@indigoai-us/hq-cli 5.234.0 → 5.234.1

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 ## [Unreleased]
 
+## [5.234.1] — 2026-09-27
+
+### Fixed
+
+- A primary resume now confirms and syncs an Outpost lane queued during
+  owner-side admission. (#926)
+- Outpost messages and account moves for children of primary-hosted lanes now
+  carry the bounded hire-grant context required by the owner. (#926)
+- Outpost message resumes, moves, and admission queues now sync the returned
+  owner lane record back to the primary. (#926)
+
 ## [5.234.0] — 2026-09-27
 
 ### Added

package/dist/command-catalog.generated.d.ts

@@ -8005,6 +8005,9 @@ export declare const COMMAND_CATALOG: readonly [{
         }, {
             readonly flags: "--worker <profile>";
             readonly description: "Attach a personal worker profile when this message resumes the lane";
+        }, {
+            readonly flags: "--grant-context <base64url>";
+            readonly description: "";
         }, {
             readonly flags: "--no-compact";
             readonly description: "Skip the resume-time compaction check for this message";

package/dist/command-catalog.generated.js

@@ -10353,6 +10353,10 @@ export const COMMAND_CATALOG = [
                         "flags": "--worker <profile>",
                         "description": "Attach a personal worker profile when this message resumes the lane"
                     },
+                    {
+                        "flags": "--grant-context <base64url>",
+                        "description": ""
+                    },
                     {
                         "flags": "--no-compact",
                         "description": "Skip the resume-time compaction check for this message"

package/dist/commands/lanes.js

@@ -3841,7 +3841,7 @@ async function dispatchOutpostLaneCommand(ctx, lane, action, options) {
         grantHierarchy = hierarchy;
         grantContext = createOutpostHireGrantContext(lane, hierarchy);
     }
-    else if (action === "resume" &&
+    else if ((action === "resume" || action === "message") &&
         lane.senior.kind === "lane") {
         grantContext = createOutpostHireGrantContext(lane, loadAllLanes(ctx.hqRoot()));
     }
@@ -3987,9 +3987,14 @@ async function dispatchOutpostLaneCommand(ctx, lane, action, options) {
                 : action === "reparent"
                     ? remote.lane !== null && typeof remote.lane === "object" &&
                         Array.isArray(remote.changed_descendant_ids)
-                    : (remote.delivery_status === "worker_spawned" ||
+                    : (((remote.delivery_status === "worker_spawned" ||
                         remote.delivery_status === "queued_on_target_account") &&
-                        remote.lane !== undefined);
+                        remote.lane !== undefined) ||
+                        (remote.delivery_status === "queued_on_admission" &&
+                            remote.lane !== null &&
+                            typeof remote.lane === "object" &&
+                            !Array.isArray(remote.lane) &&
+                            remote.lane.state === "queued")));
     if (!resultConfirmed) {
         throw new LanesError("outpost_delivery_unconfirmed", `Outpost ${outpostId} completed exec without a confirmed ${action} result for lane ${lane.lane_id}`, {
             lane_id: lane.lane_id,
@@ -4010,6 +4015,21 @@ async function dispatchOutpostLaneCommand(ctx, lane, action, options) {
         });
         return;
     }
+    if (action === "message" &&
+        (remote.delivery_status === "worker_spawned" ||
+            remote.delivery_status === "queued_on_target_account" ||
+            remote.delivery_status === "queued_on_admission")) {
+        const ownerLane = syncLaneRecordFromOwner(ctx.hqRoot(), lane.lane_id, outpostId, remote.lane, undefined, { allowNonTerminal: true });
+        printJson({
+            ...remote,
+            lane_id: ownerLane.lane_id,
+            lane: ownerLane,
+            outpost_id: outpostId,
+            outpost_command_id: dispatched.commandId,
+            outpost_transport: "outposts_exec",
+        });
+        return;
+    }
     if (action === "reparent" || action === "resume") {
         const ownerLane = syncLaneRecordFromOwner(ctx.hqRoot(), lane.lane_id, outpostId, remote.lane, undefined, { allowNonTerminal: true });
         const descendants = [];
@@ -5872,7 +5892,7 @@ async function prepareAccountMove(ctx, lane, input) {
                 next.queued_at = undefined;
             }
             return next;
-        }));
+        }), input.grantContext);
         return { lane: moved, from, to: target, copy, queued };
     }, ctx.sleep);
 }
@@ -5990,6 +6010,14 @@ function assertCurrentResumeAccountAvailable(ctx, lane) {
 }
 async function runMessage(ctx, laneId, opts) {
     const hqRoot = ctx.hqRoot();
+    const hireGrantContext = opts.grantContext === undefined
+        ? undefined
+        : (() => {
+            if (!ctx.isSsmOwnerDispatch()) {
+                throw new LanesError("hire_grant_dispatch_unauthorized", "Message grant context is only valid on an Outpost owner dispatch", { lane_id: laneId });
+            }
+            return parseOutpostHireGrantContext(opts.grantContext, laneId);
+        })();
     let accepted = false;
     let claimedMessages = [];
     const markAccepted = () => {
@@ -6066,7 +6094,7 @@ async function runMessage(ctx, laneId, opts) {
         }
         // Check before transcript recovery, account probing, or message writes.
         // The final state transition repeats this check under the senior lock.
-        await withResumeHireAdmission(ctx, lane, () => undefined);
+        await withResumeHireAdmission(ctx, lane, () => undefined, hireGrantContext);
         lane = laneWithRecoveredProviderSession(hqRoot, lane);
         const keepCurrentAccount = opts.account !== undefined && accountRequestKeepsCurrentLane(lane, opts.account);
         if (keepCurrentAccount)
@@ -6162,6 +6190,7 @@ async function runMessage(ctx, laneId, opts) {
                 cliModel: opts.model?.trim() || undefined,
                 ...(resumeProfile !== undefined ? { workerProfile: resumeProfile } : {}),
                 ...(resumeEffort !== undefined ? { effort: resumeEffort } : {}),
+                ...(hireGrantContext !== undefined ? { grantContext: hireGrantContext } : {}),
                 pending: {
                     trigger: "message",
                     text: deliveryText,
@@ -6186,6 +6215,7 @@ async function runMessage(ctx, laneId, opts) {
                         ...(automatic.historyReason !== undefined ? { accountHistoryReason: automatic.historyReason } : {}),
                         ...(resumeProfile !== undefined ? { workerProfile: resumeProfile } : {}),
                         ...(resumeEffort !== undefined ? { effort: resumeEffort } : {}),
+                        ...(hireGrantContext !== undefined ? { grantContext: hireGrantContext } : {}),
                         pending: {
                             trigger: "message",
                             text: deliveryText,
@@ -6300,7 +6330,7 @@ async function runMessage(ctx, laneId, opts) {
                             });
                             archiveResumeMessage(hqRoot, laneId, dropboxMessage);
                             return started;
-                        });
+                        }, hireGrantContext);
                     }, ctx.sleep);
                 },
             }, mechanism);
@@ -9752,6 +9782,7 @@ export function registerLanesCommand(parent, deps = {}) {
         .option("--model <id>", "Model for the moved lane (with --account only)")
         .option("--effort <level>", "Reasoning effort for the resumed provider turn")
         .option("--worker <profile>", "Attach a personal worker profile when this message resumes the lane")
+        .addOption(new Option("--grant-context <base64url>").hideHelp())
         .option("--no-compact", "Skip the resume-time compaction check for this message")
         .action(wrap(async (laneId, opts) => {
         await runMessage(ctx, laneId, opts);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.234.0",
+  "version": "5.234.1",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {