@indigoai-us/hq-cli 5.312.2-beta.0 → 5.314.0

package/dist/secrets-env-fast-route.js

@@ -1,54 +0,0 @@
-/** Default-off hq-flags gate for the `secrets env` entry fast path. */
-import { localOverrideEnvVar, readLocalOverride } from "@indigoai-us/hq-flags-client";
-export const CLI_SECRETS_ENV_FAST_PATH_FLAG = "cli.secrets-env-fast-path";
-/** Keep the existing command graph in control when the gate is off or declines. */
-export async function dispatchSecretsEnvFastRequest(_request, deps) {
-    if (!(await deps.isEnabled())) {
-        await deps.runCurrent();
-        return;
-    }
-    if ((await deps.runFast()) === "fallback") {
-        await deps.runCurrent();
-    }
-}
-/**
- * Fast routes only use an explicit local override or the latest company flag
- * snapshot. A missing company, stale snapshot, or unreadable cache leaves the
- * current CLI path in control; it never performs a registry network request.
- */
-export async function secretsEnvFastRouteEnabled(request, env = process.env) {
-    const override = readLocalOverride(CLI_SECRETS_ENV_FAST_PATH_FLAG, env);
-    if (override !== null)
-        return override;
-    const rawOverride = env[localOverrideEnvVar(CLI_SECRETS_ENV_FAST_PATH_FLAG)];
-    if (rawOverride === "1")
-        return true;
-    if (rawOverride === "0")
-        return false;
-    if (request.scope.personal)
-        return false;
-    try {
-        const scopedEnv = { ...env };
-        if (request.scope.company) {
-            // An explicit --company scope must override any ambient binding for the
-            // fast-path flag lookup, just as it overrides the secrets command scope.
-            delete scopedEnv.HQ_COMPANY_UID;
-            scopedEnv.HQ_COMPANY_SLUG = request.scope.company;
-        }
-        const [{ resolveProcessFlagCompanyContext }, { readFlagSnapshotFile }] = await Promise.all([
-            import("./lib/process-flag-company-context.js"),
-            import("./lib/flag-snapshot-file.js"),
-        ]);
-        const { companyUid } = resolveProcessFlagCompanyContext(scopedEnv);
-        if (!companyUid)
-            return false;
-        return readFlagSnapshotFile(companyUid, { env: scopedEnv })?.flags[CLI_SECRETS_ENV_FAST_PATH_FLAG] === true;
-    }
-    catch (error) {
-        // This is a performance rollout gate. Failure to read it preserves the
-        // existing full CLI behavior.
-        console.warn("[hq] secrets env fast-path flag lookup failed; using the full CLI path", error instanceof Error ? error.name : typeof error);
-        return false;
-    }
-}
-//# sourceMappingURL=secrets-env-fast-route.js.map

package/dist/utils/checkpoint-stamp-write-error.d.ts

@@ -1,28 +0,0 @@
-export type CheckpointStampFsOperation = "open" | "write" | "rename" | "unlink";
-type CheckpointStampErrnoCode = "EBUSY" | "EPERM" | "UNKNOWN";
-type CheckpointStampWriteDiagnostics = {
-    fs_op: CheckpointStampFsOperation;
-    target_kind: "checkpoint_stamp";
-    errno_code: CheckpointStampErrnoCode;
-    platform: "win32";
-};
-export type CheckpointStampWriteCaptureContext = {
-    fingerprint: ["fs-write-failed", "checkpoint_stamp", CheckpointStampErrnoCode];
-    tags: CheckpointStampWriteDiagnostics;
-};
-export declare class CheckpointStampWriteError extends Error {
-    name: string;
-    readonly code: CheckpointStampErrnoCode;
-    readonly syscall: CheckpointStampFsOperation;
-    readonly checkpointStampWriteDiagnostics: CheckpointStampWriteDiagnostics;
-    constructor(diagnostics: CheckpointStampWriteDiagnostics, originalStack?: string);
-}
-/** Wrap only the captured Windows lock/error classes, keeping the original frames and dropping paths. */
-export declare function checkpointStampWriteErrorFor(error: unknown, fallbackOperation: CheckpointStampFsOperation): CheckpointStampWriteError | null;
-export declare function isCheckpointStampWriteError(error: unknown): boolean;
-/** Value-free report context for the Windows checkpoint stamp write boundary. */
-export declare function checkpointStampWriteCaptureContext(error: unknown): CheckpointStampWriteCaptureContext | null;
-/** User-facing text stays actionable without including the HQ or home path. */
-export declare function checkpointStampWriteMessage(error: unknown): string | null;
-export {};
-//# sourceMappingURL=checkpoint-stamp-write-error.d.ts.map

package/dist/utils/checkpoint-stamp-write-error.js

@@ -1,99 +0,0 @@
-const CHECKPOINT_STAMP_ERRNO_CODES = new Set([
-    "EBUSY",
-    "EPERM",
-    "UNKNOWN",
-]);
-const CHECKPOINT_STAMP_FS_OPERATIONS = new Set([
-    "open",
-    "write",
-    "rename",
-    "unlink",
-]);
-function errorLike(value) {
-    return value !== null && typeof value === "object" ? value : null;
-}
-function isCheckpointStampErrnoCode(value) {
-    return typeof value === "string" && CHECKPOINT_STAMP_ERRNO_CODES.has(value);
-}
-function isCheckpointStampFsOperation(value) {
-    return (typeof value === "string" &&
-        CHECKPOINT_STAMP_FS_OPERATIONS.has(value));
-}
-export class CheckpointStampWriteError extends Error {
-    name = "CheckpointStampWriteError";
-    code;
-    syscall;
-    checkpointStampWriteDiagnostics;
-    constructor(diagnostics, originalStack) {
-        super(`checkpoint stamp write failed during ${diagnostics.fs_op} (${diagnostics.errno_code})`);
-        this.code = diagnostics.errno_code;
-        this.syscall = diagnostics.fs_op;
-        this.checkpointStampWriteDiagnostics = diagnostics;
-        if (originalStack) {
-            const frames = originalStack.split("\n").slice(1);
-            if (frames.length > 0)
-                this.stack = `${this.name}: ${this.message}\n${frames.join("\n")}`;
-        }
-    }
-}
-/** Wrap only the captured Windows lock/error classes, keeping the original frames and dropping paths. */
-export function checkpointStampWriteErrorFor(error, fallbackOperation) {
-    const record = errorLike(error);
-    if (!record || !isCheckpointStampErrnoCode(record.code))
-        return null;
-    const fsOperation = isCheckpointStampFsOperation(record.syscall)
-        ? record.syscall
-        : fallbackOperation;
-    const diagnostics = {
-        fs_op: fsOperation,
-        target_kind: "checkpoint_stamp",
-        errno_code: record.code,
-        platform: "win32",
-    };
-    return new CheckpointStampWriteError(diagnostics, error instanceof Error ? error.stack : undefined);
-}
-function diagnosticsFor(error) {
-    const record = errorLike(error);
-    if (!record || record.name !== "CheckpointStampWriteError")
-        return null;
-    const diagnostics = error
-        .checkpointStampWriteDiagnostics;
-    if (diagnostics === null || typeof diagnostics !== "object")
-        return null;
-    const candidate = diagnostics;
-    if (!isCheckpointStampFsOperation(candidate.fs_op) ||
-        candidate.target_kind !== "checkpoint_stamp" ||
-        !isCheckpointStampErrnoCode(candidate.errno_code) ||
-        candidate.platform !== "win32") {
-        return null;
-    }
-    return {
-        fs_op: candidate.fs_op,
-        target_kind: "checkpoint_stamp",
-        errno_code: candidate.errno_code,
-        platform: "win32",
-    };
-}
-export function isCheckpointStampWriteError(error) {
-    return diagnosticsFor(error) !== null;
-}
-/** Value-free report context for the Windows checkpoint stamp write boundary. */
-export function checkpointStampWriteCaptureContext(error) {
-    const tags = diagnosticsFor(error);
-    if (!tags)
-        return null;
-    return {
-        // This is a grouping key. Keep it independent of installation paths.
-        fingerprint: ["fs-write-failed", tags.target_kind, tags.errno_code],
-        tags,
-    };
-}
-/** User-facing text stays actionable without including the HQ or home path. */
-export function checkpointStampWriteMessage(error) {
-    const diagnostics = diagnosticsFor(error);
-    if (!diagnostics)
-        return null;
-    return (`hq could not write a checkpoint state file (${diagnostics.errno_code} during ${diagnostics.fs_op}). ` +
-        "Check the checkpoint state folder and retry.");
-}
-//# sourceMappingURL=checkpoint-stamp-write-error.js.map

package/dist/utils/cli-network-lifecycle.d.ts

@@ -1,4 +0,0 @@
-export declare function isMonitorFastPathCommand(argv: readonly string[]): boolean;
-/** Skip process-wide network lifecycle work for hooks and detached monitor supervisors. */
-export declare function runGlobalNetworkLifecycle<T>(argv: readonly string[], operation: () => T): T | undefined;
-//# sourceMappingURL=cli-network-lifecycle.d.ts.map

package/dist/utils/cli-network-lifecycle.js

@@ -1,11 +0,0 @@
-const MONITOR_HIDDEN_NETWORK_BYPASS = new Set(["drain", "wait", "enabled", "_run"]);
-export function isMonitorFastPathCommand(argv) {
-    return argv[2] === "monitor" && MONITOR_HIDDEN_NETWORK_BYPASS.has(argv[3] ?? "");
-}
-/** Skip process-wide network lifecycle work for hooks and detached monitor supervisors. */
-export function runGlobalNetworkLifecycle(argv, operation) {
-    if (isMonitorFastPathCommand(argv))
-        return undefined;
-    return operation();
-}
-//# sourceMappingURL=cli-network-lifecycle.js.map

package/dist/utils/cognito-refresh-sentry.d.ts

@@ -1,3 +0,0 @@
-/** Capture only fixed, aggregatable auth diagnostics; never attach tokens or identity. */
-export declare function reportNoninteractivePersonRefreshRejection(error: unknown): Promise<void>;
-//# sourceMappingURL=cognito-refresh-sentry.d.ts.map

package/dist/utils/cognito-refresh-sentry.js

@@ -1,49 +0,0 @@
-import { CLI_VERSION } from "../cli-version.js";
-import { CognitoRefreshError } from "@indigoai-us/hq-cloud";
-/** Capture only fixed, aggregatable auth diagnostics; never attach tokens or identity. */
-export async function reportNoninteractivePersonRefreshRejection(error) {
-    try {
-        // Keep the Sentry SDK and its generated DSN out of ordinary session utility
-        // imports. The reporter is reached only after a definitive noninteractive
-        // refresh rejection, so load the Sentry boundary only on that path.
-        const { Sentry } = await import("../sentry.js");
-        const statusCode = error instanceof CognitoRefreshError ? error.statusCode : undefined;
-        const rejectionKind = error instanceof CognitoRefreshError
-            ? "cognito_refresh_rejection"
-            : "classified_auth_error";
-        Sentry.withScope((scope) => {
-            scope.setUser(null);
-            scope.clearBreadcrumbs();
-            scope.addBreadcrumb({
-                category: "hq.auth",
-                message: "Noninteractive person refresh was attempted for an expiring session",
-                level: "info",
-                data: { interactive: false },
-            });
-            scope.addBreadcrumb({
-                category: "hq.auth",
-                message: "Refresh rejection had no fresh same-principal cache generation",
-                level: "error",
-                data: {
-                    rejection_kind: rejectionKind,
-                    ...(Number.isInteger(statusCode) ? { status_code: statusCode } : {}),
-                },
-            });
-            scope.setLevel("error");
-            scope.setFingerprint(["hq-cli", "person-refresh-rejected"]);
-            scope.setTag("component", "person-session-refresh");
-            scope.setTag("auth.rejection_kind", rejectionKind);
-            scope.setTag("auth.fresh_cache_generation_found", "false");
-            scope.setTag("platform", process.platform);
-            scope.setTag("cli_version", CLI_VERSION);
-            if (Number.isInteger(statusCode) && statusCode >= 400 && statusCode <= 599) {
-                scope.setTag("auth.status_code", String(statusCode));
-            }
-            Sentry.captureMessage("Noninteractive HQ person session refresh rejected");
-        });
-    }
-    catch {
-        // Telemetry is best-effort: it must never prevent session invalidation or auth fallback.
-    }
-}
-//# sourceMappingURL=cognito-refresh-sentry.js.map

package/dist/utils/console-origin.d.ts

@@ -1,9 +0,0 @@
-/**
- * The console that fronts the control plane this CLI is pointed at.
- *
- * A handoff must land on the console for the same backend. When an override is
- * active, derive its console from the control-plane host instead of assuming
- * production. `HQ_CONSOLE_URL` remains an explicit override.
- */
-export declare function consoleOrigin(vaultApiUrl?: string): string | undefined;
-//# sourceMappingURL=console-origin.d.ts.map

package/dist/utils/console-origin.js

@@ -1,28 +0,0 @@
-import { DEFAULT_VAULT_API_URL } from "./cognito-session.js";
-const PRODUCTION_CONSOLE_ORIGIN = "https://hq.computer";
-const PRODUCTION_VAULT_API_HOST = "hqapi.hq.computer";
-/**
- * The console that fronts the control plane this CLI is pointed at.
- *
- * A handoff must land on the console for the same backend. When an override is
- * active, derive its console from the control-plane host instead of assuming
- * production. `HQ_CONSOLE_URL` remains an explicit override.
- */
-export function consoleOrigin(vaultApiUrl = DEFAULT_VAULT_API_URL) {
-    const explicit = process.env.HQ_CONSOLE_URL?.trim();
-    if (explicit)
-        return explicit.replace(/\/+$/, "");
-    let api;
-    try {
-        api = new URL(vaultApiUrl);
-    }
-    catch {
-        return undefined;
-    }
-    if (api.host === PRODUCTION_VAULT_API_HOST)
-        return PRODUCTION_CONSOLE_ORIGIN;
-    if (!api.hostname.startsWith("hqapi."))
-        return undefined;
-    return `${api.protocol}//${api.host.slice("hqapi.".length)}`;
-}
-//# sourceMappingURL=console-origin.js.map

package/dist/utils/exclusive-lock.d.ts

@@ -1,32 +0,0 @@
-/**
- * Acquiring a lock file on a filesystem that may not do hard links.
- *
- * The refresh lock is a classic POSIX `link()` lock: write a candidate file,
- * hard-link it into place, and let EEXIST mean somebody else holds it. That
- * is atomic on a local disk and on NFS, and it is simply absent on CIFS/SMB
- * — Azure Files returns ENOTSUP for `link()` on every call, so a bot whose
- * agent home lives on such a share could never mint a token at all. Its
- * probe failed every line with:
- *
- *     ENOTSUP: operation not supported on socket, link
- *       '.../cognito-tokens.json.lock.candidate.48560...' -> '.../lock'
- *
- * An exclusive create (`open(..., O_EXCL)`) gives the same guarantee — the
- * server refuses the second creator — and works on those shares. So the link
- * is tried first, and a filesystem that says it cannot do links is remembered
- * and switched to the exclusive-create path for the rest of the process.
- *
- * Both paths fail with EEXIST when the lock is held, so contention, stale-
- * owner reclamation and release are unchanged for every caller.
- */
-/** Test seam: forget what we learned about which filesystems do links. */
-export declare function resetLinkSupportCache(): void;
-/**
- * Create `lockFile` exclusively, or throw EEXIST if it already exists.
- *
- * `candidate` is an already-written file holding the owner's pid; on a
- * link-capable filesystem it becomes the lock, and otherwise its contents
- * are written directly. Either way the lock ends up holding the same bytes.
- */
-export declare function acquireLockFileExclusively(candidate: string, lockFile: string, dirKey: string): void;
-//# sourceMappingURL=exclusive-lock.d.ts.map

package/dist/utils/exclusive-lock.js

@@ -1,75 +0,0 @@
-/**
- * Acquiring a lock file on a filesystem that may not do hard links.
- *
- * The refresh lock is a classic POSIX `link()` lock: write a candidate file,
- * hard-link it into place, and let EEXIST mean somebody else holds it. That
- * is atomic on a local disk and on NFS, and it is simply absent on CIFS/SMB
- * — Azure Files returns ENOTSUP for `link()` on every call, so a bot whose
- * agent home lives on such a share could never mint a token at all. Its
- * probe failed every line with:
- *
- *     ENOTSUP: operation not supported on socket, link
- *       '.../cognito-tokens.json.lock.candidate.48560...' -> '.../lock'
- *
- * An exclusive create (`open(..., O_EXCL)`) gives the same guarantee — the
- * server refuses the second creator — and works on those shares. So the link
- * is tried first, and a filesystem that says it cannot do links is remembered
- * and switched to the exclusive-create path for the rest of the process.
- *
- * Both paths fail with EEXIST when the lock is held, so contention, stale-
- * owner reclamation and release are unchanged for every caller.
- */
-import * as fs from "fs";
-/**
- * `link()` errnos that mean "this filesystem does not implement links"
- * rather than "the link failed". EEXIST is deliberately NOT here: that is
- * ordinary contention and the caller's own retry loop owns it.
- */
-const LINK_UNSUPPORTED_CODES = new Set([
-    "ENOTSUP",
-    "EOPNOTSUPP",
-    "EPERM",
-    "EXDEV",
-    "EACCES",
-]);
-/**
- * Per-process, per-directory memory of a filesystem that cannot hard-link,
- * so the cost is one failed call rather than one per acquisition.
- */
-const linkUnsupportedDirs = new Set();
-/** Test seam: forget what we learned about which filesystems do links. */
-export function resetLinkSupportCache() {
-    linkUnsupportedDirs.clear();
-}
-/**
- * Create `lockFile` exclusively, or throw EEXIST if it already exists.
- *
- * `candidate` is an already-written file holding the owner's pid; on a
- * link-capable filesystem it becomes the lock, and otherwise its contents
- * are written directly. Either way the lock ends up holding the same bytes.
- */
-export function acquireLockFileExclusively(candidate, lockFile, dirKey) {
-    if (!linkUnsupportedDirs.has(dirKey)) {
-        try {
-            fs.linkSync(candidate, lockFile);
-            return;
-        }
-        catch (error) {
-            const code = error.code ?? "";
-            // Contention is the caller's business, and an unrecognised failure is
-            // a real fault: neither one means "try the other strategy".
-            if (code === "EEXIST")
-                throw error;
-            if (!LINK_UNSUPPORTED_CODES.has(code))
-                throw error;
-            linkUnsupportedDirs.add(dirKey);
-        }
-    }
-    // O_EXCL: the create fails with EEXIST if anyone got there first, which is
-    // exactly the signal the link path produced.
-    fs.writeFileSync(lockFile, fs.readFileSync(candidate), {
-        flag: "wx",
-        mode: 0o600,
-    });
-}
-//# sourceMappingURL=exclusive-lock.js.map

package/dist/utils/fast-stream-errors.d.ts

@@ -1,12 +0,0 @@
-type ErrorEventStream = {
-    on: (event: "error", listener: (err: unknown) => void) => unknown;
-};
-export type FastStreamErrorDependencies = {
-    stdout: ErrorEventStream;
-    stderr: ErrorEventStream;
-    exit: (code: number) => void;
-};
-/** Match the full CLI's clean handling when a pipe consumer closes early. */
-export declare function installFastPathStreamErrorHandlers(deps?: FastStreamErrorDependencies): void;
-export {};
-//# sourceMappingURL=fast-stream-errors.d.ts.map

package/dist/utils/fast-stream-errors.js

@@ -1,18 +0,0 @@
-import { isEpipe } from "./epipe.js";
-/** Match the full CLI's clean handling when a pipe consumer closes early. */
-export function installFastPathStreamErrorHandlers(deps = {
-    stdout: process.stdout,
-    stderr: process.stderr,
-    exit: (code) => process.exit(code),
-}) {
-    const handle = (err) => {
-        if (isEpipe(err)) {
-            deps.exit(0);
-            return;
-        }
-        throw err;
-    };
-    deps.stdout.on("error", handle);
-    deps.stderr.on("error", handle);
-}
-//# sourceMappingURL=fast-stream-errors.js.map

package/dist/utils/files-browse-acl.d.ts

@@ -1,5 +0,0 @@
-/** ACL source values and their stable labels in the hq files browse table. */
-export type AclSource = "shared-with-you" | "creator" | "role-bypass" | "personal-vault" | "private-folder";
-export declare const ACL_SOURCE_DISPLAY_LABELS: Readonly<Record<AclSource, string>>;
-export declare function displayAclSource(source: AclSource): string;
-//# sourceMappingURL=files-browse-acl.d.ts.map

package/dist/utils/files-browse-acl.js

@@ -1,11 +0,0 @@
-export const ACL_SOURCE_DISPLAY_LABELS = {
-    "shared-with-you": "shared-with-you",
-    creator: "creator access — creator-only",
-    "role-bypass": "role-bypass",
-    "personal-vault": "personal-vault",
-    "private-folder": "private folder — children are creator-only",
-};
-export function displayAclSource(source) {
-    return ACL_SOURCE_DISPLAY_LABELS[source];
-}
-//# sourceMappingURL=files-browse-acl.js.map

package/dist/utils/hq-core-yaml.d.ts

@@ -1,10 +0,0 @@
-export declare function readHqVersion(hqRoot: string): string | null;
-export interface CatalogEntry {
-    source: string;
-    description?: string;
-    conditional?: string;
-    auto_install?: boolean;
-}
-/** Read recommended_packages from core.yaml (the curated content-pack catalog). */
-export declare function readRecommendedPackages(hqRoot: string): CatalogEntry[];
-//# sourceMappingURL=hq-core-yaml.d.ts.map

package/dist/utils/hq-core-yaml.js

@@ -1,40 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-import * as yaml from "js-yaml";
-/** Locate core.yaml: v14+ nests it under core/, older layouts at the root. */
-function coreYamlPath(hqRoot) {
-    const nested = path.join(hqRoot, "core", "core.yaml");
-    if (fs.existsSync(nested))
-        return nested;
-    const flat = path.join(hqRoot, "core.yaml");
-    if (fs.existsSync(flat))
-        return flat;
-    return null;
-}
-export function readHqVersion(hqRoot) {
-    const filePath = coreYamlPath(hqRoot);
-    if (!filePath)
-        return null;
-    try {
-        const config = yaml.load(fs.readFileSync(filePath, "utf-8"));
-        return config?.hqVersion ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-/** Read recommended_packages from core.yaml (the curated content-pack catalog). */
-export function readRecommendedPackages(hqRoot) {
-    const filePath = coreYamlPath(hqRoot);
-    if (!filePath)
-        return [];
-    try {
-        const config = yaml.load(fs.readFileSync(filePath, "utf-8"));
-        const list = config?.recommended_packages;
-        return Array.isArray(list) ? list : [];
-    }
-    catch {
-        return [];
-    }
-}
-//# sourceMappingURL=hq-core-yaml.js.map

package/dist/utils/hq-root-resolver.d.ts

@@ -1,13 +0,0 @@
-/** Lightweight HQ-root resolver shared by cloud commands and fast flag scope. */
-/**
- * Resolve the HQ tree root using the same precedence as the Cognito helpers:
- * explicit HQ_ROOT, nearest cwd root, installer records, known locations, then
- * the historical ~/hq fallback (or an error when requested).
- */
-export declare function resolveDefaultHqRoot(opts?: {
-    onMissing?: "throw" | "fallback";
-    env?: NodeJS.ProcessEnv;
-    cwd?: string;
-    home?: string;
-}): string;
-//# sourceMappingURL=hq-root-resolver.d.ts.map

package/dist/utils/hq-root-resolver.js

@@ -1,103 +0,0 @@
-/** Lightweight HQ-root resolver shared by cloud commands and fast flag scope. */
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import * as yaml from "js-yaml";
-/**
- * Resolve the HQ tree root using the same precedence as the Cognito helpers:
- * explicit HQ_ROOT, nearest cwd root, installer records, known locations, then
- * the historical ~/hq fallback (or an error when requested).
- */
-export function resolveDefaultHqRoot(opts = {}) {
-    const env = opts.env ?? process.env;
-    const home = opts.home ?? os.homedir();
-    if (env.HQ_ROOT)
-        return path.resolve(env.HQ_ROOT);
-    let cur = path.resolve(opts.cwd ?? process.cwd());
-    while (cur !== path.dirname(cur)) {
-        if (isHqRoot(cur))
-            return cur;
-        cur = path.dirname(cur);
-    }
-    const fromConfig = readHqRootFromHqConfig(path.join(home, ".hq"));
-    if (fromConfig)
-        return path.resolve(fromConfig);
-    const discovered = discoverHqRootViaCoreYaml(home);
-    if (discovered)
-        return discovered;
-    if (opts.onMissing === "throw") {
-        throw new Error("Could not find HQ root. Run this command from within your HQ directory " +
-            "(must contain core.yaml AND a companies/ subdirectory), set $HQ_ROOT, " +
-            "or install HQ via the installer/menubar so ~/.hq/menubar.json records " +
-            "its location.");
-    }
-    return path.join(home, "hq");
-}
-function readHqRootFromHqConfig(hqConfigDir) {
-    const fromMenubar = readJsonStringField(path.join(hqConfigDir, "menubar.json"), "hqPath");
-    if (fromMenubar)
-        return fromMenubar;
-    return readJsonStringField(path.join(hqConfigDir, "config.json"), "hqFolderPath");
-}
-function readJsonStringField(file, field) {
-    try {
-        const parsed = JSON.parse(fs.readFileSync(file, "utf-8"));
-        const value = parsed[field];
-        return typeof value === "string" && value.length > 0 ? value : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function hqDiscoveryCandidates(home) {
-    return [
-        path.join(home, "HQ"),
-        path.join(home, "hq"),
-        path.join(home, "Documents", "HQ"),
-        path.join(home, "Documents", "hq"),
-        path.join(home, "Desktop", "HQ"),
-        path.join(home, "Desktop", "hq"),
-    ];
-}
-function discoverHqRootViaCoreYaml(home) {
-    return hqDiscoveryCandidates(home).find(isValidHqRootSignature);
-}
-function isValidHqRootSignature(dir) {
-    const canonical = path.join(dir, "core", "core.yaml");
-    const legacy = path.join(dir, "core.yaml");
-    let file;
-    if (fileExists(canonical))
-        file = canonical;
-    else if (fileExists(legacy))
-        file = legacy;
-    else
-        return false;
-    try {
-        const parsed = yaml.load(fs.readFileSync(file, "utf-8"));
-        return !!parsed && typeof parsed === "object" && "version" in parsed && "hqVersion" in parsed;
-    }
-    catch {
-        return false;
-    }
-}
-function fileExists(file) {
-    try {
-        return fs.statSync(file).isFile();
-    }
-    catch {
-        return false;
-    }
-}
-function isHqRoot(dir) {
-    const hasCoreYaml = fileExists(path.join(dir, "core", "core.yaml")) ||
-        fileExists(path.join(dir, "core.yaml"));
-    if (!hasCoreYaml)
-        return false;
-    try {
-        return fs.statSync(path.join(dir, "companies")).isDirectory();
-    }
-    catch {
-        return false;
-    }
-}
-//# sourceMappingURL=hq-root-resolver.js.map

package/dist/utils/redact-url.d.ts

@@ -1,14 +0,0 @@
-/** Marker used when a value claims to be a URL but cannot be parsed safely. */
-export declare const REDACTED_URL = "[REDACTED]";
-/**
- * Redact the values of secret-looking URL parameters while retaining URL
- * structure and safe query values. An invalid URL or malformed encoded
- * parameter name is replaced in full because its secret boundaries are
- * unknowable.
- */
-export declare function redactSensitiveUrl(value: string): string;
-/** Redact URLs embedded in an error or human-readable sentence. */
-export declare function redactUrlsInText(text: string): string;
-/** Clone a JSON-like value with all URL-valued fields and embedded URLs safe. */
-export declare function redactSensitiveUrls(value: unknown): unknown;
-//# sourceMappingURL=redact-url.d.ts.map