@indigoai-us/hq-cli 5.290.0 → 5.292.0

package/dist/commands/core-native-jobs-flag.d.ts

@@ -0,0 +1,4 @@
+/** Default-off rollout gate for the native scheduled-jobs helpers. */
+export declare const CORE_NATIVE_JOBS_FLAG = "core-native-jobs";
+export declare function coreNativeJobsEnabled(): Promise<boolean>;
+//# sourceMappingURL=core-native-jobs-flag.d.ts.map

package/dist/commands/core-native-jobs-flag.js

@@ -0,0 +1,7 @@
+/** Default-off rollout gate for the native scheduled-jobs helpers. */
+export const CORE_NATIVE_JOBS_FLAG = "core-native-jobs";
+export async function coreNativeJobsEnabled() {
+    const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
+    return resolveProcessFlagGate(CORE_NATIVE_JOBS_FLAG, { fallback: false }, () => false);
+}
+//# sourceMappingURL=core-native-jobs-flag.js.map

package/dist/commands/core-ontology.d.ts

@@ -9,7 +9,8 @@
  */
 import { Command } from "commander";
 import { type FlagReader } from "../lib/checkpoint-ontology/plan.js";
-import { type DeleteVaultKey, type ListedPair } from "../lib/checkpoint-ontology/merge-copies.js";
+import { type AliasDrop } from "../lib/checkpoint-ontology/drop-aliases.js";
+import { type DeleteVaultKey, type ListedPair, type MergeCopiesReport } from "../lib/checkpoint-ontology/merge-copies.js";
 export declare const ONTOLOGY_PAYLOAD_FILE = "payload.json";
 /** The hq-flags read, scoped to the payload company. */
 export declare const registryFlagReader: FlagReader;
@@ -31,12 +32,15 @@ export interface MergeCopiesCommandOptions {
     apply?: boolean;
     delete?: boolean;
     variants?: boolean;
+    /** Merge exactly the `--only` pairs, whatever their names (flag merge-listed-pairs). */
+    listed?: boolean;
     limit?: number;
     only?: string;
     /** Also re-point refs and links held today (flag merge-rewrite-refs). */
     rewriteRefs?: boolean;
     json?: boolean;
 }
+export declare function mergeCopiesSummary(report: MergeCopiesReport): string;
 /** Reads a `--only` file: a JSON array of `{ copy, original }` company-relative paths. */
 export declare function readListedPairs(file: string): ListedPair[];
 /**
@@ -47,10 +51,24 @@ export declare function readListedPairs(file: string): ListedPair[];
  * With `--variants`, merges two-file duplicate groups whose names differ only
  * in case, spacing or punctuation instead, gated by
  * `checkpoint.ontology.merge-variants`. `--rewrite-refs` (flag
- * `checkpoint.ontology.merge-rewrite-refs`) also re-points signal refs,
- * invoice and bill links, source and knowledge links, and carries external
- * ids and web domains.
+ * `checkpoint.ontology.merge-rewrite-refs`) also re-points invoice and
+ * knowledge links to the survivor and carries external ids and web domains;
+ * pairs named by signals or sources stay held. `--listed` (flag
+ * `checkpoint.ontology.merge-listed-pairs`) merges exactly the `--only` pairs,
+ * which a person reviewed, instead of the pairs a finder produces.
  */
 export declare function runOntologyMergeCopies(hqRoot: string, slug: string | undefined, options: MergeCopiesCommandOptions, deps?: OntologyCommandDeps): Promise<string>;
+/** Reads a `drop-aliases --only` file: a JSON array of `{ entity, alias }`. */
+export declare function readAliasDrops(file: string): AliasDrop[];
+/**
+ * `hq core ontology drop-aliases`: remove the reviewed `{ entity, alias }`
+ * pairs in `--only` from entity files (`--apply`); without it only reports.
+ * Gated by `checkpoint.ontology.drop-aliases` and `checkpoint.ontology.multi-writer`.
+ */
+export declare function runOntologyDropAliases(hqRoot: string, slug: string | undefined, options: {
+    only?: string;
+    apply?: boolean;
+    json?: boolean;
+}, deps?: OntologyCommandDeps): Promise<string>;
 export declare function registerCoreOntologyCommand(core: Command): void;
 //# sourceMappingURL=core-ontology.d.ts.map

package/dist/commands/core-ontology.js

@@ -17,7 +17,8 @@ import { applyOntologyRun, ApplyError } from "../lib/checkpoint-ontology/apply.j
 import { resolveOntologyCompany, WriteBoundsError } from "../lib/checkpoint-ontology/company.js";
 import { findDuplicateGroups, summarizeMergeBack, } from "../lib/checkpoint-ontology/multi-writer.js";
 import { buildEntityIndex } from "../lib/checkpoint-ontology/tree.js";
-import { MERGE_COPIES_FLAG, MERGE_REWRITE_REFS_FLAG, MERGE_VARIANTS_FLAG, mergeCopies, } from "../lib/checkpoint-ontology/merge-copies.js";
+import { DROP_ALIASES_FLAG, dropAliases } from "../lib/checkpoint-ontology/drop-aliases.js";
+import { MERGE_COPIES_FLAG, MERGE_LISTED_PAIRS_FLAG, MERGE_REWRITE_REFS_FLAG, MERGE_VARIANTS_FLAG, mergeCopies, } from "../lib/checkpoint-ontology/merge-copies.js";
 import { callDeleteEndpoint } from "./files.js";
 import { resolveVaultCredential } from "../utils/resolve-vault-credential.js";
 import { registerCoreOntologyNativeCommands } from "./core-ontology-native.js";
@@ -142,7 +143,7 @@ async function companyVaultDeleter(companyUid) {
         return (await callDeleteEndpoint({ token, companyUid, prefix: key, dryRun: false })).deleted;
     };
 }
-function mergeCopiesSummary(report) {
+export function mergeCopiesSummary(report) {
     const held = report.plans.filter((plan) => plan.held).length;
     const lines = [
         `ontology merge-copies (${report.mode.replace("_", " ")}) in ${report.company} (${report.pair_kind}): ${report.plans.length} of ${report.copies_found} copies, ${held} held, ${report.skipped.length} skipped`,
@@ -150,7 +151,7 @@ function mergeCopiesSummary(report) {
         `  duplicate groups ${report.duplicate_groups_before} -> ${report.duplicate_groups_after}; broken entity links ${report.broken_links_before} -> ${report.broken_links_after}`,
     ];
     for (const plan of report.plans.filter((entry) => entry.held)) {
-        lines.push(`  held ${plan.copy}: ${plan.held}${plan.held === "external_id_conflict" ? ` (${plan.detail})` : ""}`);
+        lines.push(`  held ${plan.copy}: ${plan.held}${plan.held === "external_id_conflict" || plan.held === "server_owned_refs" ? ` (${plan.detail})` : ""}`);
     }
     for (const error of report.errors)
         lines.push(`  error ${error.path}: ${error.error}`);
@@ -216,9 +217,11 @@ function readResolution(copy, raw) {
  * With `--variants`, merges two-file duplicate groups whose names differ only
  * in case, spacing or punctuation instead, gated by
  * `checkpoint.ontology.merge-variants`. `--rewrite-refs` (flag
- * `checkpoint.ontology.merge-rewrite-refs`) also re-points signal refs,
- * invoice and bill links, source and knowledge links, and carries external
- * ids and web domains.
+ * `checkpoint.ontology.merge-rewrite-refs`) also re-points invoice and
+ * knowledge links to the survivor and carries external ids and web domains;
+ * pairs named by signals or sources stay held. `--listed` (flag
+ * `checkpoint.ontology.merge-listed-pairs`) merges exactly the `--only` pairs,
+ * which a person reviewed, instead of the pairs a finder produces.
  */
 export async function runOntologyMergeCopies(hqRoot, slug, options, deps = {}) {
     if (options.apply && options.delete) {
@@ -227,13 +230,20 @@ export async function runOntologyMergeCopies(hqRoot, slug, options, deps = {}) {
     if (options.limit !== undefined && (!Number.isInteger(options.limit) || options.limit < 1)) {
         throw new OntologyUsageError("ontology: --limit must be a positive whole number");
     }
+    if (options.listed && options.variants) {
+        throw new OntologyUsageError("ontology: use either --listed or --variants");
+    }
+    if (options.listed && options.only === undefined) {
+        throw new OntologyUsageError("ontology: --listed needs --only <file>");
+    }
     const only = options.only !== undefined ? readListedPairs(options.only) : undefined;
     const resolution = resolveOntologyCompany(hqRoot, slug);
     if (!resolution.ok)
         throw new OntologyUsageError(`ontology: company rejected: ${resolution.reason}`);
     const company = resolution.company;
     const readFlag = deps.readFlag ?? registryFlagReader;
-    for (const flag of [options.variants ? MERGE_VARIANTS_FLAG : MERGE_COPIES_FLAG, MULTI_WRITER_FLAG, ...(options.rewriteRefs ? [MERGE_REWRITE_REFS_FLAG] : [])]) {
+    const kindFlag = options.listed ? MERGE_LISTED_PAIRS_FLAG : options.variants ? MERGE_VARIANTS_FLAG : MERGE_COPIES_FLAG;
+    for (const flag of [kindFlag, MULTI_WRITER_FLAG, ...(options.rewriteRefs ? [MERGE_REWRITE_REFS_FLAG] : [])]) {
         if (!(await readFlag(flag, company))) {
             return options.json ? JSON.stringify({ company: company.slug, skipped: `${flag} off` }) : `ontology merge-copies: skipped (${flag} is off)`;
         }
@@ -251,6 +261,7 @@ export async function runOntologyMergeCopies(hqRoot, slug, options, deps = {}) {
         mode,
         now: deps.now?.() ?? new Date(),
         ...(options.variants ? { pairKind: "variants" } : {}),
+        ...(options.listed ? { pairKind: "listed" } : {}),
         ...(options.limit !== undefined ? { limit: options.limit } : {}),
         ...(only ? { only } : {}),
         ...(options.rewriteRefs ? { rewriteRefs: true } : {}),
@@ -258,6 +269,59 @@ export async function runOntologyMergeCopies(hqRoot, slug, options, deps = {}) {
     });
     return options.json ? JSON.stringify(report, null, 2) : mergeCopiesSummary(report);
 }
+/** Reads a `drop-aliases --only` file: a JSON array of `{ entity, alias }`. */
+export function readAliasDrops(file) {
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(file, "utf8"));
+    }
+    catch (error) {
+        throw new OntologyUsageError(`ontology: --only file ${file} is not readable JSON: ${error.message}`);
+    }
+    const usage = "ontology: --only must be a non-empty JSON array of { entity, alias } strings";
+    if (!Array.isArray(parsed) || parsed.length === 0)
+        throw new OntologyUsageError(usage);
+    return parsed.map((item) => {
+        const record = item;
+        if (!record || typeof record.entity !== "string" || typeof record.alias !== "string" || record.alias === "") {
+            throw new OntologyUsageError(usage);
+        }
+        return { entity: record.entity, alias: record.alias };
+    });
+}
+/**
+ * `hq core ontology drop-aliases`: remove the reviewed `{ entity, alias }`
+ * pairs in `--only` from entity files (`--apply`); without it only reports.
+ * Gated by `checkpoint.ontology.drop-aliases` and `checkpoint.ontology.multi-writer`.
+ */
+export async function runOntologyDropAliases(hqRoot, slug, options, deps = {}) {
+    if (options.only === undefined)
+        throw new OntologyUsageError("ontology: drop-aliases needs --only <file>");
+    const drops = readAliasDrops(options.only);
+    const resolution = resolveOntologyCompany(hqRoot, slug);
+    if (!resolution.ok)
+        throw new OntologyUsageError(`ontology: company rejected: ${resolution.reason}`);
+    const company = resolution.company;
+    const readFlag = deps.readFlag ?? registryFlagReader;
+    for (const flag of [DROP_ALIASES_FLAG, MULTI_WRITER_FLAG]) {
+        if (!(await readFlag(flag, company))) {
+            return options.json ? JSON.stringify({ company: company.slug, skipped: `${flag} off` }) : `ontology drop-aliases: skipped (${flag} is off)`;
+        }
+    }
+    const report = dropAliases({ hqRoot, company, mode: options.apply ? "apply" : "dry_run", drops, now: deps.now?.() ?? new Date() });
+    if (options.json)
+        return JSON.stringify(report, null, 2);
+    const planned = Object.values(report.planned).reduce((sum, list) => sum + list.length, 0);
+    const lines = [
+        `ontology drop-aliases (${report.mode.replace("_", " ")}) in ${report.company}: ${planned} alias(es) on ${Object.keys(report.planned).length} entities, written ${report.written.length}, skipped ${report.skipped.length}, errors ${report.errors.length}`,
+        `  duplicate groups ${report.duplicate_groups_before} -> ${report.duplicate_groups_after}`,
+    ];
+    for (const skip of report.skipped)
+        lines.push(`  skipped ${skip.entity} "${skip.alias}": ${skip.reason}${skip.detail ? ` (${skip.detail})` : ""}`);
+    for (const error of report.errors)
+        lines.push(`  error ${error.path}: ${error.error}`);
+    return lines.join("\n");
+}
 function fail(error) {
     if (error instanceof OntologyUsageError || error instanceof ApplyError || error instanceof WriteBoundsError) {
         process.stderr.write(`${error.message}\n`);
@@ -306,9 +370,10 @@ export function registerCoreOntologyCommand(core) {
         .option("--apply", "merge each copy into its original and re-point links (writes entity files)")
         .option("--delete", "delete fully merged copies from the vault by exact key (after sync pushed the merge)")
         .option("--variants", "merge two-file duplicate groups whose names differ only in case, spacing or punctuation (checkpoint.ontology.merge-variants)")
+        .option("--listed", "merge exactly the pairs in the --only file, whatever their names (checkpoint.ontology.merge-listed-pairs)")
         .option("--limit <n>", "handle at most this many copies", (value) => Number(value))
         .option("--only <file>", "handle only the copy -> original pairs listed in this JSON file")
-        .option("--rewrite-refs", "also re-point signal refs, invoice, source and knowledge links to the survivor and carry external ids and web domains (checkpoint.ontology.merge-rewrite-refs)")
+        .option("--rewrite-refs", "also re-point invoice and knowledge links to the survivor and carry external ids and web domains; pairs named by signals or sources stay held (checkpoint.ontology.merge-rewrite-refs)")
         .option("--json", "print JSON")
         .option("--hq-root <path>", "HQ installation to operate on")
         .action(async (options) => {
@@ -320,6 +385,23 @@ export function registerCoreOntologyCommand(core) {
         }
     });
     describeCoreCommand(mergeCopies, { execution: "native", root: "live" });
+    const dropAliasesCommand = ontology
+        .command("drop-aliases")
+        .description("Remove reviewed wrong aliases from entity files (dry run by default)")
+        .requiredOption("--company <slug>", "company to change")
+        .option("--only <file>", "JSON array of { entity, alias } to remove; entity is a company-relative path")
+        .option("--apply", "write the entity files")
+        .option("--json", "print JSON")
+        .option("--hq-root <path>", "HQ installation to operate on")
+        .action(async (options) => {
+        try {
+            process.stdout.write(`${await runOntologyDropAliases(rootFor(options), options.company, options)}\n`);
+        }
+        catch (error) {
+            fail(error);
+        }
+    });
+    describeCoreCommand(dropAliasesCommand, { execution: "native", root: "live" });
     const apply = ontology
         .command("apply")
         .description("Validate the run's entity candidates and write them to the payload company")

package/dist/commands/core-policy.js

@@ -205,6 +205,28 @@ function extractRulePaths(file) {
     }
     return [...paths].sort();
 }
+function shellReferenceStem(reference) {
+    const lastDot = reference.lastIndexOf('.');
+    return lastDot === -1 ? reference : reference.slice(0, lastDot);
+}
+function shellLsExtensionGlobHasMatch(root, stem) {
+    const patternPath = path.join(root, `${stem}.*`);
+    const directory = path.dirname(patternPath);
+    const basenamePattern = path.basename(patternPath);
+    const literalPrefix = basenamePattern.slice(0, -1);
+    let entries;
+    try {
+        entries = fs.readdirSync(directory);
+    }
+    catch (error) {
+        if (expectedFsMiss(error))
+            return false;
+        throw error;
+    }
+    // Bash 5.2 enables globskipdots by default, so `.*` only matches when the
+    // directory has an actual hidden entry. readdir omits `.` and `..`.
+    return entries.some((entry) => entry.startsWith(literalPrefix));
+}
 function refSummary(file, root) {
     const refs = extractRulePaths(file);
     const judged = refs.filter((reference) => {
@@ -228,11 +250,8 @@ function refSummary(file, root) {
         }
         if (fs.existsSync(path.join(root, reference)))
             continue;
-        const extension = path.posix.extname(reference);
-        const stem = extension ? reference.slice(0, -extension.length) : reference;
-        const parent = path.join(root, path.posix.dirname(stem));
-        const basename = path.posix.basename(stem);
-        const hasSibling = listFiles(parent).some((name) => name.startsWith(`${basename}.`));
+        const stem = shellReferenceStem(reference);
+        const hasSibling = shellLsExtensionGlobHasMatch(root, stem);
         if (hasSibling)
             renamed.push(reference);
         else

package/dist/commands/core.js

@@ -35,6 +35,7 @@ import { registerCoreHandoffCommand } from "./core-handoff.js";
 import { registerCoreOntologyCommand } from "./core-ontology.js";
 import { registerCoreKnowledgePrefsCommand } from "./core-knowledge-prefs.js";
 import { registerCorePolicyCommand } from "./core-policy.js";
+import { registerCoreJobsNativeCommand } from "./core-jobs-native.js";
 import { registerCoreCheckpointGateSettingCommand } from "./core-checkpoint-gate-setting.js";
 import { resolveLiveRoot } from "../utils/hq-roots.js";
 import { interpreterFor, runBundledScript } from "../utils/run-bundled-script.js";
@@ -211,6 +212,13 @@ export const SCAFFOLD_COMMANDS = [
  * direct `hq core` command.
  */
 export const SCAFFOLD_ONLY_ASSETS = [
+    { asset: "core/scripts/jobs-schedule-parse.sh", root: "live", summary: "Rollback companion for native jobs schedule-parse" },
+    { asset: "core/scripts/jobs-validate.sh", root: "live", summary: "Rollback companion for native jobs validate" },
+    { asset: "core/scripts/outpost-jobs-reconcile.sh", root: "live", summary: "Rollback companion for native jobs reconcile" },
+    { asset: "core/scripts/hq-job-probe.sh", root: "live", summary: "Scheduled jobs readiness probe used by the reconcile rollback path" },
+    { asset: "core/scripts/hq-job-run.sh", root: "live", summary: "Scheduled jobs runner used by generated systemd units" },
+    { asset: "core/scripts/hq-job-notify.sh", root: "live", summary: "Scheduled jobs failure notification helper" },
+    { asset: "core/scripts/hq-job-remediate.sh", root: "live", summary: "Scheduled jobs bounded remediation helper" },
     // Shared shell libs sourced by the two relocated scripts (and hooks). Never
     // dispatched on their own (so no `hq core` command), but they MUST ship in the
     // tarball, or the bundled hq-session / checkpoint-stop-gate die at `source`
@@ -232,6 +240,11 @@ export const SCAFFOLD_ONLY_ASSETS = [
     { asset: "core/scripts/hq-delegate-repo.sh", root: "live", summary: "Rollback shell for native delegate repo" },
     { asset: "core/scripts/hq-delegate-secrets.sh", root: "live", summary: "Rollback shell for native delegate secrets" },
     { asset: "core/scripts/hq-delegate-transfer.sh", root: "live", summary: "Rollback shell for native delegate transfer" },
+    { asset: "core/scripts/hq-delegate-bundle.sh", root: "live", summary: "Rollback shell for native delegate bundle" },
+    { asset: "core/scripts/hq-delegate-grant.sh", root: "live", summary: "Rollback shell for native delegate grant" },
+    { asset: "core/scripts/hq-delegate-publish.sh", root: "live", summary: "Rollback shell for native delegate publish" },
+    { asset: "core/scripts/hq-delegate-send.sh", root: "live", summary: "Rollback shell for native delegate send" },
+    { asset: "core/scripts/hq-delegate-verify.sh", root: "live", summary: "Rollback shell for native delegate verify" },
     { asset: "core/scripts/lib/secret-patterns.sh", root: "live", summary: "Secret-pattern library sourced by the delegate rollback shells" },
     // Retained rollback companions for the gated native ontology commands. These
     // are loose HQ-tree assets, but `hq core ontology` dispatches natively.
@@ -308,6 +321,9 @@ function runEntry(entry, scope, args) {
         args,
         cwd,
         hqRoot,
+        env: entry.asset === "core/scripts/hq-session.sh"
+            ? { HQ_HQ_SESSION_NO_CLI: "1" }
+            : undefined,
     });
     // Propagate verbatim. Several of these scripts use their exit code as their
     // interface (drift detected, lint failed), so remapping it would break the
@@ -335,6 +351,7 @@ export function registerCoreCommands(program) {
     registerCoreHandoffCommand(core);
     registerCoreKnowledgePrefsCommand(core);
     registerCorePolicyCommand(core);
+    registerCoreJobsNativeCommand(core);
     // Wave 2 handoff/worktree commands retain their byte-identical shell assets
     // as a default-off rollback path for one release. Keep the gate helper small
     // so sibling Wave 2 work can reuse it without editing this command table.

package/dist/commands/integrations-core.js

@@ -12,6 +12,7 @@ import { randomUUID } from "node:crypto";
 import chalk from "chalk";
 import { vaultApiFetch } from "../utils/vault-api.js";
 import { AuthError } from "../utils/auth-error.js";
+import { planGateErrorFromPayload } from "../utils/plan-gate-error.js";
 import { redactErrorText } from "../utils/redact-error-text.js";
 import { redactSensitiveUrls, redactUrlsInText } from "../utils/redact-url.js";
 import { connectionHealthNotice } from "../lib/integrations/health.js";
@@ -195,6 +196,12 @@ export async function raiseForResponse(res, fallback) {
     raiseIfUnauthorized(res);
     raiseIfUpstreamUnavailable(res);
     const body = (await res.json().catch(() => ({})));
+    // A plan-limit 402 is normally decoded by vaultApiFetch before it gets here.
+    // Decode it again so no integration route can print the wire token
+    // `plan_limit_reached` as its whole message; main.ts renders the typed gate.
+    const planGate = planGateErrorFromPayload(res.status, body);
+    if (planGate)
+        throw planGate;
     // hq-pro mints this error text, so it is untrusted input to a message we
     // print verbatim — scrub credentials out before it can reach a terminal or a
     // Sentry crash report (same reasoning as the gateway path below).

package/dist/commands/lanes.js

@@ -32,6 +32,7 @@ import { resolveLanesHqRoot } from "../lib/lanes/hq-root.js";
 import { startOutpostLaneSnapshotRefresh } from "../lib/lanes/outpost-snapshot-refresh.js";
 import { isSsmRunCommandProcess } from "../lib/lanes/ssm-command-context.js";
 import { readLanesRegistryFlag } from "../lib/lanes/registry-flag.js";
+import { runLeadAutopilotPass } from "../lib/lanes/autopilot.js";
 import { getOrFetchOutpostSnapshot, OUTPOST_SNAPSHOT_CACHE_TTL_MS, outpostLaneListSnapshotKey, OutpostSnapshotInvocationMemo, } from "../lib/lanes/outpost-snapshot-cache.js";
 import { createOutpostHireGrantContext, parseOutpostHireGrantContext, selectOutpostHireGrantHierarchy, sameHireGrantSenior, } from "../lib/lanes/hire-grant-dispatch.js";
 import { createOutpostProfileRepinContext, parseOutpostProfileRepinContext, } from "../lib/lanes/outpost-profile-repin.js";
@@ -2369,6 +2370,8 @@ async function emitLaneStartedForStories(ctx, company, lane, threadId, knownAbse
             failures.push(err);
             continue;
         }
+        if (!story.project_id?.trim() || !story.story_id?.trim())
+            continue;
         if (knownAbsentStories.has(storyBoardStoryKey(story.project_id, story.story_id)))
             continue;
         try {
@@ -3453,40 +3456,42 @@ async function runCreate(ctx, opts) {
                 : undefined,
         });
     }
-    printJson({
-        ok: true,
-        action: "create",
-        lane_id: started.lane_id,
-        state: started.state,
-        queued_reason: started.queued_reason ?? null,
-        priority: started.priority,
-        provider: started.provider,
-        account: started.account ?? null,
-        model: started.model ?? null,
-        effort: started.effort ?? null,
-        effort_source: started.effort_source ?? null,
-        host: started.host,
-        ...(autoPlacementSkippedHosts.length > 0
-            ? { skipped_hosts: autoPlacementSkippedHosts }
-            : {}),
-        company: started.company,
-        project_id: started.project_id,
-        story_id: started.story_id,
-        stories: laneStories(started),
-        story_warning: combinedStoryWarning(started, createStoryWarnings),
-        thread_id: started.thread_id ?? null,
-        senior: started.senior,
-        depth: started.depth,
-        timeout_secs: timeoutSecs ?? null,
-        ...(validation ? { validation } : {}),
-        ...(started.outpost_command_id
-            ? {
-                outpost_command_id: started
-                    .outpost_command_id,
-            }
-            : {}),
-        lane: started,
-    });
+    if (!opts.quiet)
+        printJson({
+            ok: true,
+            action: "create",
+            lane_id: started.lane_id,
+            state: started.state,
+            queued_reason: started.queued_reason ?? null,
+            priority: started.priority,
+            provider: started.provider,
+            account: started.account ?? null,
+            model: started.model ?? null,
+            effort: started.effort ?? null,
+            effort_source: started.effort_source ?? null,
+            host: started.host,
+            ...(autoPlacementSkippedHosts.length > 0
+                ? { skipped_hosts: autoPlacementSkippedHosts }
+                : {}),
+            company: started.company,
+            project_id: started.project_id,
+            story_id: started.story_id,
+            stories: laneStories(started),
+            story_warning: combinedStoryWarning(started, createStoryWarnings),
+            thread_id: started.thread_id ?? null,
+            senior: started.senior,
+            depth: started.depth,
+            timeout_secs: timeoutSecs ?? null,
+            ...(validation ? { validation } : {}),
+            ...(started.outpost_command_id
+                ? {
+                    outpost_command_id: started
+                        .outpost_command_id,
+                }
+                : {}),
+            lane: started,
+        });
+    return started;
 }
 async function dispatchCreatedOutpostLane(ctx, input) {
     const { hqRoot, lane, outpostId, briefText, timeout, preserveQueuedOnFailure = false, } = input;
@@ -6464,7 +6469,7 @@ async function emitStoryTransition(ctx, lane, projectId, storyId, event, status,
         ...payload,
         lane_status: lane.state,
     });
-    if (!skipStoryStatusPatch) {
+    if (!skipStoryStatusPatch && projectId?.trim() && storyId?.trim()) {
         await ctx.mesh.patchStoryStatus(company, projectId, storyId, status === "blocked" ? "in_progress" : status);
     }
 }
@@ -7824,8 +7829,44 @@ async function runReconcile(ctx, opts, recoverQueuedMessages) {
         summary.ok = false;
     }
     const terminalizedRemoteIds = new Set(remoteLost.map(({ id }) => id));
+    let autopilot;
+    try {
+        const host = reconcileHostFromCtx(ctx);
+        autopilot = await runLeadAutopilotPass({
+            hqRoot,
+            host: host.outpostId ?? "local",
+            hostname: host.hostname,
+            outpostId: host.outpostId,
+            now: ctx.now(),
+            dryRun: Boolean(opts.dryRun),
+            readFlag: readLanesRegistryFlag,
+            keepAliveResumedLeads: new Set(summary.resumed.filter((entry) => entry.reason === "keep_alive").map((entry) => entry.id)),
+            startWorker: async ({ lead, story }) => {
+                const workerCtx = { ...ctx, env: { ...ctx.env, HQ_LANE_ID: lead.lane_id } };
+                const started = await runCreate(workerCtx, {
+                    company: lead.company?.slug,
+                    project: lead.project_id,
+                    story: story.id,
+                    briefFile: story.briefPath,
+                    provider: "codex",
+                    model: "gpt-6-luna",
+                    effort: "high",
+                    senior: `lane:${lead.lane_id}`,
+                    quiet: true,
+                });
+                return { lane_id: started.lane_id };
+            },
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        summary.ok = false;
+        summary.errors.push({ code: "lead_autopilot_failed", message });
+        process.stderr.write(`hq lanes autopilot: ${message}\n`);
+    }
     printJson({
         ...summary,
+        ...(autopilot ? { autopilot } : {}),
         ...(remoteLost.length > 0 ? { remote_lost: remoteLost } : {}),
         ...(mirrorRefresh.unverifiedRemote.size > 0
             ? {
@@ -8590,6 +8631,41 @@ export function registerLanesCommand(parent, deps = {}) {
         .action(wrap(async (opts) => {
         await runPickup(ctx, opts);
     }));
+    lanes
+        .command("autopilot")
+        .description("Check registered team leads and wake them for ready work")
+        .command("run")
+        .description("Run one lead autopilot check pass")
+        .option("--dry-run", "Report proposed wakes without writing them")
+        .option("--json", "Emit JSON on stdout (default)")
+        .action(wrap(async (opts) => {
+        const host = reconcileHostFromCtx(ctx);
+        const result = await runLeadAutopilotPass({
+            hqRoot: ctx.hqRoot(),
+            host: host.outpostId ?? "local",
+            hostname: host.hostname,
+            outpostId: host.outpostId,
+            now: ctx.now(),
+            dryRun: Boolean(opts.dryRun),
+            readFlag: readLanesRegistryFlag,
+            startWorker: async ({ lead, story }) => {
+                const workerCtx = { ...ctx, env: { ...ctx.env, HQ_LANE_ID: lead.lane_id } };
+                const started = await runCreate(workerCtx, {
+                    company: lead.company?.slug,
+                    project: lead.project_id,
+                    story: story.id,
+                    briefFile: story.briefPath,
+                    provider: "codex",
+                    model: "gpt-6-luna",
+                    effort: "high",
+                    senior: `lane:${lead.lane_id}`,
+                    quiet: true,
+                });
+                return { lane_id: started.lane_id };
+            },
+        });
+        printJson(result);
+    }));
     const reconcile = lanes
         .command("reconcile", { hidden: true })
         .description("Run one machine-owned reconcile pass and exit")

package/dist/commands/members.js

@@ -2,6 +2,7 @@ import chalk from "chalk";
 import { resolveVaultCredential } from "../utils/resolve-vault-credential.js";
 import { gateApiKeyCapabilities } from "../utils/api-key-command-gate.js";
 import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
+import { isPlanGateError } from "../utils/plan-gate-error.js";
 const EMAIL_PATTERN = /^[^\s]+@[^\s]+$/;
 const PERSON_UID_PATTERN = /^prs_[A-Za-z0-9_-]+$/;
 const AGENT_UID_PATTERN = /^agt_[A-Za-z0-9_-]+$/i;
@@ -558,6 +559,10 @@ export function registerMembersCommand(program) {
             }
         }
         catch (err) {
+            // A seat-limit refusal goes to main.ts's shared plan-gate renderer:
+            // reason, usage, fix options and upgrade link, then a non-zero exit.
+            if (isPlanGateError(err))
+                throw err;
             // A 409 may refer to either an active membership or an existing
             // pending invite. Probe both views so email targets get actionable
             // guidance while preserving the terminal exit-0 behavior for bulk