@indigoai-us/hq-cli 5.310.0 → 5.311.0

package/dist/fast-core.js

@@ -21,8 +21,11 @@ export async function runFastCore(argv) {
     const entry = parsed.entry;
     // The full graph's process gate accepts textual true/false overrides. It ignores
     // numeric env values, so preserve that behavior for family flags here too.
-    const familyEnabled = entry.kind !== "native" || !entry.familyFlagKey ||
-        await (await import("./native-fast-route.js")).fastFlagEnabled(entry.familyFlagKey, process.env, { numericEnvironmentOverride: false });
+    let familyEnabled = true;
+    if (entry.kind === "native" && entry.familyFlagKey) {
+        const envOverride = localBooleanFlagOverride(entry.familyFlagKey, process.env);
+        familyEnabled = envOverride ?? await (await import("./native-fast-route.js")).fastFlagEnabled(entry.familyFlagKey, process.env, { numericEnvironmentOverride: false });
+    }
     const useShell = entry.kind === "native" && Boolean(entry.familyFlagKey) && !familyEnabled;
     const shouldInjectRoot = useShell
         ? entry.shellHqRoot === "live" || (entry.shellHqRoot === "reconcile-default" &&
@@ -87,4 +90,14 @@ export async function runFastCore(argv) {
     // Propagate verbatim: these scripts use their exit code as their interface.
     process.exit(code);
 }
+/** Match hq-flags-client's literal true/false env override without loading its module. */
+function localBooleanFlagOverride(flagKey, env) {
+    const envKey = `HQ_FLAG_${flagKey.replace(/[.-]/g, "_").toUpperCase()}`;
+    const value = env[envKey];
+    if (value === "true")
+        return true;
+    if (value === "false")
+        return false;
+    return null;
+}
 //# sourceMappingURL=fast-core.js.map

package/dist/fast-scaffold.js

@@ -11,8 +11,31 @@
  */
 /** The relocated scripts that qualify for the entrypoint fast path. */
 export const FAST_SCAFFOLD_SCRIPTS = [
-    { name: "checkpoint-stop-gate", kind: "shell", asset: "core/scripts/checkpoint-stop-gate.sh", root: "live" },
-    { name: "hq-session", kind: "shell", asset: "core/scripts/hq-session.sh", root: "live" },
+    {
+        name: "checkpoint-stop-gate",
+        kind: "native",
+        modulePath: "./commands/core-checkpoint-stop-gate-native.js",
+        exportName: "runCheckpointStopGateFast",
+        flagKey: "hq-core-native-fast-route",
+        familyFlagKey: "core-native-session",
+        asset: "core/scripts/checkpoint-stop-gate.sh",
+        root: "live",
+        shellCwd: "live",
+        shellHqRoot: "live",
+        readsStdin: true,
+    },
+    {
+        name: "hq-session",
+        kind: "native",
+        modulePath: "./commands/core-hq-session-native.js",
+        exportName: "runHqSessionFast",
+        flagKey: "hq-core-native-fast-route",
+        familyFlagKey: "core-native-session",
+        asset: "core/scripts/hq-session.sh",
+        root: "live",
+        shellCwd: "live",
+        shellHqRoot: "live",
+    },
     {
         name: "timeout-guard",
         kind: "native",

package/dist/index.js

@@ -35,6 +35,14 @@ if (isVersionRequest(process.argv)) {
         });
     }
 }
+else if (parseFastCore(process.argv)?.entry.kind === "native" &&
+    (process.env.HQ_FLAG_HQ_CORE_NATIVE_FAST_ROUTE === "true" ||
+        process.env.HQ_FLAG_HQ_CORE_NATIVE_FAST_ROUTE === "1")) {
+    // An explicit enabled override has already decided the global gate. Skip the
+    // snapshot reader import on hot native plumbing paths; runFastCore still
+    // checks the command-family flag before choosing native or shell rollback.
+    void import("./fast-core.js").then(({ runFastCore }) => runFastCore(process.argv));
+}
 else if (parseFastCore(process.argv)?.entry.kind === "native") {
     // Native routes are default-off. Resolve the company-scoped persisted flag
     // without loading the command graph; a miss or stale snapshot takes the

package/dist/lib/bot/continuity.d.ts

@@ -1,5 +1,5 @@
 import type { BotConfig } from "./config.js";
-export interface ContinuityFile {
+interface ContinuityFile {
     area: "worker" | "memory";
     path: string;
     bytes: number;
@@ -63,4 +63,5 @@ export declare function planFleetContinuity(bundle: BotContinuityBundle, target:
         sha256: string;
     };
 };
+export {};
 //# sourceMappingURL=continuity.d.ts.map

package/dist/lib/bot/job-completions.d.ts

@@ -45,7 +45,6 @@
  * everything it needs in its own prompt.
  */
 import type { JobRunStatus } from "./api.js";
-export declare const BOT_JOB_COMPLETIONS_NAME = "job-completions.json";
 /** First retry gap; each failure doubles it. */
 export declare const COMPLETION_RETRY_BASE_MS = 2000;
 /** Never wait longer than this between retries. */
@@ -75,7 +74,6 @@ export interface PendingJobCompletion {
     /** Epoch ms before which this must not be retried (exponential backoff). */
     nextAttemptAt: number;
 }
-export declare function botJobCompletionsPath(dir: string): string;
 export declare function readPendingJobCompletions(dir: string): PendingJobCompletion[];
 /** The gap before attempt N (1-based), doubling and capped. */
 export declare function completionRetryDelayMs(attempts: number): number;

package/dist/lib/bot/job-completions.js

@@ -46,7 +46,7 @@
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
-export const BOT_JOB_COMPLETIONS_NAME = "job-completions.json";
+const BOT_JOB_COMPLETIONS_NAME = "job-completions.json";
 /** First retry gap; each failure doubles it. */
 export const COMPLETION_RETRY_BASE_MS = 2_000;
 /** Never wait longer than this between retries. */
@@ -57,7 +57,7 @@ export const COMPLETION_RETRY_MAX_MS = 5 * 60_000;
  * in-progress slot on its own, so a later report changes nothing.
  */
 export const MAX_COMPLETION_AGE_MS = 60 * 60_000;
-export function botJobCompletionsPath(dir) {
+function botJobCompletionsPath(dir) {
     return path.join(dir, BOT_JOB_COMPLETIONS_NAME);
 }
 function isPending(raw) {

package/dist/lib/bot/local-config.d.ts

@@ -10,10 +10,6 @@
  * live only in ~/.hq/bots/<name>/machine-creds.json and never travel here.
  */
 import { type BotConfig, type BotKind, type BotMemoryMode, type BotRuntimeId } from "./config.js";
-/** Same limit the server enforces on the stored value. */
-export declare const BOT_LOCAL_CONFIG_MAX_BYTES: number;
-/** Key names the server rejects outright (case-insensitive, substring). */
-export declare const BOT_LOCAL_CONFIG_FORBIDDEN_KEY_RE: RegExp;
 /**
  * Everything needed to rebuild a bot here, minus anything secret. Written on
  * create, returned by `GET /v1/agents/mine?local=1` and by the credential
@@ -62,10 +58,4 @@ export declare const BOT_RESTORE_DEFAULTS: {
 };
 /** Human summary of the settings a restore is about to apply. */
 export declare function describeBotLocalConfig(local: BotLocalConfig | null): string;
-/** Exported so callers can present the accepted values without importing config.ts. */
-export declare const BOT_LOCAL_CONFIG_VALUES: {
-    readonly runtimes: readonly ["claude", "codex", "grok"];
-    readonly kinds: readonly ["personal", "company"];
-    readonly memoryModes: readonly ["synced", "local"];
-};
 //# sourceMappingURL=local-config.d.ts.map

package/dist/lib/bot/local-config.js

@@ -9,11 +9,11 @@
  * checks the result before it leaves this machine: a bot's machine credentials
  * live only in ~/.hq/bots/<name>/machine-creds.json and never travel here.
  */
-import { BOT_KINDS, BOT_MEMORY_MODES, BOT_RUNTIMES, botMemoryMode, effectiveBotCompanies, effectiveBotKind, isBotKind, isBotMemoryMode, isBotRuntimeId, } from "./config.js";
+import { botMemoryMode, effectiveBotCompanies, effectiveBotKind, isBotKind, isBotMemoryMode, isBotRuntimeId, } from "./config.js";
 /** Same limit the server enforces on the stored value. */
-export const BOT_LOCAL_CONFIG_MAX_BYTES = 8 * 1024;
+const BOT_LOCAL_CONFIG_MAX_BYTES = 8 * 1024;
 /** Key names the server rejects outright (case-insensitive, substring). */
-export const BOT_LOCAL_CONFIG_FORBIDDEN_KEY_RE = /secret|token|password|creds/i;
+const BOT_LOCAL_CONFIG_FORBIDDEN_KEY_RE = /secret|token|password|creds/i;
 /** Walks a value and throws when any key looks like it could carry a secret. */
 export function assertNoSecretKeys(value, path = "localConfig") {
     if (Array.isArray(value)) {
@@ -142,10 +142,4 @@ export function describeBotLocalConfig(local) {
         bits.push(local.model);
     return bits.join(", ");
 }
-/** Exported so callers can present the accepted values without importing config.ts. */
-export const BOT_LOCAL_CONFIG_VALUES = {
-    runtimes: BOT_RUNTIMES,
-    kinds: BOT_KINDS,
-    memoryModes: BOT_MEMORY_MODES,
-};
 //# sourceMappingURL=local-config.js.map

package/dist/lib/bot/owner-context.d.ts

@@ -13,7 +13,7 @@
  * slugs, uids, roles) reaches the model; the owner's token never does. A failed
  * lookup is reported as "could not check", never as "no companies".
  */
-export interface OwnerCompany {
+interface OwnerCompany {
     companyUid: string;
     /** Present when the server enriched it. */
     companySlug?: string;
@@ -55,15 +55,10 @@ export interface OwnerLookupIo {
     /** Test seam for the retry pause. */
     sleep?: (ms: number) => Promise<void>;
 }
-export declare const defaultOwnerLookupIo: OwnerLookupIo;
-/** A read right after sign-in or bot start can fail once; try again before reporting it. */
-export declare const OWNER_LOOKUP_RETRY_DELAYS_MS: number[];
 export declare function lookupOwnerContext(ownerUid: string, io?: OwnerLookupIo): Promise<OwnerContext>;
 /** Successful lookups are reused for 5 minutes, failures retried after 1 minute. */
 export declare const OWNER_CONTEXT_TTL_MS: number;
 export declare const OWNER_CONTEXT_RETRY_MS = 60000;
-/** A turn never waits longer than this for a refresh; the lookup keeps going in the background. */
-export declare const OWNER_CONTEXT_WAIT_MS = 8000;
 export declare class OwnerContextCache {
     private readonly lookup;
     private readonly nowMs;
@@ -80,4 +75,5 @@ export declare class OwnerContextCache {
  * model cannot confuse the owner's memberships with its own.
  */
 export declare function ownerContextBlock(ctx: OwnerContext, agentUid: string): string;
+export {};
 //# sourceMappingURL=owner-context.d.ts.map

package/dist/lib/bot/owner-context.js

@@ -18,7 +18,7 @@ import { resolveCallerPersonUid, vaultApiFetch } from "../../utils/vault-api.js"
 function message(err) {
     return err instanceof Error ? err.message : String(err);
 }
-export const defaultOwnerLookupIo = {
+const defaultOwnerLookupIo = {
     // tokenSource "person" never uses the bot's machine creds, even though
     // HQ_MACHINE_CREDS_FILE is set for this process.
     personToken: () => ensureCognitoToken({ tokenSource: "person", interactive: false }),
@@ -34,7 +34,7 @@ export const defaultOwnerLookupIo = {
     },
 };
 /** A read right after sign-in or bot start can fail once; try again before reporting it. */
-export const OWNER_LOOKUP_RETRY_DELAYS_MS = [1_000, 2_000];
+const OWNER_LOOKUP_RETRY_DELAYS_MS = [1_000, 2_000];
 async function withRetry(fn, io) {
     const sleep = io.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
     let lastErr;
@@ -84,7 +84,7 @@ export async function lookupOwnerContext(ownerUid, io = defaultOwnerLookupIo) {
 export const OWNER_CONTEXT_TTL_MS = 5 * 60_000;
 export const OWNER_CONTEXT_RETRY_MS = 60_000;
 /** A turn never waits longer than this for a refresh; the lookup keeps going in the background. */
-export const OWNER_CONTEXT_WAIT_MS = 8_000;
+const OWNER_CONTEXT_WAIT_MS = 8_000;
 export class OwnerContextCache {
     lookup;
     nowMs;

package/dist/lib/bot/runtime/windows.d.ts

@@ -1,7 +1,5 @@
 import { type SpawnPlan } from "../../../utils/windows-spawn.js";
 type ExistsSync = (candidate: string) => boolean;
-/** Resolve an npm-installed provider command using Windows PATH and PATHEXT. */
-export declare function resolveWindowsExecutable(name: string, env: NodeJS.ProcessEnv, existsSync?: ExistsSync, cwd?: string): string | null;
 /** Preserve non-Windows lookup. Windows returns the first PATH/PATHEXT match. */
 export declare function resolveRuntimeBinary(name: string, env: NodeJS.ProcessEnv, platform?: NodeJS.Platform, existsSync?: ExistsSync, cwd?: string): string;
 /** Directly spawn native files; pass only batch shims through cmd.exe. */

package/dist/lib/bot/runtime/windows.js

@@ -8,7 +8,7 @@ function envValue(env, name) {
     return key ? env[key] : undefined;
 }
 /** Resolve an npm-installed provider command using Windows PATH and PATHEXT. */
-export function resolveWindowsExecutable(name, env, existsSync = fs.existsSync, cwd = process.cwd()) {
+function resolveWindowsExecutable(name, env, existsSync = fs.existsSync, cwd = process.cwd()) {
     const pathValue = envValue(env, "PATH") ?? "";
     const rawExtensions = (envValue(env, "PATHEXT") || DEFAULT_PATHEXT)
         .split(";")

package/dist/lib/bot/setup-explain.d.ts

@@ -16,10 +16,6 @@
 export declare const EXPLAIN_HQ_SUGGESTION = "Explain HQ first";
 /** Where the explanation lives, relative to the setup worker folder. */
 export declare const EXPLAIN_HQ_FILE: string;
-/** The setup bot's progress note in its memory folder (setup worker.yaml). */
-export declare const SETUP_PROGRESS_FILE = "setup-progress.md";
-/** Runner-owned state, in the bot's own folder (never the model's memory). */
-export declare const SETUP_INTRO_STATE_FILE = "setup-intro.json";
 /**
  * Put in front of the next message from the person, so the model knows the
  * explanation went out without it. It never reaches the person.

package/dist/lib/bot/setup-explain.js

@@ -19,9 +19,9 @@ export const EXPLAIN_HQ_SUGGESTION = "Explain HQ first";
 /** Where the explanation lives, relative to the setup worker folder. */
 export const EXPLAIN_HQ_FILE = path.join("skills", "explain-hq.md");
 /** The setup bot's progress note in its memory folder (setup worker.yaml). */
-export const SETUP_PROGRESS_FILE = "setup-progress.md";
+const SETUP_PROGRESS_FILE = "setup-progress.md";
 /** Runner-owned state, in the bot's own folder (never the model's memory). */
-export const SETUP_INTRO_STATE_FILE = "setup-intro.json";
+const SETUP_INTRO_STATE_FILE = "setup-intro.json";
 const EXPLANATION_HEADING = /^##[ \t]+The explanation[ \t]*$/m;
 const CLOSING_HEADING = /^##[ \t]+After the explanation, when the app sends it[ \t]*$/m;
 /**

package/dist/lib/daemon/catalog.d.ts

@@ -23,7 +23,7 @@ export declare function enabledServices(machineType: MachineType, overrides: {
     enable: readonly string[];
     disable: readonly string[];
 }): ServiceName[];
-export type UnitCommand = {
+type UnitCommand = {
     type: "hq";
     args: string[];
 } | {
@@ -38,7 +38,7 @@ export type UnitCommand = {
     type: "internal";
     task: "rotate-logs";
 };
-export interface UnitBlock {
+interface UnitBlock {
     /** `waiting` clears on its own once the requirement appears; `unavailable` needs a newer CLI. */
     state: "waiting" | "unavailable";
     reason: string;
@@ -128,4 +128,5 @@ export declare const CODEX_RUNNER_SCRIPT = "/usr/local/bin/outpost-codex-runner.
 export declare const CLAUDE_RUNNER_SCRIPT = "/usr/local/bin/outpost-runner.sh";
 /** Turn enabled services into concrete units for this host. */
 export declare function planUnits(services: readonly ServiceName[], ctx: PlanContext): UnitPlan[];
+export {};
 //# sourceMappingURL=catalog.d.ts.map

package/dist/lib/daemon/hq-cloud.d.ts

@@ -52,7 +52,6 @@ export declare function hqCloudInstallCommand(prefix: string, version: string, p
     args: string[];
     shell: boolean;
 };
-export declare function readHqCloudCopy(root: string): HqCloudCopy | null;
 /** The copy bundled with this CLI. */
 export declare function bundledHqCloud(): HqCloudCopy | null;
 /** The hq-cloud the daemon should run right now. */
@@ -63,7 +62,7 @@ export interface HqCloudUpdateOutcome {
     to: string | null;
     detail?: string;
 }
-export interface NpmRunResult {
+interface NpmRunResult {
     status: number | null;
     stdout?: string | null;
     stderr?: string | null;
@@ -76,4 +75,5 @@ export interface UpdateHqCloudDeps {
 }
 /** Install or update the updater's copy, as this (the login) user. */
 export declare function updateManagedHqCloud(daemonRoot: string, env: NodeJS.ProcessEnv, deps?: UpdateHqCloudDeps): HqCloudUpdateOutcome;
+export {};
 //# sourceMappingURL=hq-cloud.d.ts.map

package/dist/lib/daemon/hq-cloud.js

@@ -108,7 +108,7 @@ export function hqCloudInstallCommand(prefix, version, platform = process.platfo
     const plan = buildSpawnPlan("npm", ["install", "--prefix", prefix, "--no-audit", "--no-fund", "--omit=dev", `${HQ_CLOUD_PACKAGE}@${version}`], platform);
     return { file: plan.cmd, args: plan.args, shell: plan.shell };
 }
-export function readHqCloudCopy(root) {
+function readHqCloudCopy(root) {
     try {
         const pkg = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8"));
         return typeof pkg.version === "string" ? { root, version: pkg.version } : null;

package/dist/lib/daemon/machine-type.d.ts

@@ -12,12 +12,10 @@
  *   6. macOS or Windows → desktop
  *   7. any other host → self-hosted
  */
-export declare const MACHINE_TYPES: readonly ["desktop", "self-hosted", "outpost", "agent-box", "agent-kit"];
+declare const MACHINE_TYPES: readonly ["desktop", "self-hosted", "outpost", "agent-box", "agent-kit"];
 export type MachineType = (typeof MACHINE_TYPES)[number];
 export declare const MACHINE_TYPE_MARKER_PATH = "/etc/hq/machine-type";
-export type MachineTypeSource = "flag" | "config" | "marker" | "outpost-units" | "agent-kit-creds" | "container" | "platform";
-/** The Claude runner unit outpost provisioning installs; its `User=` is the box's login user. */
-export declare const OUTPOST_RUNNER_UNIT = "/etc/systemd/system/outpost-runner.service";
+type MachineTypeSource = "flag" | "config" | "marker" | "outpost-units" | "agent-kit-creds" | "container" | "platform";
 export interface MachineTypeResult {
     type: MachineType;
     source: MachineTypeSource;
@@ -48,4 +46,5 @@ export declare function parseMachineTypeMarker(text: string): {
 export declare function detectMachineType(flag: string | undefined, deps: DetectMachineTypeDeps): MachineTypeResult;
 /** The home directory of `user` in passwd-format text, or null when the account is not listed. */
 export declare function homeFromPasswd(passwd: string, user: string): string | null;
+export {};
 //# sourceMappingURL=machine-type.d.ts.map

package/dist/lib/daemon/machine-type.js

@@ -14,10 +14,10 @@
  */
 import * as path from "node:path";
 import { AGENT_DIR_ENV, MACHINE_CREDS_NAME, agentRootDir } from "../agent-kit/paths.js";
-export const MACHINE_TYPES = ["desktop", "self-hosted", "outpost", "agent-box", "agent-kit"];
+const MACHINE_TYPES = ["desktop", "self-hosted", "outpost", "agent-box", "agent-kit"];
 export const MACHINE_TYPE_MARKER_PATH = "/etc/hq/machine-type";
 /** The Claude runner unit outpost provisioning installs; its `User=` is the box's login user. */
-export const OUTPOST_RUNNER_UNIT = "/etc/systemd/system/outpost-runner.service";
+const OUTPOST_RUNNER_UNIT = "/etc/systemd/system/outpost-runner.service";
 export function isMachineType(value) {
     return typeof value === "string" && MACHINE_TYPES.includes(value);
 }

package/dist/lib/daemon/remote-control.d.ts

@@ -21,7 +21,6 @@
  * user's own tmux sessions.
  */
 import type { RunCommand } from "../service-manager/launchd.js";
-export declare const TMUX_SOCKET = "hq-daemon";
 export declare const TMUX_SESSION = "remote-control";
 export declare const CODEX_TMUX_SESSION = "codex-remote-control";
 export declare function remoteControlArgs(opts: {

package/dist/lib/daemon/remote-control.js

@@ -22,7 +22,7 @@
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
-export const TMUX_SOCKET = "hq-daemon";
+const TMUX_SOCKET = "hq-daemon";
 export const TMUX_SESSION = "remote-control";
 export const CODEX_TMUX_SESSION = "codex-remote-control";
 export function remoteControlArgs(opts) {

package/dist/lib/daemon/supervisor.d.ts

@@ -25,9 +25,6 @@ import type { UnitPlan } from "./catalog.js";
 import type { MachineType } from "./machine-type.js";
 import type { ControlRequest } from "./requests.js";
 import { syncPassResult } from "./sync-runner.js";
-export declare const BACKOFF_BASE_MS = 1000;
-export declare const BACKOFF_MAX_MS = 60000;
-export declare const HEALTHY_RUN_MS = 60000;
 export declare const STOP_ESCALATION_MS = 10000;
 /** After a handoff, how long a replaced unit must stay up before the next one is replaced. */
 export declare const HANDOFF_STAGGER_MS = 15000;
@@ -42,8 +39,8 @@ export interface SupervisedChild {
     on(event: "error", handler: (err: Error) => void): unknown;
     kill(signal?: NodeJS.Signals | number): boolean;
 }
-export type UnitStatus = "running" | "waiting" | "unavailable" | "backoff" | "exited" | "idle" | "stopped";
-export interface UnitState {
+type UnitStatus = "running" | "waiting" | "unavailable" | "backoff" | "exited" | "idle" | "stopped";
+interface UnitState {
     id: string;
     service: string;
     kind: UnitPlan["kind"];
@@ -83,7 +80,7 @@ export interface AdoptedUnit {
     child: SupervisedChild;
 }
 /** A long-running service left running by release(). */
-export interface ReleasedUnit {
+interface ReleasedUnit {
     id: string;
     pid: number;
     key: string;
@@ -123,9 +120,6 @@ export interface Supervisor {
     /** Stop supervising without signalling any child; returns the long-running units left running. */
     release(): ReleasedUnit[];
 }
-/** Plan reads in a row that must find a running remote-control host blocked before it is paused. */
-export declare const BLOCKED_READS_BEFORE_PAUSE = 2;
-export declare function backoffMs(attempt: number): number;
 /**
  * What a unit's process was started from; a unit whose key changes is
  * restarted. The CLI version counts only for `hq` commands, so a CLI update
@@ -134,4 +128,5 @@ export declare function backoffMs(attempt: number): number;
  */
 export declare function planKey(plan: UnitPlan, cliVersion?: string): string;
 export declare function createSupervisor(deps: SupervisorDeps): Supervisor;
+export {};
 //# sourceMappingURL=supervisor.d.ts.map

package/dist/lib/daemon/supervisor.js

@@ -23,9 +23,9 @@
  */
 import { StringDecoder } from "node:string_decoder";
 import { SYNC_RUNNER_LEASE_CONFLICT_EXIT, SYNC_RUNNER_LEASE_RETRY_MS, parseSyncRunnerProtocolLine, syncPassResult, } from "./sync-runner.js";
-export const BACKOFF_BASE_MS = 1_000;
-export const BACKOFF_MAX_MS = 60_000;
-export const HEALTHY_RUN_MS = 60_000;
+const BACKOFF_BASE_MS = 1_000;
+const BACKOFF_MAX_MS = 60_000;
+const HEALTHY_RUN_MS = 60_000;
 export const STOP_ESCALATION_MS = 10_000;
 const MESH_OWNER_RECHECK_MS = 15_000;
 const MESH_OWNER_LOG_INTERVAL_MS = 10 * 60_000;
@@ -34,8 +34,8 @@ export const HANDOFF_STAGGER_MS = 15_000;
 /** How long a draining unit may take to finish its work before it gets SIGTERM. */
 export const HANDOFF_DRAIN_MAX_MS = 15 * 60_000;
 /** Plan reads in a row that must find a running remote-control host blocked before it is paused. */
-export const BLOCKED_READS_BEFORE_PAUSE = 2;
-export function backoffMs(attempt) {
+const BLOCKED_READS_BEFORE_PAUSE = 2;
+function backoffMs(attempt) {
     return Math.min(BACKOFF_MAX_MS, BACKOFF_BASE_MS * 2 ** Math.max(0, attempt));
 }
 /**

package/dist/lib/lanes/admission-host.d.ts

@@ -1,4 +1,5 @@
 import type { AdmissionHost } from "./admission.js";
+import type { LaneHost } from "./types.js";
 export declare const OUTPOST_ID_PATH = "/etc/outpost/outpost-id";
 export declare const OUTPOST_DIR = "/etc/outpost";
 export type OutpostIdentity = {
@@ -16,4 +17,6 @@ export declare function resolveAdmissionHost(deps?: {
     existsSync?: (p: string) => boolean;
     readFileSync?: (p: string) => string;
 }): AdmissionHost;
+/** `primary` names the controller registry unless the caller is a different Outpost. */
+export declare function isControllerAliasOutpostId(outpostId: string, localHost: LaneHost): boolean;
 //# sourceMappingURL=admission-host.d.ts.map

package/dist/lib/lanes/admission-host.js

@@ -30,4 +30,8 @@ export function resolveAdmissionHost(deps = {}) {
         outpostId: identity.kind === "id" ? identity.id : null,
     };
 }
+/** `primary` names the controller registry unless the caller is a different Outpost. */
+export function isControllerAliasOutpostId(outpostId, localHost) {
+    return outpostId === "primary" && !(localHost.kind === "outpost" && localHost.id !== "primary");
+}
 //# sourceMappingURL=admission-host.js.map

package/dist/lib/lanes/autopilot-registry.d.ts

@@ -0,0 +1,62 @@
+import type { LaneCompanyRef, LaneHost } from "./types.js";
+export declare const OUTPOST_LEAD_REGISTRY_SCHEMA = "hq-lanes-outpost-lead-registry.v1";
+export declare const OUTPOST_LEAD_REGISTRY_MAX_AGE_MS: number;
+export declare const OUTPOST_LEAD_REGISTRY_REFRESH_MS: number;
+export declare const LEAD_REGISTRY_REL: string;
+export declare const OUTPOST_LEAD_REGISTRY_STATE_REL: string;
+export declare const LEAD_AUTOPILOT_FLAG = "lanes.lead-autopilot";
+export interface LeadRegistryRow {
+    team: string;
+    lane: string;
+    host: string;
+    status: string;
+    prd: string;
+}
+export interface OutpostLeadRegistry {
+    schema_version: typeof OUTPOST_LEAD_REGISTRY_SCHEMA;
+    outpost_id: string;
+    generated_at: string;
+    juniors: LeadRegistryRow[];
+}
+export declare function buildOutpostLeadRegistry(input: {
+    rows: readonly LeadRegistryRow[];
+    outpostId: string;
+    generatedAt: string;
+}): OutpostLeadRegistry;
+/** Stage a host-filtered registry on the Outpost using an atomic local rename. */
+export declare function buildOutpostLeadRegistryInstallCommand(registry: OutpostLeadRegistry): string;
+export declare function syncOutpostLeadRegistries(input: {
+    hqRoot: string;
+    outpostIds: readonly string[];
+    generatedAt: string;
+    localHost: LaneHost;
+    resolveCompany: (slug: string) => Promise<LaneCompanyRef>;
+    readFlag: (flag: string, options: {
+        company: LaneCompanyRef;
+    }) => Promise<boolean>;
+    dispatch: (request: {
+        outpostId: string;
+        command: string;
+        timeoutSeconds?: number;
+        waitMs?: number;
+    }) => Promise<{
+        done?: boolean;
+        exitCode: number | null;
+        stdout: string;
+        stderr: string;
+    }>;
+}): Promise<Array<{
+    outpost_id: string;
+    row_count: number;
+    skipped: Array<{
+        lane: string;
+        reason: string;
+    }>;
+    dispatched: boolean;
+}>>;
+export declare function validateOutpostLeadRegistry(input: {
+    registry: unknown;
+    outpostId: string;
+    now: Date;
+}): OutpostLeadRegistry;
+//# sourceMappingURL=autopilot-registry.d.ts.map