@indigoai-us/hq-cli 5.274.0 → 5.274.1

package/CHANGELOG.md

@@ -2,7 +2,7 @@
 
 ## [Unreleased]
 
-## [5.274.0] — 2026-09-28
+## [5.274.1] — 2026-09-28
 
 ### Fixed
 
@@ -37,6 +37,10 @@
 - Internal: moved the move, move-target and placement subcommands out of
   `src/commands/lanes.ts`; no behaviour change.
 
+### Fixed
+
+- With lineage-aware supersession enabled, same-profile workers under the same session senior no longer supersede each other. The recorded senior can message its worker if it is later superseded.
+
 ## [5.273.0] — 2026-09-28
 
 ### Fixed

package/dist/commands/lanes-message.js

@@ -13,7 +13,7 @@ import { keepAliveExclusion, keepAliveSupersededBy, LANE_SUPERSESSION_LINEAGE_AW
 import { managerStatusGateEnabledForLane } from "../lib/lanes/manager-status-gate.js";
 import { readLanesRegistryFlag } from "../lib/lanes/registry-flag.js";
 import { resolveLaneCompany } from "../lib/lanes/lane-company.js";
-import { accountMoveSummary, accountRequestKeepsCurrentLane, assertCurrentResumeAccountAvailable, recordedResumeEffort, resetKeepAliveProgress, resolveResumeEffort } from "./lanes-shared.js";
+import { accountMoveSummary, accountRequestKeepsCurrentLane, assertCurrentResumeAccountAvailable, callerMatchesSessionSenior, recordedResumeEffort, resetKeepAliveProgress, resolveResumeEffort } from "./lanes-shared.js";
 export function createLaneMessageHandlers(deps) {
     const { archiveResumeMessage, assertLaneRunsHereForAdmission, assertLaneRunsHereForOperatorMutation, assessLaneAdmission, casUpdateLane, dispatchOutpostLaneCommand, drainHookStatusFor, laneIsHostedHere, laneWithRecoveredProviderSession, loadAllLanes, mintMessageId, persistClaudeAccountSelection, prepareAccountMove, printJson, recordResumeSetup, resolveActiveQuestionCompany, resolveResumeProfile, selectAutomaticClaudeResumeAccount, validateResumeProfileModel, withResumeHireAdmission } = deps;
     function currentSuccessorOf(lane, lanes, lineageAware, companyForLane) {
@@ -30,7 +30,19 @@ export function createLaneMessageHandlers(deps) {
         }
         return current.lane_id === lane.lane_id ? undefined : current;
     }
-    function callerMayMessageSupersededLane(ctx, lane, lanes, lineageAware, companyForLane, callerLaneIdOverride) {
+    function callerMayMessageSupersededLane(ctx, lane, lanes, lineageAware, companyForLane, callerLaneIdOverride, callerSessionIdOverride) {
+        if (lane.senior.kind === "session") {
+            const sessionSeniorId = lane.senior.id;
+            if (!sessionSeniorId)
+                return false;
+            if (callerLaneIdOverride !== undefined || ctx.env.HQ_LANE_ID?.trim())
+                return false;
+            if (callerSessionIdOverride === null)
+                return false;
+            return callerSessionIdOverride === undefined
+                ? callerMatchesSessionSenior(ctx, sessionSeniorId)
+                : callerSessionIdOverride === sessionSeniorId;
+        }
         if (lane.senior.kind !== "lane")
             return false;
         const callerLaneId = callerLaneIdOverride ?? ctx.env.HQ_LANE_ID?.trim();
@@ -86,11 +98,15 @@ export function createLaneMessageHandlers(deps) {
         let lanes = localLanes;
         const retiredLaneIds = loadRetiredLaneIds(ctx.hqRoot());
         const dispatchedCallerId = grantContext?.superseded_message_caller_id;
-        const dispatchedContextAuthorized = grantContext !== undefined &&
-            dispatchedCallerId !== undefined &&
+        const dispatchedSessionId = grantContext?.superseded_message_session_id;
+        const dispatchedContextBound = grantContext !== undefined &&
             ctx.isSsmOwnerDispatch() &&
             sameHireGrantSenior(grantContext.expected_senior, currentLane.senior);
-        if (dispatchedContextAuthorized && grantContext) {
+        const dispatchedSessionContext = dispatchedContextBound && currentLane.senior.kind === "session";
+        const dispatchedContextAuthorized = dispatchedContextBound && (dispatchedCallerId !== undefined ||
+            (dispatchedSessionId !== undefined && dispatchedSessionId === currentLane.senior.id));
+        if (dispatchedContextBound && grantContext &&
+            (dispatchedCallerId !== undefined || dispatchedSessionContext)) {
             const merged = new Map(localLanes.map((record) => [record.lane_id, record]));
             for (const snapshot of grantContext.hierarchy) {
                 const contextLane = keepAliveLaneFromSnapshot(snapshot);
@@ -101,14 +117,23 @@ export function createLaneMessageHandlers(deps) {
             lanes = [...merged.values()];
         }
         const exclusion = keepAliveExclusion(currentLane, lanes, retiredLaneIds, lineageAware, companyForLane);
-        const callerLaneId = dispatchedContextAuthorized ? dispatchedCallerId : undefined;
-        if (exclusion === "superseded" && callerMayMessageSupersededLane(ctx, currentLane, lanes, lineageAware, companyForLane, callerLaneId)) {
+        const callerLaneId = dispatchedContextBound ? dispatchedCallerId : undefined;
+        const callerSessionId = dispatchedContextBound
+            ? (dispatchedSessionId === undefined ? null : dispatchedSessionId)
+            : undefined;
+        if (exclusion === "superseded" && callerMayMessageSupersededLane(ctx, currentLane, lanes, lineageAware, companyForLane, callerLaneId, callerSessionId)) {
             return {
                 lane: currentLane,
                 exclusion: undefined,
                 ...(!dispatchedContextAuthorized && ctx.env.HQ_LANE_ID?.trim()
                     ? { supersededMessageCallerId: ctx.env.HQ_LANE_ID.trim() }
                     : {}),
+                ...(!dispatchedContextBound && currentLane.senior.kind === "session" &&
+                    typeof currentLane.senior.id === "string" &&
+                    currentLane.senior.id.length > 0 &&
+                    callerMatchesSessionSenior(ctx, currentLane.senior.id)
+                    ? { supersededMessageSessionId: currentLane.senior.id }
+                    : {}),
             };
         }
         return { lane: currentLane, exclusion };
@@ -149,9 +174,17 @@ export function createLaneMessageHandlers(deps) {
             const supersededMessageCallerId = callerLaneId === undefined || resolution.remoteOnly
                 ? undefined
                 : (await messageLaneExclusion(ctx, lane)).supersededMessageCallerId;
+            const sessionSeniorId = lane.senior.kind === "session" ? lane.senior.id : undefined;
+            const supersededMessageSessionId = !resolution.remoteOnly &&
+                typeof sessionSeniorId === "string" &&
+                sessionSeniorId.length > 0 &&
+                callerMatchesSessionSenior(ctx, sessionSeniorId)
+                ? sessionSeniorId
+                : undefined;
             await dispatchOutpostLaneCommand(ctx, lane, "message", {
                 ...opts,
                 ...(supersededMessageCallerId === undefined ? {} : { supersededMessageCallerId }),
+                ...(supersededMessageSessionId === undefined ? {} : { supersededMessageSessionId }),
             }, resolution.remoteOnly
                 ? { syncPrimary: false, expectedOwnerHost: resolution.ownerHost }
                 : undefined);

package/dist/commands/lanes-shared.d.ts

@@ -43,6 +43,8 @@ export interface LaneMessageOptions {
     grantContext?: string;
     /** Primary-verified caller identity for a superseded Outpost message. */
     supersededMessageCallerId?: string;
+    /** Primary-verified session senior for a superseded Outpost message. */
+    supersededMessageSessionId?: string;
     monitorEvent?: {
         monitor_id: string;
         description: string;
@@ -248,6 +250,8 @@ export declare function readLanePlacementEnabled(ctx: Ctx, company: LaneCompanyR
 export declare function processLanePlacementCompany(ctx: Ctx): LaneCompanyRef | undefined;
 export declare function parsePlacementPolicy(raw: string): LanePlacementPolicy;
 export declare function assertPlacementEnabled(ctx: Ctx, company: LaneCompanyRef | undefined, readPlacementEnabled?: () => Promise<boolean>): Promise<void>;
+/** Match a direct session-senior caller while refusing lane-worker identities. */
+export declare function callerMatchesSessionSenior(ctx: Pick<Ctx, "env">, seniorSessionId: string): boolean;
 export interface LaneWaitCommandOptions {
     any?: string[];
     for?: string[];

package/dist/commands/lanes-shared.js

@@ -4,6 +4,7 @@ import { resolveLaneEffort } from "../lib/lanes/effort.js";
 import { LanesError } from "../lib/lanes/errors.js";
 import { AccountResolutionError, accountStatus, loadLanesConfig } from "../lib/lanes/index.js";
 import { resolveLaneModel } from "../lib/lanes/spawn.js";
+import { sessionIdFromEnv } from "../lib/mesh/live/session-identity.js";
 export function accountRequestKeepsCurrentLane(lane, rawAccount) {
     const raw = rawAccount.trim();
     const colon = raw.indexOf(":");
@@ -151,4 +152,8 @@ export async function assertPlacementEnabled(ctx, company, readPlacementEnabled
         return;
     throw new LanesError("lane_placement_disabled", `Lane placement options require hq-flags gate ${LANE_OUTPOST_LOAD_BALANCING_FLAG}`, { flag: LANE_OUTPOST_LOAD_BALANCING_FLAG });
 }
+/** Match a direct session-senior caller while refusing lane-worker identities. */
+export function callerMatchesSessionSenior(ctx, seniorSessionId) {
+    return !ctx.env.HQ_LANE_ID?.trim() && sessionIdFromEnv(ctx.env) === seniorSessionId;
+}
 //# sourceMappingURL=lanes-shared.js.map

package/dist/commands/lanes.js

@@ -17,7 +17,7 @@ import { createLaneMoveHandlers } from "./lanes-move.js";
 import { createLaneQuestionsHandlers } from "./lanes-questions.js";
 import { createLaneResumeHandlers } from "./lanes-resume.js";
 import { createLaneWatchHandlers } from "./lanes-watch.js";
-import { assertPlacementEnabled, defaultLanePlacementEnabled, parsePlacementPolicy, processLanePlacementCompany, readLanePlacementEnabled, } from "./lanes-shared.js";
+import { callerMatchesSessionSenior, assertPlacementEnabled, defaultLanePlacementEnabled, parsePlacementPolicy, processLanePlacementCompany, readLanePlacementEnabled, } from "./lanes-shared.js";
 export { LANE_OUTPOST_LOAD_BALANCING_FLAG } from "./lanes-shared.js";
 export { resolveAnswerChoice } from "./lanes-questions.js";
 import { registerOutpostPrunerCommand } from "./outpost-pruner.js";
@@ -826,9 +826,9 @@ async function withResumeHireAdmission(ctx, lane, fn, grantContext) {
     const hqRoot = ctx.hqRoot();
     if (grantContext !== undefined && (!ctx.isSsmOwnerDispatch() ||
         !laneGrantTargetHostedHere(ctx, lane) ||
-        lane.senior.kind !== "lane" ||
+        (lane.senior.kind !== "lane" && lane.senior.kind !== "session") ||
         !sameHireGrantSenior(lane.senior, grantContext.expected_senior))) {
-        throw new LanesError("hire_grant_senior_changed", `Lane ${lane.lane_id}'s senior changed after the primary authorized its resume`, { lane_id: lane.lane_id, expected_senior: grantContext.expected_senior, current_senior: lane.senior });
+        throw new LanesError("hire_grant_senior_changed", `Lane ${lane.lane_id}'s senior changed after the primary authorized its Outpost dispatch`, { lane_id: lane.lane_id, expected_senior: grantContext.expected_senior, current_senior: lane.senior });
     }
     if (!isTerminalLaneState(lane.state) ||
         lane.senior.kind !== "lane" ||
@@ -3486,10 +3486,10 @@ async function dispatchOutpostLaneCommand(ctx, lane, action, options, behavior =
         grantHierarchy = hierarchy;
         grantContext = createOutpostHireGrantContext(lane, hierarchy);
     }
-    else if ((action === "resume" || action === "message") &&
-        lane.senior.kind === "lane") {
+    else if ((action === "resume" && lane.senior.kind === "lane") ||
+        (action === "message" && (lane.senior.kind === "lane" || lane.senior.kind === "session"))) {
         const hierarchy = mergeOwnerLaneRecords(loadAllLanes(ctx.hqRoot()), await readOutpostLaneRecords(ctx, outpostId));
-        grantContext = createOutpostHireGrantContext(lane, hierarchy, action === "message" ? options.supersededMessageCallerId : undefined);
+        grantContext = createOutpostHireGrantContext(lane, hierarchy, action === "message" ? options.supersededMessageCallerId : undefined, action === "message" ? options.supersededMessageSessionId : undefined);
     }
     let dispatched;
     let grantContextRejected = false;
@@ -4468,9 +4468,12 @@ function callerSeniorAuthorization(ctx, seniorRef) {
     if (!sessionId)
         return { authorized: false, reason: "no session id" };
     if (seniorRef.kind === "session") {
-        return sessionId === seniorRef.id
+        const seniorSessionId = seniorRef.id;
+        if (!seniorSessionId)
+            return { authorized: false, reason: "session senior has no id" };
+        return callerMatchesSessionSenior(ctx, seniorSessionId)
             ? { authorized: true }
-            : { authorized: false, reason: `session id ${sessionId} is not senior session ${seniorRef.id}` };
+            : { authorized: false, reason: `session id ${sessionId} is not senior session ${seniorSessionId}` };
     }
     if (seniorRef.kind !== "user")
         return { authorized: false, reason: "senior is not a user" };

package/dist/lib/lanes/hire-grant-dispatch.d.ts

@@ -16,9 +16,10 @@ export interface OutpostHireGrantContext {
     expected_senior: SeniorRef;
     hierarchy: HireGrantLaneSnapshot[];
     superseded_message_caller_id?: string;
+    superseded_message_session_id?: string;
 }
 /** Encode only the owner-relevant hierarchy from the primary's complete store. */
-export declare function createOutpostHireGrantContext(target: LaneRecord, lanes: readonly LaneRecord[], supersededMessageCallerId?: string): string;
+export declare function createOutpostHireGrantContext(target: LaneRecord, lanes: readonly LaneRecord[], supersededMessageCallerId?: string, supersededMessageSessionId?: string): string;
 /** Decode and validate an owner grant context, binding it to the target lane. */
 export declare function parseOutpostHireGrantContext(encoded: string, targetLaneId: string): OutpostHireGrantContext;
 export declare function sameHireGrantSenior(a: SeniorRef, b: SeniorRef): boolean;

package/dist/lib/lanes/hire-grant-dispatch.js

@@ -30,11 +30,18 @@ function snapshot(lane) {
     };
 }
 /** Encode only the owner-relevant hierarchy from the primary's complete store. */
-export function createOutpostHireGrantContext(target, lanes, supersededMessageCallerId) {
+export function createOutpostHireGrantContext(target, lanes, supersededMessageCallerId, supersededMessageSessionId) {
     const current = lanes.find((lane) => lane.lane_id === target.lane_id);
     if (!current || !sameSenior(current.senior, target.senior)) {
         throw new LanesError("hire_grant_hierarchy_unavailable", `Cannot build an authoritative hire-grant hierarchy for lane ${target.lane_id}`, { lane_id: target.lane_id });
     }
+    if (supersededMessageCallerId !== undefined && supersededMessageSessionId !== undefined) {
+        throw contextError("Outpost grant context cannot contain both lane and session message callers");
+    }
+    if (supersededMessageSessionId !== undefined &&
+        (current.senior.kind !== "session" || current.senior.id !== supersededMessageSessionId)) {
+        throw new LanesError("hire_grant_message_caller_invalid", `Cannot include an unverified session message caller in lane ${target.lane_id}'s Outpost context`, { lane_id: target.lane_id });
+    }
     const relevant = new Map();
     relevant.set(current.lane_id, current);
     if (current.senior.kind === "lane") {
@@ -65,6 +72,18 @@ export function createOutpostHireGrantContext(target, lanes, supersededMessageCa
             }
         }
     }
+    if (current.senior.kind === "session") {
+        const companyUid = current.company?.uid;
+        const projectId = current.project_id;
+        if (companyUid) {
+            for (const candidate of lanes) {
+                if (candidate.company?.uid === companyUid && ((current.worker_profile !== undefined && candidate.worker_profile === current.worker_profile) ||
+                    (projectId !== undefined && candidate.project_id === projectId && (candidate.hire_grant ?? 0) > 0))) {
+                    relevant.set(candidate.lane_id, candidate);
+                }
+            }
+        }
+    }
     const hierarchy = [...relevant.values()]
         .map(snapshot)
         .sort((a, b) => a.lane_id.localeCompare(b.lane_id));
@@ -79,6 +98,9 @@ export function createOutpostHireGrantContext(target, lanes, supersededMessageCa
         ...(supersededMessageCallerId === undefined
             ? {}
             : { superseded_message_caller_id: supersededMessageCallerId }),
+        ...(supersededMessageSessionId === undefined
+            ? {}
+            : { superseded_message_session_id: supersededMessageSessionId }),
     };
     const encoded = Buffer.from(JSON.stringify(context), "utf8").toString("base64url");
     if (Buffer.byteLength(encoded, "utf8") > MAX_CONTEXT_BYTES) {
@@ -183,7 +205,7 @@ export function parseOutpostHireGrantContext(encoded, targetLaneId) {
         throw contextError("Outpost grant context must be an object");
     }
     const record = raw;
-    if (Object.keys(record).some((key) => !["schema_version", "enforcement_enabled", "expected_senior", "hierarchy", "superseded_message_caller_id"].includes(key))) {
+    if (Object.keys(record).some((key) => !["schema_version", "enforcement_enabled", "expected_senior", "hierarchy", "superseded_message_caller_id", "superseded_message_session_id"].includes(key))) {
         throw contextError("Outpost grant context contains unknown fields");
     }
     if (record.schema_version !== HIRE_GRANT_CONTEXT_SCHEMA ||
@@ -194,10 +216,18 @@ export function parseOutpostHireGrantContext(encoded, targetLaneId) {
     }
     const expectedSenior = parseSenior(record.expected_senior);
     const messageCallerId = record.superseded_message_caller_id;
+    const messageSessionId = record.superseded_message_session_id;
     if (messageCallerId !== undefined &&
         (typeof messageCallerId !== "string" || !messageCallerId.trim() || messageCallerId.trim() !== messageCallerId)) {
         throw contextError("Outpost grant context contains an invalid superseded-message caller");
     }
+    if (messageSessionId !== undefined &&
+        (typeof messageSessionId !== "string" || !messageSessionId.trim() || messageSessionId.trim() !== messageSessionId)) {
+        throw contextError("Outpost grant context contains an invalid superseded-message session");
+    }
+    if (messageCallerId !== undefined && messageSessionId !== undefined) {
+        throw contextError("Outpost grant context cannot contain both lane and session message callers");
+    }
     const hierarchy = record.hierarchy.map(parseLaneSnapshot);
     if (!expectedSenior || hierarchy.some((lane) => lane === null)) {
         throw contextError("Outpost grant context contains an invalid senior or lane snapshot");
@@ -211,6 +241,10 @@ export function parseOutpostHireGrantContext(encoded, targetLaneId) {
     if (!target || !sameSenior(target.senior, expectedSenior)) {
         throw contextError("Outpost grant context does not match the target's expected senior");
     }
+    if (messageSessionId !== undefined &&
+        (expectedSenior.kind !== "session" || expectedSenior.id !== messageSessionId)) {
+        throw contextError("Outpost grant context session caller does not match the target's session senior");
+    }
     if (expectedSenior.kind === "lane" &&
         (!expectedSenior.id || !byId.has(expectedSenior.id))) {
         throw contextError("Outpost grant context is missing the target's senior lane");
@@ -232,6 +266,7 @@ export function parseOutpostHireGrantContext(encoded, targetLaneId) {
         expected_senior: expectedSenior,
         hierarchy: snapshots,
         ...(messageCallerId === undefined ? {} : { superseded_message_caller_id: messageCallerId }),
+        ...(messageSessionId === undefined ? {} : { superseded_message_session_id: messageSessionId }),
     };
 }
 export function sameHireGrantSenior(a, b) {

package/dist/lib/lanes/keep-alive.js

@@ -234,8 +234,8 @@ export function keepAliveSupersededBy(lane, lanes, lineageAware = LANE_SUPERSESS
         // Any descendant is part of this lead's work tree, not a replacement lead.
         if (laneAncestorsFrom(candidate.senior, lanesById, sessionOwners).has(lane.lane_id))
             return false;
-        const sameLaneSenior = lane.senior.kind === "lane" &&
-            candidate.senior.kind === "lane" &&
+        const sameLaneSenior = (lane.senior.kind === "lane" || lane.senior.kind === "session") &&
+            candidate.senior.kind === lane.senior.kind &&
             candidate.senior.id === lane.senior.id;
         const sameProfile = lane.worker_profile !== undefined &&
             candidate.worker_profile === lane.worker_profile &&

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.274.0",
+  "version": "5.274.1",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {