@indigoai-us/hq-cli 5.269.0 → 5.271.0

package/CHANGELOG.md

@@ -2,6 +2,34 @@
 
 ## [Unreleased]
 
+## [5.271.0] — 2026-09-28
+
+### Fixed
+
+- `hq lanes create --outpost` reads `lanes.outpost-load-balancing` for the
+  resolved company, so enabled personal worker profiles can run on an Outpost.
+- Resolve host-suffixed lanes created on a registered Outpost for grant,
+  message, and resume commands while keeping senior authorization on the primary.
+- `hq lanes move-target` keeps the company placement gate, and unfiltered
+  `hq lanes list` resolves the active company for host capacity.
+
+## [5.270.0] — 2026-09-28
+
+### Fixed
+
+- Company billing links in CLI plan-limit notices no longer depend on the
+  rollout flag.
+
+### Removed
+
+- Removed stale gate language from hire-grant command help. Enforcement remains
+  unconditional; backfill remains dry-run only.
+
+### Fixed
+
+- `hq files unshare --with` now accepts the same person UID principals as direct grants.
+- The update gate no longer retries failed Windows installs through `sudo -n`.
+
 ## [5.269.0] — 2026-09-28
 
 ### Fixed
@@ -334,6 +362,10 @@
 - Removed the unused `cli.network.force-ipv4` hq-flags lookup and forced IPv4
   startup path. The existing Node family-attempt timeout remains unchanged.
 - `hq auth login` continues when it cannot read or save the remembered provider. It prints a dim warning with the state path and error code; a save failure does not turn a successful sign-in into a login failure.
+- `hq doctor`, client health metadata, and feedback attachments now use the
+  newest sync-log source from the desktop app or configured daemon directory.
+  Daemon `HQ_DAEMON_DIR` overrides and log rotations are supported, and
+  numeric runner error levels count in health metadata.
 
 ## [5.242.0] — 2026-09-27
 

package/dist/command-catalog.generated.d.ts

@@ -1701,7 +1701,7 @@ export declare const COMMAND_CATALOG: readonly [{
         }];
         readonly options: readonly [{
             readonly flags: "--with <principal>";
-            readonly description: "Email address, group id, or '@all' to remove the company-wide grant";
+            readonly description: "Person uid, email address, group id, or '@all' to remove the grant";
         }];
         readonly subcommands: readonly [];
     }, {
@@ -7755,7 +7755,7 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Non-negative safe integer hire grant";
         }, {
             readonly flags: "--grant-context <base64url>";
-            readonly description: "Primary-authorized hire hierarchy and gate decision";
+            readonly description: "Primary-authorized hire hierarchy context";
         }, {
             readonly flags: "--json";
             readonly description: "JSON on stdout (always)";
@@ -7800,6 +7800,9 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly options: readonly [{
             readonly flags: "--hire <n>";
             readonly description: "Non-negative safe integer hire grant";
+        }, {
+            readonly flags: "--outpost <id>";
+            readonly description: "Confirm the registered Outpost hosting a native lane";
         }, {
             readonly flags: "--json";
             readonly description: "JSON on stdout (always)";
@@ -7807,7 +7810,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "backfill-grants";
-        readonly description: "Preview or apply missing hire grants for alive manager lanes";
+        readonly description: "Preview missing hire grants for alive manager lanes; writes are disabled";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly usage: "[options]";
@@ -7817,7 +7820,7 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Print proposed values without writing (default)";
         }, {
             readonly flags: "--apply";
-            readonly description: "Write missing hire grants; only run before enforcement is enabled";
+            readonly description: "Retained for compatibility; writes are disabled";
         }, {
             readonly flags: "--json";
             readonly description: "JSON on stdout (always)";

package/dist/command-catalog.generated.js

@@ -2170,7 +2170,7 @@ export const COMMAND_CATALOG = [
                 "options": [
                     {
                         "flags": "--with <principal>",
-                        "description": "Email address, group id, or '@all' to remove the company-wide grant"
+                        "description": "Person uid, email address, group id, or '@all' to remove the grant"
                     }
                 ],
                 "subcommands": []
@@ -10026,7 +10026,7 @@ export const COMMAND_CATALOG = [
                     },
                     {
                         "flags": "--grant-context <base64url>",
-                        "description": "Primary-authorized hire hierarchy and gate decision"
+                        "description": "Primary-authorized hire hierarchy context"
                     },
                     {
                         "flags": "--json",
@@ -10086,6 +10086,10 @@ export const COMMAND_CATALOG = [
                         "flags": "--hire <n>",
                         "description": "Non-negative safe integer hire grant"
                     },
+                    {
+                        "flags": "--outpost <id>",
+                        "description": "Confirm the registered Outpost hosting a native lane"
+                    },
                     {
                         "flags": "--json",
                         "description": "JSON on stdout (always)"
@@ -10095,7 +10099,7 @@ export const COMMAND_CATALOG = [
             },
             {
                 "name": "backfill-grants",
-                "description": "Preview or apply missing hire grants for alive manager lanes",
+                "description": "Preview missing hire grants for alive manager lanes; writes are disabled",
                 "aliases": [],
                 "hidden": false,
                 "usage": "[options]",
@@ -10107,7 +10111,7 @@ export const COMMAND_CATALOG = [
                     },
                     {
                         "flags": "--apply",
-                        "description": "Write missing hire grants; only run before enforcement is enabled"
+                        "description": "Retained for compatibility; writes are disabled"
                     },
                     {
                         "flags": "--json",

package/dist/commands/files.js

@@ -262,7 +262,7 @@ export function registerFilesCommand(program) {
     files
         .command("unshare <prefix>")
         .description("Remove a file access grant. A trailing slash targets the private-folder row exactly.")
-        .requiredOption("--with <principal>", "Email address, group id, or '@all' to remove the company-wide grant")
+        .requiredOption("--with <principal>", "Person uid, email address, group id, or '@all' to remove the grant")
         .action(async (prefix, opts) => {
         try {
             // Unshare MUTATES access with no preview, and it resolves the target
@@ -278,7 +278,8 @@ export function registerFilesCommand(program) {
             const isAll = principal === "@all";
             const isEmail = !isAll && EMAIL_PATTERN.test(principal);
             const isGroup = !isAll && GROUP_ID_PATTERN.test(principal);
-            if (!isAll && !isEmail && !isGroup) {
+            const isPerson = !isAll && !isEmail && !isGroup && PERSON_UID_PATTERN.test(principal);
+            if (!isAll && !isEmail && !isGroup && !isPerson) {
                 console.error(chalk.red(`Invalid principal '${principal}': must be '@all', an email address, or a group id matching grp_<alphanumeric>`));
                 process.exit(1);
             }
@@ -286,7 +287,9 @@ export function registerFilesCommand(program) {
                 ? "company-wide"
                 : isEmail
                     ? "email"
-                    : "group";
+                    : isGroup
+                        ? "group"
+                        : "person";
             const granteeId = isAll
                 ? ""
                 : isEmail

package/dist/commands/lanes-message.js

@@ -65,9 +65,12 @@ export function createLaneMessageHandlers(deps) {
         if (!text) {
             throw new LanesError("missing_text", "--text is required", {});
         }
-        let lane = readLane(hqRoot, laneId);
-        if (lane.host.kind === "outpost" && !laneIsHostedHere(ctx, lane)) {
-            await dispatchOutpostLaneCommand(ctx, lane, "message", opts);
+        const resolution = await deps.resolveCommandLane(ctx, laneId);
+        let lane = resolution.lane;
+        if (resolution.remoteOnly || (lane.host.kind === "outpost" && !laneIsHostedHere(ctx, lane))) {
+            await dispatchOutpostLaneCommand(ctx, lane, "message", opts, resolution.remoteOnly
+                ? { syncPrimary: false, expectedOwnerHost: resolution.ownerHost }
+                : undefined);
             return;
         }
         assertLaneRunsHereForOperatorMutation(ctx, lane, "message");

package/dist/commands/lanes-resume.js

@@ -86,7 +86,8 @@ export function createLaneResumeHandlers(deps) {
      */
     async function runResume(ctx, laneId, opts) {
         const hqRoot = ctx.hqRoot();
-        let lane = readLane(hqRoot, laneId);
+        const resolution = await deps.resolveCommandLane(ctx, laneId);
+        let lane = resolution.lane;
         const failedResumeReason = opts.reason?.trim();
         if (opts.reason !== undefined && opts.fromFailed !== true) {
             throw new LanesError("failed_resume_reason_requires_flag", "--reason on hq lanes resume requires --from-failed", { lane_id: laneId });
@@ -122,9 +123,11 @@ export function createLaneResumeHandlers(deps) {
         if (opts.profileRepinContext !== undefined && !ctx.isSsmOwnerDispatch()) {
             throw new LanesError("worker_profile_hash_mismatch", "Profile re-pin context is only valid on an Outpost owner dispatch", { lane_id: laneId });
         }
-        if (lane.host.kind === "outpost" && !laneIsHostedHere(ctx, lane)) {
+        if (resolution.remoteOnly || (lane.host.kind === "outpost" && !laneIsHostedHere(ctx, lane))) {
             await withResumeHireAdmission(ctx, lane, () => undefined);
-            await dispatchOutpostLaneCommand(ctx, lane, "resume", opts);
+            await dispatchOutpostLaneCommand(ctx, lane, "resume", opts, resolution.remoteOnly
+                ? { syncPrimary: false, expectedOwnerHost: resolution.ownerHost }
+                : undefined);
             return;
         }
         // Fail before provider/session work if a terminal child would consume a

package/dist/commands/lanes-shared.d.ts

@@ -115,6 +115,21 @@ export declare function resolveResumeEffort(ctx: Ctx, lane: LaneRecord, input: {
     model?: string;
 }): ResolvedEffort | undefined;
 export declare function recordedResumeEffort(lane: LaneRecord): ResolvedEffort;
+export type CommandLaneResolution = {
+    lane: LaneRecord;
+    remoteOnly: false;
+} | {
+    lane: LaneRecord;
+    remoteOnly: true;
+    outpostId: string;
+    ownerHost: LaneRecord["host"];
+};
+export interface OutpostLaneDispatchBehavior {
+    /** Keep remote-only lanes out of the primary lane store. */
+    syncPrimary?: boolean;
+    /** Host identity returned by the remote record lookup for a remote-only lane. */
+    expectedOwnerHost?: LaneRecord["host"];
+}
 export interface LaneMessageHandlerDeps {
     archiveResumeMessage(hqRoot: string, laneId: string, message: {
         message_id: string;
@@ -128,7 +143,7 @@ export interface LaneMessageHandlerDeps {
         alreadyQueued?: boolean;
     }): Promise<AdmissionResult>;
     casUpdateLane(hqRoot: string, laneId: string, updater: (current: LaneRecord) => LaneRecord): LaneRecord;
-    dispatchOutpostLaneCommand(ctx: Ctx, lane: LaneRecord, action: "message" | "resume", options: LaneMessageOptions | LaneResumeOptions): Promise<void>;
+    dispatchOutpostLaneCommand(ctx: Ctx, lane: LaneRecord, action: "message" | "resume", options: LaneMessageOptions | LaneResumeOptions, behavior?: OutpostLaneDispatchBehavior): Promise<void>;
     drainHookStatusFor(ctx: Ctx, lane: LaneRecord): {
         registered: boolean;
         kind: string;
@@ -142,6 +157,7 @@ export interface LaneMessageHandlerDeps {
     persistClaudeAccountSelection(hqRoot: string, lane: LaneRecord, selection: LaneAccountSelection): LaneRecord;
     printJson(value: unknown): void;
     recordResumeSetup(ctx: Ctx, lane: LaneRecord, input: RecordResumeSetupInput): LaneRecord;
+    resolveCommandLane(ctx: Ctx, laneId: string): Promise<CommandLaneResolution>;
     resolveActiveQuestionCompany(ctx: Ctx, message?: string): Promise<LaneCompanyRef>;
     resolveResumeProfile(ctx: Ctx, lane: LaneRecord, workerId: string): ResolvedResumeProfile;
     selectAutomaticClaudeResumeAccount(ctx: Ctx, lane: LaneRecord, workerProfile?: ResolvedResumeProfile, options?: {
@@ -154,8 +170,8 @@ export interface LaneMessageHandlerDeps {
     validateResumeProfileModel(ctx: Ctx, lane: LaneRecord, profile: WorkerProfile): void;
     withResumeHireAdmission<T>(ctx: Ctx, lane: LaneRecord, fn: () => T, grantContext?: OutpostHireGrantContext): Promise<T>;
 }
-export interface LaneResumeHandlerDeps extends Pick<LaneMessageHandlerDeps, "archiveResumeMessage" | "assertLaneRunsHereForAdmission" | "assertLaneRunsHereForOperatorMutation" | "assessLaneAdmission" | "casUpdateLane" | "laneIsHostedHere" | "laneWithRecoveredProviderSession" | "mintMessageId" | "prepareAccountMove" | "persistClaudeAccountSelection" | "printJson" | "recordResumeSetup" | "resolveResumeProfile" | "selectAutomaticClaudeResumeAccount" | "validateResumeProfileModel" | "withResumeHireAdmission"> {
-    dispatchOutpostLaneCommand(ctx: Ctx, lane: LaneRecord, action: "resume", options: LaneResumeOptions): Promise<void>;
+export interface LaneResumeHandlerDeps extends Pick<LaneMessageHandlerDeps, "archiveResumeMessage" | "assertLaneRunsHereForAdmission" | "assertLaneRunsHereForOperatorMutation" | "assessLaneAdmission" | "casUpdateLane" | "laneIsHostedHere" | "laneWithRecoveredProviderSession" | "mintMessageId" | "prepareAccountMove" | "persistClaudeAccountSelection" | "printJson" | "recordResumeSetup" | "resolveCommandLane" | "resolveResumeProfile" | "selectAutomaticClaudeResumeAccount" | "validateResumeProfileModel" | "withResumeHireAdmission"> {
+    dispatchOutpostLaneCommand(ctx: Ctx, lane: LaneRecord, action: "resume", options: LaneResumeOptions, behavior?: OutpostLaneDispatchBehavior): Promise<void>;
     authorizeFailedResume(ctx: Ctx, lane: LaneRecord, encodedContext?: string): string;
     authorizeResumeProfileRepin(ctx: Ctx, lane: LaneRecord, profile: ResolvedResumeProfile | undefined, encodedContext: string | undefined): ResumeProfileRepinAuthorization | undefined;
     automaticBalanceMoveHistoryReason(ctx: Ctx, lane: LaneRecord): AccountHistoryEntry["reason"];
@@ -217,7 +233,7 @@ export interface Ctx {
     }) => Promise<OutpostDispatchResult>;
     backfillOutpostIdentity: (expectedId: string) => "created" | "unchanged";
     fetchText: (url: string) => Promise<string>;
-    lanePlacementEnabled: () => boolean;
+    lanePlacementEnabled: (company: LaneCompanyRef | undefined) => Promise<boolean>;
     storyLedgerEnabled: () => boolean;
     isSsmOwnerDispatch: () => boolean;
     withGrantHireLocks: typeof withLaneHireLocks;

package/dist/commands/lanes.d.ts

@@ -83,7 +83,7 @@ export interface LanesCommandDeps {
     locateTranscript?: (home: string, sessionId: string) => string | null;
     monitorEvidence?: MonitorEvidenceReader;
     /** Test seam for the default-off outpost placement rollout flag. */
-    lanePlacementEnabled?: () => boolean;
+    lanePlacementEnabled?: (company: LaneCompanyRef | undefined) => Promise<boolean>;
     /** Test seam for the default-off story ledger flag. */
     storyLedgerEnabled?: () => boolean;
     /** Test seam for the SSM-only Outpost owner grant path. */