@indigoai-us/hq-cli 5.312.2-beta.0 → 5.314.0

package/dist/lib/bot/promotion-hold.d.ts

@@ -1,24 +0,0 @@
-import type { BotMachineCreds } from "./creds.js";
-/** Even a malformed marker stops startup; never silently discard a handoff. */
-export declare function hasPromotionHold(dir: string): boolean;
-export interface LocalPromotionHold {
-    agentUid: string;
-    ownerUid: string;
-    companyUid: string;
-    operationId: string;
-}
-/** Durable, exclusive intent. The running bot observes it without signalling a
- * possibly reused PID; it finishes its current reply/ACK and exits cleanly.
- */
-export declare function holdForPromotion(dir: string, hold: LocalPromotionHold): void;
-/** A timeout leaves the hold intact and never aborts the model turn. */
-export declare function waitForPromotionDrain(dir: string, timeoutMs?: number): Promise<void>;
-/** Called after freezing/uploading the snapshot; rechecks the durable hold and
- * exited process immediately before authorizing the server handoff boundary.
- */
-export declare function attestPromotionDrain(dir: string, hold: LocalPromotionHold, snapshotSha256: string, machine: BotMachineCreds): Promise<string>;
-/** Display-only summary. Any unreadable or mismatched hold still blocks local controls. */
-export declare function promotionHoldSummary(dir: string, agentUid: string, ownerUid: string): {
-    companyUid: string | null;
-} | null;
-//# sourceMappingURL=promotion-hold.d.ts.map

package/dist/lib/bot/promotion-hold.js

@@ -1,103 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { createHmac } from "node:crypto";
-import { readPidLock } from "../mesh/live/daemon/pid-lock.js";
-import { daemonPidPath } from "../mesh/live/daemon/paths.js";
-import { isPidAlive, readBotStatus } from "./status.js";
-import { botInflightPath } from "./inflight.js";
-const holdPath = (dir) => path.join(dir, "promotion-hold.json");
-/** Even a malformed marker stops startup; never silently discard a handoff. */
-export function hasPromotionHold(dir) {
-    try {
-        fs.lstatSync(holdPath(dir));
-        return true;
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return false;
-        throw error;
-    }
-}
-/** Durable, exclusive intent. The running bot observes it without signalling a
- * possibly reused PID; it finishes its current reply/ACK and exits cleanly.
- */
-export function holdForPromotion(dir, hold) {
-    if (!/^agt_[A-Za-z0-9]+$/.test(hold.agentUid) || !/^prs_[A-Za-z0-9]+$/.test(hold.ownerUid) ||
-        !/^cmp_[A-Za-z0-9]+$/.test(hold.companyUid) || !/^[A-Za-z0-9_-]{16,128}$/.test(hold.operationId))
-        throw new Error("Invalid local promotion operation");
-    const serialized = JSON.stringify(hold);
-    try {
-        fs.writeFileSync(holdPath(dir), serialized, { flag: "wx", mode: 0o600 });
-    }
-    catch (error) {
-        if (error.code !== "EEXIST")
-            throw error;
-        const stat = fs.lstatSync(holdPath(dir));
-        if (!stat.isFile() || stat.size > 2048 || fs.readFileSync(holdPath(dir), "utf8") !== serialized)
-            throw new Error("Another promotion owns this local bot");
-    }
-}
-/** A timeout leaves the hold intact and never aborts the model turn. */
-export async function waitForPromotionDrain(dir, timeoutMs = 60_000) {
-    if (!hasPromotionHold(dir))
-        throw new Error("Promotion hold is missing");
-    if (!Number.isFinite(timeoutMs) || timeoutMs < 0 || timeoutMs > 300_000)
-        throw new Error("Invalid drain timeout");
-    const deadline = Date.now() + timeoutMs;
-    do {
-        const lock = readPidLock(daemonPidPath(dir));
-        if (!lock && fs.existsSync(daemonPidPath(dir)))
-            throw new Error("The local process lock could not be verified");
-        const status = readBotStatus(dir);
-        const alive = (lock && isPidAlive(lock.pid)) || (status && isPidAlive(status.pid));
-        if (!alive) {
-            if (fs.existsSync(botInflightPath(dir)))
-                throw new Error("The local bot has an unfinished reply. Recover it before promotion.");
-            return;
-        }
-        if (!status?.canDrainForPromotion)
-            throw new Error("Update the local bot before promoting it");
-        if (Date.now() >= deadline)
-            break;
-        await new Promise(resolve => setTimeout(resolve, Math.min(250, deadline - Date.now())));
-    } while (Date.now() <= deadline);
-    throw new Error("The bot is finishing its current reply. Retry promotion when it has stopped.");
-}
-/** Called after freezing/uploading the snapshot; rechecks the durable hold and
- * exited process immediately before authorizing the server handoff boundary.
- */
-export async function attestPromotionDrain(dir, hold, snapshotSha256, machine) {
-    if (!/^[a-f0-9]{64}$/.test(snapshotSha256) || machine.entityType !== "agent" || machine.entityUid !== hold.agentUid ||
-        machine.username !== `agt-${hold.agentUid.slice(4).toLowerCase()}@agents.getindigo.ai` ||
-        typeof machine.secret !== "string" || machine.secret.length < 32 || machine.secret.length > 256)
-        throw new Error("Invalid promotion signing identity");
-    holdForPromotion(dir, hold);
-    await waitForPromotionDrain(dir, 0);
-    return createHmac("sha256", machine.secret).update(JSON.stringify(["hq-local-bot-drained-v1", hold.agentUid, hold.ownerUid, hold.companyUid, hold.operationId, snapshotSha256])).digest("hex");
-}
-/** Display-only summary. Any unreadable or mismatched hold still blocks local controls. */
-export function promotionHoldSummary(dir, agentUid, ownerUid) {
-    if (!hasPromotionHold(dir))
-        return null;
-    let fd;
-    try {
-        fd = fs.openSync(holdPath(dir), fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
-        const stat = fs.fstatSync(fd);
-        if (!stat.isFile() || stat.size > 2048)
-            return { companyUid: null };
-        const bytes = Buffer.alloc(stat.size);
-        if (fs.readSync(fd, bytes, 0, bytes.length, 0) !== bytes.length)
-            return { companyUid: null };
-        const hold = JSON.parse(bytes.toString("utf8"));
-        return { companyUid: hold?.agentUid === agentUid && hold?.ownerUid === ownerUid &&
-                typeof hold.companyUid === "string" && /^cmp_[A-Za-z0-9]+$/.test(hold.companyUid) ? hold.companyUid : null };
-    }
-    catch {
-        return { companyUid: null };
-    }
-    finally {
-        if (fd !== undefined)
-            fs.closeSync(fd);
-    }
-}
-//# sourceMappingURL=promotion-hold.js.map

package/dist/lib/bot/promotion-receipt.d.ts

@@ -1,9 +0,0 @@
-import type { BotPromotionState } from "./api.js";
-import { type LocalPromotionHold } from "./promotion-hold.js";
-/** Cache only the authenticated server's terminal response. The local hold is
- * permanent until an explicit rollback; this receipt controls presentation only.
- */
-export declare function recordActivePromotion(dir: string, hold: LocalPromotionHold, state: BotPromotionState): void;
-/** Invalid receipts never cause a local bot to be presented as cloud-hosted. */
-export declare function hasActivePromotion(dir: string, agentUid: string, ownerUid: string): boolean;
-//# sourceMappingURL=promotion-receipt.d.ts.map

package/dist/lib/bot/promotion-receipt.js

@@ -1,56 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { randomUUID } from "node:crypto";
-import { holdForPromotion } from "./promotion-hold.js";
-const receiptPath = (dir) => path.join(dir, "promotion-active.json");
-/** Cache only the authenticated server's terminal response. The local hold is
- * permanent until an explicit rollback; this receipt controls presentation only.
- */
-export function recordActivePromotion(dir, hold, state) {
-    if (state.phase !== "active" || !Number.isInteger(state.version) || state.version < 1 ||
-        !/^[a-f0-9]{64}$/.test(state.snapshotSha256) ||
-        Object.entries(hold).some(([key, value]) => state[key] !== value)) {
-        throw new Error("Cloud activation does not match this local bot promotion");
-    }
-    holdForPromotion(dir, hold);
-    const value = { ...hold, phase: "active", version: state.version, snapshotSha256: state.snapshotSha256 };
-    const temp = `${receiptPath(dir)}.${randomUUID()}.tmp`;
-    fs.writeFileSync(temp, JSON.stringify(value), { flag: "wx", mode: 0o600 });
-    try {
-        fs.renameSync(temp, receiptPath(dir));
-    }
-    finally {
-        fs.rmSync(temp, { force: true });
-    }
-}
-/** Invalid receipts never cause a local bot to be presented as cloud-hosted. */
-export function hasActivePromotion(dir, agentUid, ownerUid) {
-    let fd;
-    try {
-        fd = fs.openSync(receiptPath(dir), fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
-        const stat = fs.fstatSync(fd);
-        if (!stat.isFile() || stat.size > 2048 || (stat.mode & 0o077))
-            return false;
-        const bytes = Buffer.alloc(stat.size);
-        if (fs.readSync(fd, bytes, 0, bytes.length, 0) !== bytes.length)
-            return false;
-        const state = JSON.parse(bytes.toString("utf8"));
-        if (state?.agentUid !== agentUid || state?.ownerUid !== ownerUid || state?.phase !== "active" ||
-            !Number.isInteger(state.version) || state.version < 1 || !/^[a-f0-9]{64}$/.test(state.snapshotSha256))
-            return false;
-        const holdFile = path.join(dir, "promotion-hold.json");
-        const holdStat = fs.lstatSync(holdFile);
-        if (!holdStat.isFile() || holdStat.size > 2048)
-            return false;
-        const hold = JSON.parse(fs.readFileSync(holdFile, "utf8"));
-        return ["agentUid", "ownerUid", "companyUid", "operationId"].every(key => typeof state[key] === "string" && state[key] === hold[key]);
-    }
-    catch {
-        return false;
-    }
-    finally {
-        if (fd !== undefined)
-            fs.closeSync(fd);
-    }
-}
-//# sourceMappingURL=promotion-receipt.js.map

package/dist/lib/bot/promotion-upload.d.ts

@@ -1,16 +0,0 @@
-import type { BotMachineCreds } from "./creds.js";
-import { BotApi, type BotPromotionState } from "./api.js";
-import { type BotContinuityBundle } from "./continuity.js";
-/** Upload a frozen local snapshot plus ONLY its HQ machine credential. The
- * caller owns draining and a durable local operation lock across this method.
- * No model-provider auth files are read or accepted. No runtime is activated.
- */
-export declare function uploadLocalBotPromotion(input: {
-    api: BotApi;
-    bundle: BotContinuityBundle;
-    machine: BotMachineCreds;
-    companyUid: string;
-    operationId: string;
-    fetchImpl?: typeof fetch;
-}): Promise<BotPromotionState>;
-//# sourceMappingURL=promotion-upload.d.ts.map

package/dist/lib/bot/promotion-upload.js

@@ -1,80 +0,0 @@
-import { createHash } from "node:crypto";
-import { validateBotContinuity } from "./continuity.js";
-function sha(bytes) { return createHash("sha256").update(bytes).digest("hex"); }
-function assertState(state, bundle, companyUid, operationId) {
-    if (!state || state.agentUid !== bundle.agentUid || state.ownerUid !== bundle.ownerUid ||
-        state.companyUid !== companyUid || state.operationId !== operationId || state.snapshotSha256 !== bundle.digest ||
-        state.phase !== "preparing")
-        throw new Error("Promotion preparation returned a different identity or phase");
-}
-function hasValidEncryptionHeaders(headers) {
-    const valuesFor = (name) => Object.entries(headers)
-        .filter(([key]) => key.toLowerCase() === name)
-        .map(([, value]) => value);
-    const encryptionValues = valuesFor("x-amz-server-side-encryption");
-    const keyIdValues = valuesFor("x-amz-server-side-encryption-aws-kms-key-id");
-    // Multiple differently-cased copies are ambiguous, even when their values
-    // happen to match. Accept one exact SSE-KMS pair or no effective SSE values.
-    if (encryptionValues.length > 1 || keyIdValues.length > 1)
-        return false;
-    const encryption = encryptionValues[0] ?? "";
-    const keyId = keyIdValues[0] ?? "";
-    if (!encryption.trim() && !keyId.trim())
-        return true;
-    return encryption === "aws:kms" && Boolean(keyId.trim());
-}
-/** Only the presigned object request receives these bytes. Owner authorization
- * is handled by BotApi and is never forwarded to S3 or a redirect destination.
- */
-async function uploadObject(upload, bytes, fetchImpl) {
-    const url = new URL(upload.url);
-    if (url.protocol !== "https:" || url.username || url.password || url.port ||
-        !/^[a-z0-9.-]+\.s3(?:[.-][a-z0-9-]+)?\.amazonaws\.com$/.test(url.hostname) ||
-        upload.method !== "PUT" || upload.bytes !== bytes.length || upload.sha256 !== sha(bytes) ||
-        !hasValidEncryptionHeaders(upload.headers) ||
-        upload.headers["if-none-match"] !== "*" ||
-        upload.headers["x-amz-checksum-sha256"] !== Buffer.from(upload.sha256, "hex").toString("base64") ||
-        Object.keys(upload.headers).some(key => /^(authorization|cookie)$/i.test(key))) {
-        throw new Error("Invalid private promotion upload destination");
-    }
-    const response = await fetchImpl(url, { method: "PUT", headers: upload.headers,
-        body: new Uint8Array(bytes), redirect: "error", signal: AbortSignal.timeout(60_000) });
-    // The key is immutable and content-addressed. A repeat PUT cannot replace it;
-    // the server's checksum/KMS readback still verifies it before any import.
-    if (!response.ok && response.status !== 412)
-        throw new Error(`Promotion upload failed (${response.status})`);
-    await response.body?.cancel();
-}
-/** Upload a frozen local snapshot plus ONLY its HQ machine credential. The
- * caller owns draining and a durable local operation lock across this method.
- * No model-provider auth files are read or accepted. No runtime is activated.
- */
-export async function uploadLocalBotPromotion(input) {
-    const { api, bundle, machine, companyUid, operationId } = input;
-    validateBotContinuity(bundle, { agentUid: bundle.agentUid, ownerUid: bundle.ownerUid });
-    if (!/^cmp_[A-Za-z0-9]+$/.test(companyUid) || !/^[A-Za-z0-9_-]{16,128}$/.test(operationId) ||
-        machine.entityType !== "agent" || machine.entityUid !== bundle.agentUid ||
-        machine.username !== `agt-${bundle.agentUid.slice(4).toLowerCase()}@agents.getindigo.ai` ||
-        typeof machine.secret !== "string" || machine.secret.length < 32 || machine.secret.length > 256) {
-        throw new Error("Invalid bot promotion identity");
-    }
-    const snapshot = Buffer.from(JSON.stringify(bundle));
-    const credential = Buffer.from(JSON.stringify({ kind: "hq-bot-machine-credential-v1", agentUid: bundle.agentUid,
-        ownerUid: bundle.ownerUid, digest: bundle.digest, operationId, username: machine.username, secret: machine.secret }));
-    try {
-        let state = await api.preparePromotion(bundle.agentUid, { companyUid, operationId, snapshotSha256: bundle.digest });
-        assertState(state, bundle, companyUid, operationId);
-        for (const [kind, bytes] of [["snapshot", snapshot], ["machine-credential", credential]]) {
-            const signed = await api.promotionUpload(bundle.agentUid, { companyUid, operationId, kind, bytes: bytes.length, sha256: sha(bytes) });
-            assertState(signed.promotion, bundle, companyUid, operationId);
-            await uploadObject(signed.upload, bytes, input.fetchImpl ?? fetch);
-            state = signed.promotion;
-        }
-        return state;
-    }
-    finally {
-        credential.fill(0);
-        snapshot.fill(0);
-    }
-}
-//# sourceMappingURL=promotion-upload.js.map

package/dist/lib/bot/prompt.d.ts

@@ -1,136 +0,0 @@
-/**
- * System context for the bot's model session (local-bots US-003/US-006, Feature 4).
- *
- * Scaffolded bot — assembled from the bot's own worker folder under the HQ root:
- *   personal/workers/<name>/worker.yaml   identity + capabilities
- *   personal/workers/<name>/persona.md    voice and standing instructions
- *   personal/workers/<name>/memory/*.md   durable memory the bot may edit
- *
- * Worker-sourced bot (workerSource "worker") — the bot runs a company worker:
- *   companies/<co>/workers/<id>/worker.yaml   parsed: instructions, identity.persona,
- *                                             skills (→ skills/<name>.md | skills/<name>/SKILL.md),
- *                                             context.base (inlined under a budget)
- *   companies/<co>/policies/*.md              listed as paths (hard rules; read before acting)
- *   <memoryDir>/*.md                          the bot's own memory (personal/workers/<bot>/memory,
- *                                             or an absolute ~/.hq/bots/<bot>/memory for local memory)
- *
- * Pure over an injected reader so tests never touch the real HQ.
- */
-import type { BotKind } from "./config.js";
-export declare const MEMORY_FILE_BUDGET_BYTES: number;
-export declare const MEMORY_TOTAL_BUDGET_BYTES: number;
-export declare const CONTEXT_FILE_BUDGET_BYTES: number;
-export declare const CONTEXT_TOTAL_BUDGET_BYTES: number;
-export interface WorkerSkillSource {
-    name: string;
-    description?: string;
-    /** hqRoot-relative path of the skill body, when one exists on disk. */
-    file?: string;
-}
-export interface WorkerContextFile {
-    /** hqRoot-relative path. */
-    path: string;
-    body: string;
-    truncated?: boolean;
-}
-export interface WorkerPromptSource {
-    id?: string;
-    name?: string;
-    company?: string;
-    description?: string;
-    instructions?: string;
-    persona?: string;
-    skills: WorkerSkillSource[];
-    /** context.base files inlined (within budget). */
-    contextFiles: WorkerContextFile[];
-    /** context.base entries that could not be inlined (over budget / unreadable). */
-    contextPaths: string[];
-    /** companies/<co>/policies/*.md, hqRoot-relative. */
-    policyPaths: string[];
-    /** Invalid policy files excluded from policyPaths, with a safe diagnostic. */
-    policyDiagnostics?: string[];
-}
-export interface PromptSources {
-    workerYaml?: string;
-    persona?: string;
-    memory: Array<{
-        name: string;
-        body: string;
-    }>;
-    /** Present in worker mode only. */
-    worker?: WorkerPromptSource;
-}
-export interface PromptFs {
-    existsSync: (p: string) => boolean;
-    readFileSync: (p: string) => string;
-    readdirSync: (p: string) => string[];
-}
-export declare const defaultPromptFs: PromptFs;
-export interface ReadPromptSourcesOptions {
-    /** Memory folder: hqRoot-relative (default `${workerDir}/memory`) or absolute. */
-    memoryDir?: string;
-    workerSource?: "scaffold" | "worker";
-    /** Company whose policies are listed (default: `worker.company` from worker.yaml). */
-    companySlug?: string;
-}
-export declare function resolveMemoryDir(workerDir: string, memoryDir?: string): string;
-/** `instructions` may be a string, a block scalar, or a list of strings/objects. */
-export declare function normalizeInstructions(raw: unknown): string | undefined;
-export declare function readPromptSources(hqRoot: string, workerDir: string, io?: PromptFs, opts?: ReadPromptSourcesOptions): PromptSources;
-export interface BuildSystemPromptInput {
-    botName: string;
-    /** The human name people call the bot (e.g. "Maya"); unset = botName. */
-    displayName?: string;
-    agentUid: string;
-    ownerUid: string;
-    hqRoot: string;
-    workerDir: string;
-    sources: PromptSources;
-    workerSource?: "scaffold" | "worker";
-    workerId?: string;
-    companySlug?: string;
-    /** "personal" (acts as its owner everywhere) or "company" (acts as itself). Default personal. */
-    kind?: BotKind;
-    /** Company bots: the slugs of the companies the bot is a member of. */
-    companies?: string[];
-    /** hqRoot-relative (default `${workerDir}/memory`) or absolute. */
-    memoryDir?: string;
-}
-/**
- * One paragraph saying which kind of bot this is and what that means for the
- * `hq` commands it runs. The owner's decision (2026-09-15): a personal bot
- * acts as its owner everywhere; a company bot acts as itself and cannot
- * create anything for the owner.
- */
-export declare function botKindParagraph(input: Pick<BuildSystemPromptInput, "agentUid" | "ownerUid" | "kind" | "companies">): string;
-/**
- * The standing instructions the bot runs under. The DM body is delivered as
- * the user turn; this text is the system prompt (claude/codex) or the prompt
- * preamble (grok).
- */
-export declare function buildSystemPrompt(input: BuildSystemPromptInput): string;
-/**
- * What the bot knows about putting its own work on a schedule. The schedule
- * lives in the cloud; the bot never writes a crontab or a launchd timer.
- *
- * The catch-up wording is deliberately precise. The cloud only dead-letters a
- * stale run on the job's NEXT fire, and the staleness window is an hour, so a
- * missed run is picked up on wake only if the wake happens within about an
- * hour; a longer outage means that run is gone and the job simply resumes at
- * its next scheduled time. Promising an unconditional catch-up would be the bot
- * telling its owner something untrue about work they are relying on.
- */
-export declare function scheduledJobsParagraph(botName: string): string;
-/**
- * The one-time introduction the bot DMs its owner when it first comes online.
- * A bot created with `--intro` sends that text verbatim instead.
- *
- * The first sentence depends on the bot's kind: a personal bot runs under its
- * owner's login and permissions; a company bot runs with its own identity as
- * a member of its companies and can only work inside those.
- */
-export declare function introDmText(botName: string, runtime: string, intro?: string, identity?: {
-    kind?: BotKind;
-    companies?: string[];
-}): string;
-//# sourceMappingURL=prompt.d.ts.map