@indigoai-us/hq-cli 5.345.160 → 5.345.161

package/dist/commands/lanes-session-start.js

@@ -4,8 +4,17 @@ import os from "node:os";
 import path from "node:path";
 import { createHash, randomUUID } from "node:crypto";
 import { resolveLanesHqRoot } from "../lib/lanes/hq-root.js";
-import { readLanesRegistryFlagFailOpen } from "../lib/lanes/registry-flag.js";
+import { readLanesRegistryFlagOffline, readLanesRegistryFlagResult } from "../lib/lanes/registry-flag.js";
 import { LANE_CONDUCT_SESSION_START_FLAG, LANE_ORPHAN_SWEEP_CONTEXT_FLAG, LANE_ORPHAN_SWEEP_ROOT_KEYING_FLAG } from "../lib/lanes/flag-keys.js";
+const SESSION_START_FLAGS = [
+    LANE_CONDUCT_SESSION_START_FLAG,
+    LANE_ORPHAN_SWEEP_ROOT_KEYING_FLAG,
+    LANE_ORPHAN_SWEEP_CONTEXT_FLAG,
+];
+/** Offline flag values older than this trigger one background registry read. */
+export const SESSION_START_FLAG_REFRESH_AFTER_MS = 10 * 60 * 1000;
+const SESSION_START_FLAG_REFRESH_LEASE_MS = 60 * 1000;
+const SESSION_START_FLAG_REFRESH_LEASE = "lanes-session-start-flag-refresh.lock";
 const CODEX_DEFAULT_KEYS = ["conduct_engine", "conduct_child_model", "conduct_child_effort", "conduct_default_source"];
 function readSessionMetaValue(text, key) {
     const line = text.split(/\r?\n/).find((entry) => new RegExp(`^\\s*${key}:`).test(entry));
@@ -247,6 +256,58 @@ export function startSessionStartOrphanSweep(root, env = process.env, spawnDetac
         // SessionStart's orphan report is advisory and must never block startup.
     }
 }
+function flagRefreshLeaseDir(env) {
+    const stateDir = env.HQ_STATE_DIR?.trim();
+    if (stateDir)
+        return stateDir;
+    const home = env.HOME?.trim() || env.USERPROFILE?.trim();
+    return home ? path.join(home, ".hq") : null;
+}
+/**
+ * Start a detached `hq lanes session-start --refresh-flags` so the registry
+ * read never runs inside the SessionStart hook. A short lease keeps a burst of
+ * session starts to one refresh. An env without a state dir never spawns.
+ */
+export function startSessionStartFlagRefresh(env, spawnDetached = spawn, now = Date.now()) {
+    const dir = flagRefreshLeaseDir(env);
+    const cli = process.argv[1];
+    if (!dir || !cli)
+        return false;
+    try {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        const lease = path.join(dir, SESSION_START_FLAG_REFRESH_LEASE);
+        try {
+            if (now - fs.statSync(lease).mtimeMs < SESSION_START_FLAG_REFRESH_LEASE_MS)
+                return false;
+            fs.rmSync(lease, { force: true });
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                return false;
+        }
+        try {
+            fs.closeSync(fs.openSync(lease, "wx", 0o600));
+        }
+        catch {
+            return false;
+        }
+        const child = spawnDetached(process.execPath, [cli, "lanes", "session-start", "--refresh-flags"], {
+            detached: true,
+            stdio: "ignore",
+            env: { ...env, HQ_NO_UPDATE_CHECK: "1" },
+        });
+        child.on("error", () => { });
+        child.unref();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Read the session-start flags from the registry, refreshing the offline cache. */
+export async function refreshSessionStartFlags(env = process.env) {
+    await Promise.all(SESSION_START_FLAGS.map((flag) => readLanesRegistryFlagResult(flag, { env, defaultValue: true, reportFailure: () => undefined }).catch(() => undefined)));
+}
 /** SessionStart-compatible, fail-open conduct bootstrap. */
 export async function runLaneSessionStart(options = {}) {
     const env = options.env ?? process.env;
@@ -278,19 +339,33 @@ export async function runLaneSessionStart(options = {}) {
         if (/(^|,)auto-conduct(,|$)/.test(disabledHooks))
             return;
         const root = (options.resolveRoot ?? ((e, cwd) => resolveLanesHqRoot({ env: e, cwd })))(env, options.cwd);
-        const flagEnabled = await readLanesRegistryFlagFailOpen(LANE_CONDUCT_SESSION_START_FLAG, {
-            env,
-            defaultValue: true,
-            reportFailure: (error) => {
-                const kind = error instanceof Error ? error.name : "Error";
-                debug(`hq lanes session-start: flag read failed (${kind})`);
-            },
-        });
+        // Flags come from offline state only. A missing or old value fails open and
+        // schedules one background registry read for the next session start.
+        let refreshNeeded = false;
+        const readFlag = (flag) => {
+            let read = null;
+            try {
+                read = readLanesRegistryFlagOffline(flag, { env, defaultValue: true });
+            }
+            catch {
+                read = null;
+            }
+            if (!read || (read.source !== "local-override" && read.ageMs > SESSION_START_FLAG_REFRESH_AFTER_MS))
+                refreshNeeded = true;
+            return read?.value ?? true;
+        };
+        const flagEnabled = readFlag(LANE_CONDUCT_SESSION_START_FLAG);
+        const rootScoped = readFlag(LANE_ORPHAN_SWEEP_ROOT_KEYING_FLAG);
+        const contextEnabled = readFlag(LANE_ORPHAN_SWEEP_CONTEXT_FLAG);
+        if (refreshNeeded) {
+            try {
+                (options.refreshFlags ?? ((e) => { startSessionStartFlagRefresh(e); }))(env);
+            }
+            catch { /* advisory */ }
+        }
         if (!flagEnabled)
             return;
-        const rootScoped = await readLanesRegistryFlagFailOpen(LANE_ORPHAN_SWEEP_ROOT_KEYING_FLAG, { env, defaultValue: true });
         (options.startSweep ?? ((r, e) => startSessionStartOrphanSweep(r, e, spawn, rootScoped)))(root, env);
-        const contextEnabled = await readLanesRegistryFlagFailOpen(LANE_ORPHAN_SWEEP_CONTEXT_FLAG, { env, defaultValue: true });
         if (contextEnabled) {
             const count = readOrphanCount(root, env, rootScoped, (error) => debug(`hq lanes session-start: orphan report read failed (${error instanceof Error ? error.name : "Error"})`));
             if (count > 0)
@@ -324,6 +399,12 @@ export async function runLaneSessionStart(options = {}) {
 export function registerLaneSessionStartCommand(lanes) {
     lanes.command("session-start", { hidden: true })
         .description("Internal SessionStart bootstrap")
-        .action(async () => runLaneSessionStart());
+        .option("--refresh-flags", "Refresh the offline session-start flag values from the registry")
+        .action(async (opts) => {
+        if (opts.refreshFlags)
+            await refreshSessionStartFlags();
+        else
+            await runLaneSessionStart();
+    });
 }
 //# sourceMappingURL=lanes-session-start.js.map

package/dist/commands/meetings.d.ts

@@ -9,5 +9,16 @@ export declare const SHORT_ID_MAX_PAGES = 50;
  * names no plan: the flat plans are closed.
  */
 export declare function meetingPaymentRequiredLines(body: Record<string, unknown>, resolvePlan?: () => Promise<PricingPlan | null>): Promise<string[]>;
+/**
+ * The company a `hq meetings` call is about: the explicit `--company` value,
+ * otherwise the company an explicitly named HQ session is bound to (the session's company
+ * lock, from `scope-capability.json` or `meta.yaml`). A session bound to
+ * Personal, an unbound session, or an unreadable lock gives undefined so the
+ * server's own default applies. Before this, every subcommand sent no
+ * company at all without `--company`, so the list, get, transcript and
+ * search views silently showed only the caller's personal recordings.
+ * Feedback 04771691-fcbc-4847-899a-6c966c561b52.
+ */
+export declare function sessionCompanySlug(env?: NodeJS.ProcessEnv): string | undefined;
 export declare function registerMeetingsCommand(program: Command): void;
 //# sourceMappingURL=meetings.d.ts.map

package/dist/commands/meetings.js

@@ -1,6 +1,8 @@
 import chalk from "chalk";
 import { readFile } from "node:fs/promises";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
+import { readSessionCompanyLock } from "../lib/session-company-lock.js";
+import { sessionIdFromEnv } from "../lib/core-utils/session-id.js";
 import { vaultApiFetch, getCompanyUid, resolveCallerPersonUid, } from "../utils/vault-api.js";
 import { isPlanGateError, planGateErrorFromPayload, } from "../utils/plan-gate-error.js";
 import { mapWithConcurrency } from "./sync-manifest.js";
@@ -434,11 +436,39 @@ function printMeetingTable(meetings) {
         ].join("  "));
     }
 }
+/**
+ * The company a `hq meetings` call is about: the explicit `--company` value,
+ * otherwise the company an explicitly named HQ session is bound to (the session's company
+ * lock, from `scope-capability.json` or `meta.yaml`). A session bound to
+ * Personal, an unbound session, or an unreadable lock gives undefined so the
+ * server's own default applies. Before this, every subcommand sent no
+ * company at all without `--company`, so the list, get, transcript and
+ * search views silently showed only the caller's personal recordings.
+ * Feedback 04771691-fcbc-4847-899a-6c966c561b52.
+ */
+export function sessionCompanySlug(env = process.env) {
+    // The shared reader also supports the last-writer-wins .current pointer.
+    // It cannot identify a plain terminal or cron caller's session.
+    if (!sessionIdFromEnv(env))
+        return undefined;
+    let lock;
+    try {
+        lock = readSessionCompanyLock(env);
+    }
+    catch (err) {
+        // Fall through to the server default, but say why so an unbound call is
+        // never mistaken for a working company scope.
+        console.error(chalk.dim(`  (session company not applied: ${err instanceof Error ? err.message : String(err)})`));
+        return undefined;
+    }
+    const primary = lock?.companies[0];
+    return primary && primary !== "personal" ? primary : undefined;
+}
 export function registerMeetingsCommand(program) {
     const meetings = program
         .command("meetings")
         .description("View and search meeting recordings, transcripts, and notes")
-        .option("--company <slug>", "Company slug (for multi-company users)")
+        .option("--company <slug>", "Company slug (defaults to the company this HQ session is bound to)")
         .option("--json", "Output raw JSON instead of formatted text");
     // ── hq meetings list ──────────────────────────────────────────────
     meetings
@@ -450,7 +480,7 @@ export function registerMeetingsCommand(program) {
         try {
             const token = await ensureCognitoToken();
             const query = {};
-            const companySlug = meetings.opts().company;
+            const companySlug = meetings.opts().company ?? sessionCompanySlug();
             if (opts.limit)
                 query.limit = opts.limit;
             if (opts.next)
@@ -488,9 +518,9 @@ export function registerMeetingsCommand(program) {
         .action(async (recallBotId, opts) => {
         try {
             const token = await ensureCognitoToken();
-            const companySlug = meetings.opts().company;
+            const companySlug = meetings.opts().company ?? sessionCompanySlug();
             if (!companySlug)
-                throw new Error("--company <slug|uid> is required for live transcripts");
+                throw new Error("--company <slug|uid> is required for live transcripts (this session is not bound to a company)");
             const companyId = companySlug.startsWith("cmp_") ? companySlug : await getCompanyUid(token, companySlug);
             if (!recallBotId) {
                 if (opts.follow || opts.since)
@@ -610,9 +640,9 @@ export function registerMeetingsCommand(program) {
         .description("Import a normalized historical transcript JSON file")
         .action(async (file) => {
         try {
-            const companySlug = meetings.opts().company;
+            const companySlug = meetings.opts().company ?? sessionCompanySlug();
             if (!companySlug) {
-                throw new Error("--company <slug> is required for historical imports");
+                throw new Error("--company <slug> is required for historical imports (this session is not bound to a company)");
             }
             const bytes = await readFile(file);
             if (bytes.byteLength > 5 * 1024 * 1024) {
@@ -666,7 +696,7 @@ export function registerMeetingsCommand(program) {
         .action(async (meetingUrl) => {
         try {
             const token = await ensureCognitoToken();
-            const companySlug = meetings.opts().company;
+            const companySlug = meetings.opts().company ?? sessionCompanySlug();
             // Always name a company. With no companyId the backend files the bot
             // under Personal, which can never record, so an entitled user would
             // get the payment-required refusal. Without --company this uses the
@@ -707,7 +737,7 @@ export function registerMeetingsCommand(program) {
         try {
             const token = await ensureCognitoToken();
             const query = {};
-            const companySlug = meetings.opts().company;
+            const companySlug = meetings.opts().company ?? sessionCompanySlug();
             if (companySlug)
                 query.companyId = await getCompanyUid(token, companySlug);
             const meetingId = await resolveShortId(token, rawId, query);
@@ -832,7 +862,7 @@ export function registerMeetingsCommand(program) {
         try {
             const token = await ensureCognitoToken();
             const params = { q: query };
-            const companySlug = meetings.opts().company;
+            const companySlug = meetings.opts().company ?? sessionCompanySlug();
             if (companySlug)
                 params.companyId = await getCompanyUid(token, companySlug);
             const res = await vaultApiFetch({
@@ -863,7 +893,7 @@ export function registerMeetingsCommand(program) {
         try {
             const token = await ensureCognitoToken();
             const query = {};
-            const companySlug = meetings.opts().company;
+            const companySlug = meetings.opts().company ?? sessionCompanySlug();
             if (companySlug)
                 query.companyId = await getCompanyUid(token, companySlug);
             const meetingId = await resolveShortId(token, rawId, query);
@@ -932,7 +962,7 @@ export function registerMeetingsCommand(program) {
         try {
             const token = await ensureCognitoToken();
             const query = {};
-            const companySlug = meetings.opts().company;
+            const companySlug = meetings.opts().company ?? sessionCompanySlug();
             if (companySlug)
                 query.companyId = await getCompanyUid(token, companySlug);
             const meetingId = await resolveShortId(token, rawId, query);