@indigoai-us/hq-cli 5.313.0 → 5.314.0

package/dist/lib/work-context/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Work Context reconciliation package (consumable by hq-cli).
+ * Contract (US-001) + reconcile / outbox / device default (US-007A)
+ * + organize / project resolution (US-007B)
+ * + cross-company correct / migrate (US-017B).
+ */
+export * from "./contract.js";
+export * from "./errors.js";
+export * from "./paths.js";
+export * from "./atomic.js";
+export * from "./config.js";
+export * from "./state.js";
+export * from "./outbox.js";
+export * from "./company.js";
+export * from "./project.js";
+export { decisionFromCandidates, digestOrganizePayload, formatOrganizeList, prepareOrganizeDecision, settleOrganizeAskWithoutBind, stableDecisionId, stableOrganizeOperationId, submitOrganizeDecision, } from "./organize.js";
+export type { CandidatesResponse, FetchCandidatesFn, OrganizeCandidate, OrganizeListResult, OrganizeReceipt, OrganizeSubmitDecision, OrganizeSubmitResult, PostOrganizeFn, } from "./organize.js";
+export { digestMigratePayload, formatMigrateConfirmation, stableMigrateOperationId, submitSessionMigration, } from "./migrate.js";
+export type { MigrateDestination, MigrateReceipt, MigrateSubmitResult, PostMigrateFn, } from "./migrate.js";
+export { deriveRemoteOwnerSlug, deriveRepoIdentityKey, findWorkTreeRoot, matchCompanySlugForRepo, normalizeRemoteOwnerName, } from "./repo-remote.js";
+export { matchMembershipAnswer, promptRepoCompany, } from "./repo-prompt.js";
+export type { RepoPromptCompany, RepoPromptDeps, RepoPromptOutcome, RepoPromptSkipReason, } from "./repo-prompt.js";
+export { loadObservationFromFile, markUntracked, parseObservationJson, reconcileObservation, } from "./reconcile.js";
+export type { ReconcileDeps, ReconcileObservation, ReconcileOutcome, } from "./reconcile.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/work-context/index.js

@@ -0,0 +1,21 @@
+/**
+ * Work Context reconciliation package (consumable by hq-cli).
+ * Contract (US-001) + reconcile / outbox / device default (US-007A)
+ * + organize / project resolution (US-007B)
+ * + cross-company correct / migrate (US-017B).
+ */
+export * from "./contract.js";
+export * from "./errors.js";
+export * from "./paths.js";
+export * from "./atomic.js";
+export * from "./config.js";
+export * from "./state.js";
+export * from "./outbox.js";
+export * from "./company.js";
+export * from "./project.js";
+export { decisionFromCandidates, digestOrganizePayload, formatOrganizeList, prepareOrganizeDecision, settleOrganizeAskWithoutBind, stableDecisionId, stableOrganizeOperationId, submitOrganizeDecision, } from "./organize.js";
+export { digestMigratePayload, formatMigrateConfirmation, stableMigrateOperationId, submitSessionMigration, } from "./migrate.js";
+export { deriveRemoteOwnerSlug, deriveRepoIdentityKey, findWorkTreeRoot, matchCompanySlugForRepo, normalizeRemoteOwnerName, } from "./repo-remote.js";
+export { matchMembershipAnswer, promptRepoCompany, } from "./repo-prompt.js";
+export { loadObservationFromFile, markUntracked, parseObservationJson, reconcileObservation, } from "./reconcile.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/work-context/outbox.d.ts

@@ -5,7 +5,7 @@
 import type { DeliveryState } from "./contract.js";
 import { WORK_CONTEXT_CONTRACT_VERSION } from "./contract.js";
 /** Fields allowed on a durable outbox operation (privacy allowlist). */
-export declare const OUTBOX_ALLOWLIST: readonly ["contractVersion", "operationId", "clientOperationId", "sessionId", "harness", "companyUid", "companySlug", "projectId", "taskId", "companyConfidence", "kind", "digest", "delivery", "createdAt", "updatedAt", "attemptCount", "lastErrorCode", "lastErrorHttpStatus", "lastServerErrorCode", "receiptId", "destinationCompanyUid", "destinationCompanySlug", "nextAttemptAt"];
+export declare const OUTBOX_ALLOWLIST: readonly ["contractVersion", "operationId", "clientOperationId", "sessionId", "harness", "companyUid", "companySlug", "projectId", "taskId", "kind", "digest", "delivery", "createdAt", "updatedAt", "attemptCount", "lastErrorCode", "receiptId", "destinationCompanyUid", "destinationCompanySlug", "nextAttemptAt"];
 /** Base delay for outbox retry backoff (attempt 1 → 30s). */
 export declare const OUTBOX_RETRY_BASE_MS = 30000;
 /** Cap for outbox retry backoff (6 hours). */
@@ -25,8 +25,6 @@ export interface OutboxOperation {
     companySlug?: string;
     projectId?: string;
     taskId?: string;
-    /** Durable provenance for weak device-default bindings. */
-    companyConfidence?: "device_default";
     kind: OutboxKind;
     digest: string;
     delivery: DeliveryState;
@@ -34,8 +32,6 @@ export interface OutboxOperation {
     updatedAt: string;
     attemptCount: number;
     lastErrorCode?: string;
-    lastErrorHttpStatus?: number;
-    lastServerErrorCode?: string;
     receiptId?: string;
     /** Destination company for kind=migrate (source is companyUid). */
     destinationCompanyUid?: string;
@@ -51,7 +47,6 @@ export interface OutboxEnqueueInput {
     companySlug?: string;
     projectId?: string;
     taskId?: string;
-    companyConfidence?: "device_default";
     kind?: OutboxKind;
     destinationCompanyUid?: string;
     destinationCompanySlug?: string;
@@ -67,7 +62,6 @@ export declare function digestOperation(parts: {
     companySlug?: string;
     projectId?: string;
     taskId?: string;
-    companyConfidence?: "device_default";
     kind: OutboxKind;
     destinationCompanyUid?: string;
     destinationCompanySlug?: string;
@@ -82,21 +76,8 @@ export declare function enqueueOutbox(input: OutboxEnqueueInput, root: string):
 export declare function readOutboxOperation(operationId: string, root: string): OutboxOperation | null;
 export declare function updateOutboxOperation(op: OutboxOperation, root: string): void;
 export declare function markOutboxAcked(operationId: string, root: string, receiptId: string, now?: () => Date): OutboxOperation | null;
-/**
- * Write server-acknowledged register scope into the session projection.
- * This closes the outbox → emitter handoff for both direct reconciliation and
- * daemon replay. Non-register or incomplete legacy operations are ignored.
- */
-export declare function writeAckedRegisterState(op: OutboxOperation, root: string, receiptId: string, now?: () => Date): void;
-/** Repair older unresolved session projections from acknowledged registrations. */
-export declare function repairAckedRegisterStates(root: string, sessionIds?: ReadonlySet<string>, now?: () => Date): number;
-export declare function markOutboxQueued(operationId: string, root: string, errorCode: string, now?: () => Date, random?: () => number, details?: OutboxErrorDetails): OutboxOperation | null;
-export declare function markOutboxQuarantined(operationId: string, root: string, errorCode: string, now?: () => Date, details?: OutboxErrorDetails): OutboxOperation | null;
-export interface OutboxErrorDetails {
-    httpStatus?: number;
-    serverCode?: string;
-}
-export declare function sanitizeOutboxErrorDetails(details?: OutboxErrorDetails): OutboxErrorDetails;
+export declare function markOutboxQueued(operationId: string, root: string, errorCode: string, now?: () => Date, random?: () => number): OutboxOperation | null;
+export declare function markOutboxQuarantined(operationId: string, root: string, errorCode: string, now?: () => Date): OutboxOperation | null;
 /**
  * Requeue quarantined outbox operations so the daemon's replay picks them up
  * again. Quarantine is otherwise terminal: after the work-mesh-live gap 10 fix
@@ -125,19 +106,16 @@ export interface OutboxStats {
     quarantined: number;
     queued: number;
     acked: number;
-    lastQuarantineReason: string | null;
-    lastQuarantineHttpStatus: number | null;
-    lastQuarantineServerCode: string | null;
 }
 export declare function outboxStats(root: string): OutboxStats;
 export type DeliverFn = (op: OutboxOperation) => Promise<{
     ok: true;
     receiptId: string;
-} | ({
+} | {
     ok: false;
     retryable: boolean;
     code: string;
-} & OutboxErrorDetails)>;
+}>;
 /**
  * Replay queued (and recover lost-receipt) operations.
  * FIFO per sessionId; bounded parallelism across sessions.

package/dist/lib/work-context/outbox.js

@@ -8,8 +8,6 @@ import * as path from "node:path";
 import { WORK_CONTEXT_CONTRACT_VERSION } from "./contract.js";
 import { atomicWriteJson, ensureOwnerDir } from "./atomic.js";
 import { NotTrackingError } from "./errors.js";
-import { isWorkSessionDenialCode } from "../mesh/denial-codes.js";
-import { readSessionState, stripRegisterReceiptEpisodes, updateSessionState, writeAcknowledgedRegisterBinding, } from "./state.js";
 import { isSafeWorkContextSegment, workContextOutboxDir, workContextOutboxPath, } from "./paths.js";
 /** Fields allowed on a durable outbox operation (privacy allowlist). */
 export const OUTBOX_ALLOWLIST = [
@@ -22,7 +20,6 @@ export const OUTBOX_ALLOWLIST = [
     "companySlug",
     "projectId",
     "taskId",
-    "companyConfidence",
     "kind",
     "digest",
     "delivery",
@@ -30,8 +27,6 @@ export const OUTBOX_ALLOWLIST = [
     "updatedAt",
     "attemptCount",
     "lastErrorCode",
-    "lastErrorHttpStatus",
-    "lastServerErrorCode",
     "receiptId",
     "destinationCompanyUid",
     "destinationCompanySlug",
@@ -100,15 +95,8 @@ function projectOutbox(op) {
         out.projectId = op.projectId;
     if (op.taskId)
         out.taskId = op.taskId;
-    if (op.companyConfidence)
-        out.companyConfidence = op.companyConfidence;
     if (op.lastErrorCode)
         out.lastErrorCode = op.lastErrorCode;
-    if (op.lastErrorHttpStatus !== undefined) {
-        out.lastErrorHttpStatus = op.lastErrorHttpStatus;
-    }
-    if (op.lastServerErrorCode)
-        out.lastServerErrorCode = op.lastServerErrorCode;
     if (op.receiptId)
         out.receiptId = op.receiptId;
     if (op.destinationCompanyUid) {
@@ -154,7 +142,6 @@ export function enqueueOutbox(input, root) {
         companySlug: input.companySlug,
         projectId: input.projectId,
         taskId: input.taskId,
-        companyConfidence: input.companyConfidence,
         kind,
         destinationCompanyUid: input.destinationCompanyUid,
         destinationCompanySlug: input.destinationCompanySlug,
@@ -184,7 +171,6 @@ export function enqueueOutbox(input, root) {
         companySlug: input.companySlug,
         projectId: input.projectId,
         taskId: input.taskId,
-        companyConfidence: input.companyConfidence,
         kind,
         digest,
         delivery: "queued",
@@ -272,86 +258,12 @@ export function markOutboxAcked(operationId, root, receiptId, now = () => new Da
     updateOutboxOperation(op, root);
     return op;
 }
-/**
- * Write server-acknowledged register scope into the session projection.
- * This closes the outbox → emitter handoff for both direct reconciliation and
- * daemon replay. Non-register or incomplete legacy operations are ignored.
- */
-export function writeAckedRegisterState(op, root, receiptId, now = () => new Date()) {
-    if (op.kind !== "register" || !op.companyUid)
-        return;
-    writeAcknowledgedRegisterBinding({
-        kind: "register",
-        sessionId: op.sessionId,
-        companyUid: op.companyUid,
-        companySlug: op.companySlug,
-        projectId: op.projectId,
-        taskId: op.taskId,
-        receiptId,
-    }, root, now);
-}
-/** Repair older unresolved session projections from acknowledged registrations. */
-export function repairAckedRegisterStates(root, sessionIds, now = () => new Date()) {
-    let repaired = 0;
-    const operations = listOutboxOperations(root);
-    // A stored bindingEpisodeId that is a register receipt makes the server drop
-    // every batch. Clear it even when the register operation that produced it is
-    // no longer in the outbox: the id shape identifies it. This runs for every
-    // requested session, whatever its company or tracking status.
-    const receiptsBySession = new Map();
-    for (const op of operations) {
-        if (op.kind !== "register" || !op.receiptId)
-            continue;
-        const receipts = receiptsBySession.get(op.sessionId) ?? [];
-        receipts.push(op.receiptId);
-        receiptsBySession.set(op.sessionId, receipts);
-    }
-    for (const sessionId of sessionIds ?? receiptsBySession.keys()) {
-        if (!isSafeWorkContextSegment(sessionId))
-            continue;
-        const known = receiptsBySession.get(sessionId) ?? [];
-        // Take the lock only for a session that needs the repair.
-        const observed = readSessionState(sessionId, root);
-        if (!observed || stripRegisterReceiptEpisodes(observed, known) === observed)
-            continue;
-        updateSessionState(sessionId, root, (current) => {
-            if (!current)
-                return null;
-            const next = stripRegisterReceiptEpisodes(current, known);
-            return next === current ? null : next;
-        });
-    }
-    for (const op of operations) {
-        if (op.delivery !== "acked" ||
-            !op.receiptId ||
-            op.kind !== "register" ||
-            !op.companyUid ||
-            (sessionIds && !sessionIds.has(op.sessionId))) {
-            continue;
-        }
-        const before = readSessionState(op.sessionId, root);
-        const after = writeAcknowledgedRegisterBinding({
-            kind: "register",
-            sessionId: op.sessionId,
-            companyUid: op.companyUid,
-            companySlug: op.companySlug,
-            projectId: op.projectId,
-            taskId: op.taskId,
-            receiptId: op.receiptId,
-        }, root, now);
-        if (after && (before?.contextStatus === "unresolved" || !before?.companyUid)) {
-            repaired += 1;
-        }
-    }
-    return repaired;
-}
-export function markOutboxQueued(operationId, root, errorCode, now = () => new Date(), random = Math.random, details) {
+export function markOutboxQueued(operationId, root, errorCode, now = () => new Date(), random = Math.random) {
     const op = readOutboxOperation(operationId, root);
     if (!op)
         return null;
     op.delivery = "queued";
     op.lastErrorCode = errorCode;
-    applyOutboxErrorDetails(op, details);
     op.attemptCount += 1;
     const at = now();
     op.updatedAt = at.toISOString();
@@ -360,40 +272,17 @@ export function markOutboxQueued(operationId, root, errorCode, now = () => new D
     updateOutboxOperation(op, root);
     return op;
 }
-export function markOutboxQuarantined(operationId, root, errorCode, now = () => new Date(), details) {
+export function markOutboxQuarantined(operationId, root, errorCode, now = () => new Date()) {
     const op = readOutboxOperation(operationId, root);
     if (!op)
         return null;
     op.delivery = "quarantined";
     op.lastErrorCode = errorCode;
-    applyOutboxErrorDetails(op, details);
     op.attemptCount += 1;
     op.updatedAt = now().toISOString();
     updateOutboxOperation(op, root);
     return op;
 }
-function applyOutboxErrorDetails(op, details) {
-    delete op.lastErrorHttpStatus;
-    delete op.lastServerErrorCode;
-    const safe = sanitizeOutboxErrorDetails(details);
-    if (safe.httpStatus !== undefined)
-        op.lastErrorHttpStatus = safe.httpStatus;
-    if (safe.serverCode !== undefined)
-        op.lastServerErrorCode = safe.serverCode;
-}
-export function sanitizeOutboxErrorDetails(details) {
-    const safe = {};
-    if (details?.httpStatus !== undefined &&
-        Number.isInteger(details.httpStatus) &&
-        details.httpStatus >= 100 &&
-        details.httpStatus <= 599) {
-        safe.httpStatus = details.httpStatus;
-    }
-    if (isWorkSessionDenialCode(details?.serverCode)) {
-        safe.serverCode = details.serverCode;
-    }
-    return safe;
-}
 /**
  * Requeue quarantined outbox operations so the daemon's replay picks them up
  * again. Quarantine is otherwise terminal: after the work-mesh-live gap 10 fix
@@ -421,8 +310,6 @@ export function requeueQuarantinedOutbox(root, opts = {}) {
         op.delivery = "queued";
         op.attemptCount = 0;
         op.lastErrorCode = undefined;
-        op.lastErrorHttpStatus = undefined;
-        op.lastServerErrorCode = undefined;
         op.nextAttemptAt = undefined;
         op.updatedAt = now().toISOString();
         updateOutboxOperation(op, root);
@@ -492,26 +379,11 @@ export function listOutboxOperations(root, deps = {}) {
 }
 export function outboxStats(root) {
     const ops = listOutboxOperations(root);
-    const quarantinedOps = ops.filter((o) => o.delivery === "quarantined");
-    const latestQuarantine = quarantinedOps.reduce((latest, op) => !latest || op.updatedAt > latest.updatedAt ||
-        (op.updatedAt === latest.updatedAt && op.operationId > latest.operationId)
-        ? op
-        : latest, null);
     return {
         depth: ops.filter((o) => o.delivery === "queued").length,
-        quarantined: quarantinedOps.length,
+        quarantined: ops.filter((o) => o.delivery === "quarantined").length,
         queued: ops.filter((o) => o.delivery === "queued").length,
         acked: ops.filter((o) => o.delivery === "acked").length,
-        lastQuarantineReason: latestQuarantine?.lastErrorCode ?? null,
-        lastQuarantineHttpStatus: latestQuarantine &&
-            Number.isInteger(latestQuarantine.lastErrorHttpStatus) &&
-            latestQuarantine.lastErrorHttpStatus >= 100 &&
-            latestQuarantine.lastErrorHttpStatus <= 599
-            ? latestQuarantine.lastErrorHttpStatus
-            : null,
-        lastQuarantineServerCode: isWorkSessionDenialCode(latestQuarantine?.lastServerErrorCode)
-            ? latestQuarantine.lastServerErrorCode
-            : null,
     };
 }
 function isOutboxDue(op, nowIso) {
@@ -589,23 +461,22 @@ export async function replayOutbox(root, deliver, opts = {}) {
             const result = await deliver(op);
             if (result.ok) {
                 markOutboxAcked(op.operationId, root, result.receiptId, now);
-                writeAckedRegisterState(op, root, result.receiptId, now);
                 delivered += 1;
             }
             else if (result.retryable) {
                 if (op.attemptCount + 1 >= OUTBOX_MAX_ATTEMPTS) {
-                    markOutboxQuarantined(op.operationId, root, `${result.code}_MAX_ATTEMPTS`, now, result);
+                    markOutboxQuarantined(op.operationId, root, `${result.code}_MAX_ATTEMPTS`, now);
                     quarantined += 1;
                 }
                 else {
-                    markOutboxQueued(op.operationId, root, result.code, now, random, result);
+                    markOutboxQueued(op.operationId, root, result.code, now, random);
                     queued += 1;
                 }
                 // Stop this session's FIFO on transient failure.
                 break;
             }
             else {
-                markOutboxQuarantined(op.operationId, root, result.code, now, result);
+                markOutboxQuarantined(op.operationId, root, result.code, now);
                 quarantined += 1;
                 break;
             }

package/dist/lib/work-context/reconcile.d.ts

@@ -39,8 +39,6 @@ export interface ReconcileObservation {
     source?: "hooks" | "transcript";
     /** Optional turn signal for the 10-minute ask threshold (US-007B). */
     hasTurn?: boolean;
-    /** Hook name when the caller is a prompt submit. Session start omits this. */
-    hookEvent?: string;
     toolWrites?: number;
     /** Prohibited content may appear on the wire-in observation; must be stripped. */
     prompt?: unknown;
@@ -54,10 +52,6 @@ export interface ReconcileDeps {
     root: string;
     env?: NodeJS.ProcessEnv;
     now?: () => Date;
-    /** Used only by explicit historical repair; ordinary reconciliation keeps defaults enabled. */
-    allowDeviceDefault?: boolean;
-    /** Mark explicit historical default repair as lower-confidence local evidence. */
-    deviceDefaultConfidence?: boolean;
     /** Network deliverer; only called after outbox write. */
     deliver?: DeliverFn;
     /** Skip network even when company is resolved (local unit tests). */
@@ -71,15 +65,6 @@ export interface ReconcileDeps {
      * companyUid when local resolution only yielded a slug. Injectable for tests.
      */
     validateMembership?: (slug: string) => Promise<MembershipValidationResult> | MembershipValidationResult;
-    /**
-     * Register a Board and PUT the local PRD. Called only when online and the
-     * exact slug already has a local project folder.
-     */
-    ensureProjectBoard?: (input: {
-        companyUid: string;
-        projectId: string;
-        prdPath: string;
-    }) => Promise<void>;
 }
 export interface ReconcileOutcome {
     result: ContextResult;