@indigoai-us/hq-cli 5.314.0 → 5.316.0

package/dist/commands/core.js

@@ -30,9 +30,26 @@
  */
 import { Option } from "commander";
 import { registerCoreCheckpointCommand } from "./core-checkpoint.js";
+import { registerCoreDelegateCommand } from "./core-delegate.js";
+import { registerCoreDelegateW1b } from "./core-delegate-w1b.js";
+import { registerCoreHandoffCommand } from "./core-handoff.js";
+import { registerCoreOntologyCommand } from "./core-ontology.js";
+import { registerCoreKnowledgePrefsCommand } from "./core-knowledge-prefs.js";
+import { registerCorePolicyCommand } from "./core-policy.js";
+import { registerCoreJobsNativeCommand } from "./core-job-native.js";
+import { registerCoreResolveCompanyNativeCommand } from "./core-resolve-company-command.js";
+import { registerCoreCheckpointGateSettingCommand } from "./core-checkpoint-gate-setting.js";
+import { registerCoreAuditLogNative } from "./core-audit-log-native.js";
+import { registerCoreDmBindNative } from "./core-dm-bind-native.js";
+import { registerCoreGitPackExtensionCheckNative } from "./core-git-pack-extension-check-native.js";
+import { registerCorePinNative } from "./core-pin-native.js";
+import { registerCoreRefreshVaultAccessNative } from "./core-refresh-vault-access-native.js";
+import { registerCoreWorkMeshBindTrustedNative } from "./core-work-mesh-bind-trusted-native.js";
+import { registerCoreHookHelperNativeCommands } from "./core-native-hook-helper-commands.js";
+import { registerCoreHookStateHelpers } from "./core-hook-state-helpers-native.js";
 import { resolveLiveRoot } from "../utils/hq-roots.js";
-import { runBundledScript } from "../utils/run-bundled-script.js";
-import { renderIndexTarget } from "../lib/index-render/index.js";
+import { interpreterFor, runBundledScript } from "../utils/run-bundled-script.js";
+import { CompanyIndexUserError, renderIndexTarget } from "../lib/index-render/index.js";
 import { generateWorkersRegistry } from "../lib/workers-registry/index.js";
 import { scanPackages } from "../lib/scan-packages/index.js";
 import { detectStaleCorePolicyMirror } from "../lib/core-utils/detect-stale-core-policy-mirror.js";
@@ -46,21 +63,27 @@ import { archiveOldThreads } from "../lib/core-utils/archive-old-threads.js";
 import { qmdReindexAfterSync } from "../lib/core-utils/qmd-reindex-after-sync.js";
 import { softTimeoutCommand } from "../lib/core-utils/soft-timeout.js";
 import { timeoutGuardCommand } from "../lib/core-utils/timeout-guard.js";
+import { readSentryReportStdin, reportSentryEvent } from "../lib/core-utils/sentry-report.js";
+import { CLEAN_HANDOFF_ASSET, RESUME_LOCK_ASSET, VERIFY_DELIVERABLES_ASSET, WORKTREE_GC_ASSET, runCleanWorktreeReconcileHandoff, runResumeThreadLock, runVerifyStoryDeliverables, runWorktreeGc, } from "../lib/core-utils/worktree-resume.js";
+import { coreNativeHandoffEnabled } from "./core-native-handoff-flag.js";
+import { coreCompanyIndexScopeEnabled } from "./core-company-index-scope-flag.js";
+import { runWorkerSkillCommand } from "./core-worker-skills-command.js";
+import { describeCoreCommand, registeredCoreCommandListing, } from "./core-command-catalog.js";
 /**
  * These commands are now native implementations. Their retained shell assets
  * are deliberately claimed in SCAFFOLD_ONLY_ASSETS: loose HQ trees still ship
  * them for legacy callers, but `hq core` never dispatches through them again.
  */
 export const NATIVE_UTILITY_COMMANDS = [
-    { name: "detect-stale-core-policy-mirror", root: "live", summary: "Find (and prune) stale personal-policy mirrors in core", run: (args, context) => detectStaleCorePolicyMirror(args, { root: context.hqRoot }) },
-    { name: "hq-status-summary", root: "cwd", summary: "Summarize working-tree status across the HQ tree", run: (args, context) => summarizeHqStatus(args, { cwd: context.cwd, root: context.hqRoot }) },
-    { name: "ontology-readme-drift", root: "live", summary: "Check a company's ontology README for drift", run: (args, context) => ontologyReadmeDrift(args, { root: context.hqRoot }) },
-    { name: "resize-screenshot", root: "cwd", summary: "Downscale a screenshot for context efficiency", run: (args) => resizeScreenshot(args) },
-    { name: "token-usage-report", root: "cwd", summary: "Report session token usage", run: (args) => tokenUsageReport(args) },
-    { name: "worktree", root: "live", summary: "Create a git worktree under workspace/worktrees/", run: (args, context) => createWorktree(args, { cwd: context.cwd, hqRoot: context.hqRoot }) },
-    { name: "codex-skill-bridge", root: "live", summary: "Install/inspect the Codex skill bridge", run: (args, context) => runCodexSkillBridgeCommand(args, { root: context.hqRoot ?? context.cwd }) },
-    { name: "archive-old-threads", root: "live", summary: "Archive aged session-thread files", run: (args, context) => archiveOldThreads(args, { hqRoot: context.hqRoot ?? context.cwd }) },
-    { name: "qmd-reindex-after-sync", root: "cwd", summary: "Refresh qmd collections after a sync", run: (args, context) => qmdReindexAfterSync(args, { cwd: context.cwd }) },
+    { name: "detect-stale-core-policy-mirror", asset: "core/scripts/detect-stale-core-policy-mirror.sh", root: "live", summary: "Find (and prune) stale personal-policy mirrors in core", run: (args, context) => detectStaleCorePolicyMirror(args, { root: context.hqRoot }) },
+    { name: "hq-status-summary", asset: "core/scripts/hq-status-summary.sh", root: "cwd", summary: "Summarize working-tree status across the HQ tree", run: (args, context) => summarizeHqStatus(args, { cwd: context.cwd, root: context.hqRoot }) },
+    { name: "ontology-readme-drift", asset: "core/scripts/ontology-readme-drift.sh", root: "live", summary: "Check a company's ontology README for drift", run: (args, context) => ontologyReadmeDrift(args, { root: context.hqRoot }) },
+    { name: "resize-screenshot", asset: "core/scripts/resize-screenshot.sh", root: "cwd", summary: "Downscale a screenshot for context efficiency", run: (args) => resizeScreenshot(args) },
+    { name: "token-usage-report", asset: "core/scripts/token-usage-report.sh", root: "cwd", summary: "Report session token usage", run: (args) => tokenUsageReport(args) },
+    { name: "worktree", asset: "core/scripts/worktree.sh", root: "live", summary: "Create a git worktree under workspace/worktrees/", run: (args, context) => createWorktree(args, { cwd: context.cwd, hqRoot: context.hqRoot }) },
+    { name: "codex-skill-bridge", asset: "core/scripts/codex-skill-bridge.sh", root: "live", summary: "Install/inspect the Codex skill bridge", run: (args, context) => runCodexSkillBridgeCommand(args, { root: context.hqRoot ?? context.cwd }) },
+    { name: "archive-old-threads", asset: "core/scripts/archive-old-threads.sh", root: "live", summary: "Archive aged session-thread files", run: (args, context) => archiveOldThreads(args, { hqRoot: context.hqRoot ?? context.cwd }) },
+    { name: "qmd-reindex-after-sync", asset: "core/scripts/qmd-reindex-after-sync.sh", root: "cwd", summary: "Refresh qmd collections after a sync", run: (args, context) => qmdReindexAfterSync(args, { cwd: context.cwd }) },
 ];
 export const NATIVE_SCAFFOLD_COMMANDS = [
     {
@@ -108,51 +131,61 @@ export const WORKER_SUBCOMMANDS = [
 export const REBUILD_INDEX_TARGETS = [
     {
         target: "all",
+        asset: "core/scripts/rebuild-all-indexes.sh",
         renderer: "all",
         summary: "Regenerate every INDEX.md across the HQ tree",
     },
     {
         target: "companies",
+        asset: "core/scripts/rebuild-companies-index.sh",
         renderer: "companies",
         summary: "Regenerate companies/INDEX.md",
     },
     {
         target: "company-knowledge",
+        asset: "core/scripts/rebuild-company-knowledge-index.sh",
         renderer: "company-knowledge",
         summary: "Regenerate a company's knowledge INDEX.md",
     },
     {
         target: "orchestrator",
+        asset: "core/scripts/rebuild-orchestrator-index.sh",
         renderer: "orchestrator",
         summary: "Regenerate the orchestrator workspace INDEX.md",
     },
     {
         target: "projects",
+        asset: "core/scripts/rebuild-projects-index.sh",
         renderer: "projects",
         summary: "Regenerate the projects INDEX.md",
     },
     {
         target: "public-knowledge",
+        asset: "core/scripts/rebuild-public-knowledge-index.sh",
         renderer: "public-knowledge",
         summary: "Regenerate core/knowledge/public/INDEX.md",
     },
     {
         target: "reports",
+        asset: "core/scripts/rebuild-reports-index.sh",
         renderer: "reports",
         summary: "Regenerate the reports INDEX.md",
     },
     {
         target: "social-drafts",
+        asset: "core/scripts/rebuild-social-drafts-index.sh",
         renderer: "social-drafts",
         summary: "Regenerate workspace/social-drafts/INDEX.md",
     },
     {
         target: "threads",
+        asset: "core/scripts/rebuild-threads-index.sh",
         renderer: "threads",
         summary: "Regenerate the session-threads INDEX.md",
     },
     {
         target: "workers",
+        asset: "core/scripts/rebuild-workers-index.sh",
         renderer: "workers",
         summary: "Regenerate the workers INDEX.md",
     },
@@ -191,6 +224,19 @@ export const SCAFFOLD_COMMANDS = [
  * direct `hq core` command.
  */
 export const SCAFFOLD_ONLY_ASSETS = [
+    { asset: "core/scripts/resolve-company.sh", root: "live", summary: "Rollback companion for native resolve-company" },
+    { asset: "core/scripts/jobs-schedule-parse.sh", root: "live", summary: "Rollback companion for native jobs schedule-parse" },
+    { asset: "core/scripts/jobs-validate.sh", root: "live", summary: "Rollback companion for native jobs validate" },
+    { asset: "core/scripts/outpost-jobs-reconcile.sh", root: "live", summary: "Rollback companion for native jobs reconcile" },
+    { asset: "core/scripts/hq-job-probe.sh", root: "live", summary: "Scheduled jobs readiness probe used by the reconcile rollback path" },
+    { asset: "core/scripts/hq-job-run.sh", root: "live", summary: "Scheduled jobs runner used by generated systemd units" },
+    { asset: "core/scripts/hq-job-notify.sh", root: "live", summary: "Scheduled jobs failure notification helper" },
+    { asset: "core/scripts/hq-job-remediate.sh", root: "live", summary: "Scheduled jobs bounded remediation helper" },
+    { asset: "core/scripts/hq-dm-bind.sh", root: "live", summary: "Rollback shell for native dm-bind" },
+    { asset: "core/scripts/work-mesh-live-bind-trusted.sh", root: "live", summary: "Rollback shell for native work-mesh-bind-trusted" },
+    { asset: "core/scripts/share-suggestion-state.sh", root: "live", summary: "Rollback shell for native share-suggestion-state" },
+    { asset: "core/scripts/repo-run-registry.sh", root: "live", summary: "Rollback shell for native repo-run-registry" },
+    { asset: "core/scripts/detect-stale-review-base.sh", root: "live", summary: "Rollback shell for native detect-stale-review-base" },
     // Shared shell libs sourced by the two relocated scripts (and hooks). Never
     // dispatched on their own (so no `hq core` command), but they MUST ship in the
     // tarball, or the bundled hq-session / checkpoint-stop-gate die at `source`
@@ -199,65 +245,70 @@ export const SCAFFOLD_ONLY_ASSETS = [
     { asset: "core/scripts/lib/session-scope-capability.sh", root: "live", summary: "Session scope-capability lib sourced by hq-session" },
     { asset: "core/scripts/lib/session-id.sh", root: "live", summary: "Session-id resolver lib sourced by hq-session" },
     { asset: "core/scripts/lib/work-mesh-enqueue.sh", root: "live", summary: "Work Mesh Live spool enqueue lib sourced by hooks" },
-    { asset: "core/scripts/archive-old-threads.sh", root: "live", summary: "Scaffold-only native utility companion" },
-    { asset: "core/scripts/codex-skill-bridge.sh", root: "live", summary: "Scaffold-only native utility companion" },
-    { asset: "core/scripts/qmd-reindex-after-sync.sh", root: "cwd", summary: "Scaffold-only native utility companion" },
-    { asset: "core/scripts/detect-stale-core-policy-mirror.sh", root: "live", summary: "Scaffold-only native utility companion" },
-    { asset: "core/scripts/hq-status-summary.sh", root: "cwd", summary: "Scaffold-only native utility companion" },
-    { asset: "core/scripts/ontology-readme-drift.sh", root: "live", summary: "Scaffold-only native utility companion" },
-    { asset: "core/scripts/resize-screenshot.sh", root: "cwd", summary: "Scaffold-only native utility companion" },
-    { asset: "core/scripts/token-usage-report.sh", root: "cwd", summary: "Scaffold-only native utility companion" },
-    { asset: "core/scripts/worktree.sh", root: "live", summary: "Scaffold-only native utility companion" },
-    {
-        asset: "core/scripts/rebuild-all-indexes.sh",
-        root: "cwd",
-        summary: "Scaffold-only native rebuild-index companion",
-    },
-    {
-        asset: "core/scripts/rebuild-companies-index.sh",
-        root: "cwd",
-        summary: "Scaffold-only native rebuild-index companion",
-    },
-    {
-        asset: "core/scripts/rebuild-company-knowledge-index.sh",
-        root: "cwd",
-        summary: "Scaffold-only native rebuild-index companion",
-    },
-    {
-        asset: "core/scripts/rebuild-orchestrator-index.sh",
-        root: "cwd",
-        summary: "Scaffold-only native rebuild-index companion",
-    },
-    {
-        asset: "core/scripts/rebuild-projects-index.sh",
-        root: "cwd",
-        summary: "Scaffold-only native rebuild-index companion",
-    },
-    {
-        asset: "core/scripts/rebuild-public-knowledge-index.sh",
-        root: "cwd",
-        summary: "Scaffold-only native rebuild-index companion",
-    },
-    {
-        asset: "core/scripts/rebuild-reports-index.sh",
-        root: "cwd",
-        summary: "Scaffold-only native rebuild-index companion",
-    },
-    {
-        asset: "core/scripts/rebuild-social-drafts-index.sh",
-        root: "cwd",
-        summary: "Scaffold-only native rebuild-index companion",
-    },
-    {
-        asset: "core/scripts/rebuild-threads-index.sh",
-        root: "cwd",
-        summary: "Scaffold-only native rebuild-index companion",
-    },
-    {
-        asset: "core/scripts/rebuild-workers-index.sh",
+    { asset: "core/scripts/lib/work-mesh-live-hook.sh", root: "live", summary: "Work Mesh Live hook helpers sourced by rebind" },
+    { asset: "core/scripts/lib/work-mesh-live-rebind.sh", root: "live", summary: "Work Mesh Live session rebind library sourced by hooks and the native rollback command" },
+    // Wave 2 handoff/worktree commands retain their old scripts for one release,
+    // behind the shared default-off rollback flag.
+    { asset: WORKTREE_GC_ASSET, root: "live", summary: "Rollback companion for native worktree-gc" },
+    { asset: CLEAN_HANDOFF_ASSET, root: "cwd", summary: "Rollback companion for native clean-worktree-reconcile-handoff" },
+    { asset: RESUME_LOCK_ASSET, root: "live", summary: "Rollback companion for native resume-thread-lock" },
+    { asset: VERIFY_DELIVERABLES_ASSET, root: "live", summary: "Rollback companion for native verify-story-deliverables" },
+    // Wave 1a delegate shells remain bundled as the default-off rollback path.
+    // Their roots mirror the original scripts; pickup does not read an HQ root.
+    { asset: "core/scripts/hq-delegate-resolve.sh", root: "live", summary: "Rollback shell for native delegate resolve" },
+    { asset: "core/scripts/hq-delegate-pickup.sh", root: "cwd", summary: "Rollback shell for native delegate pickup (root independent)" },
+    { asset: "core/scripts/hq-delegate-repo.sh", root: "live", summary: "Rollback shell for native delegate repo" },
+    { asset: "core/scripts/hq-delegate-secrets.sh", root: "live", summary: "Rollback shell for native delegate secrets" },
+    { asset: "core/scripts/hq-delegate-transfer.sh", root: "live", summary: "Rollback shell for native delegate transfer" },
+    { asset: "core/scripts/hq-delegate-bundle.sh", root: "live", summary: "Rollback shell for native delegate bundle" },
+    { asset: "core/scripts/hq-delegate-grant.sh", root: "live", summary: "Rollback shell for native delegate grant" },
+    { asset: "core/scripts/hq-delegate-publish.sh", root: "live", summary: "Rollback shell for native delegate publish" },
+    { asset: "core/scripts/hq-delegate-send.sh", root: "live", summary: "Rollback shell for native delegate send" },
+    { asset: "core/scripts/hq-delegate-verify.sh", root: "live", summary: "Rollback shell for native delegate verify" },
+    { asset: "core/scripts/lib/secret-patterns.sh", root: "live", summary: "Secret-pattern library sourced by the delegate rollback shells" },
+    // Retained rollback companions for the gated native ontology commands. These
+    // are loose HQ-tree assets, but `hq core ontology` dispatches natively.
+    { asset: "core/scripts/ontology-audience-grant.sh", root: "live", summary: "Rollback companion for native ontology audience grant" },
+    { asset: "core/scripts/ontology-brief.mjs", root: "live", summary: "Rollback companion for native ontology brief" },
+    { asset: "core/scripts/ontology-candidate.sh", root: "live", summary: "Rollback companion for native ontology candidate" },
+    { asset: "core/scripts/ontology-garden.mjs", root: "live", summary: "Rollback companion for native ontology garden" },
+    { asset: "core/scripts/ontology-source-worklist.sh", root: "live", summary: "Rollback companion for native ontology source worklist" },
+    { asset: "core/scripts/source-yaml-validate.sh", root: "cwd", summary: "Rollback companion for native source YAML validation" },
+    // Shared by native knowledge-prefs and the ontology candidate shell fallback.
+    { asset: "core/scripts/knowledge-prefs.sh", root: "live", summary: "Sibling dependency for ontology candidate rollback companion" },
+    // Rollback companions for the default-off native knowledge and policy routes.
+    // policy-retire also runs the scaffold validator in-process when native, but
+    // its bundled shell fallback needs both helper assets at these exact paths.
+    { asset: "core/scripts/policy-age-report.sh", root: "live", summary: "Rollback companion for native policy age-report" },
+    { asset: "core/scripts/policy-retire.sh", root: "live", summary: "Rollback companion for native policy retire" },
+    { asset: "core/scripts/read-policy-frontmatter.sh", root: "cwd", summary: "Rollback companion for native policy frontmatter" },
+    { asset: "core/scripts/eval-trigger.sh", root: "live", summary: "Trigger grammar helper used by the policy validator companion" },
+    { asset: "core/scripts/migrate-policy-triggers.sh", root: "live", summary: "Rollback shell for native migrate-policy-triggers" },
+    { asset: "core/scripts/register-project.sh", root: "live", summary: "Rollback shell for native register-project" },
+    { asset: "core/scripts/work-mesh-live-rebind.sh", root: "live", summary: "Rollback shell for native work-mesh-live-rebind" },
+    { asset: ".claude/hooks/validate-policy-frontmatter.sh", root: "live", summary: "Policy validator companion used by policy-retire rollback" },
+    // Wave 2a handoff shells remain bundled as the default-off rollback path.
+    { asset: "core/scripts/handoff-finalize.sh", root: "live", summary: "Rollback shell for native handoff finalize" },
+    { asset: "core/scripts/handoff-post.sh", root: "live", summary: "Rollback shell for native handoff post" },
+    { asset: "core/scripts/handoff-open-steps.sh", root: "live", summary: "Rollback shell for native handoff open-steps" },
+    { asset: "core/scripts/qmd-reindex-bg.sh", root: "live", summary: "Rollback handoff reindex forwarder" },
+    // Wave 5 native utility rollback companions, sourced verbatim from staging
+    // because these assets were not present in the hq-cli bundle at launch.
+    { asset: "core/scripts/audit-log.sh", root: "live", summary: "Rollback shell for native audit-log" },
+    { asset: "core/scripts/git-pack-extension-check.sh", root: "cwd", summary: "Rollback shell for native git-pack-extension-check" },
+    { asset: "core/scripts/hq-pin.sh", root: "live", summary: "Rollback shell for native pin" },
+    { asset: "core/scripts/refresh-vault-access.sh", root: "cwd", summary: "Rollback shell for native refresh-vault-access" },
+    { asset: "core/scripts/lib/portable.sh", root: "live", summary: "Shared portable helpers sourced by the audit-log rollback shell" },
+    ...NATIVE_UTILITY_COMMANDS.map(({ asset, root, summary }) => ({
+        asset,
+        root,
+        summary: `Scaffold-only native utility companion: ${summary}`,
+    })),
+    ...REBUILD_INDEX_TARGETS.map(({ asset }) => ({
+        asset,
         root: "cwd",
         summary: "Scaffold-only native rebuild-index companion",
-    },
+    })),
 ];
 /** Every claimed bundled asset, used by packaging and interpreter tests. */
 export const SCAFFOLD_ASSETS = [
@@ -300,6 +351,9 @@ function runEntry(entry, scope, args) {
         args,
         cwd,
         hqRoot,
+        env: entry.asset === "core/scripts/hq-session.sh"
+            ? { HQ_HQ_SESSION_NO_CLI: "1" }
+            : undefined,
     });
     // Propagate verbatim. Several of these scripts use their exit code as their
     // interface (drift detected, lint failed), so remapping it would break the
@@ -314,6 +368,7 @@ export function registerCoreCommands(program) {
     const core = program
         .command("core", { hidden: true })
         .description("HQ scaffold scripts hosted by the CLI (core; not a stable surface)")
+        .addHelpText("afterAll", "exact-company-directory-match-v1")
         // The root override lives on the GROUP, not the subcommands, so it can never
         // collide with a wrapped script's own flags — everything after the
         // subcommand name is passed through untouched.
@@ -321,11 +376,64 @@ export function registerCoreCommands(program) {
     // This group primarily hosts manifest-driven bundled assets, but it also
     // hosts native TypeScript plumbing when a scaffold contract needs it.
     registerCoreCheckpointCommand(core);
+    registerCoreOntologyCommand(core);
+    registerCoreCheckpointGateSettingCommand(core);
+    registerCoreDelegateCommand(core, registerCoreDelegateW1b);
+    registerCoreHandoffCommand(core);
+    registerCoreKnowledgePrefsCommand(core);
+    registerCorePolicyCommand(core);
+    registerCoreJobsNativeCommand(core);
+    registerCoreResolveCompanyNativeCommand(core);
+    registerCoreAuditLogNative(core);
+    registerCoreGitPackExtensionCheckNative(core);
+    registerCorePinNative(core);
+    registerCoreRefreshVaultAccessNative(core);
+    registerCoreDmBindNative(core);
+    registerCoreWorkMeshBindTrustedNative(core);
+    registerCoreHookHelperNativeCommands(core);
+    registerCoreHookStateHelpers(core);
+    // Wave 2 handoff/worktree commands retain their byte-identical shell assets
+    // as a default-off rollback path for one release. Keep the gate helper small
+    // so sibling Wave 2 work can reuse it without editing this command table.
+    const handoffCommands = [
+        { name: "worktree-gc", asset: WORKTREE_GC_ASSET, root: "live", summary: "Safely collect old, preserved HQ worktrees", run: (args, root) => runWorktreeGc(args, root) },
+        { name: "clean-worktree-reconcile-handoff", asset: CLEAN_HANDOFF_ASSET, root: "cwd", summary: "Remove only byte-identical incoming handoff mirrors", run: (args) => runCleanWorktreeReconcileHandoff(args) },
+        { name: "resume-thread-lock", asset: RESUME_LOCK_ASSET, root: "live", summary: "Inspect or acquire a durable resumework lock", run: (args, root) => runResumeThreadLock(args, root) },
+        { name: "verify-story-deliverables", asset: VERIFY_DELIVERABLES_ASSET, root: "live", summary: "Check declared and returned story deliverables", run: (args, root) => runVerifyStoryDeliverables(args, root) },
+    ];
+    for (const entry of handoffCommands) {
+        const command = core
+            .command(entry.name)
+            .description(entry.summary)
+            .allowUnknownOption()
+            .allowExcessArguments()
+            .helpOption(false)
+            .argument("[args...]")
+            .action(async (args = [], _options, cmd) => {
+            const scope = core.opts();
+            const operands = cmd.args.length > 0 ? cmd.args : args;
+            if (!await coreNativeHandoffEnabled()) {
+                if (entry.root === "live")
+                    runEntry(entry, scope, operands);
+                else {
+                    const result = runBundledScript({ asset: entry.asset, args: operands, cwd: process.cwd() });
+                    if (result.code !== 0)
+                        process.exit(result.code);
+                }
+                return;
+            }
+            const { cwd, hqRoot } = resolveEntryRoot(entry, scope);
+            const code = await entry.run(operands, hqRoot ?? cwd);
+            if (code !== 0)
+                process.exit(code);
+        });
+        describeCoreCommand(command, { execution: "native", asset: entry.asset, root: entry.root });
+    }
     // These command names intentionally own native implementations. Their
     // similarly named scaffold assets are forwarders, so sending them through
     // runEntry would recurse back into this command forever.
     for (const entry of NATIVE_SCAFFOLD_COMMANDS) {
-        core
+        const command = core
             .command(entry.name)
             .description(entry.summary)
             .allowUnknownOption()
@@ -341,9 +449,14 @@ export function registerCoreCommands(program) {
             if (result.status !== 0)
                 process.exit(result.status);
         });
+        describeCoreCommand(command, {
+            execution: "native",
+            asset: entry.asset,
+            root: entry.root,
+        });
     }
     for (const entry of NATIVE_UTILITY_COMMANDS) {
-        core
+        const command = core
             .command(entry.name)
             .description(entry.summary)
             .allowUnknownOption()
@@ -358,6 +471,11 @@ export function registerCoreCommands(program) {
             if (code !== 0)
                 process.exit(code);
         });
+        describeCoreCommand(command, {
+            execution: "native",
+            asset: entry.asset,
+            root: entry.root,
+        });
     }
     // `hq core worker <name>` — a nested subgroup for worker-scoped skill
     // maintenance. Nested (rather than flat `hq core worker-<name>`) so the two
@@ -366,7 +484,7 @@ export function registerCoreCommands(program) {
         .command("worker")
         .description("Worker-scoped skill maintenance (lint, share)");
     for (const entry of WORKER_SUBCOMMANDS) {
-        worker
+        const command = worker
             .command(entry.name)
             .description(entry.summary)
             // Pure passthrough: the wrapped script owns its own argument grammar.
@@ -374,10 +492,15 @@ export function registerCoreCommands(program) {
             .allowExcessArguments()
             .helpOption(false)
             .argument("[args...]", "arguments passed through to the script")
-            .action((args = [], _opts, cmd) => {
+            .action(async (args = [], _opts, cmd) => {
             const scope = core.opts();
             const operands = cmd.args.length > 0 ? cmd.args : args;
-            runEntry(entry, scope, operands);
+            await runWorkerSkillCommand(entry.name, operands, resolveEntryRoot(entry, scope));
+        });
+        describeCoreCommand(command, {
+            execution: interpreterFor(entry.asset) === "node" ? "bundled-node" : "bundled-shell",
+            asset: entry.asset,
+            root: entry.root,
         });
     }
     const runCommand = (entry, args = [], cmd, target) => {
@@ -390,7 +513,7 @@ export function registerCoreCommands(program) {
         runEntry(entry, scope, passthrough);
     };
     const validTargets = REBUILD_INDEX_TARGETS.map((entry) => entry.target);
-    core
+    const rebuildCommand = core
         .command("rebuild-index <target> [args...]")
         .description(`Regenerate one index (target: ${validTargets.join(", ")})`)
         // Pure passthrough: the wrapped script owns its own argument grammar, so
@@ -405,12 +528,49 @@ export function registerCoreCommands(program) {
             throw expectedUserError(`Unknown rebuild-index target "${target}". Valid targets: ${validTargets.join(", ")}.`);
         }
         const scope = core.opts();
-        const hqRoot = resolveLiveRoot({ hqRoot: scope.hqRoot });
         const operands = cmd.args.length > 0 ? cmd.args : args;
-        renderIndexTarget(entry.renderer, { root: hqRoot, log: (message) => process.stderr.write(`${message}\n`) }, operands.slice(1));
+        const passthrough = operands.slice(1);
+        const force = passthrough.includes("--accept");
+        const rendererArgs = passthrough.filter((arg) => arg !== "--accept");
+        const isCompaniesTarget = entry.renderer === "companies";
+        const wantsHelp = rendererArgs.some((arg) => arg === "--help" || arg === "-h");
+        if (isCompaniesTarget && wantsHelp) {
+            renderIndexTarget(entry.renderer, { root: "", output: (message) => process.stdout.write(message) }, rendererArgs);
+            return;
+        }
+        const requestsCompanyScope = isCompaniesTarget && rendererArgs.some((arg) => arg === "--company" || arg.startsWith("--company="));
+        if (requestsCompanyScope && !coreCompanyIndexScopeEnabled()) {
+            throw expectedUserError("rebuild-index companies --company is disabled; enable cli.rebuild-index-company-scope for a canary.");
+        }
+        const hqRoot = resolveLiveRoot({ hqRoot: scope.hqRoot });
+        const refused = [];
+        try {
+            renderIndexTarget(entry.renderer, {
+                root: hqRoot,
+                log: (message) => process.stderr.write(`${message}\n`),
+                force,
+                refused,
+            }, rendererArgs);
+        }
+        catch (error) {
+            if (error instanceof CompanyIndexUserError)
+                throw expectedUserError(error.message);
+            throw error;
+        }
+        if (refused.length > 0) {
+            throw expectedUserError(`rebuild-index: refused to overwrite ${refused.length} hand-edited INDEX.md file(s). Re-run with --accept to overwrite.`);
+        }
+    });
+    describeCoreCommand(rebuildCommand, {
+        entries: REBUILD_INDEX_TARGETS.map((entry) => ({
+            name: `rebuild-index ${entry.target}`,
+            execution: "native",
+            asset: entry.asset,
+            root: "live",
+        })),
     });
     for (const entry of SCAFFOLD_COMMANDS) {
-        core
+        const command = core
             .command(entry.name)
             .description(entry.summary)
             // Pure passthrough: the wrapped script owns its own argument grammar, so
@@ -423,12 +583,17 @@ export function registerCoreCommands(program) {
             .action((args = [], _opts, cmd) => {
             runCommand(entry, args, cmd);
         });
+        describeCoreCommand(command, {
+            execution: interpreterFor(entry.asset) === "node" ? "bundled-node" : "bundled-shell",
+            asset: entry.asset,
+            root: entry.root,
+        });
     }
     // `hq core soft-timeout <interval> [--hard-cap <spec>] [--label <name>] -- <cmd…>`
     // Async and bespoke (the NATIVE_UTILITY_COMMANDS table is synchronous), since
     // it spawns a child and warns over time. Warn-don't-kill primitive for
     // finding 2.1 — the CLI-hosted twin of core/scripts/lib/soft-timeout.sh.
-    core
+    const softTimeout = core
         .command("soft-timeout")
         .description("Run a command under a soft (warn, don't kill) timeout")
         // Passthrough: the wrapped command owns everything after `--`.
@@ -442,10 +607,11 @@ export function registerCoreCommands(program) {
         if (code !== 0)
             process.exit(code);
     });
+    describeCoreCommand(softTimeout, { execution: "native", root: "cwd" });
     // `hq core timeout-guard` — PreToolUse decision for the foreground-timeout
     // guard (finding 2.1). Reads the hook JSON on stdin and exits 2 to block, 0
     // to allow. The shipped .claude hook is a thin shim over this.
-    core
+    const timeoutGuard = core
         .command("timeout-guard")
         .description("PreToolUse guard: block over-ceiling foreground timeouts (reads hook JSON on stdin)")
         .helpOption(false)
@@ -453,10 +619,46 @@ export function registerCoreCommands(program) {
         const chunks = [];
         for await (const chunk of process.stdin)
             chunks.push(chunk);
-        const code = timeoutGuardCommand(Buffer.concat(chunks).toString("utf8"));
+        const code = await timeoutGuardCommand(Buffer.concat(chunks).toString("utf8"));
         if (code !== 0)
             process.exit(code);
     });
+    describeCoreCommand(timeoutGuard, { execution: "native", root: "cwd" });
+    // `hq core sentry report` — constrained, stderr-diagnostic-only transport
+    // for hook health events. Event data is accepted only on stdin so it never
+    // appears in the process list shared by the fleet.
+    const sentryReport = core
+        .command("sentry")
+        .description("Constrained diagnostics transport for HQ hooks")
+        .command("report")
+        .description("Report one validated hook diagnostic from stdin")
+        .option("--dry-run", "validate and print the scrubbed Sentry event projection without sending")
+        .option("--timeout-ms <milliseconds>", "bounded Sentry flush budget (1-5000ms)")
+        .action(async (options) => {
+        const stdin = await readSentryReportStdin(process.stdin);
+        const timeoutMs = options.timeoutMs === undefined ? undefined : Number(options.timeoutMs);
+        const scope = core.opts();
+        const hqRoot = scope.hqRoot ? resolveLiveRoot({ hqRoot: scope.hqRoot }) : undefined;
+        const result = await reportSentryEvent(stdin ?? "", {
+            dryRun: options.dryRun,
+            timeoutMs,
+            hqRoot,
+        });
+        if (result.code !== 0)
+            process.exitCode = result.code;
+    });
+    describeCoreCommand(sentryReport, { execution: "native", root: "live" });
+    const commands = core
+        .command("commands", { hidden: true })
+        .description("List registered hq core commands as JSON")
+        .option("--json", "Print the command catalog as JSON")
+        .action((options) => {
+        if (!options.json) {
+            throw expectedUserError("Usage: hq core commands --json");
+        }
+        process.stdout.write(`${JSON.stringify(registeredCoreCommandListing(core))}\n`);
+    });
+    describeCoreCommand(commands, { execution: "native", root: "cwd" });
     return core;
 }
 //# sourceMappingURL=core.js.map

package/dist/commands/crm.js

@@ -19,6 +19,54 @@ const CRM_ENTITY_TYPES = [
     "invoice",
     "company",
 ];
+const CRM_SETTINGS_PRECHECK_TIMEOUT_MS = 3_000;
+const CRM_DISABLED_HINT_PREFIX = "CRM is not enabled for this company. Enable it first: ";
+function printCrmDisabledHint(companySlug) {
+    console.error(chalk.red(CRM_DISABLED_HINT_PREFIX +
+        `hq company settings set --company ${companySlug} --crm-enabled true`));
+    process.exit(1);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * CRM settings are a best-effort precheck. Only an explicit false prevents the
+ * write; unavailable or malformed settings leave hq-pro authoritative.
+ */
+async function crmIsExplicitlyDisabled(token, companyUid) {
+    try {
+        const response = await vaultApiFetch({
+            token,
+            path: "/company-settings",
+            query: { companyUid },
+            signal: AbortSignal.timeout(CRM_SETTINGS_PRECHECK_TIMEOUT_MS),
+        });
+        if (!response.ok) {
+            console.error(chalk.red(`CRM settings precheck returned HTTP ${response.status}; continuing to let the server decide.`));
+            return false;
+        }
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch (err) {
+            const errorName = err instanceof Error ? err.name : "unknown error";
+            console.error(chalk.red(`CRM settings precheck returned invalid JSON (${errorName}); continuing to let the server decide.`));
+            return false;
+        }
+        if (!isRecord(body))
+            return false;
+        const settings = isRecord(body.companySettings)
+            ? body.companySettings
+            : body;
+        return settings.crmEnabled === false;
+    }
+    catch (err) {
+        const errorName = err instanceof Error ? err.name : "unknown error";
+        console.error(chalk.red(`CRM settings precheck failed (${errorName}); continuing to let the server decide.`));
+        return false;
+    }
+}
 /**
  * Read the `--json <file|->` payload: a single entity object or an array of
  * entities. `-` reads from stdin. Returns the entities array (always
@@ -127,6 +175,9 @@ export function registerCrmCommand(program) {
             }
             const token = await ensureCognitoToken();
             const companyUid = await getEntityUid(token, { companySlug });
+            if (await crmIsExplicitlyDisabled(token, companyUid)) {
+                printCrmDisabledHint(companySlug);
+            }
             const res = await vaultApiFetch({
                 token,
                 path: "/crm/entities",
@@ -137,9 +188,7 @@ export function registerCrmCommand(program) {
                 const body = (await res.json().catch(() => ({})));
                 // CrmDisabledError surfaces as a 403 with a helpful message.
                 if (res.status === 403 && body.code === "CRM_DISABLED") {
-                    console.error(chalk.red("CRM is not enabled for this company. Enable it first: " +
-                        `hq company settings set --company ${companySlug} --crm-enabled true`));
-                    process.exit(1);
+                    printCrmDisabledHint(companySlug);
                 }
                 console.error(chalk.red(`Failed to upsert entities: ${body.error ?? res.statusText}`));
                 process.exit(1);