@indigoai-us/hq-cli 5.314.0 → 5.316.0

package/dist/commands/company-rename-flag.d.ts

@@ -0,0 +1,4 @@
+export declare const CLI_COMPANY_RENAME_FLAG = "cli.company-rename";
+/** Company display-name updates stay unavailable until hq-flags enables them. */
+export declare function companyRenameEnabled(): boolean;
+//# sourceMappingURL=company-rename-flag.d.ts.map

package/dist/commands/company-rename-flag.js

@@ -0,0 +1,7 @@
+import { resolveProcessFlagGate } from "../lib/flag-registry.js";
+export const CLI_COMPANY_RENAME_FLAG = "cli.company-rename";
+/** Company display-name updates stay unavailable until hq-flags enables them. */
+export function companyRenameEnabled() {
+    return resolveProcessFlagGate(CLI_COMPANY_RENAME_FLAG, { fallback: false }, () => false);
+}
+//# sourceMappingURL=company-rename-flag.js.map

package/dist/commands/company-rename.d.ts

@@ -0,0 +1,4 @@
+import { Command } from "commander";
+/** Register `hq company rename <new name>` for the selected/current company. */
+export declare function registerCompanyRenameCommand(company: Command): void;
+//# sourceMappingURL=company-rename.d.ts.map

package/dist/commands/company-rename.js

@@ -0,0 +1,90 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import * as yaml from "js-yaml";
+import chalk from "chalk";
+import { resolveDefaultHqRoot } from "../utils/hq-root-resolver.js";
+import { parseUserYaml } from "../utils/user-yaml-error.js";
+import { ensureCognitoToken } from "../utils/cognito-session.js";
+import { getEntityUid, vaultApiFetch } from "../utils/vault-api.js";
+import { companyRenameEnabled } from "./company-rename-flag.js";
+function fail(message) {
+    console.error(chalk.red(message));
+    process.exit(1);
+    throw new Error(message);
+}
+function resolveManifestTarget(hqRoot, requestedSlug, companyUid) {
+    const manifestPath = path.join(hqRoot, "companies", "manifest.yaml");
+    if (!fs.existsSync(manifestPath)) {
+        throw new Error(`companies/manifest.yaml not found at ${manifestPath}`);
+    }
+    const raw = fs.readFileSync(manifestPath, "utf8");
+    const parsed = parseUserYaml(raw, manifestPath);
+    if (!parsed || !parsed.companies || typeof parsed.companies !== "object") {
+        throw new Error("companies/manifest.yaml is malformed — missing top-level .companies map");
+    }
+    const slug = requestedSlug ?? Object.entries(parsed.companies).find(([, entry]) => entry && typeof entry === "object" && entry.cloud_uid === companyUid)?.[0];
+    if (!slug) {
+        throw new Error(`No local company manifest entry is bound to ${companyUid}; run from the HQ root or pass --company <slug>.`);
+    }
+    const value = parsed.companies[slug];
+    if (!value || typeof value !== "object") {
+        throw new Error(`Company '${slug}' is not present in companies/manifest.yaml.`);
+    }
+    if (requestedSlug && value.cloud_uid !== companyUid) {
+        throw new Error(`Company '${slug}' has no matching cloud_uid in companies/manifest.yaml.`);
+    }
+    return { slug, path: manifestPath, document: parsed, entry: value };
+}
+function writeManifestName(target, name) {
+    target.entry.name = name;
+    target.document.companies[target.slug] = target.entry;
+    const mode = fs.statSync(target.path).mode;
+    const temporaryPath = `${target.path}.tmp.${process.pid}`;
+    fs.writeFileSync(temporaryPath, yaml.dump(target.document, { lineWidth: -1, noRefs: true }), { mode });
+    fs.chmodSync(temporaryPath, mode);
+    fs.renameSync(temporaryPath, target.path);
+}
+/** Register `hq company rename <new name>` for the selected/current company. */
+export function registerCompanyRenameCommand(company) {
+    company
+        .command("rename <new-name>")
+        .description("Rename a cloud-backed company display name")
+        .action(async (newName) => {
+        if (!companyRenameEnabled()) {
+            fail("Company rename is not available yet.");
+        }
+        const name = newName.trim();
+        if (!name)
+            fail("Company name cannot be empty.");
+        try {
+            const requestedSlug = company.opts().company;
+            const token = await ensureCognitoToken();
+            const companyUid = await getEntityUid(token, { companySlug: requestedSlug });
+            const hqRoot = resolveDefaultHqRoot({ onMissing: "throw" });
+            const manifestTarget = resolveManifestTarget(hqRoot, requestedSlug, companyUid);
+            const response = await vaultApiFetch({
+                token,
+                path: `/entity/${encodeURIComponent(companyUid)}`,
+                method: "PATCH",
+                body: { name },
+            });
+            if (!response.ok) {
+                if (response.status === 403) {
+                    fail("Only a company owner can rename this company.");
+                }
+                if (response.status === 404) {
+                    fail("Company not found in HQ Cloud.");
+                }
+                fail(`Could not rename company (HTTP ${response.status}).`);
+            }
+            writeManifestName(manifestTarget, name);
+            console.log(chalk.green(`Company renamed to ${name}.`));
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.startsWith("process.exit"))
+                throw error;
+            fail(error instanceof Error ? error.message : String(error));
+        }
+    });
+}
+//# sourceMappingURL=company-rename.js.map

package/dist/commands/company-transfer.d.ts

@@ -38,23 +38,15 @@ import { type ActiveMember } from "./members.js";
  * confirmation prompt behind an injectable seam so tests can drive it.
  */
 /** The four write transitions the server accepts. */
-export declare const TRANSFER_ACTIONS: readonly ["initiate", "accept", "decline", "cancel"];
-export type TransferAction = (typeof TRANSFER_ACTIONS)[number];
+type TransferAction = "initiate" | "accept" | "decline" | "cancel";
 /**
  * Legal `--initiator-role` values. `owner` is deliberately absent: a handover
  * where the outgoing owner keeps `owner` is not a handover. `remove` is the
  * ONLY value that takes them off the company, and it can only ever arrive from
  * an explicit flag.
  */
-export declare const INITIATOR_ROLE_VALUES: readonly ["admin", "member", "guest", "remove"];
+declare const INITIATOR_ROLE_VALUES: readonly ["admin", "member", "guest", "remove"];
 export type InitiatorRoleFlag = (typeof INITIATOR_ROLE_VALUES)[number];
-/**
- * What the SERVER falls back to when `initiatorRole` is absent. Mirrored here
- * only so the confirmation preview can tell the operator what will happen; the
- * CLI never puts this value on the wire, because sending it would defeat the
- * point of leaving the field absent.
- */
-export declare const DEFAULT_INITIATOR_ROLE = "admin";
 /** A response field's presence, kept separate from its value. */
 export interface WireRead<T = unknown> {
     present: boolean;
@@ -86,19 +78,6 @@ export interface TransferBodyParams {
     transferId?: string;
     reason?: string;
 }
-/**
- * The wire prefix that turns `POST /membership/role` into a transfer request.
- * Mirrors the server's `TRANSFER_ACTION_PREFIX` in `_ownership-transfer.ts`:
- * a body whose `action` starts with `transfer-` is a transfer; anything else
- * (including no `action` at all) is an ordinary role change.
- */
-export declare const TRANSFER_ACTION_PREFIX = "transfer-";
-/**
- * The query discriminator on `GET /membership/company/{companyUid}` that
- * selects the transfer surface instead of the member roster. Mirrors the
- * server's `TRANSFER_HISTORY_VIEW` (exact match on the server side).
- */
-export declare const TRANSFER_HISTORY_VIEW = "transfers";
 /**
  * Build the `POST /membership/role` transfer body. The CLI-side `action`
  * ("initiate" | …) is prefixed to the wire discriminator ("transfer-initiate"
@@ -127,7 +106,7 @@ export declare function describeInitiatorOutcome(role: InitiatorRoleFlag | undef
  */
 export declare function describeEffects(rawEffects: unknown): string[];
 /** Injectable yes/no confirmation seam (stubbed in tests). */
-export type ConfirmFn = (message: string) => Promise<boolean>;
+type ConfirmFn = (message: string) => Promise<boolean>;
 /**
  * The real prompt. Refuses (rather than assuming yes) when stdin is not a TTY,
  * so a transfer can never be initiated or accepted by a pipeline that simply
@@ -145,10 +124,6 @@ export declare function realConfirm(message: string): Promise<boolean>;
  * who is already an active member.
  */
 export declare function matchMemberTarget(members: ActiveMember[], target: string): ActiveMember | undefined;
-export declare function resolveTargetPersonUid(token: string, companyUid: string, target: string): Promise<{
-    personUid: string;
-    label: string;
-}>;
 export interface TransferDeps {
     confirm?: ConfirmFn;
 }
@@ -182,4 +157,5 @@ export interface RunTransferStatusParams {
 /** `hq company transfer status` — the pending nomination plus the audit trail. */
 export declare function runCompanyTransferStatus(params: RunTransferStatusParams): Promise<void>;
 export declare function registerCompanyTransferCommand(company: Command, deps?: TransferDeps): void;
+export {};
 //# sourceMappingURL=company-transfer.d.ts.map

package/dist/commands/company-transfer.js

@@ -3,57 +3,13 @@ import * as readline from "node:readline";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, getEntityUid } from "../utils/vault-api.js";
 import { listActiveMembers } from "./members.js";
-/**
- * `hq company transfer` — company ownership handover (client-service-pack
- * US-010). The server adds ZERO new API routes (vault-api-hq-prod sits at the
- * 600-route quota), so the CLI half multiplexes onto two EXISTING routes:
- *
- *   - WRITES ride `POST /membership/role` with a body discriminator
- *     `action: "transfer-initiate" | "transfer-accept" | "transfer-decline" |
- *     "transfer-cancel"`. The ordinary role payload has never carried an
- *     `action` field, so the shapes cannot collide.
- *   - The READ rides `GET /membership/company/{companyUid}?view=transfers`;
- *     without that exact `view` value the route returns the member roster as
- *     before.
- *
- * TWO-PARTY BY CONSTRUCTION. `initiate` NOMINATES; it does not transfer
- * anything. Ownership moves only when the nominee runs `accept`. The four write
- * transitions (initiate / accept / decline / cancel) all multiplex through one
- * POST with an explicit `action`, matching the server's route shape.
- *
- * ABSENT-FIELD DISCIPLINE (policy `hq-absent-field-never-means-constraining-value`).
- * This flow spans two repos that deploy in EITHER order, so absence is load
- * bearing in both directions and is handled in both directions here:
- *
- *   - REQUESTS: a flag the operator did not pass is OMITTED from the body — it
- *     is never defaulted to a value on the wire. `--initiator-role` unset sends
- *     no `initiatorRole` at all, so the server applies its own reversible
- *     "keep them as admin" default; the CLI can therefore never turn silence
- *     into `remove`. Same for `--transfer-id` (absent = "the pending one").
- *   - RESPONSES: fields are read with presence and value SEPARATELY
- *     ({@link readWireField}), because an OLDER server omits fields a newer CLI
- *     knows about. An absent `effects.initiator` renders as "not reported",
- *     never as "removed" — the CLI must not narrate a destructive outcome it
- *     was never actually told about.
- *
- * Conventions mirror `company.ts` / `files.ts`: ensureCognitoToken() →
- * getEntityUid() → vaultApiFetch() → error-check → chalk output, with the
- * confirmation prompt behind an injectable seam so tests can drive it.
- */
-/** The four write transitions the server accepts. */
-export const TRANSFER_ACTIONS = [
-    "initiate",
-    "accept",
-    "decline",
-    "cancel",
-];
 /**
  * Legal `--initiator-role` values. `owner` is deliberately absent: a handover
  * where the outgoing owner keeps `owner` is not a handover. `remove` is the
  * ONLY value that takes them off the company, and it can only ever arrive from
  * an explicit flag.
  */
-export const INITIATOR_ROLE_VALUES = [
+const INITIATOR_ROLE_VALUES = [
     "admin",
     "member",
     "guest",
@@ -65,7 +21,7 @@ export const INITIATOR_ROLE_VALUES = [
  * CLI never puts this value on the wire, because sending it would defeat the
  * point of leaving the field absent.
  */
-export const DEFAULT_INITIATOR_ROLE = "admin";
+const DEFAULT_INITIATOR_ROLE = "admin";
 /**
  * Read a field off a server response reporting presence and value SEPARATELY.
  *
@@ -120,13 +76,13 @@ export function parseInitiatorRole(raw) {
  * a body whose `action` starts with `transfer-` is a transfer; anything else
  * (including no `action` at all) is an ordinary role change.
  */
-export const TRANSFER_ACTION_PREFIX = "transfer-";
+const TRANSFER_ACTION_PREFIX = "transfer-";
 /**
  * The query discriminator on `GET /membership/company/{companyUid}` that
  * selects the transfer surface instead of the member roster. Mirrors the
  * server's `TRANSFER_HISTORY_VIEW` (exact match on the server side).
  */
-export const TRANSFER_HISTORY_VIEW = "transfers";
+const TRANSFER_HISTORY_VIEW = "transfers";
 /**
  * Build the `POST /membership/role` transfer body. The CLI-side `action`
  * ("initiate" | …) is prefixed to the wire discriminator ("transfer-initiate"
@@ -289,7 +245,7 @@ export function matchMemberTarget(members, target) {
         m.personName?.toLowerCase() === needle ||
         m.personUid?.toLowerCase() === needle);
 }
-export async function resolveTargetPersonUid(token, companyUid, target) {
+async function resolveTargetPersonUid(token, companyUid, target) {
     const trimmed = target.trim();
     if (PERSON_UID_PATTERN.test(trimmed) || AGENT_UID_PATTERN.test(trimmed)) {
         return { personUid: trimmed, label: trimmed };

package/dist/commands/company.js

@@ -2,6 +2,8 @@ import chalk from "chalk";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, getEntityUid } from "../utils/vault-api.js";
 import { registerCompanyTransferCommand } from "./company-transfer.js";
+import { registerCompanyRenameCommand } from "./company-rename.js";
+import { describeRefreshOutcome, refreshCheckpointGateSetting, } from "./core-checkpoint-gate-setting.js";
 /**
  * Parse a `--flag <true|false>` string into a boolean, or throw. Commander
  * passes the raw string; we validate strictly so a typo never silently writes
@@ -22,16 +24,19 @@ export function registerCompanyCommand(program) {
         .option("--company <slug>", "Company slug (resolves to companyUid)");
     // `hq company transfer …` — ownership handover (client-service-pack US-010).
     registerCompanyTransferCommand(company);
+    registerCompanyRenameCommand(company);
     const settings = company
         .command("settings")
         .description("Per-company settings (owner-only)");
     settings
         .command("set")
         .description("Set per-company settings (PUT /company-settings). Require at least one " +
-        "of --crm-enabled / --ontology-enabled / --accounting-enabled.")
+        "of --crm-enabled / --ontology-enabled / --accounting-enabled / " +
+        "--checkpoint-gate-enabled.")
         .option("--crm-enabled <true|false>", "Enable/disable the native CRM for this company")
         .option("--ontology-enabled <true|false>", "Enable/disable the ontology gardener for this company")
         .option("--accounting-enabled <true|false>", "Enable/disable the accounting pack for this company")
+        .option("--checkpoint-gate-enabled <true|false>", "Require (true) or stop requiring (false) a checkpoint before HQ sessions in this company end a turn")
         .action(async (opts) => {
         try {
             const companySlug = company.opts().company;
@@ -41,8 +46,9 @@ export function registerCompanyCommand(program) {
             }
             if (opts.crmEnabled === undefined &&
                 opts.ontologyEnabled === undefined &&
-                opts.accountingEnabled === undefined) {
-                console.error(chalk.red("Error: provide at least one of --crm-enabled / --ontology-enabled / --accounting-enabled."));
+                opts.accountingEnabled === undefined &&
+                opts.checkpointGateEnabled === undefined) {
+                console.error(chalk.red("Error: provide at least one of --crm-enabled / --ontology-enabled / --accounting-enabled / --checkpoint-gate-enabled."));
                 process.exit(1);
             }
             const body = {};
@@ -55,6 +61,9 @@ export function registerCompanyCommand(program) {
             if (opts.accountingEnabled !== undefined) {
                 body.accountingEnabled = parseBoolFlag(opts.accountingEnabled, "--accounting-enabled");
             }
+            if (opts.checkpointGateEnabled !== undefined) {
+                body.checkpointGateEnabled = parseBoolFlag(opts.checkpointGateEnabled, "--checkpoint-gate-enabled");
+            }
             const token = await ensureCognitoToken();
             const companyUid = await getEntityUid(token, { companySlug });
             body.companyUid = companyUid;
@@ -78,6 +87,62 @@ export function registerCompanyCommand(program) {
                 .map(([k, v]) => `${k}=${v}`)
                 .join(", ");
             console.log(chalk.green(`Company settings updated for ${companySlug}: ${applied}`));
+            if (body.checkpointGateEnabled !== undefined) {
+                // Update this machine's Stop gate cache now instead of waiting up to
+                // ten minutes. Other machines pick the change up on their next refresh.
+                try {
+                    const outcome = await refreshCheckpointGateSetting(companySlug);
+                    console.log(chalk.dim(describeRefreshOutcome(outcome)));
+                }
+                catch {
+                    // The setting is saved; the cache refreshes on the next Stop.
+                }
+            }
+        }
+        catch (err) {
+            console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    settings
+        .command("get")
+        .description("Show whether the checkpoint Stop gate is on for this company " +
+        "(GET /company-settings/checkpoint-gate; any member may read it).")
+        .option("--json", "Print the result as JSON")
+        .action(async (opts) => {
+        try {
+            const companySlug = company.opts().company;
+            if (!companySlug) {
+                console.error(chalk.red("Error: --company <slug> is required."));
+                process.exit(1);
+            }
+            const token = await ensureCognitoToken();
+            const companyUid = await getEntityUid(token, { companySlug });
+            const res = await vaultApiFetch({
+                token,
+                path: "/company-settings/checkpoint-gate",
+                query: { companyUid },
+            });
+            const resBody = (await res.json().catch(() => ({})));
+            if (!res.ok) {
+                if (res.status === 403) {
+                    console.error(chalk.red("Requires membership of this company to read its settings."));
+                    process.exit(1);
+                }
+                console.error(chalk.red(`Failed to read company settings: ${resBody.error ?? res.statusText}`));
+                process.exit(1);
+            }
+            const enabled = resBody.checkpointGateEnabled;
+            if (typeof enabled !== "boolean") {
+                console.error(chalk.red("Failed to read company settings: no checkpointGateEnabled in the response."));
+                process.exit(1);
+            }
+            if (opts.json) {
+                console.log(JSON.stringify({ company: companySlug, checkpointGateEnabled: enabled }));
+            }
+            else {
+                console.log(`checkpointGateEnabled=${enabled}`);
+            }
         }
         catch (err) {
             console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));

package/dist/commands/core-audit-log-native.d.ts

@@ -0,0 +1,9 @@
+import { type UtilityContext, type UtilityOutput } from "./core-native-utilities.js";
+import type { Command } from "commander";
+export declare const AUDIT_LOG_ASSET = "core/scripts/audit-log.sh";
+export declare const AUDIT_LOG_HELP = "audit-log.sh \u2014 HQ audit log utility\n\nSUBCOMMANDS:\n  append    Write one JSONL record to the audit log\n  query     Filter and display records\n  summary   Show aggregated table (project | worker | status)\n\nAPPEND FLAGS (--event and --project are required):\n  --timestamp    ISO8601 (auto-filled if omitted)\n  --event        task_started | phase_completed | task_completed | task_failed |\n                 project_started | project_completed |\n                 story_dispatched | story_completed | story_failed |\n                 pipeline_started | pipeline_completed | pipeline_paused |\n                 pipeline_failed | project_pr_created | project_reviewed |\n                 project_merged | project_deployed | project_canary_pass |\n                 project_canary_fail | gate_requested | gate_resolved\n  --company      Company slug (e.g. {company})\n  --project      Project slug (e.g. hq-observability)\n  --story-id     Story ID (e.g. US-001)\n  --worker       Worker name (e.g. backend-dev)\n  --model        Model name (e.g. sonnet)\n  --action       Short description of what happened\n  --files        Comma-separated file paths touched\n  --result       success | fail | skipped\n  --duration-ms  Wall-clock time in milliseconds (integer)\n  --error        Error message if result=fail\n  --session-id   Claude session/thread ID\n\nQUERY FLAGS:\n  --project      Filter by project slug\n  --company      Filter by company slug\n  --worker       Filter by worker name\n  --since        Filter by timestamp >= YYYY-MM-DD (or full ISO8601)\n  --event        Filter by event type\n\nEXAMPLES:\n  # Append a task_started event\n  core/scripts/audit-log.sh append \\\n    --event task_started \\\n    --project hq-observability \\\n    --company {company} \\\n    --story-id US-001 \\\n    --worker backend-dev \\\n    --model sonnet\n\n  # Query all failures for a project\n  core/scripts/audit-log.sh query --project hq-observability --event task_failed\n\n  # Query since a date\n  core/scripts/audit-log.sh query --since 2026-03-01\n\n  # Show summary table\n  core/scripts/audit-log.sh summary\n\nLOG FILE:\n  workspace/metrics/audit-log.jsonl\n";
+type AuditDeps = Pick<UtilityContext, "root" | "now">;
+export declare function runAuditLog(args: string[], deps: AuditDeps): UtilityOutput;
+export declare function registerCoreAuditLogNative(core: Command): void;
+export {};
+//# sourceMappingURL=core-audit-log-native.d.ts.map

package/dist/commands/core-audit-log-native.js

@@ -0,0 +1,257 @@
+/** In-process implementation of core/scripts/audit-log.sh. */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { serializeJqJson } from "../lib/core-utils/jq-json-serializer.js";
+import { resolveLiveRoot } from "../utils/hq-roots.js";
+import { bundledShellUnboundValue, registerNativeUtility, utilityError } from "./core-native-utilities.js";
+export const AUDIT_LOG_ASSET = "core/scripts/audit-log.sh";
+export const AUDIT_LOG_HELP = `audit-log.sh — HQ audit log utility
+
+SUBCOMMANDS:
+  append    Write one JSONL record to the audit log
+  query     Filter and display records
+  summary   Show aggregated table (project | worker | status)
+
+APPEND FLAGS (--event and --project are required):
+  --timestamp    ISO8601 (auto-filled if omitted)
+  --event        task_started | phase_completed | task_completed | task_failed |
+                 project_started | project_completed |
+                 story_dispatched | story_completed | story_failed |
+                 pipeline_started | pipeline_completed | pipeline_paused |
+                 pipeline_failed | project_pr_created | project_reviewed |
+                 project_merged | project_deployed | project_canary_pass |
+                 project_canary_fail | gate_requested | gate_resolved
+  --company      Company slug (e.g. {company})
+  --project      Project slug (e.g. hq-observability)
+  --story-id     Story ID (e.g. US-001)
+  --worker       Worker name (e.g. backend-dev)
+  --model        Model name (e.g. sonnet)
+  --action       Short description of what happened
+  --files        Comma-separated file paths touched
+  --result       success | fail | skipped
+  --duration-ms  Wall-clock time in milliseconds (integer)
+  --error        Error message if result=fail
+  --session-id   Claude session/thread ID
+
+QUERY FLAGS:
+  --project      Filter by project slug
+  --company      Filter by company slug
+  --worker       Filter by worker name
+  --since        Filter by timestamp >= YYYY-MM-DD (or full ISO8601)
+  --event        Filter by event type
+
+EXAMPLES:
+  # Append a task_started event
+  core/scripts/audit-log.sh append \\
+    --event task_started \\
+    --project hq-observability \\
+    --company {company} \\
+    --story-id US-001 \\
+    --worker backend-dev \\
+    --model sonnet
+
+  # Query all failures for a project
+  core/scripts/audit-log.sh query --project hq-observability --event task_failed
+
+  # Query since a date
+  core/scripts/audit-log.sh query --since 2026-03-01
+
+  # Show summary table
+  core/scripts/audit-log.sh summary
+
+LOG FILE:
+  workspace/metrics/audit-log.jsonl
+`;
+const EVENTS = "task_started phase_completed task_completed task_failed project_started project_completed story_dispatched story_completed story_failed pipeline_started pipeline_completed pipeline_paused pipeline_failed project_pr_created project_reviewed project_merged project_deployed project_canary_pass project_canary_fail gate_requested gate_resolved";
+const RESULTS = "success fail skipped";
+const APPEND_FLAGS = {
+    "--timestamp": "timestamp", "--event": "event", "--company": "company", "--project": "project",
+    "--story-id": "story_id", "--worker": "worker", "--model": "model", "--action": "action",
+    "--files": "files_touched", "--result": "result", "--duration-ms": "duration_ms", "--error": "error", "--session-id": "session_id",
+};
+const QUERY_FLAGS = {
+    "--project": "project", "--company": "company", "--worker": "worker", "--since": "timestamp", "--event": "event",
+};
+const APPEND_SHELL_LINES = {
+    "--timestamp": 76, "--event": 77, "--company": 78, "--project": 79, "--story-id": 80,
+    "--worker": 81, "--model": 82, "--action": 83, "--files": 84, "--result": 85,
+    "--duration-ms": 86, "--error": 87, "--session-id": 88,
+};
+const QUERY_SHELL_LINES = {
+    "--project": 171, "--company": 172, "--worker": 173, "--since": 174, "--event": 175,
+};
+const OMIT_EMPTY_FIELDS = ["company", "story_id", "worker", "model", "action", "result", "duration_ms", "error", "session_id"];
+function parseFlags(args, allowed) {
+    const values = {};
+    for (let i = 0; i < args.length; i += 1) {
+        const key = args[i];
+        if (!Object.hasOwn(allowed, key))
+            return { error: `ERROR: Unknown flag: ${key}` };
+        if (i + 1 >= args.length)
+            return { missingValue: key };
+        values[allowed[key]] = args[i + 1];
+        i += 1;
+    }
+    return { values };
+}
+function logPath(root) {
+    return path.join(root, "workspace/metrics/audit-log.jsonl");
+}
+function append(args, deps) {
+    const parsed = parseFlags(args, APPEND_FLAGS);
+    if (!parsed.values)
+        return parsed.missingValue
+            ? bundledShellUnboundValue(AUDIT_LOG_ASSET, APPEND_SHELL_LINES[parsed.missingValue])
+            : utilityError(parsed.error ?? "ERROR: invalid arguments");
+    const values = parsed.values;
+    const event = values.event ?? "";
+    const project = values.project ?? "";
+    if (!event)
+        return utilityError("ERROR: Missing required field: --event");
+    if (!project)
+        return utilityError("ERROR: Missing required field: --project");
+    if (!` ${EVENTS} `.includes(` ${event} `))
+        return utilityError(`ERROR: Invalid event '${event}'. Must be one of: ${EVENTS}`);
+    if (values.result && !` ${RESULTS} `.includes(` ${values.result} `))
+        return utilityError(`ERROR: Invalid result '${values.result}'. Must be one of: ${RESULTS}`);
+    if (values.duration_ms && !/^\d+$/.test(values.duration_ms))
+        return utilityError("ERROR: --duration-ms must be a non-negative integer");
+    const timestamp = values.timestamp || deps.now().toISOString().replace(/\.\d{3}Z$/, "Z");
+    const files = values.files_touched ? values.files_touched.split(",") : [];
+    const entry = {
+        timestamp,
+        event,
+        company: values.company || null,
+        project,
+        story_id: values.story_id || null,
+        worker: values.worker || null,
+        model: values.model || null,
+        action: values.action || null,
+        files_touched: files,
+        result: values.result || null,
+        duration_ms: values.duration_ms ? Number(values.duration_ms) : null,
+        error: values.error || null,
+        session_id: values.session_id || null,
+    };
+    for (const key of OMIT_EMPTY_FIELDS) {
+        if (entry[key] === null)
+            delete entry[key];
+    }
+    if (files.length === 0)
+        delete entry.files_touched;
+    const target = logPath(deps.root);
+    fs.mkdirSync(path.dirname(target), { recursive: true });
+    fs.appendFileSync(target, serializeJqJson(entry, "compact"), { encoding: "utf8", mode: 0o666 });
+    return { code: 0, stdout: `Appended to ${target}\n`, stderr: "" };
+}
+function readEntries(file) {
+    return fs.readFileSync(file, "utf8").split(/\r?\n/).filter((line) => line.length > 0)
+        .map((line) => JSON.parse(line));
+}
+function query(args, deps) {
+    const parsed = parseFlags(args, QUERY_FLAGS);
+    if (!parsed.values)
+        return parsed.missingValue
+            ? bundledShellUnboundValue(AUDIT_LOG_ASSET, QUERY_SHELL_LINES[parsed.missingValue])
+            : utilityError(parsed.error ?? "ERROR: invalid arguments");
+    const file = logPath(deps.root);
+    if (!fs.existsSync(file))
+        return { code: 0, stdout: "", stderr: `No audit log found at ${file}\n` };
+    let entries;
+    try {
+        entries = readEntries(file);
+    }
+    catch {
+        return { code: 4, stdout: "", stderr: "" };
+    }
+    const filters = Object.fromEntries(Object.entries(parsed.values).filter(([, value]) => value !== ""));
+    const rows = entries.filter((entry) => Object.entries(filters).every(([key, value]) => {
+        if (key === "timestamp")
+            return String(entry.timestamp ?? "") >= value;
+        return entry[key] === value;
+    }));
+    return { code: 0, stdout: serializeJqJson(rows, "pretty"), stderr: `--- ${rows.length} record(s) matched ---\n` };
+}
+function pad(value, width) {
+    return String(value ?? "").padEnd(width, " ");
+}
+function right(value, width) {
+    return String(value ?? "").padStart(width, " ");
+}
+function printProject(project, stories, phases, failures, skipped, last) {
+    return `${pad(project, 40)}  ${right(stories, 8)}  ${right(phases, 8)}  ${right(failures, 8)}  ${right(skipped, 8)}  ${pad(last, 26)}\n`;
+}
+function printWorker(worker, tasks, failures, rate) {
+    return `${pad(worker, 30)}  ${right(tasks, 8)}  ${right(failures, 8)}  ${pad(rate, 10)}\n`;
+}
+function isTask(entry) { return entry.event === "task_completed" || entry.event === "task_failed"; }
+function isFailure(entry) { return entry.result === "fail" || entry.event === "task_failed"; }
+function summary(_args, deps) {
+    const file = logPath(deps.root);
+    if (!fs.existsSync(file))
+        return { code: 0, stdout: "", stderr: `No audit log found at ${file}\n` };
+    let contents;
+    let entries;
+    try {
+        contents = fs.readFileSync(file, "utf8");
+        entries = readEntries(file);
+    }
+    catch {
+        return { code: 4, stdout: "", stderr: "" };
+    }
+    const lineCount = (contents.match(/\n/g) ?? []).length;
+    if (lineCount === 0)
+        return { code: 0, stdout: "Audit log is empty — no records to summarize.\n", stderr: "" };
+    const projects = new Map();
+    const workers = new Map();
+    for (const entry of entries) {
+        const project = String(entry.project ?? "null");
+        projects.set(project, [...(projects.get(project) ?? []), entry]);
+        if (entry.worker !== undefined && entry.worker !== null) {
+            const worker = String(entry.worker);
+            workers.set(worker, [...(workers.get(worker) ?? []), entry]);
+        }
+    }
+    let out = "\n=== Audit Log Summary ===\n\n--- By Project ---\n";
+    out += printProject("PROJECT", "STORIES", "PHASES", "FAILURES", "SKIPPED", "LAST_ACTIVITY");
+    out += printProject("-".repeat(40), "--------", "--------", "--------", "--------", "-".repeat(26));
+    for (const project of [...projects.keys()].sort()) {
+        const rows = projects.get(project);
+        const sorted = [...rows].sort((a, b) => String(a.timestamp ?? "").localeCompare(String(b.timestamp ?? "")));
+        out += printProject(project === "null" ? "unknown" : project, rows.filter(isTask).length, rows.filter((row) => row.event === "phase_completed").length, rows.filter(isFailure).length, rows.filter((row) => row.result === "skipped").length, String(sorted.at(-1)?.timestamp ?? "-"));
+    }
+    out += "\n--- By Worker ---\n";
+    out += printWorker("WORKER", "TASKS", "FAILURES", "SUCCESS_RATE");
+    out += printWorker("-".repeat(30), "--------", "--------", "----------");
+    for (const worker of [...workers.keys()].sort()) {
+        const rows = workers.get(worker);
+        const tasks = rows.filter(isTask).length;
+        const failures = rows.filter(isFailure).length;
+        const rate = tasks > 0 ? `${Math.floor(((tasks - failures) / tasks * 100) + 0.5)}%` : "n/a";
+        out += printWorker(worker, tasks, failures, rate);
+    }
+    const totalTasks = entries.filter(isTask).length;
+    const totalFailures = entries.filter(isFailure).length;
+    out += `\n--- Totals ---\n  Total events:   ${lineCount}\n  Total tasks:    ${totalTasks}\n  Total failures: ${totalFailures}\n\n`;
+    return { code: 0, stdout: out, stderr: "" };
+}
+export function runAuditLog(args, deps) {
+    const [subcommand = "help", ...rest] = args;
+    if (subcommand === "help" || subcommand === "--help" || subcommand === "-h")
+        return { code: 0, stdout: AUDIT_LOG_HELP, stderr: "" };
+    if (subcommand === "append")
+        return append(rest, deps);
+    if (subcommand === "query")
+        return query(rest, deps);
+    if (subcommand === "summary")
+        return summary(rest, deps);
+    return utilityError(`ERROR: Unknown subcommand '${subcommand}'. Use: append | query | summary | help`);
+}
+export function registerCoreAuditLogNative(core) {
+    registerNativeUtility(core, {
+        name: "audit-log", asset: AUDIT_LOG_ASSET, root: "live", summary: "Append, query, or summarize the HQ audit log",
+        resolveRoot: (_cwd, hqRoot) => resolveLiveRoot({ hqRoot }),
+        run: (args, context) => runAuditLog(args, context),
+    });
+}
+//# sourceMappingURL=core-audit-log-native.js.map