@indigoai-us/hq-cli 5.312.2-beta.0 → 5.314.0

package/dist/lib/mesh/live/daemon/paths.d.ts

@@ -9,8 +9,6 @@ export declare const DAEMON_LOG_NAME = "log";
 export declare const DAEMON_LOG_MAX_BYTES: number;
 export declare const LAUNCHD_LABEL = "ai.getindigo.hq-mesh-daemon";
 export declare const SYSTEMD_UNIT_NAME = "hq-mesh-daemon.service";
-/** Windows per-user Scheduled Task name (same label as the LaunchAgent). */
-export declare const WINDOWS_TASK_NAME = "ai.getindigo.hq-mesh-daemon";
 export declare function daemonDir(meshRoot?: string, home?: string, env?: NodeJS.ProcessEnv): string;
 export declare function daemonPidPath(dir?: string): string;
 export declare function daemonStatePath(dir?: string): string;

package/dist/lib/mesh/live/daemon/paths.js

@@ -12,8 +12,6 @@ export const DAEMON_LOG_NAME = "log";
 export const DAEMON_LOG_MAX_BYTES = 5 * 1024 * 1024;
 export const LAUNCHD_LABEL = "ai.getindigo.hq-mesh-daemon";
 export const SYSTEMD_UNIT_NAME = "hq-mesh-daemon.service";
-/** Windows per-user Scheduled Task name (same label as the LaunchAgent). */
-export const WINDOWS_TASK_NAME = "ai.getindigo.hq-mesh-daemon";
 export function daemonDir(meshRoot, home = os.homedir(), env = process.env) {
     return path.join(meshRoot ?? workMeshRoot(home, env), DAEMON_DIRNAME);
 }

package/dist/lib/mesh/live/daemon/presence.d.ts

@@ -12,7 +12,6 @@
  * - Server credential refusals use a long retry (default 10m ±20%)
  */
 import { type IClientOptions, type MqttClient } from "mqtt";
-import type { MeshMqttEventClient } from "./mqtt-events.js";
 import { type Contract3Bundle, type CredentialsFetcher, type TimerHost } from "./credentials.js";
 export type MqttConnectionState = "idle" | "connecting" | "connected" | "reconnecting" | "closed";
 /**
@@ -35,11 +34,7 @@ export declare const CONNECT_STABLE_GRACE_MS = 5000;
  * waits at least this long regardless of the backoff/grace-reset state.
  */
 export declare const RECONNECT_MIN_DELAY_MS = 1000;
-/**
- * Close/reconnect info is one line per transition into reconnecting.
- * Repeated `close` events while already reconnecting do not log again.
- * Kept so older imports still resolve; they no longer gate the log.
- */
+/** Always emit the first N close info lines, then at most one per interval. */
 export declare const CLOSE_LOG_ALWAYS_COUNT = 3;
 export declare const CLOSE_LOG_INTERVAL_MS = 60000;
 export interface PresencePayload {
@@ -50,7 +45,8 @@ export interface PresencePayload {
     at: string;
 }
 /** Structural mqtt client surface used by PresenceClient (test seam). */
-export interface MeshMqttClientLike extends MeshMqttEventClient {
+export interface MeshMqttClientLike {
+    on(event: string, handler: (...args: any[]) => void): unknown;
     publish(topic: string, message: string | Buffer, opts: {
         qos: 0 | 1 | 2;
         retain?: boolean;
@@ -84,13 +80,6 @@ export interface PresenceClientOptions {
     onRefusal?: (refusal: PresenceRefusal | null) => void;
     now?: () => Date;
     env?: NodeJS.ProcessEnv;
-    /**
-     * Companies the daemon is working in. When the set changes, presence
-     * re-vends instead of waiting for credential expiry (at most once a minute).
-     * Undefined means a read failed — do not re-vend.
-     */
-    readPreferredCompanyUids?: () => string[] | undefined;
-    preferredRevendMinMs?: number;
 }
 /**
  * Full-jitter capped exponential backoff (1s base → 60s cap by default),
@@ -122,17 +111,14 @@ export declare class PresenceClient {
     private reconnectHandle;
     private stableHandle;
     private connectedAtMs;
-    /** One close log per transition into reconnecting, until the next connect. */
-    private reconnectLogged;
+    private closeLogCount;
+    private lastCloseLogAtMs;
     private stopped;
     private generation;
     private publishedTopics;
     /** Last refusal code we logged via onError (episode dedupe). */
     private loggedRefusalKey;
     private refusal;
-    private preferredHandle;
-    private preferredSnapshot;
-    private lastPreferredVendMs;
     private readonly mqttConnect;
     private readonly timers;
     private readonly random;
@@ -147,11 +133,6 @@ export declare class PresenceClient {
     getRefusal(): PresenceRefusal | null;
     /** Topics this client has published to (for doctor / tests). */
     getPublishedTopics(): readonly string[];
-    private preferredMinMs;
-    private notePreferredVend;
-    private clearPreferredWatch;
-    private armPreferredWatch;
-    private maybeRevendPreferred;
     private setState;
     start(): Promise<void>;
     /**

package/dist/lib/mesh/live/daemon/presence.js

@@ -12,7 +12,7 @@
  * - Server credential refusals use a long retry (default 10m ±20%)
  */
 import mqtt from "mqtt";
-import { CredentialVendError, CredentialRenewalManager, MQTT_KEEPALIVE_SECONDS, PREFERRED_REVEND_MIN_MS, clampRetryDelayMs, defaultRefusedRetryMs, realTimerHost, refusedRetryDelayMs, scheduleBoundedTimeout, shouldRevendPreferredCompanies, } from "./credentials.js";
+import { CredentialVendError, CredentialRenewalManager, MQTT_KEEPALIVE_SECONDS, clampRetryDelayMs, defaultRefusedRetryMs, realTimerHost, refusedRetryDelayMs, scheduleBoundedTimeout, } from "./credentials.js";
 import { presignIotWssUrl } from "./presign.js";
 /**
  * A connection that drops before this grace window after `connect` is treated
@@ -34,11 +34,7 @@ export const CONNECT_STABLE_GRACE_MS = 5_000;
  * waits at least this long regardless of the backoff/grace-reset state.
  */
 export const RECONNECT_MIN_DELAY_MS = 1_000;
-/**
- * Close/reconnect info is one line per transition into reconnecting.
- * Repeated `close` events while already reconnecting do not log again.
- * Kept so older imports still resolve; they no longer gate the log.
- */
+/** Always emit the first N close info lines, then at most one per interval. */
 export const CLOSE_LOG_ALWAYS_COUNT = 3;
 export const CLOSE_LOG_INTERVAL_MS = 60_000;
 /**
@@ -85,17 +81,14 @@ export class PresenceClient {
     reconnectHandle = null;
     stableHandle = null;
     connectedAtMs = null;
-    /** One close log per transition into reconnecting, until the next connect. */
-    reconnectLogged = false;
+    closeLogCount = 0;
+    lastCloseLogAtMs = Number.NEGATIVE_INFINITY;
     stopped = false;
     generation = 0;
     publishedTopics = [];
     /** Last refusal code we logged via onError (episode dedupe). */
     loggedRefusalKey = null;
     refusal = null;
-    preferredHandle = null;
-    preferredSnapshot = [];
-    lastPreferredVendMs = 0;
     mqttConnect;
     timers;
     random;
@@ -131,67 +124,6 @@ export class PresenceClient {
     getPublishedTopics() {
         return this.publishedTopics;
     }
-    preferredMinMs() {
-        return this.options.preferredRevendMinMs ?? PREFERRED_REVEND_MIN_MS;
-    }
-    notePreferredVend() {
-        const read = this.options.readPreferredCompanyUids;
-        if (!read)
-            return;
-        let next;
-        try {
-            next = read();
-        }
-        catch {
-            return;
-        }
-        if (!next)
-            return;
-        this.preferredSnapshot = next;
-        this.lastPreferredVendMs = this.timers.now();
-    }
-    clearPreferredWatch() {
-        if (this.preferredHandle) {
-            this.preferredHandle.clear();
-            this.preferredHandle = null;
-        }
-    }
-    armPreferredWatch() {
-        if (!this.options.readPreferredCompanyUids || this.stopped)
-            return;
-        this.clearPreferredWatch();
-        this.preferredHandle = scheduleBoundedTimeout(this.timers, () => {
-            this.preferredHandle = null;
-            if (this.stopped)
-                return;
-            this.maybeRevendPreferred();
-            this.armPreferredWatch();
-        }, this.preferredMinMs());
-    }
-    maybeRevendPreferred() {
-        const read = this.options.readPreferredCompanyUids;
-        if (!read || this.stopped || this.refusal)
-            return;
-        let next;
-        try {
-            next = read();
-        }
-        catch {
-            return;
-        }
-        if (!shouldRevendPreferredCompanies({
-            previous: this.preferredSnapshot,
-            next,
-            lastVendMs: this.lastPreferredVendMs,
-            nowMs: this.timers.now(),
-            minIntervalMs: this.preferredMinMs(),
-        })) {
-            return;
-        }
-        this.lastPreferredVendMs = this.timers.now();
-        this.preferredSnapshot = next;
-        this.renewal.renewNow();
-    }
     setState(state) {
         if (this.state === state)
             return;
@@ -213,7 +145,6 @@ export class PresenceClient {
         this.stopped = true;
         this.generation += 1;
         this.renewal.stop();
-        this.clearPreferredWatch();
         this.clearReconnect();
         this.clearStableTimer();
         this.connectedAtMs = null;
@@ -255,7 +186,6 @@ export class PresenceClient {
     }
     async onCredentialsRenewed(bundle) {
         this.bundle = bundle;
-        this.notePreferredVend();
         // Successful vend ends a refusal episode (renewal skips connectOnce's vend path).
         this.clearRefusal(true);
         if (this.stopped)
@@ -315,8 +245,6 @@ export class PresenceClient {
                 // Successful vend ends a refusal episode (even before MQTT connects).
                 this.clearRefusal(true);
                 this.renewal.schedule(this.bundle);
-                this.notePreferredVend();
-                this.armPreferredWatch();
             }
             const bundle = this.bundle;
             const url = presignIotWssUrl(bundle.credentials, bundle.iotEndpoint, bundle.region, this.now());
@@ -353,7 +281,6 @@ export class PresenceClient {
                     this.attempt = 0;
                     this.lastBackoffMs = 0;
                 }, CONNECT_STABLE_GRACE_MS);
-                this.reconnectLogged = false;
                 this.setState("connected");
                 void this.publishAll("online").then(() => {
                     this.options.onOnline?.(bundle.companies.map((c) => c.companyUid));
@@ -456,9 +383,13 @@ export class PresenceClient {
         return delay;
     }
     maybeLogClose(elapsedMs, delayMs) {
-        if (this.reconnectLogged)
+        const now = this.timers.now();
+        const withinAlways = this.closeLogCount < CLOSE_LOG_ALWAYS_COUNT;
+        const intervalElapsed = now - this.lastCloseLogAtMs >= CLOSE_LOG_INTERVAL_MS;
+        if (!withinAlways && !intervalElapsed)
             return;
-        this.reconnectLogged = true;
+        this.closeLogCount += 1;
+        this.lastCloseLogAtMs = now;
         this.options.onInfo?.(`presence mqtt closed after ${elapsedMs}ms; reconnect in ${delayMs}ms`);
     }
     clearReconnect() {

package/dist/lib/mesh/live/daemon/run.d.ts

@@ -8,24 +8,14 @@
  * - MQTT presence (contract-3)
  * - SIGTERM/SIGINT: flush once more, MQTT DISCONNECT (server derives offline), exit
  */
-import { type DeliverFn } from "../../../work-context/outbox.js";
-import { type SessionEventsPoster } from "../session-events-client.js";
 import { type FlushSummary } from "../flush.js";
-import { type BackfillHeldResult } from "../backfill-held.js";
-import { type BoardReader } from "./board-refresh.js";
 import { type CredentialsFetcher, type TimerHost } from "./credentials.js";
 import { type PidLockDeps } from "./pid-lock.js";
 import { PresenceClient, type MqttConnectFn } from "./presence.js";
 import { TranscriptWatcher, type TranscriptFs } from "./transcript-watch.js";
 import { type MeshEmitMode } from "./mode.js";
-import { type CommandRunner, type LegacyListenPlatform } from "./legacy-listen.js";
 export declare const SPOOL_DEBOUNCE_MS = 2000;
 export declare const FLUSH_INTERVAL_MS = 10000;
-/** Keep startup recovery bounded: the next daemon start continues the backlog. */
-export declare const HELD_BACKFILL_STARTUP_BATCH_SIZE = 100;
-export declare const DEVICE_DEFAULT_MEMBERSHIP_TIMEOUT_MS = 2000;
-/** Non-zero exit reserved for CLI version drift so legacy Restart=on-failure units restart. */
-export declare const DAEMON_VERSION_DRIFT_EXIT_CODE = 75;
 /**
  * Only producer appends to spool.jsonl should wake the watcher. Every other
  * file in the work-mesh root (held.jsonl, spool.<ts>.claimed, held.<ts>.claimed,
@@ -45,8 +35,8 @@ export interface DaemonRunDeps {
     timers?: TimerHost;
     fetchCredentials?: CredentialsFetcher;
     mqttConnect?: MqttConnectFn;
-    /** Injected flush (tests). Receives the daemon shutdown signal. */
-    flush?: (signal?: AbortSignal) => Promise<FlushSummary>;
+    /** Injected flush (tests). */
+    flush?: () => Promise<FlushSummary>;
     /** Injected outbox replay (tests). */
     replayOutbox?: () => Promise<{
         delivered: number;
@@ -54,10 +44,6 @@ export interface DaemonRunDeps {
         quarantined: number;
         skipped?: number;
     }>;
-    /** Injected held-session recovery (tests). Runs once before the startup flush. */
-    backfillHeld?: () => Promise<BackfillHeldResult>;
-    /** Maximum distinct held sessions reconciled during one daemon startup. */
-    heldBackfillBatchSize?: number;
     /** Injected board refresh (tests). */
     refreshBoards?: () => Promise<{
         refreshed: number;
@@ -84,43 +70,11 @@ export interface DaemonRunDeps {
     exit?: (code: number) => void;
     /** Token provider (tests). */
     getToken?: () => Promise<string>;
-    /** Low-level tenant I/O seams used by authorization regression tests. */
-    poster?: SessionEventsPoster;
-    deliver?: DeliverFn;
-    readBoard?: BoardReader;
-    resolveMembership?: (token: string, slug: string, signal?: AbortSignal) => Promise<{
-        companyUid: string;
-    } | null>;
-    /**
-     * Machine credential (fleet box or local bot). A refused or empty membership
-     * probe defers; it does not clear the company. Defaults to isMachineIdentity().
-     */
-    machineIdentity?: boolean;
-    /** Test seam immediately before a device-default revocation's guarded commit. */
-    beforeDeviceDefaultRevocationCommit?: () => void;
     log?: (dir: string, line: string) => void;
     /** Stop after this many ms (tests). */
     runForMs?: number;
-    /** CLI version loaded by this daemon. Defaults to this package's version. */
-    daemonVersion?: string;
-    /** realpath of the CLI entry. Defaults to process.argv[1]. */
-    cliEntry?: string;
-    /**
-     * Subscribe to the personal work topic and write live-cache.json.
-     * The `hq mesh daemon run` command turns this on. Tests leave it off
-     * unless they inject credentials.
-     */
-    enableWorkCache?: boolean;
-    fetchPersonalCredentials?: import("./credentials.js").PersonalCredentialsFetcher;
-    /** Read the currently installed CLI version behind the launch entrypoint. */
-    readInstalledCliVersion?: () => string | null;
     random?: () => number;
     now?: () => Date;
-    /** Host for legacy listen retirement. Tests inject this; default is process.platform. */
-    legacyListenPlatform?: LegacyListenPlatform;
-    /** Service-manager runner for legacy listen retirement (tests inject). */
-    legacyListenRun?: CommandRunner;
-    windowsLegacyTaskPresent?: boolean;
 }
 export interface DaemonHandle {
     stop: () => Promise<void>;