@indigoai-us/hq-cli 5.312.2-beta.0 → 5.314.0

package/dist/lib/lanes/hire-grant-dispatch.js

@@ -1,316 +0,0 @@
-import { aliveDirectChildren } from "./grants.js";
-import { LanesError } from "./errors.js";
-import { isLaneState, isSeniorKind, } from "./types.js";
-const HIRE_GRANT_CONTEXT_SCHEMA = "hq-lane-hire-grant-context.v1";
-const MAX_CONTEXT_BYTES = 48 * 1024;
-const MAX_CONTEXT_LANES = 256;
-function contextError(message) {
-    return new LanesError("hire_grant_context_invalid", message, {});
-}
-function sameSenior(a, b) {
-    return a.kind === b.kind && a.id === b.id;
-}
-function copySenior(senior) {
-    return senior.id === undefined
-        ? { kind: senior.kind }
-        : { kind: senior.kind, id: senior.id };
-}
-// Terminal relatives are included so the owner's final state overwrites a stale
-// primary copy; the context builder counts only alive children afterwards.
-function directChildren(lanes, parentLaneId) {
-    return lanes.filter((lane) => lane.senior.kind === "lane" && lane.senior.id === parentLaneId);
-}
-/** Select the owner records needed to reproduce the primary's grant hierarchy. */
-export function selectOutpostHireGrantHierarchy(targetLaneId, lanes) {
-    const current = lanes.find((lane) => lane.lane_id === targetLaneId);
-    if (!current)
-        return [];
-    const relevant = new Set([current.lane_id]);
-    if (current.senior.kind === "lane" && current.senior.id) {
-        relevant.add(current.senior.id);
-        for (const sibling of directChildren(lanes, current.senior.id)) {
-            relevant.add(sibling.lane_id);
-        }
-    }
-    for (const child of directChildren(lanes, current.lane_id)) {
-        relevant.add(child.lane_id);
-    }
-    const companyUid = current.company?.uid;
-    const projectId = current.project_id;
-    if (companyUid && projectId) {
-        // A superseded-message caller must be checked against the same project and
-        // company rows that the complete hierarchy builder sees.
-        for (const candidate of lanes) {
-            if (candidate.company?.uid === companyUid && candidate.project_id === projectId) {
-                relevant.add(candidate.lane_id);
-            }
-        }
-    }
-    if (current.senior.kind === "session" && companyUid) {
-        for (const candidate of lanes) {
-            if (candidate.company?.uid === companyUid && ((current.worker_profile !== undefined && candidate.worker_profile === current.worker_profile) ||
-                (projectId !== undefined && candidate.project_id === projectId && (candidate.hire_grant ?? 0) > 0))) {
-                relevant.add(candidate.lane_id);
-            }
-        }
-    }
-    return lanes.filter((lane) => relevant.has(lane.lane_id));
-}
-function snapshot(lane) {
-    return {
-        lane_id: lane.lane_id,
-        state: lane.state,
-        senior: copySenior(lane.senior),
-        created_at: lane.created_at,
-        ...(lane.company === undefined
-            ? {}
-            : { company: lane.company === null ? null : { ...lane.company } }),
-        ...(lane.project_id === undefined ? {} : { project_id: lane.project_id }),
-        ...(lane.worker_profile === undefined ? {} : { worker_profile: lane.worker_profile }),
-        ...(lane.hire_grant === undefined ? {} : { hire_grant: lane.hire_grant }),
-    };
-}
-/** Encode only the owner-relevant hierarchy from the primary's complete store. */
-export function createOutpostHireGrantContext(target, lanes, supersededMessageCallerId, supersededMessageSessionId) {
-    const current = lanes.find((lane) => lane.lane_id === target.lane_id);
-    if (!current || !sameSenior(current.senior, target.senior)) {
-        throw new LanesError("hire_grant_hierarchy_unavailable", `Cannot build an authoritative hire-grant hierarchy for lane ${target.lane_id}`, { lane_id: target.lane_id });
-    }
-    if (supersededMessageCallerId !== undefined && supersededMessageSessionId !== undefined) {
-        throw contextError("Outpost grant context cannot contain both lane and session message callers");
-    }
-    if (supersededMessageSessionId !== undefined &&
-        (current.senior.kind !== "session" || current.senior.id !== supersededMessageSessionId)) {
-        throw new LanesError("hire_grant_message_caller_invalid", `Cannot include an unverified session message caller in lane ${target.lane_id}'s Outpost context`, { lane_id: target.lane_id });
-    }
-    const relevant = new Map();
-    relevant.set(current.lane_id, current);
-    if (current.senior.kind === "lane") {
-        const parentId = current.senior.id;
-        const parent = parentId ? lanes.find((lane) => lane.lane_id === parentId) : undefined;
-        if (!parent) {
-            throw new LanesError("hire_grant_senior_invalid", `Lane ${target.lane_id} has no senior lane in the primary hierarchy`, { lane_id: target.lane_id, senior_lane_id: parentId ?? null });
-        }
-        relevant.set(parent.lane_id, parent);
-        for (const sibling of aliveDirectChildren(lanes, parent.lane_id)) {
-            relevant.set(sibling.lane_id, sibling);
-        }
-    }
-    for (const child of aliveDirectChildren(lanes, current.lane_id)) {
-        relevant.set(child.lane_id, child);
-    }
-    if (supersededMessageCallerId !== undefined) {
-        const messageCaller = lanes.find((lane) => lane.lane_id === supersededMessageCallerId);
-        const companyUid = current.company?.uid;
-        const projectId = current.project_id;
-        if (!messageCaller || !companyUid || !projectId ||
-            messageCaller.company?.uid !== companyUid || messageCaller.project_id !== projectId) {
-            throw new LanesError("hire_grant_message_caller_invalid", `Cannot include an unverified message caller ${supersededMessageCallerId} in lane ${target.lane_id}'s Outpost context`, { lane_id: target.lane_id, caller_lane_id: supersededMessageCallerId });
-        }
-        for (const candidate of lanes) {
-            if (candidate.company?.uid === companyUid && candidate.project_id === projectId) {
-                relevant.set(candidate.lane_id, candidate);
-            }
-        }
-    }
-    if (current.senior.kind === "session") {
-        const companyUid = current.company?.uid;
-        const projectId = current.project_id;
-        if (companyUid) {
-            for (const candidate of lanes) {
-                if (candidate.company?.uid === companyUid && ((current.worker_profile !== undefined && candidate.worker_profile === current.worker_profile) ||
-                    (projectId !== undefined && candidate.project_id === projectId && (candidate.hire_grant ?? 0) > 0))) {
-                    relevant.set(candidate.lane_id, candidate);
-                }
-            }
-        }
-    }
-    const hierarchy = [...relevant.values()]
-        .map(snapshot)
-        .sort((a, b) => a.lane_id.localeCompare(b.lane_id));
-    if (hierarchy.length > MAX_CONTEXT_LANES) {
-        throw new LanesError("hire_grant_hierarchy_too_large", `Lane ${target.lane_id} has too many related lanes to dispatch a bounded grant check`, { lane_id: target.lane_id, related_lane_count: hierarchy.length });
-    }
-    const context = {
-        schema_version: HIRE_GRANT_CONTEXT_SCHEMA,
-        enforcement_enabled: true,
-        expected_senior: copySenior(current.senior),
-        hierarchy,
-        ...(supersededMessageCallerId === undefined
-            ? {}
-            : { superseded_message_caller_id: supersededMessageCallerId }),
-        ...(supersededMessageSessionId === undefined
-            ? {}
-            : { superseded_message_session_id: supersededMessageSessionId }),
-    };
-    const encoded = Buffer.from(JSON.stringify(context), "utf8").toString("base64url");
-    if (Buffer.byteLength(encoded, "utf8") > MAX_CONTEXT_BYTES) {
-        throw new LanesError("hire_grant_hierarchy_too_large", `Lane ${target.lane_id} has too much related state to dispatch a bounded grant check`, { lane_id: target.lane_id, encoded_bytes: Buffer.byteLength(encoded, "utf8") });
-    }
-    return encoded;
-}
-function parseSenior(value) {
-    if (value === null || typeof value !== "object" || Array.isArray(value))
-        return null;
-    const record = value;
-    if (Object.keys(record).some((key) => key !== "kind" && key !== "id"))
-        return null;
-    if (!isSeniorKind(record.kind))
-        return null;
-    if (record.id !== undefined &&
-        (typeof record.id !== "string" || !record.id.trim() || record.id.trim() !== record.id))
-        return null;
-    if ((record.kind === "session" || record.kind === "lane") && record.id === undefined)
-        return null;
-    if (record.kind === "user" && record.id !== undefined)
-        return null;
-    return record.id === undefined
-        ? { kind: record.kind }
-        : { kind: record.kind, id: record.id };
-}
-function parseLaneSnapshot(value) {
-    if (value === null || typeof value !== "object" || Array.isArray(value))
-        return null;
-    const record = value;
-    if (Object.keys(record).some((key) => ![
-        "lane_id", "state", "senior", "hire_grant", "created_at", "company", "project_id", "worker_profile",
-    ].includes(key)))
-        return null;
-    if (typeof record.lane_id !== "string" || !record.lane_id.trim())
-        return null;
-    if (!isLaneState(record.state))
-        return null;
-    const senior = parseSenior(record.senior);
-    if (!senior)
-        return null;
-    if (record.hire_grant !== undefined &&
-        (typeof record.hire_grant !== "number" || !Number.isSafeInteger(record.hire_grant) || record.hire_grant < 0)) {
-        return null;
-    }
-    if (record.created_at !== undefined &&
-        (typeof record.created_at !== "string" || !record.created_at.trim() || !Number.isFinite(Date.parse(record.created_at)))) {
-        return null;
-    }
-    if (record.project_id !== undefined &&
-        (typeof record.project_id !== "string" || !record.project_id.trim() || record.project_id.trim() !== record.project_id)) {
-        return null;
-    }
-    if (record.worker_profile !== undefined &&
-        (typeof record.worker_profile !== "string" || !record.worker_profile.trim())) {
-        return null;
-    }
-    let company;
-    if (Object.hasOwn(record, "company")) {
-        if (record.company === null) {
-            company = null;
-        }
-        else if (record.company !== null && typeof record.company === "object" && !Array.isArray(record.company)) {
-            const companyRecord = record.company;
-            if (Object.keys(companyRecord).some((key) => key !== "slug" && key !== "uid") ||
-                typeof companyRecord.slug !== "string" || !companyRecord.slug.trim() ||
-                typeof companyRecord.uid !== "string" || !companyRecord.uid.trim())
-                return null;
-            company = { slug: companyRecord.slug, uid: companyRecord.uid };
-        }
-        else {
-            return null;
-        }
-    }
-    return {
-        lane_id: record.lane_id,
-        state: record.state,
-        senior,
-        ...(record.hire_grant === undefined ? {} : { hire_grant: record.hire_grant }),
-        ...(record.created_at === undefined ? {} : { created_at: record.created_at }),
-        ...(company === undefined ? {} : { company }),
-        ...(record.project_id === undefined ? {} : { project_id: record.project_id }),
-        ...(record.worker_profile === undefined ? {} : { worker_profile: record.worker_profile }),
-    };
-}
-/** Decode and validate an owner grant context, binding it to the target lane. */
-export function parseOutpostHireGrantContext(encoded, targetLaneId) {
-    if (!encoded || !/^[A-Za-z0-9_-]+$/.test(encoded) ||
-        Buffer.byteLength(encoded, "utf8") > MAX_CONTEXT_BYTES ||
-        Buffer.from(encoded, "base64url").toString("base64url") !== encoded) {
-        throw contextError("Outpost grant context is not canonical base64url");
-    }
-    let raw;
-    try {
-        const decoded = new TextDecoder("utf-8", { fatal: true }).decode(Buffer.from(encoded, "base64url"));
-        raw = JSON.parse(decoded);
-    }
-    catch {
-        throw contextError("Outpost grant context is not valid UTF-8 JSON");
-    }
-    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
-        throw contextError("Outpost grant context must be an object");
-    }
-    const record = raw;
-    if (Object.keys(record).some((key) => !["schema_version", "enforcement_enabled", "expected_senior", "hierarchy", "superseded_message_caller_id", "superseded_message_session_id"].includes(key))) {
-        throw contextError("Outpost grant context contains unknown fields");
-    }
-    if (record.schema_version !== HIRE_GRANT_CONTEXT_SCHEMA ||
-        typeof record.enforcement_enabled !== "boolean" ||
-        !Array.isArray(record.hierarchy) ||
-        record.hierarchy.length === 0 || record.hierarchy.length > MAX_CONTEXT_LANES) {
-        throw contextError("Outpost grant context has an unsupported or incomplete shape");
-    }
-    const expectedSenior = parseSenior(record.expected_senior);
-    const messageCallerId = record.superseded_message_caller_id;
-    const messageSessionId = record.superseded_message_session_id;
-    if (messageCallerId !== undefined &&
-        (typeof messageCallerId !== "string" || !messageCallerId.trim() || messageCallerId.trim() !== messageCallerId)) {
-        throw contextError("Outpost grant context contains an invalid superseded-message caller");
-    }
-    if (messageSessionId !== undefined &&
-        (typeof messageSessionId !== "string" || !messageSessionId.trim() || messageSessionId.trim() !== messageSessionId)) {
-        throw contextError("Outpost grant context contains an invalid superseded-message session");
-    }
-    if (messageCallerId !== undefined && messageSessionId !== undefined) {
-        throw contextError("Outpost grant context cannot contain both lane and session message callers");
-    }
-    const hierarchy = record.hierarchy.map(parseLaneSnapshot);
-    if (!expectedSenior || hierarchy.some((lane) => lane === null)) {
-        throw contextError("Outpost grant context contains an invalid senior or lane snapshot");
-    }
-    const snapshots = hierarchy;
-    const byId = new Map(snapshots.map((lane) => [lane.lane_id, lane]));
-    if (byId.size !== snapshots.length) {
-        throw contextError("Outpost grant context contains duplicate lane snapshots");
-    }
-    const target = byId.get(targetLaneId);
-    if (!target || !sameSenior(target.senior, expectedSenior)) {
-        throw contextError("Outpost grant context does not match the target's expected senior");
-    }
-    if (messageSessionId !== undefined &&
-        (expectedSenior.kind !== "session" || expectedSenior.id !== messageSessionId)) {
-        throw contextError("Outpost grant context session caller does not match the target's session senior");
-    }
-    if (expectedSenior.kind === "lane" &&
-        (!expectedSenior.id || !byId.has(expectedSenior.id))) {
-        throw contextError("Outpost grant context is missing the target's senior lane");
-    }
-    if (messageCallerId !== undefined && !byId.has(messageCallerId)) {
-        throw contextError("Outpost grant context is missing its superseded-message caller lane");
-    }
-    if (messageCallerId !== undefined) {
-        const caller = byId.get(messageCallerId);
-        if (snapshots.some((lane) => lane.created_at === undefined || !Object.hasOwn(lane, "company")) ||
-            !target.company?.uid || !target.project_id ||
-            caller?.company?.uid !== target.company.uid || caller.project_id !== target.project_id) {
-            throw contextError("Outpost grant context is missing its superseded-message hierarchy metadata");
-        }
-    }
-    return {
-        schema_version: HIRE_GRANT_CONTEXT_SCHEMA,
-        enforcement_enabled: record.enforcement_enabled,
-        expected_senior: expectedSenior,
-        hierarchy: snapshots,
-        ...(messageCallerId === undefined ? {} : { superseded_message_caller_id: messageCallerId }),
-        ...(messageSessionId === undefined ? {} : { superseded_message_session_id: messageSessionId }),
-    };
-}
-export function sameHireGrantSenior(a, b) {
-    return sameSenior(a, b);
-}
-//# sourceMappingURL=hire-grant-dispatch.js.map

package/dist/lib/lanes/hooks-install.d.ts

@@ -1,82 +0,0 @@
-/**
- * Install and register the lane-resolving drain hook in a provider home.
- *
- * Copying the hook files into `<home>/hooks/` is only half of an install. Each
- * provider discovers hooks differently, and a file the provider never reads
- * registers nothing:
- *
- * - grok reads every `*.json` under `$GROK_HOME/hooks/`, so the registration
- *   file in that directory is the registration.
- * - claude reads `$CLAUDE_CONFIG_DIR/settings.json` and nothing under
- *   `hooks/`. The registration is merged into the `hooks.PreToolUse` array of
- *   that file.
- * - codex reads `$CODEX_HOME/config.toml` (`[[hooks.PreToolUse]]`, gated by
- *   `[features] hooks = true`). The registration is appended to that file.
- *
- * Every registration merge keeps what the operator already has and is a
- * no-op when the entry is present, because this runs on every spawn.
- * Never merges into hq-hq-bridge.json / hq-hq-bridge.sh.
- */
-import type { LaneProvider } from "./types.js";
-export declare const DRAIN_HOOK_BASENAME = "hq-lanes-drain";
-export declare const DRAIN_HOOK_TIMEOUT_SECONDS = 30;
-export declare function drainHookEntryPath(): string;
-export declare function lanesHookAssetsDir(): string;
-export declare const DRAIN_HOOK_REGISTRATION_KINDS: readonly ["hooks_dir", "settings_json", "config_toml"];
-export type DrainHookRegistrationKind = (typeof DRAIN_HOOK_REGISTRATION_KINDS)[number];
-export declare const PROVIDER_REGISTRATION_KIND: Record<LaneProvider, DrainHookRegistrationKind>;
-export interface DrainHookRegistration {
-    kind: DrainHookRegistrationKind;
-    /** The file the provider CLI reads the registration from. */
-    path: string;
-    /** The exact command string registered, as the provider will execute it. */
-    command: string;
-    /** True when this call wrote the registration; false when it was already present. */
-    changed: boolean;
-}
-export interface DrainHookInstallResult {
-    provider: LaneProvider;
-    home: string;
-    hooksDir: string;
-    files: string[];
-    registration: DrainHookRegistration;
-}
-export declare function drainHookCommand(_shPath?: string): string;
-export declare function drainHookShPath(providerHome: string): string;
-export declare function renderDrainHookJson(shPath: string): string;
-export interface MergeResult {
-    text: string;
-    changed: boolean;
-}
-/**
- * Claude Code: `settings.json` is the one file it reads hooks from. Merge the
- * drain into `hooks.PreToolUse`, keep every other key and every other hook,
- * and do nothing when a command hook with this exact command string is
- * already in the list. No `matcher` means every tool call.
- */
-export declare function mergeClaudeSettingsHook(existingText: string | null, command: string, settingsPath: string, legacyCommand?: string): MergeResult;
-/**
- * Codex: hooks come from `config.toml` in the codex home. The drain is
- * appended as one `[[hooks.PreToolUse]]` table and `[features] hooks = true`
- * is ensured. Edits are textual so comments and unrelated tables are kept
- * byte for byte; the result is re-parsed and must contain the registration,
- * otherwise nothing is written.
- */
-export declare function mergeCodexConfigHook(existingText: string | null, command: string, configPath: string, legacyCommand?: string): MergeResult;
-export declare function drainHookRegistrationPath(provider: LaneProvider, providerHome: string): string;
-export interface DrainHookRegistrationProbe {
-    kind: DrainHookRegistrationKind;
-    path: string;
-    command: string;
-    /** True when the provider's own registration file carries the drain command. */
-    registered: boolean;
-    /** For claude and codex: whether the registration file exists at all. */
-    file_present: boolean;
-}
-/**
- * Read the registration back the way the provider CLI would find it. Reports
- * the state of the file only; it does not prove the provider honours it.
- */
-export declare function probeDrainHookRegistration(provider: LaneProvider, providerHome: string): DrainHookRegistrationProbe;
-export declare function installDrainHook(provider: LaneProvider, providerHome: string, assetsDir?: string): DrainHookInstallResult;
-//# sourceMappingURL=hooks-install.d.ts.map