@indigoai-us/hq-cli 5.313.0 → 5.314.0

package/dist/secrets-env-fast-route.js

@@ -1,54 +0,0 @@
-/** Default-off hq-flags gate for the `secrets env` entry fast path. */
-import { localOverrideEnvVar, readLocalOverride } from "@indigoai-us/hq-flags-client";
-export const CLI_SECRETS_ENV_FAST_PATH_FLAG = "cli.secrets-env-fast-path";
-/** Keep the existing command graph in control when the gate is off or declines. */
-export async function dispatchSecretsEnvFastRequest(_request, deps) {
-    if (!(await deps.isEnabled())) {
-        await deps.runCurrent();
-        return;
-    }
-    if ((await deps.runFast()) === "fallback") {
-        await deps.runCurrent();
-    }
-}
-/**
- * Fast routes only use an explicit local override or the latest company flag
- * snapshot. A missing company, stale snapshot, or unreadable cache leaves the
- * current CLI path in control; it never performs a registry network request.
- */
-export async function secretsEnvFastRouteEnabled(request, env = process.env) {
-    const override = readLocalOverride(CLI_SECRETS_ENV_FAST_PATH_FLAG, env);
-    if (override !== null)
-        return override;
-    const rawOverride = env[localOverrideEnvVar(CLI_SECRETS_ENV_FAST_PATH_FLAG)];
-    if (rawOverride === "1")
-        return true;
-    if (rawOverride === "0")
-        return false;
-    if (request.scope.personal)
-        return false;
-    try {
-        const scopedEnv = { ...env };
-        if (request.scope.company) {
-            // An explicit --company scope must override any ambient binding for the
-            // fast-path flag lookup, just as it overrides the secrets command scope.
-            delete scopedEnv.HQ_COMPANY_UID;
-            scopedEnv.HQ_COMPANY_SLUG = request.scope.company;
-        }
-        const [{ resolveProcessFlagCompanyContext }, { readFlagSnapshotFile }] = await Promise.all([
-            import("./lib/process-flag-company-context.js"),
-            import("./lib/flag-snapshot-file.js"),
-        ]);
-        const { companyUid } = resolveProcessFlagCompanyContext(scopedEnv);
-        if (!companyUid)
-            return false;
-        return readFlagSnapshotFile(companyUid, { env: scopedEnv })?.flags[CLI_SECRETS_ENV_FAST_PATH_FLAG] === true;
-    }
-    catch (error) {
-        // This is a performance rollout gate. Failure to read it preserves the
-        // existing full CLI behavior.
-        console.warn("[hq] secrets env fast-path flag lookup failed; using the full CLI path", error instanceof Error ? error.name : typeof error);
-        return false;
-    }
-}
-//# sourceMappingURL=secrets-env-fast-route.js.map

package/dist/utils/checkpoint-stamp-write-error.d.ts

@@ -1,28 +0,0 @@
-export type CheckpointStampFsOperation = "open" | "write" | "rename" | "unlink";
-type CheckpointStampErrnoCode = "EBUSY" | "EPERM" | "UNKNOWN";
-type CheckpointStampWriteDiagnostics = {
-    fs_op: CheckpointStampFsOperation;
-    target_kind: "checkpoint_stamp";
-    errno_code: CheckpointStampErrnoCode;
-    platform: "win32";
-};
-export type CheckpointStampWriteCaptureContext = {
-    fingerprint: ["fs-write-failed", "checkpoint_stamp", CheckpointStampErrnoCode];
-    tags: CheckpointStampWriteDiagnostics;
-};
-export declare class CheckpointStampWriteError extends Error {
-    name: string;
-    readonly code: CheckpointStampErrnoCode;
-    readonly syscall: CheckpointStampFsOperation;
-    readonly checkpointStampWriteDiagnostics: CheckpointStampWriteDiagnostics;
-    constructor(diagnostics: CheckpointStampWriteDiagnostics, originalStack?: string);
-}
-/** Wrap only the captured Windows lock/error classes, keeping the original frames and dropping paths. */
-export declare function checkpointStampWriteErrorFor(error: unknown, fallbackOperation: CheckpointStampFsOperation): CheckpointStampWriteError | null;
-export declare function isCheckpointStampWriteError(error: unknown): boolean;
-/** Value-free report context for the Windows checkpoint stamp write boundary. */
-export declare function checkpointStampWriteCaptureContext(error: unknown): CheckpointStampWriteCaptureContext | null;
-/** User-facing text stays actionable without including the HQ or home path. */
-export declare function checkpointStampWriteMessage(error: unknown): string | null;
-export {};
-//# sourceMappingURL=checkpoint-stamp-write-error.d.ts.map

package/dist/utils/checkpoint-stamp-write-error.js

@@ -1,99 +0,0 @@
-const CHECKPOINT_STAMP_ERRNO_CODES = new Set([
-    "EBUSY",
-    "EPERM",
-    "UNKNOWN",
-]);
-const CHECKPOINT_STAMP_FS_OPERATIONS = new Set([
-    "open",
-    "write",
-    "rename",
-    "unlink",
-]);
-function errorLike(value) {
-    return value !== null && typeof value === "object" ? value : null;
-}
-function isCheckpointStampErrnoCode(value) {
-    return typeof value === "string" && CHECKPOINT_STAMP_ERRNO_CODES.has(value);
-}
-function isCheckpointStampFsOperation(value) {
-    return (typeof value === "string" &&
-        CHECKPOINT_STAMP_FS_OPERATIONS.has(value));
-}
-export class CheckpointStampWriteError extends Error {
-    name = "CheckpointStampWriteError";
-    code;
-    syscall;
-    checkpointStampWriteDiagnostics;
-    constructor(diagnostics, originalStack) {
-        super(`checkpoint stamp write failed during ${diagnostics.fs_op} (${diagnostics.errno_code})`);
-        this.code = diagnostics.errno_code;
-        this.syscall = diagnostics.fs_op;
-        this.checkpointStampWriteDiagnostics = diagnostics;
-        if (originalStack) {
-            const frames = originalStack.split("\n").slice(1);
-            if (frames.length > 0)
-                this.stack = `${this.name}: ${this.message}\n${frames.join("\n")}`;
-        }
-    }
-}
-/** Wrap only the captured Windows lock/error classes, keeping the original frames and dropping paths. */
-export function checkpointStampWriteErrorFor(error, fallbackOperation) {
-    const record = errorLike(error);
-    if (!record || !isCheckpointStampErrnoCode(record.code))
-        return null;
-    const fsOperation = isCheckpointStampFsOperation(record.syscall)
-        ? record.syscall
-        : fallbackOperation;
-    const diagnostics = {
-        fs_op: fsOperation,
-        target_kind: "checkpoint_stamp",
-        errno_code: record.code,
-        platform: "win32",
-    };
-    return new CheckpointStampWriteError(diagnostics, error instanceof Error ? error.stack : undefined);
-}
-function diagnosticsFor(error) {
-    const record = errorLike(error);
-    if (!record || record.name !== "CheckpointStampWriteError")
-        return null;
-    const diagnostics = error
-        .checkpointStampWriteDiagnostics;
-    if (diagnostics === null || typeof diagnostics !== "object")
-        return null;
-    const candidate = diagnostics;
-    if (!isCheckpointStampFsOperation(candidate.fs_op) ||
-        candidate.target_kind !== "checkpoint_stamp" ||
-        !isCheckpointStampErrnoCode(candidate.errno_code) ||
-        candidate.platform !== "win32") {
-        return null;
-    }
-    return {
-        fs_op: candidate.fs_op,
-        target_kind: "checkpoint_stamp",
-        errno_code: candidate.errno_code,
-        platform: "win32",
-    };
-}
-export function isCheckpointStampWriteError(error) {
-    return diagnosticsFor(error) !== null;
-}
-/** Value-free report context for the Windows checkpoint stamp write boundary. */
-export function checkpointStampWriteCaptureContext(error) {
-    const tags = diagnosticsFor(error);
-    if (!tags)
-        return null;
-    return {
-        // This is a grouping key. Keep it independent of installation paths.
-        fingerprint: ["fs-write-failed", tags.target_kind, tags.errno_code],
-        tags,
-    };
-}
-/** User-facing text stays actionable without including the HQ or home path. */
-export function checkpointStampWriteMessage(error) {
-    const diagnostics = diagnosticsFor(error);
-    if (!diagnostics)
-        return null;
-    return (`hq could not write a checkpoint state file (${diagnostics.errno_code} during ${diagnostics.fs_op}). ` +
-        "Check the checkpoint state folder and retry.");
-}
-//# sourceMappingURL=checkpoint-stamp-write-error.js.map

package/dist/utils/cli-network-lifecycle.d.ts

@@ -1,4 +0,0 @@
-export declare function isMonitorFastPathCommand(argv: readonly string[]): boolean;
-/** Skip process-wide network lifecycle work for hooks and detached monitor supervisors. */
-export declare function runGlobalNetworkLifecycle<T>(argv: readonly string[], operation: () => T): T | undefined;
-//# sourceMappingURL=cli-network-lifecycle.d.ts.map

package/dist/utils/cli-network-lifecycle.js

@@ -1,11 +0,0 @@
-const MONITOR_HIDDEN_NETWORK_BYPASS = new Set(["drain", "wait", "enabled", "_run"]);
-export function isMonitorFastPathCommand(argv) {
-    return argv[2] === "monitor" && MONITOR_HIDDEN_NETWORK_BYPASS.has(argv[3] ?? "");
-}
-/** Skip process-wide network lifecycle work for hooks and detached monitor supervisors. */
-export function runGlobalNetworkLifecycle(argv, operation) {
-    if (isMonitorFastPathCommand(argv))
-        return undefined;
-    return operation();
-}
-//# sourceMappingURL=cli-network-lifecycle.js.map

package/dist/utils/cognito-refresh-sentry.d.ts

@@ -1,3 +0,0 @@
-/** Capture only fixed, aggregatable auth diagnostics; never attach tokens or identity. */
-export declare function reportNoninteractivePersonRefreshRejection(error: unknown): Promise<void>;
-//# sourceMappingURL=cognito-refresh-sentry.d.ts.map

package/dist/utils/cognito-refresh-sentry.js

@@ -1,49 +0,0 @@
-import { CLI_VERSION } from "../cli-version.js";
-import { CognitoRefreshError } from "@indigoai-us/hq-cloud";
-/** Capture only fixed, aggregatable auth diagnostics; never attach tokens or identity. */
-export async function reportNoninteractivePersonRefreshRejection(error) {
-    try {
-        // Keep the Sentry SDK and its generated DSN out of ordinary session utility
-        // imports. The reporter is reached only after a definitive noninteractive
-        // refresh rejection, so load the Sentry boundary only on that path.
-        const { Sentry } = await import("../sentry.js");
-        const statusCode = error instanceof CognitoRefreshError ? error.statusCode : undefined;
-        const rejectionKind = error instanceof CognitoRefreshError
-            ? "cognito_refresh_rejection"
-            : "classified_auth_error";
-        Sentry.withScope((scope) => {
-            scope.setUser(null);
-            scope.clearBreadcrumbs();
-            scope.addBreadcrumb({
-                category: "hq.auth",
-                message: "Noninteractive person refresh was attempted for an expiring session",
-                level: "info",
-                data: { interactive: false },
-            });
-            scope.addBreadcrumb({
-                category: "hq.auth",
-                message: "Refresh rejection had no fresh same-principal cache generation",
-                level: "error",
-                data: {
-                    rejection_kind: rejectionKind,
-                    ...(Number.isInteger(statusCode) ? { status_code: statusCode } : {}),
-                },
-            });
-            scope.setLevel("error");
-            scope.setFingerprint(["hq-cli", "person-refresh-rejected"]);
-            scope.setTag("component", "person-session-refresh");
-            scope.setTag("auth.rejection_kind", rejectionKind);
-            scope.setTag("auth.fresh_cache_generation_found", "false");
-            scope.setTag("platform", process.platform);
-            scope.setTag("cli_version", CLI_VERSION);
-            if (Number.isInteger(statusCode) && statusCode >= 400 && statusCode <= 599) {
-                scope.setTag("auth.status_code", String(statusCode));
-            }
-            Sentry.captureMessage("Noninteractive HQ person session refresh rejected");
-        });
-    }
-    catch {
-        // Telemetry is best-effort: it must never prevent session invalidation or auth fallback.
-    }
-}
-//# sourceMappingURL=cognito-refresh-sentry.js.map

package/dist/utils/console-origin.d.ts

@@ -1,9 +0,0 @@
-/**
- * The console that fronts the control plane this CLI is pointed at.
- *
- * A handoff must land on the console for the same backend. When an override is
- * active, derive its console from the control-plane host instead of assuming
- * production. `HQ_CONSOLE_URL` remains an explicit override.
- */
-export declare function consoleOrigin(vaultApiUrl?: string): string | undefined;
-//# sourceMappingURL=console-origin.d.ts.map

package/dist/utils/console-origin.js

@@ -1,28 +0,0 @@
-import { DEFAULT_VAULT_API_URL } from "./cognito-session.js";
-const PRODUCTION_CONSOLE_ORIGIN = "https://hq.computer";
-const PRODUCTION_VAULT_API_HOST = "hqapi.hq.computer";
-/**
- * The console that fronts the control plane this CLI is pointed at.
- *
- * A handoff must land on the console for the same backend. When an override is
- * active, derive its console from the control-plane host instead of assuming
- * production. `HQ_CONSOLE_URL` remains an explicit override.
- */
-export function consoleOrigin(vaultApiUrl = DEFAULT_VAULT_API_URL) {
-    const explicit = process.env.HQ_CONSOLE_URL?.trim();
-    if (explicit)
-        return explicit.replace(/\/+$/, "");
-    let api;
-    try {
-        api = new URL(vaultApiUrl);
-    }
-    catch {
-        return undefined;
-    }
-    if (api.host === PRODUCTION_VAULT_API_HOST)
-        return PRODUCTION_CONSOLE_ORIGIN;
-    if (!api.hostname.startsWith("hqapi."))
-        return undefined;
-    return `${api.protocol}//${api.host.slice("hqapi.".length)}`;
-}
-//# sourceMappingURL=console-origin.js.map

package/dist/utils/core-eval-trigger.d.ts

@@ -1,4 +0,0 @@
-/** Return shell-compatible 0/1/2: true, false, or malformed. */
-export declare function evaluateTrigger(expr: string, facts?: string): number;
-export declare function checkTriggerExpressions(stdin: string): string;
-//# sourceMappingURL=core-eval-trigger.d.ts.map

package/dist/utils/core-eval-trigger.js

@@ -1,88 +0,0 @@
-/** Pure evaluator shared by the native command and migration helper. */
-function parseBooleanExpression(input) {
-    const expression = input;
-    if (/[^01&|!() \t]/.test(expression))
-        return { valid: false, value: false };
-    let position = 0;
-    let valid = true;
-    const skip = () => { while (expression[position] === " " || expression[position] === "\t")
-        position += 1; };
-    const atom = () => {
-        skip();
-        const char = expression[position];
-        if (char === "(") {
-            position += 1;
-            const value = parseOr();
-            skip();
-            if (expression[position] !== ")") {
-                valid = false;
-                return false;
-            }
-            position += 1;
-            return value;
-        }
-        if (char === "0" || char === "1") {
-            position += 1;
-            return char === "1";
-        }
-        valid = false;
-        return false;
-    };
-    const parseNot = () => {
-        skip();
-        if (expression[position] === "!") {
-            position += 1;
-            return !parseNot();
-        }
-        return atom();
-    };
-    const parseAnd = () => {
-        let value = parseNot();
-        skip();
-        while (valid && expression.slice(position, position + 2) === "&&") {
-            position += 2;
-            const rhs = parseNot();
-            value = value && rhs;
-            skip();
-        }
-        return value;
-    };
-    function parseOr() {
-        let value = parseAnd();
-        skip();
-        while (valid && expression.slice(position, position + 2) === "||") {
-            position += 2;
-            const rhs = parseAnd();
-            value = value || rhs;
-            skip();
-        }
-        return value;
-    }
-    const value = parseOr();
-    skip();
-    return { valid: valid && position === expression.length, value };
-}
-/** Return shell-compatible 0/1/2: true, false, or malformed. */
-export function evaluateTrigger(expr, facts = "") {
-    if (expr.replace(/[ \t]/g, "") === "")
-        return 2;
-    const have = new Set(facts.split(/[ ,]+/).filter(Boolean));
-    const substituted = expr.replace(/[A-Za-z0-9_./][A-Za-z0-9_./-]*/g, (token) => have.has(token.toLowerCase()) ? "1" : "0");
-    if (/[^01&|!() \t]/.test(substituted))
-        return 2;
-    const parsed = parseBooleanExpression(substituted);
-    if (!parsed.valid)
-        return 2;
-    return parsed.value ? 0 : 1;
-}
-export function checkTriggerExpressions(stdin) {
-    if (!stdin)
-        return "";
-    return stdin.split("\n").filter((line, index, all) => index < all.length - 1 || line !== "").map((line) => {
-        const tab = line.indexOf("\t");
-        const id = tab < 0 ? line : line.slice(0, tab);
-        const expr = tab < 0 ? "" : line.slice(tab + 1);
-        return `${id}\t${evaluateTrigger(expr, "") === 2 ? "malformed" : "ok"}\n`;
-    }).join("");
-}
-//# sourceMappingURL=core-eval-trigger.js.map

package/dist/utils/exclusive-lock.d.ts

@@ -1,32 +0,0 @@
-/**
- * Acquiring a lock file on a filesystem that may not do hard links.
- *
- * The refresh lock is a classic POSIX `link()` lock: write a candidate file,
- * hard-link it into place, and let EEXIST mean somebody else holds it. That
- * is atomic on a local disk and on NFS, and it is simply absent on CIFS/SMB
- * — Azure Files returns ENOTSUP for `link()` on every call, so a bot whose
- * agent home lives on such a share could never mint a token at all. Its
- * probe failed every line with:
- *
- *     ENOTSUP: operation not supported on socket, link
- *       '.../cognito-tokens.json.lock.candidate.48560...' -> '.../lock'
- *
- * An exclusive create (`open(..., O_EXCL)`) gives the same guarantee — the
- * server refuses the second creator — and works on those shares. So the link
- * is tried first, and a filesystem that says it cannot do links is remembered
- * and switched to the exclusive-create path for the rest of the process.
- *
- * Both paths fail with EEXIST when the lock is held, so contention, stale-
- * owner reclamation and release are unchanged for every caller.
- */
-/** Test seam: forget what we learned about which filesystems do links. */
-export declare function resetLinkSupportCache(): void;
-/**
- * Create `lockFile` exclusively, or throw EEXIST if it already exists.
- *
- * `candidate` is an already-written file holding the owner's pid; on a
- * link-capable filesystem it becomes the lock, and otherwise its contents
- * are written directly. Either way the lock ends up holding the same bytes.
- */
-export declare function acquireLockFileExclusively(candidate: string, lockFile: string, dirKey: string): void;
-//# sourceMappingURL=exclusive-lock.d.ts.map

package/dist/utils/exclusive-lock.js

@@ -1,75 +0,0 @@
-/**
- * Acquiring a lock file on a filesystem that may not do hard links.
- *
- * The refresh lock is a classic POSIX `link()` lock: write a candidate file,
- * hard-link it into place, and let EEXIST mean somebody else holds it. That
- * is atomic on a local disk and on NFS, and it is simply absent on CIFS/SMB
- * — Azure Files returns ENOTSUP for `link()` on every call, so a bot whose
- * agent home lives on such a share could never mint a token at all. Its
- * probe failed every line with:
- *
- *     ENOTSUP: operation not supported on socket, link
- *       '.../cognito-tokens.json.lock.candidate.48560...' -> '.../lock'
- *
- * An exclusive create (`open(..., O_EXCL)`) gives the same guarantee — the
- * server refuses the second creator — and works on those shares. So the link
- * is tried first, and a filesystem that says it cannot do links is remembered
- * and switched to the exclusive-create path for the rest of the process.
- *
- * Both paths fail with EEXIST when the lock is held, so contention, stale-
- * owner reclamation and release are unchanged for every caller.
- */
-import * as fs from "fs";
-/**
- * `link()` errnos that mean "this filesystem does not implement links"
- * rather than "the link failed". EEXIST is deliberately NOT here: that is
- * ordinary contention and the caller's own retry loop owns it.
- */
-const LINK_UNSUPPORTED_CODES = new Set([
-    "ENOTSUP",
-    "EOPNOTSUPP",
-    "EPERM",
-    "EXDEV",
-    "EACCES",
-]);
-/**
- * Per-process, per-directory memory of a filesystem that cannot hard-link,
- * so the cost is one failed call rather than one per acquisition.
- */
-const linkUnsupportedDirs = new Set();
-/** Test seam: forget what we learned about which filesystems do links. */
-export function resetLinkSupportCache() {
-    linkUnsupportedDirs.clear();
-}
-/**
- * Create `lockFile` exclusively, or throw EEXIST if it already exists.
- *
- * `candidate` is an already-written file holding the owner's pid; on a
- * link-capable filesystem it becomes the lock, and otherwise its contents
- * are written directly. Either way the lock ends up holding the same bytes.
- */
-export function acquireLockFileExclusively(candidate, lockFile, dirKey) {
-    if (!linkUnsupportedDirs.has(dirKey)) {
-        try {
-            fs.linkSync(candidate, lockFile);
-            return;
-        }
-        catch (error) {
-            const code = error.code ?? "";
-            // Contention is the caller's business, and an unrecognised failure is
-            // a real fault: neither one means "try the other strategy".
-            if (code === "EEXIST")
-                throw error;
-            if (!LINK_UNSUPPORTED_CODES.has(code))
-                throw error;
-            linkUnsupportedDirs.add(dirKey);
-        }
-    }
-    // O_EXCL: the create fails with EEXIST if anyone got there first, which is
-    // exactly the signal the link path produced.
-    fs.writeFileSync(lockFile, fs.readFileSync(candidate), {
-        flag: "wx",
-        mode: 0o600,
-    });
-}
-//# sourceMappingURL=exclusive-lock.js.map

package/dist/utils/fast-stream-errors.d.ts

@@ -1,12 +0,0 @@
-type ErrorEventStream = {
-    on: (event: "error", listener: (err: unknown) => void) => unknown;
-};
-export type FastStreamErrorDependencies = {
-    stdout: ErrorEventStream;
-    stderr: ErrorEventStream;
-    exit: (code: number) => void;
-};
-/** Match the full CLI's clean handling when a pipe consumer closes early. */
-export declare function installFastPathStreamErrorHandlers(deps?: FastStreamErrorDependencies): void;
-export {};
-//# sourceMappingURL=fast-stream-errors.d.ts.map

package/dist/utils/fast-stream-errors.js

@@ -1,18 +0,0 @@
-import { isEpipe } from "./epipe.js";
-/** Match the full CLI's clean handling when a pipe consumer closes early. */
-export function installFastPathStreamErrorHandlers(deps = {
-    stdout: process.stdout,
-    stderr: process.stderr,
-    exit: (code) => process.exit(code),
-}) {
-    const handle = (err) => {
-        if (isEpipe(err)) {
-            deps.exit(0);
-            return;
-        }
-        throw err;
-    };
-    deps.stdout.on("error", handle);
-    deps.stderr.on("error", handle);
-}
-//# sourceMappingURL=fast-stream-errors.js.map

package/dist/utils/files-browse-acl.d.ts

@@ -1,5 +0,0 @@
-/** ACL source values and their stable labels in the hq files browse table. */
-export type AclSource = "shared-with-you" | "creator" | "role-bypass" | "personal-vault" | "private-folder";
-export declare const ACL_SOURCE_DISPLAY_LABELS: Readonly<Record<AclSource, string>>;
-export declare function displayAclSource(source: AclSource): string;
-//# sourceMappingURL=files-browse-acl.d.ts.map

package/dist/utils/files-browse-acl.js

@@ -1,11 +0,0 @@
-export const ACL_SOURCE_DISPLAY_LABELS = {
-    "shared-with-you": "shared-with-you",
-    creator: "creator access — creator-only",
-    "role-bypass": "role-bypass",
-    "personal-vault": "personal-vault",
-    "private-folder": "private folder — children are creator-only",
-};
-export function displayAclSource(source) {
-    return ACL_SOURCE_DISPLAY_LABELS[source];
-}
-//# sourceMappingURL=files-browse-acl.js.map

package/dist/utils/hq-core-yaml.d.ts

@@ -1,10 +0,0 @@
-export declare function readHqVersion(hqRoot: string): string | null;
-export interface CatalogEntry {
-    source: string;
-    description?: string;
-    conditional?: string;
-    auto_install?: boolean;
-}
-/** Read recommended_packages from core.yaml (the curated content-pack catalog). */
-export declare function readRecommendedPackages(hqRoot: string): CatalogEntry[];
-//# sourceMappingURL=hq-core-yaml.d.ts.map

package/dist/utils/hq-core-yaml.js

@@ -1,40 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-import * as yaml from "js-yaml";
-/** Locate core.yaml: v14+ nests it under core/, older layouts at the root. */
-function coreYamlPath(hqRoot) {
-    const nested = path.join(hqRoot, "core", "core.yaml");
-    if (fs.existsSync(nested))
-        return nested;
-    const flat = path.join(hqRoot, "core.yaml");
-    if (fs.existsSync(flat))
-        return flat;
-    return null;
-}
-export function readHqVersion(hqRoot) {
-    const filePath = coreYamlPath(hqRoot);
-    if (!filePath)
-        return null;
-    try {
-        const config = yaml.load(fs.readFileSync(filePath, "utf-8"));
-        return config?.hqVersion ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-/** Read recommended_packages from core.yaml (the curated content-pack catalog). */
-export function readRecommendedPackages(hqRoot) {
-    const filePath = coreYamlPath(hqRoot);
-    if (!filePath)
-        return [];
-    try {
-        const config = yaml.load(fs.readFileSync(filePath, "utf-8"));
-        const list = config?.recommended_packages;
-        return Array.isArray(list) ? list : [];
-    }
-    catch {
-        return [];
-    }
-}
-//# sourceMappingURL=hq-core-yaml.js.map

package/dist/utils/hq-root-resolver.d.ts

@@ -1,13 +0,0 @@
-/** Lightweight HQ-root resolver shared by cloud commands and fast flag scope. */
-/**
- * Resolve the HQ tree root using the same precedence as the Cognito helpers:
- * explicit HQ_ROOT, nearest cwd root, installer records, known locations, then
- * the historical ~/hq fallback (or an error when requested).
- */
-export declare function resolveDefaultHqRoot(opts?: {
-    onMissing?: "throw" | "fallback";
-    env?: NodeJS.ProcessEnv;
-    cwd?: string;
-    home?: string;
-}): string;
-//# sourceMappingURL=hq-root-resolver.d.ts.map