@indigoai-us/hq-cli 5.193.0 → 5.194.0

package/CHANGELOG.md

@@ -2,6 +2,38 @@
 
 ## [Unreleased]
 
+## [5.194.0] — 2026-09-25
+
+### Added
+
+- `hq core checkpoint` can now maintain the company ontology, the job the
+  cloud ontology gardener did. It is off unless the hq-flags flag
+  `checkpoint.ontology` is on for the checkpoint's company
+  (`HQ_FLAG_CHECKPOINT_ONTOLOGY` is the local override). When a checkpoint
+  names a company, the background sibling runs `hq core ontology plan`, which
+  checks the flag and lists the company knowledge and signal files that
+  changed since the last run, within a fixed input and token budget. The
+  sibling writes entity candidates for those files, and
+  `hq core ontology apply` validates them and writes them. It updates an
+  existing entity rather than creating a duplicate, and keeps entity ids in
+  the cloud's format. It writes only to the checkpoint's own company and never
+  follows a symlink. It adds a back-reference to each signal that names an
+  entity, skipping signals the gardener already linked, and a rerun changes
+  nothing. Files under `@{key}` audience folders are not read.
+
+## [5.193.1] — 2026-09-25
+
+### Fixed
+
+- Work Mesh project sync maps ledger states (`todo` to `queued`, `in_progress` to
+  `in_progress`, `in_review`/`verification`/`blocked` to `review`, and `done`/`dropped`
+  to `done`), with explicit `status` taking precedence and `passes` preserved. PRD
+  sync emits review transitions; Board readers preserve unknown status strings and
+  ignore unknown ledger states. `hq mesh project ensure --dry-run` previews merged
+  Board statuses without writing.
+- Claude lane balance reports now normalize Outpost lane-list and queued show
+  views before strict lane-record validation, including `no_story_reason: null`.
+
 ## [5.193.0] — 2026-09-25
 
 ### Fixed

package/dist/command-catalog.generated.d.ts

@@ -5101,6 +5101,45 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "print the planned checkpoint without writing";
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "ontology";
+        readonly description: "Checkpoint ontology steps run by the checkpoint sibling (gated by checkpoint.ontology)";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] [command]";
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [{
+            readonly name: "plan";
+            readonly description: "Check the flag and list the changed company files for this checkpoint run";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--run-dir <path>";
+                readonly description: "checkpoint sibling run directory holding payload.json";
+            }, {
+                readonly flags: "--hq-root <path>";
+                readonly description: "HQ installation to operate on";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "apply";
+            readonly description: "Validate the run's entity candidates and write them to the payload company";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--run-dir <path>";
+                readonly description: "checkpoint sibling run directory holding the plan and candidates";
+            }, {
+                readonly flags: "--hq-root <path>";
+                readonly description: "HQ installation to operate on";
+            }];
+            readonly subcommands: readonly [];
+        }];
     }, {
         readonly name: "generate-workers-registry";
         readonly description: "Regenerate the derived workers registry";
@@ -5777,6 +5816,9 @@ export declare const COMMAND_CATALOG: readonly [{
             }, {
                 readonly flags: "--stories-file <path>";
                 readonly description: "PRD JSON file with userStories and metadata.repos";
+            }, {
+                readonly flags: "--dry-run";
+                readonly description: "Read the current Board and print computed story statuses without writing";
             }, {
                 readonly flags: "--json";
                 readonly description: "Print {projectId, threadId, channelId, version, stories}";

package/dist/command-catalog.generated.js

@@ -6598,6 +6598,55 @@ export const COMMAND_CATALOG = [
                 ],
                 "subcommands": []
             },
+            {
+                "name": "ontology",
+                "description": "Checkpoint ontology steps run by the checkpoint sibling (gated by checkpoint.ontology)",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] [command]",
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "plan",
+                        "description": "Check the flag and list the changed company files for this checkpoint run",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options]",
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--run-dir <path>",
+                                "description": "checkpoint sibling run directory holding payload.json"
+                            },
+                            {
+                                "flags": "--hq-root <path>",
+                                "description": "HQ installation to operate on"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "apply",
+                        "description": "Validate the run's entity candidates and write them to the payload company",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options]",
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--run-dir <path>",
+                                "description": "checkpoint sibling run directory holding the plan and candidates"
+                            },
+                            {
+                                "flags": "--hq-root <path>",
+                                "description": "HQ installation to operate on"
+                            }
+                        ],
+                        "subcommands": []
+                    }
+                ]
+            },
             {
                 "name": "generate-workers-registry",
                 "description": "Regenerate the derived workers registry",
@@ -7458,6 +7507,10 @@ export const COMMAND_CATALOG = [
                                 "flags": "--stories-file <path>",
                                 "description": "PRD JSON file with userStories and metadata.repos"
                             },
+                            {
+                                "flags": "--dry-run",
+                                "description": "Read the current Board and print computed story statuses without writing"
+                            },
                             {
                                 "flags": "--json",
                                 "description": "Print {projectId, threadId, channelId, version, stories}"

package/dist/commands/core-checkpoint.d.ts

@@ -40,8 +40,19 @@ export declare const CHECKPOINT_IDLE_REPLY_REMINDER: string;
  * Kept in TypeScript rather than in a bundled asset: it is an instruction to
  * a locally-installed agent, not a scaffold script that should be packaged.
  */
-export declare const SIBLING_PROMPT_TEMPLATE = "You are the HQ checkpoint sibling \u2014 a background maintenance agent for this\nHQ install. Your parent session's state is in <payloadPath>. Work\nquietly and do not ask questions; if something is ambiguous, record it in the\nreport instead of guessing.\n\n1. Read the payload. If it lists a transcript path that exists, read its tail (~400 lines)\n   both for session context and to extract additional reusable learnings/insights\n   the parent did not pass explicitly. Never quote secrets\n   or tokens from the transcript. If .claude/skills/checkpoint/SKILL.md exists\n   under this HQ root, read it and follow it wherever it goes beyond these instructions;\n   the write bounds below always win over the skill text.\n2. Upgrade the thread file named in the payload IN PLACE: verify/repair its\n   JSON; fill git.remote_url, git.initial_commit, git.commits_made, and\n   git.knowledge_repos by scanning core/knowledge/public/*,\n   core/knowledge/private/*, personal/knowledge/*, and companies/*/knowledge\n   for symlinks or directories containing .git, recording dirty repositories\n   as {\"<name>\": {\"commit\": \"<short>\", \"dirty\": true}}. Fill worker,\n   next_steps, and insights; set type to \"checkpoint\"; then rename the file to\n   drop -auto- from its filename. Use the renamed path in every reference you\n   write afterwards.\n3. For every explicit or transcript-derived learning that is a reusable rule,\n   FIRST search the existing policies for one the learning refines, contradicts\n   or duplicates. Then take exactly one of these actions and name it in the\n   report \u2014 the policy set is curated, not append-only:\n   - AMEND an existing policy in place when the learning sharpens it, narrows\n     its scope, or adds a case, and the rule as written is still correct.\n   - SUPERSEDE it when the learning contradicts it: rewrite the rule to what is\n     now true and record inside the file what changed and why.\n   - MERGE near-duplicates into the single best-named file, then delete the\n     files you merged away.\n   - CREATE a new policy only when no existing policy covers the rule.\n   Follow core/knowledge/public/hq-core/policies-spec.md. Write under\n   personal/policies/ or, only when the payload names a company and the rule is\n   company-specific, companies/<company>/policies/.\n   DELETION BOUNDS: delete a policy only as the MERGE or SUPERSEDE step above,\n   only inside those two directories, and never one whose body marks it HARD \u2014\n   if a hard policy now looks wrong, leave it untouched and flag it in the\n   report for a human to decide. Never delete a file you have not read.\n   Apply the same curation to durable facts (not rules) under\n   personal/knowledge/ or companies/<company>/knowledge/: correct a stale fact\n   in place rather than appending a second, contradictory copy of it.\n   Store up to two explicit or transcript-derived insights per\n   core/knowledge/public/hq-core/insights-spec.md when present, otherwise\n   workspace/insights/.\n4. Close an active session journal fail-soft with\n   bash .claude/skills/_shared/journal.sh close \"<project_dir>\" \"<one-line synthesis>\".\n   Write a legacy checkpoint JSON under workspace/checkpoints/<id>.json with\n   id, created_at, summary, files, and next_steps for backward compatibility.\n5. Update workspace/threads/recent.md and regenerate\n   workspace/threads/INDEX.md. For each company whose knowledge path appears\n   in files_touched, regenerate companies/<company>/knowledge/INDEX.md under\n   core/knowledge/public/hq-core/index-md-spec.md. Mechanical index generation\n   is allowed for those companies, but knowledge/policy content writes remain\n   restricted to the payload's named company.\n6. Run .claude/skills/document-release/SKILL.md best-effort when it exists;\n   skip silently on any failure. Hook or automation improvements go ONLY under\n   personal/hooks/ as proposals.\n7. WRITE BOUNDS: you may write only under personal/, workspace/, and companies/<company>/ as constrained above. You must NEVER write into .claude/, core/, .agents/, .codex/, repos/, or anywhere outside the HQ root.\n8. Write <runDir>/report.md \u2014 full prose: what you read, what you changed\n   (paths), and what you skipped and why. List every policy or knowledge file\n   you amended, superseded, merged or deleted with the reason, so a human can\n   audit and reverse it; a deletion you do not name in the report is a defect.\n   Then drain the queue: while\n   workspace/checkpoints/sibling/pending.jsonl exists and is non-empty, claim\n   it atomically by renaming it aside \u2014\n   mv workspace/checkpoints/sibling/pending.jsonl <runDir>/pending-claimed-N.jsonl\n   (N counting up from 2) \u2014 and process the claimed payloads with this same\n   flow. Repeat until a claim finds nothing left, then update the report.\n   NEVER read the queue and truncate it in place: a payload appended between\n   your read and the truncate is lost, and its checkpoint is never enriched.\n";
-export declare function renderSiblingPrompt(runDir: string, payloadPath: string): string;
+export declare const SIBLING_PROMPT_TEMPLATE = "You are the HQ checkpoint sibling \u2014 a background maintenance agent for this\nHQ install. Your parent session's state is in <payloadPath>. Work\nquietly and do not ask questions; if something is ambiguous, record it in the\nreport instead of guessing.\n\n1. Read the payload. If it lists a transcript path that exists, read its tail (~400 lines)\n   both for session context and to extract additional reusable learnings/insights\n   the parent did not pass explicitly. Never quote secrets\n   or tokens from the transcript. If .claude/skills/checkpoint/SKILL.md exists\n   under this HQ root, read it and follow it wherever it goes beyond these instructions;\n   the write bounds below always win over the skill text.\n2. Upgrade the thread file named in the payload IN PLACE: verify/repair its\n   JSON; fill git.remote_url, git.initial_commit, git.commits_made, and\n   git.knowledge_repos by scanning core/knowledge/public/*,\n   core/knowledge/private/*, personal/knowledge/*, and companies/*/knowledge\n   for symlinks or directories containing .git, recording dirty repositories\n   as {\"<name>\": {\"commit\": \"<short>\", \"dirty\": true}}. Fill worker,\n   next_steps, and insights; set type to \"checkpoint\"; then rename the file to\n   drop -auto- from its filename. Use the renamed path in every reference you\n   write afterwards.\n3. For every explicit or transcript-derived learning that is a reusable rule,\n   FIRST search the existing policies for one the learning refines, contradicts\n   or duplicates. Then take exactly one of these actions and name it in the\n   report \u2014 the policy set is curated, not append-only:\n   - AMEND an existing policy in place when the learning sharpens it, narrows\n     its scope, or adds a case, and the rule as written is still correct.\n   - SUPERSEDE it when the learning contradicts it: rewrite the rule to what is\n     now true and record inside the file what changed and why.\n   - MERGE near-duplicates into the single best-named file, then delete the\n     files you merged away.\n   - CREATE a new policy only when no existing policy covers the rule.\n   Follow core/knowledge/public/hq-core/policies-spec.md. Write under\n   personal/policies/ or, only when the payload names a company and the rule is\n   company-specific, companies/<company>/policies/.\n   DELETION BOUNDS: delete a policy only as the MERGE or SUPERSEDE step above,\n   only inside those two directories, and never one whose body marks it HARD \u2014\n   if a hard policy now looks wrong, leave it untouched and flag it in the\n   report for a human to decide. Never delete a file you have not read.\n   Apply the same curation to durable facts (not rules) under\n   personal/knowledge/ or companies/<company>/knowledge/: correct a stale fact\n   in place rather than appending a second, contradictory copy of it.\n   Store up to two explicit or transcript-derived insights per\n   core/knowledge/public/hq-core/insights-spec.md when present, otherwise\n   workspace/insights/.\n4. Close an active session journal fail-soft with\n   bash .claude/skills/_shared/journal.sh close \"<project_dir>\" \"<one-line synthesis>\".\n   Write a legacy checkpoint JSON under workspace/checkpoints/<id>.json with\n   id, created_at, summary, files, and next_steps for backward compatibility.\n5. Update workspace/threads/recent.md and regenerate\n   workspace/threads/INDEX.md. For each company whose knowledge path appears\n   in files_touched, regenerate companies/<company>/knowledge/INDEX.md under\n   core/knowledge/public/hq-core/index-md-spec.md. Mechanical index generation\n   is allowed for those companies, but knowledge/policy content writes remain\n   restricted to the payload's named company.\n<ontologyStep>6. Run .claude/skills/document-release/SKILL.md best-effort when it exists;\n   skip silently on any failure. Hook or automation improvements go ONLY under\n   personal/hooks/ as proposals.\n7. WRITE BOUNDS: you may write only under personal/, workspace/, and companies/<company>/ as constrained above. You must NEVER write into .claude/, core/, .agents/, .codex/, repos/, or anywhere outside the HQ root.\n8. Write <runDir>/report.md \u2014 full prose: what you read, what you changed\n   (paths), and what you skipped and why. List every policy or knowledge file\n   you amended, superseded, merged or deleted with the reason, so a human can\n   audit and reverse it; a deletion you do not name in the report is a defect.\n   Then drain the queue: while\n   workspace/checkpoints/sibling/pending.jsonl exists and is non-empty, claim\n   it atomically by renaming it aside \u2014\n   mv workspace/checkpoints/sibling/pending.jsonl <runDir>/pending-claimed-N.jsonl\n   (N counting up from 2) \u2014 and process the claimed payloads with this same\n   flow. Repeat until a claim finds nothing left, then update the report.\n   NEVER read the queue and truncate it in place: a payload appended between\n   your read and the truncate is lost, and its checkpoint is never enriched.\n";
+/**
+ * Rendered into the sibling prompt only when the payload names a company. The
+ * flag check happens inside `hq core ontology plan`, in the sibling, because
+ * the checkpoint parent performs no network I/O. Only this run's own payload
+ * gets the step; claimed queue payloads are covered by the next run, since the
+ * plan works from file hashes rather than from the payload's file list.
+ */
+export declare const SIBLING_ONTOLOGY_STEP = "5b. ONTOLOGY (this run's own payload only; skip it for claimed queue payloads).\n   Run: hq core ontology plan --run-dir \"<runDir>\" --hq-root \"<hqRoot>\"\n   If it prints \"ontology: skipped\", do nothing more for this step. Otherwise\n   read <runDir>/ontology-plan.json, follow its \"instructions\" exactly, and\n   write <runDir>/ontology-candidates.json. Read only the files and line\n   ranges the plan lists. Then run:\n   hq core ontology apply --run-dir \"<runDir>\" --hq-root \"<hqRoot>\"\n   Never write under the company's ontology/ folder yourself, and never edit\n   payload.json or ontology-plan.json. Copy the command's one-line output into\n   the report. If either command fails, record the error and continue.\n";
+export declare function renderSiblingPrompt(runDir: string, payloadPath: string, options?: {
+    company?: string | null;
+    hqRoot?: string;
+}): string;
 export type WriteStampsOptions = {
     /**
      * Filesystem seam (default the real `node:fs`); injected in tests to force a

package/dist/commands/core-checkpoint.js

@@ -165,7 +165,7 @@ report instead of guessing.
    core/knowledge/public/hq-core/index-md-spec.md. Mechanical index generation
    is allowed for those companies, but knowledge/policy content writes remain
    restricted to the payload's named company.
-6. Run .claude/skills/document-release/SKILL.md best-effort when it exists;
+<ontologyStep>6. Run .claude/skills/document-release/SKILL.md best-effort when it exists;
    skip silently on any failure. Hook or automation improvements go ONLY under
    personal/hooks/ as proposals.
 7. WRITE BOUNDS: you may write only under personal/, workspace/, and companies/<company>/ as constrained above. You must NEVER write into .claude/, core/, .agents/, .codex/, repos/, or anywhere outside the HQ root.
@@ -182,10 +182,31 @@ report instead of guessing.
    NEVER read the queue and truncate it in place: a payload appended between
    your read and the truncate is lost, and its checkpoint is never enriched.
 `;
-export function renderSiblingPrompt(runDir, payloadPath) {
+/**
+ * Rendered into the sibling prompt only when the payload names a company. The
+ * flag check happens inside `hq core ontology plan`, in the sibling, because
+ * the checkpoint parent performs no network I/O. Only this run's own payload
+ * gets the step; claimed queue payloads are covered by the next run, since the
+ * plan works from file hashes rather than from the payload's file list.
+ */
+export const SIBLING_ONTOLOGY_STEP = `5b. ONTOLOGY (this run's own payload only; skip it for claimed queue payloads).
+   Run: hq core ontology plan --run-dir "<runDir>" --hq-root "<hqRoot>"
+   If it prints "ontology: skipped", do nothing more for this step. Otherwise
+   read <runDir>/ontology-plan.json, follow its "instructions" exactly, and
+   write <runDir>/ontology-candidates.json. Read only the files and line
+   ranges the plan lists. Then run:
+   hq core ontology apply --run-dir "<runDir>" --hq-root "<hqRoot>"
+   Never write under the company's ontology/ folder yourself, and never edit
+   payload.json or ontology-plan.json. Copy the command's one-line output into
+   the report. If either command fails, record the error and continue.
+`;
+export function renderSiblingPrompt(runDir, payloadPath, options = {}) {
+    const ontologyStep = options.company && options.hqRoot ? SIBLING_ONTOLOGY_STEP : "";
     return SIBLING_PROMPT_TEMPLATE
+        .replaceAll("<ontologyStep>", () => ontologyStep)
         .replaceAll("<runDir>", () => runDir)
-        .replaceAll("<payloadPath>", () => payloadPath);
+        .replaceAll("<payloadPath>", () => payloadPath)
+        .replaceAll("<hqRoot>", () => options.hqRoot ?? "");
 }
 function collect(value, previous) {
     return [...previous, value];
@@ -946,7 +967,7 @@ function startSibling(liveRoot, input, threadPath, backend) {
     payload.pending_payloads = claimPending(pendingPath, path.join(runDir, "pending-claimed.jsonl"));
     const payloadPath = path.join(runDir, "payload.json");
     fs.writeFileSync(payloadPath, `${JSON.stringify(payload, null, 2)}\n`);
-    const prompt = renderSiblingPrompt(runDir, payloadPath);
+    const prompt = renderSiblingPrompt(runDir, payloadPath, { company: payload.company, hqRoot: liveRoot });
     fs.writeFileSync(path.join(runDir, "prompt.md"), prompt);
     const logPath = path.join(runDir, "run.log");
     const logFd = fs.openSync(logPath, "a");

package/dist/commands/core-ontology.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `hq core ontology plan|apply` — the checkpoint sibling's ontology steps.
+ *
+ * The checkpoint parent never runs these: `plan` reads the hq-flags registry,
+ * which is network I/O. The detached sibling runs `plan`, writes candidates
+ * from the files the plan lists, then runs `apply`. Both commands take the
+ * company from the run's `payload.json`, never from the agent, so an agent
+ * cannot point the writes at another company.
+ */
+import { Command } from "commander";
+import { type FlagReader } from "../lib/checkpoint-ontology/plan.js";
+export declare const ONTOLOGY_PAYLOAD_FILE = "payload.json";
+/** The hq-flags read, scoped to the payload company. */
+export declare const registryFlagReader: FlagReader;
+export interface OntologyCommandDeps {
+    readFlag?: FlagReader;
+    now?: () => Date;
+}
+export declare function runOntologyPlan(hqRoot: string, runDirOption: string | undefined, deps?: OntologyCommandDeps): Promise<string>;
+export declare function runOntologyApply(hqRoot: string, runDirOption: string | undefined, deps?: OntologyCommandDeps): string;
+export declare function registerCoreOntologyCommand(core: Command): void;
+//# sourceMappingURL=core-ontology.d.ts.map

package/dist/commands/core-ontology.js

@@ -0,0 +1,114 @@
+/**
+ * `hq core ontology plan|apply` — the checkpoint sibling's ontology steps.
+ *
+ * The checkpoint parent never runs these: `plan` reads the hq-flags registry,
+ * which is network I/O. The detached sibling runs `plan`, writes candidates
+ * from the files the plan lists, then runs `apply`. Both commands take the
+ * company from the run's `payload.json`, never from the agent, so an agent
+ * cannot point the writes at another company.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { resolveLiveRoot } from "../utils/hq-roots.js";
+import { readLanesRegistryFlag } from "../lib/lanes/registry-flag.js";
+import { planOntologyRun } from "../lib/checkpoint-ontology/plan.js";
+import { applyOntologyRun, ApplyError } from "../lib/checkpoint-ontology/apply.js";
+import { WriteBoundsError } from "../lib/checkpoint-ontology/company.js";
+export const ONTOLOGY_PAYLOAD_FILE = "payload.json";
+class OntologyUsageError extends Error {
+}
+function readPayload(runDir) {
+    const file = path.join(runDir, ONTOLOGY_PAYLOAD_FILE);
+    let raw;
+    try {
+        raw = JSON.parse(fs.readFileSync(file, "utf8"));
+    }
+    catch (error) {
+        throw new OntologyUsageError(`ontology: cannot read ${file} (${error.name})`);
+    }
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new OntologyUsageError(`ontology: ${file} is not a JSON object`);
+    }
+    return raw;
+}
+function requireRunDir(runDir) {
+    if (!runDir)
+        throw new OntologyUsageError("ontology: --run-dir is required");
+    const resolved = path.resolve(runDir);
+    if (!fs.existsSync(resolved) || !fs.statSync(resolved).isDirectory()) {
+        throw new OntologyUsageError(`ontology: run directory not found: ${resolved}`);
+    }
+    return resolved;
+}
+/** The hq-flags read, scoped to the payload company. */
+export const registryFlagReader = (flagKey, company) => readLanesRegistryFlag(flagKey, {
+    company: company.cloudUid ? { slug: company.slug, uid: company.cloudUid } : null,
+});
+export async function runOntologyPlan(hqRoot, runDirOption, deps = {}) {
+    const runDir = requireRunDir(runDirOption);
+    const outcome = await planOntologyRun({
+        hqRoot,
+        runDir,
+        payload: readPayload(runDir),
+        readFlag: deps.readFlag ?? registryFlagReader,
+        now: deps.now?.(),
+    });
+    if (outcome.status === "skipped")
+        return `ontology: skipped (${outcome.reason})`;
+    const { plan } = outcome;
+    return (`ontology: planned ${plan.inputs.length} input(s), ~${plan.budget.planned_tokens} tokens, ` +
+        `${plan.pending_after_run} left for later runs; plan at ${outcome.planPath}`);
+}
+export function runOntologyApply(hqRoot, runDirOption, deps = {}) {
+    const runDir = requireRunDir(runDirOption);
+    const company = readPayload(runDir).company;
+    if (typeof company !== "string" || company === "") {
+        throw new OntologyUsageError("ontology: the run payload names no company");
+    }
+    const report = applyOntologyRun({ hqRoot, runDir, company, now: deps.now?.() });
+    if (report.status !== "applied")
+        return `ontology: ${report.status.replaceAll("_", " ")}; nothing written`;
+    return (`ontology: ${report.created.length} created, ${report.updated.length} updated, ` +
+        `${report.matched} matched, ${report.rejected.length} rejected, ${report.deferred.length} deferred, ` +
+        `${report.suspect_duplicates.length} suspect duplicate(s), ${report.write_errors.length} write error(s)`);
+}
+function fail(error) {
+    if (error instanceof OntologyUsageError || error instanceof ApplyError || error instanceof WriteBoundsError) {
+        process.stderr.write(`${error.message}\n`);
+        process.exit(1);
+    }
+    throw error;
+}
+export function registerCoreOntologyCommand(core) {
+    const ontology = core
+        .command("ontology")
+        .description("Checkpoint ontology steps run by the checkpoint sibling (gated by checkpoint.ontology)");
+    const rootFor = (options) => resolveLiveRoot({ hqRoot: options.hqRoot ?? core.opts().hqRoot });
+    ontology
+        .command("plan")
+        .description("Check the flag and list the changed company files for this checkpoint run")
+        .option("--run-dir <path>", "checkpoint sibling run directory holding payload.json")
+        .option("--hq-root <path>", "HQ installation to operate on")
+        .action(async (options) => {
+        try {
+            process.stdout.write(`${await runOntologyPlan(rootFor(options), options.runDir)}\n`);
+        }
+        catch (error) {
+            fail(error);
+        }
+    });
+    ontology
+        .command("apply")
+        .description("Validate the run's entity candidates and write them to the payload company")
+        .option("--run-dir <path>", "checkpoint sibling run directory holding the plan and candidates")
+        .option("--hq-root <path>", "HQ installation to operate on")
+        .action((options) => {
+        try {
+            process.stdout.write(`${runOntologyApply(rootFor(options), options.runDir)}\n`);
+        }
+        catch (error) {
+            fail(error);
+        }
+    });
+}
+//# sourceMappingURL=core-ontology.js.map

package/dist/commands/core.js

@@ -30,6 +30,7 @@
  */
 import { Option } from "commander";
 import { registerCoreCheckpointCommand } from "./core-checkpoint.js";
+import { registerCoreOntologyCommand } from "./core-ontology.js";
 import { resolveLiveRoot } from "../utils/hq-roots.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
 import { renderIndexTarget } from "../lib/index-render/index.js";
@@ -322,6 +323,7 @@ export function registerCoreCommands(program) {
     // This group primarily hosts manifest-driven bundled assets, but it also
     // hosts native TypeScript plumbing when a scaffold contract needs it.
     registerCoreCheckpointCommand(core);
+    registerCoreOntologyCommand(core);
     // These command names intentionally own native implementations. Their
     // similarly named scaffold assets are forwarders, so sending them through
     // runEntry would recurse back into this command forever.

package/dist/commands/lanes.js

@@ -534,6 +534,30 @@ function ownerErrorFromOutput(stdout) {
         : `Outpost owner returned ${owner.error}`;
     return { error: owner.error, message, details };
 }
+const LANE_RECORD_VIEW_FIELDS = [
+    "story_ids",
+    "hire_alive_children",
+    "hire",
+    "hire_summary",
+    "hire_source",
+    "hire_warning",
+    "senior_lost",
+    "remote_state",
+];
+/** Remove presentation-only fields before validating a remote lane snapshot. */
+function normalizeLaneRecordView(raw) {
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+        return raw;
+    const normalized = { ...raw };
+    if (normalized.state === "remote" && normalized.remote_state !== undefined) {
+        normalized.state = normalized.remote_state;
+    }
+    for (const field of LANE_RECORD_VIEW_FIELDS)
+        delete normalized[field];
+    if (normalized.no_story_reason === null)
+        delete normalized.no_story_reason;
+    return normalized;
+}
 async function ownerLaneHireFields(ctx, lane) {
     if (lane.host.kind !== "outpost") {
         throw new LanesError("outpost_lane_hire_summary_invalid", "Owner summary requires an Outpost-hosted lane", {
@@ -567,7 +591,7 @@ async function ownerLaneHireFields(ctx, lane) {
     }
     let ownerLane;
     try {
-        ownerLane = parseLaneRecord(remote.lane);
+        ownerLane = parseLaneRecord(normalizeLaneRecordView(remote.lane));
     }
     catch (err) {
         throw new LanesError("outpost_lane_hire_summary_invalid", `Outpost ${outpostId} returned an invalid lane snapshot for ${lane.lane_id}`, { lane_id: lane.lane_id, outpost_id: outpostId, cause: dispatchErrorMessage(err) });
@@ -890,11 +914,8 @@ async function readOutpostLaneRecords(ctx, outpostId) {
             typeof rowHost.id === "string" && rowHost.id.trim() !== "";
         if (!belongsToOutpost && !hasLocalHostIdentity)
             continue;
-        const normalized = raw.state === "remote" && raw.remote_state !== undefined
-            ? { ...raw, state: raw.remote_state }
-            : raw;
         try {
-            lanes.push(parseLaneRecord(normalized));
+            lanes.push(parseLaneRecord(normalizeLaneRecordView(raw)));
         }
         catch (err) {
             throw new LanesError("outpost_lane_list_invalid", `Outpost ${outpostId} returned an invalid owned lane record: ${dispatchErrorMessage(err)}`, { outpost_id: outpostId, index });

package/dist/commands/mesh.js

@@ -14,7 +14,8 @@ import chalk from "chalk";
 import { loadCachedTokens, isMachineIdentity } from "../utils/cognito-session.js";
 import * as readline from "node:readline/promises";
 import { STORY_STATUSES, appendThreadEvent, ensureProjectThread, eventPayload, getProjectView, listActiveMembershipCompanies, listActiveThreads, patchStory, putProjectView, registerMeshProject, resolveActiveMembershipCompany, resolveMeshPrincipalUid, warmMeshConversationCache, } from "../lib/mesh/api.js";
-import { closeSupersededProjectThread, ensureMissingBoardStories, ensureProjectBoard, formatStoryStatusChanges, mergeProjectStories, prdSyncEventsThatChangeBoard, } from "../lib/mesh/project-board.js";
+import { closeSupersededProjectThread, ensureMissingBoardStories, ensureProjectBoard, boardStoryStatus, formatStoryStatusChanges, mergeProjectStories, prdSyncEventsThatChangeBoard, } from "../lib/mesh/project-board.js";
+import { mapSourceStoryStatus } from "../lib/mesh/story-status.js";
 import { buildPreflightFixtures } from "../lib/work-context/preflight-contract.js";
 import { createCandidatesFetcher, createMigratePoster, createOrganizePoster, createWorkSessionDeliverer, fetchCompanyLive, formatCompanyLiveTable, openMeshTransport, probeMigrationCapabilityForMemberships, requireToken, } from "../lib/mesh/client.js";
 import { clearDefaultCompany, isDefaultCompanyDisabled, readDeviceConfig, recordMigrationCapabilitySnapshot, setRepairHeldWithDefault, setDefaultCompany, } from "../lib/work-context/config.js";
@@ -258,10 +259,7 @@ function projectStoriesFromJson(value, source) {
         if (!story || !id || !title) {
             fail(`${source} userStories[${index}] requires string id and title.`);
         }
-        const status = typeof story.status === "string" ? story.status.trim() : undefined;
-        if (status && !STORY_STATUSES.has(status)) {
-            fail(`${source} userStories[${index}].status must be queued|in_progress|review|done.`);
-        }
+        const status = mapSourceStoryStatus(story, `${source} userStories[${index}]`);
         const resolvedStatus = status || (story.passes === true ? "done" : undefined);
         return {
             id,
@@ -475,6 +473,42 @@ async function runProjectEnsure(projectId, opts) {
         if (httpStatus(err) !== 404)
             throw err;
     }
+    if (opts.dryRun) {
+        if (current && (current.companyUid !== company.companyUid || current.projectId !== projectId)) {
+            fail("Work mesh project ensure dry-run: Board company or project id did not match the request.");
+        }
+        const stories = current ? mergeProjectStories(current.stories, source.stories) : source.stories;
+        const sourceStatuses = source.stories.map((story) => ({
+            id: story.id,
+            title: story.title,
+            status: boardStoryStatus(story),
+        }));
+        const boardStatuses = stories.map((story) => ({
+            id: story.id,
+            title: story.title,
+            status: boardStoryStatus(story),
+        }));
+        if (opts.json) {
+            console.log(JSON.stringify({
+                ok: true,
+                action: "project.ensure.dry-run",
+                projectId,
+                companyUid: company.companyUid,
+                sourceStatuses,
+                stories: boardStatuses,
+            }, null, 2));
+        }
+        else {
+            console.log(`Work mesh: project ${projectId} dry run (${sourceStatuses.length} source stories)`);
+            console.log("Source statuses:");
+            for (const story of sourceStatuses)
+                console.log(`${story.id}\t${story.status}`);
+            console.log("Merged Board statuses:");
+            for (const story of boardStatuses)
+                console.log(`${story.id}\t${story.status}`);
+        }
+        return;
+    }
     // Genesis thread, then the view, then register. Register returns 403
     // PROJECT_NOT_IN_COMPANY until both exist. A missing view uses that chain
     // from ensureProjectBoard; an existing view is merged, then registered.
@@ -659,7 +693,11 @@ async function runPrdSync(opts) {
         source: "hooks",
         taskId: event.taskId,
         status: event.status,
-        summary: event.status === "done" ? `${event.taskId} passes` : `${event.taskId} in progress`,
+        summary: event.status === "done"
+            ? `${event.taskId} passes`
+            : event.status === "in_progress"
+                ? `${event.taskId} in progress`
+                : `${event.taskId} in review`,
         evidence: { ...evidenceBase, task: event.taskId },
     }));
     const poster = createEmitPoster({ token, baseUrl: resolveVaultApiBase(process.env) });
@@ -1855,6 +1893,7 @@ export function registerMeshCommand(program) {
         .description("Idempotently register a PRD on the Board and verify the view")
         .requiredOption("--company <slug|uid>", "Company slug or cloud uid")
         .requiredOption("--stories-file <path>", "PRD JSON file with userStories and metadata.repos")
+        .option("--dry-run", "Read the current Board and print computed story statuses without writing")
         .option("--json", "Print {projectId, threadId, channelId, version, stories}")
         .action((projectId, opts) => wrap(() => runProjectEnsure(projectId, opts))());
     project