@indigoai-us/hq-cli 5.312.2-beta.0 → 5.314.0

package/dist/lib/mesh/live/daemon/config.d.ts

@@ -1,36 +0,0 @@
-export interface DaemonConfig {
-    trustedHqRoots: string[];
-}
-export declare function daemonConfigPath(daemonDirectory: string): string;
-export declare function verifyHqRoot(candidate: string | undefined): string | null;
-/**
- * A directory the daemon may be installed for: it must carry
- * companies/manifest.yaml (what verifyHqRoot demands at runtime) and one of
- * the tree markers utils/hq-roots.ts accepts (core/, .claude/, personal/).
- * A bare .claude/ directory — every repo with Claude settings has one — is
- * not an HQ root and must never be persisted or passed as --hq-root.
- */
-export declare function isInstallableHqRoot(dir: string): boolean;
-/** Nearest ancestor of startDir (inclusive) that is an installable HQ root, realpath'd; null if none. */
-export declare function findAncestorHqRoot(startDir: string): string | null;
-export interface InstallHqRootResolution {
-    root: string;
-    source: "flag" | "env" | "ancestor";
-}
-/**
- * Resolve the HQ root `hq mesh daemon install` records and passes to the
- * service. Precedence: --hq-root, then HQ_ROOT, then the nearest ancestor of
- * cwd that is an installable HQ root. An explicit value that is not an HQ
- * root is an error rather than a silent fallback, and with nothing
- * qualifying the install is refused: an unverified root would be persisted
- * and trusted by the daemon for company attribution.
- */
-export declare function resolveInstallHqRoot(opts?: {
-    explicit?: string;
-    env?: NodeJS.ProcessEnv;
-    cwd?: string;
-}): InstallHqRootResolution;
-export declare function readDaemonConfig(daemonDirectory: string): DaemonConfig;
-/** Record a verified local HQ checkout without trusting a caller-supplied path at runtime. */
-export declare function registerTrustedHqRoot(daemonDirectory: string, candidate: string | undefined): DaemonConfig;
-//# sourceMappingURL=config.d.ts.map

package/dist/lib/mesh/live/daemon/config.js

@@ -1,120 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-export function daemonConfigPath(daemonDirectory) {
-    return path.join(daemonDirectory, "config.json");
-}
-export function verifyHqRoot(candidate) {
-    if (!candidate?.trim())
-        return null;
-    try {
-        const root = fs.realpathSync(candidate);
-        return fs.statSync(path.join(root, "companies", "manifest.yaml")).isFile()
-            ? root
-            : null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * A directory the daemon may be installed for: it must carry
- * companies/manifest.yaml (what verifyHqRoot demands at runtime) and one of
- * the tree markers utils/hq-roots.ts accepts (core/, .claude/, personal/).
- * A bare .claude/ directory — every repo with Claude settings has one — is
- * not an HQ root and must never be persisted or passed as --hq-root.
- */
-export function isInstallableHqRoot(dir) {
-    if (verifyHqRoot(dir) === null)
-        return false;
-    return ["core", ".claude", "personal"].some((marker) => {
-        try {
-            return fs.statSync(path.join(dir, marker)).isDirectory();
-        }
-        catch {
-            return false;
-        }
-    });
-}
-/** Nearest ancestor of startDir (inclusive) that is an installable HQ root, realpath'd; null if none. */
-export function findAncestorHqRoot(startDir) {
-    let dir;
-    try {
-        dir = fs.realpathSync(startDir);
-    }
-    catch {
-        dir = path.resolve(startDir);
-    }
-    for (;;) {
-        if (isInstallableHqRoot(dir))
-            return fs.realpathSync(dir);
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            return null;
-        dir = parent;
-    }
-}
-/**
- * Resolve the HQ root `hq mesh daemon install` records and passes to the
- * service. Precedence: --hq-root, then HQ_ROOT, then the nearest ancestor of
- * cwd that is an installable HQ root. An explicit value that is not an HQ
- * root is an error rather than a silent fallback, and with nothing
- * qualifying the install is refused: an unverified root would be persisted
- * and trusted by the daemon for company attribution.
- */
-export function resolveInstallHqRoot(opts = {}) {
-    const env = opts.env ?? process.env;
-    const cwd = opts.cwd ?? process.cwd();
-    const explicit = opts.explicit?.trim();
-    if (explicit) {
-        if (!isInstallableHqRoot(explicit)) {
-            throw expectedError(`--hq-root ${explicit} is not an HQ root (needs companies/manifest.yaml plus core/, .claude/, or personal/).`);
-        }
-        return { root: fs.realpathSync(explicit), source: "flag" };
-    }
-    const fromEnv = env.HQ_ROOT?.trim();
-    if (fromEnv) {
-        if (!isInstallableHqRoot(fromEnv)) {
-            throw expectedError(`HQ_ROOT=${fromEnv} is not an HQ root (needs companies/manifest.yaml plus core/, .claude/, or personal/). ` +
-                `Fix HQ_ROOT or pass --hq-root <path>.`);
-        }
-        return { root: fs.realpathSync(fromEnv), source: "env" };
-    }
-    const ancestor = findAncestorHqRoot(cwd);
-    if (!ancestor) {
-        throw expectedError(`No HQ root found above ${cwd} (a directory with companies/manifest.yaml plus core/, .claude/, or personal/). ` +
-            `Run from inside your HQ tree or pass --hq-root <path>.`);
-    }
-    return { root: ancestor, source: "ancestor" };
-}
-function expectedError(message) {
-    const err = new Error(message);
-    err.expected = true;
-    return err;
-}
-export function readDaemonConfig(daemonDirectory) {
-    try {
-        const raw = JSON.parse(fs.readFileSync(daemonConfigPath(daemonDirectory), "utf8"));
-        if (!raw || typeof raw !== "object" || Array.isArray(raw))
-            return { trustedHqRoots: [] };
-        const roots = raw.trustedHqRoots;
-        if (!Array.isArray(roots))
-            return { trustedHqRoots: [] };
-        return { trustedHqRoots: roots.filter((root) => typeof root === "string")
-                .map(verifyHqRoot).filter((root) => Boolean(root)) };
-    }
-    catch {
-        return { trustedHqRoots: [] };
-    }
-}
-/** Record a verified local HQ checkout without trusting a caller-supplied path at runtime. */
-export function registerTrustedHqRoot(daemonDirectory, candidate) {
-    const root = verifyHqRoot(candidate);
-    const current = readDaemonConfig(daemonDirectory);
-    if (!root || current.trustedHqRoots.includes(root))
-        return current;
-    const next = { trustedHqRoots: [...current.trustedHqRoots, root] };
-    fs.mkdirSync(daemonDirectory, { recursive: true, mode: 0o700 });
-    fs.writeFileSync(daemonConfigPath(daemonDirectory), `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 });
-    return next;
-}
-//# sourceMappingURL=config.js.map

package/dist/lib/mesh/live/daemon/legacy-listen.d.ts

@@ -1,43 +0,0 @@
-/**
- * Retire the pack-era work-mesh listen unit so only `hq mesh daemon` subscribes.
- *
- * macOS: ~/Library/LaunchAgents/ai.getindigo.hq-work-mesh-listen.plist
- * Linux: ~/.config/systemd/user/hq-work-mesh-listen.service
- * Windows: Scheduled Task ai.getindigo.hq-work-mesh-listen
- */
-export type LegacyListenPlatform = "darwin" | "linux" | "win32" | "other";
-export declare const LEGACY_LISTEN_LABEL = "ai.getindigo.hq-work-mesh-listen";
-export declare const LEGACY_LISTEN_SYSTEMD_UNIT = "hq-work-mesh-listen.service";
-export declare const LEGACY_LISTEN_TASK = "ai.getindigo.hq-work-mesh-listen";
-export declare const LEGACY_LISTENER_DOCTOR_LINE = "legacy listener still installed";
-export interface CommandResult {
-    status: number | null;
-    stdout: string;
-    stderr: string;
-}
-export type CommandRunner = (cmd: string, args: string[]) => CommandResult;
-export declare function legacyListenPlistPath(home: string): string;
-export declare function legacyListenSystemdPath(home: string): string;
-export declare function legacyListenInstalled(opts: {
-    home: string;
-    platform: LegacyListenPlatform;
-    existsSync?: (p: string) => boolean;
-}): boolean;
-/**
- * Unload and delete the legacy listen unit when it is present.
- * On-disk unit files are removed on every host. launchctl, systemctl, and
- * schtasks run only for the matching platform, and only through `run` when
- * the caller injected one (tests never hit a real service manager).
- * Missing unit is a no-op.
- */
-export declare function retireLegacyListen(opts: {
-    home: string;
-    platform: LegacyListenPlatform;
-    run?: CommandRunner;
-    uid?: number;
-    /** Windows task probe: true when the scheduled task is registered. */
-    windowsTaskPresent?: boolean;
-}): {
-    removed: boolean;
-};
-//# sourceMappingURL=legacy-listen.d.ts.map

package/dist/lib/mesh/live/daemon/legacy-listen.js

@@ -1,89 +0,0 @@
-/**
- * Retire the pack-era work-mesh listen unit so only `hq mesh daemon` subscribes.
- *
- * macOS: ~/Library/LaunchAgents/ai.getindigo.hq-work-mesh-listen.plist
- * Linux: ~/.config/systemd/user/hq-work-mesh-listen.service
- * Windows: Scheduled Task ai.getindigo.hq-work-mesh-listen
- */
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { spawnSync } from "node:child_process";
-export const LEGACY_LISTEN_LABEL = "ai.getindigo.hq-work-mesh-listen";
-export const LEGACY_LISTEN_SYSTEMD_UNIT = "hq-work-mesh-listen.service";
-export const LEGACY_LISTEN_TASK = LEGACY_LISTEN_LABEL;
-export const LEGACY_LISTENER_DOCTOR_LINE = "legacy listener still installed";
-export function legacyListenPlistPath(home) {
-    return path.join(home, "Library", "LaunchAgents", `${LEGACY_LISTEN_LABEL}.plist`);
-}
-export function legacyListenSystemdPath(home) {
-    return path.join(home, ".config", "systemd", "user", LEGACY_LISTEN_SYSTEMD_UNIT);
-}
-const defaultRunner = (cmd, args) => {
-    const r = spawnSync(cmd, args, { encoding: "utf8" });
-    return {
-        status: r.status,
-        stdout: r.stdout ?? "",
-        stderr: r.error ? r.error.message : (r.stderr ?? ""),
-    };
-};
-export function legacyListenInstalled(opts) {
-    const exists = opts.existsSync ?? fs.existsSync;
-    if (opts.platform === "darwin")
-        return exists(legacyListenPlistPath(opts.home));
-    if (opts.platform === "linux")
-        return exists(legacyListenSystemdPath(opts.home));
-    if (opts.platform === "win32")
-        return false;
-    return false;
-}
-/**
- * Unload and delete the legacy listen unit when it is present.
- * On-disk unit files are removed on every host. launchctl, systemctl, and
- * schtasks run only for the matching platform, and only through `run` when
- * the caller injected one (tests never hit a real service manager).
- * Missing unit is a no-op.
- */
-export function retireLegacyListen(opts) {
-    const run = opts.run ?? (opts.platform === "other" ? undefined : defaultRunner);
-    let removed = false;
-    const plist = legacyListenPlistPath(opts.home);
-    if (fs.existsSync(plist)) {
-        if (opts.platform === "darwin" && run) {
-            const uid = opts.uid ?? (typeof process.getuid === "function" ? process.getuid() : undefined);
-            if (uid !== undefined) {
-                run("launchctl", ["bootout", `gui/${uid}/${LEGACY_LISTEN_LABEL}`]);
-            }
-            run("launchctl", ["unload", plist]);
-        }
-        try {
-            fs.unlinkSync(plist);
-            removed = true;
-        }
-        catch {
-            // leave removed false for this file
-        }
-    }
-    const unitPath = legacyListenSystemdPath(opts.home);
-    if (fs.existsSync(unitPath)) {
-        if (opts.platform === "linux" && run) {
-            run("systemctl", ["--user", "disable", "--now", LEGACY_LISTEN_SYSTEMD_UNIT]);
-        }
-        try {
-            fs.unlinkSync(unitPath);
-            removed = true;
-            if (opts.platform === "linux" && run) {
-                run("systemctl", ["--user", "daemon-reload"]);
-            }
-        }
-        catch {
-            // leave prior removed state
-        }
-    }
-    if (opts.platform === "win32" && opts.windowsTaskPresent && run) {
-        const result = run("schtasks.exe", ["/Delete", "/TN", LEGACY_LISTEN_TASK, "/F"]);
-        if (result.status === 0)
-            removed = true;
-    }
-    return { removed };
-}
-//# sourceMappingURL=legacy-listen.js.map

package/dist/lib/mesh/live/daemon/live-cache.d.ts

@@ -1,26 +0,0 @@
-/**
- * Daemon-owned work-mesh live cache.
- *
- * ~/.hq/work-mesh/live-cache.json plus live-cache.json.cursor-v2.json.
- * A project-view push updates the project row and bumps the cursor once.
- * The same company/project/boardVersion (or eventId) does not bump again.
- */
-export declare function liveCacheFile(meshRoot: string): string;
-export declare function liveCacheCursorFile(meshRoot: string): string;
-export interface ProjectViewPush {
-    companyUid: string;
-    projectId: string;
-    boardVersion?: string;
-    eventId?: string;
-}
-/** Parse a board wake. Returns null for every other payload. */
-export declare function parseProjectViewPush(payload: unknown): ProjectViewPush | null;
-/**
- * Apply one project-view push. Cursor increases by exactly one on first sight
- * of the key, and is left unchanged when the same push is applied again.
- */
-export declare function applyProjectViewPush(meshRoot: string, push: ProjectViewPush, nowIso?: string): {
-    applied: boolean;
-    cursor: number;
-};
-//# sourceMappingURL=live-cache.d.ts.map

package/dist/lib/mesh/live/daemon/live-cache.js

@@ -1,116 +0,0 @@
-/**
- * Daemon-owned work-mesh live cache.
- *
- * ~/.hq/work-mesh/live-cache.json plus live-cache.json.cursor-v2.json.
- * A project-view push updates the project row and bumps the cursor once.
- * The same company/project/boardVersion (or eventId) does not bump again.
- */
-import * as fs from "node:fs";
-import * as path from "node:path";
-export function liveCacheFile(meshRoot) {
-    return path.join(meshRoot, "live-cache.json");
-}
-export function liveCacheCursorFile(meshRoot) {
-    return path.join(meshRoot, "live-cache.json.cursor-v2.json");
-}
-function readJson(file) {
-    try {
-        return JSON.parse(fs.readFileSync(file, "utf8"));
-    }
-    catch {
-        return null;
-    }
-}
-function writeJson(file, value) {
-    fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
-    const tmp = `${file}.tmp.${process.pid}`;
-    fs.writeFileSync(tmp, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
-    fs.renameSync(tmp, file);
-}
-function pushKey(push) {
-    if (push.eventId && push.eventId.trim())
-        return `id:${push.eventId.trim()}`;
-    return `pv:${push.companyUid}:${push.projectId}:${push.boardVersion ?? ""}`;
-}
-/** Parse a board wake. Returns null for every other payload. */
-export function parseProjectViewPush(payload) {
-    let value = payload;
-    if (Buffer.isBuffer(value))
-        value = value.toString("utf8");
-    if (typeof value === "string") {
-        try {
-            value = JSON.parse(value);
-        }
-        catch {
-            return null;
-        }
-    }
-    if (!value || typeof value !== "object" || Array.isArray(value))
-        return null;
-    const rec = value;
-    if (rec.kind !== "board" || rec.mutation !== "project-view")
-        return null;
-    if (typeof rec.companyUid !== "string" || typeof rec.projectId !== "string")
-        return null;
-    if (!rec.companyUid || !rec.projectId)
-        return null;
-    return {
-        companyUid: rec.companyUid,
-        projectId: rec.projectId,
-        boardVersion: typeof rec.boardVersion === "string" ? rec.boardVersion : undefined,
-        eventId: typeof rec.eventId === "string" ? rec.eventId : undefined,
-    };
-}
-/**
- * Apply one project-view push. Cursor increases by exactly one on first sight
- * of the key, and is left unchanged when the same push is applied again.
- */
-export function applyProjectViewPush(meshRoot, push, nowIso = new Date().toISOString()) {
-    const key = pushKey(push);
-    const stored = readJson(liveCacheCursorFile(meshRoot));
-    const previous = stored &&
-        typeof stored === "object" &&
-        !Array.isArray(stored) &&
-        stored.version === 1 &&
-        typeof stored.cursor === "number"
-        ? {
-            version: 1,
-            cursor: stored.cursor,
-            seen: Array.isArray(stored.seen)
-                ? stored.seen.filter((s) => typeof s === "string").slice(-200)
-                : [],
-        }
-        : { version: 1, cursor: 0, seen: [] };
-    if (previous.seen.includes(key)) {
-        return { applied: false, cursor: previous.cursor };
-    }
-    const cursor = previous.cursor + 1;
-    const cacheRaw = readJson(liveCacheFile(meshRoot));
-    const cache = cacheRaw && typeof cacheRaw === "object" && !Array.isArray(cacheRaw)
-        ? cacheRaw
-        : {};
-    const projects = cache.projects && typeof cache.projects === "object" && !Array.isArray(cache.projects)
-        ? { ...cache.projects }
-        : {};
-    const rowKey = `${push.companyUid}/${push.projectId}`;
-    projects[rowKey] = {
-        companyUid: push.companyUid,
-        projectId: push.projectId,
-        mutation: "project-view",
-        boardVersion: push.boardVersion,
-        updatedAt: nowIso,
-    };
-    writeJson(liveCacheFile(meshRoot), {
-        ...cache,
-        updatedAt: nowIso,
-        cursor,
-        projects,
-    });
-    writeJson(liveCacheCursorFile(meshRoot), {
-        version: 1,
-        cursor,
-        seen: [...previous.seen, key].slice(-200),
-    });
-    return { applied: true, cursor };
-}
-//# sourceMappingURL=live-cache.js.map

package/dist/lib/mesh/live/daemon/mqtt-events.d.ts

@@ -1,7 +0,0 @@
-import type { MqttClientEventCallbacks } from "mqtt";
-/** Event callbacks shared by the daemon's two MQTT client seams. */
-export type MeshMqttEventMap = Pick<MqttClientEventCallbacks, "connect" | "error" | "close" | "message">;
-export interface MeshMqttEventClient {
-    on<Event extends keyof MeshMqttEventMap>(event: Event, handler: MeshMqttEventMap[Event]): unknown;
-}
-//# sourceMappingURL=mqtt-events.d.ts.map

package/dist/lib/mesh/live/daemon/mqtt-events.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=mqtt-events.js.map

package/dist/lib/mesh/live/daemon/mqtt-events.test-d.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=mqtt-events.test-d.d.ts.map

package/dist/lib/mesh/live/daemon/mqtt-events.test-d.js

@@ -1,10 +0,0 @@
-// @ts-expect-error unsupported event names are not part of mqtt's event map
-presence.on("conect", () => { });
-// @ts-expect-error MQTT message handlers receive a string topic
-presence.on("message", (topic) => void topic);
-// @ts-expect-error unsupported event names are not part of mqtt's event map
-workCache.on("conect", () => { });
-// @ts-expect-error MQTT message handlers receive a string topic
-workCache.on("message", (topic) => void topic);
-export {};
-//# sourceMappingURL=mqtt-events.test-d.js.map

package/dist/lib/mesh/live/daemon/version-drift.d.ts

@@ -1,5 +0,0 @@
-/** Version installed behind the entrypoint that launched this daemon. */
-export declare function readInstalledCliVersion(entry?: string): string | null;
-/** A missing/unreadable installed version is not proof of a safe restart. */
-export declare function hasCliVersionDrift(daemonVersion: string, installedVersion: string | null | undefined): installedVersion is string;
-//# sourceMappingURL=version-drift.d.ts.map

package/dist/lib/mesh/live/daemon/version-drift.js

@@ -1,47 +0,0 @@
-/**
- * Read the version of the CLI package currently selected by the daemon's
- * launch entrypoint. The daemon keeps the version it was loaded with in
- * memory; an npm/pnpm upgrade can repoint this entrypoint without restarting
- * that process.
- */
-import * as fs from "node:fs";
-import * as path from "node:path";
-function packageVersionAtOrAbove(entry) {
-    let dir;
-    try {
-        dir = path.dirname(fs.realpathSync(entry));
-    }
-    catch {
-        return null;
-    }
-    // A CLI entrypoint is normally <package>/dist/index.js. Keep the walk
-    // bounded so a malformed entrypoint never traverses an entire filesystem.
-    for (let i = 0; i < 8; i += 1) {
-        const pkgPath = path.join(dir, "package.json");
-        try {
-            const parsed = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
-            if (parsed.name === "@indigoai-us/hq-cli" &&
-                typeof parsed.version === "string" &&
-                parsed.version.trim()) {
-                return parsed.version.trim();
-            }
-        }
-        catch {
-            // No package manifest at this level; continue walking upward.
-        }
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    return null;
-}
-/** Version installed behind the entrypoint that launched this daemon. */
-export function readInstalledCliVersion(entry = process.argv[1]) {
-    return entry ? packageVersionAtOrAbove(entry) : null;
-}
-/** A missing/unreadable installed version is not proof of a safe restart. */
-export function hasCliVersionDrift(daemonVersion, installedVersion) {
-    return Boolean(installedVersion && installedVersion !== daemonVersion);
-}
-//# sourceMappingURL=version-drift.js.map

package/dist/lib/mesh/live/daemon/work-subscribe.d.ts

@@ -1,32 +0,0 @@
-/**
- * Contract-2 subscriber for the personal work topic.
- * Owns live-cache.json writes. Presence publish stays on PresenceClient.
- */
-import type { IClientOptions } from "mqtt";
-import type { MeshMqttEventClient } from "./mqtt-events.js";
-import { type PersonalCredentialsFetcher } from "./credentials.js";
-export interface WorkCacheMqtt extends MeshMqttEventClient {
-    subscribe(topic: string, opts: {
-        qos: 0 | 1;
-    }, cb?: (err?: Error | null) => void): unknown;
-    end(force?: boolean, cb?: () => void): unknown;
-}
-export interface WorkCacheSubscriber {
-    stop: () => Promise<void>;
-}
-export declare const AGENT_INBOX_PUSH_STATE_BASENAME = "agent-inbox-push.json";
-export declare function startWorkCacheSubscriber(opts: {
-    meshRoot: string;
-    fetchCredentials?: PersonalCredentialsFetcher;
-    token?: () => Promise<string>;
-    baseUrl?: string;
-    mqttConnect: (url: string, options: IClientOptions) => WorkCacheMqtt;
-    now?: () => Date;
-    timers?: {
-        setTimeout: (fn: () => void, ms: number) => unknown;
-        clearTimeout: (handle: unknown) => void;
-    };
-    onInfo?: (message: string) => void;
-    random?: () => number;
-}): Promise<WorkCacheSubscriber>;
-//# sourceMappingURL=work-subscribe.d.ts.map