@indigoai-us/hq-cli 5.313.0 → 5.314.0

package/dist/lib/agent-kit/fallback.js

@@ -1,210 +0,0 @@
-/**
- * No-service-manager fallback for `hq agent kit install`.
- *
- * When systemd --user cannot be reached (no user session bus, permission
- * refused) or launchd is unavailable, the kit is started as ONE detached
- * `hq agent kit run all` supervisor with output appended to
- * ~/.hq-agent/logs/kit.log and its pid recorded in ~/.hq-agent/kit.pid.
- * `kit status` reads the pidfile; `kit uninstall` kills it and removes it.
- */
-import { spawn, spawnSync } from "node:child_process";
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { kitServiceEnv } from "./services.js";
-import { writePrivateFile } from "./private-file.js";
-const KIT_PID_NAME = "kit.pid";
-const KIT_FALLBACK_LOG_NAME = "kit.log";
-export function kitPidPath(paths) {
-    return path.join(paths.agentDir, KIT_PID_NAME);
-}
-function kitFallbackLogPath(paths) {
-    return path.join(paths.logsDir, KIT_FALLBACK_LOG_NAME);
-}
-const UNAVAILABLE_PATTERNS = [
-    /no user session bus/i,
-    /failed to connect to (?:user )?bus/i,
-    /DBUS_SESSION_BUS_ADDRESS/i,
-    /XDG_RUNTIME_DIR/i,
-    /permission denied/i,
-    /operation not permitted/i,
-    /access denied/i,
-    /\bENOENT\b/i,
-    /command not found|spawnSync \S+ ENOENT/i,
-    /launchctl bootstrap failed/i,
-    /System has not been booted with systemd/i,
-];
-/** True when an activation error means the service manager itself is unusable. */
-export function isServiceManagerUnavailable(error) {
-    if (!error)
-        return false;
-    return UNAVAILABLE_PATTERNS.some((re) => re.test(error));
-}
-/**
- * Pick the fallback when activation was requested and the host has no service
- * manager integration, or every failure is a service-manager-unavailable error.
- */
-export function shouldUseFallback(result, activate) {
-    if (!activate)
-        return false;
-    if (result.platform === "other")
-        return true;
-    const failed = result.units.filter((u) => u.running === false);
-    return failed.length > 0 && failed.some((u) => isServiceManagerUnavailable(u.error));
-}
-export function readKitPid(paths) {
-    try {
-        const n = Number.parseInt(fs.readFileSync(kitPidPath(paths), "utf8").trim(), 10);
-        return Number.isInteger(n) && n > 0 ? n : null;
-    }
-    catch {
-        return null;
-    }
-}
-const defaultKill = (pid, signal) => process.kill(pid, signal);
-export function isPidAlive(pid, kill = defaultKill) {
-    try {
-        kill(pid, 0);
-        return true;
-    }
-    catch (err) {
-        // EPERM: exists but owned by someone else — still alive.
-        return err?.code === "EPERM";
-    }
-}
-export function fallbackStatus(paths, kill) {
-    if (!fs.existsSync(kitPidPath(paths)))
-        return null;
-    const pid = readKitPid(paths);
-    return { pidFile: kitPidPath(paths), pid, running: pid !== null && isPidAlive(pid, kill) };
-}
-/** Kill a recorded supervisor (if alive) and remove the pidfile. */
-export function stopFallback(paths, kill = defaultKill) {
-    const pid = readKitPid(paths);
-    let killed = false;
-    if (pid !== null && isPidAlive(pid, kill)) {
-        try {
-            kill(pid, "SIGTERM");
-            killed = true;
-        }
-        catch {
-            killed = false;
-        }
-    }
-    fs.rmSync(kitPidPath(paths), { force: true });
-    return { pid, killed };
-}
-function fallbackCommand(host) {
-    return { cmd: host.nodeBinary, args: [host.hqBinary, "agent", "kit", "run", "all"] };
-}
-/** crontab line that restarts the fallback supervisor after a reboot. */
-export function rebootCrontabLine(paths, host) {
-    const q = (v) => `'${v.replace(/'/g, `'\\''`)}'`;
-    const { cmd, args } = fallbackCommand(host);
-    return `@reboot HQ_AGENT_DIR=${q(paths.agentDir)} ${[cmd, ...args].map(q).join(" ")} >> ${q(kitFallbackLogPath(paths))} 2>&1`;
-}
-export function startFallback(paths, host, deps = {}) {
-    // Re-install replaces a running supervisor, like a unit restart.
-    stopFallback(paths, deps.kill);
-    fs.mkdirSync(paths.logsDir, { recursive: true, mode: 0o700 });
-    const logPath = kitFallbackLogPath(paths);
-    const fd = fs.openSync(logPath, "a", 0o600);
-    const doSpawn = deps.spawn ?? ((cmd, args, opts) => spawn(cmd, args, opts));
-    const { cmd, args } = fallbackCommand(host);
-    try {
-        const child = doSpawn(cmd, args, {
-            detached: true,
-            windowsHide: true,
-            stdio: ["ignore", fd, fd],
-            env: { ...(deps.env ?? process.env), HOME: host.home, ...kitServiceEnv(paths) },
-            cwd: paths.agentDir,
-        });
-        if (!child.pid)
-            throw new Error(`could not start ${cmd} ${args.join(" ")}`);
-        child.unref();
-        writePrivateFile(kitPidPath(paths), `${child.pid}\n`, 0o600);
-        return { pid: child.pid, logPath, pidFile: kitPidPath(paths) };
-    }
-    finally {
-        fs.closeSync(fd);
-    }
-}
-/**
- * Marker for the crontab entry this module owns. Present so a reinstall
- * replaces its own line instead of stacking duplicates, and so a human reading
- * their crontab can see what wrote it and that removing it is safe.
- */
-export const REBOOT_CRON_MARKER = "# hq-agent-kit (managed): restart the HQ agent kit after a reboot";
-/** Drop any previously managed block, leaving every other entry untouched. */
-export function stripManagedCron(existing) {
-    const lines = existing.split("\n");
-    const out = [];
-    for (let i = 0; i < lines.length; i++) {
-        if (lines[i].trim() === REBOOT_CRON_MARKER) {
-            // Skip the marker and the entry it introduces.
-            if (i + 1 < lines.length && lines[i + 1].startsWith("@reboot"))
-                i += 1;
-            continue;
-        }
-        out.push(lines[i]);
-    }
-    return out.join("\n").replace(/\n{3,}/g, "\n\n").replace(/^\n+/, "");
-}
-/**
- * Install the @reboot entry that brings the fallback supervisor back after a
- * restart.
- *
- * Printing the line and trusting it to be pasted is what the installer used to
- * do, and it is how the Muse pilot lost its messages: the host rebooted, the
- * supervisor died with it, nothing restarted it, and the bot went quiet while
- * every surface still reported healthy. A supervisor that does not survive a
- * reboot is not a supervisor, so the entry is now written for real.
- *
- * Failure is NOT fatal — a host with no crontab is still a working kit until
- * it restarts — but it is reported, so the caller can tell the operator the
- * one thing they must then do by hand.
- */
-/** No cron on the host: spawn failed outright, or the shell could not find it. */
-function isMissingCrontab(r) {
-    return r.status === 127 || /\bENOENT\b|command not found|not found/i.test(r.stderr);
-}
-export function ensureRebootCrontab(paths, host, run) {
-    const exec = run ??
-        ((args, input) => {
-            const r = spawnSync("crontab", args, { input, encoding: "utf8" });
-            if (r.error)
-                return { status: 127, stdout: "", stderr: r.error.message };
-            return { status: r.status ?? 1, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
-        });
-    const listed = exec(["-l"]);
-    // A minimal host image often ships without cron at all, which is not an
-    // error the operator can act on unless it is named. Observed on the Muse
-    // pilot: the reboot entry could not be written because the cron package was
-    // simply not installed, and the raw ENOENT did not say so.
-    if (isMissingCrontab(listed)) {
-        return {
-            installed: false,
-            reason: "the `crontab` command is not installed on this host (install your distribution's cron package, " +
-                "for example `apt-get install -y cron` or `apk add busybox-cron`), then run `hq agent kit install` again",
-        };
-    }
-    // An empty crontab exits non-zero with "no crontab for <user>"; that is not
-    // a failure, it just means there is nothing to preserve. Anything else is.
-    const noCrontabYet = listed.status !== 0 && /no crontab for/i.test(listed.stderr);
-    if (listed.status !== 0 && !noCrontabYet) {
-        return {
-            installed: false,
-            reason: `could not read the crontab (${(listed.stderr || "").trim() || `exit ${listed.status}`})`,
-        };
-    }
-    const kept = stripManagedCron(noCrontabYet ? "" : listed.stdout);
-    const body = `${kept.trimEnd()}\n${REBOOT_CRON_MARKER}\n${rebootCrontabLine(paths, host)}\n`.replace(/^\n+/, "");
-    const wrote = exec(["-"], body);
-    if (wrote.status !== 0) {
-        return {
-            installed: false,
-            reason: `could not write the crontab (${(wrote.stderr || "").trim() || `exit ${wrote.status}`})`,
-        };
-    }
-    return { installed: true };
-}
-//# sourceMappingURL=fallback.js.map

package/dist/lib/agent-kit/inbox-state.d.ts

@@ -1,83 +0,0 @@
-/**
- * Local handled-state for the external agent's mirrored inbox.
- *
- * The inbox poller appends every new item to ~/.hq-agent/inbox/inbox.jsonl.
- * A bot marks an item handled with `hq agent inbox done <id>` (or the
- * `hq_inbox_done` MCP tool); ids land in done-ids.json. "Pending" is every
- * mirrored item whose id is not done, oldest first. This works the same
- * whether or not the kit acks on the server (`inboxAck`), so a woken bot can
- * always drain exactly what it has not handled yet and never reply twice.
- */
-import type { AgentKitPaths } from "./paths.js";
-export interface MirroredInboxEntry {
-    id: string;
-    mirroredAt?: string;
-    [key: string]: unknown;
-}
-export declare function readDoneIds(paths: Pick<AgentKitPaths, "inboxDir">): Set<string>;
-export declare function markInboxDone(paths: Pick<AgentKitPaths, "inboxDir">, ids: string[]): string[];
-/** Every mirrored entry, oldest first, de-duplicated by id (last write wins). */
-export declare function readMirroredInbox(paths: Pick<AgentKitPaths, "inboxDir">): MirroredInboxEntry[];
-export declare function pendingInbox(paths: Pick<AgentKitPaths, "inboxDir">): MirroredInboxEntry[];
-/** One file reference carried on an inbox item (US-007 chat attachments). */
-export interface InboxAttachment {
-    vaultPath: string;
-    name?: string;
-    contentType?: string;
-    sizeBytes?: number;
-    companyUid?: string;
-}
-/**
- * The file references on an inbox entry (a mirrored kit entry or a bot
- * runner's raw inbox item), plural `attachments[]` first and the
- * legacy singular `attachment` as a fallback. Entries without a `vaultPath` are
- * dropped: a reference the bot cannot fetch is worse than none. Pure.
- */
-export declare function inboxEntryAttachments(e: MirroredInboxEntry | {
-    attachments?: unknown;
-    attachment?: unknown;
-}): InboxAttachment[];
-/**
- * Compact view for bots: who, when, which channel, the text, and any attached
- * files. The attachments belong here because this summary IS the message as far
- * as a bot is concerned — omitting them made an agent answer "no image came
- * through" for a DM that carried a screenshot.
- */
-export declare function summarizeInboxEntry(e: MirroredInboxEntry, done: boolean): {
-    done: boolean;
-    attachments?: InboxAttachment[] | undefined;
-    id: string;
-    channel: string | undefined;
-    channelId: string | undefined;
-    from: string;
-    fromUid: string | undefined;
-    at: string | undefined;
-    text: string | undefined;
-};
-/**
- * The agent's inbox as the bot should see it: the kit's local mirror merged
- * with the agent's own server inbox.
- *
- * Reading the mirror ALONE is a silent-blindness bug. The mirror is only as
- * fresh as the kit's poller, and when that process dies nothing says so — the
- * listing simply stops growing. Observed on the Muse pilot: its host rebooted,
- * the kit supervisor died with it and was never restarted, and `hq agent
- * inbox` kept answering with the eight messages from before the reboot while
- * the server had every newer one. No error, no empty result, no stale marker —
- * just an agent that had gone deaf and could not tell.
- *
- * So the server is consulted on every read and anything it knows about that
- * the mirror lacks is included. When the server cannot be reached the mirror
- * is still returned, with a `note` naming the degradation: a partial answer
- * that says it is partial beats a confident wrong one.
- */
-export interface MergedInbox {
-    entries: MirroredInboxEntry[];
-    /** Set when the server could not be consulted, so the caller can say so. */
-    note?: string;
-}
-export declare function mergeAgentInbox(paths: Pick<AgentKitPaths, "inboxDir">, fetchServerInbox: () => Promise<{
-    status: number;
-    body: unknown;
-}>): Promise<MergedInbox>;
-//# sourceMappingURL=inbox-state.d.ts.map

package/dist/lib/agent-kit/inbox-state.js

@@ -1,159 +0,0 @@
-/**
- * Local handled-state for the external agent's mirrored inbox.
- *
- * The inbox poller appends every new item to ~/.hq-agent/inbox/inbox.jsonl.
- * A bot marks an item handled with `hq agent inbox done <id>` (or the
- * `hq_inbox_done` MCP tool); ids land in done-ids.json. "Pending" is every
- * mirrored item whose id is not done, oldest first. This works the same
- * whether or not the kit acks on the server (`inboxAck`), so a woken bot can
- * always drain exactly what it has not handled yet and never reply twice.
- */
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { writePrivateFile } from "./private-file.js";
-const DONE_IDS_NAME = "done-ids.json";
-const MAX_DONE_IDS = 5000;
-const INBOX_JSONL = "inbox.jsonl";
-export function readDoneIds(paths) {
-    try {
-        const raw = JSON.parse(fs.readFileSync(path.join(paths.inboxDir, DONE_IDS_NAME), "utf8"));
-        return new Set(Array.isArray(raw) ? raw.filter((x) => typeof x === "string") : []);
-    }
-    catch {
-        return new Set();
-    }
-}
-export function markInboxDone(paths, ids) {
-    const done = readDoneIds(paths);
-    const added = [];
-    for (const id of ids) {
-        if (!done.has(id)) {
-            done.add(id);
-            added.push(id);
-        }
-    }
-    writePrivateFile(path.join(paths.inboxDir, DONE_IDS_NAME), JSON.stringify([...done].slice(-MAX_DONE_IDS)), 0o600);
-    return added;
-}
-/** Every mirrored entry, oldest first, de-duplicated by id (last write wins). */
-export function readMirroredInbox(paths) {
-    let text;
-    try {
-        text = fs.readFileSync(path.join(paths.inboxDir, INBOX_JSONL), "utf8");
-    }
-    catch {
-        return [];
-    }
-    const byId = new Map();
-    for (const line of text.split("\n")) {
-        if (!line.trim())
-            continue;
-        try {
-            const entry = JSON.parse(line);
-            if (typeof entry.id === "string" && entry.id) {
-                byId.delete(entry.id);
-                byId.set(entry.id, entry);
-            }
-        }
-        catch {
-            /* skip a torn line */
-        }
-    }
-    return [...byId.values()];
-}
-export function pendingInbox(paths) {
-    const done = readDoneIds(paths);
-    return readMirroredInbox(paths).filter((e) => !done.has(e.id));
-}
-/**
- * The file references on an inbox entry (a mirrored kit entry or a bot
- * runner's raw inbox item), plural `attachments[]` first and the
- * legacy singular `attachment` as a fallback. Entries without a `vaultPath` are
- * dropped: a reference the bot cannot fetch is worse than none. Pure.
- */
-export function inboxEntryAttachments(e) {
-    const raw = Array.isArray(e.attachments)
-        ? e.attachments
-        : e.attachment
-            ? [e.attachment]
-            : [];
-    const out = [];
-    for (const entry of raw) {
-        if (!entry || typeof entry !== "object")
-            continue;
-        const rec = entry;
-        const vaultPath = typeof rec.vaultPath === "string" ? rec.vaultPath.trim() : "";
-        if (!vaultPath)
-            continue;
-        const str = (k) => typeof rec[k] === "string" && rec[k].trim()
-            ? rec[k].trim()
-            : undefined;
-        // The chat server records the MIME type as `kind` (hq-pro MessageAttachment);
-        // `contentType` wins when both are present. A coarse kind ("image") is not a MIME type.
-        const contentType = str("contentType") ?? (str("kind")?.includes("/") ? str("kind") : undefined);
-        out.push({
-            vaultPath,
-            ...(str("name") ? { name: str("name") } : {}),
-            ...(contentType ? { contentType } : {}),
-            ...(typeof rec.sizeBytes === "number" ? { sizeBytes: rec.sizeBytes } : {}),
-            ...(str("companyUid") ? { companyUid: str("companyUid") } : {}),
-        });
-    }
-    return out;
-}
-/**
- * Compact view for bots: who, when, which channel, the text, and any attached
- * files. The attachments belong here because this summary IS the message as far
- * as a bot is concerned — omitting them made an agent answer "no image came
- * through" for a DM that carried a screenshot.
- */
-export function summarizeInboxEntry(e, done) {
-    const pick = (...keys) => {
-        for (const k of keys)
-            if (typeof e[k] === "string" && e[k])
-                return e[k];
-        return undefined;
-    };
-    const attachments = inboxEntryAttachments(e);
-    return {
-        id: e.id,
-        channel: pick("channel"),
-        // Set when the message arrived in a channel or group DM. Reply there
-        // (`hq dm <channelId> "…"`), not to the sender privately.
-        channelId: pick("channelId"),
-        from: pick("fromDisplayName", "fromEmail", "fromPersonUid") ?? "unknown",
-        fromUid: pick("fromPersonUid"),
-        at: pick("receivedAt", "createdAt", "mirroredAt"),
-        text: pick("text", "body"),
-        ...(attachments.length ? { attachments } : {}),
-        done,
-    };
-}
-export async function mergeAgentInbox(paths, fetchServerInbox) {
-    const byId = new Map();
-    for (const e of readMirroredInbox(paths))
-        byId.set(e.id, e);
-    let note;
-    try {
-        const res = await fetchServerInbox();
-        if (res.status === 200) {
-            const messages = res.body?.messages;
-            for (const m of Array.isArray(messages) ? messages : []) {
-                if (!m || typeof m !== "object")
-                    continue;
-                const raw = m;
-                const id = typeof raw.id === "string" ? raw.id : typeof raw.messageId === "string" ? raw.messageId : null;
-                if (id && !byId.has(id))
-                    byId.set(id, { ...raw, id });
-            }
-        }
-        else {
-            note = `server inbox answered ${res.status}; showing the local mirror only, which may be stale`;
-        }
-    }
-    catch (err) {
-        note = `server inbox unavailable (${err instanceof Error ? err.message : String(err)}); showing the local mirror only, which may be stale`;
-    }
-    return { entries: [...byId.values()], ...(note ? { note } : {}) };
-}
-//# sourceMappingURL=inbox-state.js.map

package/dist/lib/agent-kit/kit-config.d.ts

@@ -1,56 +0,0 @@
-/**
- * ~/.hq-agent/kit.json — settings `hq agent kit install` records so the
- * services (which only receive `hq agent kit run <service>`) know where to
- * sync and how often. Kept separate from machine-creds.json, which is the
- * contract-shaped credential file and nothing else.
- */
-import { type AgentKitPaths, type KitComponent } from "./paths.js";
-export interface KitConfig {
-    /** Local HQ tree the company vault syncs into (companies/<slug>/ …). */
-    hqRoot: string;
-    syncIntervalMs: number;
-    inboxPollMs: number;
-    heartbeatIntervalMs: number;
-    meshRefreshMs: number;
-    /** Ack mirrored inbox items on the server after writing them locally. */
-    inboxAck: boolean;
-    /**
-     * Mirror the company vault onto local disk.
-     *
-     * Off by default. An external bot reads and writes vault files on demand
-     * through the `hq` MCP server (hq_files_read / hq_files_list /
-     * hq_files_write) and the `hq files` CLI, so a local mirror buys nothing
-     * for the common case and costs a full copy of the company's assets — on a
-     * team with a large brand library that is hundreds of megabytes, and on a
-     * sandboxed bot host whose egress proxy truncates large responses it can
-     * never finish at all (every file retried three times, all failing with
-     * ERR_HQ_TRUNCATED_RESPONSE, leaving the probe stuck and component-sync in
-     * error while the bot was otherwise a healthy team member).
-     *
-     * Turn it on with `hq agent kit install --sync-files` when the bot genuinely
-     * needs files on disk for shell-based work (grep, build tools, a local
-     * index).
-     *
-     * A kit.json written before this field existed reads as `false`, the same as
-     * a fresh install. Reading it as `true` (its behaviour at the time) was the
-     * safer-looking choice and was wrong: the bots with such a file are exactly
-     * the ones the mirror is failing on, and because a bare reinstall preserves
-     * recorded settings, the documented fix — reinstall the kit — left the sync
-     * loop running and the probe still pulling. A bot that genuinely wants the
-     * mirror passes `--sync-files` once.
-     */
-    syncFiles: boolean;
-    installedAt: string;
-    cliVersion: string;
-}
-/**
- * Kit components whose health this install actually reports. `sync` drops out
- * when the vault is not mirrored to disk — there is no loop to be healthy or
- * unhealthy, so reporting it either way would be a lie.
- */
-export declare function enabledKitComponents(config: Pick<KitConfig, "syncFiles">): readonly KitComponent[];
-export declare function defaultKitConfig(paths: Pick<AgentKitPaths, "agentDir">, cliVersion: string, now?: () => Date): KitConfig;
-export declare function writeKitConfig(paths: Pick<AgentKitPaths, "kitConfigPath">, config: KitConfig): void;
-/** Read kit.json, falling back to defaults for any missing/invalid field. */
-export declare function readKitConfig(paths: Pick<AgentKitPaths, "kitConfigPath" | "agentDir">, cliVersion: string): KitConfig;
-//# sourceMappingURL=kit-config.d.ts.map

package/dist/lib/agent-kit/kit-config.js

@@ -1,65 +0,0 @@
-/**
- * ~/.hq-agent/kit.json — settings `hq agent kit install` records so the
- * services (which only receive `hq agent kit run <service>`) know where to
- * sync and how often. Kept separate from machine-creds.json, which is the
- * contract-shaped credential file and nothing else.
- */
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { KIT_COMPONENTS } from "./paths.js";
-import { writePrivateFile } from "./private-file.js";
-const DEFAULT_SYNC_INTERVAL_MS = 5 * 60_000;
-const DEFAULT_INBOX_POLL_MS = 15_000;
-const DEFAULT_HEARTBEAT_INTERVAL_MS = 60_000;
-const DEFAULT_MESH_REFRESH_MS = 5 * 60_000;
-/**
- * Kit components whose health this install actually reports. `sync` drops out
- * when the vault is not mirrored to disk — there is no loop to be healthy or
- * unhealthy, so reporting it either way would be a lie.
- */
-export function enabledKitComponents(config) {
-    return KIT_COMPONENTS.filter((c) => c !== "sync" || config.syncFiles);
-}
-function defaultHqRoot(paths) {
-    return path.join(paths.agentDir, "hq");
-}
-export function defaultKitConfig(paths, cliVersion, now = () => new Date()) {
-    return {
-        hqRoot: defaultHqRoot(paths),
-        syncIntervalMs: DEFAULT_SYNC_INTERVAL_MS,
-        inboxPollMs: DEFAULT_INBOX_POLL_MS,
-        heartbeatIntervalMs: DEFAULT_HEARTBEAT_INTERVAL_MS,
-        meshRefreshMs: DEFAULT_MESH_REFRESH_MS,
-        inboxAck: false,
-        syncFiles: false,
-        installedAt: now().toISOString(),
-        cliVersion,
-    };
-}
-export function writeKitConfig(paths, config) {
-    writePrivateFile(paths.kitConfigPath, `${JSON.stringify(config, null, 2)}\n`, 0o600);
-}
-/** Read kit.json, falling back to defaults for any missing/invalid field. */
-export function readKitConfig(paths, cliVersion) {
-    const base = defaultKitConfig(paths, cliVersion);
-    let raw;
-    try {
-        raw = JSON.parse(fs.readFileSync(paths.kitConfigPath, "utf8"));
-    }
-    catch {
-        return base;
-    }
-    const num = (k) => typeof raw[k] === "number" && raw[k] > 0 ? raw[k] : base[k];
-    return {
-        hqRoot: typeof raw.hqRoot === "string" && raw.hqRoot ? raw.hqRoot : base.hqRoot,
-        syncIntervalMs: num("syncIntervalMs"),
-        inboxPollMs: num("inboxPollMs"),
-        heartbeatIntervalMs: num("heartbeatIntervalMs"),
-        meshRefreshMs: num("meshRefreshMs"),
-        inboxAck: raw.inboxAck === true,
-        syncFiles: raw.syncFiles === true,
-        installedAt: typeof raw.installedAt === "string" ? raw.installedAt : base.installedAt,
-        cliVersion: typeof raw.cliVersion === "string" ? raw.cliVersion : base.cliVersion,
-    };
-}
-//# sourceMappingURL=kit-config.js.map

package/dist/lib/agent-kit/log.d.ts

@@ -1,16 +0,0 @@
-/**
- * Per-service log under ~/.hq-agent/logs/<service>.log, rotated at 5 MB.
- * Lines are sanitized so a bearer token or secret reference can never land
- * on disk even through an error message.
- */
-import type { AgentKitPaths } from "./paths.js";
-export type KitLogLevel = "info" | "warn" | "error";
-export type KitLogger = (level: KitLogLevel, message: string) => void;
-export declare function sanitizeLogLine(message: string): string;
-export declare function formatKitLogLine(level: KitLogLevel, message: string, now?: () => Date): string;
-export declare function createKitLogger(paths: Pick<AgentKitPaths, "logsDir">, service: string, opts?: {
-    now?: () => Date;
-    echo?: boolean;
-    maxBytes?: number;
-}): KitLogger;
-//# sourceMappingURL=log.d.ts.map

package/dist/lib/agent-kit/log.js

@@ -1,46 +0,0 @@
-/**
- * Per-service log under ~/.hq-agent/logs/<service>.log, rotated at 5 MB.
- * Lines are sanitized so a bearer token or secret reference can never land
- * on disk even through an error message.
- */
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { serviceLogPath } from "./paths.js";
-const KIT_LOG_MAX_BYTES = 5 * 1024 * 1024;
-export function sanitizeLogLine(message) {
-    return message
-        .replace(/Bearer\s+[A-Za-z0-9._-]+/gi, "Bearer [REDACTED]")
-        .replace(/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g, "[JWT REDACTED]")
-        .replace(/"secret"\s*:\s*"[^"]*"/g, '"secret":"[REDACTED]"')
-        .replace(/\r?\n/g, " ")
-        .slice(0, 1000);
-}
-export function formatKitLogLine(level, message, now = () => new Date()) {
-    return `${now().toISOString()} ${level} ${sanitizeLogLine(message)}`;
-}
-export function createKitLogger(paths, service, opts = {}) {
-    const file = serviceLogPath(paths, service);
-    const maxBytes = opts.maxBytes ?? KIT_LOG_MAX_BYTES;
-    return (level, message) => {
-        const line = formatKitLogLine(level, message, opts.now);
-        try {
-            fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
-            try {
-                if (fs.statSync(file).size > maxBytes) {
-                    fs.renameSync(file, `${file}.1`);
-                }
-            }
-            catch {
-                /* no file yet */
-            }
-            fs.appendFileSync(file, `${line}\n`, { mode: 0o600 });
-        }
-        catch {
-            /* best-effort */
-        }
-        if (opts.echo) {
-            (level === "error" ? process.stderr : process.stdout).write(`${line}\n`);
-        }
-    };
-}
-//# sourceMappingURL=log.js.map