@indigoai-us/hq-cli 5.300.0 → 5.302.0

package/dist/commands/lanes.js

@@ -55,11 +55,11 @@ import { createLaneMesh, emitLaneDecisionEvents, emitLaneTerminalStateEvent, lan
 import { sessionIdFromEnv } from "../lib/mesh/live/session-identity.js";
 import { listLaneReviews } from "../lib/lanes/reviews.js";
 import { effectiveAccountHome } from "../lib/lanes/account-home.js";
-import { AccountResolutionError, compareLaneQueueOrder, LANE_PROVIDERS, LANE_STATES, QUESTION_STATUSES, SENIOR_KINDS, accountStatus, appendCappedHistory, canonicalizeHome, createLane, decideAdmission, defaultLivenessDeps, defaultSystemdUserDir, defaultThrottleDeps, installReconcileTimer, providerPathEnv, probeDrainHookRegistration, isLanesError, isLaneVersionConflict, isTerminalLaneState, aliveDirectChildren, assignedChildHireGrants, hireGrantCapacityError, planHireGrantBackfill, terminalChildResumeHireGrantError, withHireGrantAdmission, laneStoryLedgerEnabled, validateProjectStories, buildLaneStatusSnapshot, formatLaneStatusHuman, listLaneIds, listQuestionIds, loadLanesConfig, laneRunsHere, MAX_LANE_DEPTH, MONITOR_ERROR_EXIT_CODE, readLiveMonitorEvidence, resolveMachineIdentity as lookupMachineIdentity, loadLivenessIndex, parseLaneProvider, parseLaneRecord, parseLaneState, parseQuestionRecord, parseSeniorKind, readAllLanes, readLane, sanitizeHostComponent, retryUpdateLane, syncLaneRecordFromOwner, readQuestion, resolveAccount, resolveLaneWorker, ignoredWorkerProfileFields, loadWorkerProfile, loadWorkerProfileWithRegistry, registryWorkerRecord, runReconcilePass, sessionLiveness, tryReadLane, uninstallReconcileTimer, updateLane, updateQuestion, dropboxDir, laneDeliveryMechanism, hasActiveAdmissionReservation, hasActivePendingResume, hasRecordedSessionId, hasEarlierEligibleQueuedLane, laneAdmissionCapReason, providerSupportsSessionResume, providerSessionPortable, sessionNotPortableMessage, withLaneAdmissionLock, withAllLaneAdmissionLocks, readWorkerRunResult, resumeCommandRefusal, withLaneHireLocks, raiseLaneQuestion, sha256Text, } from "../lib/lanes/index.js";
+import { AccountResolutionError, compareLaneQueueOrder, LANE_PROVIDERS, LANE_STATES, QUESTION_STATUSES, SENIOR_KINDS, accountStatus, appendCappedHistory, canonicalizeHome, createLane, decideAdmission, defaultLivenessDeps, defaultSystemdUserDir, defaultThrottleDeps, installReconcileTimer, providerPathEnv, probeDrainHookRegistration, isLanesError, isLaneVersionConflict, isTerminalLaneState, aliveDirectChildren, assignedChildHireGrants, hireGrantCapacityError, planHireGrantBackfill, terminalChildResumeHireGrantError, withHireGrantAdmission, laneStoryLedgerEnabled, validateProjectStories, buildLaneStatusSnapshot, formatLaneStatusHuman, listLaneIds, listQuestionIds, loadLanesConfig, laneRunsHere, MAX_LANE_DEPTH, MONITOR_ERROR_EXIT_CODE, readLiveMonitorEvidence, resolveMachineIdentity as lookupMachineIdentity, loadLivenessIndex, parseLaneProvider, parseLaneRecord, parseLaneState, parseQuestionRecord, parseSeniorKind, readAllLanes, readLane, sanitizeHostComponent, retryUpdateLane, syncLaneRecordFromOwner, readQuestion, resolveAccount, resolveLaneWorker, ignoredWorkerProfileFields, loadWorkerProfile, loadWorkerProfileWithRegistry, registryWorkerRecord, runReconcilePass, DEAD_HOST_MS, sessionLiveness, tryReadLane, uninstallReconcileTimer, updateLane, updateQuestion, dropboxDir, laneDeliveryMechanism, hasActiveAdmissionReservation, hasActivePendingResume, hasRecordedSessionId, hasEarlierEligibleQueuedLane, laneAdmissionCapReason, providerSupportsSessionResume, providerSessionPortable, sessionNotPortableMessage, withLaneAdmissionLock, withAllLaneAdmissionLocks, readWorkerRunResult, resumeCommandRefusal, withLaneHireLocks, raiseLaneQuestion, sha256Text, } from "../lib/lanes/index.js";
 import { laneStories, storyWarning, } from "../lib/lanes/stories.js";
 import { resolveLaneKeepAlive } from "../lib/lanes/profile.js";
 import { resolveLaneCompany } from "../lib/lanes/lane-company.js";
-import { doneKeepAliveVerdict, hasPendingKeepAliveWork, keepAliveExclusion, LANE_SUPERSESSION_LINEAGE_AWARE_FLAG, loadRetiredLaneIds, } from "../lib/lanes/keep-alive.js";
+import { doneKeepAliveVerdict, hasPendingKeepAliveWork, keepAliveNextCheckAtMs, keepAliveExclusion, LANE_SUPERSESSION_LINEAGE_AWARE_FLAG, LEAD_LANE_KEEP_ALIVE_NEXT_CHECK_FLAG, loadRetiredLaneIds, } from "../lib/lanes/keep-alive.js";
 import { questionBodyAbsPath, resolveQuestionCompanyWithFallback, resolveProjectQuestionCompany, } from "../lib/lanes/questions.js";
 import { assertQuestionBodySecretSafe } from "../lib/lanes/questions.js";
 import { compactionAfterUsage, } from "../lib/lanes/compaction.js";
@@ -1260,6 +1260,8 @@ async function refreshRemoteLaneMirrors(ctx, hqRoot, records, parentLaneIds, opt
         unverifiedRemote: new Map(),
         missingOnOwner: new Map(),
     };
+    const now = ctx.now();
+    const nowMs = now.getTime();
     const host = reconcileHostFromCtx(ctx);
     if (ctx.env.HQ_LANES_REMOTE_READ === "1" || parentLaneIds?.size === 0)
         return result;
@@ -1282,6 +1284,9 @@ async function refreshRemoteLaneMirrors(ctx, hqRoot, records, parentLaneIds, opt
         ((parentLaneIds === undefined || (lane.senior.kind === "lane" &&
             lane.senior.id !== undefined &&
             parentLaneIds.has(lane.senior.id))) || options.laneIds?.has(lane.lane_id) === true) &&
+        !(isTerminalLaneState(lane.state) &&
+            lane.terminal_reason === DISPATCH_TERMINAL_REASON &&
+            lane.last_host_report_at === undefined) &&
         (options.includeTerminalMirrors === true || !isTerminalLaneState(lane.state)))
         .sort((a, b) => {
         const terminalOrder = Number(isTerminalLaneState(a.state)) - Number(isTerminalLaneState(b.state));
@@ -1389,11 +1394,20 @@ async function refreshRemoteLaneMirrors(ctx, hqRoot, records, parentLaneIds, opt
                 result.updated.set(mirror.lane_id, before);
                 continue;
             }
+            const ownerReportAtMs = Date.parse(owner.last_host_report_at ?? "");
+            const ownerReportIsFresh = owner.state === "running" &&
+                Number.isFinite(ownerReportAtMs) &&
+                ownerReportAtMs <= nowMs + 60_000 &&
+                nowMs - ownerReportAtMs < DEAD_HOST_MS;
+            const mirroredReportAt = ownerReportIsFresh
+                ? new Date(Math.min(ownerReportAtMs, nowMs)).toISOString()
+                : undefined;
             const needsUpdate = before.state !== owner.state ||
                 before.queued_reason !== (owner.state === "queued" ? owner.queued_reason : undefined) ||
                 JSON.stringify(before.queued_details) !== JSON.stringify(owner.state === "queued" ? owner.queued_details : undefined) ||
                 before.ended_at !== endedAt ||
                 before.envelope_summary !== envelopeSummary ||
+                (mirroredReportAt !== undefined && before.last_host_report_at !== mirroredReportAt) ||
                 (isTerminalLaneState(owner.state) && (JSON.stringify(before.last_envelope) !== JSON.stringify(owner.last_envelope) ||
                     before.story_complete !== owner.story_complete ||
                     before.story_complete_reason !== owner.story_complete_reason ||
@@ -1420,6 +1434,8 @@ async function refreshRemoteLaneMirrors(ctx, hqRoot, records, parentLaneIds, opt
                     queued_details: owner.state === "queued" ? owner.queued_details : undefined,
                     ended_at: endedAt,
                     envelope_summary: envelopeSummary,
+                    // Preserve a fresh owner report; clamp small clock skew to the primary's time.
+                    ...(mirroredReportAt !== undefined ? { last_host_report_at: mirroredReportAt } : {}),
                     ...(isTerminalLaneState(owner.state) ? {
                         last_envelope: owner.last_envelope,
                         story_complete: owner.story_complete,
@@ -4261,10 +4277,29 @@ async function dispatchOutpostLaneCommand(ctx, lane, action, options, behavior =
             remote.delivery_status === "queued_on_target_account" ||
             remote.delivery_status === "queued_on_admission")) {
         const ownerLane = dispatchedOwnerLane(ctx, lane.lane_id, outpostId, remote.lane, behavior);
+        const questionCancellation = lane.state === "awaiting_input" && behavior.afterFallbackResume
+            ? await behavior.afterFallbackResume()
+            : undefined;
+        const ownerCancelledQuestions = Array.isArray(remote.cancelled_questions)
+            ? remote.cancelled_questions.filter((id) => typeof id === "string")
+            : [];
+        const ownerCancellationFailures = Array.isArray(remote.question_cancellation_failures)
+            ? remote.question_cancellation_failures
+            : [];
         printJson({
             ...remote,
             lane_id: ownerLane.lane_id,
             lane: ownerLane,
+            ...(questionCancellation === undefined ? {} : {
+                cancelled_questions: [...new Set([
+                        ...ownerCancelledQuestions,
+                        ...questionCancellation.cancelled_question_ids,
+                    ])],
+                question_cancellation_failures: [
+                    ...ownerCancellationFailures,
+                    ...questionCancellation.failures,
+                ],
+            }),
             outpost_id: outpostId,
             outpost_command_id: dispatched.commandId,
             outpost_transport: "outposts_exec",
@@ -4281,10 +4316,29 @@ async function dispatchOutpostLaneCommand(ctx, lane, action, options, behavior =
                 descendants.push(syncLaneRecordFromOwner(ctx.hqRoot(), descendantId, outpostId, ownerDescendant, undefined, { allowNonTerminal: true }));
             }
         }
+        const questionCancellation = action === "resume" && lane.state === "awaiting_input" && behavior.afterFallbackResume
+            ? await behavior.afterFallbackResume()
+            : undefined;
+        const ownerCancelledQuestions = Array.isArray(remote.cancelled_questions)
+            ? remote.cancelled_questions.filter((id) => typeof id === "string")
+            : [];
+        const ownerCancellationFailures = Array.isArray(remote.question_cancellation_failures)
+            ? remote.question_cancellation_failures
+            : [];
         printJson({
             ...remote,
             lane_id: ownerLane.lane_id,
             lane: ownerLane,
+            ...(questionCancellation === undefined ? {} : {
+                cancelled_questions: [...new Set([
+                        ...ownerCancelledQuestions,
+                        ...questionCancellation.cancelled_question_ids,
+                    ])],
+                question_cancellation_failures: [
+                    ...ownerCancellationFailures,
+                    ...questionCancellation.failures,
+                ],
+            }),
             ...(action === "reparent"
                 ? { changed_descendant_ids: changedDescendantIds, descendants }
                 : {}),
@@ -5009,7 +5063,7 @@ async function refreshOutpostLaneCopiesForShow(ctx, lane, localLanes) {
     const refreshedLane = refreshed[0] ?? null;
     return refreshedLane ?? lane;
 }
-async function runShow(ctx, laneId) {
+async function runShow(ctx, laneId, hasPendingQuestionForLane) {
     const hqRoot = ctx.hqRoot();
     const initialLane = readLane(hqRoot, laneId);
     const initialLanes = loadAllLanes(hqRoot);
@@ -5023,10 +5077,24 @@ async function runShow(ctx, laneId) {
         ? { ...storedLane, state: "remote", remote_state: storedLane.state, queued_reason: undefined, queued_details: undefined }
         : storedLane;
     const askDeliveryFailed = readJsonFile(askDeliveryFailedPath(hqRoot, laneId));
+    const delivery = storedLane.state === "awaiting_input" &&
+        await hasPendingQuestionForLane(ctx, storedLane)
+        ? "questions"
+        : laneDeliveryMechanism(storedLane);
     const keepAliveState = resolveLaneKeepAlive(hqRoot, storedLane);
     const keepAliveCompany = resolveLaneCompany(hqRoot, storedLane);
+    const now = ctx.now().getTime();
+    const nextCheckAtEnabled = storedLane.state === "done" && storedLane.keep_alive === true
+        ? await readLanesRegistryFlag(LEAD_LANE_KEEP_ALIVE_NEXT_CHECK_FLAG, {
+            company: keepAliveCompany.company ?? undefined,
+            env: ctx.env,
+        })
+        : false;
+    const hasPendingWork = storedLane.keep_alive_standing === true || nextCheckAtEnabled
+        ? hasPendingKeepAliveWork(hqRoot, storedLane)
+        : false;
     const doneStateVerdict = storedLane.state === "done" && storedLane.keep_alive === true
-        ? doneKeepAliveVerdict(storedLane, { decision: storedLane.last_envelope?.decision, story_complete: storedLane.story_complete }, storedLane.keep_alive_standing === true && hasPendingKeepAliveWork(hqRoot, storedLane))
+        ? doneKeepAliveVerdict(storedLane, { decision: storedLane.last_envelope?.decision, story_complete: storedLane.story_complete, next_check_at: storedLane.last_envelope?.next_check_at }, storedLane.keep_alive_standing === true && hasPendingWork, { nextCheckAtEnabled, hasPendingWork, nowMs: now })
         : null;
     let managerStatusTarget;
     let managerStatusGateError;
@@ -5048,7 +5116,15 @@ async function runShow(ctx, laneId) {
         now: ctx.now().getTime(),
     });
     const laneIsSenior = allLanes.some((item) => item.senior.kind === "lane" && item.senior.id === laneId);
-    const now = ctx.now().getTime();
+    const requestedNextCheckMs = nextCheckAtEnabled && !hasPendingWork
+        ? keepAliveNextCheckAtMs(storedLane.last_envelope?.next_check_at, now, Date.parse(storedLane.last_envelope?.at ?? storedLane.updated_at))
+        : undefined;
+    const storedNextEligibleMs = Date.parse(storedLane.keep_alive_next_eligible_at ?? "");
+    const nextEligibleAt = Number.isFinite(storedNextEligibleMs) && requestedNextCheckMs !== undefined
+        ? new Date(Math.max(storedNextEligibleMs, requestedNextCheckMs)).toISOString()
+        : requestedNextCheckMs !== undefined
+            ? new Date(requestedNextCheckMs).toISOString()
+            : storedLane.keep_alive_next_eligible_at ?? null;
     const reviewListing = laneIsSenior
         ? listLaneReviews(hqRoot, laneId)
         : { reviews: [], skipped: 0 };
@@ -5075,7 +5151,7 @@ async function runShow(ctx, laneId) {
         stalled_at: lane.stalled_at ?? null,
         stalled_reason: lane.stalled_reason ?? null,
         ask_delivery_failed: askDeliveryFailed,
-        delivery: laneDeliveryMechanism(storedLane),
+        delivery,
         provider_session_id: lane.provider_session_id ?? null,
         provider_session_id_absent: lane.provider_session_id_absent ?? null,
         envelope_repair_mode: lane.envelope_repair?.mode ?? null,
@@ -5108,7 +5184,7 @@ async function runShow(ctx, laneId) {
             consecutive_auto_resumes: lane.keep_alive_resume_count ?? 0,
             last_auto_resume_at: lane.keep_alive_last_resume_at ?? null,
             keep_alive_history: lane.keep_alive_history ?? [],
-            next_eligible_at: lane.keep_alive_next_eligible_at ?? null,
+            next_eligible_at: nextEligibleAt,
             exhausted_at: lane.keep_alive_exhausted_at ?? null,
         },
         manager_status_gate: managerStatusGateError !== undefined
@@ -5134,6 +5210,7 @@ async function runShow(ctx, laneId) {
                 escalated: blockerFreshness.stale.length > 0 &&
                     storedLane.blocker_freshness_state?.escalated_fingerprint ===
                         blockerFreshnessFingerprint(blockerFreshness.stale),
+                undeliverable_reason: storedLane.blocker_freshness_state?.undeliverable_reason ?? null,
             }
             : null,
         kr_freshness: krFreshness,
@@ -7807,6 +7884,7 @@ export function registerLanesCommand(parent, deps = {}) {
         assertQuestionAnswerAuthorized,
         assertQuestionCompanyMatchesLane,
         casUpdateQuestion,
+        casUpdateLane,
         effectiveLaneQuestionCompany,
         emitLaneMeshEvent,
         groupQuestionLanesByCompany,
@@ -7838,6 +7916,7 @@ export function registerLanesCommand(parent, deps = {}) {
     });
     const messageHandlerDeps = {
         onLaneWorkerStarted: deps.onLaneWorkerStarted,
+        onLaneMessageQueued: deps.onLaneMessageQueued,
         archiveResumeMessage,
         assertLaneRunsHereForAdmission,
         assertLaneRunsHereForOperatorMutation,
@@ -7856,6 +7935,8 @@ export function registerLanesCommand(parent, deps = {}) {
         recordResumeSetup,
         resolveCommandLane: (commandCtx, laneId) => resolveCommandLaneTarget(commandCtx, laneId),
         resolveActiveQuestionCompany,
+        hasPendingQuestionForLane: questionHandlers.hasPendingQuestionForLane,
+        cancelFallbackQuestionsForLane: questionHandlers.cancelFallbackQuestionsForLane,
         resolveResumeProfile,
         selectAutomaticClaudeResumeAccount,
         validateResumeProfileModel,
@@ -7881,6 +7962,8 @@ export function registerLanesCommand(parent, deps = {}) {
         printJson,
         recordResumeSetup,
         resolveCommandLane: (commandCtx, laneId) => resolveCommandLaneTarget(commandCtx, laneId),
+        hasPendingQuestionForLane: questionHandlers.hasPendingQuestionForLane,
+        cancelFallbackQuestionsForLane: questionHandlers.cancelFallbackQuestionsForLane,
         resolveResumeProfile,
         selectAutomaticClaudeResumeAccount,
         validateResumeProfileModel,
@@ -8152,7 +8235,7 @@ export function registerLanesCommand(parent, deps = {}) {
         .description("Show one lane")
         .argument("<lane-id>", "Lane id")
         .action(wrap(async (laneId) => {
-        await runShow(ctx, laneId);
+        await runShow(ctx, laneId, questionHandlers.hasPendingQuestionForLane);
     }));
     const stories = lanes
         .command("story")
@@ -8289,7 +8372,7 @@ export function registerLanesCommand(parent, deps = {}) {
     }));
     lanes
         .command("resume")
-        .description("Resume an interrupted, done or blocked lane on its recorded provider session; recover failed lanes with the senior-only --from-failed option")
+        .description("Resume an interrupted, done or blocked lane, or an awaiting_input lane with no answerable question; recover failed lanes with the senior-only --from-failed option")
         .argument("<lane-id>", "Lane id")
         .option("--text <msg>", "Operator message for the resumed turn")
         .option("--from-failed", "Explicitly resume a failed lane as its senior")

package/dist/commands/meetings.js

@@ -3,6 +3,25 @@ import { readFile } from "node:fs/promises";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, getCompanyUid, resolveCallerPersonUid, } from "../utils/vault-api.js";
 import { isPlanGateError, planGateErrorFromPayload, } from "../utils/plan-gate-error.js";
+// Two minutes gives a large transcript time to arrive over a slow connection,
+// while keeping the interactive command from waiting indefinitely.
+const MEETING_DOCUMENT_DOWNLOAD_TIMEOUT_MS = 120_000;
+async function downloadMeetingDocument(url, readBody) {
+    const signal = AbortSignal.timeout(MEETING_DOCUMENT_DOWNLOAD_TIMEOUT_MS);
+    try {
+        const response = await fetch(url, { signal });
+        if (!response.ok)
+            return { response, ok: false };
+        return { response, ok: true, body: await readBody(response) };
+    }
+    catch (err) {
+        if ((signal.aborted && signal.reason instanceof DOMException && signal.reason.name === "TimeoutError") ||
+            (err instanceof DOMException && err.name === "TimeoutError")) {
+            throw new Error(`Meeting document download timed out after ${MEETING_DOCUMENT_DOWNLOAD_TIMEOUT_MS / 1000} seconds. Check your network connection and try again.`);
+        }
+        throw err;
+    }
+}
 function formatDuration(seconds) {
     const h = Math.floor(seconds / 3600);
     const m = Math.floor((seconds % 3600) / 60);
@@ -495,12 +514,12 @@ export function registerMeetingsCommand(program) {
                     console.error(chalk.red("No document available for this meeting."));
                     process.exit(1);
                 }
-                const docRes = await fetch(documentUrl);
-                if (!docRes.ok) {
-                    console.error(chalk.red(`Failed to download meeting document (${docRes.status})`));
+                const download = await downloadMeetingDocument(documentUrl, (response) => response.text());
+                if (!download.ok) {
+                    console.error(chalk.red(`Failed to download meeting document (${download.response.status})`));
                     process.exit(1);
                 }
-                const markdown = await docRes.text();
+                const markdown = download.body;
                 if (meetings.opts().json) {
                     console.log(JSON.stringify({ meetingId: detail.meetingId, sourceShape: "markdown", markdown }, null, 2));
                     return;
@@ -513,12 +532,12 @@ export function registerMeetingsCommand(program) {
                 console.error(chalk.red("No document URL available for this meeting."));
                 process.exit(1);
             }
-            const docRes = await fetch(detail.documentUrl);
-            if (!docRes.ok) {
-                console.error(chalk.red(`Failed to download meeting document (${docRes.status})`));
+            const download = await downloadMeetingDocument(detail.documentUrl, (response) => response.json());
+            if (!download.ok) {
+                console.error(chalk.red(`Failed to download meeting document (${download.response.status})`));
                 process.exit(1);
             }
-            const doc = (await docRes.json());
+            const doc = download.body;
             if (meetings.opts().json) {
                 console.log(JSON.stringify(doc.transcript, null, 2));
                 return;
@@ -573,12 +592,12 @@ export function registerMeetingsCommand(program) {
                     console.log(chalk.yellow("No notes available for this meeting."));
                     return;
                 }
-                const docRes = await fetch(documentUrl);
-                if (!docRes.ok) {
-                    console.error(chalk.red(`Failed to download meeting document (${docRes.status})`));
+                const download = await downloadMeetingDocument(documentUrl, (response) => response.text());
+                if (!download.ok) {
+                    console.error(chalk.red(`Failed to download meeting document (${download.response.status})`));
                     process.exit(1);
                 }
-                const markdown = await docRes.text();
+                const markdown = download.body;
                 if (meetings.opts().json) {
                     console.log(JSON.stringify({ meetingId: detail.meetingId, sourceShape: "markdown", markdown }, null, 2));
                     return;
@@ -591,12 +610,12 @@ export function registerMeetingsCommand(program) {
                 console.error(chalk.red("No document URL available for this meeting."));
                 process.exit(1);
             }
-            const docRes = await fetch(detail.documentUrl);
-            if (!docRes.ok) {
-                console.error(chalk.red(`Failed to download meeting document (${docRes.status})`));
+            const download = await downloadMeetingDocument(detail.documentUrl, (response) => response.json());
+            if (!download.ok) {
+                console.error(chalk.red(`Failed to download meeting document (${download.response.status})`));
                 process.exit(1);
             }
-            const doc = (await docRes.json());
+            const doc = download.body;
             if (meetings.opts().json) {
                 console.log(JSON.stringify(doc.notes, null, 2));
                 return;

package/dist/commands/monitor.js

@@ -278,6 +278,7 @@ async function startMonitor(options, argv = []) {
         cwd: meta.cwd,
         env: { ...env, HQ_ROOT: hqRoot },
         detached: true,
+        windowsHide: true,
         stdio: "ignore",
     });
     child.once("error", (err) => {
@@ -347,7 +348,21 @@ async function showMonitor(id, json) {
     const state = stateForDisplay(hqRoot, id, readJson(statePath(hqRoot, id)));
     if (!meta || !state)
         throw new LanesError("monitor_not_found", `Monitor ${id} was not found.`, { monitor_id: id });
-    const events = fs.readFileSync(path.join(dir, "events.jsonl"), "utf8").split("\n").filter(Boolean).map((line) => JSON.parse(line));
+    const events = [];
+    for (const line of fs.readFileSync(path.join(dir, "events.jsonl"), "utf8").split("\n")) {
+        if (!line.trim())
+            continue;
+        let parsed;
+        try {
+            parsed = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+            continue;
+        events.push(parsed);
+    }
     if (json)
         printJson({ meta, state, events });
     else
@@ -712,7 +727,7 @@ export async function runSupervisor(id, deps = {}) {
     const args = meta.command !== null ? childArgs : childArgs.slice(1);
     if (!executable)
         throw new LanesError("monitor_command_required", "No command was recorded for this monitor.");
-    commandChild = (deps.spawn ?? spawn)(executable, args, { cwd: meta.cwd, env: process.env, detached: true, stdio: ["ignore", "pipe", "pipe"] });
+    commandChild = (deps.spawn ?? spawn)(executable, args, { cwd: meta.cwd, env: process.env, detached: true, windowsHide: true, stdio: ["ignore", "pipe", "pipe"] });
     if (commandChild.pid) {
         state = { ...state, child_pid: commandChild.pid, child_starttime: readProcStarttime(commandChild.pid) };
         writeJsonAtomic(statePath(hqRoot, id), state);

package/dist/commands/report.js

@@ -6,6 +6,7 @@ import * as path from "node:path";
 import { ensureCognitoToken, } from "../utils/cognito-session.js";
 import { vaultApiFetch } from "../utils/vault-api.js";
 import { DEPLOY_API_URL, deployApiRequest, deployHeaders } from "../lib/deploy-api.js";
+import { listDeployApps } from "../lib/deploy-apps.js";
 import { listReportTemplates } from "../lib/report-templates.js";
 import { adoptReport, buildReportTarball, conventionReportDir, deployOrgContext, ReportPublishError, plainFailureReason, publishReport, } from "../lib/report-publish.js";
 const REPORT_CHANNEL_STATE_FILE = "report-channels.json";
@@ -259,8 +260,10 @@ async function orgFor(token, report) {
     return deployOrgContext(report, slug);
 }
 export async function findOrCreateApp(token, slug, org) {
-    const listed = await deployJson(token, "/api/apps", "GET", undefined, org.headers);
-    const apps = Array.isArray(listed.apps) ? listed.apps : [];
+    const apps = await listDeployApps((cursor) => {
+        const route = cursor ? `/api/apps?cursor=${encodeURIComponent(cursor)}` : "/api/apps";
+        return deployJson(token, route, "GET", undefined, org.headers);
+    });
     const mine = (name) => apps.find((app) => !!app && typeof app === "object" && (app.subdomain === name || app.name === name));
     let app;
     for (const name of candidateSlugs(slug)) {

package/dist/commands/rescue.d.ts

@@ -45,5 +45,9 @@ export declare function shouldAttemptSelfUpdate(opts: {
     check?: boolean;
     selfUpdate?: boolean;
 }): boolean;
+/** Latest release tag for a repo, e.g. `v12.3.0`. Throws on failure. */
+export declare function getLatestReleaseTag(repo: string, token?: string): Promise<string>;
+/** Resolve a tag to its commit SHA, dereferencing annotated tags. */
+export declare function resolveTagSha(repo: string, tag: string, token?: string): Promise<string>;
 export declare function registerRescueCommand(program: Command): void;
 //# sourceMappingURL=rescue.d.ts.map

package/dist/commands/rescue.js

@@ -53,38 +53,48 @@ function ghHeaders(token) {
         headers.Authorization = `Bearer ${token}`;
     return headers;
 }
+// Thirty seconds gives GitHub time to respond while keeping the recovery command bounded.
+const GITHUB_REQUEST_TIMEOUT_MS = 30_000;
+async function githubJsonRequest(url, token) {
+    const signal = AbortSignal.timeout(GITHUB_REQUEST_TIMEOUT_MS);
+    try {
+        const response = await fetch(url, { headers: ghHeaders(token), signal });
+        if (!response.ok)
+            return { response };
+        const body = (await response.json());
+        return { response, body };
+    }
+    catch (error) {
+        if (signal.aborted)
+            throw new Error('GitHub request timed out', { cause: error });
+        throw error;
+    }
+}
 /** Latest release tag for a repo, e.g. `v12.3.0`. Throws on failure. */
-async function getLatestReleaseTag(repo, token) {
-    const res = await fetch(`https://api.github.com/repos/${repo}/releases/latest`, {
-        headers: ghHeaders(token),
-    });
-    if (!res.ok) {
-        throw new Error(`GitHub releases/latest for ${repo}: HTTP ${res.status}`);
+export async function getLatestReleaseTag(repo, token) {
+    const { response, body } = await githubJsonRequest(`https://api.github.com/repos/${repo}/releases/latest`, token);
+    if (!response.ok) {
+        throw new Error(`GitHub releases/latest for ${repo}: HTTP ${response.status}`);
     }
-    const body = (await res.json());
-    if (!body.tag_name)
+    if (!body?.tag_name)
         throw new Error(`no tag_name in latest release for ${repo}`);
     return body.tag_name;
 }
 /** Resolve a tag to its commit SHA, dereferencing annotated tags. */
-async function resolveTagSha(repo, tag, token) {
-    const refRes = await fetch(`https://api.github.com/repos/${repo}/git/ref/tags/${encodeURIComponent(tag)}`, { headers: ghHeaders(token) });
+export async function resolveTagSha(repo, tag, token) {
+    const { response: refRes, body: ref } = await githubJsonRequest(`https://api.github.com/repos/${repo}/git/ref/tags/${encodeURIComponent(tag)}`, token);
     if (!refRes.ok)
         throw new Error(`git/ref/tags/${tag} for ${repo}: HTTP ${refRes.status}`);
-    const ref = (await refRes.json());
-    const obj = ref.object;
+    const obj = ref?.object;
     if (!obj?.sha)
         throw new Error(`no object.sha for tag ${tag} in ${repo}`);
     if (obj.type !== 'tag')
         return obj.sha; // lightweight tag → already a commit
     // Annotated tag → dereference to the commit it points at.
-    const tagRes = await fetch(`https://api.github.com/repos/${repo}/git/tags/${obj.sha}`, {
-        headers: ghHeaders(token),
-    });
+    const { response: tagRes, body: annotated } = await githubJsonRequest(`https://api.github.com/repos/${repo}/git/tags/${obj.sha}`, token);
     if (!tagRes.ok)
         throw new Error(`git/tags/${obj.sha} for ${repo}: HTTP ${tagRes.status}`);
-    const annotated = (await tagRes.json());
-    if (!annotated.object?.sha)
+    if (!annotated?.object?.sha)
         throw new Error(`annotated tag ${tag} has no target sha`);
     return annotated.object.sha;
 }

package/dist/commands/safe-extract.d.ts

@@ -111,10 +111,10 @@ export declare function assertLinkTargetContained(packDir: string, entryAbs: str
 /**
  * List a gzip-compressed tarball's entries via `tar -tvf` (no extraction).
  * argv form, never a shell string, keeps hostile filenames out of shell syntax.
- * When the default-off compatibility flag is enabled, Windows drive paths use
- * a basename relative to the archive directory. GNU tar cannot parse `C:\\...`
- * as remote `host:path`, and Windows' bundled bsdtar accepts the same relative
- * argv without GNU-only `--force-local`.
+ * Windows drive paths use a basename relative to the archive directory by
+ * default. GNU tar cannot parse `C:\\...` as remote `host:path`, and Windows'
+ * bundled bsdtar accepts the same relative argv without GNU-only `--force-local`.
+ * Callers can still explicitly opt out with `useRelativeWindowsDrivePath: false`.
  */
 export declare function listTarball(tarballPath: string, opts?: Pick<SafeExtractOptions, 'platform' | 'useRelativeWindowsDrivePath' | 'execFileSync'>): TarEntry[];
 /**

package/dist/commands/safe-extract.js

@@ -35,7 +35,6 @@
 import { execFileSync } from 'child_process';
 import * as fs from 'fs';
 import * as path from 'path';
-import { installPathCompatibilityEnabled } from '../lib/install-path-compatibility-flag.js';
 export const DEFAULT_CAPS = {
     // A content pack is docs/skills/policies/small scripts. 256 MiB is already
     // generous; anything larger is almost certainly a bomb or a mistake.
@@ -218,14 +217,14 @@ function tarballArgvLocation(tarballPath, platform, useRelativeWindowsDrivePath)
 /**
  * List a gzip-compressed tarball's entries via `tar -tvf` (no extraction).
  * argv form, never a shell string, keeps hostile filenames out of shell syntax.
- * When the default-off compatibility flag is enabled, Windows drive paths use
- * a basename relative to the archive directory. GNU tar cannot parse `C:\\...`
- * as remote `host:path`, and Windows' bundled bsdtar accepts the same relative
- * argv without GNU-only `--force-local`.
+ * Windows drive paths use a basename relative to the archive directory by
+ * default. GNU tar cannot parse `C:\\...` as remote `host:path`, and Windows'
+ * bundled bsdtar accepts the same relative argv without GNU-only `--force-local`.
+ * Callers can still explicitly opt out with `useRelativeWindowsDrivePath: false`.
  */
 export function listTarball(tarballPath, opts = {}) {
     const platform = opts.platform ?? process.platform;
-    const useRelativeWindowsDrivePath = opts.useRelativeWindowsDrivePath ?? installPathCompatibilityEnabled();
+    const useRelativeWindowsDrivePath = opts.useRelativeWindowsDrivePath ?? true;
     const location = tarballArgvLocation(tarballPath, platform, useRelativeWindowsDrivePath);
     const out = (opts.execFileSync ?? execFileSync)('tar', ['-tvf', location.archiveArg], {
         encoding: 'utf-8',
@@ -330,7 +329,7 @@ export function safeExtractTarball(tarballPath, finalDir, opts = {}) {
     }
     // Resolve once so listing and extraction use the same archive location.
     const platform = opts.platform ?? process.platform;
-    const useRelativeWindowsDrivePath = opts.useRelativeWindowsDrivePath ?? installPathCompatibilityEnabled();
+    const useRelativeWindowsDrivePath = opts.useRelativeWindowsDrivePath ?? true;
     const exec = opts.execFileSync ?? execFileSync;
     const location = tarballArgvLocation(tarballPath, platform, useRelativeWindowsDrivePath);
     // 1. Pre-flight against headers (no bytes written yet).

package/dist/lib/agent-kit/fallback.d.ts

@@ -37,6 +37,7 @@ export declare function stopFallback(paths: Pick<AgentKitPaths, "agentDir">, kil
 export interface DetachedSpawn {
     (cmd: string, args: string[], opts: {
         detached: true;
+        windowsHide: true;
         stdio: ["ignore", number, number];
         env: NodeJS.ProcessEnv;
         cwd: string;

package/dist/lib/agent-kit/fallback.js

@@ -113,6 +113,7 @@ export function startFallback(paths, host, deps = {}) {
     try {
         const child = doSpawn(cmd, args, {
             detached: true,
+            windowsHide: true,
             stdio: ["ignore", fd, fd],
             env: { ...(deps.env ?? process.env), HOME: host.home, ...kitServiceEnv(paths) },
             cwd: paths.agentDir,

package/dist/lib/bot/daemon.d.ts

@@ -78,7 +78,11 @@ export interface BotDaemonDeps {
      */
     bootout?: "inline" | "detached";
     /** Injectable detached spawn, so tests never reach the real service manager. */
-    spawnDetached?: (command: string, args: string[]) => void;
+    spawnDetached?: (command: string, args: string[], options: {
+        detached: true;
+        windowsHide: true;
+        stdio: "ignore";
+    }) => void;
     /**
      * Called once the removal is durable (plist gone) but before the bootout —
      * the last moment a self-booting-out caller is still alive to say anything.

package/dist/lib/bot/daemon.js

@@ -149,8 +149,8 @@ function shQuote(value) {
     return `'${value.replace(/'/g, `'\\''`)}'`;
 }
 /** Detached `launchctl bootout` that outlives the process asking for it. */
-function defaultSpawnDetached(command, args) {
-    const child = spawn(command, args, { detached: true, stdio: "ignore" });
+function defaultSpawnDetached(command, args, options) {
+    const child = spawn(command, args, options);
     child.unref();
 }
 /**
@@ -165,7 +165,7 @@ function defaultSpawnDetached(command, args) {
 function bootoutLaunchd(p, deps) {
     const target = `${launchdDomain(deps.uid)}/${p.label}`;
     if (deps.bootout === "detached") {
-        (deps.spawnDetached ?? defaultSpawnDetached)("/bin/sh", ["-c", `sleep 1; exec launchctl bootout ${shQuote(target)}`]);
+        (deps.spawnDetached ?? defaultSpawnDetached)("/bin/sh", ["-c", `sleep 1; exec launchctl bootout ${shQuote(target)}`], { detached: true, windowsHide: true, stdio: "ignore" });
         return;
     }
     deps.launchctl?.(["bootout", target]);
@@ -336,7 +336,7 @@ export function healBotDaemonNodeFromJob(p, deps = {}) {
         `for d in 0 1 2 4; do sleep $d; launchctl bootstrap ${shQuote(domain)} ${shQuote(p.plistPath)} >/dev/null 2>&1 && exit 0; done`,
         "exit 1",
     ].join("; ");
-    (deps.spawnDetached ?? defaultSpawnDetached)("/bin/sh", ["-c", script]);
+    (deps.spawnDetached ?? defaultSpawnDetached)("/bin/sh", ["-c", script], { detached: true, windowsHide: true, stdio: "ignore" });
     return fileNeedsRewrite ? { from: file.nodeBinary, to: fileTarget } : { from: loaded, to: loadedTarget };
 }
 /** `program = …` of the loaded job (`launchctl print`), or null when not loaded or unknown. */

package/dist/lib/core-utils/soft-timeout.js

@@ -110,7 +110,7 @@ export function runSoftTimeout(parsed, deps = {}) {
         // orphaned grandchild (e.g. run-project's builder) keeps running after the
         // wrapper returns. stdio inherited so the command's stdin/stdout/stderr —
         // including piped or interactive input — pass through unchanged.
-        const child = spawnFn(command[0], command.slice(1), { stdio: "inherit", detached: true });
+        const child = spawnFn(command[0], command.slice(1), { stdio: "inherit", detached: true, windowsHide: true });
         let capped = false;
         let ticks = 0;
         // Signal the child's process group when we can (detached leader), else the