@indigoai-us/hq-cli 5.298.0 → 5.300.0

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 ## [Unreleased]
 
+## [5.300.0] — 2026-09-30
+- With the default-off hq-flags gate `files.share-empty-prefix-warning`, `hq files share` warns when a granted prefix has no files. A failed or timed-out list check does not block the grant.
+
+- Lane messages and resumes that switch project or story attribution now tell the provider which story is active. Reused completion artifacts no longer close the new story.
+- Make signed-out `hq sync` commands fail fast with `hq login` guidance when stdin or stdout is not a terminal, while keeping browser login in a terminal.
+
+## [5.299.0] — 2026-09-30
+- Add `hq lanes accounts clear-quota` and clear future quota marks after successful lane turns.
+- On macOS, `hq daemon` retires a loaded legacy mesh LaunchAgent even when its plist is missing, and daemon uninstall boots the job out before deleting its plist. Mesh-owner wait logs now repeat at most every ten minutes.
+- Restore npm command links after a failed hq-cli self-update and repair or report missing links after successful installs.
+
 ## [5.298.0] — 2026-09-30
 - [feedback_d4a080e9-de79-4290-81c3-06ba26990a38] Preserve raw substring matches while normalizing company path searches.
 - `hq agents` now prints the Slack app settings link and the console paste link whenever an agent is waiting on its Slack app-level token, and follows the pending actions and paste URL the server returns.

package/dist/command-catalog.generated.d.ts

@@ -8509,10 +8509,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Message text";
         }, {
             readonly flags: "--project <slug>";
-            readonly description: "Re-point project attribution from this message";
+            readonly description: "Re-point project attribution; a changed story is named in the resumed prompt";
         }, {
             readonly flags: "--story <id>";
-            readonly description: "Re-point story attribution from this message";
+            readonly description: "Re-point story attribution; a changed story is named in the resumed prompt";
         }, {
             readonly flags: "--account <id>";
             readonly description: "Move the lane's session to this account of its provider before the message resumes it";
@@ -8602,10 +8602,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Required explanation for resuming from failed";
         }, {
             readonly flags: "--project <slug>";
-            readonly description: "Re-point project attribution from this resume";
+            readonly description: "Re-point project attribution; a changed story is named in the resumed prompt";
         }, {
             readonly flags: "--story <id>";
-            readonly description: "Re-point story attribution from this resume";
+            readonly description: "Re-point story attribution; a changed story is named in the resumed prompt";
         }, {
             readonly flags: "--account <id>";
             readonly description: "Move the lane's session to this account of its provider before resuming";
@@ -8990,6 +8990,29 @@ export declare const COMMAND_CATALOG: readonly [{
                 readonly description: "JSON on stdout (always)";
             }];
             readonly subcommands: readonly [];
+        }, {
+            readonly name: "clear-quota";
+            readonly description: "Clear quota reset marks for a provider account";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <provider> <account-id>";
+            readonly arguments: readonly [{
+                readonly name: "provider";
+                readonly required: true;
+                readonly variadic: false;
+            }, {
+                readonly name: "account-id";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--model <model>";
+                readonly description: "Clear only this model's reset";
+            }, {
+                readonly flags: "--json";
+                readonly description: "JSON on stdout (always)";
+            }];
+            readonly subcommands: readonly [];
         }, {
             readonly name: "enable";
             readonly description: "Enable an account without touching credentials";

package/dist/command-catalog.generated.js

@@ -10972,11 +10972,11 @@ export const COMMAND_CATALOG = [
                     },
                     {
                         "flags": "--project <slug>",
-                        "description": "Re-point project attribution from this message"
+                        "description": "Re-point project attribution; a changed story is named in the resumed prompt"
                     },
                     {
                         "flags": "--story <id>",
-                        "description": "Re-point story attribution from this message"
+                        "description": "Re-point story attribution; a changed story is named in the resumed prompt"
                     },
                     {
                         "flags": "--account <id>",
@@ -11094,11 +11094,11 @@ export const COMMAND_CATALOG = [
                     },
                     {
                         "flags": "--project <slug>",
-                        "description": "Re-point project attribution from this resume"
+                        "description": "Re-point project attribution; a changed story is named in the resumed prompt"
                     },
                     {
                         "flags": "--story <id>",
-                        "description": "Re-point story attribution from this resume"
+                        "description": "Re-point story attribution; a changed story is named in the resumed prompt"
                     },
                     {
                         "flags": "--account <id>",
@@ -11601,6 +11601,36 @@ export const COMMAND_CATALOG = [
                         ],
                         "subcommands": []
                     },
+                    {
+                        "name": "clear-quota",
+                        "description": "Clear quota reset marks for a provider account",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <provider> <account-id>",
+                        "arguments": [
+                            {
+                                "name": "provider",
+                                "required": true,
+                                "variadic": false
+                            },
+                            {
+                                "name": "account-id",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--model <model>",
+                                "description": "Clear only this model's reset"
+                            },
+                            {
+                                "flags": "--json",
+                                "description": "JSON on stdout (always)"
+                            }
+                        ],
+                        "subcommands": []
+                    },
                     {
                         "name": "enable",
                         "description": "Enable an account without touching credentials",

package/dist/commands/cloud.js

@@ -53,6 +53,11 @@ export class SyncExitError extends Error {
         this.health = opts.health ?? "failed";
     }
 }
+async function ensureSyncCognitoToken() {
+    return ensureCognitoToken({
+        interactive: process.stdin.isTTY === true && process.stdout.isTTY === true,
+    });
+}
 /**
  * Preserve the vault's typed write-scope refusal at the CLI boundary. This is
  * deliberately duck-typed so hq-cli remains compatible while hq-cloud and the
@@ -845,11 +850,11 @@ export function registerCloudCommands(program) {
                 }
                 // Upload creds are pre-vended in entityContext, but prefix filtering
                 // still needs vault-service membership/grant resolution.
-                const accessToken = await ensureCognitoToken();
+                const accessToken = await ensureSyncCognitoToken();
                 scopeVaultConfig = buildVaultConfig(accessToken);
             }
             else {
-                const accessToken = await ensureCognitoToken();
+                const accessToken = await ensureSyncCognitoToken();
                 vaultConfig = buildVaultConfig(accessToken);
                 scopeVaultConfig = vaultConfig;
             }
@@ -1064,7 +1069,7 @@ export function registerCloudCommands(program) {
             console.log(chalk.bold("\nHQ Sync — Pull"));
             console.log(`  HQ root:  ${options.hqRoot}`);
             console.log(`  Company:  ${options.company ?? "(from .hq/config.json)"}\n`);
-            const accessToken = await ensureCognitoToken();
+            const accessToken = await ensureSyncCognitoToken();
             const vaultConfig = buildVaultConfig(accessToken);
             // US-011 (2026-05-21 fix): resolve the caller's sync-config for
             // the targeted membership BEFORE the pull, so we can (a) emit the
@@ -1368,7 +1373,7 @@ async function runPullAll(hqRoot, onConflict, modeAllOverride, skipPersonal, for
     console.log("");
     let result;
     try {
-        const accessToken = await ensureCognitoToken();
+        const accessToken = await ensureSyncCognitoToken();
         const vaultConfig = buildVaultConfig(accessToken);
         const realClient = new VaultClient(vaultConfig);
         const adapter = {
@@ -1461,7 +1466,7 @@ export async function runPullPersonal(hqRoot, onConflict) {
     console.log(`  HQ root:  ${hqRoot}`);
     console.log(`  Strategy: ${onConflict ?? "(interactive)"}\n`);
     try {
-        const accessToken = await ensureCognitoToken();
+        const accessToken = await ensureSyncCognitoToken();
         const vaultConfig = buildVaultConfig(accessToken);
         const client = new VaultClient(vaultConfig);
         const personalUid = await resolveCanonicalPersonUid({
@@ -1509,7 +1514,7 @@ async function runPushAll(hqRoot, message, onConflict, skipPersonal) {
     console.log("");
     let result;
     try {
-        const accessToken = await ensureCognitoToken();
+        const accessToken = await ensureSyncCognitoToken();
         const vaultConfig = buildVaultConfig(accessToken);
         const realClient = new VaultClient(vaultConfig);
         const author = resolveUploadAuthor();
@@ -1637,7 +1642,7 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
     console.log(`  Target:   ${personal ? "(personal)" : (company ?? "(active company)")}`);
     console.log(`  Strategy: ${onConflict ?? "(interactive)"}\n`);
     try {
-        const accessToken = await ensureCognitoToken();
+        const accessToken = await ensureSyncCognitoToken();
         const vaultConfig = buildVaultConfig(accessToken);
         const author = resolveUploadAuthor();
         // Resolve the target. For --personal, look up the canonical person and

package/dist/commands/daemon.js

@@ -91,6 +91,7 @@ async function loadDefaults(over) {
                 home: dir ?? home,
                 existsSync: fs.existsSync,
                 listDir: (dir) => fs.readdirSync(dir),
+                launchdJobLoaded: (label) => run("launchctl", ["print", `gui/${process.getuid?.() ?? 0}/${label}`]).status === 0,
                 windowsTaskExists: (task) => run("schtasks.exe", ["/Query", "/TN", task]).status === 0,
             })),
         resolveHqRoot: over.resolveHqRoot ?? ((flag) => resolveDaemonHqRoot(flag, { env, cwd: process.cwd(), home })),

package/dist/commands/files.d.ts

@@ -1,4 +1,5 @@
 import { Command } from "commander";
+export declare const FILES_SHARE_EMPTY_PREFIX_WARNING_FLAG = "files.share-empty-prefix-warning";
 /**
  * Parse a human-friendly duration string ("15m", "1h", "24h", "2d") into
  * milliseconds. Returns null on parse failure. Mirrors the parser used in

package/dist/commands/files.js

@@ -12,7 +12,10 @@ import { fetchChannels, matchChannelsByName } from "./dm.js";
 import { resolveCompanySlug, resolvePersonWithRosterFallback, } from "./people.js";
 import { findHqRoot } from "../utils/manifest.js";
 import { maxLength } from "../utils/table-width.js";
+import { resolveCompanyFlagGate } from "../lib/flag-registry.js";
 const PERSON_UID_PATTERN = /^(prs|agt)_[A-Za-z0-9_-]+$/;
+export const FILES_SHARE_EMPTY_PREFIX_WARNING_FLAG = "files.share-empty-prefix-warning";
+const FILES_SHARE_EMPTY_PREFIX_CHECK_TIMEOUT_MS = 5_000;
 function collectMentions(value, previous) {
     return [...previous, value];
 }
@@ -589,6 +592,56 @@ export function registerFilesCommand(program) {
     // files-browse.ts) onto the same group without re-creating it.
     return files;
 }
+/** Best-effort, default-off warning after the ACL grant has succeeded. */
+async function warnIfEmptySharePrefix(params) {
+    if (isPrivateFolderPattern(params.prefix))
+        return;
+    let enabled;
+    try {
+        enabled = await resolveCompanyFlagGate(params.companyUid, params.token, FILES_SHARE_EMPTY_PREFIX_WARNING_FLAG, { fallback: false }, () => false);
+    }
+    catch (error) {
+        const errorClass = error instanceof Error ? error.name : "unknown error";
+        console.error(`hq: Could not resolve ${FILES_SHARE_EMPTY_PREFIX_WARNING_FLAG} (${errorClass}); using its fallback.`);
+        return;
+    }
+    if (!enabled)
+        return;
+    const listPrefix = params.fullVault
+        ? ""
+        : params.prefix.endsWith("*")
+            ? params.prefix.slice(0, -1)
+            : params.prefix;
+    try {
+        const query = {
+            company: params.companyUid,
+        };
+        if (listPrefix)
+            query.prefix = listPrefix;
+        const listed = await vaultApiFetch({
+            token: params.token,
+            path: "/v1/files/list",
+            query,
+            signal: AbortSignal.timeout(FILES_SHARE_EMPTY_PREFIX_CHECK_TIMEOUT_MS),
+        });
+        if (!listed.ok)
+            throw new Error(`files list failed (${listed.status})`);
+        const body = (await listed.json());
+        const objects = Array.isArray(body.objects) ? body.objects : [];
+        const hasMatchingObject = params.fullVault || params.prefix.endsWith("*")
+            ? objects.length > 0
+            : objects.some((object) => object.key === listPrefix);
+        if (!hasMatchingObject) {
+            console.warn(chalk.yellow(`Warning: no files exist under '${displayAclPattern(params.prefix)}'. ` +
+                `The recipient will see nothing until files sync there.`));
+        }
+    }
+    catch (error) {
+        const errorClass = error instanceof Error ? error.name : "unknown error";
+        console.warn(chalk.yellow(`Could not check whether '${displayAclPattern(params.prefix)}' has files; ` +
+            `the share succeeded (${errorClass}).`));
+    }
+}
 async function resolveShareChannelTarget(params) {
     const token = (await resolveVaultCredential()).token;
     const channels = await fetchChannels(token);
@@ -757,6 +810,12 @@ async function runDirectGrant(params) {
     }
     const data = (await res.json());
     const printedPrefix = data.acl?.path ?? data.acl?.prefix ?? canonicalPrefix;
+    await warnIfEmptySharePrefix({
+        token,
+        companyUid,
+        prefix: canonicalPrefix,
+        fullVault: params.fullVault === true,
+    });
     const verb = autoCreated ? "Created ACL and granted" : "Granted";
     if (params.fullVault) {
         console.log(chalk.green(`${verb} ${params.permission} on the ENTIRE vault to ${principalLabel}`));

package/dist/commands/lanes-accounts.d.ts

@@ -17,6 +17,9 @@ export declare function createLaneAccountsHandlers(deps: LaneAccountsHandlerDeps
         host?: string;
         company?: string;
     }) => Promise<void>;
+    runAccountsClearQuota: (ctx: Ctx, providerRaw: string, accountIdRaw: string, opts: {
+        model?: string;
+    }) => Promise<void>;
     runAccountsEnable: (ctx: Ctx, providerRaw: string, accountId: string) => Promise<void>;
     runAccountsDisable: (ctx: Ctx, providerRaw: string, accountId: string, opts: {
         reason?: string;

package/dist/commands/lanes-accounts.js

@@ -8,7 +8,7 @@ import { AccountResolutionError, DEFAULT_ACCOUNT_HOMES, LANE_PROVIDERS, PROVIDER
 import { assertUniqueAccountHomes, providerCompactAfterMs } from "../lib/lanes/config.js";
 import { resolveLaneEffort } from "../lib/lanes/effort.js";
 import { LanesError } from "../lib/lanes/errors.js";
-import { accountQuotaView, loadQuotaState } from "../lib/lanes/quota.js";
+import { accountQuotaView, clearAccountQuota, loadQuotaState } from "../lib/lanes/quota.js";
 import { resolveLaneModel } from "../lib/lanes/spawn.js";
 export function createLaneAccountsHandlers(deps) {
     const { automaticBalanceMoveHistoryReason, ensureDir, laneWithRecoveredProviderSession, loadClaudeBalanceHostSnapshots, parseRemoteJson, prepareAccountMove, printJson, reconcileHostFromCtx, resolveCallerPath } = deps;
@@ -489,6 +489,29 @@ export function createLaneAccountsHandlers(deps) {
             home_source: home === account.home ? "default" : "host",
         });
     }
+    async function runAccountsClearQuota(ctx, providerRaw, accountIdRaw, opts) {
+        const provider = parseLaneProvider(providerRaw);
+        const account = accountIdRaw.trim();
+        if (!account) {
+            throw new AccountResolutionError("unknown_account", "account-id must be non-empty", { provider, account: accountIdRaw, enabled: [] });
+        }
+        const model = opts.model?.trim();
+        if (opts.model !== undefined && !model) {
+            throw new LanesError("invalid_model", "--model must be non-empty", {
+                provider,
+                account,
+            });
+        }
+        const cleared = clearAccountQuota(ctx.hqRoot(), provider, account, model === undefined ? {} : { model });
+        printJson({
+            ok: true,
+            action: "accounts.clear-quota",
+            provider,
+            account,
+            all_models_quota_reset_at: cleared.all_models_quota_reset_at,
+            model_quota_resets: cleared.model_quota_resets,
+        });
+    }
     async function runAccountsEnable(ctx, providerRaw, accountId) {
         const hqRoot = ctx.hqRoot();
         const provider = parseLaneProvider(providerRaw);
@@ -562,6 +585,7 @@ export function createLaneAccountsHandlers(deps) {
         runAccountsBalance,
         runAccountsLogin,
         runAccountsSetHome,
+        runAccountsClearQuota,
         runAccountsEnable,
         runAccountsDisable
     };

package/dist/commands/lanes-message.js

@@ -8,6 +8,7 @@ import { dispatchLaneDelivery } from "../lib/lanes/delivery-core.js";
 import { dropboxInboxHasMessages, drainDropbox, formatDropboxMessages, formatMonitorEvent, requeueDropboxMessages } from "../lib/lanes/dropbox.js";
 import { isPidAlive, runWatcherLoop, WATCHER_OUT_MAX_BYTES, watcherOutLogPath, writeWatcherDecision } from "../lib/lanes/watcher.js";
 import { laneStories, laneStory, storyWarning } from "../lib/lanes/stories.js";
+import { artifactIdentityKeys, rollbackStorySwitchAttribution, storySwitchNotice } from "../lib/lanes/story-switch.js";
 import { laneRunDir, probePidRecord, readPidRecord, readProcStarttime, spawnLaneWorker } from "../lib/lanes/spawn.js";
 import { keepAliveExclusion, keepAliveSupersededBy, LANE_RUNNING_SUPERSEDED_MESSAGE_DELIVERY_FLAG, LANE_SUPERSESSION_LINEAGE_AWARE_FLAG, loadRetiredLaneIds } from "../lib/lanes/keep-alive.js";
 import { readLanesRegistryFlag } from "../lib/lanes/registry-flag.js";
@@ -212,8 +213,11 @@ export function createLaneMessageHandlers(deps) {
             })();
         let accepted = false;
         let claimedMessages = [];
+        let storySwitchRollback;
+        let storySwitchDeliveryStarted = false;
         const markAccepted = () => {
             accepted = true;
+            storySwitchDeliveryStarted = true;
             opts.onAccepted?.();
         };
         let text = opts.text;
@@ -392,19 +396,21 @@ export function createLaneMessageHandlers(deps) {
             if ((opts.project !== undefined || opts.story !== undefined) && ctx.storyLedgerEnabled()) {
                 validateProjectStories(hqRoot, projectId, [storyId], lane.company?.slug);
             }
+            const notice = storySwitchNotice(lane.project_id, lane.story_id, projectId, storyId);
+            const promptedText = notice === undefined ? text : `${notice}\n\n${text}`;
             const framedMonitorEvent = opts.monitorEvent === undefined
                 ? undefined
                 : formatMonitorEvent({
                     monitorId: opts.monitorEvent.monitor_id,
                     description: opts.monitorEvent.description,
                     sequence: opts.monitorEvent.sequence,
-                    text,
+                    text: promptedText,
                 });
-            const deliveryText = framedMonitorEvent ?? text;
+            const deliveryText = framedMonitorEvent ?? promptedText;
             const dropboxMessage = {
                 at,
                 message_id: messageId,
-                text,
+                text: promptedText,
                 project_id: projectId,
                 story_id: storyId,
                 ...(opts.monitorEvent === undefined ? {} : {
@@ -414,6 +420,52 @@ export function createLaneMessageHandlers(deps) {
                     sequence: opts.monitorEvent.sequence,
                 }),
             };
+            if (projectId !== lane.project_id || storyId !== lane.story_id) {
+                lane = casUpdateLane(hqRoot, laneId, (current) => {
+                    const already = current.attribution_history.some((entry) => entry.message_id === messageId);
+                    if (already)
+                        return current;
+                    const existingStory = laneStory(current, projectId, storyId);
+                    storySwitchRollback = {
+                        message_id: messageId,
+                        project_id: current.project_id,
+                        story_id: current.story_id,
+                        no_story_reason: current.no_story_reason,
+                        ...(!existingStory ? {
+                            added_story: { project_id: projectId, story_id: storyId, status: "in_progress", added_at: at, updated_at: at },
+                        } : {}),
+                        story_switch_unacknowledged: current.story_switch_unacknowledged,
+                    };
+                    return {
+                        ...current,
+                        project_id: projectId,
+                        story_id: storyId,
+                        no_story_reason: storyId ? undefined : current.no_story_reason,
+                        stories: laneStory(current, projectId, storyId)
+                            ? laneStories(current)
+                            : [
+                                ...laneStories(current),
+                                { project_id: projectId, story_id: storyId, status: "in_progress", added_at: at, updated_at: at },
+                            ],
+                        attribution_history: appendCappedHistory(current.attribution_history, {
+                            project_id: projectId,
+                            story_id: storyId,
+                            message_id: messageId,
+                            at,
+                        }),
+                        story_switch_pending: {
+                            previous_project_id: current.project_id,
+                            previous_story_id: current.story_id,
+                            project_id: projectId,
+                            story_id: storyId,
+                            message_id: messageId,
+                            at,
+                            previous_artifact_keys: artifactIdentityKeys(current.last_envelope?.artifacts),
+                        },
+                        story_switch_unacknowledged: undefined,
+                    };
+                });
+            }
             let resumed = null;
             let move = null;
             let queuedOnAdmission = false;
@@ -491,6 +543,7 @@ export function createLaneMessageHandlers(deps) {
                             throw new LanesError("lane_not_accepting_messages", operatorMessageRefusalReason(lane.state), { lane_id: laneId, state: lane.state });
                         }
                         appendDropboxMessage(hqRoot, laneId, dropboxMessage);
+                        storySwitchDeliveryStarted = true;
                         return null;
                     },
                     resume: async () => {
@@ -565,6 +618,8 @@ export function createLaneMessageHandlers(deps) {
                                     compact: opts.compact !== false,
                                     effort: resumeEffort ?? recordedResumeEffort(lane),
                                 });
+                                storySwitchDeliveryStarted = true;
+                                deps.onLaneWorkerStarted?.(laneId, "message");
                                 archiveResumeMessage(hqRoot, laneId, dropboxMessage);
                                 return started;
                             }, hireGrantContext);
@@ -576,41 +631,10 @@ export function createLaneMessageHandlers(deps) {
                 markAccepted();
             }
             // Every accepted message moves the compaction reference forward.
-            let next = casUpdateLane(hqRoot, laneId, (current) => ({
+            const next = casUpdateLane(hqRoot, laneId, (current) => ({
                 ...resetKeepAliveProgress(current),
                 last_message_at: at,
             }));
-            if (projectId !== lane.project_id || storyId !== lane.story_id) {
-                next = casUpdateLane(hqRoot, laneId, (current) => {
-                    const already = current.attribution_history.some((entry) => entry.message_id === messageId);
-                    if (already)
-                        return current;
-                    return {
-                        ...current,
-                        project_id: projectId,
-                        story_id: storyId,
-                        no_story_reason: storyId ? undefined : current.no_story_reason,
-                        stories: laneStory(current, projectId, storyId)
-                            ? laneStories(current)
-                            : [
-                                ...laneStories(current),
-                                {
-                                    project_id: projectId,
-                                    story_id: storyId,
-                                    status: "in_progress",
-                                    added_at: at,
-                                    updated_at: at,
-                                },
-                            ],
-                        attribution_history: appendCappedHistory(current.attribution_history, {
-                            project_id: projectId,
-                            story_id: storyId,
-                            message_id: messageId,
-                            at,
-                        }),
-                    };
-                });
-            }
             // What this command can claim when it returns: the message is durably
             // written (accepted). Delivery to the model is asynchronous in both
             // mechanisms. `dropbox` delivers on the worker's next tool call, and only
@@ -660,6 +684,15 @@ export function createLaneMessageHandlers(deps) {
                 });
         }
         catch (err) {
+            if (storySwitchRollback !== undefined && !storySwitchDeliveryStarted) {
+                try {
+                    casUpdateLane(hqRoot, laneId, (current) => rollbackStorySwitchAttribution(current, storySwitchRollback));
+                }
+                catch (rollbackErr) {
+                    const rollbackMessage = rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr);
+                    process.stderr.write(`Could not roll back story attribution after message failure: ${rollbackMessage}\n`);
+                }
+            }
             if (claimedMessages.length > 0 && !accepted) {
                 const error = err instanceof Error ? err.message : String(err);
                 writeWatcherDecision(watcherOutLogPath(hqRoot, laneId), {