@indigoai-us/hq-cli 5.294.0 → 5.295.0

package/CHANGELOG.md

@@ -2,13 +2,38 @@
 
 ## [Unreleased]
 
+## [5.295.0] — 2026-09-30
+- Remove the unused direct client-health Sentry route; the existing server-side reporting path remains unchanged.
+
+- Self-update supervisor copy and cleanup failures now log their error class.
+- Report failed and ineffective self-updates to Sentry with bounded context.
+
+- hq-cli release notes now use per-branch fragments that are folded into the next version section, reducing conflicts between parallel pull requests.
+- Claude keep-alive resume events now retain a compact account-load selection snapshot, including when the lane stays on its current account.
+- After a successful missing-envelope repair reports unfinished work, the watcher can queue one automatic continue behind the default-off `lanes.envelope-repair-continue` flag. The repair prompt now gives the required unfinished-story envelope fields.
+- Add a private machine-session token-file command for supported machine-auth handoffs.
+- Apply the 5x fast-route speedup gate only when the base p95 is at or above the 200 ms target; retain the p95 latency and base/PR regression gates.
+- The changelog fragment check runs only on pull requests again, so pushes to main no longer fail it.
+- Refresh terminal Outpost lane mirrors before applying `hq lanes list` state filters, so a lane whose owner is still running is listed as running.
+- Remove the unused Outpost snapshot cache flag and its cache-first lane-list path.
+- The mesh daemon logs spool watcher failures and continues flushing on its polling interval instead of exiting on an unhandled watcher error.
+- Make the manager status gate always active and remove its rollout flag lookup.
+- Compare fast-route latency with a PR-build full-graph baseline so the 5x gate remains valid after the base build gains fast routing.
+
 ## [5.294.0] — 2026-09-30
+- Record automatic keep-alive resumes in each lane's durable, bounded history and expose it in `hq lanes show --json` and `hq lanes list --json`.
+
+### Fixed
 
+- Outpost `hq lanes message` now reaches primary-hosted lanes through the
+  primary owner command, which checks sender rights and includes the
+  destination in JSON output.
 - Split the lane story command handlers into a dedicated module without changing behavior.
 - On a box, `sudo hq daemon migrate --apply` now finds the login user's own systemd user units (hq-mesh-daemon, hq-lanes-reconcile and the rest) and stops them through that user's systemd manager. `sudo hq daemon uninstall --restore-legacy` restarts them the same way. Before, root looked only in its own home and could not reach the login user's manager.
 
 ## [5.293.0] — 2026-09-30
 - [HQ-CLI-HOOK-TIMEOUT-KIND] Group hook timeout events by normalized kind (`warning` or `exceeded`) across scripts; keep script and platform tags for triage. Existing per-script issues will stop receiving new events, and the lead handles their status.
+- [HQ-CLI-2C] Label unmeasured SessionStart delay as entry Bash startup when BASH_ENV is set; doctor follows the env-prefixed hook command.
 - `hq lanes move` now reports an already-on-target no-op without dispatching or changing the queued lane.
 - Keep bundled scheduled-job reconciliation units on the live scaffold runner, and preserve caller spelling in job-validation paths.
 - On Linux, `hq daemon run` sets XDG_RUNTIME_DIR for its services when the system unit left it unset, so `systemctl --user` from jobs-reconcile no longer fails with "Failed to connect to bus: No medium found".

package/dist/command-catalog.generated.d.ts

@@ -860,6 +860,18 @@ export declare const COMMAND_CATALOG: readonly [{
     readonly arguments: readonly [];
     readonly options: readonly [];
     readonly subcommands: readonly [{
+        readonly name: "machine-session";
+        readonly description: "Write the existing machine identity session to a private file";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options]";
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--output <path>";
+            readonly description: "path for the private machine session JSON";
+        }];
+        readonly subcommands: readonly [];
+    }, {
         readonly name: "login";
         readonly description: "Sign in to HQ — opens the Cognito Hosted UI and caches tokens locally";
         readonly aliases: readonly [];
@@ -6130,15 +6142,6 @@ export declare const COMMAND_CATALOG: readonly [{
     }, {
         readonly flags: "--client-health-report";
         readonly description: "Resolve the opt-in hq-flags gate used by the client-health report hook.";
-    }, {
-        readonly flags: "--client-health-sentry";
-        readonly description: "Send the opt-in client-health Sentry report from a doctor JSON document.";
-    }, {
-        readonly flags: "--json-input <file>";
-        readonly description: "Doctor JSON input for the client-health report.";
-    }, {
-        readonly flags: "--client-health-fix-outcome <outcome>";
-        readonly description: "Safe fix outcome label for the client-health report.";
     }, {
         readonly flags: "--yes";
         readonly description: "Skip the interactive --fix confirmation (non-interactive use).";

package/dist/command-catalog.generated.js

@@ -1097,6 +1097,21 @@ export const COMMAND_CATALOG = [
         "arguments": [],
         "options": [],
         "subcommands": [
+            {
+                "name": "machine-session",
+                "description": "Write the existing machine identity session to a private file",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options]",
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--output <path>",
+                        "description": "path for the private machine session JSON"
+                    }
+                ],
+                "subcommands": []
+            },
             {
                 "name": "login",
                 "description": "Sign in to HQ — opens the Cognito Hosted UI and caches tokens locally",
@@ -7883,18 +7898,6 @@ export const COMMAND_CATALOG = [
                 "flags": "--client-health-report",
                 "description": "Resolve the opt-in hq-flags gate used by the client-health report hook."
             },
-            {
-                "flags": "--client-health-sentry",
-                "description": "Send the opt-in client-health Sentry report from a doctor JSON document."
-            },
-            {
-                "flags": "--json-input <file>",
-                "description": "Doctor JSON input for the client-health report."
-            },
-            {
-                "flags": "--client-health-fix-outcome <outcome>",
-                "description": "Safe fix outcome label for the client-health report."
-            },
             {
                 "flags": "--yes",
                 "description": "Skip the interactive --fix confirmation (non-interactive use)."

package/dist/commands/auth.d.ts

@@ -6,6 +6,7 @@
  *   hq auth logout    — clear the cached HQ session
  *   hq auth refresh   — ensure a valid cached Cognito session (non-interactive)
  *   hq auth status    — show whether a valid session is cached + expiry
+ *   hq auth machine-session --output <path> — write machine tokens to a private file
  *
  * Sign-up is owned by the onboarding web app at
  * https://onboarding.hq.computer. `hq auth login` signs an existing account

package/dist/commands/auth.js

@@ -6,6 +6,7 @@
  *   hq auth logout    — clear the cached HQ session
  *   hq auth refresh   — ensure a valid cached Cognito session (non-interactive)
  *   hq auth status    — show whether a valid session is cached + expiry
+ *   hq auth machine-session --output <path> — write machine tokens to a private file
  *
  * Sign-up is owned by the onboarding web app at
  * https://onboarding.hq.computer. `hq auth login` signs an existing account
@@ -13,9 +14,12 @@
  * session is kept valid by `hq auth refresh` / `hq-auth-refresh` and consumed
  * by the deploy + sync skills.
  */
+import * as fs from "node:fs";
+import { open, realpath } from "node:fs/promises";
+import path from "node:path";
 import chalk from "chalk";
 import { browserLogin, clearCachedTokens, loadCachedTokens, isExpiring, loadMachineCreds, CognitoAuthError, } from "@indigoai-us/hq-cloud";
-import { DEFAULT_COGNITO, refreshCachedSession, resolveCognitoTokenSource, } from "../utils/cognito-session.js";
+import { DEFAULT_COGNITO, refreshCachedSession, resolveCognitoTokenSource, ensureMachineSessionTokens, personTokenCacheFile, machineTokenCacheFile, } from "../utils/cognito-session.js";
 import { resolveLoginProviderSelection, } from "../utils/login-provider.js";
 import { getLastLoginProviderStatePath, loadLastLoginProvider, storeLastLoginProvider, } from "../lib/auth-login-provider-state.js";
 import { callbackPortBusyGuidance, DEFAULT_CALLBACK_PORT, isCallbackPortBusy, } from "../utils/callback-port-busy.js";
@@ -128,6 +132,77 @@ export function registerAuthCommands(program) {
     const authCmd = program
         .command("auth")
         .description("Manage the local HQ Cognito session");
+    authCmd
+        .command("machine-session")
+        .description("Write the existing machine identity session to a private file")
+        .requiredOption("--output <path>", "path for the private machine session JSON")
+        .action(async (options) => {
+        const requestedPath = path.resolve(options.output);
+        let handle;
+        try {
+            if (!loadMachineCreds()) {
+                throw new Error("Machine credentials are unavailable.");
+            }
+            const outputDirectory = await realpath(path.dirname(requestedPath));
+            const outputPath = path.join(outputDirectory, path.basename(requestedPath));
+            const protectedPaths = await Promise.all([personTokenCacheFile(), machineTokenCacheFile()].map(async (protectedPath) => {
+                const resolved = path.resolve(protectedPath);
+                try {
+                    return path.join(await realpath(path.dirname(resolved)), path.basename(resolved));
+                }
+                catch (error) {
+                    if (error.code === "ENOENT")
+                        return resolved;
+                    throw error;
+                }
+            }));
+            if (protectedPaths.includes(outputPath)) {
+                throw new Error("Refusing to overwrite a cached Cognito session.");
+            }
+            const tokens = await ensureMachineSessionTokens();
+            const contents = JSON.stringify({
+                accessToken: tokens.accessToken,
+                idToken: tokens.idToken,
+                expiresAt: tokens.expiresAt,
+            }) + "\n";
+            try {
+                handle = await open(outputPath, fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL |
+                    (fs.constants.O_NOFOLLOW ?? 0), 0o600);
+            }
+            catch (error) {
+                if (error.code !== "EEXIST")
+                    throw error;
+                handle = await open(outputPath, fs.constants.O_WRONLY | (fs.constants.O_NOFOLLOW ?? 0));
+                const metadata = await handle.stat();
+                if (!metadata.isFile() ||
+                    metadata.uid !== process.getuid?.() ||
+                    (metadata.mode & 0o077) !== 0) {
+                    throw new Error("Existing output file is not a private file owned by this user.");
+                }
+                await handle.truncate(0);
+            }
+            await handle.writeFile(contents, { encoding: "utf8" });
+            await handle.close();
+            handle = undefined;
+        }
+        catch (error) {
+            if (handle)
+                await handle.close().catch(() => undefined);
+            const code = error && typeof error === "object" && "code" in error &&
+                typeof error.code === "string" && /^[A-Z0-9_]+$/.test(error.code)
+                ? error.code
+                : undefined;
+            console.error(code === "EACCES" || code === "ELOOP" || code === "EEXIST"
+                ? "Could not write machine session file (unsafe or inaccessible path)."
+                : error instanceof Error && error.message === "Machine credentials are unavailable."
+                    ? "Machine credentials are unavailable."
+                    : error instanceof Error && (error.message === "Existing output file is not a private file owned by this user." ||
+                        error.message === "Refusing to overwrite a cached Cognito session.")
+                        ? error.message
+                        : "Could not obtain or write machine session.");
+            process.exitCode = 1;
+        }
+    });
     authCmd
         .command("login")
         .description("Sign in to HQ — opens the Cognito Hosted UI and caches tokens locally")

package/dist/commands/doctor.js

@@ -33,9 +33,6 @@ import { PARITY_FAMILY_ID, PARITY_FAMILY_TITLE, runParityReplay, } from "../lib/
 import { applyFixes } from "../lib/doctor/fix/apply.js";
 import { renderDoctorFixJson } from "../lib/doctor/fix/json-output.js";
 import { clientHealthReasonCodesEnabled as isActiveCompanyClientHealthReasonCodesEnabled, clientHealthReasonCodesEnabledForCompany, } from "../lib/doctor/client-health-reason-codes-flag.js";
-import { CLIENT_HEALTH_SENTRY_MAX_INPUT_BYTES, CLIENT_HEALTH_SENTRY_NOT_HANDLED_EXIT_CODE, handleClientHealthSentryReport, } from "../lib/doctor/client-health-sentry.js";
-import { clientHealthSentryDirectEnabled, clientHealthSentryDirectEnabledForCompany, } from "../lib/doctor/client-health-sentry-flag.js";
-import { reportClientHealthEvents } from "../lib/core-utils/sentry-report.js";
 import { isCompanyJournalSlug } from "../lib/doctor/checks/sync-health.js";
 import { readCompaniesManifestMap } from "../lib/work-context/repo-remote.js";
 import * as readline from "node:readline";
@@ -244,26 +241,6 @@ function createClientHealthReasonCodeCompanyResolver(hqRoot) {
         });
     };
 }
-function createClientHealthSentryCompanyResolver(hqRoot) {
-    const companies = readCompaniesManifestMap(hqRoot);
-    return async (companySlug) => {
-        if (companySlug === null)
-            return clientHealthSentryDirectEnabled();
-        if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(companySlug))
-            return false;
-        const manifestUid = companies?.[companySlug]?.cloud_uid;
-        const activeSlug = process.env.HQ_COMPANY_SLUG?.trim() || "";
-        const activeUid = process.env.HQ_COMPANY_UID?.trim() || "";
-        const companyUid = typeof manifestUid === "string" && manifestUid.trim()
-            ? manifestUid.trim()
-            : companySlug === activeSlug
-                ? activeUid
-                : "";
-        if (!/^cmp_[A-Za-z0-9]{3,128}$/.test(companyUid))
-            return false;
-        return clientHealthSentryDirectEnabledForCompany({ companyUid, companySlug });
-    };
-}
 /** Register the top-level `hq doctor` command so it appears in `hq --help`. */
 export function registerDoctorCommand(program) {
     program
@@ -279,9 +256,6 @@ export function registerDoctorCommand(program) {
         .option("--only <families>", "Run only these comma-separated check families (e.g. hooks). Unknown names are rejected; --json then records the scope.")
         .option("--fix", "Apply the allowlisted safe repairs (backs up first; read-only without this flag).")
         .addOption(new Option("--client-health-report", "Resolve the opt-in hq-flags gate used by the client-health report hook.").hideHelp())
-        .addOption(new Option("--client-health-sentry", "Send the opt-in client-health Sentry report from a doctor JSON document.").hideHelp())
-        .addOption(new Option("--json-input <file>", "Doctor JSON input for the client-health report.").hideHelp())
-        .addOption(new Option("--client-health-fix-outcome <outcome>", "Safe fix outcome label for the client-health report.").hideHelp())
         .option("--yes", "Skip the interactive --fix confirmation (non-interactive use).")
         .option("--force", "Let --fix run despite uncommitted changes under .claude/, .codex/, or .grok/.")
         .action(async (opts) => {
@@ -298,54 +272,6 @@ export function registerDoctorCommand(program) {
             process.exitCode = 1;
             return;
         }
-        if (opts.clientHealthSentry === true) {
-            const hqRoot = resolveHqRoot();
-            if (!hqRoot || !opts.jsonInput) {
-                process.stderr.write("hq doctor --client-health-sentry requires an HQ root and --json-input.\n");
-                process.exitCode = 1;
-                return;
-            }
-            try {
-                const workspacePath = path.join(hqRoot, "workspace");
-                const workspaceStat = fs.lstatSync(workspacePath);
-                if (!workspaceStat.isDirectory() || workspaceStat.isSymbolicLink()) {
-                    throw new Error("workspace is not a local directory");
-                }
-                const statePath = path.join(hqRoot, "workspace", ".hq-client-health");
-                const stateStat = fs.lstatSync(statePath);
-                if (!stateStat.isDirectory() || stateStat.isSymbolicLink()) {
-                    throw new Error("client-health state is not a local directory");
-                }
-                const stateRoot = fs.realpathSync(statePath);
-                const inputPath = fs.realpathSync(opts.jsonInput);
-                const relativeInput = path.relative(stateRoot, inputPath);
-                if (relativeInput === ".." || relativeInput.startsWith(`..${path.sep}`) || path.isAbsolute(relativeInput)) {
-                    throw new Error("input path is outside client-health state");
-                }
-                if (fs.statSync(inputPath).size > CLIENT_HEALTH_SENTRY_MAX_INPUT_BYTES) {
-                    throw new Error("input exceeds client-health size limit");
-                }
-                const result = await handleClientHealthSentryReport({
-                    hqRoot,
-                    doctorJson: fs.readFileSync(inputPath, "utf8"),
-                    fixOutcome: opts.clientHealthFixOutcome ?? "not_auto_fixable",
-                }, {
-                    resolveFlagForCompany: createClientHealthSentryCompanyResolver(hqRoot),
-                    sendEvents: async (events) => (await reportClientHealthEvents(events)).code === 0,
-                });
-                process.exitCode =
-                    result === "not_handled"
-                        ? CLIENT_HEALTH_SENTRY_NOT_HANDLED_EXIT_CODE
-                        : result === "send_failed"
-                            ? 1
-                            : 0;
-            }
-            catch {
-                process.stderr.write("hq doctor --client-health-sentry could not handle the report.\n");
-                process.exitCode = 1;
-            }
-            return;
-        }
         // `--fix` is the only write path. It resolves the tree, applies the
         // allowlisted repairs behind a backup + confirmation, and returns its own
         // exit code; the read-only report below never runs in this branch.

package/dist/commands/lanes-message.js

@@ -10,12 +10,11 @@ import { isPidAlive, runWatcherLoop, WATCHER_OUT_MAX_BYTES, watcherOutLogPath, w
 import { laneStories, laneStory, storyWarning } from "../lib/lanes/stories.js";
 import { laneRunDir, probePidRecord, readPidRecord, readProcStarttime, spawnLaneWorker } from "../lib/lanes/spawn.js";
 import { keepAliveExclusion, keepAliveSupersededBy, LANE_RUNNING_SUPERSEDED_MESSAGE_DELIVERY_FLAG, LANE_SUPERSESSION_LINEAGE_AWARE_FLAG, loadRetiredLaneIds } from "../lib/lanes/keep-alive.js";
-import { managerStatusGateEnabledForLane } from "../lib/lanes/manager-status-gate.js";
 import { readLanesRegistryFlag } from "../lib/lanes/registry-flag.js";
 import { resolveLaneCompany } from "../lib/lanes/lane-company.js";
 import { accountMoveSummary, accountRequestKeepsCurrentLane, assertCurrentResumeAccountAvailable, callerMatchesSessionSenior, recordedResumeEffort, resetKeepAliveProgress, resolveResumeEffort } from "./lanes-shared.js";
 export function createLaneMessageHandlers(deps) {
-    const { archiveResumeMessage, assertLaneRunsHereForAdmission, assertLaneRunsHereForOperatorMutation, assessLaneAdmission, casUpdateLane, dispatchOutpostLaneCommand, drainHookStatusFor, laneIsHostedHere, laneWithRecoveredProviderSession, loadAllLanes, mintMessageId, persistClaudeAccountSelection, prepareAccountMove, printJson, recordResumeSetup, resolveActiveQuestionCompany, resolveResumeProfile, selectAutomaticClaudeResumeAccount, validateResumeProfileModel, withResumeHireAdmission } = deps;
+    const { archiveResumeMessage, assertLaneRunsHereForAdmission, assertLaneRunsHereForOperatorMutation, assessLaneAdmission, casUpdateLane, dispatchOutpostLaneCommand, dispatchPrimaryLaneMessage, drainHookStatusFor, laneIsHostedHere, laneWithRecoveredProviderSession, loadAllLanes, mintMessageId, persistClaudeAccountSelection, prepareAccountMove, printJson, recordResumeSetup, resolveActiveQuestionCompany, resolveResumeProfile, selectAutomaticClaudeResumeAccount, validateResumeProfileModel, withResumeHireAdmission } = deps;
     function currentSuccessorOf(lane, lanes, lineageAware, companyForLane) {
         const validLanes = lanes.filter((candidate) => Number.isFinite(Date.parse(candidate.created_at)));
         const newestFirst = [...validLanes].sort((left, right) => Date.parse(right.created_at) - Date.parse(left.created_at));
@@ -221,7 +220,27 @@ export function createLaneMessageHandlers(deps) {
         if (!text) {
             throw new LanesError("missing_text", "--text is required", {});
         }
-        const resolution = await deps.resolveCommandLane(ctx, laneId);
+        let resolution;
+        try {
+            resolution = await deps.resolveCommandLane(ctx, laneId);
+        }
+        catch (err) {
+            const identity = ctx.readOutpostIdentity();
+            const failedOutpostIds = err instanceof LanesError ? err.details.failed_outpost_ids : undefined;
+            const probedOutpostIds = err instanceof LanesError ? err.details.probed_outpost_ids : undefined;
+            const primaryLookupFailed = Array.isArray(failedOutpostIds) && failedOutpostIds.includes("primary");
+            const primaryReportedMissing = Array.isArray(probedOutpostIds) && probedOutpostIds.includes("primary");
+            if (!(err instanceof LanesError) ||
+                err.error !== "lane_not_found" ||
+                identity.kind !== "id" ||
+                identity.id === "primary" ||
+                primaryLookupFailed ||
+                primaryReportedMissing) {
+                throw err;
+            }
+            await dispatchPrimaryLaneMessage(ctx, laneId, { ...opts, text });
+            return;
+        }
         let lane = resolution.lane;
         if (resolution.remoteOnly || (lane.host.kind === "outpost" && !laneIsHostedHere(ctx, lane))) {
             const callerLaneId = ctx.env.HQ_LANE_ID?.trim();
@@ -465,7 +484,6 @@ export function createLaneMessageHandlers(deps) {
                 markAccepted();
             }
             else {
-                const managerStatusGateEnabled = await managerStatusGateEnabledForLane(hqRoot, lane, { env: ctx.env });
                 const dispatched = await dispatchLaneDelivery(lane, {
                     dropbox: () => {
                         // Live (or about-to-be-live) process: the PreToolUse drain delivers it.
@@ -523,7 +541,6 @@ export function createLaneMessageHandlers(deps) {
                                 }
                                 const started = spawnLaneWorker(hqRoot, lane, {
                                     env: ctx.env,
-                                    managerStatusGateEnabled,
                                     modelDeps: {
                                         readFileSync: ctx.readFileSync,
                                         probe: ctx.probeProvider,
@@ -624,6 +641,7 @@ export function createLaneMessageHandlers(deps) {
                     accepted: true,
                     delivered: false,
                     delivery: mechanism,
+                    delivered_to: { host: lane.host.id, lane_id: laneId, mechanism },
                     delivery_status: deliveryStatus,
                     inbox_path: mechanism === "dropbox" ? dropboxInboxPath(hqRoot, laneId) : null,
                     drain_hook: drainHook,

package/dist/commands/lanes-resume.js

@@ -5,7 +5,6 @@ import { parseCliEffort } from "../lib/lanes/effort.js";
 import { parseOutpostHireGrantContext } from "../lib/lanes/hire-grant-dispatch.js";
 import { assertNoSecretText } from "../lib/lanes/text-scan.js";
 import { laneStories, laneStory, storyWarning } from "../lib/lanes/stories.js";
-import { managerStatusGateEnabledForLane } from "../lib/lanes/manager-status-gate.js";
 import { spawnLaneWorker } from "../lib/lanes/spawn.js";
 import { accountMoveSummary, accountRequestKeepsCurrentLane, assertCurrentResumeAccountAvailable, hasKeepAliveProgress, recordedResumeEffort, resetKeepAliveProgress, resolveResumeEffort } from "./lanes-shared.js";
 export function createLaneResumeHandlers(deps) {
@@ -328,7 +327,6 @@ export function createLaneResumeHandlers(deps) {
             resumed = lane;
         }
         else {
-            const managerStatusGateEnabled = await managerStatusGateEnabledForLane(hqRoot, lane, { env: ctx.env });
             resumed = await withLaneAdmissionLock(hqRoot, lane.provider, async () => {
                 const admission = await assessLaneAdmission(ctx, lane, { queueAt: at });
                 if (admission.action === "refuse" && admission.error)
@@ -376,7 +374,6 @@ export function createLaneResumeHandlers(deps) {
                     }
                     return spawnLaneWorker(hqRoot, lane, {
                         env: ctx.env,
-                        managerStatusGateEnabled,
                         modelDeps: {
                             readFileSync: ctx.readFileSync,
                             probe: ctx.probeProvider,

package/dist/commands/lanes-shared.d.ts

@@ -157,6 +157,7 @@ export interface LaneMessageHandlerDeps {
     }): Promise<AdmissionResult>;
     casUpdateLane(hqRoot: string, laneId: string, updater: (current: LaneRecord) => LaneRecord): LaneRecord;
     dispatchOutpostLaneCommand(ctx: Ctx, lane: LaneRecord, action: "message" | "resume", options: LaneMessageOptions | LaneResumeOptions, behavior?: OutpostLaneDispatchBehavior): Promise<void>;
+    dispatchPrimaryLaneMessage(ctx: Ctx, laneId: string, options: LaneMessageOptions): Promise<void>;
     drainHookStatusFor(ctx: Ctx, lane: LaneRecord): {
         registered: boolean;
         kind: string;
@@ -248,8 +249,6 @@ export interface Ctx {
     backfillOutpostIdentity: (expectedId: string) => "created" | "unchanged";
     fetchText: (url: string) => Promise<string>;
     lanePlacementEnabled: (company: LaneCompanyRef | undefined) => Promise<boolean>;
-    outpostSnapshotCacheEnabled: () => Promise<boolean>;
-    startOutpostLaneSnapshotRefresh: (hqRoot: string) => void;
     storyLedgerEnabled: () => boolean;
     isSsmOwnerDispatch: () => boolean;
     withGrantHireLocks: typeof withLaneHireLocks;

package/dist/commands/lanes.d.ts

@@ -14,7 +14,6 @@ import type { OutpostIdentity } from "../lib/lanes/admission-host.js";
 export { OUTPOST_DIR, OUTPOST_ID_PATH, readOutpostIdentity } from "../lib/lanes/admission-host.js";
 export type { OutpostIdentity } from "../lib/lanes/admission-host.js";
 import { type OutpostDispatchResult } from "../lib/lanes/outpost-dispatch.js";
-import { LANE_OUTPOST_SNAPSHOT_CACHE_FLAG } from "../lib/lanes/outpost-hire-cache.js";
 import { emitLaneDecisionEvents } from "../lib/lanes/mesh-events.js";
 import { MAX_LANE_DEPTH, withLaneHireLocks, type LaneCompanyRef, type QuestionBody, type LaneRecord, type QuestionRecord, type ResolvedLaneWorker, type SeniorRef, type LivenessDeps, type MachineIdentity, type MonitorEvidenceReader, type RunCommand, type ThrottleDeps } from "../lib/lanes/index.js";
 import { questionBodyAbsPath } from "../lib/lanes/questions.js";
@@ -62,7 +61,7 @@ export interface LanesCommandDeps {
     /** Test seam for worker PID identity checks. */
     readStarttime?: (pid: number) => number | null;
     /** Test seams for synchronous dead-worker classification and repair. */
-    watcherLoopDeps?: Pick<WatcherLoopDeps, "sleep" | "spawnRepair" | "readManagerStatusGateFlag">;
+    watcherLoopDeps?: Pick<WatcherLoopDeps, "sleep" | "spawnRepair">;
     stopSleepMs?: (ms: number) => void;
     livenessDeps?: LivenessDeps;
     presenceConnected?: boolean;
@@ -88,10 +87,6 @@ export interface LanesCommandDeps {
     monitorEvidence?: MonitorEvidenceReader;
     /** Test seam for the default-off outpost placement rollout flag. */
     lanePlacementEnabled?: (company: LaneCompanyRef | undefined) => Promise<boolean>;
-    /** Test seam for the default-off shared Outpost snapshot cache. */
-    outpostSnapshotCacheEnabled?: () => Promise<boolean>;
-    /** Test seam for the detached refresh started by the cache-first lane list. */
-    startOutpostLaneSnapshotRefresh?: (hqRoot: string) => void;
     /** Test seam for the default-off story ledger flag. */
     storyLedgerEnabled?: () => boolean;
     /** Test seam for the SSM-only Outpost owner grant path. */
@@ -103,7 +98,6 @@ export interface LanesCommandDeps {
     /** Test seam for the repository-merge-hold registry flag. */
     mergeHoldEnabled?: (company: LaneCompanyRef) => boolean | Promise<boolean>;
 }
-export { LANE_OUTPOST_SNAPSHOT_CACHE_FLAG };
 export declare function parseSeniorRef(raw: string): SeniorRef;
 export declare function parseQuestionBody(raw: unknown): QuestionBody | null;
 /**
@@ -148,8 +142,6 @@ export declare function pickupFailureUpdater(reasonRaw: string, details: Record<
  */
 export declare function applyOutpostAccountPickup(hqRoot: string, laneId: string, modelDeps?: KnownModelsDeps): LaneRecord;
 export declare function cancelPendingQuestionsForLane(hqRoot: string, laneId: string, nowIso: string, operatorReason?: string): QuestionRecord[];
-/** Keeps the placement-enabled cache-first path on the full lane command graph. */
-export declare function runFastCachedLanesListFromEntrypoint(): Promise<void>;
 export declare function stopCommittedState(state: LaneRecord["state"]): "cancelled" | "killed";
 /** Stderr notice that `stop` ends a lane for good, naming the resumable path. */
 export declare function stopTerminalWarning(laneId: string): string;