-}
-export function runWorkMeshBindTrusted(args, deps) {
-    let root = deps.env.HQ_ROOT || deps.env.CLAUDE_PROJECT_DIR || deps.root;
-    let company = "", project = "", task = "", sid = "", noReconcile = false;
-    const output = [];
-    for (let i = 0; i < args.length;) {
-        const arg = args[i];
-        if (["--company", "--company-slug", "--project", "--task", "--session", "--session-id", "--root"].includes(arg)) {
-            const value = args[i + 1] ?? "";
-            if (arg === "--company" || arg === "--company-slug")
-                company = value;
-            else if (arg === "--project")
-                project = value;
-            else if (arg === "--task")
-                task = value;
-            else if (arg === "--session" || arg === "--session-id")
-                sid = value;
-            else
-                root = value;
-            i += 2;
-        }
-        else if (arg === "--no-reconcile") {
-            noReconcile = true;
-            i += 1;
-        }
-        else if (arg === "-h" || arg === "--help")
-            return { code: 0, stdout: WORK_MESH_BIND_TRUSTED_HELP.replace(/^# ?/gm, ""), stderr: "" };
-        else
-            i += 1;
-    }
-    if (!sid) {
-        sid = resolveWorkMeshBindSessionId(root, deps.env, deps.fs);
-        if (!sid) {
-            try {
-                sid = deps.fs.readFileSync(path.join(root, "workspace/sessions/.current"), "utf8").replace(/\s/g, "");
-            }
-            catch {
-                sid = "";
-            }
-        }
-    }
-    const childEnv = { ...deps.env, HQ_ROOT: root };
-    const pin = sid ? ["--session-id", sid] : [];
-    let stderr = "";
-    for (const [key, value] of [["company_slug", company], ["project", project], ["task", task]]) {
-        if (!value)
-            continue;
-        const result = deps.runHqSession(root, [...pin, "set", key, value], deps.env);
-        output.push(result.stdout);
-        stderr += result.stderr;
-        if (result.code !== 0)
-            return { code: result.code, stdout: output.join(""), stderr };
-    }
-    if (noReconcile || !sid)
-        return { code: 0, stdout: output.join(""), stderr };
-    let harness = deps.env.HQ_HARNESS || deps.env.HQ_WORK_MESH_HARNESS || "claude-code";
-    if (["claude", "Claude", "ClaudeCode"].includes(harness))
-        harness = "claude-code";
-    else if (harness === "Codex")
-        harness = "codex";
-    else if (harness === "Grok")
-        harness = "grok";
-    const adapter = deps.env.HQ_ADAPTER_CONTRACT_VERSION || "1.0.0";
-    const clientOperationId = deps.ulid(deps.now());
-    const observation = {
-        contractVersion: 1,
-        clientOperationId,
-        identity: { sessionId: sid, harness, adapterVersion: adapter },
-        cwd: deps.env.PWD ?? "",
-        hqRoot: root,
-    };
-    if (company || project || task) {
-        const trusted = {};
-        if (company)
-            trusted.companySlug = company;
-        if (project)
-            trusted.project = project;
-        if (task)
-            trusted.task = task;
-        observation.trustedContext = trusted;
-    }
-    const directory = path.join(deps.tmpDir, "hq-work-mesh-obs");
-    try {
-        deps.fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
-        deps.fs.chmodSync(directory, 0o700);
-    }
-    catch { /* legacy mkdir/chmod are best effort */ }
-    const observationFile = path.join(directory, `${sid}.bind.${deps.pid}.json`);
-    try {
-        deps.fs.writeFileSync(observationFile, `${workMeshObservationJson(observation)}\n`);
-    }
-    catch { /* legacy printf redirection failure is non-fatal */ }
-    if (deps.env.HQ_WORK_MESH_RECONCILE_LOG) {
-        try {
-            deps.fs.appendFileSync(deps.env.HQ_WORK_MESH_RECONCILE_LOG, `reconcile-trusted ${observationFile}\n`);
-        }
-        catch { /* legacy log write is best effort */ }
-    }
-    if (deps.env.HQ_WORK_MESH_RECONCILE_STUB === "1")
-        return { code: 0, stdout: output.join(""), stderr };
-    if (hasExecutable(deps, "hq") && deps.fs.existsSync(observationFile)) {
-        deps.spawnHq(["mesh", "context", "reconcile", "--observation-file", observationFile, "--machine"], childEnv);
-    }
-    return { code: 0, stdout: output.join(""), stderr };
-}
-export function registerCoreWorkMeshBindTrustedNative(core) {
-    registerNativeUtility(core, {
-        name: "work-mesh-bind-trusted", asset: WORK_MESH_BIND_TRUSTED_ASSET, root: "live", summary: "Bind trusted session context and reconcile it with Work Mesh",
-        resolveRoot: (_cwd, hqRoot) => resolveLiveRoot({ hqRoot }),
-        run: (args, context) => runWorkMeshBindTrusted(args, createWorkMeshBindDeps(context.root, context.cwd, context.env, context.now)),
-    });
-}
-//# sourceMappingURL=core-work-mesh-bind-trusted-native.js.map

package/dist/commands/core-worker-lint-native.d.ts

@@ -1,4 +0,0 @@
-import { type WorkerSkillDependencies, type WorkerSkillResult } from "./core-worker-skills-runtime.js";
-export declare const WORKER_SKILL_LINT_ASSET = "core/scripts/lint-shared-worker-skills.sh";
-export declare function runWorkerSkillLint(args: string[], dependencies: WorkerSkillDependencies): WorkerSkillResult;
-//# sourceMappingURL=core-worker-lint-native.d.ts.map