@indigoai-us/hq-cli 5.345.191 → 5.345.194

package/dist/utils/resident-package-preload.js

@@ -30,6 +30,11 @@ export const RESIDENT_PACKAGE_MODULES = {
     bot: [
         "../lib/flag-registry.js",
         "../commands/access.js",
+        "../commands/sources.js",
+        "../lib/hot-channels/adapters/index.js",
+        "../utils/vault-api.js",
+        "../commands/files-browse.js",
+        "@aws-sdk/client-s3",
         "../sentry.js", "../lib/doctor/client-health-reason-codes-flag.js", "@indigoai-us/hq-flags-client",
         "../lib/plan-limit-nag.js",
         "../utils/plan-gate-error.js",
@@ -173,6 +178,17 @@ const LOADERS = {
     bot: [
         () => import("../lib/flag-registry.js"),
         () => import("../commands/access.js"),
+        // The signals engine's adapters step (lib/signals/steps/adapters.ts)
+        // lazily imports the hot-channel sync when the bot's signals job fires.
+        () => import("../commands/sources.js"),
+        // The adapters step also lazily imports the builtin hot-channel registry
+        // (lib/hot-channels/adapters/index.ts) once the adapter catalog is gated.
+        () => import("../lib/hot-channels/adapters/index.js"),
+        // The upload step (lib/signals/steps/upload.ts) lazily imports the vault
+        // API, the company presign client and the S3 client to post contributions.
+        () => import("../utils/vault-api.js"),
+        () => import("../commands/files-browse.js"),
+        () => import("@aws-sdk/client-s3"),
         async () => {
             const { preloadSentrySdk } = await import("../sentry.js");
             await import("../lib/doctor/client-health-reason-codes-flag.js");

package/dist/utils/vault-api.d.ts

@@ -129,6 +129,7 @@ export declare function agentIdentityUnsupportedError(agentUid: string, command?
  */
 export declare function resolveCallerPersonUid(token: string, baseUrl?: string, opts?: {
     command?: string;
+    signal?: AbortSignal;
 }): Promise<string>;
 /**
  * A signal that aborts when any input signal aborts, with that signal's

package/dist/utils/vault-api.js

@@ -770,7 +770,7 @@ export async function resolveCallerPersonUid(token, baseUrl, opts = {}) {
     const agentUid = agentUidFromToken(token);
     if (agentUid)
         throw agentIdentityUnsupportedError(agentUid, opts.command);
-    return lookupCallerPersonUid(token, baseUrl);
+    return lookupCallerPersonUid(token, baseUrl, opts.signal);
 }
 /**
  * A signal that aborts when any input signal aborts, with that signal's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.191",
+  "version": "5.345.194",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {
@@ -52,7 +52,7 @@
     "@aws-sdk/client-iot-data-plane": "^3.1096.0",
     "@aws-sdk/client-s3": "^3.1049.0",
     "@aws-sdk/dsql-signer": "^3.1146.0",
-    "@indigoai-us/hq-cloud": "6.18.107",
+    "@indigoai-us/hq-cloud": "6.18.108",
     "@indigoai-us/hq-flags-client": "^0.2.0",
     "@modelcontextprotocol/sdk": "1.32.2",
     "@sentry/node": "^10.49.0",
@@ -68,7 +68,7 @@
     "semver": "^7.8.5",
     "simple-git": "^3.27.0",
     "smol-toml": "1.9.1",
-    "varlock": "1.23.0"
+    "varlock": "1.24.0"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
@@ -114,11 +114,11 @@
     "*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}": "eslint --cache --no-error-on-unmatched-pattern"
   },
   "optionalDependencies": {
-    "@indigoai-us/hq-hook-win32-x64": "5.345.191",
-    "@indigoai-us/hq-hook-win32-arm64": "5.345.191",
-    "@indigoai-us/hq-hook-darwin-x64": "5.345.191",
-    "@indigoai-us/hq-hook-darwin-arm64": "5.345.191",
-    "@indigoai-us/hq-hook-linux-x64": "5.345.191",
-    "@indigoai-us/hq-hook-linux-arm64": "5.345.191"
+    "@indigoai-us/hq-hook-win32-x64": "5.345.194",
+    "@indigoai-us/hq-hook-win32-arm64": "5.345.194",
+    "@indigoai-us/hq-hook-darwin-x64": "5.345.194",
+    "@indigoai-us/hq-hook-darwin-arm64": "5.345.194",
+    "@indigoai-us/hq-hook-linux-x64": "5.345.194",
+    "@indigoai-us/hq-hook-linux-arm64": "5.345.194"
   }
 }

package/dist/lib/bot/fleet-default-flag.d.ts

@@ -1,31 +0,0 @@
-import { type FlagClient, type FlagClientOptions } from "@indigoai-us/hq-flags-client";
-/** Personal bots are created on the HQ Fleet Runtime for companies with this flag on. */
-export declare const LOCAL_BOTS_FLEET_DEFAULT_FLAG = "agents.local-bots-hq-fleet-default";
-export declare const LOCAL_BOTS_FLEET_DEFAULT_ENV = "HQ_BOT_FLEET_DEFAULT";
-type DefaultFlagClient = Pick<FlagClient, "ready" | "isEnabled" | "close">;
-export interface OwnerMembership {
-    companyUid: string;
-    companySlug?: string;
-    status: string;
-}
-export interface FleetDefaultFlagDependencies {
-    env?: NodeJS.ProcessEnv;
-    createClient?: (options: FlagClientOptions) => DefaultFlagClient;
-    getToken?: FlagClientOptions["getToken"];
-    fetch?: typeof fetch;
-    /** The signed-in owner's memberships; never prompts for sign-in. */
-    memberships?: () => Promise<OwnerMembership[]>;
-}
-/** Every active company the signed-in owner can access, independent of rollout flags or local folders. */
-export declare function fleetOwnerCompanies(dependencies?: Pick<FleetDefaultFlagDependencies, "memberships">): Promise<string[]>;
-/**
- * The owner's companies that turned the fleet-default flag on: active
- * memberships whose company folder is on this computer. Any lookup failure
- * leaves that company out. `HQ_BOT_FLEET_DEFAULT=1` skips the flag and keeps
- * every such membership.
- */
-export declare function fleetDefaultCompanies(hqRoot: string, dependencies?: FleetDefaultFlagDependencies): Promise<string[]>;
-/** `HQ_BOT_FLEET_DEFAULT=1|0` overrides the registry; otherwise on when any flagged company was found. */
-export declare function fleetRuntimeIsDefault(flaggedCompanies: readonly string[], env?: NodeJS.ProcessEnv): boolean;
-export {};
-//# sourceMappingURL=fleet-default-flag.d.ts.map

package/dist/lib/bot/fleet-default-flag.js

@@ -1,127 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { loadCachedTokens } from "@indigoai-us/hq-cloud";
-import { createFlagClient, } from "@indigoai-us/hq-flags-client";
-import { ensureCognitoToken } from "../../utils/cognito-session.js";
-import { vaultApiFetch } from "../../utils/vault-api.js";
-import { resolveFlagGate } from "../flag-registry.js";
-import { resolveFlagRegistryEndpoint } from "../flag-registry-endpoint.js";
-/** Personal bots are created on the HQ Fleet Runtime for companies with this flag on. */
-export const LOCAL_BOTS_FLEET_DEFAULT_FLAG = "agents.local-bots-hq-fleet-default";
-export const LOCAL_BOTS_FLEET_DEFAULT_ENV = "HQ_BOT_FLEET_DEFAULT";
-const FLAG_TIMEOUT_MS = 3_000;
-const MEMBERSHIP_TIMEOUT_MS = 10_000;
-const COMPANY_UID_RE = /^cmp_[A-Za-z0-9]{3,128}$/;
-const COMPANY_SLUG_RE = /^[a-z0-9][a-z0-9_-]{0,63}$/;
-async function signedInMemberships() {
-    const token = await ensureCognitoToken({ tokenSource: "person", interactive: false });
-    const res = await vaultApiFetch({ token, path: "/membership/me", signal: AbortSignal.timeout(MEMBERSHIP_TIMEOUT_MS) });
-    if (!res.ok)
-        throw new Error(`membership lookup returned ${res.status}`);
-    const data = (await res.json());
-    if (!Array.isArray(data.memberships))
-        throw new Error("membership lookup returned no list");
-    return data.memberships;
-}
-/** Every active company the signed-in owner can access, independent of rollout flags or local folders. */
-export async function fleetOwnerCompanies(dependencies = {}) {
-    const memberships = await (dependencies.memberships ?? signedInMemberships)();
-    const companies = new Set();
-    for (const membership of memberships) {
-        const slug = membership.companySlug?.trim() ?? "";
-        if (membership.status !== "active" || !COMPANY_UID_RE.test(membership.companyUid))
-            continue;
-        if (!COMPANY_SLUG_RE.test(slug) || slug === "personal")
-            continue;
-        companies.add(slug);
-    }
-    return [...companies].sort((a, b) => a.localeCompare(b));
-}
-function hasLocalFolder(hqRoot, slug) {
-    try {
-        const stat = fs.lstatSync(path.join(hqRoot, "companies", slug));
-        return stat.isDirectory() && !stat.isSymbolicLink();
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * The owner's companies that turned the fleet-default flag on: active
- * memberships whose company folder is on this computer. Any lookup failure
- * leaves that company out. `HQ_BOT_FLEET_DEFAULT=1` skips the flag and keeps
- * every such membership.
- */
-export async function fleetDefaultCompanies(hqRoot, dependencies = {}) {
-    const env = dependencies.env ?? process.env;
-    let memberships;
-    try {
-        memberships = await (dependencies.memberships ?? signedInMemberships)();
-    }
-    catch {
-        return [];
-    }
-    const candidates = new Map();
-    for (const membership of memberships) {
-        const slug = membership.companySlug?.trim() ?? "";
-        if (membership.status !== "active" || !COMPANY_UID_RE.test(membership.companyUid))
-            continue;
-        if (!COMPANY_SLUG_RE.test(slug) || slug === "personal" || !hasLocalFolder(hqRoot, slug))
-            continue;
-        candidates.set(slug, membership.companyUid);
-    }
-    const entries = [...candidates.entries()].sort(([a], [b]) => a.localeCompare(b));
-    const override = env[LOCAL_BOTS_FLEET_DEFAULT_ENV]?.trim();
-    if (override === "1" || override === "true")
-        return entries.map(([slug]) => slug);
-    const createClient = dependencies.createClient ?? createFlagClient;
-    const getToken = dependencies.getToken ?? (() => loadCachedTokens()?.idToken ?? "");
-    const endpoint = resolveFlagRegistryEndpoint(undefined, env);
-    const doFetch = dependencies.fetch ?? globalThis.fetch;
-    const flagOn = async (slug, companyUid) => {
-        let client;
-        let failed = false;
-        try {
-            client = createClient({
-                endpoint,
-                companyUid,
-                companyIdentifiers: [slug],
-                env: {},
-                getToken,
-                ...(doFetch ? { fetch: doFetch } : {}),
-                refreshIntervalMs: 0,
-                requestTimeoutMs: FLAG_TIMEOUT_MS,
-                onError: () => {
-                    failed = true;
-                },
-            });
-            await client.ready();
-            if (failed)
-                return false;
-            return resolveFlagGate(client, LOCAL_BOTS_FLEET_DEFAULT_FLAG, { fallback: false }, () => false);
-        }
-        catch {
-            return false;
-        }
-        finally {
-            try {
-                client?.close();
-            }
-            catch {
-                /* closing a flag client never changes the answer */
-            }
-        }
-    };
-    const results = await Promise.all(entries.map(([slug, uid]) => flagOn(slug, uid)));
-    return entries.filter((_, index) => results[index]).map(([slug]) => slug);
-}
-/** `HQ_BOT_FLEET_DEFAULT=1|0` overrides the registry; otherwise on when any flagged company was found. */
-export function fleetRuntimeIsDefault(flaggedCompanies, env = process.env) {
-    const override = env[LOCAL_BOTS_FLEET_DEFAULT_ENV]?.trim();
-    if (override === "1" || override === "true")
-        return true;
-    if (override === "0" || override === "false")
-        return false;
-    return flaggedCompanies.length > 0;
-}
-//# sourceMappingURL=fleet-default-flag.js.map