@indigoai-us/hq-cli 5.313.0 → 5.314.0

package/dist/commands/agent-mcp.js

@@ -1,127 +0,0 @@
-/**
- * `hq agent mcp` — stdio MCP server backed by ~/.hq-agent/machine-creds.json.
- *
- * The console recipes register HQ in the bot's framework as
- *   { command: "hq", args: ["agent", "mcp"], env: { HQ_MACHINE_CREDS_FILE: … } }
- * so this command must never print anything but JSON-RPC on stdout; all
- * diagnostics go to stderr. Tools wrap existing CLI capability (see
- * lib/agent-kit/mcp/tools.ts); subprocess tools re-invoke the same node +
- * hq binary with the machine-identity env pinned.
- */
-import { spawn } from "node:child_process";
-import * as os from "node:os";
-import { CLI_VERSION } from "../cli-version.js";
-import { ensureCognitoToken } from "../utils/cognito-session.js";
-import { getCompanyUid, vaultApiFetch } from "../utils/vault-api.js";
-import { McpServer } from "../lib/agent-kit/mcp/jsonrpc.js";
-import { createVaultObjectDownloader } from "../lib/agent-kit/attachment-download.js";
-import { buildAgentMcpTools } from "../lib/agent-kit/mcp/tools.js";
-import { readKitConfig } from "../lib/agent-kit/kit-config.js";
-import { agentKitPaths } from "../lib/agent-kit/paths.js";
-import { requireExternalCreds } from "./agent-kit.js";
-// Re-exported for callers that imported it from here before it moved.
-export { readBounded } from "../lib/agent-kit/attachment-download.js";
-export const AGENT_MCP_SERVER_NAME = "hq-agent";
-export const AGENT_MCP_INSTRUCTIONS = "You are acting inside HQ as an enrolled external agent. Tools run as that machine identity: " +
-    "hq_whoami (identity), hq_search / hq_files_list / hq_files_read (company vault), " +
-    "hq_attachment_fetch (download a chat attachment — a chat/attachments/… vaultPath on an inbox message — any file type), " +
-    "hq_secrets_list / hq_secrets_exec (secrets by NAME only — values are never returned), " +
-    "hq_inbox_read / hq_dm_send / hq_inbox_done (read pending HQ messages, reply, then mark each handled), hq_work_mesh_status (what the team is doing). " +
-    "Never ask a user for a token or secret value; if a secret is missing, name it and ask an admin to add it.";
-export const HQ_SUBPROCESS_TIMEOUT_MS = 120_000;
-export function defaultRunHq(nodeBinary, hqBinary, env) {
-    return (args) => new Promise((resolve) => {
-        const child = spawn(nodeBinary, [hqBinary, ...args], {
-            env,
-            stdio: ["ignore", "pipe", "pipe"],
-        });
-        let stdout = "";
-        let stderr = "";
-        const timer = setTimeout(() => child.kill("SIGKILL"), HQ_SUBPROCESS_TIMEOUT_MS);
-        child.stdout.on("data", (d) => (stdout += d.toString("utf8")));
-        child.stderr.on("data", (d) => (stderr += d.toString("utf8")));
-        child.on("error", (err) => {
-            clearTimeout(timer);
-            resolve({ code: 127, stdout, stderr: `${stderr}\n${err.message}` });
-        });
-        child.on("close", (code) => {
-            clearTimeout(timer);
-            resolve({ code: code ?? 1, stdout, stderr });
-        });
-    });
-}
-export function defaultMcpClients(creds, credsPath, paths = agentKitPaths(os.homedir(), process.env)) {
-    const env = {
-        ...process.env,
-        HQ_MACHINE_CREDS_FILE: credsPath,
-        HQ_REQUIRE_MACHINE_IDENTITY: "1",
-        HQ_VAULT_API_URL: creds.apiBaseUrl,
-        NO_COLOR: "1",
-    };
-    const getToken = () => ensureCognitoToken({ tokenSource: "machine", interactive: false });
-    let companyUid;
-    return {
-        creds,
-        paths,
-        syncFiles: readKitConfig(agentKitPaths(os.homedir(), process.env), CLI_VERSION).syncFiles,
-        runHq: defaultRunHq(process.execPath, process.argv[1], env),
-        getToken,
-        resolveCompanyUid: async () => {
-            // Pin the enrolled API: DEFAULT_VAULT_API_URL was read from env at module
-            // load, before `hq agent mcp` sets HQ_VAULT_API_URL from the creds.
-            companyUid ??= getCompanyUid(await getToken(), creds.companySlug, creds.apiBaseUrl);
-            try {
-                return await companyUid;
-            }
-            catch (err) {
-                companyUid = undefined;
-                throw err;
-            }
-        },
-        // Same presign path `hq files cat` uses; the vault API's per-key ACL decides.
-        downloadVaultObject: createVaultObjectDownloader({ getToken, baseUrl: creds.apiBaseUrl }),
-        apiJson: async (token, path, init) => {
-            const res = await vaultApiFetch({
-                token,
-                baseUrl: creds.apiBaseUrl,
-                path,
-                method: init?.method,
-                body: init?.body,
-                query: init?.query,
-            });
-            const body = await res.json().catch(() => ({}));
-            return { status: res.status, body };
-        },
-    };
-}
-export function createAgentMcpServer(clients) {
-    return new McpServer({
-        name: AGENT_MCP_SERVER_NAME,
-        version: CLI_VERSION,
-        instructions: AGENT_MCP_INSTRUCTIONS,
-        tools: buildAgentMcpTools(clients),
-    });
-}
-export function registerAgentMcpCommand(agent) {
-    agent
-        .command("mcp")
-        .description("Serve HQ as a stdio MCP server for the bot framework (whoami, search, files, secrets-exec, dm, inbox, work-mesh)")
-        .action(async () => {
-        const paths = agentKitPaths(os.homedir(), process.env);
-        let creds;
-        try {
-            creds = requireExternalCreds(paths);
-        }
-        catch (err) {
-            process.stderr.write(`${err instanceof Error ? err.message : String(err)}\n`);
-            process.exit(1);
-        }
-        process.env.HQ_MACHINE_CREDS_FILE = paths.machineCredsPath;
-        process.env.HQ_REQUIRE_MACHINE_IDENTITY = "1";
-        process.env.HQ_VAULT_API_URL = creds.apiBaseUrl;
-        const server = createAgentMcpServer(defaultMcpClients(creds, paths.machineCredsPath, paths));
-        process.stderr.write(`hq agent mcp: serving as ${creds.entityUid} (${creds.companySlug})\n`);
-        await server.serve(process.stdin, process.stdout);
-    });
-}
-//# sourceMappingURL=agent-mcp.js.map

package/dist/commands/agent-probe.d.ts

@@ -1,77 +0,0 @@
-/**
- * `hq agent probe` — end-to-end check that this host is a working external
- * team member, one line per check, non-zero exit on any failure:
- *
- *   whoami       mint as the machine identity; token names this agent
- *   files        a vault listing answers on demand (or, with --sync-files, a
- *                pull succeeds and the company folder exists)
- *   presence     the agent-authorized inbox route answers 200 and this host's
- *                own presence is live (a fresh last-heartbeat.json)
- *   dm           send a DM to self via POST /v1/notify/dm (accepted) and read the agent inbox (200)
- *                through GET /v1/agents/{uid}/inbox (the agent read surface;
- *                /v1/notify/thread is intentionally closed to agents)
- *   secrets      `GET /secrets/{companyUid}` answers 200
- *
- * Output is the exact shape the console recipes promise: one
- * `PASS  <check>  <detail>` / `FAIL  <check>  <detail>` line per check, then
- * `heartbeat  <age>`.
- *
- * The result is POSTed to /v1/agents/{uid}/probe-result (api-contract v1) so
- * the console can flip the enrollment to "Enrolled". Also reports the age of
- * the kit's last heartbeat.
- */
-import { Command } from "commander";
-import { type InboxFetchResult } from "../lib/agent-kit/run/inbox.js";
-import { type AgentKitPaths } from "../lib/agent-kit/paths.js";
-import type { ExternalMachineCreds } from "../lib/agent-kit/creds.js";
-export interface ProbeCheck {
-    name: string;
-    ok: boolean;
-    detail: string;
-}
-export interface ProbeResult {
-    passed: boolean;
-    checks: ProbeCheck[];
-    at: string;
-    /** Seconds since the kit's last successful heartbeat, or null if never. */
-    heartbeatAgeSeconds: number | null;
-}
-/** A heartbeat older than this does not count as live presence (3 missed 60 s beats). */
-export declare const PRESENCE_FRESH_SECONDS = 180;
-export interface ProbeDeps {
-    paths: AgentKitPaths;
-    creds: ExternalMachineCreds;
-    hqRoot: string;
-    getToken: () => Promise<string>;
-    resolveCompanyUid: (token: string, slug: string) => Promise<string>;
-    /** Runs the `hq` CLI with these args as a child; resolves with its exit code. */
-    runHq: (args: string[]) => Promise<number>;
-    /** Mirror the vault to disk. Off by default: files are read through the API. */
-    syncFiles?: boolean;
-    /** GET /v1/agents/{self}/inbox — agent-authorized, self-scoped. */
-    readInbox: (token: string) => Promise<InboxFetchResult>;
-    sendDm: (token: string, toUid: string, body: string) => Promise<void>;
-    listSecrets: (token: string, companyUid: string) => Promise<number>;
-    postResult: (token: string, result: ProbeResult) => Promise<number>;
-    now?: () => Date;
-    /** Test seam; defaults to fs.existsSync. */
-    hostKeyExists?: (p: string) => boolean;
-    sleep?: (ms: number) => Promise<void>;
-    nonce?: () => string;
-    dmTimeoutMs?: number;
-}
-export declare function heartbeatAgeSeconds(paths: Pick<AgentKitPaths, "lastHeartbeatPath">, now?: () => Date): number | null;
-export declare function runProbe(deps: ProbeDeps): Promise<ProbeResult>;
-/** True when any inbox item (whatever its channel shape) carries the nonce. */
-export declare function inboxContainsNonce(body: unknown, nonce: string): boolean;
-export declare function formatHeartbeatAge(age: number | null): string;
-/**
- * Recipe contract: `PASS  <check>  <detail>` / `FAIL  <check>  <detail>` per
- * check, then `heartbeat  <age>`. Two-space separators; no trailing verdict
- * line (the exit code carries it, and the console keys only on the POSTed
- * probe-result).
- */
-export declare function formatProbeReport(result: ProbeResult, color?: boolean): string[];
-export declare function defaultProbeDeps(paths: AgentKitPaths, creds: ExternalMachineCreds): ProbeDeps;
-export declare function registerAgentProbeCommand(agent: Command): void;
-//# sourceMappingURL=agent-probe.d.ts.map

package/dist/commands/agent-probe.js

@@ -1,335 +0,0 @@
-/**
- * `hq agent probe` — end-to-end check that this host is a working external
- * team member, one line per check, non-zero exit on any failure:
- *
- *   whoami       mint as the machine identity; token names this agent
- *   files        a vault listing answers on demand (or, with --sync-files, a
- *                pull succeeds and the company folder exists)
- *   presence     the agent-authorized inbox route answers 200 and this host's
- *                own presence is live (a fresh last-heartbeat.json)
- *   dm           send a DM to self via POST /v1/notify/dm (accepted) and read the agent inbox (200)
- *                through GET /v1/agents/{uid}/inbox (the agent read surface;
- *                /v1/notify/thread is intentionally closed to agents)
- *   secrets      `GET /secrets/{companyUid}` answers 200
- *
- * Output is the exact shape the console recipes promise: one
- * `PASS  <check>  <detail>` / `FAIL  <check>  <detail>` line per check, then
- * `heartbeat  <age>`.
- *
- * The result is POSTed to /v1/agents/{uid}/probe-result (api-contract v1) so
- * the console can flip the enrollment to "Enrolled". Also reports the age of
- * the kit's last heartbeat.
- */
-import chalk from "chalk";
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { randomBytes } from "node:crypto";
-import { CLI_VERSION } from "../cli-version.js";
-import { ensureCognitoToken } from "../utils/cognito-session.js";
-import { peekIdToken } from "../utils/id-token.js";
-import { getCompanyUid, vaultApiFetch } from "../utils/vault-api.js";
-import { sendAgentDm } from "./agents.js";
-import { defaultFetchInbox } from "../lib/agent-kit/run/inbox.js";
-import { agentKitPaths } from "../lib/agent-kit/paths.js";
-import { readKitConfig } from "../lib/agent-kit/kit-config.js";
-import { readLastHeartbeat } from "../lib/agent-kit/run/heartbeat.js";
-import { defaultRunPull, syncPullArgs } from "../lib/agent-kit/run/sync.js";
-import { requireExternalCreds } from "./agent-kit.js";
-/** A heartbeat older than this does not count as live presence (3 missed 60 s beats). */
-export const PRESENCE_FRESH_SECONDS = 180;
-function errText(err) {
-    return err instanceof Error ? err.message : String(err);
-}
-export function heartbeatAgeSeconds(paths, now = () => new Date()) {
-    const last = readLastHeartbeat(paths);
-    if (!last)
-        return null;
-    const at = new Date(last.at).getTime();
-    if (Number.isNaN(at))
-        return null;
-    return Math.max(0, Math.round((now().getTime() - at) / 1000));
-}
-export async function runProbe(deps) {
-    const now = deps.now ?? (() => new Date());
-    const nonce = (deps.nonce ?? (() => randomBytes(6).toString("hex")))();
-    const self = deps.creds.entityUid;
-    const checks = [];
-    let token = null;
-    let companyUid = null;
-    // 1. whoami
-    try {
-        token = await deps.getToken();
-        const claims = peekIdToken(token);
-        const uid = claims["custom:entityUid"];
-        const type = claims["custom:entityType"];
-        if (type === "agent" && uid === self && !(deps.hostKeyExists ?? fs.existsSync)(deps.creds.hostKeyPath)) {
-            // A cached token hides a missing host key for up to an hour: the probe
-            // used to pass and the agent then went silent at its next refresh.
-            checks.push({
-                name: "whoami",
-                ok: false,
-                detail: `token minted from cache, but there is no host key at ${deps.creds.hostKeyPath}, so the next refresh will fail. Keep host-key beside machine-creds.json, or re-enroll`,
-            });
-            token = null;
-        }
-        else if (type === "agent" && uid === self) {
-            checks.push({ name: "whoami", ok: true, detail: `${self} (external, ${deps.creds.companySlug})` });
-        }
-        else {
-            checks.push({
-                name: "whoami",
-                ok: false,
-                detail: `token names ${String(type)}:${String(uid)}, expected agent:${self}`,
-            });
-            token = null;
-        }
-    }
-    catch (err) {
-        checks.push({ name: "whoami", ok: false, detail: `mint failed: ${errText(err)}` });
-    }
-    if (token) {
-        try {
-            companyUid = await deps.resolveCompanyUid(token, deps.creds.companySlug);
-        }
-        catch (err) {
-            checks.push({ name: "company", ok: false, detail: `cannot resolve ${deps.creds.companySlug}: ${errText(err)}` });
-        }
-    }
-    // 2. files
-    //
-    // Two shapes, because the kit has two. With file sync off (the default) the
-    // bot reads and writes vault files on demand, so what has to be proven is
-    // that a vault listing answers — not that a full local copy exists. Pulling
-    // the whole vault here would also make the probe fail for a reason that does
-    // not affect the bot: a team with a large asset library is hundreds of
-    // megabytes, and a sandboxed bot host whose egress truncates large responses
-    // can never finish it.
-    if (token) {
-        if (deps.syncFiles) {
-            try {
-                const code = await deps.runHq(syncPullArgs(deps.hqRoot));
-                const companyDir = path.join(deps.hqRoot, "companies", deps.creds.companySlug);
-                const present = fs.existsSync(companyDir);
-                const ok = code === 0 && present;
-                checks.push({
-                    name: "files",
-                    ok,
-                    detail: ok
-                        ? `synced into ${companyDir}`
-                        : code !== 0
-                            ? `hq sync pull exited ${code}`
-                            : `sync exited 0 but ${companyDir} is missing`,
-                });
-            }
-            catch (err) {
-                checks.push({ name: "files", ok: false, detail: errText(err) });
-            }
-        }
-        else {
-            const target = `companies/${deps.creds.companySlug}`;
-            try {
-                const code = await deps.runHq(["files", "browse", target]);
-                checks.push({
-                    name: "files",
-                    ok: code === 0,
-                    detail: code === 0
-                        ? `${target} is readable on demand (no local copy)`
-                        : `hq files browse ${target} exited ${code}`,
-                });
-            }
-            catch (err) {
-                checks.push({ name: "files", ok: false, detail: errText(err) });
-            }
-        }
-    }
-    else {
-        checks.push({ name: "files", ok: false, detail: "skipped: no token" });
-    }
-    // 3. presence: HQ can see this agent, and the agent can read its own inbox.
-    //
-    // This replaces a work-mesh check that also required the realtime doorbell
-    // to be connected. The doorbell was never what made an agent reachable —
-    // messages arrive over the inbox either way — and on a host whose egress
-    // intercepts that connection it could never pass, so a perfectly healthy
-    // bot reported a failure it could do nothing about.
-    if (token) {
-        try {
-            const inbox = await deps.readInbox(token);
-            const age = heartbeatAgeSeconds(deps.paths, now);
-            const reachable = inbox.status === 200;
-            const fresh = age !== null && age <= PRESENCE_FRESH_SECONDS;
-            const ok = reachable && fresh;
-            checks.push({
-                name: "presence",
-                ok,
-                detail: `inbox GET → ${inbox.status}; heartbeat ${age === null ? "never" : `${age}s ago`}` +
-                    (ok ? "" : " — is `hq agent kit` installed and running? see ~/.hq-agent/logs/"),
-            });
-        }
-        catch (err) {
-            checks.push({ name: "presence", ok: false, detail: errText(err) });
-        }
-    }
-    else {
-        checks.push({ name: "presence", ok: false, detail: "skipped: no token" });
-    }
-    // 4. dm: the send is accepted and the agent inbox is readable.
-    // The server never delivers a self-DM into the sender's own inbox
-    // (hq-pro-core notify-dm skips inbox delivery when recipient === sender),
-    // so a self round-trip can never succeed. Inbound delivery is proven by a
-    // teammate's DM, which the kit's inbox poller mirrors to inbox.jsonl.
-    if (token) {
-        try {
-            const body = `hq agent probe ${nonce}`;
-            await deps.sendDm(token, self, body);
-            const res = await deps.readInbox(token);
-            checks.push({
-                name: "dm",
-                ok: res.status === 200,
-                detail: res.status === 200
-                    ? "send accepted by /v1/notify/dm; /v1/agents/{uid}/inbox → 200 (self-DMs are not delivered to the inbox; a DM from a teammate confirms inbound)"
-                    : `send accepted but /v1/agents/{uid}/inbox answered ${res.status}`,
-            });
-        }
-        catch (err) {
-            checks.push({ name: "dm", ok: false, detail: errText(err) });
-        }
-    }
-    else {
-        checks.push({ name: "dm", ok: false, detail: "skipped: no token" });
-    }
-    // 5. secrets-list
-    if (token && companyUid) {
-        try {
-            const status = await deps.listSecrets(token, companyUid);
-            checks.push({
-                name: "secrets",
-                ok: status === 200,
-                detail: status === 200 ? `GET /secrets/${companyUid} → 200` : `GET /secrets/${companyUid} → ${status}`,
-            });
-        }
-        catch (err) {
-            checks.push({ name: "secrets", ok: false, detail: errText(err) });
-        }
-    }
-    else {
-        checks.push({ name: "secrets", ok: false, detail: "skipped: no token/company" });
-    }
-    const result = {
-        passed: checks.every((c) => c.ok),
-        checks,
-        at: now().toISOString(),
-        heartbeatAgeSeconds: heartbeatAgeSeconds(deps.paths, now),
-    };
-    if (token) {
-        try {
-            const status = await deps.postResult(token, result);
-            if (status < 200 || status >= 300) {
-                result.checks.push({ name: "report", ok: false, detail: `probe-result POST → ${status}` });
-                result.passed = false;
-            }
-        }
-        catch (err) {
-            result.checks.push({ name: "report", ok: false, detail: `probe-result POST failed: ${errText(err)}` });
-            result.passed = false;
-        }
-    }
-    return result;
-}
-/** True when any inbox item (whatever its channel shape) carries the nonce. */
-export function inboxContainsNonce(body, nonce) {
-    const rec = body && typeof body === "object" ? body : {};
-    const messages = Array.isArray(rec.messages) ? rec.messages : [];
-    return messages.some((m) => {
-        try {
-            return JSON.stringify(m).includes(nonce);
-        }
-        catch {
-            return false;
-        }
-    });
-}
-export function formatHeartbeatAge(age) {
-    if (age === null)
-        return "never (kit heartbeat has not posted yet)";
-    if (age < 90)
-        return `${age}s ago`;
-    if (age < 3600)
-        return `${Math.round(age / 60)}m ago`;
-    return `${(age / 3600).toFixed(1)}h ago`;
-}
-/**
- * Recipe contract: `PASS  <check>  <detail>` / `FAIL  <check>  <detail>` per
- * check, then `heartbeat  <age>`. Two-space separators; no trailing verdict
- * line (the exit code carries it, and the console keys only on the POSTed
- * probe-result).
- */
-export function formatProbeReport(result, color = true) {
-    const pass = color ? chalk.green("PASS") : "PASS";
-    const failTag = color ? chalk.red("FAIL") : "FAIL";
-    const lines = result.checks.map((c) => `${c.ok ? pass : failTag}  ${c.name}  ${c.detail}`);
-    lines.push(`heartbeat  ${formatHeartbeatAge(result.heartbeatAgeSeconds)}`);
-    return lines;
-}
-export function defaultProbeDeps(paths, creds) {
-    process.env.HQ_MACHINE_CREDS_FILE = paths.machineCredsPath;
-    process.env.HQ_REQUIRE_MACHINE_IDENTITY = "1";
-    process.env.HQ_VAULT_API_URL = creds.apiBaseUrl;
-    const config = readKitConfig(paths, CLI_VERSION);
-    const base = creds.apiBaseUrl;
-    return {
-        paths,
-        creds,
-        hqRoot: config.hqRoot,
-        syncFiles: config.syncFiles,
-        getToken: () => ensureCognitoToken({ tokenSource: "machine", interactive: false }),
-        resolveCompanyUid: (token, slug) => getCompanyUid(token, slug),
-        runHq: defaultRunPull(process.execPath, process.argv[1], process.env),
-        readInbox: (token) => defaultFetchInbox(creds.entityUid, base)(token),
-        sendDm: (token, to, body) => sendAgentDm(token, to, body),
-        listSecrets: async (token, companyUid) => {
-            const res = await vaultApiFetch({
-                token,
-                baseUrl: base,
-                path: `/secrets/${encodeURIComponent(companyUid)}`,
-            });
-            return res.status;
-        },
-        postResult: async (token, result) => {
-            const res = await vaultApiFetch({
-                token,
-                baseUrl: base,
-                path: `/v1/agents/${encodeURIComponent(creds.entityUid)}/probe-result`,
-                method: "POST",
-                body: { passed: result.passed, checks: result.checks, at: result.at },
-            });
-            return res.status;
-        },
-    };
-}
-export function registerAgentProbeCommand(agent) {
-    agent
-        .command("probe")
-        .description("Verify identity, vault access, presence, DMs and secrets; report to the console")
-        .option("--json", "Print machine-readable JSON")
-        .action(async (opts) => {
-        try {
-            const paths = agentKitPaths(os.homedir(), process.env);
-            const creds = requireExternalCreds(paths);
-            const result = await runProbe(defaultProbeDeps(paths, creds));
-            if (opts.json)
-                console.log(JSON.stringify(result, null, 2));
-            else
-                for (const line of formatProbeReport(result))
-                    console.log(line);
-            if (!result.passed)
-                process.exit(1);
-        }
-        catch (err) {
-            console.error(chalk.red(err instanceof Error ? err.message : String(err)));
-            process.exit(1);
-        }
-    });
-}
-//# sourceMappingURL=agent-probe.js.map

package/dist/commands/agent.d.ts

@@ -1,13 +0,0 @@
-/**
- * `hq agent …` — commands a host runs to BE an external HQ agent (as opposed
- * to `hq agents …`, which an admin runs to manage a company's agents):
- *
- *   hq agent enroll <code>        redeem a one-time enrollment code
- *   hq agent kit install|status|uninstall|run <service>
- *   hq agent probe                end-to-end membership check
- *   hq agent mcp                  stdio MCP server for the bot framework
- *   hq agent inbox [done <id…>]   pending HQ messages / mark handled
- */
-import { Command } from "commander";
-export declare function registerAgentCommand(program: Command): void;
-//# sourceMappingURL=agent.d.ts.map

package/dist/commands/agent.js

@@ -1,40 +0,0 @@
-/**
- * `hq agent …` — commands a host runs to BE an external HQ agent (as opposed
- * to `hq agents …`, which an admin runs to manage a company's agents):
- *
- *   hq agent enroll <code>        redeem a one-time enrollment code
- *   hq agent kit install|status|uninstall|run <service>
- *   hq agent probe                end-to-end membership check
- *   hq agent mcp                  stdio MCP server for the bot framework
- *   hq agent inbox [done <id…>]   pending HQ messages / mark handled
- */
-import * as os from "node:os";
-import { adoptAgentIdentityEnv } from "../lib/agent-kit/adopt-identity.js";
-import { agentKitPaths } from "../lib/agent-kit/paths.js";
-import { registerAgentEnrollCommand } from "./agent-enroll.js";
-import { registerAgentInboxCommand } from "./agent-inbox.js";
-import { registerAgentKitCommand } from "./agent-kit.js";
-import { registerAgentMcpCommand } from "./agent-mcp.js";
-import { registerAgentProbeCommand } from "./agent-probe.js";
-export function registerAgentCommand(program) {
-    const agent = program
-        .command("agent")
-        .description("Enroll and run this host as an external HQ agent")
-        // A bot that shares a computer with its owner keeps its identity in its
-        // own directory. Publish that tree to the environment before any
-        // subcommand runs, so the CLI and hq-cloud both mint as the AGENT rather
-        // than falling back to the one fixed path — and, on a person's computer,
-        // to the person. Enroll is exempt: it is the command that decides where
-        // the tree goes.
-        .hook("preAction", (_thisCommand, actionCommand) => {
-        if (actionCommand.name() === "enroll")
-            return;
-        adoptAgentIdentityEnv(agentKitPaths(os.homedir(), process.env), process.env);
-    });
-    registerAgentEnrollCommand(agent);
-    registerAgentKitCommand(agent);
-    registerAgentProbeCommand(agent);
-    registerAgentMcpCommand(agent);
-    registerAgentInboxCommand(agent);
-}
-//# sourceMappingURL=agent.js.map

package/dist/commands/billing-sponsor.d.ts

@@ -1,83 +0,0 @@
-/**
- * `hq billing sponsor` — the individual-pull half of plan sponsorship, from the
- * terminal ("ask a company to sponsor me", hq-pro #3609).
- *
- * A person who is over a personal limit has exactly three ways out: pay $50
- * themselves, reduce what they store, or ask a company to cover the $50 plan
- * line. This command is the third one, plus the admin side that answers it.
- *
- *   hq billing sponsor request <company>   — ask that company to cover my plan
- *   hq billing sponsor list                — the queue (admins), or my own
- *                                            single status (everyone else)
- *   hq billing sponsor approve <id>        — admin: say yes
- *   hq billing sponsor decline <id>        — admin: say no
- *   hq billing sponsor revoke  <id>        — admin: end an active sponsorship
- *   hq billing sponsor withdraw <id>       — me: take back my own request
- *
- * Every subcommand talks to the SAME hq-pro routes the console uses
- * (`/v1/billing/sponsorship/...`). hq-pro is the authoritative gate on all of
- * them: it resolves the caller's person id and the company's admin set
- * server-side, so nothing here is trusted from the client.
- *
- * FEATURE SWITCH. The `plan` request kind only exists while hq-pro's
- * `PLAN_SPONSORSHIP_REQUESTS_ENABLED` switch is on. With the switch off the
- * backend does not recognise `plan` and answers 400 `MISSING_FIELDS` — which
- * would read as "you typed something wrong". We translate that one case into a
- * plain "not available yet" line so a person never sees a validation error for
- * a feature that simply is not turned on.
- */
-import { Command } from "commander";
-/** The request kind this command files. Matches hq-pro's contract. */
-export declare const PLAN_RESOURCE: "plan";
-/** What a person is told when hq-pro's plan-sponsorship switch is off. */
-export declare const FEATURE_OFF_MESSAGE = "Asking a company to sponsor your plan isn't available yet.";
-/** What v1 sponsorship covers, stated wherever a person confirms or reads it. */
-export declare const COVERAGE_SENTENCE = "Your company pays your $50 plan. Storage above your plan's allowance is still yours.";
-/** What a person is told while an approval waits on the sponsor's card. */
-export declare const HELD_FOR_CARD_SENTENCE = "Your company said yes and is adding a card. Your limits still apply until then.";
-/** One request row as hq-pro persists and returns it. */
-export interface SponsorshipRequestRecord {
-    requestId: string;
-    companyUid: string;
-    requestedBy: string;
-    resourceId?: string;
-    resource: "outpost" | "agent" | "plan";
-    status: "pending" | "active" | "declined" | "pending-sponsor-billing" | "expired";
-    payer: "person" | "company";
-    requestedAt: string;
-    updatedAt: string;
-}
-/** An hq-pro error body: `{ error, code }` on every non-2xx these routes send. */
-interface ApiErrorBody {
-    error?: string;
-    message?: string;
-    code?: string;
-}
-/**
- * Turn an hq-pro non-2xx into one plain sentence.
- *
- * The switch-off 400 is the important translation: with the feature off,
- * `plan` is an unrecognised resource kind and the generic body reads
- * "companyUid and resource ('outpost'|'agent') are required", which tells a
- * person nothing true about what happened.
- */
-export declare function messageForError(status: number, body: ApiErrorBody): string;
-/**
- * The member self-read's shape. hq-pro answers
- * `GET /v1/billing/sponsorship/mine?companyUid=…&resource=…` with ONE status —
- * not a list — because the route is a self-scoped "am I covered" question.
- * `active` is true only for an approved COMPANY-paid row; everything else
- * (never asked, still pending, declined) comes back `active: false` with null
- * fields.
- */
-export interface SponsorshipSelfState {
-    active: boolean;
-    status: string | null;
-    payer: "person" | "company" | null;
-    requestId: string | null;
-}
-/** Plain label for a request status. Never shows the raw enum. */
-export declare function statusLabel(status: string): string;
-export declare function registerBillingSponsorCommands(billing: Command): void;
-export {};
-//# sourceMappingURL=billing-sponsor.d.ts.map