@indigoai-us/hq-cli 5.345.88 → 5.345.89

package/dist/commands/core-delegate.js

@@ -11,6 +11,7 @@ import { buildCmdExeSpawnPlan, isWindowsBatchFile } from "../utils/windows-spawn
 import { describeCoreCommand } from "./core-command-catalog.js";
 import { resolveLiveRoot } from "../utils/hq-roots.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
+import { brainstormFrontmatterSet, brainstormSummary, brainstormTitle } from "./core-delegate-brainstorm.js";
 export const CORE_NATIVE_DELEGATE_FLAG = "core-native-delegate";
 const SCRIPT_ASSETS = {
     resolve: "core/scripts/hq-delegate-resolve.sh",
@@ -52,7 +53,7 @@ const USAGE_TEXT = {
     pickup: "# hq-core: public\n# hq-delegate-pickup.sh — close the delegation loop with a receipt or a FAILED\n# state (2026-09-07).\n#\n# Why: the delegate pipeline ended at \"sent\", which is a send receipt, not a\n# delivery receipt. Seven delegations sat at sent/building with no way to tell\n# whether the recipient could act. This script adds the two missing states:\n#\n#   sent --(evidence)--> picked-up      recipient demonstrably has the work\n#   sent --(silence past window)--> failed   nobody picked it up; sender is told why\n#\n# Evidence, checked in order (any one suffices):\n#   1. --ack \"<text>\"            an explicit acknowledgement (DM reply, chat) —\n#                                recorded verbatim with a timestamp\n#   2. repo branch has a commit by the recipient after sentAt\n#      (manifest.repo.path + repo.branch, author email == to.principal)\n#   3. --evidence \"<free text>\"  any other proof the operator observed\n#\n# Usage:\n#   hq-delegate-pickup.sh --manifest <path> --ack \"<text>\"        # record receipt\n#   hq-delegate-pickup.sh --manifest <path> --evidence \"<text>\"   # record receipt\n#   hq-delegate-pickup.sh --manifest <path> --check [--window-hours N]   # probe repo; fail if silent past window (default 72)\n#   hq-delegate-pickup.sh --manifest <path> --status               # print state line\n#\n# Exit 0: picked-up (or already). Exit 5: failed (window elapsed, no evidence).\n# Exit 6: still waiting (inside window, no evidence). Exit 2: usage/precondition.\nset -uo pipefail\n",
     repo: "hq-delegate-repo.sh — code/branch handover for a delegation: make sure the\nproject's branch exists on the remote, record uncommitted work as NOT\ntransferred, and verify the recipient's repository access read-only.\n\nUsage:\n  core/scripts/hq-delegate-repo.sh --manifest <path> [--yes] [--github-user <login>]\n\nBehavior (driven by the manifest's repo{} block; no-op when repo is null):\n  - records remote URL and the branch's headSha into the manifest\n  - a branch that exists only locally requires confirmation: without --yes\n    the helper prints the plan and exits 2; with --yes it pushes via an\n    explicitly anchored `git -C <abs path> push -u origin <branch>`\n  - dirty/untracked files are captured into repo.dirtyFiles[] and appended\n    to BRIEF.md as work NOT transferred — never silently dropped\n  - recipient access is checked read-only via gh when --github-user is\n    given; otherwise (or on a gh failure) repo.accessVerified stays false\n    and the brief says so plainly — the helper never claims unverified access\n  - never touches vaultPrefixes[] and never pushes repo content to the vault\n\nEnv: HQ_ROOT — HQ root override (default: resolved from script location)\n",
     secrets: "hq-delegate-secrets.sh — grant a delegation recipient access to the secrets\na project needs, BY NAME ONLY. No command in this helper ever reads,\nprints, logs, or interpolates a secret value.\n\nUsage:\n  core/scripts/hq-delegate-secrets.sh --manifest <path> [--yes] [--no-secrets]\n    [--env-schema <path>]\n\nBehavior:\n  - derives required secret NAMES from the project's / repo's .env.schema\n    (--env-schema overrides discovery); no schema -> records secrets: []\n    and says so plainly rather than guessing at credentials\n  - without --yes: prints a full-prose confirmation listing every name and\n    the principal, then exits 2 granting nothing — this step is a privilege\n    handover and gets its own confirmation, separate from the file grants\n  - with --yes: hq secrets share <NAME> --with <principal> --permission read\n    per name, then records the names (and only the names) in the manifest\n  - --no-secrets: skips everything, records {secrets: [], secretsSkipped: true}\n\nConsumption on the recipient's side is via `hq run` / `hq secrets exec` —\ndocumented in the brief; values never appear in any delegation artifact\n(policy hq-delegate-never-inlines-secrets-or-share-urls).\n",
-    transfer: "hq-delegate-transfer.sh — make a delegation real everywhere HQ tracks\nownership: board entry, PRD metadata, work mesh, and the project journal.\n\nUsage:\n  core/scripts/hq-delegate-transfer.sh --manifest <path>\n\nBehavior (mode \"transfer\"; mode \"share\" skips every mutation):\n  1. companies/<co>/board.json — the project's entry gets owner=<recipient>\n     and a bumped updated_at; created (once) if absent\n  2. prd.json metadata gains owner, delegatedFrom, delegatedAt\n  3. work-mesh: `done` event closes the delegator's in-progress thread and\n     broadcasts the reassignment; silently skipped when the helper is\n     unavailable (local/offline installs) — the transfer still succeeds\n  4. a dated \"Delegated\" stanza is appended to the project journal naming\n     the recipient, delegation id, and transferred scope\n\nIdempotent: re-running updates owner/timestamps in place — never a\nduplicate board entry, never a duplicated journal stanza.\n\nThe delegator's own vault access is untouched (granting the recipient\nwrite does not revoke anything).\n\nEnv: HQ_ROOT — HQ root override (default: resolved from script location)\n",
+    transfer: "hq-delegate-transfer.sh — make a delegation real everywhere HQ tracks\nownership: board entry, PRD metadata, work mesh, and the project journal.\n\nUsage:\n  core/scripts/hq-delegate-transfer.sh --manifest <path>\n\nBehavior (mode \"transfer\"; mode \"share\" skips every mutation):\n  1. companies/<co>/board.json — the project's entry gets owner=<recipient>\n     and a bumped updated_at; created (once) if absent. A brainstorm-stage\n     entry (status exploring, brainstorm_path set) is matched by\n     brainstorm_path and keeps its status.\n  2. prd.json metadata gains owner, delegatedFrom, delegatedAt; for a\n     brainstorm-stage project the same three keys land in the\n     brainstorm.md frontmatter (owner, delegated_from, delegated_at)\n  3. work-mesh: `done` event closes the delegator's in-progress thread and\n     broadcasts the reassignment; silently skipped when the helper is\n     unavailable (local/offline installs) — the transfer still succeeds\n  4. a dated \"Delegated\" stanza is appended to the project journal naming\n     the recipient, delegation id, and transferred scope\n\nIdempotent: re-running updates owner/timestamps in place — never a\nduplicate board entry, never a duplicated journal stanza.\n\n",
 };
 function usage(name) {
     return USAGE_TEXT[name];
@@ -189,7 +190,6 @@ export function moveFile(source, target, fileSystem = fs) {
 }
 export function writeJsonAtomically(target, value, siblingTemp = false, fileSystem = fs) {
     const serialized = serializeJqJson(value, "pretty");
-    // Native delegate JSON writers use LF on every platform.
     if (siblingTemp) {
         const temporary = `${target}.tmp.${randomBytes(6).toString("hex")}`;
         let fd;
@@ -918,14 +918,25 @@ function runTransfer(args, context) {
     }
     const now = jqRawPath(document, "ownershipTransferredAt") || new Date().toISOString().replace(/\.\d{3}Z$/, "Z");
     const today = (process.env.HQ_DELEGATE_NOW || new Date().toISOString()).slice(0, 10);
+    const stage = jqRawPath(document, "project.stage", "prd");
     const prdPath = `companies/${company}/projects/${project}/prd.json`;
     const prdAbs = path.join(root, prdPath);
+    const brainstormPath = `companies/${company}/projects/${project}/brainstorm.md`;
+    const brainstormAbs = path.join(root, brainstormPath);
     const projectDir = path.join(root, "companies", company, "projects", project);
     const board = path.join(root, "companies", company, "board.json");
-    if (!fs.existsSync(prdAbs) || !fs.statSync(prdAbs).isFile()) {
+    if (stage !== "prd" && stage !== "brainstorm") {
+        writeErr(`${prefix} manifest project.stage is '${stage}' — expected prd or brainstorm\n`);
+        return 1;
+    }
+    if (stage === "prd" && (!fs.existsSync(prdAbs) || !fs.statSync(prdAbs).isFile())) {
         writeErr(`${prefix} prd not found: ${prdPath}\n`);
         return 1;
     }
+    if (stage === "brainstorm" && (!fs.existsSync(brainstormAbs) || !fs.statSync(brainstormAbs).isFile())) {
+        writeErr(`${prefix} brainstorm.md not found: ${brainstormPath}\n`);
+        return 1;
+    }
     if (fs.existsSync(board)) {
         if (!jqValid(board)) {
             writeErr(`${prefix} board.json is not valid JSON: ${board}\n`);
@@ -936,9 +947,9 @@ function runTransfer(args, context) {
         fs.mkdirSync(path.dirname(board), { recursive: true });
         fs.writeFileSync(board, '{"projects": []}\n');
     }
-    const prd = readJsonFile(prdAbs);
-    const title = jqRawPath(prd, "name");
-    const descriptionValue = jqFallback(jsonAt(prd, "description"), "");
+    const prd = stage === "prd" ? readJsonFile(prdAbs) : undefined;
+    const title = stage === "prd" ? jqRawPath(prd, "name") : brainstormTitle(brainstormAbs);
+    const descriptionValue = stage === "prd" ? jqFallback(jsonAt(prd, "description"), "") : brainstormSummary(brainstormAbs);
     const description = Buffer.from(serializeJqJson(descriptionValue, "raw"), "utf8")
         .subarray(0, 300).toString("utf8").replace(/\n+$/, "");
     const boardDocument = readJsonFile(board);
@@ -948,35 +959,46 @@ function runTransfer(args, context) {
     const projects = Array.isArray(projectsValue)
         ? projectsValue
         : isRecord(projectsValue) ? Object.values(projectsValue) : [];
-    const hasProject = projects.some((entry) => jsonAt(entry, "prd_path") === prdPath);
+    const matchPath = stage === "prd" ? prdPath : brainstormPath;
+    const hasProject = projects.some((entry) => jsonAt(entry, stage === "prd" ? "prd_path" : "brainstorm_path") === matchPath);
     if (hasProject) {
-        boardDocument.projects = projects.map((entry) => jsonAt(entry, "prd_path") === prdPath && isRecord(entry)
+        boardDocument.projects = projects.map((entry) => jsonAt(entry, stage === "prd" ? "prd_path" : "brainstorm_path") === matchPath && isRecord(entry)
             ? { ...entry, owner: principal, updated_at: now }
             : entry);
     }
     else {
-        boardDocument.projects = [...projects, {
-                id: `proj-${project}`,
-                title,
-                description,
-                status: "in_progress",
-                owner: principal,
-                prd_path: prdPath,
-                created_at: now,
-                updated_at: now,
-            }];
+        const entry = {
+            id: `proj-${project}`,
+            title,
+            description,
+            status: stage === "prd" ? "in_progress" : "exploring",
+            owner: principal,
+            prd_path: stage === "prd" ? prdPath : null,
+            created_at: now,
+            updated_at: now,
+        };
+        if (stage === "brainstorm")
+            entry.brainstorm_path = brainstormPath;
+        boardDocument.projects = [...projects, entry];
     }
     boardDocument.updated_at = now;
     writeJsonAtomically(board, boardDocument);
-    if (!isRecord(prd))
-        throw new TypeError("Cannot update non-object prd.json");
-    if (!isRecord(prd.metadata))
-        prd.metadata = {};
-    const metadata = prd.metadata;
-    metadata.owner = principal;
-    metadata.delegatedFrom = from;
-    metadata.delegatedAt = now;
-    writeJsonAtomically(prdAbs, prd);
+    if (stage === "prd") {
+        if (!isRecord(prd))
+            throw new TypeError("Cannot update non-object prd.json");
+        if (!isRecord(prd.metadata))
+            prd.metadata = {};
+        const metadata = prd.metadata;
+        metadata.owner = principal;
+        metadata.delegatedFrom = from;
+        metadata.delegatedAt = now;
+        writeJsonAtomically(prdAbs, prd);
+    }
+    else {
+        brainstormFrontmatterSet(brainstormAbs, "owner", principal);
+        brainstormFrontmatterSet(brainstormAbs, "delegated_from", from);
+        brainstormFrontmatterSet(brainstormAbs, "delegated_at", now);
+    }
     if (commandExists("hq", context.cwd)) {
         const sessionId = process.env.HQ_SESSION_ID || "delegate";
         const mesh = subprocess("hq", ["mesh", "session", "note", "--enqueue", "--session-id", sessionId, "--seq", "1", "--harness", "claude-code", "--adapter-version", "1.0.0", "--company-slug", company, "--project", project, "--summary", `Delegated to ${display} (${principal}) — delegation ${delegationId}; ownership transferred`], context.cwd, { stdout: "inherit" });
@@ -993,12 +1015,17 @@ function runTransfer(args, context) {
         const prefixesValue = jqFallback(document.vaultPrefixes, []);
         const vaultPrefixes = Array.isArray(prefixesValue) ? prefixesValue : [];
         const scope = vaultPrefixes.map((entry) => jqRawPath(entry, "prefix")).join(", ");
-        fs.appendFileSync(journal, `\n## ${today} — Delegated to ${display}\n\n- Delegation: \`${delegationId}\`\n- From: ${from}\n- To: ${display} (${principal})\n- Transferred scope: ${scope}\n- Local board and PRD ownership updated; Work Mesh ownership is unconfirmed. Existing delegator access is unchanged.\n`);
+        const ownershipLine = stage === "prd"
+            ? "Local board and PRD ownership updated; Work Mesh ownership is unconfirmed. Existing delegator access is unchanged."
+            : "Brainstorm-stage project (no PRD yet). Local board and brainstorm.md ownership updated; Work Mesh ownership is unconfirmed. Existing delegator access is unchanged.";
+        fs.appendFileSync(journal, `\n## ${today} — Delegated to ${display}\n\n- Delegation: \`${delegationId}\`\n- From: ${from}\n- To: ${display} (${principal})\n- Transferred scope: ${scope}\n- ${ownershipLine}\n`);
     }
     document.ownershipTransferredAt = now;
     document.workMeshOwnership = "unconfirmed";
     writeJsonAtomically(file, document);
-    writeOut(`${prefix} ownership of '${project}' transferred to ${display} (${principal}) — local board, PRD, and journal updated; Work Mesh ownership unconfirmed\n`);
+    const sourceLabel = stage === "prd" ? "PRD" : "brainstorm.md";
+    const stageLabel = stage === "prd" ? "" : " (brainstorm stage)";
+    writeOut(`${prefix} ownership of '${project}'${stageLabel} transferred to ${display} (${principal}) — local board, ${sourceLabel}, and journal updated; Work Mesh ownership unconfirmed\n`);
     return 0;
 }
 function runNative(name, args, context) {

package/dist/commands/core.js

@@ -268,6 +268,7 @@ export const SCAFFOLD_ONLY_ASSETS = [
     { asset: "core/scripts/lib/session-scope-capability.sh", root: "live", summary: "Session scope-capability lib sourced by hq-session" },
     { asset: "core/scripts/lib/session-id.sh", root: "live", summary: "Session-id resolver lib sourced by hq-session" },
     { asset: "core/scripts/lib/hq-cli-floor.sh", root: "live", summary: "Shared CLI version-floor helper sourced by generated forwarders" },
+    { asset: "core/scripts/lib/delegate-brainstorm.sh", root: "live", summary: "Shared brainstorm-stage data helper sourced by delegate assets" },
     { asset: "core/scripts/lib/forwarder.sh", root: "live", summary: "Shared runtime sourced by generated scaffold forwarders" },
     { asset: "core/scripts/lib/work-mesh-enqueue.sh", root: "live", summary: "Work Mesh Live spool enqueue lib sourced by hooks" },
     { asset: "core/scripts/lib/work-mesh-live-hook.sh", root: "live", summary: "Work Mesh Live hook helpers sourced by rebind" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.88",
+  "version": "5.345.89",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {