@indigoai-us/hq-cli 5.312.2-beta.0 → 5.314.0

package/dist/lib/mesh/live/daemon/doctor.d.ts

@@ -3,9 +3,7 @@
  * outbox/last-flush, and unhealthy when unacked spool age > 60s while online.
  */
 import { type CognitoActorKind, type CognitoTokenSource } from "../../../../utils/cognito-session.js";
-import { type UnattributedEventCounts } from "../spool.js";
 import { type DaemonStateFile } from "./state.js";
-import { type LegacyListenPlatform } from "./legacy-listen.js";
 export declare const UNHEALTHY_SPOOL_AGE_MS = 60000;
 export interface DaemonDoctorReport {
     running: boolean;
@@ -18,15 +16,8 @@ export interface DaemonDoctorReport {
     subscribed: boolean;
     spoolDepth: number;
     heldCount: number;
-    /** Distinct held sessions with neither bound state nor local company evidence. */
-    heldWithNoLocalEvidence: number;
-    attributedByDeviceDefault: number;
     deadLetterCount: number;
-    /** Events in any local queue still marked no-company / NEEDS_COMPANY / NONE. */
-    unattributedEvents: UnattributedEventCounts;
     outboxDepth: number;
-    outboxQuarantined?: number;
-    outboxLastQuarantineReason?: string;
     lastFlushAt?: string;
     lastFlushResult?: DaemonStateFile["lastFlushResult"];
     unhealthy: boolean;
@@ -36,14 +27,8 @@ export interface DaemonDoctorReport {
     tokenSource: CognitoTokenSource;
     /** human | agent | unknown — from token claims / machine signal. */
     actorKind: CognitoActorKind;
-    /** Subject in the person login file (`hq whoami`), or empty claims. */
-    whoamiSubject: string;
-    /** Subject the daemon will authenticate as (machine cache, else person file). */
-    daemonSubject: string;
     /** Credential vend refused (disabled / unsupported / 403). */
     presenceRefusal?: DaemonStateFile["presenceRefusal"];
-    /** Companies the current presence credential did not include. */
-    presenceDroppedCompanies: NonNullable<DaemonStateFile["presenceDroppedCompanies"]>;
     /** Pending events awaiting a retry drain (POST /v1/mesh/events). */
     emitRetryDepth: number;
     /** Last successful direct-emit POST time. */
@@ -55,51 +40,15 @@ export interface DaemonDoctorReport {
         rejected?: number;
         error?: string;
     };
-    /** Work held or quarantined after default-derived membership was denied. */
-    deviceDefaultAuthorizationDenials: number;
-    /** True when the pack-era listen unit is still on disk. */
-    legacyListenerInstalled: boolean;
-    /** One line when the running daemon's recorded CLI is not this CLI. */
-    cliMismatchLine?: string;
-    /** Every `hq` executable found on PATH, with the package version behind it. */
-    hqOnPath: Array<{
-        path: string;
-        version: string | null;
-    }>;
-    /** True when PATH lists more than one hq. */
-    multipleHqOnPath: boolean;
 }
 export interface DaemonDoctorDeps {
     home?: string;
     meshRoot?: string;
     workContextRoot?: string;
-    /** Independently configured HQ root for held-event evidence checks. */
-    hqRoot?: string;
     env?: NodeJS.ProcessEnv;
     isProcessAlive?: (pid: number) => boolean;
     now?: () => number;
-    /** Override the legacy-listen probe (tests). */
-    legacyListenerInstalled?: boolean;
-    platform?: LegacyListenPlatform;
-    /** This process's CLI version. Defaults to the package version. */
-    cliVersion?: string;
-    /** This process's CLI entry. Defaults to realpath of argv[1]. */
-    cliEntry?: string;
-    /** PATH used to list hq binaries. Defaults to the process PATH. */
-    pathEnv?: string;
 }
-/** Every hq named on PATH. Does not pick one; the caller prints all of them. */
-export declare function listHqBinariesOnPath(env?: NodeJS.ProcessEnv): Array<{
-    path: string;
-    version: string | null;
-}>;
-export declare function formatCliMismatchLine(input: {
-    recordedVersion?: string | null;
-    recordedEntry?: string | null;
-    currentVersion: string;
-    currentEntry: string;
-}): string | undefined;
-export declare function formatCliIdentityLines(report: Pick<DaemonDoctorReport, "cliMismatchLine" | "hqOnPath" | "multipleHqOnPath">): string[];
 export declare function collectDaemonDoctor(deps?: DaemonDoctorDeps): DaemonDoctorReport;
 export declare function formatDaemonDoctor(report: DaemonDoctorReport): string[];
 //# sourceMappingURL=doctor.d.ts.map

package/dist/lib/mesh/live/daemon/doctor.js

@@ -4,26 +4,16 @@
  */
 import * as fs from "node:fs";
 import * as os from "node:os";
-import * as path from "node:path";
-import { describeCognitoTokenSource, formatCognitoSubject, loadMachineCachedTokens, readPersonTokenFile, } from "../../../../utils/cognito-session.js";
-import { listOutboxOperations, outboxStats, } from "../../../work-context/outbox.js";
-import { readSessionState } from "../../../work-context/state.js";
+import { describeCognitoTokenSource, } from "../../../../utils/cognito-session.js";
+import { outboxStats, } from "../../../work-context/outbox.js";
 import { workContextRoot } from "../../../work-context/paths.js";
-import { outboxQuarantineStatusEnabled } from "../../../work-context/outbox-quarantine-status-flag.js";
-import { formatDroppedPresenceCompany } from "./credentials.js";
-import { countDistinctHeldEvents, countJsonlLines, countUnattributedEvents, } from "../spool.js";
+import { countJsonlLines, } from "../spool.js";
 import { workMeshDeadLetterPath, workMeshHeldPath, workMeshRoot, workMeshSpoolPath, } from "../paths.js";
 import { daemonDir, daemonPidPath } from "./paths.js";
 import { readEmitState } from "../emit.js";
 import { emitRetryDepth } from "../emit-retry.js";
-import { hasCurrentAcknowledgedRegistration, readHeldSessions, refWithLocalCompanyEvidence, } from "../backfill-held.js";
-import { readDaemonConfig } from "./config.js";
 import { pidLockStatus, readPidLock } from "./pid-lock.js";
 import { readDaemonState } from "./state.js";
-import { CLI_VERSION } from "../../../../cli-version.js";
-import { resolveRunningCliEntry } from "./install.js";
-import { readInstalledCliVersion } from "./version-drift.js";
-import { LEGACY_LISTENER_DOCTOR_LINE, legacyListenInstalled, } from "./legacy-listen.js";
 export const UNHEALTHY_SPOOL_AGE_MS = 60_000;
 function oldestJsonlAgeMs(filePath, nowMs) {
     if (!fs.existsSync(filePath))
@@ -59,80 +49,6 @@ function oldestJsonlAgeMs(filePath, nowMs) {
         return undefined;
     }
 }
-function samePath(a, b) {
-    const left = tryRealpath(a);
-    const right = tryRealpath(b);
-    return left === right;
-}
-function tryRealpath(value) {
-    try {
-        return fs.realpathSync(value);
-    }
-    catch {
-        return path.resolve(value);
-    }
-}
-/** Every hq named on PATH. Does not pick one; the caller prints all of them. */
-export function listHqBinariesOnPath(env = process.env) {
-    const found = [];
-    const pathEnv = env.PATH ?? "";
-    const names = process.platform === "win32" ? ["hq.cmd", "hq.exe", "hq"] : ["hq"];
-    for (const dir of pathEnv.split(path.delimiter)) {
-        if (!dir)
-            continue;
-        for (const name of names) {
-            const candidate = path.join(dir, name);
-            if (!fs.existsSync(candidate))
-                continue;
-            found.push({
-                path: tryRealpath(candidate),
-                version: readInstalledCliVersion(candidate),
-            });
-        }
-    }
-    return found;
-}
-export function formatCliMismatchLine(input) {
-    const recordedVersion = input.recordedVersion?.trim() || "";
-    const recordedEntry = input.recordedEntry?.trim() || "";
-    const versionMatches = recordedVersion !== "" && recordedVersion === input.currentVersion;
-    const entryMatches = recordedEntry !== "" &&
-        input.currentEntry !== "" &&
-        samePath(recordedEntry, input.currentEntry);
-    if (versionMatches && entryMatches)
-        return undefined;
-    const recordedLabel = recordedVersion || "(none)";
-    const recordedAt = recordedEntry || "(none)";
-    const currentAt = input.currentEntry || "(none)";
-    return (`daemon hq ${recordedLabel} at ${recordedAt} does not match this CLI ` +
-        `${input.currentVersion} at ${currentAt}. Run hq mesh daemon install to repoint it.`);
-}
-export function formatCliIdentityLines(report) {
-    const lines = [];
-    if (report.cliMismatchLine)
-        lines.push(report.cliMismatchLine);
-    for (const hit of report.hqOnPath) {
-        lines.push(`hq on PATH: ${hit.path} (${hit.version ?? "unknown"})`);
-    }
-    if (report.multipleHqOnPath)
-        lines.push("more than one hq is on PATH");
-    return lines;
-}
-function countDeviceDefaultAttribution(root) {
-    try {
-        return fs.readdirSync(path.join(root, "sessions")).filter((entry) => {
-            if (!entry.endsWith(".json"))
-                return false;
-            const state = readSessionState(entry.slice(0, -5), root);
-            return state?.companyConfidence === "device_default" &&
-                Boolean(state.companyUid) &&
-                state.contextStatus !== "needs_company";
-        }).length;
-    }
-    catch {
-        return 0;
-    }
-}
 export function collectDaemonDoctor(deps = {}) {
     const home = deps.home ?? os.homedir();
     const env = deps.env ?? process.env;
@@ -156,46 +72,17 @@ export function collectDaemonDoctor(deps = {}) {
     const record = readPidLock(lockPath);
     const running = lock === "held";
     const state = readDaemonState(dir);
-    let currentEntry = deps.cliEntry ?? "";
-    if (!deps.cliEntry) {
-        try {
-            currentEntry = resolveRunningCliEntry();
-        }
-        catch {
-            currentEntry = "";
-        }
-    }
-    const currentVersion = deps.cliVersion ?? CLI_VERSION;
-    const pathEnv = deps.pathEnv ?? env.PATH ?? "";
-    const hqOnPath = listHqBinariesOnPath({ ...env, PATH: pathEnv });
-    const cliMismatchLine = formatCliMismatchLine({
-        recordedVersion: state?.cliVersion,
-        recordedEntry: state?.cliEntry,
-        currentVersion,
-        currentEntry,
-    });
     const spoolPath = workMeshSpoolPath(meshRoot);
     const heldPath = workMeshHeldPath(meshRoot);
     const deadPath = workMeshDeadLetterPath(meshRoot);
     const spoolDepth = countJsonlLines(spoolPath);
-    const heldCount = countDistinctHeldEvents(heldPath);
-    const trustedRoots = readDaemonConfig(dir).trustedHqRoots;
-    const outboxOperations = listOutboxOperations(ctxRoot);
-    const heldWithNoLocalEvidence = readHeldSessions(meshRoot).filter((ref) => {
-        const state = readSessionState(ref.sessionId, ctxRoot);
-        return (!state?.companyUid &&
-            !hasCurrentAcknowledgedRegistration(ref, state, outboxOperations, deps.hqRoot ?? env.HQ_ROOT?.trim(), trustedRoots) &&
-            !refWithLocalCompanyEvidence(ref, deps.hqRoot ?? env.HQ_ROOT?.trim(), trustedRoots, state));
-    }).length;
-    const attributedByDeviceDefault = countDeviceDefaultAttribution(ctxRoot);
+    const heldCount = countJsonlLines(heldPath);
     const deadLetterCount = countJsonlLines(deadPath);
-    const unattributedEvents = countUnattributedEvents(meshRoot);
     const outbox = outboxStats(ctxRoot);
     const mqttState = state?.mqttState ?? (running ? "unknown" : "closed");
     const companiesOnline = state?.companiesOnline ?? [];
     const emitMode = state?.emitMode ?? "legacy";
     const subscribed = mqttState === "connected";
-    const deviceDefaultAuthorizationDenials = state?.deviceDefaultAuthorizationDenials ?? 0;
     const oldestSpoolAgeMs = oldestJsonlAgeMs(spoolPath, now());
     const unhealthyReasons = [];
     const online = mqttState === "connected" && companiesOnline.length > 0;
@@ -209,39 +96,11 @@ export function collectDaemonDoctor(deps = {}) {
     if (deadLetterCount > 0) {
         unhealthyReasons.push(`dead-letter count=${deadLetterCount}`);
     }
-    if (heldCount > 0) {
-        unhealthyReasons.push(`held events awaiting company attribution=${heldCount}`);
-    }
-    if (heldWithNoLocalEvidence > 0) {
-        unhealthyReasons.push(`held with no local evidence=${heldWithNoLocalEvidence}`);
-    }
-    if (unattributedEvents.total > 0) {
-        unhealthyReasons.push(`unattributed events=${unattributedEvents.total} ` +
-            `(spool=${unattributedEvents.spool} held=${unattributedEvents.held} dead-letter=${unattributedEvents.deadLetter})`);
-    }
     const presenceRefusal = state?.presenceRefusal ?? null;
-    const presenceDroppedCompanies = state?.presenceDroppedCompanies ?? [];
-    if (presenceDroppedCompanies.length > 0) {
-        unhealthyReasons.push(`presence unavailable for ${presenceDroppedCompanies.length} companies`);
-    }
     if (presenceRefusal) {
         unhealthyReasons.push(`presence credential refused (${presenceRefusal.code}); next retry ${presenceRefusal.nextRetryAt}`);
     }
-    const platform = deps.platform ?? process.platform;
-    const legacyListener = deps.legacyListenerInstalled ??
-        (platform === "darwin" || platform === "linux"
-            ? legacyListenInstalled({ home, platform })
-            : false);
-    if (legacyListener) {
-        unhealthyReasons.push(LEGACY_LISTENER_DOCTOR_LINE);
-    }
     const auth = describeCognitoTokenSource({ home, env });
-    const whoamiTokens = readPersonTokenFile(home, env);
-    const daemonTokens = auth.tokenSource === "machine"
-        ? loadMachineCachedTokens(home, env)
-        : whoamiTokens;
-    const whoamiSubject = formatCognitoSubject(whoamiTokens);
-    const daemonSubject = formatCognitoSubject(daemonTokens);
     const emitState = readEmitState(meshRoot);
     const emitRetry = emitRetryDepth(meshRoot);
     if (emitRetry > 0) {
@@ -254,17 +113,8 @@ export function collectDaemonDoctor(deps = {}) {
         companiesOnline,
         spoolDepth,
         heldCount,
-        heldWithNoLocalEvidence,
-        attributedByDeviceDefault,
         deadLetterCount,
-        unattributedEvents,
         outboxDepth: outbox.depth,
-        ...(outbox.quarantined > 0 && outboxQuarantineStatusEnabled()
-            ? {
-                outboxQuarantined: outbox.quarantined,
-                outboxLastQuarantineReason: outbox.lastQuarantineReason ?? undefined,
-            }
-            : {}),
         lastFlushAt: state?.lastFlushAt,
         lastFlushResult: state?.lastFlushResult,
         unhealthy: unhealthyReasons.length > 0,
@@ -272,10 +122,7 @@ export function collectDaemonDoctor(deps = {}) {
         oldestSpoolAgeMs,
         tokenSource: auth.tokenSource,
         actorKind: auth.actorKind,
-        whoamiSubject,
-        daemonSubject,
         presenceRefusal,
-        presenceDroppedCompanies,
         emitMode,
         subscribed,
         emitRetryDepth: emitRetry,
@@ -288,11 +135,6 @@ export function collectDaemonDoctor(deps = {}) {
                 error: emitState.lastError,
             }
             : undefined,
-        deviceDefaultAuthorizationDenials,
-        legacyListenerInstalled: legacyListener,
-        cliMismatchLine,
-        hqOnPath,
-        multipleHqOnPath: hqOnPath.length > 1,
     };
 }
 export function formatDaemonDoctor(report) {
@@ -301,22 +143,14 @@ export function formatDaemonDoctor(report) {
         `mode: ${report.emitMode}`,
         `mqtt: ${report.mqttState}`,
         `subscription: ${report.subscribed ? "connected" : "disconnected"}`,
-        ...(report.legacyListenerInstalled ? [LEGACY_LISTENER_DOCTOR_LINE] : []),
         `companies online: ${report.companiesOnline.length ? report.companiesOnline.join(", ") : "(none)"}`,
     ];
     if (report.emitMode === "legacy") {
         // Legacy emit path only: the spool/held/outbox queues do not exist in
         // receive-only (direct) mode.
-        lines.push(`spool depth: ${report.spoolDepth}`, `held: ${report.heldCount}${report.heldCount > 0 ? " (needs_company; not sent as NONE)" : ""}`, `held with no local evidence: ${report.heldWithNoLocalEvidence}`, `outbox depth: ${report.outboxDepth}`);
-    }
-    if (report.outboxQuarantined !== undefined) {
-        lines.push(`outbox quarantined: ${report.outboxQuarantined} (last reason=${report.outboxLastQuarantineReason ?? "unknown"})`);
+        lines.push(`spool depth: ${report.spoolDepth}`, `held: ${report.heldCount}`, `outbox depth: ${report.outboxDepth}`);
     }
-    if (report.emitMode !== "legacy" && report.heldCount > 0) {
-        lines.push(`held: ${report.heldCount} (needs_company; not sent as NONE)`);
-    }
-    lines.push(`attributed by device default: ${report.attributedByDeviceDefault}`, `device-default authorization denials: ${report.deviceDefaultAuthorizationDenials}`, `dead-letter: ${report.deadLetterCount}`, `unattributed events: ${report.unattributedEvents.total} ` +
-        `(spool=${report.unattributedEvents.spool} held=${report.unattributedEvents.held} dead-letter=${report.unattributedEvents.deadLetter})`, `token source: ${report.tokenSource}`, `actor kind: ${report.actorKind}`, `identity whoami: ${report.whoamiSubject}`, `identity daemon: ${report.daemonSubject}`);
+    lines.push(`dead-letter: ${report.deadLetterCount}`, `token source: ${report.tokenSource}`, `actor kind: ${report.actorKind}`);
     if (report.emitMode === "legacy") {
         lines.push(`last flush: ${report.lastFlushAt ?? "(never)"}${report.lastFlushResult
             ? ` ok=${report.lastFlushResult.ok} posted=${report.lastFlushResult.posted}`
@@ -330,13 +164,6 @@ export function formatDaemonDoctor(report) {
     if (report.presenceRefusal) {
         lines.push(`presence refusal: ${report.presenceRefusal.code} (HTTP ${report.presenceRefusal.status}); next retry at ${report.presenceRefusal.nextRetryAt}`);
     }
-    if (report.presenceDroppedCompanies.length > 0) {
-        lines.push(`presence not published for ${report.presenceDroppedCompanies.length} companies: ` +
-            report.presenceDroppedCompanies
-                .map((company) => formatDroppedPresenceCompany(company))
-                .join("; ") +
-            `; presence credential holds ${report.companiesOnline.length} companies`);
-    }
     if (report.unhealthy) {
         lines.push(`health: UNHEALTHY`);
         for (const reason of report.unhealthyReasons) {
@@ -346,7 +173,6 @@ export function formatDaemonDoctor(report) {
     else {
         lines.push(`health: ok`);
     }
-    lines.push(...formatCliIdentityLines(report));
     return lines;
 }
 //# sourceMappingURL=doctor.js.map

package/dist/lib/mesh/live/daemon/index.d.ts

@@ -1,27 +1,24 @@
-export { DAEMON_DIRNAME, DAEMON_LOG_MAX_BYTES, DAEMON_LOG_NAME, DAEMON_PID_NAME, DAEMON_STATE_NAME, LAUNCHD_LABEL, SYSTEMD_UNIT_NAME, WINDOWS_TASK_NAME, daemonDir, daemonLogPath, daemonPidPath, daemonStatePath, sessionBoardPath, } from "./paths.js";
+export { DAEMON_DIRNAME, DAEMON_LOG_MAX_BYTES, DAEMON_LOG_NAME, DAEMON_PID_NAME, DAEMON_STATE_NAME, LAUNCHD_LABEL, SYSTEMD_UNIT_NAME, daemonDir, daemonLogPath, daemonPidPath, daemonStatePath, sessionBoardPath, } from "./paths.js";
 export { acquirePidLock, defaultPidLockDeps, parsePidLock, pidLockStatus, readPidLock, releasePidLock, resolveDaemonDir, } from "./pid-lock.js";
 export type { PidLockDeps, PidLockRecord, PidLockResult } from "./pid-lock.js";
-export { MAX_RETRY_DELAY_MS, MAX_TIMER_DELAY_MS, MQTT_KEEPALIVE_SECONDS, CredentialRenewalManager, CredentialVendError, classifyCredentialVendFailure, clampRetryDelayMs, createContract3Fetcher, defaultRefusedRetryMs, isCredentialVendRefused, normalizeContract3Bundle, parseRetryAfterMs, realTimerHost, refusedRetryDelayMs, renewalDelayMs, scheduleBoundedTimeout, } from "./credentials.js";
-export type { BoundedTimeoutHandle, Contract3Bundle, CredentialRenewalErrorInfo, CredentialVendFailureKind, CredentialVendPostResult, CredentialsFetcher, TimerHost, } from "./credentials.js";
+export { CREDENTIAL_RENEWAL_FRACTION, DEFAULT_REFUSED_RETRY_MS, MAX_RETRY_DELAY_MS, MAX_TIMER_DELAY_MS, MQTT_KEEPALIVE_SECONDS, REALTIME_CREDENTIALS_PATH, REFUSED_RETRY_ENV, CredentialRenewalManager, CredentialVendError, classifyCredentialVendFailure, clampRetryDelayMs, createContract3Fetcher, defaultRefusedRetryMs, extractVendErrorCode, isCredentialVendRefused, normalizeContract3Bundle, parseRetryAfterMs, realTimerHost, refusedRetryDelayMs, renewalDelayMs, scheduleBoundedTimeout, } from "./credentials.js";
+export type { BoundedTimeoutHandle, Contract3Bundle, CredentialRenewalErrorInfo, CredentialVendFailureKind, CredentialVendPostResult, CredentialsFetcher, PresenceCompany, TimerHost, } from "./credentials.js";
 export { amzDateOf, hex, presignIotWssUrl, rfc3986Encode } from "./presign.js";
 export type { IotCredentials } from "./presign.js";
 export { CLOSE_LOG_ALWAYS_COUNT, CLOSE_LOG_INTERVAL_MS, CONNECT_STABLE_GRACE_MS, PresenceClient, backoffDelayMs, buildPresencePayload, defaultMqttConnect, isOwnPresenceTopic, } from "./presence.js";
 export type { MeshMqttClientLike, MqttConnectFn, MqttConnectionState, PresenceClientOptions, PresencePayload, PresenceRefusal, } from "./presence.js";
 export { defaultDaemonState, patchDaemonState, readDaemonState, writeDaemonState, } from "./state.js";
-export type { DaemonStateFile } from "./state.js";
+export type { DaemonStateFile, PresenceRefusalState } from "./state.js";
 export { appendDaemonLog, daemonLogLine, ensureDaemonLog, resolveDaemonAssetDir, rotateDaemonLogIfNeeded, } from "./log.js";
 export { BOARD_REFRESH_INTERVAL_MS, createVaultBoardReader, formatBoardMarkdown, refreshBoundSessionBoards, writeBoardMarkdown, } from "./board-refresh.js";
 export type { BoardReader, BoardRefreshDeps, BoardStorySnapshot } from "./board-refresh.js";
-export { buildInstallPaths, daemonServiceIsLoaded, daemonServiceStatus, detectPlatform, installDaemonIfStale, installDaemonService, isNewerCliVersion, readAssetTemplate, restartDaemonServiceIfInstalled, renderLaunchdPlist, renderSystemdSystemUnit, renderSystemdUserUnit, resolveAbsoluteNodeBinary, resolveHqBinary, resolveNodeBinary, resolveRunningCliEntry, parseSchtasksLastResult, parseWindowsTaskHqRoot, readRecordedWindowsHqRoot, schtasksLastResultFailed, uninstallDaemonService, windowsLaunchMode, windowsLogonNotice, } from "./install.js";
-export type { DaemonInstallPlatform, InstallIfStaleResult, InstallPaths, InstallResult, } from "./install.js";
-export { daemonConfigPath, findAncestorHqRoot, isInstallableHqRoot, readDaemonConfig, registerTrustedHqRoot, resolveInstallHqRoot, verifyHqRoot, } from "./config.js";
-export type { InstallHqRootResolution } from "./config.js";
-export type { DaemonConfig } from "./config.js";
-export { UNHEALTHY_SPOOL_AGE_MS, collectDaemonDoctor, formatCliIdentityLines, formatCliMismatchLine, formatDaemonDoctor, listHqBinariesOnPath, } from "./doctor.js";
+export { buildInstallPaths, daemonServiceStatus, detectPlatform, installDaemonService, readAssetTemplate, renderLaunchdPlist, renderSystemdSystemUnit, renderSystemdUserUnit, resolveHqBinary, resolveNodeBinary, uninstallDaemonService, } from "./install.js";
+export type { DaemonInstallPlatform, InstallPaths, InstallResult, } from "./install.js";
+export { UNHEALTHY_SPOOL_AGE_MS, collectDaemonDoctor, formatDaemonDoctor, } from "./doctor.js";
 export type { DaemonDoctorDeps, DaemonDoctorReport } from "./doctor.js";
 export { scopeBundleToAgentIdentity, } from "./credentials.js";
-export { FLUSH_INTERVAL_MS, DAEMON_VERSION_DRIFT_EXIT_CODE, SPOOL_DEBOUNCE_MS, runMeshDaemon, } from "./run.js";
+export { FLUSH_INTERVAL_MS, SPOOL_DEBOUNCE_MS, runMeshDaemon, } from "./run.js";
 export type { DaemonHandle, DaemonRunDeps } from "./run.js";
-export { TRANSCRIPT_EVENT_SOURCE, TRANSCRIPT_HOOK_COVER_MS, TRANSCRIPT_MARKER, TRANSCRIPT_SESSION_END_MS, TRANSCRIPT_HOOK_QUIET_ADOPT_MS, TRANSCRIPT_TURN_QUIET_MS, TRANSCRIPT_WATCH_BACKOFF_DURATION_MS, TRANSCRIPT_WATCH_BACKOFF_ENTRIES, TRANSCRIPT_WATCH_INTERVAL_MAX_MS, TRANSCRIPT_WATCH_INTERVAL_MS, TRANSCRIPT_WATCH_REVALIDATE_MS, TranscriptWatcher, createTranscriptDiscoverCache, decodeClaudeProjectDirName, defaultTranscriptFs, discoverTranscripts, discoverTranscriptsWithMeta, isTranscriptHookCovered, nextTranscriptWatchIntervalMs, noteHookSessionsFromSpoolFile, resolveTranscriptRegistration, sessionIdFromClaudeTranscriptPath, sessionIdFromCodexTranscriptPath, sortDiscoveries, } from "./transcript-watch.js";
-export type { DiscoveredTranscript, DiscoverTranscriptsResult, TranscriptDiscoverCache, TranscriptFs, TranscriptWatchDeps, TranscriptWatchTickResult, } from "./transcript-watch.js";
+export { TRANSCRIPT_ADAPTER_VERSION, TRANSCRIPT_EVENT_SOURCE, TRANSCRIPT_FRESH_MS, TRANSCRIPT_HOOK_COVER_MS, TRANSCRIPT_MARKER, TRANSCRIPT_SESSION_END_MS, TRANSCRIPT_TURN_QUIET_MS, TRANSCRIPT_WATCH_BACKOFF_DURATION_MS, TRANSCRIPT_WATCH_BACKOFF_ENTRIES, TRANSCRIPT_WATCH_ENTRY_CAP, TRANSCRIPT_WATCH_INTERVAL_MAX_MS, TRANSCRIPT_WATCH_INTERVAL_MS, TRANSCRIPT_WATCH_REVALIDATE_MS, TranscriptWatcher, createTranscriptDiscoverCache, decodeClaudeProjectDirName, defaultTranscriptFs, discoverTranscripts, discoverTranscriptsWithMeta, isTranscriptHookCovered, nextTranscriptWatchIntervalMs, noteHookSessionsFromSpoolFile, resolveTranscriptRegistration, sessionIdFromClaudeTranscriptPath, sessionIdFromCodexTranscriptPath, sortDiscoveries, } from "./transcript-watch.js";
+export type { DiscoveredTranscript, DiscoverScanMeta, DiscoverTranscriptsResult, TranscriptDiscoverCache, TranscriptFs, TranscriptKind, TranscriptWatchDeps, TranscriptWatchTickResult, } from "./transcript-watch.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/mesh/live/daemon/index.js

@@ -1,15 +1,14 @@
-export { DAEMON_DIRNAME, DAEMON_LOG_MAX_BYTES, DAEMON_LOG_NAME, DAEMON_PID_NAME, DAEMON_STATE_NAME, LAUNCHD_LABEL, SYSTEMD_UNIT_NAME, WINDOWS_TASK_NAME, daemonDir, daemonLogPath, daemonPidPath, daemonStatePath, sessionBoardPath, } from "./paths.js";
+export { DAEMON_DIRNAME, DAEMON_LOG_MAX_BYTES, DAEMON_LOG_NAME, DAEMON_PID_NAME, DAEMON_STATE_NAME, LAUNCHD_LABEL, SYSTEMD_UNIT_NAME, daemonDir, daemonLogPath, daemonPidPath, daemonStatePath, sessionBoardPath, } from "./paths.js";
 export { acquirePidLock, defaultPidLockDeps, parsePidLock, pidLockStatus, readPidLock, releasePidLock, resolveDaemonDir, } from "./pid-lock.js";
-export { MAX_RETRY_DELAY_MS, MAX_TIMER_DELAY_MS, MQTT_KEEPALIVE_SECONDS, CredentialRenewalManager, CredentialVendError, classifyCredentialVendFailure, clampRetryDelayMs, createContract3Fetcher, defaultRefusedRetryMs, isCredentialVendRefused, normalizeContract3Bundle, parseRetryAfterMs, realTimerHost, refusedRetryDelayMs, renewalDelayMs, scheduleBoundedTimeout, } from "./credentials.js";
+export { CREDENTIAL_RENEWAL_FRACTION, DEFAULT_REFUSED_RETRY_MS, MAX_RETRY_DELAY_MS, MAX_TIMER_DELAY_MS, MQTT_KEEPALIVE_SECONDS, REALTIME_CREDENTIALS_PATH, REFUSED_RETRY_ENV, CredentialRenewalManager, CredentialVendError, classifyCredentialVendFailure, clampRetryDelayMs, createContract3Fetcher, defaultRefusedRetryMs, extractVendErrorCode, isCredentialVendRefused, normalizeContract3Bundle, parseRetryAfterMs, realTimerHost, refusedRetryDelayMs, renewalDelayMs, scheduleBoundedTimeout, } from "./credentials.js";
 export { amzDateOf, hex, presignIotWssUrl, rfc3986Encode } from "./presign.js";
 export { CLOSE_LOG_ALWAYS_COUNT, CLOSE_LOG_INTERVAL_MS, CONNECT_STABLE_GRACE_MS, PresenceClient, backoffDelayMs, buildPresencePayload, defaultMqttConnect, isOwnPresenceTopic, } from "./presence.js";
 export { defaultDaemonState, patchDaemonState, readDaemonState, writeDaemonState, } from "./state.js";
 export { appendDaemonLog, daemonLogLine, ensureDaemonLog, resolveDaemonAssetDir, rotateDaemonLogIfNeeded, } from "./log.js";
 export { BOARD_REFRESH_INTERVAL_MS, createVaultBoardReader, formatBoardMarkdown, refreshBoundSessionBoards, writeBoardMarkdown, } from "./board-refresh.js";
-export { buildInstallPaths, daemonServiceIsLoaded, daemonServiceStatus, detectPlatform, installDaemonIfStale, installDaemonService, isNewerCliVersion, readAssetTemplate, restartDaemonServiceIfInstalled, renderLaunchdPlist, renderSystemdSystemUnit, renderSystemdUserUnit, resolveAbsoluteNodeBinary, resolveHqBinary, resolveNodeBinary, resolveRunningCliEntry, parseSchtasksLastResult, parseWindowsTaskHqRoot, readRecordedWindowsHqRoot, schtasksLastResultFailed, uninstallDaemonService, windowsLaunchMode, windowsLogonNotice, } from "./install.js";
-export { daemonConfigPath, findAncestorHqRoot, isInstallableHqRoot, readDaemonConfig, registerTrustedHqRoot, resolveInstallHqRoot, verifyHqRoot, } from "./config.js";
-export { UNHEALTHY_SPOOL_AGE_MS, collectDaemonDoctor, formatCliIdentityLines, formatCliMismatchLine, formatDaemonDoctor, listHqBinariesOnPath, } from "./doctor.js";
+export { buildInstallPaths, daemonServiceStatus, detectPlatform, installDaemonService, readAssetTemplate, renderLaunchdPlist, renderSystemdSystemUnit, renderSystemdUserUnit, resolveHqBinary, resolveNodeBinary, uninstallDaemonService, } from "./install.js";
+export { UNHEALTHY_SPOOL_AGE_MS, collectDaemonDoctor, formatDaemonDoctor, } from "./doctor.js";
 export { scopeBundleToAgentIdentity, } from "./credentials.js";
-export { FLUSH_INTERVAL_MS, DAEMON_VERSION_DRIFT_EXIT_CODE, SPOOL_DEBOUNCE_MS, runMeshDaemon, } from "./run.js";
-export { TRANSCRIPT_EVENT_SOURCE, TRANSCRIPT_HOOK_COVER_MS, TRANSCRIPT_MARKER, TRANSCRIPT_SESSION_END_MS, TRANSCRIPT_HOOK_QUIET_ADOPT_MS, TRANSCRIPT_TURN_QUIET_MS, TRANSCRIPT_WATCH_BACKOFF_DURATION_MS, TRANSCRIPT_WATCH_BACKOFF_ENTRIES, TRANSCRIPT_WATCH_INTERVAL_MAX_MS, TRANSCRIPT_WATCH_INTERVAL_MS, TRANSCRIPT_WATCH_REVALIDATE_MS, TranscriptWatcher, createTranscriptDiscoverCache, decodeClaudeProjectDirName, defaultTranscriptFs, discoverTranscripts, discoverTranscriptsWithMeta, isTranscriptHookCovered, nextTranscriptWatchIntervalMs, noteHookSessionsFromSpoolFile, resolveTranscriptRegistration, sessionIdFromClaudeTranscriptPath, sessionIdFromCodexTranscriptPath, sortDiscoveries, } from "./transcript-watch.js";
+export { FLUSH_INTERVAL_MS, SPOOL_DEBOUNCE_MS, runMeshDaemon, } from "./run.js";
+export { TRANSCRIPT_ADAPTER_VERSION, TRANSCRIPT_EVENT_SOURCE, TRANSCRIPT_FRESH_MS, TRANSCRIPT_HOOK_COVER_MS, TRANSCRIPT_MARKER, TRANSCRIPT_SESSION_END_MS, TRANSCRIPT_TURN_QUIET_MS, TRANSCRIPT_WATCH_BACKOFF_DURATION_MS, TRANSCRIPT_WATCH_BACKOFF_ENTRIES, TRANSCRIPT_WATCH_ENTRY_CAP, TRANSCRIPT_WATCH_INTERVAL_MAX_MS, TRANSCRIPT_WATCH_INTERVAL_MS, TRANSCRIPT_WATCH_REVALIDATE_MS, TranscriptWatcher, createTranscriptDiscoverCache, decodeClaudeProjectDirName, defaultTranscriptFs, discoverTranscripts, discoverTranscriptsWithMeta, isTranscriptHookCovered, nextTranscriptWatchIntervalMs, noteHookSessionsFromSpoolFile, resolveTranscriptRegistration, sessionIdFromClaudeTranscriptPath, sessionIdFromCodexTranscriptPath, sortDiscoveries, } from "./transcript-watch.js";
 //# sourceMappingURL=index.js.map