@indigoai-us/hq-cli 5.301.0 → 5.303.0

package/dist/commands/rescue.js

@@ -53,38 +53,48 @@ function ghHeaders(token) {
         headers.Authorization = `Bearer ${token}`;
     return headers;
 }
+// Thirty seconds gives GitHub time to respond while keeping the recovery command bounded.
+const GITHUB_REQUEST_TIMEOUT_MS = 30_000;
+async function githubJsonRequest(url, token) {
+    const signal = AbortSignal.timeout(GITHUB_REQUEST_TIMEOUT_MS);
+    try {
+        const response = await fetch(url, { headers: ghHeaders(token), signal });
+        if (!response.ok)
+            return { response };
+        const body = (await response.json());
+        return { response, body };
+    }
+    catch (error) {
+        if (signal.aborted)
+            throw new Error('GitHub request timed out', { cause: error });
+        throw error;
+    }
+}
 /** Latest release tag for a repo, e.g. `v12.3.0`. Throws on failure. */
-async function getLatestReleaseTag(repo, token) {
-    const res = await fetch(`https://api.github.com/repos/${repo}/releases/latest`, {
-        headers: ghHeaders(token),
-    });
-    if (!res.ok) {
-        throw new Error(`GitHub releases/latest for ${repo}: HTTP ${res.status}`);
+export async function getLatestReleaseTag(repo, token) {
+    const { response, body } = await githubJsonRequest(`https://api.github.com/repos/${repo}/releases/latest`, token);
+    if (!response.ok) {
+        throw new Error(`GitHub releases/latest for ${repo}: HTTP ${response.status}`);
     }
-    const body = (await res.json());
-    if (!body.tag_name)
+    if (!body?.tag_name)
         throw new Error(`no tag_name in latest release for ${repo}`);
     return body.tag_name;
 }
 /** Resolve a tag to its commit SHA, dereferencing annotated tags. */
-async function resolveTagSha(repo, tag, token) {
-    const refRes = await fetch(`https://api.github.com/repos/${repo}/git/ref/tags/${encodeURIComponent(tag)}`, { headers: ghHeaders(token) });
+export async function resolveTagSha(repo, tag, token) {
+    const { response: refRes, body: ref } = await githubJsonRequest(`https://api.github.com/repos/${repo}/git/ref/tags/${encodeURIComponent(tag)}`, token);
     if (!refRes.ok)
         throw new Error(`git/ref/tags/${tag} for ${repo}: HTTP ${refRes.status}`);
-    const ref = (await refRes.json());
-    const obj = ref.object;
+    const obj = ref?.object;
     if (!obj?.sha)
         throw new Error(`no object.sha for tag ${tag} in ${repo}`);
     if (obj.type !== 'tag')
         return obj.sha; // lightweight tag → already a commit
     // Annotated tag → dereference to the commit it points at.
-    const tagRes = await fetch(`https://api.github.com/repos/${repo}/git/tags/${obj.sha}`, {
-        headers: ghHeaders(token),
-    });
+    const { response: tagRes, body: annotated } = await githubJsonRequest(`https://api.github.com/repos/${repo}/git/tags/${obj.sha}`, token);
     if (!tagRes.ok)
         throw new Error(`git/tags/${obj.sha} for ${repo}: HTTP ${tagRes.status}`);
-    const annotated = (await tagRes.json());
-    if (!annotated.object?.sha)
+    if (!annotated?.object?.sha)
         throw new Error(`annotated tag ${tag} has no target sha`);
     return annotated.object.sha;
 }

package/dist/lib/agent-kit/fallback.d.ts

@@ -37,6 +37,7 @@ export declare function stopFallback(paths: Pick<AgentKitPaths, "agentDir">, kil
 export interface DetachedSpawn {
     (cmd: string, args: string[], opts: {
         detached: true;
+        windowsHide: true;
         stdio: ["ignore", number, number];
         env: NodeJS.ProcessEnv;
         cwd: string;

package/dist/lib/agent-kit/fallback.js

@@ -113,6 +113,7 @@ export function startFallback(paths, host, deps = {}) {
     try {
         const child = doSpawn(cmd, args, {
             detached: true,
+            windowsHide: true,
             stdio: ["ignore", fd, fd],
             env: { ...(deps.env ?? process.env), HOME: host.home, ...kitServiceEnv(paths) },
             cwd: paths.agentDir,

package/dist/lib/bot/cli-update.d.ts

@@ -35,16 +35,8 @@ import type { BotLogger } from "./log.js";
 export declare const CLI_UPDATE_RESTART_EXIT_CODE = 75;
 /** How often the installed package.json is read. */
 export declare const CLI_UPDATE_CHECK_INTERVAL_MS = 60000;
-/** Consecutive checks that must agree on the new version before acting. */
-export declare const CLI_UPDATE_CONFIRMATIONS = 2;
-/** At most this many update restarts per window, whatever the versions. */
-export declare const CLI_UPDATE_RESTART_LIMIT = 4;
-export declare const CLI_UPDATE_RESTART_WINDOW_MS: number;
-/** A restart that came back on the old version blocks that target this long. */
-export declare const CLI_UPDATE_NOT_CONVERGED_COOLDOWN_MS: number;
 /** Set to "1" to turn the watcher off (development runs). */
 export declare const CLI_UPDATE_DISABLE_ENV = "HQ_BOT_NO_CLI_UPDATE_RESTART";
-export declare const CLI_UPDATE_LEDGER_FILE = "cli-update.json";
 export type InstalledCliRead = {
     ok: true;
     version: string;

package/dist/lib/bot/cli-update.js

@@ -42,15 +42,15 @@ export const CLI_UPDATE_RESTART_EXIT_CODE = 75;
 /** How often the installed package.json is read. */
 export const CLI_UPDATE_CHECK_INTERVAL_MS = 60_000;
 /** Consecutive checks that must agree on the new version before acting. */
-export const CLI_UPDATE_CONFIRMATIONS = 2;
+const CLI_UPDATE_CONFIRMATIONS = 2;
 /** At most this many update restarts per window, whatever the versions. */
-export const CLI_UPDATE_RESTART_LIMIT = 4;
-export const CLI_UPDATE_RESTART_WINDOW_MS = 60 * 60_000;
+const CLI_UPDATE_RESTART_LIMIT = 4;
+const CLI_UPDATE_RESTART_WINDOW_MS = 60 * 60_000;
 /** A restart that came back on the old version blocks that target this long. */
-export const CLI_UPDATE_NOT_CONVERGED_COOLDOWN_MS = 6 * 60 * 60_000;
+const CLI_UPDATE_NOT_CONVERGED_COOLDOWN_MS = 6 * 60 * 60_000;
 /** Set to "1" to turn the watcher off (development runs). */
 export const CLI_UPDATE_DISABLE_ENV = "HQ_BOT_NO_CLI_UPDATE_RESTART";
-export const CLI_UPDATE_LEDGER_FILE = "cli-update.json";
+const CLI_UPDATE_LEDGER_FILE = "cli-update.json";
 /**
  * The hq-cli version installed behind `entry`, resolved the way the next launch
  * of the same command line will resolve it: follow the symlinks now (a pnpm or

package/dist/lib/bot/daemon.d.ts

@@ -78,7 +78,11 @@ export interface BotDaemonDeps {
      */
     bootout?: "inline" | "detached";
     /** Injectable detached spawn, so tests never reach the real service manager. */
-    spawnDetached?: (command: string, args: string[]) => void;
+    spawnDetached?: (command: string, args: string[], options: {
+        detached: true;
+        windowsHide: true;
+        stdio: "ignore";
+    }) => void;
     /**
      * Called once the removal is durable (plist gone) but before the bootout —
      * the last moment a self-booting-out caller is still alive to say anything.

package/dist/lib/bot/daemon.js

@@ -149,8 +149,8 @@ function shQuote(value) {
     return `'${value.replace(/'/g, `'\\''`)}'`;
 }
 /** Detached `launchctl bootout` that outlives the process asking for it. */
-function defaultSpawnDetached(command, args) {
-    const child = spawn(command, args, { detached: true, stdio: "ignore" });
+function defaultSpawnDetached(command, args, options) {
+    const child = spawn(command, args, options);
     child.unref();
 }
 /**
@@ -165,7 +165,7 @@ function defaultSpawnDetached(command, args) {
 function bootoutLaunchd(p, deps) {
     const target = `${launchdDomain(deps.uid)}/${p.label}`;
     if (deps.bootout === "detached") {
-        (deps.spawnDetached ?? defaultSpawnDetached)("/bin/sh", ["-c", `sleep 1; exec launchctl bootout ${shQuote(target)}`]);
+        (deps.spawnDetached ?? defaultSpawnDetached)("/bin/sh", ["-c", `sleep 1; exec launchctl bootout ${shQuote(target)}`], { detached: true, windowsHide: true, stdio: "ignore" });
         return;
     }
     deps.launchctl?.(["bootout", target]);
@@ -336,7 +336,7 @@ export function healBotDaemonNodeFromJob(p, deps = {}) {
         `for d in 0 1 2 4; do sleep $d; launchctl bootstrap ${shQuote(domain)} ${shQuote(p.plistPath)} >/dev/null 2>&1 && exit 0; done`,
         "exit 1",
     ].join("; ");
-    (deps.spawnDetached ?? defaultSpawnDetached)("/bin/sh", ["-c", script]);
+    (deps.spawnDetached ?? defaultSpawnDetached)("/bin/sh", ["-c", script], { detached: true, windowsHide: true, stdio: "ignore" });
     return fileNeedsRewrite ? { from: file.nodeBinary, to: fileTarget } : { from: loaded, to: loadedTarget };
 }
 /** `program = …` of the loaded job (`launchctl print`), or null when not loaded or unknown. */

package/dist/lib/bot/local-jobs.d.ts

@@ -18,9 +18,7 @@
  * - A fire is recorded before it is handed over, so a crash never runs the
  *   same due time twice.
  */
-import { type BotApi, type BotJobRecord, type InboxItem, type JobRunCompletion } from "./api.js";
-export declare const LOCAL_JOBS_FILE = "jobs.json";
-export declare const LOCAL_JOB_MESSAGE_PREFIX = "localjob-";
+import { type BotApi, type InboxItem } from "./api.js";
 export interface LocalJob {
     jobId: string;
     prompt: string;
@@ -40,9 +38,7 @@ export interface LocalJob {
     lastStatus?: string;
     runCount?: number;
 }
-export declare function localJobsPath(dir: string): string;
 export declare function readLocalJobs(dir: string): LocalJob[];
-export declare function writeLocalJobs(dir: string, jobs: LocalJob[]): void;
 /**
  * Run a read-change-write of `jobs.json` under an exclusive lock. The running
  * bot (firing, finishing) and `hq bot jobs` (add, remove) are separate
@@ -67,40 +63,24 @@ export interface CronMatcher {
 export declare function toStandardCron(expr: string): string | null;
 /** Parse a standard 5-field cron, or null when it is not one. */
 export declare function parseCron(expr: string): CronMatcher | null;
-export declare function cronMatches(cron: CronMatcher, date: Date, timeZone: string): boolean;
-/**
- * The newest time this job was due, at or before `now` and after the last one
- * already fired. Null when nothing new is due.
- */
-/** `rate(5 minutes)` / `rate(1 hour)` / `rate(2 days)` as milliseconds. */
-export declare function rateIntervalMs(expr: string): number | null;
-export declare function isRunnableSchedule(expr: string): boolean;
 export declare function latestDueFire(job: LocalJob, now: Date): Date | null;
 /** The next time this job is due after `now`, within a week; null otherwise. */
 export declare function nextDueFire(job: LocalJob, now: Date): Date | null;
-export declare function toJobRecord(job: LocalJob, now?: Date): BotJobRecord;
 export declare function addLocalJob(dir: string, input: {
     prompt: string;
     cron: string;
     timezone: string;
     context?: Record<string, unknown>;
 }, now?: Date): LocalJob;
-/** Remove a job. Returns false when the bot has no job with that id. */
-export declare function removeLocalJob(dir: string, jobId: string): boolean;
 /** Forget the once-per-minute check (tests, and a bot restarted in-process). */
 export declare function resetLocalJobChecks(): void;
 export declare function takeDueLocalJobRuns(dir: string, now?: Date): InboxItem[];
-export declare function isLocalJobMessage(messageId: string): boolean;
-/** Record how a local run finished and release the job for its next fire. */
-export declare function finishLocalJobRun(dir: string, jobId: string, messageId: string, completion: Pick<JobRunCompletion, "status">, now?: Date): void;
 /**
  * The bot's cloud client, with its scheduled runs answered on this computer:
  * due local jobs join the inbox, and their ack and completion are recorded
  * locally instead of being sent to the cloud.
  */
 export declare function withLocalJobs(api: BotApi, dir: string, clock?: () => Date): BotApi;
-/** The most jobs one bot may hold (the same cap the cloud uses). */
-export declare const MAX_LOCAL_JOBS = 25;
 /**
  * `hq bot jobs` against the bot's own folder: the same three calls the cloud
  * client offers, answered from `jobs.json`.

package/dist/lib/bot/local-jobs.js

@@ -22,15 +22,15 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import { randomUUID } from "node:crypto";
 import { BotApiError } from "./api.js";
-export const LOCAL_JOBS_FILE = "jobs.json";
-export const LOCAL_JOB_MESSAGE_PREFIX = "localjob-";
+const LOCAL_JOBS_FILE = "jobs.json";
+const LOCAL_JOB_MESSAGE_PREFIX = "localjob-";
 /** How far back a missed fire is still looked for (one week). */
 const LOOKBACK_MINUTES = 7 * 24 * 60;
 /** A run that never reported back releases its job after this long. */
 const IN_FLIGHT_RELEASE_MS = 60 * 60 * 1000;
 /** A fire is "late" (a catch-up) once this long past its due time. */
 const STALE_AFTER_MS = 10 * 60 * 1000;
-export function localJobsPath(dir) {
+function localJobsPath(dir) {
     return path.join(dir, LOCAL_JOBS_FILE);
 }
 export function readLocalJobs(dir) {
@@ -42,7 +42,7 @@ export function readLocalJobs(dir) {
         return [];
     }
 }
-export function writeLocalJobs(dir, jobs) {
+function writeLocalJobs(dir, jobs) {
     const file = localJobsPath(dir);
     const tmp = `${file}.${process.pid}.tmp`;
     fs.writeFileSync(tmp, JSON.stringify({ v: 1, jobs }, null, 2));
@@ -210,7 +210,7 @@ function zonedParts(date, timeZone) {
         weekday: WEEKDAY[get("weekday")] ?? -1,
     };
 }
-export function cronMatches(cron, date, timeZone) {
+function cronMatches(cron, date, timeZone) {
     const t = zonedParts(date, timeZone);
     if (!cron.minutes.has(t.minute) || !cron.hours.has(t.hour) || !cron.months.has(t.month))
         return false;
@@ -226,7 +226,7 @@ export function cronMatches(cron, date, timeZone) {
  * already fired. Null when nothing new is due.
  */
 /** `rate(5 minutes)` / `rate(1 hour)` / `rate(2 days)` as milliseconds. */
-export function rateIntervalMs(expr) {
+function rateIntervalMs(expr) {
     const match = /^rate\((\d+)\s+(minute|minutes|hour|hours|day|days)\)$/.exec(expr.trim());
     if (!match)
         return null;
@@ -234,7 +234,7 @@ export function rateIntervalMs(expr) {
     const unit = match[2].startsWith("minute") ? 60_000 : match[2].startsWith("hour") ? 3_600_000 : 86_400_000;
     return n > 0 ? n * unit : null;
 }
-export function isRunnableSchedule(expr) {
+function isRunnableSchedule(expr) {
     return rateIntervalMs(expr) !== null || parseCron(expr) !== null;
 }
 export function latestDueFire(job, now) {
@@ -281,7 +281,7 @@ export function nextDueFire(job, now) {
     return null;
 }
 // ─── The job list (what `hq bot jobs` reads and writes) ──────────────────────
-export function toJobRecord(job, now = new Date()) {
+function toJobRecord(job, now = new Date()) {
     const next = nextDueFire(job, now);
     return {
         jobId: job.jobId,
@@ -311,7 +311,7 @@ export function addLocalJob(dir, input, now = new Date()) {
     return job;
 }
 /** Remove a job. Returns false when the bot has no job with that id. */
-export function removeLocalJob(dir, jobId) {
+function removeLocalJob(dir, jobId) {
     return withJobsLock(dir, () => {
         const jobs = readLocalJobs(dir);
         const next = jobs.filter((job) => job.jobId !== jobId);
@@ -375,11 +375,11 @@ export function takeDueLocalJobRuns(dir, now = new Date()) {
         return items;
     });
 }
-export function isLocalJobMessage(messageId) {
+function isLocalJobMessage(messageId) {
     return messageId.startsWith(LOCAL_JOB_MESSAGE_PREFIX);
 }
 /** Record how a local run finished and release the job for its next fire. */
-export function finishLocalJobRun(dir, jobId, messageId, completion, now = new Date()) {
+function finishLocalJobRun(dir, jobId, messageId, completion, now = new Date()) {
     withJobsLock(dir, () => {
         const jobs = readLocalJobs(dir);
         let changed = false;
@@ -428,7 +428,7 @@ export function withLocalJobs(api, dir, clock = () => new Date()) {
     return local;
 }
 /** The most jobs one bot may hold (the same cap the cloud uses). */
-export const MAX_LOCAL_JOBS = 25;
+const MAX_LOCAL_JOBS = 25;
 /**
  * `hq bot jobs` against the bot's own folder: the same three calls the cloud
  * client offers, answered from `jobs.json`.

package/dist/lib/core-utils/soft-timeout.js

@@ -110,7 +110,7 @@ export function runSoftTimeout(parsed, deps = {}) {
         // orphaned grandchild (e.g. run-project's builder) keeps running after the
         // wrapper returns. stdio inherited so the command's stdin/stdout/stderr —
         // including piped or interactive input — pass through unchanged.
-        const child = spawnFn(command[0], command.slice(1), { stdio: "inherit", detached: true });
+        const child = spawnFn(command[0], command.slice(1), { stdio: "inherit", detached: true, windowsHide: true });
         let capped = false;
         let ticks = 0;
         // Signal the child's process group when we can (detached leader), else the

package/dist/lib/daemon/config.d.ts

@@ -23,7 +23,6 @@ export interface DaemonConfig {
 }
 export type SyncOwner = "daemon" | "desktop-app";
 export declare function effectiveSyncOwner(config: Pick<DaemonConfig, "syncOwner">, machineType: MachineType): SyncOwner;
-export declare function emptyDaemonConfig(): DaemonConfig;
 export declare function readDaemonConfig(file: string): DaemonConfig;
 export declare function writeDaemonConfig(file: string, config: DaemonConfig): void;
 /**

package/dist/lib/daemon/config.js

@@ -13,7 +13,7 @@ import { ensurePrivateDir } from "./paths.js";
 export function effectiveSyncOwner(config, machineType) {
     return config.syncOwner ?? (machineType === "desktop" ? "desktop-app" : "daemon");
 }
-export function emptyDaemonConfig() {
+function emptyDaemonConfig() {
     return { version: 1, syncPaused: false, enable: [], disable: [] };
 }
 function stringList(value) {

package/dist/lib/deploy-apps.d.ts

@@ -0,0 +1,13 @@
+/** Pagination for org-scoped hq-deploy app listings. */
+export declare const MAX_DEPLOY_APPS_PAGES = 100;
+export interface DeployAppsPage<T> {
+    apps?: unknown;
+    nextCursor?: unknown;
+}
+/**
+ * Collect every page from GET /api/apps. Older hq-deploy versions omit
+ * nextCursor, which remains a valid single-page response. The cap prevents a
+ * bad cursor response from creating an unbounded CLI request loop.
+ */
+export declare function listDeployApps<T>(fetchPage: (cursor?: string) => Promise<DeployAppsPage<T>>): Promise<T[]>;
+//# sourceMappingURL=deploy-apps.d.ts.map

package/dist/lib/deploy-apps.js

@@ -0,0 +1,24 @@
+/** Pagination for org-scoped hq-deploy app listings. */
+export const MAX_DEPLOY_APPS_PAGES = 100;
+/**
+ * Collect every page from GET /api/apps. Older hq-deploy versions omit
+ * nextCursor, which remains a valid single-page response. The cap prevents a
+ * bad cursor response from creating an unbounded CLI request loop.
+ */
+export async function listDeployApps(fetchPage) {
+    const apps = [];
+    let cursor;
+    for (let page = 0; page < MAX_DEPLOY_APPS_PAGES; page += 1) {
+        const result = await fetchPage(cursor);
+        if (Array.isArray(result.apps))
+            apps.push(...result.apps);
+        if (result.nextCursor === undefined || result.nextCursor === null)
+            return apps;
+        if (typeof result.nextCursor !== "string" || result.nextCursor.length === 0) {
+            throw new Error("hq-deploy returned an invalid apps-list cursor.");
+        }
+        cursor = result.nextCursor;
+    }
+    throw new Error(`hq-deploy apps list exceeded the ${MAX_DEPLOY_APPS_PAGES}-page safety cap.`);
+}
+//# sourceMappingURL=deploy-apps.js.map

package/dist/lib/index-render/projects.js

@@ -1,16 +1,92 @@
+import * as fs from "fs";
 import * as path from "path";
-import { basename, date, exists, immediateEntries, isHidden, log, projectStatus, readJson, sanitize, truncate, write } from "./shared.js";
+import { at, basename, date, exists, extractKeepFences, generatedFingerprint, generatedStamp, hasUnclosedKeepMarker, immediateEntries, isHidden, log, looksAutoGenerated, projectStatus, readJson, readText, sanitize, stampGenerated, titleize, truncate, write, } from "./shared.js";
+function composeCompanyProjectsIndex(raw, existing) {
+    const stamped = stampGenerated(raw);
+    const fences = existing === undefined ? "" : extractKeepFences(existing);
+    if (!fences)
+        return stamped;
+    return `${stamped.replace(/\n+$/, "\n")}\n${fences}\n`;
+}
+function shouldOverwriteCompanyProjectsIndex(context, existing, next) {
+    if (existing === undefined)
+        return "write";
+    if (context.force)
+        return "write";
+    if (hasUnclosedKeepMarker(existing))
+        return "skip";
+    const stored = generatedStamp(existing);
+    if (stored && stored === generatedFingerprint(existing))
+        return "write";
+    if (stored)
+        return "refuse";
+    if (looksAutoGenerated(existing))
+        return "write";
+    if (generatedFingerprint(existing) === generatedFingerprint(next))
+        return "write";
+    return "refuse";
+}
+function renderCompanyProjects(context, company, projectRoot) {
+    const written = [];
+    const lines = [`# ${titleize(company)} Projects`, "", `> Auto-generated. Updated: ${date(context.now)}`, "", "| Project | Status | Description |", "|---------|--------|-------------|"];
+    for (const directory of immediateEntries(context.root, projectRoot, "dir")) {
+        const name = basename(directory);
+        if (name.startsWith("_") || isHidden(name))
+            continue;
+        const prd = path.join(directory, "prd.json");
+        const parsed = readJson(prd);
+        const description = truncate(sanitize(typeof parsed?.description === "string" ? parsed.description : ""), 110) || "—";
+        lines.push(`| \`${name}\` | ${projectStatus(context.root, name, prd, "active", prd)} | ${description} |`);
+    }
+    lines.push("");
+    const output = `${projectRoot}/INDEX.md`;
+    const existing = readText(at(context.root, output));
+    // An unreadable existing file is not an invitation to replace it.
+    if (existing === undefined && fs.existsSync(at(context.root, output))) {
+        context.refused?.push(output);
+        log(context, `rebuild-projects-index: refused to overwrite unreadable ${output}`);
+        return written;
+    }
+    const next = composeCompanyProjectsIndex(lines.join("\n"), existing);
+    const decision = shouldOverwriteCompanyProjectsIndex(context, existing, next);
+    if (decision === "skip") {
+        log(context, `rebuild-projects-index: skipped ${output} (<!-- hq:keep -->)`);
+        return written;
+    }
+    if (decision === "refuse") {
+        context.refused?.push(output);
+        log(context, `rebuild-projects-index: refused ${output} (hand-written or edited; differs from last generated output)`);
+        log(context, "Re-run with --accept to overwrite, or add <!-- hq:keep --> to opt out.");
+        return written;
+    }
+    write(context, output, next);
+    written.push(output);
+    log(context, `rebuild-projects-index: wrote ${output}`);
+    return written;
+}
 export function renderProjects(context) {
+    const written = [];
+    const companyDirectories = immediateEntries(context.root, "companies", "dir");
+    for (const companyDirectory of companyDirectories) {
+        const company = basename(companyDirectory);
+        if (company.startsWith("_") || isHidden(company))
+            continue;
+        const projectRoot = ["companies", company, "projects"].join("/");
+        if (immediateEntries(context.root, projectRoot, "dir").length > 0 || fs.existsSync(at(context.root, projectRoot))) {
+            written.push(...renderCompanyProjects(context, company, projectRoot));
+        }
+    }
     const base = "personal/projects";
     if (!exists(context.root, base)) {
         log(context, "rebuild-projects-index: personal/projects/ missing, skipping");
-        return { written: [] };
+        return { written };
     }
     const lines = ["# Projects", "", `> Auto-generated. Updated: ${date(context.now)}`, "", "Personal/HQ projects only. Company-scoped projects live in `companies/{co}/projects/`.", "", "## Company Project Directories", "", "| Company | Path |", "|---------|------|"];
-    for (const companyDirectory of immediateEntries(context.root, "companies", "dir")) {
+    for (const companyDirectory of companyDirectories) {
         const company = basename(companyDirectory);
-        if (!company.startsWith("_") && !isHidden(company) && exists(context.root, `companies/${company}/projects`))
+        if (!company.startsWith("_") && !isHidden(company) && fs.existsSync(at(context.root, ["companies", company, "projects"].join("/")))) {
             lines.push(`| ${company} | \`companies/${company}/projects/\` |`);
+        }
     }
     lines.push("", "## Personal/HQ Projects", "", "Projects here are HQ infrastructure or cross-company tools.", "", "| Project | Stories | Status | Description |", "|---------|---------|--------|-------------|");
     const projects = immediateEntries(context.root, base, "dir");
@@ -27,7 +103,8 @@ export function renderProjects(context) {
     lines.push("");
     const output = `${base}/INDEX.md`;
     write(context, output, lines.join("\n"));
+    written.push(output);
     log(context, `rebuild-projects-index: wrote ${output} (${projects.length} HQ project(s))`);
-    return { written: [output] };
+    return { written };
 }
 //# sourceMappingURL=projects.js.map

package/dist/lib/lanes/delivery.d.ts

@@ -41,8 +41,8 @@ export declare function sessionNotPortableMessage(provider: LaneProvider): strin
  * is not terminal (spec §6.7) and nothing stopped the lane deliberately.
  *
  * Refused by `hq lanes message`:
- * `awaiting_input` has its own path, `hq lanes questions answer`, and the
- * reconcile pass resumes it once every question is answered. `killed` and
+ * `awaiting_input` has its own path, `hq lanes questions answer`, while a
+ * senior may resume it when no answerable pending question remains. `killed` and
  * `cancelled` were stopped on purpose by the operator; a message must not
  * silently restart them. `failed` means the run ended without an envelope or
  * never started; only the lane's senior can explicitly recover it with
@@ -66,6 +66,8 @@ export type ResumeCommandState = (typeof RESUME_COMMAND_STATES)[number];
 export declare function isResumeCommandState(state: LaneState): state is ResumeCommandState;
 export declare const LANE_DELIVERY_MECHANISMS: readonly ["dropbox", "resume", "none"];
 export type LaneDeliveryMechanism = (typeof LANE_DELIVERY_MECHANISMS)[number];
+/** Additional presentation-only result used by `hq lanes show`. */
+export type LaneShowDeliveryMechanism = LaneDeliveryMechanism | "questions";
 export type DeliveryLane = Pick<LaneRecord, "state" | "provider" | "provider_session_id" | "terminal_reason" | "envelope_repair">;
 /** Only the terminal result of a failed automatic envelope repair is recoverable. */
 export declare function isFailedEnvelopeRepairLane(lane: DeliveryLane): boolean;
@@ -139,7 +141,8 @@ export type LaunchTrigger = {
     /** `hq lanes resume`: the operator's explicit opt-in to continue an exited lane. */
     kind: "resume";
     /** Lane state at the moment of the command; recorded as `last_resume.resumed_from`. */
-    from: ResumeCommandState | "failed";
+    from: ResumeCommandState | "failed" | "awaiting_input";
+    allowAwaitingInput?: true;
     fromFailed?: true;
     /** Senior that authorized a failed-lane resume, rechecked at the claim CAS. */
     expectedSenior?: SeniorRef;
@@ -158,6 +161,7 @@ export type LaunchPlan = {
  */
 export declare function resumeCommandRefusal(lane: DeliveryLane, options?: {
     allowFailed?: boolean;
+    allowAwaitingInput?: boolean;
 }): {
     error: "lane_not_resumable" | "resume_unsupported" | "no_provider_session";
     message: string;

package/dist/lib/lanes/delivery.js

@@ -61,8 +61,8 @@ export function sessionNotPortableMessage(provider) {
  * is not terminal (spec §6.7) and nothing stopped the lane deliberately.
  *
  * Refused by `hq lanes message`:
- * `awaiting_input` has its own path, `hq lanes questions answer`, and the
- * reconcile pass resumes it once every question is answered. `killed` and
+ * `awaiting_input` has its own path, `hq lanes questions answer`, while a
+ * senior may resume it when no answerable pending question remains. `killed` and
  * `cancelled` were stopped on purpose by the operator; a message must not
  * silently restart them. `failed` means the run ended without an envelope or
  * never started; only the lane's senior can explicitly recover it with
@@ -104,7 +104,7 @@ export function laneDeliveryMechanism(lane) {
     if (lane.state === "queued" || lane.state === "running")
         return "dropbox";
     if (providerSupportsSessionResume(lane.provider) &&
-        (isResumableLaneState(lane.state) || isFailedEnvelopeRepairLane(lane)) &&
+        (isResumableLaneState(lane.state) || lane.state === "awaiting_input" || isFailedEnvelopeRepairLane(lane)) &&
         hasRecordedSessionId(lane)) {
         return "resume";
     }
@@ -348,6 +348,7 @@ export const LAUNCH_TRIGGERS = ["admit", "answered_questions", "message", "resum
  */
 export function resumeCommandRefusal(lane, options = {}) {
     if (!isResumeCommandState(lane.state) &&
+        !(options.allowAwaitingInput === true && lane.state === "awaiting_input") &&
         !isFailedEnvelopeRepairLane(lane) &&
         !(options.allowFailed === true && lane.state === "failed")) {
         return {
@@ -398,7 +399,10 @@ export function planLaneLaunch(lane, trigger) {
             return { mode: "resume", session_id: lane.provider_session_id };
         }
         case "resume": {
-            const refusal = resumeCommandRefusal(lane, { allowFailed: trigger.fromFailed === true });
+            const refusal = resumeCommandRefusal(lane, {
+                allowFailed: trigger.fromFailed === true,
+                allowAwaitingInput: trigger.allowAwaitingInput === true,
+            });
             if (refusal !== null || !hasRecordedSessionId(lane)) {
                 throw new LanesError(refusal?.error ?? "no_provider_session", refusal?.message ?? `Lane is ${lane.state} and has no recorded provider session`, { state: lane.state, provider: lane.provider });
             }
@@ -419,11 +423,17 @@ export function claimableStatesFor(trigger, lane) {
         case "answered_questions":
             return ["awaiting_input"];
         case "message":
-            return envelopeRepairFailed ? [...RESUMABLE_LANE_STATES, "failed"] : RESUMABLE_LANE_STATES;
-        case "resume":
-            return trigger.fromFailed === true || envelopeRepairFailed
+            return envelopeRepairFailed
+                ? [...RESUMABLE_LANE_STATES, "failed"]
+                : lane?.state === "awaiting_input"
+                    ? [...RESUMABLE_LANE_STATES, "awaiting_input"]
+                    : RESUMABLE_LANE_STATES;
+        case "resume": {
+            const states = trigger.fromFailed === true || envelopeRepairFailed
                 ? [...RESUME_COMMAND_STATES, "failed"]
-                : RESUME_COMMAND_STATES;
+                : [...RESUME_COMMAND_STATES];
+            return lane?.state === "awaiting_input" ? [...states, "awaiting_input"] : states;
+        }
         default: {
             const _exhaustive = trigger;
             return _exhaustive;

package/dist/lib/lanes/index.d.ts

@@ -64,7 +64,7 @@ export type { RegistryWorkerEntry, ResolvedLaneWorker, WorkerTenancy, WorkerYaml
 export { bodyStoreForLane, envelopeQuestionId, parseQuestionBodyStore, questionBodyAbsPath, questionBodyRef, raiseEnvelopeQuestions, raiseLaneQuestion, sha256Text, writeQuestionBody, } from "./questions.js";
 export type { QuestionBody, RaiseLaneQuestionInput } from "./questions.js";
 export { LANE_DELIVERY_MECHANISMS, LAUNCH_TRIGGERS, PROVIDER_SESSION_RESUME, PROVIDER_SESSION_PORTABLE, providerSessionPortable, sessionNotPortableMessage, parseGrokResultOutput, RESUMABLE_LANE_STATES, RESUME_COMMAND_STATES, SESSION_ID_ABSENT_REASONS, claimableStatesFor, deliveryRefusalReason, hasRecordedSessionId, isResumableLaneState, isResumeCommandState, laneDeliveryMechanism, parseClaudeResultOutput, parseCodexEventOutput, parseWorkerRunOutput, planLaneLaunch, providerSupportsSessionResume, readWorkerRunResult, resumeCommandRefusal, } from "./delivery.js";
-export type { DeliveryLane, LaneDeliveryMechanism, LaunchPlan, LaunchTrigger, LaunchTriggerKind, ResumableLaneState, ResumeCommandState, SessionIdAbsentReason, WorkerRunResult, } from "./delivery.js";
+export type { DeliveryLane, LaneDeliveryMechanism, LaneShowDeliveryMechanism, LaunchPlan, LaunchTrigger, LaunchTriggerKind, ResumableLaneState, ResumeCommandState, SessionIdAbsentReason, WorkerRunResult, } from "./delivery.js";
 export { DROPBOX_DIR, INBOX_NAME, appendDropboxMessage, answerDropboxMessage, drainDropbox, dropboxDir, dropboxInboxPath, formatOperatorInstruction, hookAdditionalContextJson, laneAcceptsDropboxDelivery, laneAcceptsOperatorMessage, laneIdForAnswerDelivery, operatorMessageRefusalReason, readToolActivity, recordToolActivity, runDrainHook, toolActivityPath, TOOL_ACTIVITY_NAME, } from "./dropbox.js";
 export type { DrainDeps, DrainHookResult, DropboxMessage, ToolActivityRecord, } from "./dropbox.js";
 export { DRAIN_HOOK_BASENAME, DRAIN_HOOK_REGISTRATION_KINDS, DRAIN_HOOK_TIMEOUT_SECONDS, PROVIDER_REGISTRATION_KIND, drainHookCommand, drainHookRegistrationPath, drainHookShPath, installDrainHook, lanesHookAssetsDir, mergeClaudeSettingsHook, mergeCodexConfigHook, probeDrainHookRegistration, renderDrainHookJson, } from "./hooks-install.js";