@indigoai-us/hq-cli 5.312.1 → 5.313.0

package/dist/lib/lanes/spawn.d.ts

@@ -14,6 +14,7 @@ import { type KnownModelsDeps } from "./models.js";
 import { type LaunchTrigger } from "./delivery.js";
 import { type MachineIdentity } from "./machine-identity.js";
 import { type AdmissionHost } from "./admission.js";
+import { type StatFs } from "./disk-guard.js";
 import { type LaneCompanyRef, type LaneProvider, type LaneRecord, type AccountHistoryEntry } from "./types.js";
 export declare const LANES_RUNS_REL: string;
 /** Written by reconcile before a resume spawn; the worker prompt names this path. */
@@ -74,6 +75,10 @@ export interface SpawnLaneDeps {
     hostname?: string;
     /** The caller's host scope for admission checks; reconcile supplies its resolved host. */
     admissionHost?: AdmissionHost;
+    /** Resolved per-company by the async command/reconcile boundary. */
+    lowDiskGuardEnabled?: boolean;
+    /** Injected statfs boundary; production uses node:fs.statfsSync. */
+    statfs?: StatFs;
     /** Provider model catalog dependencies, shared with create in tests. */
     modelDeps?: KnownModelsDeps;
     /** Create validated this exact account/model candidate before its admission lock. */

package/dist/lib/lanes/spawn.js

@@ -36,6 +36,7 @@ import { MESSAGE_REPLAY_STATE_NAME } from "./message-replay.js";
 import { markAnsweredQuestionsDelivered } from "./questions.js";
 import { hasEarlierEligibleQueuedLane, laneAdmissionCapReason, withLaneAdmissionLock, } from "./admission.js";
 import { resolveAdmissionHost } from "./admission-host.js";
+import { checkLaneDiskSpace, lowDiskGuardEnabledForLane } from "./disk-guard.js";
 import { LANE_ENVELOPE_JSON_SCHEMA, ENVELOPE_INVALID_REASON, parseLaneProvider, } from "./types.js";
 export const LANES_RUNS_REL = path.join("workspace", "lanes-runs");
 /** Written by reconcile before a resume spawn; the worker prompt names this path. */
@@ -539,7 +540,10 @@ export async function retryLaneOnAlternateAccount(hqRoot, lane, reason, writer =
         });
         if (capacityReason !== undefined || earlierEligibleLane)
             return moved;
-        return spawnLaneWorker(hqRoot, moved, deps);
+        return spawnLaneWorker(hqRoot, moved, {
+            ...deps,
+            lowDiskGuardEnabled: deps.lowDiskGuardEnabled ?? await lowDiskGuardEnabledForLane(hqRoot, moved),
+        });
     });
 }
 export function appendModelFlag(provider, args, model) {
@@ -1802,6 +1806,27 @@ export function spawnLaneWorker(hqRoot, lane, deps = {}, launch = {}) {
     if (preservedAccountModel !== undefined)
         pinnedModel = preservedAccountModel;
     const resolved = selection.account;
+    if (deps.lowDiskGuardEnabled === true) {
+        const free = checkLaneDiskSpace(hqRoot, resolved.home, deps.statfs, config.low_disk_min_free_bytes);
+        if (free.low) {
+            const measuredAt = (deps.now ?? (() => new Date()))().toISOString();
+            return retryUpdateLane(hqRoot, lane.lane_id, "spawn", (current) => ({
+                ...current,
+                state: "queued",
+                queued_reason: "low_disk",
+                queued_details: {
+                    reason: "low_disk",
+                    hq_free_bytes: free.hq.free_bytes,
+                    provider_free_bytes: free.provider.free_bytes,
+                    measured_at: measuredAt,
+                },
+                queued_at: current.queued_at ?? measuredAt,
+                admission_reserved_at: undefined,
+                terminal_reason: undefined,
+                terminal_details: undefined,
+            }));
+        }
+    }
     const status = accountStatus(lane.provider, resolved.id, config, { existsSync, hostname });
     if (isLoggedOut(status)) {
         const failed = markPreSpawnFailure

package/dist/lib/lanes/store.js

@@ -612,6 +612,17 @@ export function parseLaneRecord(raw, filePath) {
                 });
             }
         }
+        else if (detailsRecord.reason === "low_disk") {
+            if (raw.state !== "queued" || raw.queued_reason !== "low_disk" ||
+                !Number.isSafeInteger(detailsRecord.hq_free_bytes) || detailsRecord.hq_free_bytes < 0 ||
+                !Number.isSafeInteger(detailsRecord.provider_free_bytes) || detailsRecord.provider_free_bytes < 0) {
+                throw new LaneSchemaError("queued_details must describe measured low-disk queue state", {
+                    path: filePath,
+                    field: "queued_details",
+                });
+            }
+            requireTimestamp(detailsRecord.measured_at, "queued_details.measured_at", filePath);
+        }
         else {
             throw new LaneSchemaError("queued_details must describe a supported queue condition", {
                 path: filePath,

package/dist/lib/lanes/types.d.ts

@@ -177,7 +177,7 @@ export declare const TERMINAL_LANE_STATES: readonly ["done", "failed", "interrup
 export type TerminalLaneState = (typeof TERMINAL_LANE_STATES)[number];
 export declare const LANE_PROVIDERS: readonly ["claude", "codex", "grok"];
 export type LaneProvider = (typeof LANE_PROVIDERS)[number];
-export declare const QUEUED_REASONS: readonly ["cap", "provider_cap", "account_cap", "profile_cap", "queue_position", "throttle", "provider_binary_missing", "account_retry", "worker_profile_changed"];
+export declare const QUEUED_REASONS: readonly ["cap", "provider_cap", "account_cap", "profile_cap", "queue_position", "throttle", "provider_binary_missing", "account_retry", "worker_profile_changed", "low_disk"];
 export type QueuedReason = (typeof QUEUED_REASONS)[number];
 export type QueuedDetails = {
     reason: "worker_profile_changed";
@@ -188,6 +188,11 @@ export type QueuedDetails = {
     reason: "outpost_dispatch_unknown";
     outcome_unknown: true;
     command_id: string | null;
+} | {
+    reason: "low_disk";
+    hq_free_bytes: number;
+    provider_free_bytes: number;
+    measured_at: string;
 };
 export declare function isQueuedReason(value: unknown): value is QueuedReason;
 export declare const HOST_KINDS: readonly ["local", "outpost"];
@@ -1007,6 +1012,11 @@ export interface LanesConfig {
         checks: TrackerChecksConfig;
     };
     runaway_search_guard?: RunawaySearchGuardConfig;
+    /** Optional free-space threshold override for the low-disk admission gate. */
+    low_disk_min_free_bytes?: number;
+    /** Retention ages for Codex session rollout maintenance. */
+    codex_rollout_compress_after_hours?: number;
+    codex_rollout_delete_after_days?: number;
     /** Seconds an unanswered question waits at a session audience before advancing. */
     session_question_timeout_secs: number;
     /** Age in hours after which an open manager blocker must be re-verified. */

package/dist/lib/lanes/types.js

@@ -112,6 +112,7 @@ export const QUEUED_REASONS = [
     "provider_binary_missing",
     "account_retry",
     "worker_profile_changed",
+    "low_disk",
 ];
 export function isQueuedReason(value) {
     return typeof value === "string" && QUEUED_REASONS.includes(value);

package/dist/utils/pack-contributions.d.ts

@@ -77,11 +77,6 @@ export type LinkStatus = 'live' | 'broken' | 'missing' | 'foreign';
  * effect (a config merge) is handled separately (US-004/US-005).
  */
 export declare function contributionLinks(hqRoot: string, packDir: string, contributes: Partial<Record<PackContributeKey, string[]>>): WiredLink[];
-/**
- * Canonical absolute path — resolves symlinks and platform aliases such as
- * macOS `/var` ↔ `/private/var` so equivalent paths compare equal.
- */
-export declare function canonicalPath(p: string): string;
 /** Classify a host path against the link that should own it. */
 export declare function linkStatus(link: WiredLink, packDir?: string): LinkStatus;
 /** A content pack's manifest plus the install-time stamped source. */

package/dist/utils/pack-contributions.js

@@ -137,7 +137,7 @@ export function contributionLinks(hqRoot, packDir, contributes) {
  * Canonical absolute path — resolves symlinks and platform aliases such as
  * macOS `/var` ↔ `/private/var` so equivalent paths compare equal.
  */
-export function canonicalPath(p) {
+function canonicalPath(p) {
     try {
         return fs.realpathSync.native(p);
     }

package/dist/utils/redact-error-text.d.ts

@@ -1,5 +1,3 @@
-/** Upper bound on any redacted diagnostic — a message, not a payload dump. */
-export declare const REDACTED_TEXT_MAX_LENGTH = 1000;
 /**
  * Strip credentials from `text`, flatten control characters/whitespace, and
  * bound the length. Idempotent, so applying it at both the throw site and the

package/dist/utils/redact-error-text.js

@@ -11,7 +11,7 @@
 // share it: provider-minted text is untrusted and must never be printed raw.
 import { redactUrlsInText } from "./redact-url.js";
 /** Upper bound on any redacted diagnostic — a message, not a payload dump. */
-export const REDACTED_TEXT_MAX_LENGTH = 1_000;
+const REDACTED_TEXT_MAX_LENGTH = 1_000;
 /**
  * Strip credentials from `text`, flatten control characters/whitespace, and
  * bound the length. Idempotent, so applying it at both the throw site and the

package/dist/utils/sandbox-runner-client.d.ts

@@ -1,4 +1,4 @@
-export type SandboxRunnerState = "queued" | "running" | "succeeded" | "failed";
+type SandboxRunnerState = "queued" | "running" | "succeeded" | "failed";
 export interface SandboxRunnerStartRequest {
     companyUid: string;
     secretNames: string[];
@@ -45,4 +45,5 @@ export declare class SandboxRunnerClient {
     getJob(token: string, jobId: string): Promise<SandboxRunnerJob>;
     pollJob(token: string, jobId: string, options?: SandboxRunnerPollOptions): Promise<SandboxRunnerJob>;
 }
+export {};
 //# sourceMappingURL=sandbox-runner-client.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.312.1",
+  "version": "5.313.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {