@indigoai-us/hq-cli 5.309.0 → 5.310.0

package/dist/commands/lanes-checks.js

@@ -23,7 +23,7 @@ function mappingsOverlap(left, right) {
     const commonPrefix = includes.sort((a, b) => b.length - a.length)[0] ?? "";
     return ![left.excludePrefix, right.excludePrefix].some((excluded) => excluded !== undefined && commonPrefix.startsWith(excluded));
 }
-export function ambiguousProjectMappings(mappings) {
+function ambiguousProjectMappings(mappings) {
     const byProject = new Map();
     for (const mapping of mappings)
         byProject.set(mapping.projectId, [...(byProject.get(mapping.projectId) ?? []), mapping]);
@@ -641,7 +641,7 @@ function requiredRecordTimestamp(kind, record, projectDirectory, field, value) {
         return parseTimestamp(value, field, pathForTrackerRecord(projectDirectory, kind, record.id));
     return value;
 }
-export function listTrackerRecords(projectDirectory, kind) {
+function listTrackerRecords(projectDirectory, kind) {
     try {
         return createLocalTrackerStore(projectDirectory).list(kind);
     }

package/dist/commands/lanes.d.ts

@@ -112,8 +112,6 @@ export declare function parseQuestionBody(raw: unknown): QuestionBody | null;
  */
 export declare const ASK_BACKOFF_MS: readonly [5000, 15000];
 export declare const ASK_ATTEMPTS: number;
-/** Flip to true in the next release to make --priority mandatory. */
-export declare const ASK_PRIORITY_REQUIRED = false;
 export declare function casUpdateQuestion(hqRoot: string, questionId: string, updater: (current: QuestionRecord) => QuestionRecord): QuestionRecord;
 export declare function casUpdateLane(hqRoot: string, laneId: string, updater: (current: LaneRecord) => LaneRecord): LaneRecord;
 /**
@@ -128,12 +126,7 @@ export declare function composeWorkerBrief(worker: ResolvedLaneWorker, taskBrief
  * and the foreground-only rule.
  */
 export declare function composeGeneralBrief(taskBrief: string): string;
-export declare function parseMaxRuntimeSeconds(raw: unknown, workerId: string): number | undefined;
-export declare const PICKUP_TERMINAL_REASONS: readonly ["account_not_logged_in", "unknown_account", "account_disabled", "model_unsupported"];
 export declare const DISPATCH_TERMINAL_REASON: "outpost_dispatch_failed";
-export type PickupTerminalReason = (typeof PICKUP_TERMINAL_REASONS)[number];
-/** Only explicit non-persistence evidence can prove a failed dispatch has no owner snapshot. */
-export declare function isUndispatchedOutpostMirror(lane: LaneRecord): boolean;
 /**
  * The CAS updater a pickup failure applies. A lane that is already terminal
  * for any reason (a cancel that landed after the caller's last read, an
@@ -149,9 +142,5 @@ export declare function pickupFailureUpdater(reasonRaw: string, details: Record<
 export declare function applyOutpostAccountPickup(hqRoot: string, laneId: string, modelDeps?: KnownModelsDeps): LaneRecord;
 export declare function cancelPendingQuestionsForLane(hqRoot: string, laneId: string, nowIso: string, operatorReason?: string): QuestionRecord[];
 export declare function stopCommittedState(state: LaneRecord["state"]): "cancelled" | "killed";
-/** Stderr notice that `stop` ends a lane for good, naming the resumable path. */
-export declare function stopTerminalWarning(laneId: string): string;
-/** Stderr notice when an interrupted lane has no session to resume from. */
-export declare function interruptNotResumableWarning(laneId: string): string;
 export declare function registerLanesCommand(parent: Command, deps?: LanesCommandDeps): Command;
 //# sourceMappingURL=lanes.d.ts.map

package/dist/commands/lanes.js

@@ -2253,7 +2253,7 @@ function assertKnownOutpost(requested, known) {
 export const ASK_BACKOFF_MS = [5_000, 15_000];
 export const ASK_ATTEMPTS = ASK_BACKOFF_MS.length + 1;
 /** Flip to true in the next release to make --priority mandatory. */
-export const ASK_PRIORITY_REQUIRED = false;
+const ASK_PRIORITY_REQUIRED = false;
 const ASK_PRIORITY_WARNING = "--priority will be required in the next release.";
 const QUESTION_PRIORITIES = ["P0", "P1", "P2"];
 function withCasRetry(fn, attempts = 5) {
@@ -2390,7 +2390,7 @@ export function composeGeneralBrief(taskBrief) {
         "",
     ].join("\n");
 }
-export function parseMaxRuntimeSeconds(raw, workerId) {
+function parseMaxRuntimeSeconds(raw, workerId) {
     if (raw === undefined || raw === null || raw === "")
         return undefined;
     if (typeof raw === "number") {
@@ -2540,7 +2540,7 @@ async function storyBoardCheck(ctx, company, projectId, storyIds) {
         throw err;
     }
 }
-export const PICKUP_TERMINAL_REASONS = [
+const PICKUP_TERMINAL_REASONS = [
     "account_not_logged_in",
     "unknown_account",
     "account_disabled",
@@ -2548,7 +2548,7 @@ export const PICKUP_TERMINAL_REASONS = [
 ];
 export const DISPATCH_TERMINAL_REASON = "outpost_dispatch_failed";
 /** Only explicit non-persistence evidence can prove a failed dispatch has no owner snapshot. */
-export function isUndispatchedOutpostMirror(lane) {
+function isUndispatchedOutpostMirror(lane) {
     return lane.host.kind === "outpost" &&
         isTerminalLaneState(lane.state) &&
         lane.terminal_reason === DISPATCH_TERMINAL_REASON &&
@@ -7302,7 +7302,7 @@ async function runStop(ctx, laneId, reason, quiet = false) {
         });
 }
 /** Stderr notice that `stop` ends a lane for good, naming the resumable path. */
-export function stopTerminalWarning(laneId) {
+function stopTerminalWarning(laneId) {
     return `hq lanes: warning: stop kills lane ${laneId} and it cannot be resumed. ` +
         `To pause it and keep it resumable, use hq lanes interrupt ${laneId}.\n`;
 }
@@ -7395,7 +7395,7 @@ function persistInterruptedSession(hqRoot, lane) {
         : { ...current, provider_session_id: sessionId, provider_session_id_absent: undefined });
 }
 /** Stderr notice when an interrupted lane has no session to resume from. */
-export function interruptNotResumableWarning(laneId) {
+function interruptNotResumableWarning(laneId) {
     return `hq lanes: warning: lane ${laneId} was interrupted before its provider reported a session id, ` +
         `so hq lanes resume cannot continue it. Start a new lane for the remaining work.\n`;
 }

package/dist/commands/mcp-registration.d.ts

@@ -74,8 +74,8 @@ export declare class ConfigParseError extends McpRegistrationError {
 export declare class ConfigPermissionError extends McpRegistrationError {
     readonly code: "ConfigPermissionError";
 }
-export type CodexMcpCollisionOwner = 'hq' | 'foreign' | 'unknown';
-export type CodexMcpCollisionField = 'command' | 'args' | 'env' | 'url' | 'other';
+type CodexMcpCollisionOwner = 'hq' | 'foreign' | 'unknown';
+type CodexMcpCollisionField = 'command' | 'args' | 'env' | 'url' | 'other';
 /** Safe, value-free context for a Codex name collision reported to Sentry. */
 export interface CodexMcpCollisionDiagnostics {
     client: 'codex';
@@ -146,7 +146,7 @@ export declare function backupRoot(env: SafeWriteEnv): string;
 /** `~/.hq/logs/mcp-registry.log` — the append-only JSONL audit log (mirrors backupRoot style). */
 export declare function mcpRegistryLogPath(env: SafeWriteEnv): string;
 /** The action recorded on an audit line. */
-export type AuditAction = 'register' | 'unregister';
+type AuditAction = 'register' | 'unregister';
 /**
  * The result recorded on an audit line:
  *   - `registered`   — a register write that changed the file.
@@ -156,7 +156,7 @@ export type AuditAction = 'register' | 'unregister';
  *                      foreign/unstamped entry left in place). PARTIAL is auditable.
  *   - `error`        — the surface emit threw (the operation failed for this surface).
  */
-export type AuditResult = 'registered' | 'unregistered' | 'noop' | 'skipped' | 'error';
+type AuditResult = 'registered' | 'unregistered' | 'noop' | 'skipped' | 'error';
 /**
  * One append-only audit-log entry. EXACT shape (field order is the JSON key order):
  *   `{ ts, action, pack, server, transport, target, file, prevHash, newHash, result }`.
@@ -213,8 +213,6 @@ export declare function codexConfigPath(env: SafeWriteEnv): string;
 export declare function isCodexInstalled(env: SafeWriteEnv): boolean;
 /** `~/.claude.json` — the PINNED single Claude surface (top-level mcpServers). */
 export declare function claudeConfigPath(env: SafeWriteEnv): string;
-/** `~/.mcp.json` — the project-pinned Claude surface (a symlink on this host). */
-export declare function mcpJsonPath(env: SafeWriteEnv): string;
 /** Outcome of {@link readConfigDoc}: a parsed doc plus whether the file pre-existed. */
 export interface ReadConfigResult<T> {
     /** The parsed doc, or the `emptyDoc` when the file is absent/empty. */
@@ -284,10 +282,6 @@ export declare function readConfigDoc<T>(target: string, format: ConfigFormat<T>
  * separate snippet block) cannot leak. The result never contains raw file content.
  */
 export declare function sanitizeParserMessage(message: string): string;
-/** Default stale-lock timeout — a lock older than this whose PID is dead is broken. */
-export declare const DEFAULT_LOCK_STALE_MS = 30000;
-/** Default total time to wait for a held lock before giving up. */
-export declare const DEFAULT_LOCK_WAIT_MS = 10000;
 /** A held advisory lock; release with {@link releaseLock} (idempotent). */
 export interface ConfigLock {
     /** The lockfile path (`~/.<basename>.hqlock`). */
@@ -752,7 +746,7 @@ export declare function mergeCodexServer(name: string, def: TomlTable): (doc: Co
  */
 export declare function registerCodexServer(opts: RegisterServerOptions): RegisterSurfaceResult | RegisterSurfaceSkip;
 /** Discriminates an un-registration outcome on one surface. */
-export type UnregisterOutcome = 
+type UnregisterOutcome = 
 /** The provenance-stamped entry was found and removed (file changed). */
 'removed'
 /** The entry was already absent / never installed — a clean idempotent no-op. */

package/dist/commands/mcp-registration.js

@@ -242,10 +242,6 @@ export function isCodexInstalled(env) {
 export function claudeConfigPath(env) {
     return path.join(env.home, '.claude.json');
 }
-/** `~/.mcp.json` — the project-pinned Claude surface (a symlink on this host). */
-export function mcpJsonPath(env) {
-    return path.join(env.home, '.mcp.json');
-}
 /**
  * Built-in JSON {@link ConfigFormat} for the Claude surfaces. Pretty-prints with
  * a trailing newline; an empty doc is `{}`. Parsing the empty string is the
@@ -368,9 +364,9 @@ export function sanitizeParserMessage(message) {
 // Advisory O_EXCL lock (held across read->merge->write).
 // ---------------------------------------------------------------------------
 /** Default stale-lock timeout — a lock older than this whose PID is dead is broken. */
-export const DEFAULT_LOCK_STALE_MS = 30_000;
+const DEFAULT_LOCK_STALE_MS = 30_000;
 /** Default total time to wait for a held lock before giving up. */
-export const DEFAULT_LOCK_WAIT_MS = 10_000;
+const DEFAULT_LOCK_WAIT_MS = 10_000;
 /** The lockfile path for a target: `~/.<basename>.hqlock` (a sibling, hidden). */
 export function lockPathFor(target) {
     const dir = path.dirname(target);

package/dist/lib/core-utils/sentry-report.d.ts

@@ -18,7 +18,6 @@
 import * as Sentry from "@sentry/node";
 import type { CaptureContext, SeverityLevel } from "@sentry/node";
 export declare const DEFAULT_SENTRY_REPORT_TIMEOUT_MS = 750;
-export declare const MAX_SENTRY_REPORT_TIMEOUT_MS = 5000;
 export declare const MAX_SENTRY_REPORT_PAYLOAD_BYTES = 2048;
 export declare const MAX_SENTRY_REPORT_METADATA_VALUE_BYTES = 256;
 /**
@@ -34,11 +33,11 @@ export type HookSequenceEntry = {
     event: string;
     ms: number;
 };
-export type HookTimeoutDebugPhaseTiming = {
+type HookTimeoutDebugPhaseTiming = {
     phase: string;
     elapsed_ms: number;
 };
-export type HookTimeoutDebugContext = {
+type HookTimeoutDebugContext = {
     hook_name: string;
     hook_event: string;
     budget_ms: number;
@@ -52,9 +51,9 @@ export type HookTimeoutDebugContext = {
     spawn_ms?: number | "unavailable";
     process_count?: number | "unavailable";
 };
-export type SentryReportMetadataValue = string | number | boolean | HookSequenceEntry[] | HookTimeoutDebugContext;
+type SentryReportMetadataValue = string | number | boolean | HookSequenceEntry[] | HookTimeoutDebugContext;
 export type SentryReportMetadata = Record<string, SentryReportMetadataValue>;
-export type SentryReportEvent = {
+type SentryReportEvent = {
     type: string;
     message: string;
     fingerprint: string;
@@ -102,12 +101,6 @@ export type SentryReportResult = {
 export declare function readSentryReportStdin(stdin: AsyncIterable<Buffer | string>): Promise<string | null>;
 /** Unknown metadata is ignored before this cap is evaluated. */
 export declare function exceedsSentryReportMetadataKeyCap(keys: Iterable<string>): boolean;
-/**
- * Parse and validate the closed report schema without touching Sentry. The
- * function intentionally returns an ordinary result instead of throwing so a
- * hook can ignore the CLI exit code without creating an unhandled rejection.
- */
-export declare function parseSentryReportEvent(stdin: string): SentryReportResult;
 /**
  * Capture one validated Sentry message and wait only for the supplied bounded
  * flush budget. A zero result means the event entered the local transport and
@@ -117,4 +110,5 @@ export declare function parseSentryReportEvent(stdin: string): SentryReportResul
  * transport errors cannot echo event data back to a hook.
  */
 export declare function reportSentryEvent(stdin: string, options?: SentryReportOptions, dependencies?: SentryReportDependencies): Promise<SentryReportResult>;
+export {};
 //# sourceMappingURL=sentry-report.d.ts.map

package/dist/lib/core-utils/sentry-report.js

@@ -25,7 +25,7 @@ import { beforeSend } from "../../sentry-before-send.js";
 import { resolveLiveRoot } from "../../utils/hq-roots.js";
 import { hookTimeoutDebugContextEnabled } from "./hook-timeout-debug-context-flag.js";
 export const DEFAULT_SENTRY_REPORT_TIMEOUT_MS = 750;
-export const MAX_SENTRY_REPORT_TIMEOUT_MS = 5_000;
+const MAX_SENTRY_REPORT_TIMEOUT_MS = 5_000;
 export const MAX_SENTRY_REPORT_PAYLOAD_BYTES = 2_048;
 export const MAX_SENTRY_REPORT_METADATA_VALUE_BYTES = 256;
 const MAX_SENTRY_REPORT_TYPE_BYTES = 64;
@@ -349,7 +349,7 @@ function invalidInput() {
  * function intentionally returns an ordinary result instead of throwing so a
  * hook can ignore the CLI exit code without creating an unhandled rejection.
  */
-export function parseSentryReportEvent(stdin) {
+function parseSentryReportEvent(stdin) {
     if (byteLength(stdin) > MAX_SENTRY_REPORT_PAYLOAD_BYTES)
         return invalidInput();
     let parsed;

package/dist/lib/db/local.d.ts

@@ -23,11 +23,6 @@ export interface LocalDbStatus {
     /** Fingerprint of path for logs that prefer not to echo full home paths. */
     pathFingerprint: string;
 }
-/**
- * Short non-reversible fingerprint of a path (for status display).
- * Not a secret — just avoids dumping full home paths when preferred.
- */
-export declare function fingerprintPath(filePath: string): string;
 /**
  * Open (and create if missing) the company local vault DB with WAL mode.
  * Idempotent: reopening an existing file does not recreate or wipe it.

package/dist/lib/db/local.js

@@ -12,7 +12,7 @@ const MIGRATIONS_TABLE = "hq_schema_migrations";
  * Short non-reversible fingerprint of a path (for status display).
  * Not a secret — just avoids dumping full home paths when preferred.
  */
-export function fingerprintPath(filePath) {
+function fingerprintPath(filePath) {
     let h = 2166136261;
     for (let i = 0; i < filePath.length; i++) {
         h ^= filePath.charCodeAt(i);

package/dist/lib/db/migrate.d.ts

@@ -5,9 +5,7 @@
  *   companies/{company}/db/migrations/*.sql
  * Applied versions are recorded in hq_schema_migrations inside the local DB.
  */
-import type { LocalDb } from "./local.js";
 import type { LocalDbPathEnv } from "./paths.js";
-export declare const MIGRATIONS_TABLE = "hq_schema_migrations";
 export interface MigrateOptions extends LocalDbPathEnv {
     company: string;
     /**
@@ -24,16 +22,6 @@ export interface MigrateResult {
     head: string | null;
 }
 export declare function resolveMigrationsDir(hqRoot: string, companySlug: string): string;
-/**
- * Ensure migrations directory exists (creates empty dir on first migrate).
- */
-export declare function ensureMigrationsDir(hqRoot: string, companySlug: string): string;
-/**
- * List pending migration files in lexical/version order (filename sort).
- */
-export declare function listMigrationFiles(migrationsDir: string): string[];
-export declare function ensureMigrationsLedger(db: LocalDb): void;
-export declare function listAppliedVersions(db: LocalDb): Set<string>;
 /**
  * Apply pending migrations. On failure, does not mark the failed file applied.
  */

package/dist/lib/db/migrate.js

@@ -9,7 +9,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { openLocalDb, readMigrationHead } from "./local.js";
 import { normalizeCompanySlugForLocalDb } from "./paths.js";
-export const MIGRATIONS_TABLE = "hq_schema_migrations";
+const MIGRATIONS_TABLE = "hq_schema_migrations";
 export function resolveMigrationsDir(hqRoot, companySlug) {
     const slug = normalizeCompanySlugForLocalDb(companySlug);
     return path.join(hqRoot, "companies", slug, "db", "migrations");
@@ -17,7 +17,7 @@ export function resolveMigrationsDir(hqRoot, companySlug) {
 /**
  * Ensure migrations directory exists (creates empty dir on first migrate).
  */
-export function ensureMigrationsDir(hqRoot, companySlug) {
+function ensureMigrationsDir(hqRoot, companySlug) {
     const dir = resolveMigrationsDir(hqRoot, companySlug);
     fs.mkdirSync(dir, { recursive: true });
     return dir;
@@ -25,7 +25,7 @@ export function ensureMigrationsDir(hqRoot, companySlug) {
 /**
  * List pending migration files in lexical/version order (filename sort).
  */
-export function listMigrationFiles(migrationsDir) {
+function listMigrationFiles(migrationsDir) {
     if (!fs.existsSync(migrationsDir))
         return [];
     return fs
@@ -33,7 +33,7 @@ export function listMigrationFiles(migrationsDir) {
         .filter((f) => f.endsWith(".sql"))
         .sort((a, b) => a.localeCompare(b, "en"));
 }
-export function ensureMigrationsLedger(db) {
+function ensureMigrationsLedger(db) {
     db.exec(`
     CREATE TABLE IF NOT EXISTS ${MIGRATIONS_TABLE} (
       version TEXT PRIMARY KEY NOT NULL,
@@ -41,7 +41,7 @@ export function ensureMigrationsLedger(db) {
     );
   `);
 }
-export function listAppliedVersions(db) {
+function listAppliedVersions(db) {
     ensureMigrationsLedger(db);
     const rows = db
         .prepare(`SELECT version FROM ${MIGRATIONS_TABLE} ORDER BY version`)

package/dist/lib/db/sql.d.ts

@@ -27,14 +27,6 @@ export interface SqlRunResult {
     changes: number;
     readonly: boolean;
 }
-export declare function stripSqlNoise(sql: string): string;
-export declare function isWriteSql(sql: string): boolean;
-/**
- * Statements that must never run via `hq db sql`, even with --write.
- * ATTACH/DETACH would let a company-scoped session open another company's
- * vault.db by absolute path (category-1 isolation).
- */
-export declare function assertSqlAllowed(sql: string): void;
 /**
  * Resolve which file path to open, enforcing company isolation by default.
  */
@@ -44,6 +36,4 @@ export declare function resolveSqlDbPath(opts: SqlRunOptions): string;
  */
 export declare function runLocalSql(opts: SqlRunOptions): SqlRunResult;
 export declare function formatSqlResult(result: SqlRunResult, format?: "jsonl" | "table"): string;
-/** Test helper: company dir for isolation assertions. */
-export declare function companyLocalDbDir(company: string, env?: LocalDbPathEnv): string;
 //# sourceMappingURL=sql.d.ts.map

package/dist/lib/db/sql.js

@@ -7,17 +7,17 @@
  */
 import Database from "better-sqlite3";
 import { openLocalDb } from "./local.js";
-import { normalizeCompanySlugForLocalDb, resolveLocalDbDir, resolveLocalDbPath, } from "./paths.js";
+import { normalizeCompanySlugForLocalDb, resolveLocalDbPath, } from "./paths.js";
 const WRITE_PATTERN = /^\s*(INSERT|UPDATE|DELETE|REPLACE|CREATE|DROP|ALTER|TRUNCATE|REINDEX|VACUUM|BEGIN|COMMIT|ROLLBACK)\b/i;
 /** Always forbidden — opens other files/DBs and breaks company path isolation. */
 const FORBIDDEN_SQL_PATTERN = /\b(ATTACH|DETACH|LOAD_EXTENSION)\b/i;
-export function stripSqlNoise(sql) {
+function stripSqlNoise(sql) {
     return sql
         .replace(/^\s*--[^\n]*\n/gm, "")
         .replace(/^\s*\/\*[\s\S]*?\*\//gm, "")
         .trim();
 }
-export function isWriteSql(sql) {
+function isWriteSql(sql) {
     return WRITE_PATTERN.test(stripSqlNoise(sql));
 }
 /**
@@ -25,7 +25,7 @@ export function isWriteSql(sql) {
  * ATTACH/DETACH would let a company-scoped session open another company's
  * vault.db by absolute path (category-1 isolation).
  */
-export function assertSqlAllowed(sql) {
+function assertSqlAllowed(sql) {
     const stripped = stripSqlNoise(sql);
     if (FORBIDDEN_SQL_PATTERN.test(stripped)) {
         throw new Error("ATTACH/DETACH/LOAD_EXTENSION are not allowed via hq db sql (tenant isolation); use the company-canonical local path only");
@@ -122,8 +122,4 @@ export function formatSqlResult(result, format = "jsonl") {
         .join("\n");
     return body ? `${header}\n${body}` : header;
 }
-/** Test helper: company dir for isolation assertions. */
-export function companyLocalDbDir(company, env) {
-    return resolveLocalDbDir(company, env);
-}
 //# sourceMappingURL=sql.js.map

package/dist/lib/doctor/checks/codex-wiring.js

@@ -42,6 +42,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { parse as parseToml } from "smol-toml";
+import { collectCommands, fileState } from "../shared.js";
 import { ALLOWED_DIVERGENCE_RELPATH, loadAllowedDivergence, } from "../allowed-divergence.js";
 /** Basename of the single-adapter script the current architecture routes to. */
 const CODEX_ADAPTER_BASENAME = "hq-codex-hook-adapter.sh";
@@ -549,44 +550,11 @@ function extractBraceBlock(source, from) {
     return source.slice(open + 1);
 }
 // --- shared low-level helpers --------------------------------------------------
-/** Collect every `command` string from a `{hooks:{Event:[{hooks:[…]}]}}` doc. */
-function collectCommands(parsed) {
-    const commands = [];
-    if (!parsed || typeof parsed !== "object")
-        return commands;
-    const hooks = parsed.hooks;
-    if (!hooks || typeof hooks !== "object")
-        return commands;
-    for (const entries of Object.values(hooks)) {
-        if (!Array.isArray(entries))
-            continue;
-        for (const entry of entries) {
-            const inner = entry?.hooks;
-            if (!Array.isArray(inner))
-                continue;
-            for (const hook of inner) {
-                const command = hook?.command;
-                if (typeof command === "string")
-                    commands.push(command);
-            }
-        }
-    }
-    return commands;
-}
 function resolvePath(hqRoot, target) {
     if (!target)
         return null;
     return path.isAbsolute(target) ? target : path.resolve(hqRoot, target);
 }
-function fileState(target) {
-    try {
-        const stat = fs.statSync(target);
-        return { present: stat.isFile(), executable: (stat.mode & 0o111) !== 0 };
-    }
-    catch {
-        return { present: false, executable: false };
-    }
-}
 function filesEqual(a, b) {
     try {
         return fs.readFileSync(a).equals(fs.readFileSync(b));

package/dist/lib/doctor/checks/grok-wiring.js

@@ -22,6 +22,7 @@
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
+import { collectCommands, fileState } from "../shared.js";
 /** The command a user runs to install the user-global Grok bridge. */
 export const GROK_TRUST_REMEDIATION = "bash core/scripts/grok-trust.sh";
 /** Files that grok-trust.sh installs into `~/.grok/hooks/` for the bridge. */
@@ -149,38 +150,4 @@ function bridgeInstalled(bridgeDir) {
     }
     return false;
 }
-// --- shared low-level helpers --------------------------------------------------
-/** Collect every `command` string from a `{hooks:{Event:[{hooks:[…]}]}}` doc. */
-function collectCommands(parsed) {
-    const commands = [];
-    if (!parsed || typeof parsed !== "object")
-        return commands;
-    const hooks = parsed.hooks;
-    if (!hooks || typeof hooks !== "object")
-        return commands;
-    for (const entries of Object.values(hooks)) {
-        if (!Array.isArray(entries))
-            continue;
-        for (const entry of entries) {
-            const inner = entry?.hooks;
-            if (!Array.isArray(inner))
-                continue;
-            for (const hook of inner) {
-                const command = hook?.command;
-                if (typeof command === "string")
-                    commands.push(command);
-            }
-        }
-    }
-    return commands;
-}
-function fileState(target) {
-    try {
-        const stat = fs.statSync(target);
-        return { present: stat.isFile(), executable: (stat.mode & 0o111) !== 0 };
-    }
-    catch {
-        return { present: false, executable: false };
-    }
-}
 //# sourceMappingURL=grok-wiring.js.map

package/dist/lib/doctor/deep/effects.js

@@ -36,6 +36,7 @@ import { spawnSync } from "node:child_process";
 import { createHash } from "node:crypto";
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { isRecord } from "../shared.js";
 /**
  * Parse a fixture case's `effects:` field into a list of {@link
  * EffectExpectation}. Returns the list, or an error string naming what was
@@ -223,7 +224,4 @@ function hashFile(abs) {
         return null;
     }
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 //# sourceMappingURL=effects.js.map

package/dist/lib/doctor/deep/sandbox.js

@@ -39,6 +39,7 @@ import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
 import * as yaml from "js-yaml";
+import { isRecord } from "../shared.js";
 import { classifyCaseStatus, looksLikeFixture, } from "../fixtures/schema.js";
 import { HOOK_TESTS_RELDIR, registeredHookIds } from "../fixtures/discover.js";
 import { isSideEffectingHookId } from "./classify.js";
@@ -566,7 +567,4 @@ function oneLine(text) {
     const collapsed = text.replace(/\s+/g, " ").trim();
     return collapsed.length > 200 ? `${collapsed.slice(0, 197)}…` : collapsed;
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 //# sourceMappingURL=sandbox.js.map

package/dist/lib/doctor/fixtures/schema.js

@@ -27,6 +27,7 @@
  *     module owns only the classification semantics, so both the doctor and its
  *     tests agree on what a case outcome means.
  */
+import { isRecord } from "../shared.js";
 /**
  * Every fixture schema version this build of the CLI can interpret. A fixture
  * declaring a version outside this set is reported UNKNOWN, never PASS — see
@@ -242,7 +243,4 @@ export function classifyCaseStatus(met, expectedFailure) {
         return met ? "WARN" : "KNOWN-DEFECT";
     return met ? "PASS" : "FAIL";
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 //# sourceMappingURL=schema.js.map

package/dist/lib/doctor/shared.d.ts

@@ -0,0 +1,8 @@
+/** Collect every `command` string from a `{hooks:{Event:[{hooks:[…]}]}}` doc. */
+export declare function collectCommands(parsed: unknown): string[];
+export declare function fileState(target: string): {
+    present: boolean;
+    executable: boolean;
+};
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+//# sourceMappingURL=shared.d.ts.map

package/dist/lib/doctor/shared.js

@@ -0,0 +1,38 @@
+import * as fs from "node:fs";
+/** Collect every `command` string from a `{hooks:{Event:[{hooks:[…]}]}}` doc. */
+export function collectCommands(parsed) {
+    const commands = [];
+    if (!parsed || typeof parsed !== "object")
+        return commands;
+    const hooks = parsed.hooks;
+    if (!hooks || typeof hooks !== "object")
+        return commands;
+    for (const entries of Object.values(hooks)) {
+        if (!Array.isArray(entries))
+            continue;
+        for (const entry of entries) {
+            const inner = entry?.hooks;
+            if (!Array.isArray(inner))
+                continue;
+            for (const hook of inner) {
+                const command = hook?.command;
+                if (typeof command === "string")
+                    commands.push(command);
+            }
+        }
+    }
+    return commands;
+}
+export function fileState(target) {
+    try {
+        const stat = fs.statSync(target);
+        return { present: stat.isFile(), executable: (stat.mode & 0o111) !== 0 };
+    }
+    catch {
+        return { present: false, executable: false };
+    }
+}
+export function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=shared.js.map

package/dist/lib/lanes/autopilot.js

@@ -3,6 +3,7 @@ import * as path from "node:path";
 import { laneRunsOnHost } from "./admission.js";
 import { appendDropboxMessage } from "./dropbox.js";
 import { LanesError } from "./errors.js";
+import { resolveLaneCompany } from "./lane-company.js";
 import { readLanesRegistryFlag } from "./registry-flag.js";
 import { readAllLanes } from "./store.js";
 export const LEAD_AUTOPILOT_FLAG = "lanes.lead-autopilot";
@@ -418,7 +419,8 @@ async function runLeadAutopilotPassUnlocked(input) {
             result.skipped.push({ lead_lane: registered.lane, reason: "lead_lane_missing" });
             continue;
         }
-        if (lead.company === null) {
+        const company = resolveLaneCompany(hqRoot, lead).company;
+        if (!company) {
             result.skipped.push({ lead_lane: lead.lane_id, reason: "lead_company_unresolved" });
             continue;
         }
@@ -433,16 +435,16 @@ async function runLeadAutopilotPassUnlocked(input) {
         }
         let stateChanged = false;
         try {
-            const enabled = await (input.readFlag ?? readLanesRegistryFlag)(LEAD_AUTOPILOT_FLAG, { company: lead.company });
+            const enabled = await (input.readFlag ?? readLanesRegistryFlag)(LEAD_AUTOPILOT_FLAG, { company });
             if (!enabled) {
                 result.skipped.push({ lead_lane: lead.lane_id, reason: "flag_off" });
                 continue;
             }
-            const status = readStatus(hqRoot, registered.status, lead.company.slug);
+            const status = readStatus(hqRoot, registered.status, company.slug);
             const statusUpdatedAt = typeof status.updated_at === "string" && Number.isFinite(Date.parse(status.updated_at))
                 ? new Date(Date.parse(status.updated_at)).toISOString()
                 : undefined;
-            const stories = projectStories(hqRoot, registered.prd, lead.company.slug, lead.project_id);
+            const stories = projectStories(hqRoot, registered.prd, company.slug, lead.project_id);
             const children = lanes.filter((lane) => lane.senior.kind === "lane" && lane.senior.id === lead.lane_id);
             const planned = planLeadAutopilotWakes({
                 lead,