@indigoai-us/hq-cloud 6.14.27 → 6.14.28

package/src/personal-vault.ts

@@ -87,7 +87,8 @@ export interface PersonalVaultOptions {
  *      `PERSONAL_VAULT_EXCLUDED_TOP_LEVEL`.
  *   2. Every local (non-cloud) `companies/{slug}/` subdir, after excluding
  *      (a) `_template`, (b) slugs already in `opts.teamSyncedSlugs`
- *      (cloud-backed — they sync to their own team bucket), and (c) any
+ *      (cloud-backed — they sync to their own team bucket), (c) slugs with
+ *      `cloud_uid: cmp_*` in `companies/manifest.yaml`, and (d) any
  *      subdir explicitly marked `cloud: true` in its `company.yaml`.
  *      A company with no `company.yaml` (or one without a `cloud:` marker)
  *      is included — local companies sync to the personal vault by default.
@@ -363,12 +364,19 @@ export function computeSessionLogsSyncPaths(hqRoot: string): string[] {
  *      (currently just `_template`).
  *   3. The slug is NOT in `teamSyncedSlugs` (membership-backed slugs sync
  *      to their own bucket and must not be double-written).
- *   4. `companies/{slug}/company.yaml` does NOT contain an explicit
+ *   4. The slug is NOT listed with a `cloud_uid: cmp_*` in
+ *      `companies/manifest.yaml`. Full-HQ agent boxes often run
+ *      `--personal` alone (no company fanout targets), so
+ *      `teamSyncedSlugs` is empty even though indigo (etc.) is
+ *      cloud-backed; without this check the multi-GB company tree is
+ *      re-mirrored into the agent personal vault every ritual and
+ *      times out the 180s personal push.
+ *   5. `companies/{slug}/company.yaml` does NOT contain an explicit
  *      `cloud: true` line. Local companies sync to the personal vault by
  *      default, so a missing/markerless `company.yaml` is INCLUDED; only an
  *      explicit `cloud: true` marker opts the directory OUT (belt-and-braces
- *      with `teamSyncedSlugs` for a company designated cloud-backed before
- *      its membership has resolved).
+ *      with `teamSyncedSlugs` / manifest `cloud_uid` for a company designated
+ *      cloud-backed before its membership has resolved).
  *
  * Returns absolute paths.
  */
@@ -383,10 +391,16 @@ export function computePersonalCompanySubdirs(
   } catch {
     return [];
   }
+  // Manifest cloud_uid is the durable routing signal for cloud-backed
+  // companies. Prefer it over relying solely on runner membership fanout
+  // (empty for --personal-only agent ritual) or company.yaml (often missing
+  // on full-HQ agent boxes that never ran /designate-team locally).
+  const cloudManifestSlugs = readCloudBackedSlugsFromManifest(hqRoot);
   const eligible: string[] = [];
   for (const slug of slugs) {
     if (PERSONAL_VAULT_COMPANY_EXCLUDED_SLUGS.includes(slug)) continue;
     if (teamSyncedSlugs.has(slug)) continue;
+    if (cloudManifestSlugs.has(slug)) continue;
     const subdir = path.join(companiesRoot, slug);
     let isDir = false;
     try {
@@ -401,6 +415,51 @@ export function computePersonalCompanySubdirs(
   return eligible;
 }
 
+/**
+ * Slugs whose `companies/manifest.yaml` entry carries a `cloud_uid: cmp_*`.
+ * These are cloud-backed team companies and must not personal-vault mirror.
+ *
+ * Lightweight line parse (no YAML dep): fail-open on missing/unreadable
+ * manifest → empty set → companies stay eligible for personal fallback.
+ * Only `cmp_*` uids count (same rule as company-resolver / telemetry).
+ */
+export function readCloudBackedSlugsFromManifest(hqRoot: string): Set<string> {
+  const manifestPath = path.join(hqRoot, "companies", "manifest.yaml");
+  let text: string;
+  try {
+    text = fs.readFileSync(manifestPath, "utf8");
+  } catch {
+    return new Set();
+  }
+  const out = new Set<string>();
+  let currentSlug: string | null = null;
+  let inCompanies = false;
+  for (const line of text.split(/\r?\n/)) {
+    // Top-level key (no indent). Only track entries under `companies:`.
+    if (/^[A-Za-z0-9_.-]+:\s*(?:#.*)?$/.test(line)) {
+      inCompanies = /^companies:\s*(?:#.*)?$/.test(line);
+      currentSlug = null;
+      continue;
+    }
+    if (!inCompanies) continue;
+    // Two-space indent: company slug under companies:
+    const slugMatch = /^ {2}([A-Za-z0-9][A-Za-z0-9_-]*):\s*(?:#.*)?$/.exec(line);
+    if (slugMatch) {
+      currentSlug = slugMatch[1];
+      continue;
+    }
+    if (
+      currentSlug &&
+      /^\s{2,}cloud_uid:\s*cmp_[A-Za-z0-9]+\b/.test(line)
+    ) {
+      out.add(currentSlug);
+      // Keep currentSlug so a later key on the same company is fine; next
+      // sibling slug line will replace it.
+    }
+  }
+  return out;
+}
+
 /**
  * True iff `{subdir}/company.yaml` exists and contains an explicit
  * top-level `cloud: true` line — the marker `/designate-team` writes when a