@indigoai-us/hq-cli 5.325.0 → 5.327.0

package/dist/lib/mcp/hq-mcp-tools.generated.js

@@ -0,0 +1,538 @@
+export const HQ_MCP_TOOLS = [
+    {
+        "name": "hq_companies_list",
+        "description": "Returns the companies the authenticated HQ user is a member of, with roles",
+        "inputSchema": {
+            "type": "object",
+            "properties": {},
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_company_ping",
+        "description": "Confirms the caller is a member of the given company. Useful for testing the company-scope guard.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_exec_check",
+        "description": "Checks whether an hq CLI subcommand is on the bridge whitelist. Returns allowed or a refusal message.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "subcommand": {
+                    "description": "The hq subcommand to validate",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "subcommand"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_files_list",
+        "description": "Lists files and directories under a company-scoped prefix. Paths under settings/, secrets, and workers/ are excluded.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "prefix": {
+                    "description": "Directory prefix relative to the company root (e.g. \"knowledge\", \"projects\"). Defaults to the root.",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_files_read",
+        "description": "Returns the content of a file, scoped to the company directory. Paths under settings/, secrets, and workers/ are refused.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "path": {
+                    "description": "Path relative to the company root, e.g. \"knowledge/overview.md\"",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "path",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_files_write",
+        "description": "Writes a UTF-8 file to one of the caller's writable areas within a company. Allowed top-level prefixes: notes/, inbox/, drafts/, scratch/, journal/. Refuses paths under settings/, secrets, workers/, or outside the caller's write ACL. Overwriting an existing file requires { confirm: true } — by default, an existing file causes a refusal.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "path": {
+                    "description": "Path relative to the company root, e.g. \"notes/2026-06-02-idea.md\"",
+                    "type": "string"
+                },
+                "content": {
+                    "description": "UTF-8 content to write",
+                    "type": "string"
+                },
+                "confirm": {
+                    "description": "Set true to overwrite an existing file. Defaults to false (create-or-refuse).",
+                    "type": "boolean"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "path",
+                "content",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_knowledge_capture",
+        "description": "Captures a dated knowledge note under the company's knowledge/captures/ folder. Filename pattern: YYYY-MM-DD-HHMM-{slug}.md (UTC). Additive — never overwrites.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "slug": {
+                    "description": "Short slug for the capture filename (e.g. \"deploy-runbook\"). Sanitized to kebab-case.",
+                    "type": "string"
+                },
+                "title": {
+                    "description": "Optional human-readable title for the captured note. Defaults to the slug.",
+                    "type": "string"
+                },
+                "content": {
+                    "description": "Markdown content for the knowledge capture",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "slug",
+                "content",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_knowledge_get",
+        "description": "Returns the content of a knowledge doc. Path is relative to the company knowledge root (e.g. \"engineering/api-design.md\").",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "path": {
+                    "description": "Relative path from the knowledge root, e.g. \"engineering/patterns.md\"",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "path",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_knowledge_list",
+        "description": "Lists knowledge docs for a company, grouped by domain (architecture, engineering, product, etc.). Optionally filter to a single domain.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "domain": {
+                    "description": "Optional domain filter — e.g. \"engineering\", \"product\"",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_knowledge_search",
+        "description": "Semantic search over a company's qmd-indexed knowledge and projects. Returns ranked hits (path, title, snippet, score). Scoped to the company's collection — results never leak across companies.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "query": {
+                    "description": "Search query — natural language or keywords",
+                    "type": "string",
+                    "minLength": 1
+                },
+                "limit": {
+                    "description": "Max results (default 10)",
+                    "type": "integer",
+                    "minimum": 1,
+                    "maximum": 50
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "query",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_personal_capture",
+        "description": "Captures a dated note into the caller's PERSONAL vault. Defaults to knowledge/captures/{stamp}-{slug}.md. Set kind=note for notes/captures/. Additive — never overwrites.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "slug": {
+                    "description": "Short slug for the capture filename. Sanitized to kebab-case.",
+                    "type": "string"
+                },
+                "title": {
+                    "description": "Optional human-readable title — defaults to the slug.",
+                    "type": "string"
+                },
+                "content": {
+                    "description": "Markdown content",
+                    "type": "string"
+                },
+                "kind": {
+                    "description": "Where to capture under the personal vault. Defaults to \"knowledge\".",
+                    "type": "string",
+                    "enum": [
+                        "knowledge",
+                        "note"
+                    ]
+                }
+            },
+            "required": [
+                "slug",
+                "content"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_ping",
+        "description": "Health check — confirms the HQ bridge is running",
+        "inputSchema": {
+            "type": "object",
+            "properties": {},
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_policies_list",
+        "description": "Lists active policies for a company and/or your personal policies. Policies are injected context — they inform behavior but are not programmatically enforced by the bridge.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "scope": {
+                    "description": "Which policies to list: \"company\", \"personal\", or \"all\" (default)",
+                    "type": "string",
+                    "enum": [
+                        "company",
+                        "personal",
+                        "all"
+                    ]
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_policy_get",
+        "description": "Returns the full content of a named policy. Policies are injected context — they describe how you should behave, but the bridge does not enforce them as gates.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "name": {
+                    "description": "Policy filename, e.g. \"aws-credentials-safety.md\"",
+                    "type": "string"
+                },
+                "scope": {
+                    "description": "Where to look: \"company\" (default) or \"personal\"",
+                    "type": "string",
+                    "enum": [
+                        "company",
+                        "personal"
+                    ]
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "name",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_project_get",
+        "description": "Returns a project's prd.json, README, and journal file index. Project is identified by its directory slug (e.g. 'hq-chat-mcp').",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "project": {
+                    "description": "Project directory slug, e.g. \"hq-chat-mcp\"",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "project",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_project_journal_append",
+        "description": "Appends a new dated entry to a project's journal/ directory. Filename pattern: YYYY-MM-DD-HHMM-{slug}.md (UTC). Additive — never overwrites or modifies existing entries.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "project": {
+                    "description": "Project directory slug, e.g. \"hq-chat-mcp\"",
+                    "type": "string"
+                },
+                "slug": {
+                    "description": "Short slug for the entry filename (e.g. \"design-notes\"). Will be sanitized to kebab-case.",
+                    "type": "string"
+                },
+                "content": {
+                    "description": "Markdown content for the journal entry",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "project",
+                "slug",
+                "content",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_project_status",
+        "description": "Returns a project's story pass-rate, blockers (stories with unmet dependencies), and the full dependsOn graph.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "project": {
+                    "description": "Project directory slug, e.g. \"hq-chat-mcp\"",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "project",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_projects_list",
+        "description": "Lists all projects for a company with name, status (done/in-progress/planning), story count, and description.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_run",
+        "description": "Executes a pre-approved `hq run` operation by name. Only whitelisted operations are allowed — arbitrary `hq run -- <cmd>` is blocked to prevent secret exfiltration via printenv or similar. Use hq_run_list to see available operations.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "operation": {
+                    "description": "Name of the whitelisted operation (e.g. \"version\"). Use hq_run_list to see available operations.",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "operation",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_run_list",
+        "description": "Lists the whitelisted `hq run` operations available through the bridge. Only pre-approved operations are executable — arbitrary commands are blocked to prevent secret exfiltration.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_secrets_generate_link",
+        "description": "Generates a time-limited link for human secret submission. The link allows a user to submit a secret value through a web form — no values are returned to the chat.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "secretName": {
+                    "description": "The name of the secret to generate a submission link for",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "secretName",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_secrets_list",
+        "description": "Lists secret names and metadata for a company. Returns names and sizes only — never reveals secret values. Values never enter the chat transcript.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_secrets_schema",
+        "description": "Parses a project's .env.schema to show what secrets a project needs (variable names, descriptions, required/optional). Returns schema info only — never actual values.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "project": {
+                    "description": "Project directory slug, e.g. \"my-app\"",
+                    "type": "string"
+                },
+                "company": {
+                    "description": "Company slug — must match one of your memberships",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "project",
+                "company"
+            ],
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_version",
+        "description": "Returns the hq-mcp bridge version",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "verbose": {
+                    "description": "Include build metadata",
+                    "type": "boolean"
+                }
+            },
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    },
+    {
+        "name": "hq_whoami",
+        "description": "Returns the HQ Cognito identity of the authenticated user: email, personUid, and token expiry. In the cloud transport, also verifies the caller's personal bucket is provisioned.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {},
+            "$schema": "http://json-schema.org/draft-07/schema#"
+        }
+    }
+];
+//# sourceMappingURL=hq-mcp-tools.generated.js.map

package/dist/lib/mcp/prompts.d.ts

@@ -0,0 +1,30 @@
+/**
+ * MCP prompts for hosts without slash commands (hq-anywhere US-011). Each
+ * prompt returns the HQ skill text from <HQ root>/.claude/skills/<name>/SKILL.md
+ * when the HQ root is known, and a short instruction otherwise.
+ */
+export interface McpPromptDefinition {
+    name: string;
+    description: string;
+    arguments: Array<{
+        name: string;
+        description: string;
+        required: boolean;
+    }>;
+}
+export declare const MCP_PROMPTS: readonly McpPromptDefinition[];
+export declare class PromptNotFoundError extends Error {
+    readonly code = "prompt_not_found";
+}
+export interface PromptMessage {
+    role: "user";
+    content: {
+        type: "text";
+        text: string;
+    };
+}
+export declare function getPrompt(name: string, args: Record<string, unknown>, hqRoot: string | null): {
+    description: string;
+    messages: PromptMessage[];
+};
+//# sourceMappingURL=prompts.d.ts.map

package/dist/lib/mcp/prompts.js

@@ -0,0 +1,48 @@
+/**
+ * MCP prompts for hosts without slash commands (hq-anywhere US-011). Each
+ * prompt returns the HQ skill text from <HQ root>/.claude/skills/<name>/SKILL.md
+ * when the HQ root is known, and a short instruction otherwise.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+const argsArg = { name: "args", description: "Arguments, as you would type them after the slash command", required: false };
+export const MCP_PROMPTS = [
+    { name: "startwork", description: "Resolve the current HQ context and pick the next piece of work", arguments: [argsArg] },
+    { name: "plan", description: "Create an execution-ready PRD and README for an HQ project", arguments: [argsArg] },
+    {
+        name: "run",
+        description: "Run or list HQ workers",
+        arguments: [
+            { name: "worker", description: "Worker id; leave empty to list workers", required: false },
+            { name: "skill", description: "Skill on that worker", required: false },
+            argsArg,
+        ],
+    },
+    { name: "handoff", description: "Save session state for a follow-up session", arguments: [argsArg] },
+];
+export class PromptNotFoundError extends Error {
+    code = "prompt_not_found";
+}
+export function getPrompt(name, args, hqRoot) {
+    const prompt = MCP_PROMPTS.find((p) => p.name === name);
+    if (!prompt)
+        throw new PromptNotFoundError(`unknown prompt ${name}; available: ${MCP_PROMPTS.map((p) => p.name).join(", ")}`);
+    const invocation = [`/${name}`, ...prompt.arguments.map((a) => args[a.name]).filter((v) => typeof v === "string" && v.trim() !== "")]
+        .join(" ");
+    let skill = null;
+    const skillPath = hqRoot ? path.join(hqRoot, ".claude", "skills", name, "SKILL.md") : null;
+    if (skillPath) {
+        try {
+            skill = fs.readFileSync(skillPath, "utf8");
+        }
+        catch (err) {
+            if (err.code !== "ENOENT")
+                throw err;
+        }
+    }
+    const text = skill
+        ? `The user invoked the HQ command \`${invocation}\`. HQ root: ${hqRoot}. Follow these instructions (paths are relative to the HQ root):\n\n${skill}`
+        : `The user invoked the HQ command \`${invocation}\`. The HQ skill file was not found${skillPath ? ` at ${skillPath}` : " (HQ root unknown; run `hq install --global`)"}. Use the hq_* tools to carry out the request.`;
+    return { description: prompt.description, messages: [{ role: "user", content: { type: "text", text } }] };
+}
+//# sourceMappingURL=prompts.js.map

package/dist/lib/mcp/tools.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Tool surface of `hq mcp serve` (hq-anywhere US-011).
+ *
+ * The hq-mcp tools come from src/lib/mcp/hq-mcp-tools.generated.ts, which
+ * scripts/generate-hq-mcp-tools.mjs builds from repos/public/hq-mcp. The four
+ * daemon-native tools are defined here. Names use underscores because
+ * Anthropic and OpenAI tool names reject dots (hq.resolve_company is exposed
+ * as hq_resolve_company).
+ *
+ * hqd answers every one of these through the `mcp.call` op, so a subagent
+ * without MCP can call the same tool with
+ * `hq daemon call mcp.call --json '{"name":"hq_journal_append","arguments":{...}}'`.
+ */
+import type { McpToolDefinition } from "./types.js";
+export type { McpToolDefinition } from "./types.js";
+export declare const HQD_NATIVE_TOOLS: readonly McpToolDefinition[];
+export declare const HQD_NATIVE_TOOL_NAMES: ReadonlySet<string>;
+/** Every tool `hq mcp serve` lists: the four native tools, then the hq-mcp set. */
+export declare const HQ_MCP_HOSTED_TOOLS: readonly McpToolDefinition[];
+export declare const MCP_TOOLS: readonly McpToolDefinition[];
+export declare const HQ_MCP_TOOL_NAMES: ReadonlySet<string>;
+//# sourceMappingURL=tools.d.ts.map