@indigoai-us/hq-cli 5.316.0 → 5.318.0

package/dist/commands/core-session-title-config-native.d.ts

@@ -0,0 +1,4 @@
+import { type SessionHelperRuntimeOverrides } from "./core-session-helper-runtime.js";
+/** Port of the flat grep/sed settings helper; the hook still parses its own YAML. */
+export declare function runSessionTitleConfigFast(args: readonly string[], _stdin: string, cwd: string, hqRoot: string | undefined, dependencies?: SessionHelperRuntimeOverrides): number;
+//# sourceMappingURL=core-session-title-config-native.d.ts.map

package/dist/commands/core-session-title-config-native.js

@@ -0,0 +1,77 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { resolveSessionHelperRuntime } from "./core-session-helper-runtime.js";
+const C_SPACE = " \\t\\r\\n\\v\\f";
+function yamlScalar(file, key) {
+    let text;
+    try {
+        if (!fs.statSync(file).isFile())
+            return undefined;
+        text = fs.readFileSync(file, "utf8");
+    }
+    catch {
+        return undefined;
+    }
+    const line = text.split(/\r?\n/).find((item) => new RegExp(`^${key}:[${C_SPACE}]*`).test(item));
+    if (line === undefined)
+        return undefined;
+    const value = line.slice(line.indexOf(":") + 1)
+        .replace(new RegExp(`[${C_SPACE}]*#.*$`), "")
+        .replace(new RegExp(`^[${C_SPACE}]+`), "")
+        .replace(new RegExp(`[${C_SPACE}]+$`), "")
+        .replace(/^['"]/, "")
+        .replace(/['"]$/, "");
+    return value || undefined;
+}
+function resolveSettings(root, env) {
+    const settings = {
+        enabled: "true",
+        mode: "full",
+        desktopAutoname: "ignore-first",
+    };
+    for (const file of [
+        path.join(root, "core/settings/session-title.yaml"),
+        path.join(root, "personal/settings/session-title.yaml"),
+    ]) {
+        settings.enabled = yamlScalar(file, "enabled") || settings.enabled;
+        settings.mode = yamlScalar(file, "mode") || settings.mode;
+        settings.desktopAutoname = yamlScalar(file, "desktop_autoname") || settings.desktopAutoname;
+    }
+    settings.enabled = ["0", "false", "FALSE", "False", "off", "OFF", "no", "NO"].includes(settings.enabled)
+        ? "false" : "true";
+    settings.mode = ["auto", "AUTO", "hook", "deterministic"].includes(settings.mode) ? "auto" : "full";
+    settings.desktopAutoname = ["respect", "RESPECT", "off", "OFF", "false", "FALSE", "no", "NO"].includes(settings.desktopAutoname)
+        ? "respect" : "ignore-first";
+    switch (env.HQ_SESSION_TITLE ?? "") {
+        case "0":
+        case "false":
+        case "FALSE":
+        case "off":
+        case "OFF":
+        case "no":
+        case "NO":
+            settings.enabled = "false";
+            break;
+        case "auto":
+        case "AUTO":
+            settings.mode = "auto";
+            break;
+    }
+    if ((env.HQ_DISABLED_HOOKS ?? "").includes("session-title"))
+        settings.enabled = "false";
+    return settings;
+}
+/** Port of the flat grep/sed settings helper; the hook still parses its own YAML. */
+export function runSessionTitleConfigFast(args, _stdin, cwd, hqRoot, dependencies = {}) {
+    let root = hqRoot ?? cwd;
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === "--root") {
+            root = args[i + 1] ?? root;
+            i++;
+        }
+    }
+    const settings = resolveSettings(root, resolveSessionHelperRuntime(dependencies).env);
+    process.stdout.write(`enabled=${settings.enabled}\nmode=${settings.mode}\ndesktop_autoname=${settings.desktopAutoname}\n`);
+    return 0;
+}
+//# sourceMappingURL=core-session-title-config-native.js.map

package/dist/commands/core-session-title-native.d.ts

@@ -0,0 +1,3 @@
+import { type SessionHelperRuntimeOverrides } from "./core-session-helper-runtime.js";
+export declare function runSessionTitleFast(args: readonly string[], _stdin: string, processCwd: string, root: string | undefined, dependencies?: SessionHelperRuntimeOverrides): number;
+//# sourceMappingURL=core-session-title-native.d.ts.map

package/dist/commands/core-session-title-native.js

@@ -0,0 +1,306 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { resolveSessionHelperRuntime } from "./core-session-helper-runtime.js";
+// The legacy helper's compute body is kept as in-process TypeScript.
+export function runSessionTitleFast(args, _stdin, processCwd, root, dependencies = {}) {
+    const { now } = resolveSessionHelperRuntime(dependencies);
+    let sessionId = "default";
+    let commandArg = "";
+    let sessionCwd = "";
+    for (let i = 0; i < args.length; i++) {
+        switch (args[i]) {
+            case "--session-id":
+                sessionId = args[i + 1] ?? "default";
+                i++;
+                break;
+            case "--command":
+                commandArg = args[i + 1] ?? "";
+                i++;
+                break;
+            case "--cwd":
+                sessionCwd = args[i + 1] ?? "";
+                i++;
+                break;
+            default: break;
+        }
+    }
+    const resolvedRoot = root ?? processCwd;
+    const hq = resolvedRoot;
+    const sid = sessionId;
+    let command = (commandArg || "").trim().replace(/^\/+/, "");
+    const key = sid.replace(/[^A-Za-z0-9._-]/g, "_") || "default";
+    const state = path.join(hq, ".claude", "state");
+    const firstLine = (p) => {
+        try {
+            for (let line of fs.readFileSync(p, "utf8").split(/\r?\n/)) {
+                line = line.trim();
+                if (line)
+                    return line;
+            }
+        }
+        catch { /* the manifest is optional */ }
+        return "";
+    };
+    // --- resolve active project path (session-scoped, then global fallback) ---
+    // Session-scoped ONLY. There used to be a fallback to the machine-global
+    // .claude/state/active-session-project here; it made every session without its
+    // own entry inherit whatever project was last active anywhere on the box (142
+    // unrelated sessions all named "learn-policies-only · chat"). Session-scoped
+    // state must fail to empty, never to a shared global.
+    const projPath = firstLine(path.join(state, "auto-session-project-" + key));
+    let company = "";
+    let project = "";
+    if (projPath) {
+        let rel = projPath;
+        try {
+            const resolved = fs.realpathSync(projPath);
+            const hqResolved = fs.realpathSync(hq);
+            const r = path.relative(hqResolved, resolved);
+            if (r === "" || r.startsWith("..") || path.isAbsolute(r))
+                throw new Error("outside hq");
+            rel = r;
+        }
+        catch (e) {
+            rel = projPath.split(hq.replace(/\/+$/, "") + "/").join("");
+        }
+        const parts = rel.replace(/\\/g, "/").replace(/^\/+|\/+$/g, "").split("/").filter(Boolean);
+        if (parts.length >= 2 && parts[0] === "companies") {
+            company = parts[1];
+            project = parts[parts.length - 1];
+        }
+        else if (parts.length && parts[0] === "personal") {
+            company = "personal"; // rendered as the "ME" org token
+            project = parts[parts.length - 1];
+        }
+        else if (parts.length) {
+            project = parts[parts.length - 1];
+        }
+    }
+    // --- company fallbacks when no project resolved ---
+    if (!company && command === "hqwork")
+        company = "hq-core";
+    if (!company && !project) {
+        const manifest = path.join(hq, "companies", "manifest.yaml");
+        const slugs = [];
+        try {
+            let inCompanies = false;
+            for (const line of fs.readFileSync(manifest, "utf8").split(/\r?\n/)) {
+                if (!line.trim() || line.trimStart().startsWith("#"))
+                    continue;
+                if (inCompanies && /^[^\s#]/.test(line))
+                    break;
+                if (/^companies:\s*$/.test(line)) {
+                    inCompanies = true;
+                    continue;
+                }
+                if (inCompanies) {
+                    const m = line.match(/^\x20{2}([a-z][a-z0-9_-]*):\s*$/);
+                    if (m && m[1] !== "_template")
+                        slugs.push(m[1]);
+                }
+            }
+        }
+        catch { /* orchestrator state is optional */ }
+        if (slugs.length === 1)
+            company = slugs[0];
+    }
+    // --- status emoji from the orchestrator ---
+    let emoji = "";
+    const orch = path.join(hq, "workspace", "orchestrator", "state.json");
+    if (project) {
+        try {
+            const data = JSON.parse(fs.readFileSync(orch, "utf8"));
+            for (const p of data.projects || []) {
+                const nm = p.name || "";
+                const prd = String(p.prdPath || "").replace(/\\/g, "/");
+                const expectedProjectPath = company === "personal"
+                    ? `personal/projects/${project}/`
+                    : company ? `companies/${company}/projects/${project}/` : "";
+                const matchesProject = prd
+                    ? expectedProjectPath
+                        ? prd.replace(/^\/+/, "").includes(expectedProjectPath)
+                        : nm === project || prd.includes("/" + project + "/")
+                    : nm === project;
+                if (matchesProject) {
+                    const st = p.state || "";
+                    if (st === "IN_PROGRESS") {
+                        emoji = "▶️";
+                    }
+                    else if (st === "COMPLETED") {
+                        const ts = p.updatedAt || p.updated_at || "";
+                        const t = new Date(ts);
+                        if (!isNaN(t.getTime()) && (now().getTime() - t.getTime()) / 1000 < 86400) {
+                            emoji = "✅"; // only recent completions
+                        }
+                    }
+                    break;
+                }
+            }
+        }
+        catch { /* orchestrator state is optional */ }
+    }
+    // --- mode ---
+    // The emoji encodes what the session IS DOING, not what domain it belongs to.
+    // State is what a human scans a sidebar for ("does this need me?"); domain is
+    // already implied by the subject line. Keyed on the active slash command,
+    // which the wrapper hook already tracks turn to turn.
+    //
+    // Exactly ONE glyph, never two — a second glyph beside the first reads as a
+    // badge pair and makes the left edge busier without making it more scannable.
+    // The single slot shows the most USEFUL thing about the session right now,
+    // picked by the precedence ladder in hq-session-title-grammar: work that needs
+    // the user or has terminated outranks the session kind, which outranks the
+    // workflow stage, which outranks the craft.
+    //
+    // This script only ever emits a stage or kind glyph. It never emits 🙋 (needs
+    // the user) — it cannot know that — and never a craft glyph, since its only
+    // subject is a directory slug and any keyword match against that slug is
+    // redundant with the slug by construction. Both are the model's job.
+    //
+    // A handoff has two moments and they are different rows in a sidebar:
+    // 📝 the handoff is being written (the session is wrapping up) and 📤 it is
+    // ready (the session is closed; resume from the thread). This script emits 📝
+    // while /handoff runs; only the model can know when it finished, so it sets 📤.
+    // Both are distinct from ✅ "the work shipped" and 🤝 "a person owns it now".
+    const MODES = [
+        [/^(brainstorm|idea|dream|discover|strategize)$/, "💭"],
+        [/^(plan|prd|deep-plan|storyboard|architect|review-plan|codebase-design)$/, "📐"],
+        [/^(run-project|execute-task|ship|land|land-batch|run-pipeline|orchestrate|tdd|deploy)$/, "⚡"],
+        [/^(review|code-review|security-review)$/, "👀"],
+        [/^(quality-gate|smoke|verify|diagnose|investigate)$/, "🧪"],
+        [/^(handoff|checkpoint-handoff|retro)$/, "📝"],
+        [/^(delegate|new-hire|new-agent|promote)$/, "🤝"],
+        [/^(dm|hq-slack|meeting-notes|work-broadcast|signals|hq-share)$/, "💬"],
+        [/^(schedule|job|loop)$/, "🔁"],
+    ];
+    const modeFor = (word) => {
+        for (const [re, ic] of MODES)
+            if (re.test(word))
+                return ic;
+        return "";
+    };
+    if (!command)
+        command = "chat";
+    // Precedence: a finished or running project outranks the command word — "it
+    // shipped" and "it is executing right now" beat "you typed /plan an hour ago".
+    // `emoji` is set above from orchestrator state (✅ recent completion, ▶️ running).
+    const mode = emoji === "▶️" ? "⚡" : (emoji || modeFor(command));
+    // --- company ---
+    // Always the first text token. Long slugs get an explicit short form from the
+    // settings `aliases:` block rather than a mid-word truncation — a single-word
+    // slug sliced at 8 characters is unreadable.
+    // Built-ins only. Company short forms are USER data — a release-shipped file
+    // must never carry tenant slugs (enforced by the slug-scan / denylist-scan CI
+    // gates). Users map their own long slugs in personal/settings/session-title.yaml:
+    //
+    //   aliases:
+    //     some-long-company-slug: SHORT
+    //
+    const ALIASES = { personal: "ME", "hq-core": "HQ" };
+    // Merge user aliases from the settings files, lowest precedence first.
+    const readAliases = (file) => {
+        let text = "";
+        try {
+            text = fs.readFileSync(file, "utf8");
+        }
+        catch (e) {
+            return;
+        }
+        let inBlock = false;
+        for (const raw of text.split(/\r?\n/)) {
+            const line = raw.replace(/#.*$/, "").replace(/\s+$/, "");
+            if (!line.trim())
+                continue;
+            if (/^aliases:\s*$/.test(line)) {
+                inBlock = true;
+                continue;
+            }
+            if (!/^\s/.test(line)) {
+                inBlock = false;
+                continue;
+            } // any new top-level key ends it
+            if (!inBlock)
+                continue;
+            const m = line.match(/^\s+["']?([A-Za-z0-9._-]+)["']?:\s*["']?([^"'\s]+)["']?\s*$/);
+            if (m)
+                ALIASES[m[1]] = m[2];
+        }
+    };
+    readAliases(path.join(hq, "core", "settings", "session-title.yaml"));
+    readAliases(path.join(hq, "personal", "settings", "session-title.yaml"));
+    let org = "";
+    if (company) {
+        org = ALIASES[company];
+        if (!org) {
+            const head = company.split("-")[0].toUpperCase();
+            org = head.length <= 8 ? head : head.slice(0, 8);
+        }
+    }
+    // --- compose ---
+    // Grammar:  {glyph} {COMPANY} · {Product} · {subject}
+    //
+    // Every rendered glyph must mean something. When the mode is unknown the title
+    // simply starts with the company — a placeholder icon (the old "🟦") is worse
+    // than nothing, because it trains the eye to ignore the emoji column.
+    //
+    // The hook can only ever put a directory slug in the subject slot. A session
+    // that knows what it is actually about should overwrite this via
+    // set_session_title, keeping the same grammar.
+    // --- product / repo ---
+    // The repo or product the session is working in, rendered between the company
+    // and the subject so identity survives a narrow sidebar's truncation. Derived
+    // from the session cwd when it sits inside repos/; otherwise left to the model.
+    //
+    // A leading company prefix is stripped, because the company token already said
+    // it: repos/public/hq-work under company HQ renders as "Work", not "Hq-work".
+    let product = "";
+    const cwd = sessionCwd;
+    if (cwd) {
+        const rel = cwd.split(/[\\/]/).filter(Boolean);
+        const i = rel.lastIndexOf("repos");
+        if (i !== -1 && rel.length > i + 1) {
+            // repos/<public|private>/<repo>/... or repos/<repo>/...
+            let name = rel[i + 1];
+            if ((name === "public" || name === "private") && rel.length > i + 2)
+                name = rel[i + 2];
+            if (name) {
+                // "hq-work" -> ["HQ", "Work"]. Two-letter tokens are acronyms, not words.
+                let words = name.split("-").filter(Boolean).map((w) => w.length <= 2 ? w.toUpperCase() : w.charAt(0).toUpperCase() + w.slice(1));
+                // Drop a leading word the company token already said: under company HQ,
+                // "hq-work" is "Work", not "HQ Work".
+                if (org && words.length > 1 && words[0].toUpperCase() === org.toUpperCase()) {
+                    words = words.slice(1);
+                }
+                product = words.join(" ");
+            }
+        }
+    }
+    const subject = project || "";
+    // --- stub suppression -------------------------------------------------------
+    // With no project AND no repo/product, every remaining ingredient is
+    // information-free: a bare command word ("chat", "startwork") or a lone org
+    // token ("HQ"). Emitting one of those is actively harmful — it is not merely
+    // useless, it OVERWRITES the host's written summary ("HQ core skill cloning")
+    // with a word that distinguishes nothing, and because the stub never changes,
+    // the wrapper's change-only cadence then goes silent for the rest of the
+    // session. Sessions were sitting on 1281 prompts still titled "chat".
+    //
+    // Printing nothing makes the wrapper exit before it emits or records anything,
+    // so the host's own title stands. The moment a project or repo does resolve,
+    // the normal path takes the title back.
+    if (!project && !product)
+        return 0;
+    const parts = [org, product, subject].filter(Boolean);
+    if (!parts.length)
+        parts.push(command);
+    const compose = (ps) => (mode ? mode + " " : "") + ps.join(" · ");
+    const MAX = 56;
+    let title = compose(parts);
+    if (title.length > MAX && parts.length > 1)
+        title = compose([parts[parts.length - 1]]);
+    if (title.length > MAX)
+        title = title.slice(0, MAX - 1).replace(/\s+$/, "") + "…";
+    process.stdout.write(title + "\n");
+    return 0;
+}
+//# sourceMappingURL=core-session-title-native.js.map

package/dist/commands/core.js

@@ -66,6 +66,7 @@ import { timeoutGuardCommand } from "../lib/core-utils/timeout-guard.js";
 import { readSentryReportStdin, reportSentryEvent } from "../lib/core-utils/sentry-report.js";
 import { CLEAN_HANDOFF_ASSET, RESUME_LOCK_ASSET, VERIFY_DELIVERABLES_ASSET, WORKTREE_GC_ASSET, runCleanWorktreeReconcileHandoff, runResumeThreadLock, runVerifyStoryDeliverables, runWorktreeGc, } from "../lib/core-utils/worktree-resume.js";
 import { coreNativeHandoffEnabled } from "./core-native-handoff-flag.js";
+import { coreNativeHookHelpersEnabled } from "./core-native-hook-helpers-flag.js";
 import { coreCompanyIndexScopeEnabled } from "./core-company-index-scope-flag.js";
 import { runWorkerSkillCommand } from "./core-worker-skills-command.js";
 import { describeCoreCommand, registeredCoreCommandListing, } from "./core-command-catalog.js";
@@ -224,6 +225,10 @@ export const SCAFFOLD_COMMANDS = [
  * direct `hq core` command.
  */
 export const SCAFFOLD_ONLY_ASSETS = [
+    { asset: "core/scripts/session-journal.sh", root: "live", summary: "Rollback companion for native session journal" },
+    { asset: "core/scripts/session-project.sh", root: "live", summary: "Rollback companion for native session project" },
+    { asset: "core/scripts/session-title.sh", root: "live", summary: "Rollback companion for native session title" },
+    { asset: "core/scripts/session-title-config.sh", root: "live", summary: "Rollback companion for native session-title settings" },
     { asset: "core/scripts/resolve-company.sh", root: "live", summary: "Rollback companion for native resolve-company" },
     { asset: "core/scripts/jobs-schedule-parse.sh", root: "live", summary: "Rollback companion for native jobs schedule-parse" },
     { asset: "core/scripts/jobs-validate.sh", root: "live", summary: "Rollback companion for native jobs validate" },
@@ -392,6 +397,62 @@ export function registerCoreCommands(program) {
     registerCoreWorkMeshBindTrustedNative(core);
     registerCoreHookHelperNativeCommands(core);
     registerCoreHookStateHelpers(core);
+    const sessionHelperCommands = [
+        {
+            name: "session-journal", asset: "core/scripts/session-journal.sh", root: "live",
+            summary: "Write and read session journal entries",
+            run: async (args, _stdin, root) => (await import("./core-session-journal-native.js"))
+                .runSessionJournalFast(args, "", process.cwd(), root),
+        },
+        {
+            name: "session-project", asset: "core/scripts/session-project.sh", root: "live",
+            summary: "Find and update native session projects", readsStdin: true,
+            run: async (args, stdin, root) => (await import("./core-session-project-native.js"))
+                .runSessionProjectFast(args, stdin, process.cwd(), root),
+        },
+        {
+            name: "session-title", asset: "core/scripts/session-title.sh", root: "live",
+            summary: "Compute the current session title",
+            run: async (args, _stdin, root) => (await import("./core-session-title-native.js"))
+                .runSessionTitleFast(args, "", process.cwd(), root),
+        },
+        {
+            name: "session-title-config", asset: "core/scripts/session-title-config.sh", root: "live",
+            summary: "Resolve session title settings",
+            run: async (args, _stdin, root) => (await import("./core-session-title-config-native.js"))
+                .runSessionTitleConfigFast(args, "", process.cwd(), root),
+        },
+    ];
+    for (const entry of sessionHelperCommands) {
+        const command = core
+            .command(entry.name)
+            .description(entry.summary)
+            .allowUnknownOption()
+            .allowExcessArguments()
+            .helpOption(false)
+            .argument("[args...]")
+            .action(async (args = [], _opts, cmd) => {
+            const scope = core.opts();
+            const operands = cmd.args.length > 0 ? cmd.args : args;
+            if (!await coreNativeHookHelpersEnabled()) {
+                runEntry(entry, scope, operands);
+                return;
+            }
+            const { cwd, hqRoot } = resolveEntryRoot(entry, scope);
+            const shouldReadStdin = entry.readsStdin && operands[0] === "ingest-plan";
+            let stdin = "";
+            if (shouldReadStdin) {
+                const chunks = [];
+                for await (const chunk of process.stdin)
+                    chunks.push(chunk);
+                stdin = Buffer.concat(chunks).toString("utf8");
+            }
+            const code = await entry.run(operands, stdin, hqRoot ?? cwd);
+            if (code !== 0)
+                process.exit(code);
+        });
+        describeCoreCommand(command, { execution: "native", asset: entry.asset, root: entry.root });
+    }
     // Wave 2 handoff/worktree commands retain their byte-identical shell assets
     // as a default-off rollback path for one release. Keep the gate helper small
     // so sibling Wave 2 work can reuse it without editing this command table.

package/dist/fast-scaffold.js

@@ -201,6 +201,22 @@ export const FAST_SCAFFOLD_SCRIPTS = [
         shellCwd: "live",
         shellHqRoot: "live",
     },
+    ...["session-journal", "session-project", "session-title", "session-title-config"].map((name) => ({
+        name,
+        kind: "native",
+        modulePath: `./commands/core-${name}-native.js`,
+        exportName: name === "session-journal" ? "runSessionJournalFast"
+            : name === "session-project" ? "runSessionProjectFast"
+                : name === "session-title" ? "runSessionTitleFast"
+                    : "runSessionTitleConfigFast",
+        flagKey: "hq-core-native-fast-route",
+        familyFlagKey: "core-native-hook-helpers",
+        asset: `core/scripts/${name}.sh`,
+        root: "live",
+        shellCwd: "live",
+        shellHqRoot: "live",
+        ...(name === "session-project" ? { readsStdin: true, readsStdinFor: (args) => args[0] === "ingest-plan" } : {}),
+    })),
     ...[
         { name: "eval-trigger", modulePath: "./commands/core-eval-trigger-native.js", exportName: "runEvalTriggerFast", asset: "core/scripts/eval-trigger.sh", root: "cwd", shellCwd: "caller", shellHqRoot: "none", readsStdinFor: (args) => args[0] === "--check" },
         { name: "migrate-policy-triggers", modulePath: "./commands/core-migrate-policy-triggers-native.js", exportName: "runMigratePolicyTriggersFast", asset: "core/scripts/migrate-policy-triggers.sh", root: "live", shellCwd: "caller", shellHqRoot: "live" },

package/dist/lib/lanes/autopilot.d.ts

@@ -83,6 +83,13 @@ export interface AutopilotPassResult {
     skipped: Array<{
         lead_lane: string;
         reason: string;
+        status?: undefined;
+        fix_command?: undefined;
+    } | {
+        lead_lane: string;
+        reason: "lead_lane_missing";
+        status: "stale";
+        fix_command: string;
     } | {
         lane_id: string;
         error: string;

package/dist/lib/lanes/autopilot.js

@@ -35,6 +35,13 @@ function isOpenProjectStory(story) {
 function isRecord(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+function shellQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+function staleLeadFixCommand(laneId) {
+    const registryTemp = `${LEAD_REGISTRY_REL}.tmp`;
+    return `jq --arg lane ${shellQuote(laneId)} '(.juniors) |= map(select(.lane != $lane))' ${shellQuote(LEAD_REGISTRY_REL)} > ${shellQuote(registryTemp)} && mv ${shellQuote(registryTemp)} ${shellQuote(LEAD_REGISTRY_REL)}`;
+}
 function readJsonFile(filePath, code) {
     let text;
     try {
@@ -755,9 +762,23 @@ async function runLeadAutopilotPassUnlocked(input) {
     const stateFile = path.join(hqRoot, "workspace", "lane-briefs", "autopilot-state.json");
     const state = readState(stateFile);
     for (const registered of leads) {
+        const registeredLocalHost = registered.host === "local" || registered.host === input.hostname;
         const lead = byId.get(registered.lane) ?? lanes.find((candidate) => candidate.lane_id.startsWith(`${registered.lane}_`));
         if (!lead) {
-            result.skipped.push({ lead_lane: registered.lane, reason: "lead_lane_missing" });
+            // A row for another host has no lane record here; that host's pass owns it.
+            const registryTargetsThisHost = registeredLocalHost
+                ? effectiveOutpostId === null
+                : input.outpostId === registered.host;
+            if (!registryTargetsThisHost) {
+                result.skipped.push({ lead_lane: registered.lane, reason: "lead_host_mismatch" });
+                continue;
+            }
+            result.skipped.push({
+                lead_lane: registered.lane,
+                reason: "lead_lane_missing",
+                status: "stale",
+                fix_command: staleLeadFixCommand(registered.lane),
+            });
             continue;
         }
         const company = resolveLaneCompany(hqRoot, lead).company;
@@ -765,7 +786,6 @@ async function runLeadAutopilotPassUnlocked(input) {
             result.skipped.push({ lead_lane: lead.lane_id, reason: "lead_company_unresolved" });
             continue;
         }
-        const registeredLocalHost = registered.host === "local" || registered.host === input.hostname;
         const hostMatchesRegistry = registeredLocalHost
             ? lead.host.kind === "local"
             : lead.host.kind === "outpost" && lead.host.id === registered.host && input.outpostId === registered.host;

package/dist/utils/version-gate.js

@@ -1382,7 +1382,9 @@ function attemptRequiredUpdate(decision, deps, install) {
     const command = decision.updateCommand;
     const isManagedOutsideNpm = install.manager !== "npm";
     const prefix = install.prefix;
-    const stagedNpmPrefix = Boolean(!isManagedOutsideNpm && prefix && /\s/.test(prefix));
+    // Any npm global install with a known prefix must build away from the live package.
+    // An interrupted in-place npm install can leave hq-cli itself un-runnable.
+    const stagedNpmPrefix = Boolean(!isManagedOutsideNpm && prefix);
     const runner = deps.runner ?? runUpdateCommand;
     // Resolve the concrete install argv once so the sudo fallback below can re-run
     // the EXACT same command under elevation.
@@ -1422,7 +1424,7 @@ function attemptRequiredUpdate(decision, deps, install) {
     else if (prefix) {
         console.error(chalk.dim(`  Installing into npm prefix: ${prefix}`));
         if (stagedNpmPrefix) {
-            console.error(chalk.dim("  Building in a space-free temporary prefix before activation."));
+            console.error(chalk.dim("  Building outside the active npm prefix before activation."));
             const installStaged = deps.installNpmPackageStaged;
             if (!installStaged) {
                 result = { ok: false, detail: "staged npm installer was not loaded" };
@@ -1556,11 +1558,10 @@ export async function enforceVersionGate(onUpdateRecommended, options = {}) {
     // neither downstream path repeats it.
     const install = resolveRunningInstall();
     if (decision.updateRequired) {
-        // Load the staged installer only for the uncommon spaced npm-prefix path.
-        // The version gate is imported during every CLI startup, including native
-        // fast routes, so eagerly importing this filesystem-heavy module adds cost
-        // to commands that never update.
-        const installNpmPackageStaged = install.manager === "npm" && install.prefix && /\s/.test(install.prefix)
+        // Load the staged installer only when an npm prefix is resolved. The version
+        // gate is imported during every CLI startup, so keep the filesystem-heavy
+        // module off commands that never need a required update.
+        const installNpmPackageStaged = install.manager === "npm" && install.prefix
             ? (await import("./staged-npm-install.js")).installNpmPackageStaged
             : undefined;
         // Exits the process, EXCEPT when another updater holds the shared update

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.316.0",
+  "version": "5.318.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {