@indigoai-us/hq-cli 5.313.0 → 5.314.0

package/dist/lib/lanes/outpost-hire-cache.js

@@ -1,153 +0,0 @@
-import { randomBytes } from "node:crypto";
-import * as fs from "node:fs";
-import * as path from "node:path";
-export const OUTPOST_HIRE_SUMMARY_CACHE_TTL_MS = 60_000;
-const CACHE_RELATIVE_PATH = path.join("workspace", "lanes-runs", ".cache", "outpost-hire-summaries.json");
-export function outpostHireSummaryCachePath(hqRoot) {
-    return path.join(hqRoot, CACHE_RELATIVE_PATH);
-}
-export function outpostHireSummaryCacheKey(outpostId, laneId) {
-    return JSON.stringify([outpostId, laneId]);
-}
-export function readOutpostHireSummaryCache(hqRoot, nowMs) {
-    return readCache(hqRoot, nowMs, false);
-}
-/** Reads the last validated summaries even after their freshness window expires. */
-export function readOutpostHireSummaryCacheIncludingStale(hqRoot, nowMs) {
-    return readCache(hqRoot, nowMs, true);
-}
-function readCache(hqRoot, nowMs, includeStale) {
-    const filePath = outpostHireSummaryCachePath(hqRoot);
-    let contents;
-    try {
-        contents = fs.readFileSync(filePath, "utf8");
-    }
-    catch (err) {
-        if (isMissingFile(err))
-            return new Map();
-        console.warn(`Ignoring unreadable Outpost hire summary cache at ${filePath}: ${errorText(err)}`);
-        return new Map();
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(contents);
-    }
-    catch (err) {
-        console.warn(`Ignoring malformed Outpost hire summary cache at ${filePath}: ${errorText(err)}`);
-        return new Map();
-    }
-    if (!Array.isArray(parsed)) {
-        console.warn(`Ignoring malformed Outpost hire summary cache at ${filePath}: expected an array`);
-        return new Map();
-    }
-    const entries = new Map();
-    const duplicates = new Set();
-    for (const value of parsed) {
-        const entry = parseCacheEntry(value, nowMs, includeStale);
-        if (!entry)
-            continue;
-        const key = outpostHireSummaryCacheKey(entry.outpost_id, entry.lane_id);
-        if (entries.has(key)) {
-            entries.delete(key);
-            duplicates.add(key);
-            continue;
-        }
-        if (!duplicates.has(key))
-            entries.set(key, entry);
-    }
-    return entries;
-}
-export function writeOutpostHireSummaryCache(hqRoot, updates, nowMs, existingEntries) {
-    if (updates.length === 0)
-        return;
-    const filePath = outpostHireSummaryCachePath(hqRoot);
-    const cached = new Map(existingEntries ?? readOutpostHireSummaryCache(hqRoot, nowMs));
-    for (const update of updates) {
-        const entry = {
-            outpost_id: update.outpost_id,
-            lane_id: update.lane_id,
-            hire_grant: update.hire_grant,
-            hire_alive_children: update.hire_alive_children,
-            hire: update.hire,
-            hire_summary: update.hire_summary,
-            cached_at: new Date(nowMs).toISOString(),
-        };
-        if (!parseCacheEntry(entry, nowMs))
-            continue;
-        cached.set(outpostHireSummaryCacheKey(entry.outpost_id, entry.lane_id), entry);
-    }
-    const directory = path.dirname(filePath);
-    let temporaryPath;
-    try {
-        fs.mkdirSync(directory, { recursive: true });
-        temporaryPath = path.join(directory, `.outpost-hire-summaries.${process.pid}.${randomBytes(6).toString("hex")}.tmp`);
-        fs.writeFileSync(temporaryPath, `${JSON.stringify([...cached.values()])}\n`, {
-            encoding: "utf8",
-            mode: 0o600,
-        });
-        fs.renameSync(temporaryPath, filePath);
-    }
-    catch (err) {
-        if (temporaryPath) {
-            try {
-                fs.unlinkSync(temporaryPath);
-            }
-            catch (cleanupErr) {
-                if (!isMissingFile(cleanupErr)) {
-                    console.warn(`Could not remove temporary Outpost hire summary cache ${temporaryPath}: ${errorText(cleanupErr)}`);
-                }
-            }
-        }
-        console.warn(`Could not write Outpost hire summary cache at ${filePath}: ${errorText(err)}`);
-    }
-}
-function parseCacheEntry(value, nowMs, includeStale = false) {
-    if (value === null || typeof value !== "object" || Array.isArray(value))
-        return undefined;
-    const entry = value;
-    const allowedKeys = new Set([
-        "outpost_id",
-        "lane_id",
-        "hire_grant",
-        "hire_alive_children",
-        "hire",
-        "hire_summary",
-        "cached_at",
-    ]);
-    if (Object.keys(entry).length !== allowedKeys.size || Object.keys(entry).some((key) => !allowedKeys.has(key))) {
-        return undefined;
-    }
-    if (typeof entry.outpost_id !== "string" || !entry.outpost_id.trim() ||
-        typeof entry.lane_id !== "string" || !entry.lane_id.trim() ||
-        !Number.isSafeInteger(entry.hire_grant) || entry.hire_grant < 0 ||
-        !Number.isSafeInteger(entry.hire_alive_children) || entry.hire_alive_children < 0 ||
-        typeof entry.cached_at !== "string") {
-        return undefined;
-    }
-    const cachedAt = Date.parse(entry.cached_at);
-    if (!Number.isFinite(cachedAt) ||
-        cachedAt > nowMs ||
-        (!includeStale && nowMs - cachedAt > OUTPOST_HIRE_SUMMARY_CACHE_TTL_MS)) {
-        return undefined;
-    }
-    const hire = `${entry.hire_alive_children}/${entry.hire_grant}`;
-    const hireSummary = `hire ${hire}`;
-    if (entry.hire !== hire || entry.hire_summary !== hireSummary)
-        return undefined;
-    return {
-        outpost_id: entry.outpost_id,
-        lane_id: entry.lane_id,
-        hire_grant: entry.hire_grant,
-        hire_alive_children: entry.hire_alive_children,
-        hire,
-        hire_summary: hireSummary,
-        cached_at: entry.cached_at,
-    };
-}
-function isMissingFile(err) {
-    return err !== null && typeof err === "object" && "code" in err && err.code === "ENOENT";
-}
-function errorText(err) {
-    return err instanceof Error ? err.message : String(err);
-}
-//# sourceMappingURL=outpost-hire-cache.js.map

package/dist/lib/lanes/outpost-identity.d.ts

@@ -1,33 +0,0 @@
-export declare const OUTPOST_ID_MARKER_PATH = "/etc/outpost/outpost-id";
-export declare const OUTPOST_ID_MARKER_DIR = "/etc/outpost";
-export type OutpostIdentityValue = {
-    kind: "id";
-    id: string;
-} | {
-    kind: "unknown";
-} | {
-    kind: "not_outpost";
-};
-export interface OutpostIdentityMarkerStore {
-    read(): OutpostIdentityValue;
-    /** Return false if another writer already created the marker. */
-    createIfMissing(id: string): boolean;
-}
-export interface OutpostIdentityMarkerWriterOptions {
-    markerDir?: string;
-    markerPath?: string;
-    run?: (input: {
-        id: string;
-        markerDir: string;
-        markerPath: string;
-        script: string;
-    }) => {
-        status: number | null;
-        error?: Error;
-        stderr?: string;
-    };
-}
-export declare function validateOutpostIdentityId(id: string): void;
-export declare function backfillOutpostIdentityMarker(expectedId: string, store: OutpostIdentityMarkerStore): "created" | "unchanged";
-export declare function createOutpostIdentityMarkerIfMissing(id: string, options?: OutpostIdentityMarkerWriterOptions): boolean;
-//# sourceMappingURL=outpost-identity.d.ts.map

package/dist/lib/lanes/outpost-identity.js

@@ -1,59 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { LanesError } from "./errors.js";
-export const OUTPOST_ID_MARKER_PATH = "/etc/outpost/outpost-id";
-export const OUTPOST_ID_MARKER_DIR = "/etc/outpost";
-const SAFE_OUTPOST_ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
-export function validateOutpostIdentityId(id) {
-    if (id !== id.trim() || !SAFE_OUTPOST_ID.test(id)) {
-        throw new LanesError("outpost_identity_id_invalid", "Outpost identity must be a single-line id containing only letters, numbers, hyphens, or underscores", { value: id });
-    }
-}
-export function backfillOutpostIdentityMarker(expectedId, store) {
-    validateOutpostIdentityId(expectedId);
-    const current = store.read();
-    if (current.kind === "id") {
-        if (current.id !== expectedId) {
-            throw outpostIdentityMismatch(expectedId, current.id);
-        }
-        return "unchanged";
-    }
-    if (current.kind === "not_outpost") {
-        throw new LanesError("outpost_identity_not_host", `This host has no ${OUTPOST_ID_MARKER_DIR} directory; identity backfill only runs on an Outpost`, { expected_id: expectedId, marker_path: OUTPOST_ID_MARKER_PATH });
-    }
-    let created;
-    try {
-        created = store.createIfMissing(expectedId);
-    }
-    catch (err) {
-        const after = store.read();
-        if (after.kind === "id" && after.id === expectedId)
-            return "unchanged";
-        if (after.kind === "id")
-            throw outpostIdentityMismatch(expectedId, after.id);
-        throw new LanesError("outpost_identity_backfill_failed", `Could not write ${OUTPOST_ID_MARKER_PATH}: ${err instanceof Error ? err.message : String(err)}`, { expected_id: expectedId, marker_path: OUTPOST_ID_MARKER_PATH });
-    }
-    const after = store.read();
-    if (after.kind === "id") {
-        if (after.id !== expectedId)
-            throw outpostIdentityMismatch(expectedId, after.id);
-        return created ? "created" : "unchanged";
-    }
-    throw new LanesError("outpost_identity_backfill_failed", `Backfill did not create ${OUTPOST_ID_MARKER_PATH} with expected value ${expectedId}`, { expected_id: expectedId, marker_path: OUTPOST_ID_MARKER_PATH });
-}
-export function createOutpostIdentityMarkerIfMissing(id, options = {}) {
-    validateOutpostIdentityId(id);
-    const markerDir = options.markerDir ?? OUTPOST_ID_MARKER_DIR;
-    const markerPath = options.markerPath ?? OUTPOST_ID_MARKER_PATH;
-    const script = `umask 022; install -d -m 0755 "$2" && set -C && printf '%s\\n' "$1" > "$3"`;
-    const result = options.run?.({ id, markerDir, markerPath, script }) ?? spawnSync("sudo", ["-n", "sh", "-c", script, "hq-outpost-identity", id, markerDir, markerPath], { encoding: "utf8" });
-    if (result.error) {
-        throw new LanesError("outpost_identity_backfill_failed", `Could not run sudo to write ${OUTPOST_ID_MARKER_PATH}: ${result.error.message}`, { expected_id: id, marker_path: OUTPOST_ID_MARKER_PATH });
-    }
-    if (result.status === 0)
-        return true;
-    return false;
-}
-function outpostIdentityMismatch(expectedId, actualId) {
-    return new LanesError("outpost_identity_mismatch", `Refusing to replace ${OUTPOST_ID_MARKER_PATH}: it contains ${actualId}, expected ${expectedId}`, { expected_id: expectedId, actual_id: actualId, marker_path: OUTPOST_ID_MARKER_PATH });
-}
-//# sourceMappingURL=outpost-identity.js.map

package/dist/lib/lanes/outpost-profile-repin.d.ts

@@ -1,17 +0,0 @@
-import { type SeniorRef } from "./types.js";
-declare const PROFILE_REPIN_CONTEXT_SCHEMA: "hq-lane-profile-repin-context.v1";
-export interface OutpostProfileRepinContext {
-    schema_version: typeof PROFILE_REPIN_CONTEXT_SCHEMA;
-    lane_id: string;
-    expected_senior: SeniorRef;
-    actor: string;
-    reason: "resume --worker";
-}
-export declare function createOutpostProfileRepinContext(input: {
-    laneId: string;
-    expectedSenior: SeniorRef;
-    actor: string;
-}): string;
-export declare function parseOutpostProfileRepinContext(encoded: string, expectedLaneId: string): OutpostProfileRepinContext;
-export {};
-//# sourceMappingURL=outpost-profile-repin.d.ts.map

package/dist/lib/lanes/outpost-profile-repin.js

@@ -1,84 +0,0 @@
-import { LanesError } from "./errors.js";
-import { isSeniorKind } from "./types.js";
-const PROFILE_REPIN_CONTEXT_SCHEMA = "hq-lane-profile-repin-context.v1";
-const MAX_CONTEXT_BYTES = 4 * 1024;
-function contextError(message) {
-    return new LanesError("worker_profile_repin_context_invalid", message, {});
-}
-function parseSenior(value) {
-    if (value === null || typeof value !== "object" || Array.isArray(value))
-        return null;
-    const record = value;
-    if (Object.keys(record).some((key) => key !== "kind" && key !== "id"))
-        return null;
-    if (!isSeniorKind(record.kind))
-        return null;
-    if (record.id !== undefined &&
-        (typeof record.id !== "string" || !record.id.trim() || record.id.trim() !== record.id))
-        return null;
-    if ((record.kind === "session" || record.kind === "lane") && record.id === undefined)
-        return null;
-    if (record.kind === "user" && record.id !== undefined)
-        return null;
-    return record.id === undefined
-        ? { kind: record.kind }
-        : { kind: record.kind, id: record.id };
-}
-export function createOutpostProfileRepinContext(input) {
-    const context = {
-        schema_version: PROFILE_REPIN_CONTEXT_SCHEMA,
-        lane_id: input.laneId,
-        expected_senior: input.expectedSenior.id === undefined
-            ? { kind: input.expectedSenior.kind }
-            : { kind: input.expectedSenior.kind, id: input.expectedSenior.id },
-        actor: input.actor,
-        reason: "resume --worker",
-    };
-    const encoded = Buffer.from(JSON.stringify(context), "utf8").toString("base64url");
-    if (Buffer.byteLength(encoded, "utf8") > MAX_CONTEXT_BYTES) {
-        throw contextError(`Profile re-pin context for lane ${input.laneId} is too large`);
-    }
-    return encoded;
-}
-export function parseOutpostProfileRepinContext(encoded, expectedLaneId) {
-    if (encoded.length === 0 ||
-        encoded.length > MAX_CONTEXT_BYTES ||
-        !/^[A-Za-z0-9_-]+$/.test(encoded)) {
-        throw contextError("Profile re-pin context must be bounded base64url text");
-    }
-    let raw;
-    try {
-        const decoded = Buffer.from(encoded, "base64url");
-        if (decoded.toString("base64url") !== encoded) {
-            throw new Error("non-canonical base64url");
-        }
-        raw = JSON.parse(decoded.toString("utf8"));
-    }
-    catch {
-        throw contextError("Profile re-pin context is not valid base64url JSON");
-    }
-    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
-        throw contextError("Profile re-pin context must be a JSON object");
-    }
-    const record = raw;
-    if (Object.keys(record).some((key) => !["schema_version", "lane_id", "expected_senior", "actor", "reason"].includes(key))) {
-        throw contextError("Profile re-pin context contains unknown fields");
-    }
-    const expectedSenior = parseSenior(record.expected_senior);
-    if (record.schema_version !== PROFILE_REPIN_CONTEXT_SCHEMA ||
-        record.lane_id !== expectedLaneId ||
-        expectedSenior === null ||
-        typeof record.actor !== "string" ||
-        !record.actor.trim() ||
-        record.reason !== "resume --worker") {
-        throw contextError(`Profile re-pin context is invalid for lane ${expectedLaneId}`);
-    }
-    return {
-        schema_version: PROFILE_REPIN_CONTEXT_SCHEMA,
-        lane_id: expectedLaneId,
-        expected_senior: expectedSenior,
-        actor: record.actor,
-        reason: "resume --worker",
-    };
-}
-//# sourceMappingURL=outpost-profile-repin.js.map

package/dist/lib/lanes/outpost-pruner-install.d.ts

@@ -1,37 +0,0 @@
-export declare const OUTPOST_PRUNER_PRESSURE_SERVICE = "hq-outpost-worktree-pruner-pressure.service";
-export declare const OUTPOST_PRUNER_PRESSURE_TIMER = "hq-outpost-worktree-pruner-pressure.timer";
-export declare const OUTPOST_PRUNER_DAILY_SERVICE = "hq-outpost-worktree-pruner-daily.service";
-export declare const OUTPOST_PRUNER_DAILY_TIMER = "hq-outpost-worktree-pruner-daily.timer";
-export declare const OUTPOST_PRUNER_MIN_AGE_DAYS = 14;
-export interface OutpostPrunerInstallOptions {
-    systemdRoot: string;
-    hqRoot: string;
-    nodeBinary?: string;
-    hqBinary?: string;
-    home?: string;
-    flagApiUrl?: string;
-    companyUid?: string;
-    enable?: boolean;
-    runCommand?: (command: string, args: string[]) => {
-        status: number;
-        stdout?: string;
-        stderr?: string;
-    };
-}
-export interface OutpostPrunerInstallResult {
-    ok: true;
-    action: "outpost-pruner.install" | "outpost-pruner.uninstall";
-    systemd_root: string;
-    units: string[];
-    written?: boolean;
-    enabled?: boolean;
-    removed?: boolean;
-}
-export declare function renderOutpostPrunerPressureTimer(): string;
-export declare function renderOutpostPrunerDailyTimer(): string;
-export declare function defaultOutpostPrunerSystemdDir(home?: string): string;
-export declare function installOutpostPrunerTimers(options: OutpostPrunerInstallOptions): OutpostPrunerInstallResult;
-export declare function uninstallOutpostPrunerTimers(options: Pick<OutpostPrunerInstallOptions, "systemdRoot" | "runCommand"> & {
-    disable?: boolean;
-}): OutpostPrunerInstallResult;
-//# sourceMappingURL=outpost-pruner-install.d.ts.map

package/dist/lib/lanes/outpost-pruner-install.js

@@ -1,238 +0,0 @@
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { resolveHqBinary, resolveNodeBinary } from "../mesh/live/daemon/install.js";
-import { SYSTEMD_PATH_ENV } from "../service-manager/systemd.js";
-import { resolveFlagRegistryEndpoint } from "../flag-registry-endpoint.js";
-export const OUTPOST_PRUNER_PRESSURE_SERVICE = "hq-outpost-worktree-pruner-pressure.service";
-export const OUTPOST_PRUNER_PRESSURE_TIMER = "hq-outpost-worktree-pruner-pressure.timer";
-export const OUTPOST_PRUNER_DAILY_SERVICE = "hq-outpost-worktree-pruner-daily.service";
-export const OUTPOST_PRUNER_DAILY_TIMER = "hq-outpost-worktree-pruner-daily.timer";
-export const OUTPOST_PRUNER_MIN_AGE_DAYS = 14;
-function shellQuote(value) {
-    return /^[A-Za-z0-9_./:-]+$/.test(value) ? value : `'${value.replace(/'/g, `'\\''`)}'`;
-}
-function systemdEnvironment(name, value) {
-    if (/[\r\n\0]/.test(value))
-        throw new TypeError(`${name} contains a line break or NUL`);
-    const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/%/g, "%%");
-    return `Environment="${name}=${escaped}"`;
-}
-function writeIfChanged(filePath, contents) {
-    try {
-        if (fs.readFileSync(filePath, "utf8") === contents)
-            return false;
-    }
-    catch (err) {
-        const code = err.code;
-        if (code !== "ENOENT")
-            throw err;
-    }
-    fs.mkdirSync(path.dirname(filePath), { recursive: true });
-    const temporary = `${filePath}.${process.pid}.${Date.now()}.tmp`;
-    try {
-        fs.writeFileSync(temporary, contents, { encoding: "utf8", mode: 0o644 });
-        fs.renameSync(temporary, filePath);
-    }
-    catch (err) {
-        try {
-            fs.unlinkSync(temporary);
-        }
-        catch (unlinkError) {
-            if (unlinkError.code !== "ENOENT") {
-                process.stderr.write(`outpost pruner install: temporary unit cleanup failed (${unlinkError.code ?? "Error"})\n`);
-            }
-        }
-        throw err;
-    }
-    return true;
-}
-function unlinkIfExists(filePath) {
-    try {
-        fs.unlinkSync(filePath);
-        return true;
-    }
-    catch (err) {
-        const code = err.code;
-        if (code === "ENOENT")
-            return false;
-        throw err;
-    }
-}
-function runSystemctl(args, run) {
-    const result = run("systemctl", args);
-    if (result.status !== 0)
-        throw new Error(`systemctl ${args.join(" ")} failed (${result.status})`);
-}
-function pnpmBinaryDirs() {
-    const resolved = [];
-    for (const directory of (process.env.PATH ?? "").split(path.delimiter).filter(Boolean)) {
-        const binary = path.join(directory, "pnpm");
-        try {
-            fs.accessSync(binary, fs.constants.X_OK);
-            for (const candidate of [path.resolve(directory), path.dirname(fs.realpathSync(binary))]) {
-                if (!resolved.includes(candidate))
-                    resolved.push(candidate);
-            }
-            break;
-        }
-        catch {
-            // Keep looking. The full interactive-shell PATH is not copied into units.
-        }
-    }
-    return resolved;
-}
-function unitPathEnv(hqBinary, nodeBinary) {
-    const dirs = [
-        ...pnpmBinaryDirs(),
-        path.dirname(path.resolve(hqBinary)),
-        path.dirname(path.resolve(nodeBinary)),
-        ...SYSTEMD_PATH_ENV.split(":"),
-    ];
-    return [...new Set(dirs)].filter(Boolean).join(":");
-}
-function renderService(opts) {
-    const command = [
-        opts.nodeBinary,
-        opts.hqBinary,
-        "lanes",
-        "outpost-pruner",
-        "run",
-        "--trigger",
-        opts.trigger,
-        "--min-age-days",
-        String(OUTPOST_PRUNER_MIN_AGE_DAYS),
-    ].map(shellQuote).join(" ");
-    return `[Unit]
-Description=HQ outpost worktree pruning (${opts.trigger})
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-Type=oneshot
-ExecStart=${command}
-WorkingDirectory=${shellQuote(opts.hqRoot)}
-Nice=10
-Environment=HOME=${shellQuote(opts.home)}
-Environment=PATH=${shellQuote(opts.pathEnv)}
-Environment=HQ_ROOT=${shellQuote(opts.hqRoot)}
-Environment=HQ_NO_UPDATE_CHECK=1
-${opts.flagEnvironment}
-KillMode=process
-
-[Install]
-WantedBy=default.target
-`;
-}
-export function renderOutpostPrunerPressureTimer() {
-    return `[Unit]
-Description=Check HQ outpost disk pressure for safe worktree cleanup
-
-[Timer]
-OnBootSec=2min
-OnUnitActiveSec=5min
-AccuracySec=30s
-Persistent=true
-Unit=${OUTPOST_PRUNER_PRESSURE_SERVICE}
-
-[Install]
-WantedBy=timers.target
-`;
-}
-export function renderOutpostPrunerDailyTimer() {
-    return `[Unit]
-Description=Daily HQ outpost safe worktree cleanup
-
-[Timer]
-OnCalendar=*-*-* 03:10:00
-RandomizedDelaySec=10min
-AccuracySec=1min
-Persistent=true
-Unit=${OUTPOST_PRUNER_DAILY_SERVICE}
-
-[Install]
-WantedBy=timers.target
-`;
-}
-export function defaultOutpostPrunerSystemdDir(home = os.homedir()) {
-    return path.join(home, ".config", "systemd", "user");
-}
-export function installOutpostPrunerTimers(options) {
-    const nodeBinary = options.nodeBinary ?? resolveNodeBinary();
-    const hqBinary = options.hqBinary ?? resolveHqBinary();
-    const home = options.home ?? os.homedir();
-    const companyUid = (options.companyUid ?? process.env.HQ_COMPANY_UID ?? "").trim();
-    const companyUidSource = options.companyUid !== undefined
-        ? "install option companyUid"
-        : "HQ_COMPANY_UID";
-    if (!companyUid) {
-        throw new TypeError("install requires HQ_COMPANY_UID for the timer services");
-    }
-    if (!companyUid.startsWith("cmp_")) {
-        process.stderr.write(`${JSON.stringify({
-            event: "outpost.worktree_pruner.install_invalid_company_uid",
-            source: companyUidSource,
-            expected_prefix: "cmp_",
-        })}\n`);
-        throw new TypeError(`${companyUidSource} must start with cmp_ before installing the timer services`);
-    }
-    const flagApiUrl = resolveFlagRegistryEndpoint(options.flagApiUrl);
-    const flagEnvironment = [
-        systemdEnvironment("HQ_FLAGS_API_URL", flagApiUrl),
-        systemdEnvironment("HQ_COMPANY_UID", companyUid),
-    ].join("\n");
-    const pathEnv = unitPathEnv(hqBinary, nodeBinary);
-    const units = [
-        [OUTPOST_PRUNER_PRESSURE_SERVICE, renderService({ trigger: "pressure", nodeBinary, hqBinary, hqRoot: options.hqRoot, home, pathEnv, flagEnvironment })],
-        [OUTPOST_PRUNER_PRESSURE_TIMER, renderOutpostPrunerPressureTimer()],
-        [OUTPOST_PRUNER_DAILY_SERVICE, renderService({ trigger: "daily", nodeBinary, hqBinary, hqRoot: options.hqRoot, home, pathEnv, flagEnvironment })],
-        [OUTPOST_PRUNER_DAILY_TIMER, renderOutpostPrunerDailyTimer()],
-    ];
-    let written = false;
-    for (const [name, contents] of units) {
-        written = writeIfChanged(path.join(options.systemdRoot, name), contents) || written;
-    }
-    let enabled = false;
-    if (options.enable) {
-        if (!options.runCommand)
-            throw new Error("--enable needs a systemctl runner");
-        runSystemctl(["--user", "daemon-reload"], options.runCommand);
-        runSystemctl(["--user", "enable", "--now", OUTPOST_PRUNER_PRESSURE_TIMER, OUTPOST_PRUNER_DAILY_TIMER], options.runCommand);
-        enabled = true;
-    }
-    return {
-        ok: true,
-        action: "outpost-pruner.install",
-        systemd_root: options.systemdRoot,
-        units: units.map(([name]) => path.join(options.systemdRoot, name)),
-        written,
-        enabled,
-    };
-}
-export function uninstallOutpostPrunerTimers(options) {
-    if (options.disable) {
-        if (!options.runCommand)
-            throw new Error("--disable needs a systemctl runner");
-        runSystemctl(["--user", "disable", "--now", OUTPOST_PRUNER_PRESSURE_TIMER, OUTPOST_PRUNER_DAILY_TIMER], options.runCommand);
-    }
-    const units = [
-        OUTPOST_PRUNER_PRESSURE_SERVICE,
-        OUTPOST_PRUNER_PRESSURE_TIMER,
-        OUTPOST_PRUNER_DAILY_SERVICE,
-        OUTPOST_PRUNER_DAILY_TIMER,
-    ];
-    let removed = false;
-    for (const name of units) {
-        removed = unlinkIfExists(path.join(options.systemdRoot, name)) || removed;
-    }
-    if (options.disable && options.runCommand)
-        runSystemctl(["--user", "daemon-reload"], options.runCommand);
-    return {
-        ok: true,
-        action: "outpost-pruner.uninstall",
-        systemd_root: options.systemdRoot,
-        units: units.map((name) => path.join(options.systemdRoot, name)),
-        removed,
-    };
-}
-//# sourceMappingURL=outpost-pruner-install.js.map

package/dist/lib/lanes/outpost-registry-worker-approval.d.ts

@@ -1,18 +0,0 @@
-import { type SeniorRef } from "./types.js";
-declare const APPROVAL_CONTEXT_SCHEMA: "hq-lane-registry-worker-approval-context.v1";
-export interface OutpostRegistryWorkerApprovalContext {
-    schema_version: typeof APPROVAL_CONTEXT_SCHEMA;
-    lane_id: string;
-    expected_senior: SeniorRef;
-    actor: string;
-    checkpoint: string;
-    reason: string;
-    approval_id: string;
-    registry_worker_id: string;
-    worker_yaml_sha256: string;
-    at: string;
-}
-export declare function createOutpostRegistryWorkerApprovalContext(input: Omit<OutpostRegistryWorkerApprovalContext, "schema_version">): string;
-export declare function parseOutpostRegistryWorkerApprovalContext(encoded: string, expectedLaneId: string): OutpostRegistryWorkerApprovalContext;
-export {};
-//# sourceMappingURL=outpost-registry-worker-approval.d.ts.map