@indigoai-us/hq-cli 5.312.2-beta.0 → 5.314.0

package/dist/lib/mesh/live/backfill-held.d.ts

@@ -13,17 +13,14 @@
  * company (via the identity-file default resolver shipped in 5.108.22). The
  * daemon's next held retry then re-attributes and posts those events naturally.
  *
- * Constraints:
- * - The daemon runs this in bounded startup batches; the CLI command remains
- *   available for an explicit full/manual recovery.
+ * Constraints (owner directive):
+ * - Explicit, opt-in only. Never automatic; never wired into a hook or daemon.
  * - Idempotent: sessions that already carry a companyUid are skipped.
  * - Never deletes held events; the daemon posts them on the next retry.
  * - Purely local to the box it runs on; no fleet fan-out.
  */
 import type { ReconcileObservation, ReconcileOutcome } from "../../work-context/reconcile.js";
 import { type SessionStateFile } from "../../work-context/state.js";
-import type { MembershipValidationResult } from "../../work-context/config.js";
-import { type OutboxOperation } from "../../work-context/outbox.js";
 /**
  * One distinct session discovered in held.jsonl, carrying the company evidence
  * its held events recorded at enqueue time (cwd / hqRoot / companySlug /
@@ -40,26 +37,12 @@ export interface HeldSessionRef {
     cwd?: string;
     /** HQ root, so the resolver can read workspace/sessions/<sid>/meta.yaml. */
     hqRoot?: string;
-    /** Every HQ root seen for this session, ordered by first observation. */
-    hqRoots?: string[];
     /** Company the session was bound to at emit time (enqueue --company-slug). */
     companySlug?: string;
     /** Project id carried on the event, if any. */
     project?: string;
     /** Task id carried on the event, if any. */
     task?: string;
-    /**
-     * Per-event local evidence retained while coalescing a held session. A
-     * session id may be reused. The current instance is state.bindingEpisodeId,
-     * never the event timestamp: a later `at` on another episode is still stale.
-     */
-    eventEvidence?: Array<{
-        hqRoot?: string;
-        cwd?: string;
-        harness?: string;
-        at?: string;
-        bindingEpisodeId?: string;
-    }>;
 }
 export interface BackfillHeldResult {
     /** Distinct sessions found in held.jsonl (before --limit). */
@@ -68,29 +51,12 @@ export interface BackfillHeldResult {
     considered: number;
     /** Skipped because state already has a companyUid. */
     alreadyAttributed: number;
-    /**
-     * A recovered company binding was persisted locally (would-recover in
-     * dry-run). A reconcile attempt that ends in needs_company is unresolved.
-     */
+    /** Reconcile invoked and a company was resolved (would-reconcile in dry-run). */
     reconciled: number;
     /** Reconcile ran but resolver found no company. */
     unresolved: number;
-    /** Unresolved because otherwise-trusted local evidence disagreed. */
-    conflictingEvidence: number;
-    /**
-     * Unresolved because no local company evidence existed (not even a slug).
-     * These sessions cannot be recovered without --use-device-default or new
-     * local activity; they are never silently folded into the plain unresolved
-     * count.
-     */
-    noEvidence: number;
     /** Sessions that errored during reconcile. */
     errors: number;
-    /** Why each session with otherwise-valid local evidence stayed unresolved. */
-    unresolvedReasons: Array<{
-        sessionId: string;
-        reason: string;
-    }>;
     dryRun: boolean;
 }
 export interface BackfillHeldDeps {
@@ -98,11 +64,7 @@ export interface BackfillHeldDeps {
     workMeshRoot: string;
     /** Work-context root that holds sessions/<sid>.json. */
     workContextRoot: string;
-    /** HQ root configured for this daemon/CLI invocation (or device allowlist). */
-    hqRoot?: string;
-    /** Durable device allowlist of verified local HQ roots. */
-    hqRoots?: string[];
-    /** Report only; write nothing or deliver events. Membership validation may run. */
+    /** Report only; write nothing, call no network, invoke no reconcile. */
     dryRun?: boolean;
     /** Cap distinct sessions processed. 0 (default) = no cap. */
     limit?: number;
@@ -125,41 +87,29 @@ export interface BackfillHeldDeps {
      * meta) in BOTH the dry-run predictor and the write path, so the two agree.
      */
     remoteOwnerHint?: string;
-    /** Historical device-default repair is opt-in; false keeps no-evidence sessions held. */
-    useDeviceDefault?: boolean;
     /** Env passed to the dry-run resolver (tests). Default process.env. */
     env?: NodeJS.ProcessEnv;
     /**
-     * Membership validation used by both the dry-run preview and the live
-     * reconciler. A false response means the locally resolved slug is no longer
-     * an active membership and cannot be recovered.
+     * Read-only company predictor for --dry-run. MUST mirror what the write
+     * path's reconcile would resolve, so dry-run and write report the same
+     * counts (the earlier bug: dry-run counted every session as would-reconcile
+     * while the write path, given no evidence, resolved none). Default runs the
+     * shared `resolveCompany` over the same reconstructed evidence.
      */
-    validateMembership?: (slug: string) => Promise<MembershipValidationResult> | MembershipValidationResult;
+    predictCompany?: (ref: HeldSessionRef) => boolean;
     /** Optional progress logger. */
     log?: (message: string) => void;
-    /** Read/write seam for the bounded-startup rotation cursor. */
-    readCursor?: () => BackfillCursor | null;
-    writeCursor?: (cursor: BackfillCursor) => void;
-}
-interface BackfillCursor {
-    sessionId?: string;
-    /** Zero-based index of the last considered session in its file generation. */
-    ordinal?: number;
 }
-/** Read-only doctor helper: report only independently verified held evidence. */
-export declare function refWithLocalCompanyEvidence(ref: HeldSessionRef, canonicalHqRoot?: string, canonicalHqRoots?: readonly string[], state?: SessionStateFile | null): HeldSessionRef | null;
 /**
- * Build the reconcile observation for a company that was independently proven
- * from durable local evidence. Held-event fields are deliberately not forwarded
- * as trusted explicit context.
+ * Build the reconcile observation for one held session, forwarding the company
+ * evidence its events recorded (cwd / hqRoot / bound companySlug / project /
+ * task). The event's own companySlug is trusted explicit — it is the company
+ * the session was bound to when the events were emitted on this box.
  */
 export declare function observationFromHeldRef(ref: HeldSessionRef, contractVersion: number, clientOperationId: string): ReconcileObservation;
-/** Shared doctor/backfill gate for a receipt that is safe to treat as current evidence. */
-export declare function hasCurrentAcknowledgedRegistration(ref: HeldSessionRef, state: SessionStateFile | null, operations: readonly OutboxOperation[], hqRoot?: string, hqRoots?: readonly string[]): boolean;
 /**
- * Read held.jsonl and return distinct sessions. Later events can add local
- * evidence absent from the first event (the original first-occurrence-only
- * implementation missed exactly that shape after a session became bound).
+ * Read held.jsonl and return distinct sessions (first occurrence wins),
+ * carrying the harness from whichever held event we saw first for that session.
  * Lines that fail to parse or carry no sessionId are ignored (the daemon owns
  * their disposition; this backfill never mutates or deletes held lines).
  */
@@ -169,5 +119,4 @@ export declare function readHeldSessions(workMeshRoot: string): HeldSessionRef[]
  * re-running skips sessions that already carry a companyUid.
  */
 export declare function backfillHeldSessions(deps: BackfillHeldDeps): Promise<BackfillHeldResult>;
-export {};
 //# sourceMappingURL=backfill-held.d.ts.map