heyspex 0.2.5 → 0.2.7

package/dist/cli/hs-index-reconcile.mjs

@@ -1298,10 +1298,10 @@ var require_stringify = __commonJS({
       data = Object.assign({}, file.data, data);
       const open = opts.delimiters[0];
       const close = opts.delimiters[1];
-      const matter4 = engine.stringify(data, options2).trim();
+      const matter5 = engine.stringify(data, options2).trim();
       let buf = "";
-      if (matter4 !== "{}") {
-        buf = newline(open) + newline(matter4) + newline(close);
+      if (matter5 !== "{}") {
+        buf = newline(open) + newline(matter5) + newline(close);
       }
       if (typeof file.excerpt === "string" && file.excerpt !== "") {
         if (str3.indexOf(file.excerpt.trim()) === -1) {
@@ -1407,19 +1407,19 @@ var require_gray_matter = __commonJS({
     var toFile = require_to_file();
     var parse2 = require_parse();
     var utils = require_utils();
-    function matter4(input, options2) {
+    function matter5(input, options2) {
       if (input === "") {
         return { data: {}, content: input, excerpt: "", orig: input };
       }
       let file = toFile(input);
-      const cached = matter4.cache[file.content];
+      const cached = matter5.cache[file.content];
       if (!options2) {
         if (cached) {
           file = Object.assign({}, cached);
           file.orig = cached.orig;
           return file;
         }
-        matter4.cache[file.content] = file;
+        matter5.cache[file.content] = file;
       }
       return parseMatter(file, options2);
     }
@@ -1441,7 +1441,7 @@ var require_gray_matter = __commonJS({
       }
       str3 = str3.slice(openLen);
       const len = str3.length;
-      const language = matter4.language(str3, opts);
+      const language = matter5.language(str3, opts);
       if (language.name) {
         file.language = language.name;
         str3 = str3.slice(language.raw.length);
@@ -1476,24 +1476,24 @@ var require_gray_matter = __commonJS({
       }
       return file;
     }
-    matter4.engines = engines2;
-    matter4.stringify = function(file, data, options2) {
-      if (typeof file === "string") file = matter4(file, options2);
+    matter5.engines = engines2;
+    matter5.stringify = function(file, data, options2) {
+      if (typeof file === "string") file = matter5(file, options2);
       return stringify(file, data, options2);
     };
-    matter4.read = function(filepath, options2) {
+    matter5.read = function(filepath, options2) {
       const str3 = fs11.readFileSync(filepath, "utf8");
-      const file = matter4(str3, options2);
+      const file = matter5(str3, options2);
       file.path = filepath;
       return file;
     };
-    matter4.test = function(str3, options2) {
+    matter5.test = function(str3, options2) {
       return utils.startsWith(str3, defaults(options2).delimiters[0]);
     };
-    matter4.language = function(str3, options2) {
+    matter5.language = function(str3, options2) {
       const opts = defaults(options2);
       const open = opts.delimiters[0];
-      if (matter4.test(str3)) {
+      if (matter5.test(str3)) {
         str3 = str3.slice(open.length);
       }
       const language = str3.slice(0, str3.search(/\r?\n/));
@@ -1502,11 +1502,11 @@ var require_gray_matter = __commonJS({
         name: language ? language.trim() : ""
       };
     };
-    matter4.cache = {};
-    matter4.clearCache = function() {
-      matter4.cache = {};
+    matter5.cache = {};
+    matter5.clearCache = function() {
+      matter5.cache = {};
     };
-    module2.exports = matter4;
+    module2.exports = matter5;
   }
 });
 
@@ -2010,7 +2010,7 @@ var init_interfaces = __esm({
 });
 
 // spex-console/src/lib/db/schema/postgres.ts
-var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
+var edgeTypeEnum, validationSeverityEnum, outboxOpEnum, tsvector, specs, tags, edges, wikilinks, specLinks, aliases, validationIssues, indexMeta, frontmatterFields, eventOutbox, captureSessions, handoffContext, claimEventKindEnum, activeClaimStatusEnum, pendingReasonEnum, focusEventKindEnum, specEventKindEnum, focusPin, captureFocusPin, captureFocusSelection, focusSelection, focusSkips, activeClaims, claimWaiters, fileClaims, claimEvents, focusEvents, focusAreas, focusAreasEvents, specEvents, rateLimitBuckets, userVaults, milestoneSnapshots, modelRegistryEntries, launchIntentStatusEnum, launchIntents, companionRelayPresence, companionSettingsStore, consoleSettingsStore, seatAssignments, wipLedger, wipLedgerArchive, gatherResults, agentSessions, usageEvents, streamEvents, jobStreams, resolutionStatusEnum, resolutionFocusPin, resolutionLedger, workspaces, vaults, accountSettings, vaultGrants, pendingVaultGrants, githubInstallations, fleetMachines, fleetTasks, fleetResults, userApiKeys, apiKeys, mcpSessions, pairingCodes, companionSessions, inviteRequests, notifications, webhookIngestions, specSettlements, sessionBranchDeclarations;
 var init_postgres = __esm({
   "spex-console/src/lib/db/schema/postgres.ts"() {
     "use strict";
@@ -2960,6 +2960,24 @@ var init_postgres = __esm({
       },
       (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
     );
+    seatAssignments = pgTable(
+      "seat_assignments",
+      {
+        accountId: text("account_id").notNull(),
+        vaultId: text("vault_id").notNull(),
+        harness: text("harness").notNull(),
+        seatId: text("seat_id").notNull(),
+        model: text("model").notNull(),
+        // Set when a launch reported the harness REFUSED this model and the run fell
+        // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+        // cleared whenever the user sets a new model.
+        overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+      },
+      (table) => [
+        primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+      ]
+    );
     wipLedger = pgTable(
       "wip_ledger",
       {
@@ -3714,11 +3732,12 @@ function getPostgresAdminDb() {
 function inertClient() {
   return false;
 }
-var isNeonPool;
+var isNeonPool, registerVaultScopedDbAccessor;
 var init_postgres_client_cli_shim = __esm({
   "dist/cli/._postgres-client.cli-shim.mjs"() {
     "use strict";
     isNeonPool = inertClient;
+    registerVaultScopedDbAccessor = inertClient;
   }
 });
 
@@ -3975,6 +3994,141 @@ var init_clients = __esm({
   }
 });
 
+// spex-console/src/lib/rate-limits.ts
+var RATE_LIMIT_BUDGETS;
+var init_rate_limits = __esm({
+  "spex-console/src/lib/rate-limits.ts"() {
+    "use strict";
+    RATE_LIMIT_BUDGETS = {
+      mcp_tool_calls: { daily: 500, hourly: 125 },
+      spec_writes: { daily: 100, hourly: 25 },
+      capture_sessions: { daily: 20, hourly: 5 },
+      // Paul's Advocate free-text chat ([[HS-4YYB-XEBI-TASK-paul-s-advocate-answers-real-questions]]):
+      // a public YC reviewer can otherwise run up LLM spend on an unauthenticated-feeling
+      // widget. 30/hour matches the builder brief's "e.g. 30 messages/hour" starting point;
+      // daily is 4x hourly (looser than the 25%-of-daily pattern above — a reviewer chatting
+      // steadily through a demo session should not get cut off mid-conversation).
+      advocate_chat: { daily: 120, hourly: 30 }
+    };
+  }
+});
+
+// spex-console/src/lib/plan-tier.ts
+function scaledBudgets(multiplier) {
+  const out = {};
+  for (const [bucket, budget] of Object.entries(RATE_LIMIT_BUDGETS)) {
+    out[bucket] = {
+      daily: Math.round(budget.daily * multiplier),
+      hourly: Math.round(budget.hourly * multiplier)
+    };
+  }
+  return Object.freeze(out);
+}
+var PLAN_TIER_RATE_LIMIT_MULTIPLIER, PLAN_TIER_LIMITS;
+var init_plan_tier = __esm({
+  "spex-console/src/lib/plan-tier.ts"() {
+    "use strict";
+    init_sql_orm_inert_cli_shim();
+    init_postgres_client_cli_shim();
+    init_postgres();
+    init_rate_limits();
+    PLAN_TIER_RATE_LIMIT_MULTIPLIER = {
+      free: 1,
+      pro: 4,
+      enterprise: 20
+    };
+    PLAN_TIER_LIMITS = {
+      free: {
+        statement_timeout_ms: 5e3,
+        read_work_mem: "4MB",
+        rate_limit_budgets: scaledBudgets(PLAN_TIER_RATE_LIMIT_MULTIPLIER.free)
+      },
+      pro: {
+        statement_timeout_ms: 15e3,
+        read_work_mem: "16MB",
+        rate_limit_budgets: scaledBudgets(PLAN_TIER_RATE_LIMIT_MULTIPLIER.pro)
+      },
+      enterprise: {
+        statement_timeout_ms: 3e4,
+        read_work_mem: "64MB",
+        rate_limit_budgets: scaledBudgets(PLAN_TIER_RATE_LIMIT_MULTIPLIER.enterprise)
+      }
+    };
+  }
+});
+
+// spex-console/src/lib/db/clients/vault-router.ts
+import { existsSync as existsSync8, readFileSync as readFileSync13 } from "node:fs";
+import { homedir as homedir10 } from "node:os";
+import { join as join11 } from "node:path";
+var CREDENTIALS_PATH, ROUTER_KEY, globalRouter, router;
+var init_vault_router = __esm({
+  "spex-console/src/lib/db/clients/vault-router.ts"() {
+    "use strict";
+    init_sql_orm_inert_cli_shim();
+    init_sql_orm_inert_cli_shim();
+    init_postgres();
+    init_postgres_client_cli_shim();
+    CREDENTIALS_PATH = join11(homedir10(), ".heyspex", "credentials.yaml");
+    ROUTER_KEY = Symbol.for("heyspex.vaultRouter");
+    globalRouter = globalThis;
+    if (!globalRouter[ROUTER_KEY]) {
+      globalRouter[ROUTER_KEY] = {
+        dedicated: /* @__PURE__ */ new Map(),
+        refCache: /* @__PURE__ */ new Map(),
+        warnedSchemaMissing: false
+      };
+    }
+    router = globalRouter[ROUTER_KEY];
+  }
+});
+
+// spex-console/src/lib/db/clients/vault-scope.ts
+import { AsyncLocalStorage } from "node:async_hooks";
+function warnScopeClosedOnce(ctx) {
+  if (ctx.warnedClosed) return;
+  ctx.warnedClosed = true;
+  console.warn(
+    `[vault-scope] db use after vault scope closed; falling back to the pool connection (unscoped) (vaultId: ${ctx.vaultId})`
+  );
+}
+function handleScopeClosedAccess(ctx) {
+  if (ctx.onStaleUse === "throw") {
+    throw new VaultScopeClosedError(ctx.vaultId);
+  }
+  warnScopeClosedOnce(ctx);
+}
+var VaultScopeClosedError, vaultScopeStorage;
+var init_vault_scope = __esm({
+  "spex-console/src/lib/db/clients/vault-scope.ts"() {
+    "use strict";
+    init_sql_orm_inert_cli_shim();
+    init_plan_tier();
+    init_postgres_client_cli_shim();
+    init_vault_router();
+    VaultScopeClosedError = class extends Error {
+      vaultId;
+      constructor(vaultId) {
+        super(
+          `Vault scope for "${vaultId}" is closed; this path opted into onStaleUseAfterClose: "throw", so a db handle used after the scope's transaction settled fails loudly instead of silently falling back to the unscoped pool connection.`
+        );
+        this.name = "VaultScopeClosedError";
+        this.vaultId = vaultId;
+      }
+    };
+    vaultScopeStorage = new AsyncLocalStorage();
+    registerVaultScopedDbAccessor(() => {
+      const ctx = vaultScopeStorage.getStore();
+      if (!ctx) return null;
+      if (ctx.closed) {
+        handleScopeClosedAccess(ctx);
+        return null;
+      }
+      return ctx.proxy;
+    });
+  }
+});
+
 // spex-console/src/lib/scheduler/types.ts
 var init_types2 = __esm({
   "spex-console/src/lib/scheduler/types.ts"() {
@@ -4502,10 +4656,45 @@ var init_config = __esm({
   }
 });
 
-// spex-console/src/lib/vault-frontmatter.ts
+// spex-console/src/lib/safe-yaml.ts
 import yaml2 from "js-yaml";
+function dropUndefinedDeep(value) {
+  if (Array.isArray(value)) {
+    return value.filter((item) => item !== void 0).map((item) => dropUndefinedDeep(item));
+  }
+  if (value && typeof value === "object" && Object.getPrototypeOf(value) === Object.prototype) {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      if (v === void 0) continue;
+      out[k] = dropUndefinedDeep(v);
+    }
+    return out;
+  }
+  return value;
+}
+function safeYamlDump(value, options2 = {}) {
+  const { schema: _ignoredSchema, ...rest } = options2;
+  const data = dropUndefinedDeep(value);
+  if (grayMatterYamlStringify) return grayMatterYamlStringify(data, rest);
+  return yaml2.dump(data, { ...rest, schema: SAFE_YAML_SCHEMA });
+}
+var import_gray_matter2, SAFE_YAML_SCHEMA, grayMatterYamlStringify, YAML_FAILSAFE_SCHEMA;
+var init_safe_yaml = __esm({
+  "spex-console/src/lib/safe-yaml.ts"() {
+    "use strict";
+    import_gray_matter2 = __toESM(require_gray_matter(), 1);
+    SAFE_YAML_SCHEMA = yaml2.DEFAULT_SAFE_SCHEMA ?? yaml2.DEFAULT_SCHEMA;
+    grayMatterYamlStringify = (() => {
+      const engine = import_gray_matter2.default.engines?.yaml;
+      return typeof engine?.stringify === "function" ? engine.stringify : void 0;
+    })();
+    YAML_FAILSAFE_SCHEMA = yaml2.FAILSAFE_SCHEMA;
+  }
+});
+
+// spex-console/src/lib/vault-frontmatter.ts
 function normalizeFrontmatterForYaml(frontmatter) {
-  const processed = { ...frontmatter };
+  const processed = dropUndefinedDeep(frontmatter);
   for (const [key, value] of Object.entries(processed)) {
     if (value instanceof Date) {
       processed[key] = value.toISOString();
@@ -4514,17 +4703,18 @@ function normalizeFrontmatterForYaml(frontmatter) {
   return processed;
 }
 function stringifySpecMarkdown(body, frontmatter) {
-  const fm = yaml2.dump(normalizeFrontmatterForYaml(frontmatter), YAML_STRINGIFY_OPTIONS).trim();
+  const fm = safeYamlDump(normalizeFrontmatterForYaml(frontmatter), YAML_STRINGIFY_OPTIONS).trim();
   return `---
 ${fm}
 ---
 ${body}`;
 }
-var import_gray_matter2, YAML_STRINGIFY_OPTIONS;
+var import_gray_matter3, YAML_STRINGIFY_OPTIONS;
 var init_vault_frontmatter = __esm({
   "spex-console/src/lib/vault-frontmatter.ts"() {
     "use strict";
-    import_gray_matter2 = __toESM(require_gray_matter(), 1);
+    import_gray_matter3 = __toESM(require_gray_matter(), 1);
+    init_safe_yaml();
     YAML_STRINGIFY_OPTIONS = {
       quotingType: '"',
       skipInvalid: true,
@@ -5654,12 +5844,12 @@ var init_linkage_validation = __esm({
 });
 
 // spex-console/src/lib/perf-timing.ts
-import { AsyncLocalStorage } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 var storage;
 var init_perf_timing = __esm({
   "spex-console/src/lib/perf-timing.ts"() {
     "use strict";
-    storage = new AsyncLocalStorage();
+    storage = new AsyncLocalStorage2();
   }
 });
 
@@ -5681,12 +5871,12 @@ var init_planning_flow_model = __esm({
 });
 
 // spex-console/src/lib/request-memo.ts
-import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage3 } from "node:async_hooks";
 var storage2;
 var init_request_memo = __esm({
   "spex-console/src/lib/request-memo.ts"() {
     "use strict";
-    storage2 = new AsyncLocalStorage2();
+    storage2 = new AsyncLocalStorage3();
   }
 });
 
@@ -6015,10 +6205,9 @@ var init_search_body_hit = __esm({
 
 // spex-console/src/lib/vault.ts
 import { spawn } from "node:child_process";
-import { readdirSync as readdirSync2, readFileSync as readFileSync13, statSync as statSync5 } from "node:fs";
+import { readdirSync as readdirSync2, readFileSync as readFileSync14, statSync as statSync5 } from "node:fs";
 import { promises as fs7 } from "node:fs";
 import path14 from "node:path";
-import yaml3 from "js-yaml";
 function normalizeDateField(value) {
   let d = null;
   if (value instanceof Date) {
@@ -6267,7 +6456,7 @@ async function parseLoadedSpec(absPath, root) {
   }
   let parsed;
   try {
-    parsed = (0, import_gray_matter3.default)(raw);
+    parsed = (0, import_gray_matter4.default)(raw);
   } catch {
     const summary2 = toSummary(absPath, root, {}, raw);
     return { ...summary2, frontmatter: {}, body: raw, absPath };
@@ -6281,11 +6470,11 @@ function extractWikilinks2(value) {
   const arr = Array.isArray(value) ? value : [value];
   return arr.map((v) => normalizeWikilink(String(v))).filter(Boolean);
 }
-var import_gray_matter3, DIAGNOSE_SEVERITY_TIER, VAULT_CACHE_TTL_MS, VAULT_CACHE_TTL_WATCHED_MS, VAULT_CACHE_KEY, vaultCacheStore, VAULT_CACHE_DELTA_LISTENERS_KEY, vaultCacheDeltaListeners, SEARCH_TEXT_KEY, searchTextStore, VAULT_SNAPSHOT_KEY, vaultSnapshotStore, VaultDiskWriteError;
+var import_gray_matter4, DIAGNOSE_SEVERITY_TIER, VAULT_CACHE_TTL_MS, VAULT_CACHE_TTL_WATCHED_MS, VAULT_CACHE_KEY, vaultCacheStore, VAULT_CACHE_DELTA_LISTENERS_KEY, vaultCacheDeltaListeners, SEARCH_TEXT_KEY, searchTextStore, VAULT_SNAPSHOT_KEY, vaultSnapshotStore, VaultDiskWriteError;
 var init_vault = __esm({
   "spex-console/src/lib/vault.ts"() {
     "use strict";
-    import_gray_matter3 = __toESM(require_gray_matter(), 1);
+    import_gray_matter4 = __toESM(require_gray_matter(), 1);
     init_diagnose_skeleton();
     init_auth();
     init_capture_vault();
@@ -6296,6 +6485,7 @@ var init_vault = __esm({
     init_skips();
     init_clients();
     init_postgres_client_cli_shim();
+    init_vault_scope();
     init_helpers();
     init_index_write_service();
     init_spec_read_service();
@@ -6312,6 +6502,7 @@ var init_vault = __esm({
     init_planning_flow_model();
     init_request_memo();
     init_review_mode();
+    init_safe_yaml();
     init_active_milestone();
     init_area();
     init_claim_eligibility();
@@ -6413,7 +6604,7 @@ var init_vault = __esm({
 
 // spex-console/bin/hs-index-reconcile.ts
 import { execFileSync } from "node:child_process";
-import { appendFileSync, mkdirSync as mkdirSync7, readFileSync as readFileSync15, writeFileSync as writeFileSync7 } from "node:fs";
+import { appendFileSync, mkdirSync as mkdirSync7, readFileSync as readFileSync16, writeFileSync as writeFileSync7 } from "node:fs";
 import { promises as fs10 } from "node:fs";
 import path15 from "node:path";
 import process4 from "node:process";
@@ -7370,7 +7561,7 @@ async function postEdgesChunk(input, specs2) {
 }
 
 // spex-console/src/lib/vault-sync/pull-io.ts
-import { promises as fs9, readFileSync as readFileSync14 } from "node:fs";
+import { promises as fs9, readFileSync as readFileSync15 } from "node:fs";
 import { EOL } from "node:os";
 import nodePath2 from "node:path";
 
@@ -7425,7 +7616,7 @@ var PullTargetNotVaultError = class extends Error {
 function assertPullTargetIsVault(repoRoot) {
   let text2;
   try {
-    text2 = readFileSync14(nodePath2.join(repoRoot, "heyspex.yaml"), "utf8");
+    text2 = readFileSync15(nodePath2.join(repoRoot, "heyspex.yaml"), "utf8");
   } catch {
     text2 = null;
   }
@@ -7829,7 +8020,7 @@ function say(args, text2) {
 }
 function readDiscovery(p) {
   try {
-    return readFileSync15(p, "utf-8");
+    return readFileSync16(p, "utf-8");
   } catch {
     return null;
   }
@@ -7841,7 +8032,7 @@ function resolveConsole(args) {
 }
 function readMarkerVaultId(vaultRoot2) {
   try {
-    return parseVaultId(readFileSync15(path15.join(vaultRoot2, "heyspex.yaml"), "utf8"));
+    return parseVaultId(readFileSync16(path15.join(vaultRoot2, "heyspex.yaml"), "utf8"));
   } catch {
     return null;
   }

package/dist/cli/hs-init.mjs

@@ -2837,7 +2837,7 @@ var COMMAND_SCOPES = Object.freeze({
   "hs-promote.md": { scope: "customer", why: "Capture \u2192 research \u2192 milestone promotion." },
   "hs-push.md": { scope: "customer", why: "Push an epic plan into the vault." },
   "hs-qc.md": { scope: "customer", why: "Post-plan QC gate." },
-  "hs-res.md": { scope: "customer", why: "Research method entrypoint (SpexCrawl/DeepSeek)." },
+  "hs-res.md": { scope: "customer", why: "Research method entrypoint (local Docker Firecrawl search + SpexCrawl/Firecrawl fetch; DeepSeek on the platform)." },
   "hs-resolve.md": { scope: "customer", why: "Resolution lane." },
   "hs-review.md": { scope: "customer", why: "Review queue." },
   "hs-view.md": { scope: "customer", why: "Open a console surface." },
@@ -3166,7 +3166,7 @@ function githubHookNames() {
 }
 function githubHookCommand(row) {
   const tail = hookTail(row);
-  return `R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
+  return `export HEYSPEX_HARNESS="\${HEYSPEX_HARNESS:-copilot}"; R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
 }
 function renderGithubHooksDocument() {
   const allowed = githubHookNames();
@@ -3233,6 +3233,25 @@ var fsDeps = {
     }
   }
 };
+function findProjectRoot(start) {
+  let dir = path4.resolve(start);
+  for (; ; ) {
+    if (fs.existsSync(path4.join(dir, ".git")) || fs.existsSync(path4.join(dir, "heyspex.yaml"))) return dir;
+    const up = path4.dirname(dir);
+    if (up === dir) return path4.resolve(start);
+    dir = up;
+  }
+}
+function isInstalledPackageRoot(platformRoot, exists = fs.existsSync) {
+  if (toPosixPath(path4.resolve(platformRoot)).includes("/node_modules/")) return true;
+  return !exists(path4.join(platformRoot, "scripts", "heyspex-doctor.mjs"));
+}
+function resolveSetupTarget({ platformRoot, env = process.env, cwd = process.cwd(), exists = fs.existsSync }) {
+  const explicit = env.HS_SETUP_TARGET?.trim();
+  if (explicit) return path4.resolve(explicit);
+  if (isInstalledPackageRoot(platformRoot, exists)) return findProjectRoot(cwd);
+  return path4.resolve(platformRoot);
+}
 function invokedDirectly(importMetaUrl, selfBasename, argv1 = process.argv[1]) {
   try {
     if (!argv1) return false;
@@ -3281,7 +3300,7 @@ if (invokedDirectly(import.meta.url, "customer-kit.mjs")) {
 
 // scripts/install-cursor-hooks.mjs
 var PLATFORM_ROOT = path5.resolve(path5.dirname(fileURLToPath4(import.meta.url)), "..");
-var REPO_ROOT = process.env.HS_SETUP_TARGET?.trim() ? path5.resolve(process.env.HS_SETUP_TARGET.trim()) : PLATFORM_ROOT;
+var REPO_ROOT = resolveSetupTarget({ platformRoot: PLATFORM_ROOT });
 var SETTINGS_PATH = path5.join(REPO_ROOT, ".cursor", "hooks.json");
 function cursorKitFor(targetRoot, platformRoot = PLATFORM_ROOT) {
   const customer = !samePlatformPath(targetRoot, platformRoot);

package/dist/cli/hs-install.mjs

@@ -2342,7 +2342,7 @@ var COMMAND_SCOPES = Object.freeze({
   "hs-promote.md": { scope: "customer", why: "Capture \u2192 research \u2192 milestone promotion." },
   "hs-push.md": { scope: "customer", why: "Push an epic plan into the vault." },
   "hs-qc.md": { scope: "customer", why: "Post-plan QC gate." },
-  "hs-res.md": { scope: "customer", why: "Research method entrypoint (SpexCrawl/DeepSeek)." },
+  "hs-res.md": { scope: "customer", why: "Research method entrypoint (local Docker Firecrawl search + SpexCrawl/Firecrawl fetch; DeepSeek on the platform)." },
   "hs-resolve.md": { scope: "customer", why: "Resolution lane." },
   "hs-review.md": { scope: "customer", why: "Review queue." },
   "hs-view.md": { scope: "customer", why: "Open a console surface." },
@@ -2752,7 +2752,7 @@ function githubHookNames() {
 }
 function githubHookCommand(row) {
   const tail = hookTail(row);
-  return `R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
+  return `export HEYSPEX_HARNESS="\${HEYSPEX_HARNESS:-copilot}"; R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
 }
 function renderGithubHooksDocument() {
   const allowed = githubHookNames();
@@ -2891,6 +2891,25 @@ var fsDeps = {
     }
   }
 };
+function findProjectRoot(start) {
+  let dir = path4.resolve(start);
+  for (; ; ) {
+    if (fs.existsSync(path4.join(dir, ".git")) || fs.existsSync(path4.join(dir, "heyspex.yaml"))) return dir;
+    const up = path4.dirname(dir);
+    if (up === dir) return path4.resolve(start);
+    dir = up;
+  }
+}
+function isInstalledPackageRoot(platformRoot, exists = fs.existsSync) {
+  if (toPosixPath(path4.resolve(platformRoot)).includes("/node_modules/")) return true;
+  return !exists(path4.join(platformRoot, "scripts", "heyspex-doctor.mjs"));
+}
+function resolveSetupTarget({ platformRoot, env = process.env, cwd = process.cwd(), exists = fs.existsSync }) {
+  const explicit = env.HS_SETUP_TARGET?.trim();
+  if (explicit) return path4.resolve(explicit);
+  if (isInstalledPackageRoot(platformRoot, exists)) return findProjectRoot(cwd);
+  return path4.resolve(platformRoot);
+}
 function invokedDirectly(importMetaUrl, selfBasename, argv1 = process.argv[1]) {
   try {
     if (!argv1) return false;
@@ -2939,7 +2958,7 @@ if (invokedDirectly(import.meta.url, "customer-kit.mjs")) {
 
 // scripts/install-cursor-hooks.mjs
 var PLATFORM_ROOT = path5.resolve(path5.dirname(fileURLToPath4(import.meta.url)), "..");
-var REPO_ROOT = process.env.HS_SETUP_TARGET?.trim() ? path5.resolve(process.env.HS_SETUP_TARGET.trim()) : PLATFORM_ROOT;
+var REPO_ROOT = resolveSetupTarget({ platformRoot: PLATFORM_ROOT });
 var SETTINGS_PATH = path5.join(REPO_ROOT, ".cursor", "hooks.json");
 function cursorKitFor(targetRoot, platformRoot = PLATFORM_ROOT) {
   const customer = !samePlatformPath(targetRoot, platformRoot);

package/dist/cli/hs-join.mjs

@@ -23909,6 +23909,24 @@ var consoleSettingsStore = pgTable(
   },
   (table) => [primaryKey({ columns: [table.userId, table.vaultId, table.namespace] })]
 );
+var seatAssignments = pgTable(
+  "seat_assignments",
+  {
+    accountId: text("account_id").notNull(),
+    vaultId: text("vault_id").notNull(),
+    harness: text("harness").notNull(),
+    seatId: text("seat_id").notNull(),
+    model: text("model").notNull(),
+    // Set when a launch reported the harness REFUSED this model and the run fell
+    // back to auto (Copilot's `heyspex.copilot_model_fallback` event, HS-F4UM);
+    // cleared whenever the user sets a new model.
+    overrideRejectedAt: timestamp("override_rejected_at", { withTimezone: true }),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().default(sql`now()`)
+  },
+  (table) => [
+    primaryKey({ columns: [table.accountId, table.vaultId, table.harness, table.seatId] })
+  ]
+);
 var wipLedger = pgTable(
   "wip_ledger",
   {
@@ -26034,7 +26052,7 @@ var COMMAND_SCOPES = Object.freeze({
   "hs-promote.md": { scope: "customer", why: "Capture \u2192 research \u2192 milestone promotion." },
   "hs-push.md": { scope: "customer", why: "Push an epic plan into the vault." },
   "hs-qc.md": { scope: "customer", why: "Post-plan QC gate." },
-  "hs-res.md": { scope: "customer", why: "Research method entrypoint (SpexCrawl/DeepSeek)." },
+  "hs-res.md": { scope: "customer", why: "Research method entrypoint (local Docker Firecrawl search + SpexCrawl/Firecrawl fetch; DeepSeek on the platform)." },
   "hs-resolve.md": { scope: "customer", why: "Resolution lane." },
   "hs-review.md": { scope: "customer", why: "Review queue." },
   "hs-view.md": { scope: "customer", why: "Open a console surface." },
@@ -26444,7 +26462,7 @@ function githubHookNames() {
 }
 function githubHookCommand(row2) {
   const tail = hookTail(row2);
-  return `R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
+  return `export HEYSPEX_HARNESS="\${HEYSPEX_HARNESS:-copilot}"; R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
 }
 function renderGithubHooksDocument() {
   const allowed = githubHookNames();
@@ -26583,6 +26601,25 @@ var fsDeps = {
     }
   }
 };
+function findProjectRoot(start) {
+  let dir = path2.resolve(start);
+  for (; ; ) {
+    if (fs.existsSync(path2.join(dir, ".git")) || fs.existsSync(path2.join(dir, "heyspex.yaml"))) return dir;
+    const up = path2.dirname(dir);
+    if (up === dir) return path2.resolve(start);
+    dir = up;
+  }
+}
+function isInstalledPackageRoot(platformRoot, exists2 = fs.existsSync) {
+  if (toPosixPath(path2.resolve(platformRoot)).includes("/node_modules/")) return true;
+  return !exists2(path2.join(platformRoot, "scripts", "heyspex-doctor.mjs"));
+}
+function resolveSetupTarget({ platformRoot, env = process.env, cwd = process.cwd(), exists: exists2 = fs.existsSync }) {
+  const explicit = env.HS_SETUP_TARGET?.trim();
+  if (explicit) return path2.resolve(explicit);
+  if (isInstalledPackageRoot(platformRoot, exists2)) return findProjectRoot(cwd);
+  return path2.resolve(platformRoot);
+}
 function invokedDirectly(importMetaUrl, selfBasename, argv1 = process.argv[1]) {
   try {
     if (!argv1) return false;
@@ -29537,7 +29574,7 @@ function timeoutFor(entry) {
 
 // scripts/install-cursor-hooks.mjs
 var PLATFORM_ROOT = path6.resolve(path6.dirname(fileURLToPath4(import.meta.url)), "..");
-var REPO_ROOT = process.env.HS_SETUP_TARGET?.trim() ? path6.resolve(process.env.HS_SETUP_TARGET.trim()) : PLATFORM_ROOT;
+var REPO_ROOT = resolveSetupTarget({ platformRoot: PLATFORM_ROOT });
 var SETTINGS_PATH = path6.join(REPO_ROOT, ".cursor", "hooks.json");
 function cursorKitFor(targetRoot, platformRoot = PLATFORM_ROOT) {
   const customer = !samePlatformPath(targetRoot, platformRoot);