@indigoai-us/hq-cli 5.309.0 → 5.309.1

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## [Unreleased]
 
+## [5.309.1] — 2026-10-01
+- Fixed `hq agents rm` to remove external agents through revoke rather than the hosted-agent teardown path.
+
+- Wait for asynchronous integration approvals to reach a terminal queue state and report pending work accurately.
+
+- Add privacy-safe qmd exit diagnostics to Sentry reports.
+
+- `hq files delete` help now explains exact-key and wildcard-prefix matching.
+
+- Move directly controlled Linux CI checks to ARM runners where their tools support ARM.
+- Lead autopilot resolves a lead's company through its project when the lane record does not carry a company, and skips project paths registered to a different company.
+- Install-tree recovery errors now report bounded sibling, target, version-gate phase, and updater-liveness enums.
+
 ## [5.309.0] — 2026-10-01
 - `hq lanes autopilot run` now evaluates leads based on lane ownership rather than a host label, and reports registered leads assigned to another host as skipped.
 - Allow non-overlapping story-prefix teams to share a project in lane checks and reports.

package/dist/command-catalog.generated.d.ts

@@ -1734,7 +1734,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "delete";
-        readonly description: "Delete vault objects under a prefix (bounded + scoped). Always previews the exact count first; prompts for confirmation unless --yes. Use --personal to target your own personal vault instead of a company.";
+        readonly description: "Delete vault objects by exact key or bounded prefix. A trailing slash expands recursively; use * for an explicit wildcard prefix. Always previews the exact count first; prompts for confirmation unless --yes. Use --personal to target your own personal vault instead of a company.";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly usage: "[options] <prefix>";
@@ -3492,6 +3492,9 @@ export declare const COMMAND_CATALOG: readonly [{
         }, {
             readonly flags: "--json";
             readonly description: "Machine-readable output";
+        }, {
+            readonly flags: "--history";
+            readonly description: "Include recently decided calls";
         }];
         readonly subcommands: readonly [];
     }, {

package/dist/command-catalog.generated.js

@@ -2213,7 +2213,7 @@ export const COMMAND_CATALOG = [
             },
             {
                 "name": "delete",
-                "description": "Delete vault objects under a prefix (bounded + scoped). Always previews the exact count first; prompts for confirmation unless --yes. Use --personal to target your own personal vault instead of a company.",
+                "description": "Delete vault objects by exact key or bounded prefix. A trailing slash expands recursively; use * for an explicit wildcard prefix. Always previews the exact count first; prompts for confirmation unless --yes. Use --personal to target your own personal vault instead of a company.",
                 "aliases": [],
                 "hidden": false,
                 "usage": "[options] <prefix>",
@@ -4500,6 +4500,10 @@ export const COMMAND_CATALOG = [
                     {
                         "flags": "--json",
                         "description": "Machine-readable output"
+                    },
+                    {
+                        "flags": "--history",
+                        "description": "Include recently decided calls"
                     }
                 ],
                 "subcommands": []

package/dist/commands/agents.js

@@ -1946,6 +1946,12 @@ export function registerAgentsCommand(program) {
         }
         try {
             const token = (await resolveVaultCredential()).token;
+            const status = await getAgentStatus(token, agentUid);
+            if (recordValue(status.agent)?.runtimeKind === "external") {
+                await revokeAgent(token, agentUid, true);
+                console.log(chalk.green(`Revoked and removed external agent ${agentUid}.`));
+                return;
+            }
             const result = await deprovisionAgent(token, agentUid, opts.confirmDestroyAgentsV2);
             if (result.terminal === false) {
                 console.log(chalk.yellow(`Deprovision in progress for agent ${agentUid} (not yet fully torn down — re-run to continue).`));

package/dist/commands/core-checkpoint-gate-setting.d.ts

@@ -18,16 +18,6 @@
  */
 import { Command } from "commander";
 export declare const CHECKPOINT_GATE_SETTING_FLAG = "checkpoint.gate.company-setting";
-/** The refresh gives up after this long; the gate keeps the cached value. */
-export declare const CHECKPOINT_GATE_REFRESH_TIMEOUT_MS = 3000;
-export declare function assertCompanySlug(slug: string): void;
-export interface CheckpointGateCacheEntry {
-    company: string;
-    checkpointGateEnabled: boolean;
-    /** Unix seconds. The gate treats an entry older than 600 s as stale. */
-    fetched_at: number;
-}
-export declare function checkpointGateCacheDir(home?: string): string;
 export declare function checkpointGateCachePath(slug: string, home?: string): string;
 export type CheckpointGateRefreshOutcome = {
     status: "written";

package/dist/commands/core-checkpoint-gate-setting.js

@@ -25,15 +25,15 @@ import { readLanesRegistryFlag } from "../lib/lanes/registry-flag.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
 export const CHECKPOINT_GATE_SETTING_FLAG = "checkpoint.gate.company-setting";
 /** The refresh gives up after this long; the gate keeps the cached value. */
-export const CHECKPOINT_GATE_REFRESH_TIMEOUT_MS = 3_000;
+const CHECKPOINT_GATE_REFRESH_TIMEOUT_MS = 3_000;
 /** Same character set the gate script accepts; anything else is refused. */
 const SLUG_RE = /^[a-z0-9][a-z0-9-]*$/;
-export function assertCompanySlug(slug) {
+function assertCompanySlug(slug) {
     if (!SLUG_RE.test(slug) || slug === "personal") {
         throw new Error(`checkpoint-gate-setting: '${slug}' is not a company slug`);
     }
 }
-export function checkpointGateCacheDir(home = os.homedir()) {
+function checkpointGateCacheDir(home = os.homedir()) {
     return path.join(home, ".hq", "cache", "checkpoint-gate");
 }
 export function checkpointGateCachePath(slug, home = os.homedir()) {

package/dist/commands/core-ontology.d.ts

@@ -9,11 +9,7 @@
  */
 import { Command } from "commander";
 import { type FlagReader } from "../lib/checkpoint-ontology/plan.js";
-import { type AliasDrop } from "../lib/checkpoint-ontology/drop-aliases.js";
-import { type DeleteVaultKey, type ListedPair, type MergeCopiesReport } from "../lib/checkpoint-ontology/merge-copies.js";
-export declare const ONTOLOGY_PAYLOAD_FILE = "payload.json";
-/** The hq-flags read, scoped to the payload company. */
-export declare const registryFlagReader: FlagReader;
+import { type DeleteVaultKey, type MergeCopiesReport } from "../lib/checkpoint-ontology/merge-copies.js";
 export interface OntologyCommandDeps {
     readFlag?: FlagReader;
     now?: () => Date;
@@ -41,8 +37,6 @@ export interface MergeCopiesCommandOptions {
     json?: boolean;
 }
 export declare function mergeCopiesSummary(report: MergeCopiesReport): string;
-/** Reads a `--only` file: a JSON array of `{ copy, original }` company-relative paths. */
-export declare function readListedPairs(file: string): ListedPair[];
 /**
  * `hq core ontology merge-copies`: merge `<slug> <n>.md` copies into their
  * original (`--apply`), then delete merged copies from the vault
@@ -58,8 +52,6 @@ export declare function readListedPairs(file: string): ListedPair[];
  * which a person reviewed, instead of the pairs a finder produces.
  */
 export declare function runOntologyMergeCopies(hqRoot: string, slug: string | undefined, options: MergeCopiesCommandOptions, deps?: OntologyCommandDeps): Promise<string>;
-/** Reads a `drop-aliases --only` file: a JSON array of `{ entity, alias }`. */
-export declare function readAliasDrops(file: string): AliasDrop[];
 /**
  * `hq core ontology drop-aliases`: remove the reviewed `{ entity, alias }`
  * pairs in `--only` from entity files (`--apply`); without it only reports.

package/dist/commands/core-ontology.js

@@ -22,7 +22,7 @@ import { MERGE_COPIES_FLAG, MERGE_LISTED_PAIRS_FLAG, MERGE_REWRITE_REFS_FLAG, ME
 import { callDeleteEndpoint } from "./files.js";
 import { resolveVaultCredential } from "../utils/resolve-vault-credential.js";
 import { registerCoreOntologyNativeCommands } from "./core-ontology-native.js";
-export const ONTOLOGY_PAYLOAD_FILE = "payload.json";
+const ONTOLOGY_PAYLOAD_FILE = "payload.json";
 class OntologyUsageError extends Error {
 }
 function readPayload(runDir) {
@@ -49,7 +49,7 @@ function requireRunDir(runDir) {
     return resolved;
 }
 /** The hq-flags read, scoped to the payload company. */
-export const registryFlagReader = (flagKey, company) => readLanesRegistryFlag(flagKey, {
+const registryFlagReader = (flagKey, company) => readLanesRegistryFlag(flagKey, {
     company: company.cloudUid ? { slug: company.slug, uid: company.cloudUid } : null,
 });
 function companyBriefSuffix(brief) {
@@ -160,7 +160,7 @@ export function mergeCopiesSummary(report) {
     return lines.join("\n");
 }
 /** Reads a `--only` file: a JSON array of `{ copy, original }` company-relative paths. */
-export function readListedPairs(file) {
+function readListedPairs(file) {
     let parsed;
     try {
         parsed = JSON.parse(fs.readFileSync(file, "utf8"));
@@ -270,7 +270,7 @@ export async function runOntologyMergeCopies(hqRoot, slug, options, deps = {}) {
     return options.json ? JSON.stringify(report, null, 2) : mergeCopiesSummary(report);
 }
 /** Reads a `drop-aliases --only` file: a JSON array of `{ entity, alias }`. */
-export function readAliasDrops(file) {
+function readAliasDrops(file) {
     let parsed;
     try {
         parsed = JSON.parse(fs.readFileSync(file, "utf8"));

package/dist/commands/core-policy.d.ts

@@ -1,8 +1,5 @@
 import type { Command } from 'commander';
 import { type FrontmatterResult } from './core-policy-frontmatter.js';
-export declare const POLICY_AGE_REPORT_ASSET = "core/scripts/policy-age-report.sh";
-export declare const POLICY_RETIRE_ASSET = "core/scripts/policy-retire.sh";
-export declare const POLICY_FRONTMATTER_ASSET = "core/scripts/read-policy-frontmatter.sh";
 export type CorePolicyResult = {
     code: number;
     stdout: Buffer;

package/dist/commands/core-policy.js

@@ -8,9 +8,9 @@ import { resolveLiveRoot, resolveBundledAsset } from '../utils/hq-roots.js';
 import { runBundledScript } from '../utils/run-bundled-script.js';
 import { describeCoreCommand } from './core-command-catalog.js';
 import { runPolicyFrontmatter as runPolicyFrontmatterImpl } from './core-policy-frontmatter.js';
-export const POLICY_AGE_REPORT_ASSET = 'core/scripts/policy-age-report.sh';
-export const POLICY_RETIRE_ASSET = 'core/scripts/policy-retire.sh';
-export const POLICY_FRONTMATTER_ASSET = 'core/scripts/read-policy-frontmatter.sh';
+const POLICY_AGE_REPORT_ASSET = 'core/scripts/policy-age-report.sh';
+const POLICY_RETIRE_ASSET = 'core/scripts/policy-retire.sh';
+const POLICY_FRONTMATTER_ASSET = 'core/scripts/read-policy-frontmatter.sh';
 const AGE_HELP = [
     '# hq-core: public',
     '# policy-age-report.sh — measure policy usage and flag retirement candidates',

package/dist/commands/files.js

@@ -511,7 +511,7 @@ export function registerFilesCommand(program) {
     });
     files
         .command("delete <prefix>")
-        .description("Delete vault objects under a prefix (bounded + scoped). Always previews the exact count first; prompts for confirmation unless --yes. Use --personal to target your own personal vault instead of a company.")
+        .description("Delete vault objects by exact key or bounded prefix. A trailing slash expands recursively; use * for an explicit wildcard prefix. Always previews the exact count first; prompts for confirmation unless --yes. Use --personal to target your own personal vault instead of a company.")
         .option("--dry-run", "List what WOULD be deleted without deleting anything")
         .option("--personal", "Target your own personal vault instead of a company vault (mutually exclusive with --company)")
         .option("-y, --yes", "Skip the confirmation prompt (for scripts)")

package/dist/commands/index-cmd.js

@@ -38,7 +38,7 @@ export function syncSearchIndex(hqRoot, embed, dependencies = defaults) {
         catch {
             /* capping is an optimisation; indexing is the job */
         }
-        dependencies.runQmd(['update'], { cwd: hqRoot });
+        dependencies.runQmd(['update'], { cwd: hqRoot, entryPath: 'index-sync' });
     };
     const writeStderr = dependencies.writeStderr ?? ((text) => process.stderr.write(text));
     const singleFlightEnabled = (dependencies.singleFlightEnabled ?? qmdReindexSingleFlightEnabled)();

package/dist/commands/integrations-api.d.ts

@@ -288,13 +288,18 @@ export interface PendingApproval {
     requestedByName?: string | null;
     createdAt: string;
     expiresAt: string;
+    /** Queue state is present on history rows; older servers may omit it. */
+    status?: string;
+    /** Owner-facing outcome projected by hq-pro for decided rows. */
+    outcome?: string;
 }
 /**
- * Live open-approval list, read from hq-pro's confirm-queue state (not the
- * audit feed). Unlike the audit-derived reconstruction this replaces, a call
- * that was approved/rejected/expired no longer appears here.
+ * Read open approvals from hq-pro's confirm-queue state (not the audit feed).
+ * Pass `includeHistory` to include recently decided rows alongside open ones.
  */
-export declare function fetchPendingApprovals(token: string, companyUid: string): Promise<PendingApproval[]>;
+export declare function fetchPendingApprovals(token: string, companyUid: string, options?: {
+    includeHistory?: boolean;
+}): Promise<PendingApproval[]>;
 export declare function getConnectionAccess(token: string, companyUid: string, connectionId: string): Promise<ConnectionAccess>;
 export declare function mutateConnectionAccess(token: string, companyUid: string, action: "grant" | "revoke", input: {
     connectionId: string;

package/dist/commands/integrations-api.js

@@ -148,20 +148,23 @@ export async function setReadSafe(token, companyUid, connectionId, toolName, rea
         await raiseForResponse(res, "Failed to update the tool's read-safe setting");
 }
 /**
- * Live open-approval list, read from hq-pro's confirm-queue state (not the
- * audit feed). Unlike the audit-derived reconstruction this replaces, a call
- * that was approved/rejected/expired no longer appears here.
+ * Read open approvals from hq-pro's confirm-queue state (not the audit feed).
+ * Pass `includeHistory` to include recently decided rows alongside open ones.
  */
-export async function fetchPendingApprovals(token, companyUid) {
+export async function fetchPendingApprovals(token, companyUid, options = {}) {
     const res = await vaultApiFetch({
         token,
         path: "/v1/integrations/factory/pending",
-        query: { companyUid },
+        query: {
+            companyUid,
+            ...(options.includeHistory ? { include: "history" } : {}),
+        },
     });
     if (!res.ok)
         await raiseForResponse(res, "Failed to list pending approvals");
     const body = (await res.json());
-    return body.pending ?? [];
+    const pending = body.pending ?? [];
+    return options.includeHistory ? [...pending, ...(body.history ?? [])] : pending;
 }
 export async function getConnectionAccess(token, companyUid, connectionId) {
     const res = await vaultApiFetch({

package/dist/commands/integrations-manage.js

@@ -562,6 +562,7 @@ export function registerManageCommands(integrations) {
         .description("Calls that were queued for an owner's approval")
         .option("--company <slug>", "Company slug, e.g. indigo")
         .option("--json", "Machine-readable output")
+        .option("--history", "Include recently decided calls")
         .action(async (opts) => {
         const token = await ensureCognitoIdToken();
         const companyUid = await getCompanyUid(token, opts.company);
@@ -570,7 +571,9 @@ export function registerManageCommands(integrations) {
         // could only show that a call was once queued.
         let pending;
         try {
-            pending = await fetchPendingApprovals(token, companyUid);
+            pending = await fetchPendingApprovals(token, companyUid, {
+                includeHistory: opts.history,
+            });
         }
         catch (err) {
             // This CLI can ship ahead of the hq-pro deploy that adds the pending
@@ -586,14 +589,19 @@ export function registerManageCommands(integrations) {
             return;
         }
         if (pending.length === 0) {
-            console.log("Nothing is waiting for approval.");
+            console.log(opts.history ? "No recent approval history." : "Nothing is waiting for approval.");
             return;
         }
         for (const row of pending) {
             const who = row.requestedByName ?? row.requestedBy;
             const label = row.requestedTool ?? row.toolName;
             console.log(`${chalk.bold(label)}  ${chalk.dim(`${who} · ${row.createdAt}`)}`);
-            console.log(chalk.dim(`  hq integrations approve ${row.queueId}${row.provider ? ` --provider ${bareProvider(row.provider)}` : ""}`));
+            if (opts.history) {
+                console.log(chalk.dim(`  ${row.queueId} · ${row.status ?? row.outcome ?? "status unavailable"}`));
+            }
+            else {
+                console.log(chalk.dim(`  hq integrations approve ${row.queueId}${row.provider ? ` --provider ${bareProvider(row.provider)}` : ""}`));
+            }
         }
     });
     integrations

package/dist/commands/integrations.d.ts

@@ -22,6 +22,7 @@
  *   hq integrations tools --provider <p>     What the connected app can do.
  *   hq integrations call <tool> --provider <p> --args '<json>'
  *   hq integrations pending                  Calls awaiting approval.
+ *   hq integrations pending --history        Recently decided calls, including status.
  *   hq integrations approve|reject <queueId> Decide a queued call.
  *
  * Govern and remove:
@@ -49,7 +50,14 @@
  * `integrations-manage.ts`.
  */
 import { Command } from "commander";
+import { type PendingApproval } from "./integrations-api.js";
 export { IntegrationsCliError, callGateway, fetchConnections, queuedOutcome, selectConnection, toolPrefixForProvider, unwrapGatewayResult, } from "./integrations-core.js";
 export type { AdminConnection } from "./integrations-core.js";
+/** Wait for a decided queue item without resending the approve request. */
+export declare function waitForApprovalTerminal(token: string, companyUid: string, queueId: string, options?: {
+    timeoutMs?: number;
+    now?: () => number;
+    sleep?: (milliseconds: number) => Promise<void>;
+}): Promise<PendingApproval | null>;
 export declare function registerIntegrationsCommand(program: Command): void;
 //# sourceMappingURL=integrations.d.ts.map

package/dist/commands/integrations.js

@@ -22,6 +22,7 @@
  *   hq integrations tools --provider <p>     What the connected app can do.
  *   hq integrations call <tool> --provider <p> --args '<json>'
  *   hq integrations pending                  Calls awaiting approval.
+ *   hq integrations pending --history        Recently decided calls, including status.
  *   hq integrations approve|reject <queueId> Decide a queued call.
  *
  * Govern and remove:
@@ -57,6 +58,7 @@ import { IntegrationsCliError, bareProvider, callGateway, fetchConnections, isCl
 import { registerConnectCommands } from "./integrations-connect.js";
 import { registerImportCommands } from "./integrations-import.js";
 import { registerManageCommands } from "./integrations-manage.js";
+import { fetchPendingApprovals } from "./integrations-api.js";
 export { IntegrationsCliError, callGateway, fetchConnections, queuedOutcome, selectConnection, toolPrefixForProvider, unwrapGatewayResult, } from "./integrations-core.js";
 /**
  * Gateway metadata is additive and may be absent when talking to an older
@@ -160,6 +162,55 @@ function reportRevokedConnection(connection, opts) {
     }
     return true;
 }
+const APPROVAL_POLL_TIMEOUT_MS = 5 * 60_000;
+const APPROVAL_POLL_INITIAL_DELAY_MS = 1_000;
+const APPROVAL_POLL_MAX_DELAY_MS = 15_000;
+const APPROVAL_TERMINAL_STATUSES = new Set([
+    "completed",
+    "resumed",
+    "failed",
+    "write_unknown",
+    "rejected",
+    "expired",
+]);
+const APPROVAL_TERMINAL_OUTCOMES = new Set([
+    "ran",
+    "failed",
+    "unknown",
+    "turned_down",
+    "timed_out",
+]);
+function isTerminalApproval(row) {
+    return APPROVAL_TERMINAL_STATUSES.has(row.status ?? "") ||
+        APPROVAL_TERMINAL_OUTCOMES.has(row.outcome ?? "");
+}
+/** Wait for a decided queue item without resending the approve request. */
+export async function waitForApprovalTerminal(token, companyUid, queueId, options = {}) {
+    const timeoutMs = options.timeoutMs ?? APPROVAL_POLL_TIMEOUT_MS;
+    const now = options.now ?? Date.now;
+    const sleep = options.sleep ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
+    const deadline = now() + timeoutMs;
+    let delayMs = APPROVAL_POLL_INITIAL_DELAY_MS;
+    while (now() < deadline) {
+        const rows = await fetchPendingApprovals(token, companyUid, { includeHistory: true });
+        const row = rows.find((candidate) => candidate.queueId === queueId);
+        if (row && isTerminalApproval(row))
+            return row;
+        const remainingMs = deadline - now();
+        if (remainingMs <= 0)
+            break;
+        await sleep(Math.min(delayMs, remainingMs));
+        delayMs = Math.min(delayMs * 2, APPROVAL_POLL_MAX_DELAY_MS);
+    }
+    return null;
+}
+function isPendingApprovalResponse(status) {
+    return ["pending", "approved", "approved_pending_run", "in_progress"].includes(status ?? "");
+}
+function approvalOutcomeFailed(row) {
+    return ["failed", "write_unknown"].includes(row.status ?? "") ||
+        ["failed", "unknown"].includes(row.outcome ?? "");
+}
 export function registerIntegrationsCommand(program) {
     const integrations = program
         .command("integrations")
@@ -347,6 +398,38 @@ export function registerIntegrationsCommand(program) {
                 raiseIfUpstreamUnavailable(res);
                 throw new IntegrationsCliError(body.error ?? `${decision} failed (HTTP ${res.status})`, { expected: isClientError(res.status) });
             }
+            const pendingApprove = decision === "approve" &&
+                (res.status === 202 || isPendingApprovalResponse(body.status));
+            if (pendingApprove) {
+                const terminal = await waitForApprovalTerminal(token, companyUid, queueId);
+                const historyCommand = `hq integrations pending --history${opts.company ? ` --company ${opts.company}` : ""}`;
+                if (!terminal) {
+                    if (opts.json) {
+                        printJson({ ...body, status: "pending", pollTimedOut: true, checkCommand: historyCommand });
+                    }
+                    else {
+                        console.log(chalk.yellow(`Approval is still running after 5 minutes. Check queue ${queueId} later with: ${historyCommand}`));
+                    }
+                    return;
+                }
+                if (opts.json)
+                    printJson(terminal);
+                else if (approvalOutcomeFailed(terminal)) {
+                    const unknown = terminal.status === "write_unknown" || terminal.outcome === "unknown";
+                    console.log(chalk.red(unknown
+                        ? `The provider outcome is unknown for ${queueId}. Check the provider before taking any action; ${historyCommand} shows the latest queue state.`
+                        : `The approved call failed (${terminal.status ?? terminal.outcome}). See ${historyCommand} for its status.`));
+                }
+                else if (terminal.status === "resumed" || terminal.status === "completed" || terminal.outcome === "ran") {
+                    console.log(chalk.green("Approved — the call completed."));
+                }
+                else {
+                    console.log(chalk.yellow(`Approval ended with status ${terminal.status ?? terminal.outcome ?? "unknown"}.`));
+                }
+                if (approvalOutcomeFailed(terminal))
+                    process.exitCode = 1;
+                return;
+            }
             if (opts.json) {
                 printJson(body);
                 return;

package/dist/commands/lanes-checks.d.ts

@@ -19,7 +19,6 @@ export interface ProjectMapping {
     excludePrefix?: string;
 }
 export declare function mappingIncludesStory(mapping: ProjectMapping, storyId: string): boolean;
-export declare function ambiguousProjectMappings(mappings: readonly ProjectMapping[]): Map<string, string[]>;
 export interface ProjectReadResult {
     stories: Array<Record<string, unknown>>;
     mtime: number;
@@ -35,7 +34,6 @@ export declare function readProject(root: string, company: string, prdPath: stri
 export declare function loadCompanyQuestionRecords(root: string, company: LaneCompanyRef, projectId?: string): QuestionRecord[];
 export declare function readTeamInputs(root: string, company: LaneCompanyRef, projects: readonly ProjectMapping[], lanes: readonly LaneRecord[]): TrackerCheckTeam[];
 export declare function pathForTrackerRecord(projectDirectory: string, kind: TrackerKind, id: string): string;
-export declare function listTrackerRecords(projectDirectory: string, kind: TrackerKind): TrackerRecord[];
 export interface TolerantTrackerReadIssue {
     path: string;
     field: string;

package/dist/commands/lanes-checks.js

@@ -23,7 +23,7 @@ function mappingsOverlap(left, right) {
     const commonPrefix = includes.sort((a, b) => b.length - a.length)[0] ?? "";
     return ![left.excludePrefix, right.excludePrefix].some((excluded) => excluded !== undefined && commonPrefix.startsWith(excluded));
 }
-export function ambiguousProjectMappings(mappings) {
+function ambiguousProjectMappings(mappings) {
     const byProject = new Map();
     for (const mapping of mappings)
         byProject.set(mapping.projectId, [...(byProject.get(mapping.projectId) ?? []), mapping]);
@@ -641,7 +641,7 @@ function requiredRecordTimestamp(kind, record, projectDirectory, field, value) {
         return parseTimestamp(value, field, pathForTrackerRecord(projectDirectory, kind, record.id));
     return value;
 }
-export function listTrackerRecords(projectDirectory, kind) {
+function listTrackerRecords(projectDirectory, kind) {
     try {
         return createLocalTrackerStore(projectDirectory).list(kind);
     }

package/dist/commands/lanes.d.ts

@@ -112,8 +112,6 @@ export declare function parseQuestionBody(raw: unknown): QuestionBody | null;
  */
 export declare const ASK_BACKOFF_MS: readonly [5000, 15000];
 export declare const ASK_ATTEMPTS: number;
-/** Flip to true in the next release to make --priority mandatory. */
-export declare const ASK_PRIORITY_REQUIRED = false;
 export declare function casUpdateQuestion(hqRoot: string, questionId: string, updater: (current: QuestionRecord) => QuestionRecord): QuestionRecord;
 export declare function casUpdateLane(hqRoot: string, laneId: string, updater: (current: LaneRecord) => LaneRecord): LaneRecord;
 /**
@@ -128,12 +126,7 @@ export declare function composeWorkerBrief(worker: ResolvedLaneWorker, taskBrief
  * and the foreground-only rule.
  */
 export declare function composeGeneralBrief(taskBrief: string): string;
-export declare function parseMaxRuntimeSeconds(raw: unknown, workerId: string): number | undefined;
-export declare const PICKUP_TERMINAL_REASONS: readonly ["account_not_logged_in", "unknown_account", "account_disabled", "model_unsupported"];
 export declare const DISPATCH_TERMINAL_REASON: "outpost_dispatch_failed";
-export type PickupTerminalReason = (typeof PICKUP_TERMINAL_REASONS)[number];
-/** Only explicit non-persistence evidence can prove a failed dispatch has no owner snapshot. */
-export declare function isUndispatchedOutpostMirror(lane: LaneRecord): boolean;
 /**
  * The CAS updater a pickup failure applies. A lane that is already terminal
  * for any reason (a cancel that landed after the caller's last read, an
@@ -149,9 +142,5 @@ export declare function pickupFailureUpdater(reasonRaw: string, details: Record<
 export declare function applyOutpostAccountPickup(hqRoot: string, laneId: string, modelDeps?: KnownModelsDeps): LaneRecord;
 export declare function cancelPendingQuestionsForLane(hqRoot: string, laneId: string, nowIso: string, operatorReason?: string): QuestionRecord[];
 export declare function stopCommittedState(state: LaneRecord["state"]): "cancelled" | "killed";
-/** Stderr notice that `stop` ends a lane for good, naming the resumable path. */
-export declare function stopTerminalWarning(laneId: string): string;
-/** Stderr notice when an interrupted lane has no session to resume from. */
-export declare function interruptNotResumableWarning(laneId: string): string;
 export declare function registerLanesCommand(parent: Command, deps?: LanesCommandDeps): Command;
 //# sourceMappingURL=lanes.d.ts.map

package/dist/commands/lanes.js

@@ -2253,7 +2253,7 @@ function assertKnownOutpost(requested, known) {
 export const ASK_BACKOFF_MS = [5_000, 15_000];
 export const ASK_ATTEMPTS = ASK_BACKOFF_MS.length + 1;
 /** Flip to true in the next release to make --priority mandatory. */
-export const ASK_PRIORITY_REQUIRED = false;
+const ASK_PRIORITY_REQUIRED = false;
 const ASK_PRIORITY_WARNING = "--priority will be required in the next release.";
 const QUESTION_PRIORITIES = ["P0", "P1", "P2"];
 function withCasRetry(fn, attempts = 5) {
@@ -2390,7 +2390,7 @@ export function composeGeneralBrief(taskBrief) {
         "",
     ].join("\n");
 }
-export function parseMaxRuntimeSeconds(raw, workerId) {
+function parseMaxRuntimeSeconds(raw, workerId) {
     if (raw === undefined || raw === null || raw === "")
         return undefined;
     if (typeof raw === "number") {
@@ -2540,7 +2540,7 @@ async function storyBoardCheck(ctx, company, projectId, storyIds) {
         throw err;
     }
 }
-export const PICKUP_TERMINAL_REASONS = [
+const PICKUP_TERMINAL_REASONS = [
     "account_not_logged_in",
     "unknown_account",
     "account_disabled",
@@ -2548,7 +2548,7 @@ export const PICKUP_TERMINAL_REASONS = [
 ];
 export const DISPATCH_TERMINAL_REASON = "outpost_dispatch_failed";
 /** Only explicit non-persistence evidence can prove a failed dispatch has no owner snapshot. */
-export function isUndispatchedOutpostMirror(lane) {
+function isUndispatchedOutpostMirror(lane) {
     return lane.host.kind === "outpost" &&
         isTerminalLaneState(lane.state) &&
         lane.terminal_reason === DISPATCH_TERMINAL_REASON &&
@@ -7302,7 +7302,7 @@ async function runStop(ctx, laneId, reason, quiet = false) {
         });
 }
 /** Stderr notice that `stop` ends a lane for good, naming the resumable path. */
-export function stopTerminalWarning(laneId) {
+function stopTerminalWarning(laneId) {
     return `hq lanes: warning: stop kills lane ${laneId} and it cannot be resumed. ` +
         `To pause it and keep it resumable, use hq lanes interrupt ${laneId}.\n`;
 }
@@ -7395,7 +7395,7 @@ function persistInterruptedSession(hqRoot, lane) {
         : { ...current, provider_session_id: sessionId, provider_session_id_absent: undefined });
 }
 /** Stderr notice when an interrupted lane has no session to resume from. */
-export function interruptNotResumableWarning(laneId) {
+function interruptNotResumableWarning(laneId) {
     return `hq lanes: warning: lane ${laneId} was interrupted before its provider reported a session id, ` +
         `so hq lanes resume cannot continue it. Start a new lane for the remaining work.\n`;
 }

package/dist/commands/mcp-registration.d.ts

@@ -74,8 +74,8 @@ export declare class ConfigParseError extends McpRegistrationError {
 export declare class ConfigPermissionError extends McpRegistrationError {
     readonly code: "ConfigPermissionError";
 }
-export type CodexMcpCollisionOwner = 'hq' | 'foreign' | 'unknown';
-export type CodexMcpCollisionField = 'command' | 'args' | 'env' | 'url' | 'other';
+type CodexMcpCollisionOwner = 'hq' | 'foreign' | 'unknown';
+type CodexMcpCollisionField = 'command' | 'args' | 'env' | 'url' | 'other';
 /** Safe, value-free context for a Codex name collision reported to Sentry. */
 export interface CodexMcpCollisionDiagnostics {
     client: 'codex';
@@ -146,7 +146,7 @@ export declare function backupRoot(env: SafeWriteEnv): string;
 /** `~/.hq/logs/mcp-registry.log` — the append-only JSONL audit log (mirrors backupRoot style). */
 export declare function mcpRegistryLogPath(env: SafeWriteEnv): string;
 /** The action recorded on an audit line. */
-export type AuditAction = 'register' | 'unregister';
+type AuditAction = 'register' | 'unregister';
 /**
  * The result recorded on an audit line:
  *   - `registered`   — a register write that changed the file.
@@ -156,7 +156,7 @@ export type AuditAction = 'register' | 'unregister';
  *                      foreign/unstamped entry left in place). PARTIAL is auditable.
  *   - `error`        — the surface emit threw (the operation failed for this surface).
  */
-export type AuditResult = 'registered' | 'unregistered' | 'noop' | 'skipped' | 'error';
+type AuditResult = 'registered' | 'unregistered' | 'noop' | 'skipped' | 'error';
 /**
  * One append-only audit-log entry. EXACT shape (field order is the JSON key order):
  *   `{ ts, action, pack, server, transport, target, file, prevHash, newHash, result }`.
@@ -213,8 +213,6 @@ export declare function codexConfigPath(env: SafeWriteEnv): string;
 export declare function isCodexInstalled(env: SafeWriteEnv): boolean;
 /** `~/.claude.json` — the PINNED single Claude surface (top-level mcpServers). */
 export declare function claudeConfigPath(env: SafeWriteEnv): string;
-/** `~/.mcp.json` — the project-pinned Claude surface (a symlink on this host). */
-export declare function mcpJsonPath(env: SafeWriteEnv): string;
 /** Outcome of {@link readConfigDoc}: a parsed doc plus whether the file pre-existed. */
 export interface ReadConfigResult<T> {
     /** The parsed doc, or the `emptyDoc` when the file is absent/empty. */
@@ -284,10 +282,6 @@ export declare function readConfigDoc<T>(target: string, format: ConfigFormat<T>
  * separate snippet block) cannot leak. The result never contains raw file content.
  */
 export declare function sanitizeParserMessage(message: string): string;
-/** Default stale-lock timeout — a lock older than this whose PID is dead is broken. */
-export declare const DEFAULT_LOCK_STALE_MS = 30000;
-/** Default total time to wait for a held lock before giving up. */
-export declare const DEFAULT_LOCK_WAIT_MS = 10000;
 /** A held advisory lock; release with {@link releaseLock} (idempotent). */
 export interface ConfigLock {
     /** The lockfile path (`~/.<basename>.hqlock`). */
@@ -752,7 +746,7 @@ export declare function mergeCodexServer(name: string, def: TomlTable): (doc: Co
  */
 export declare function registerCodexServer(opts: RegisterServerOptions): RegisterSurfaceResult | RegisterSurfaceSkip;
 /** Discriminates an un-registration outcome on one surface. */
-export type UnregisterOutcome = 
+type UnregisterOutcome = 
 /** The provenance-stamped entry was found and removed (file changed). */
 'removed'
 /** The entry was already absent / never installed — a clean idempotent no-op. */