@indigoai-us/hq-cli 5.318.1-beta.0 → 5.320.0

package/CHANGELOG.md

@@ -2,9 +2,17 @@
 
 ## [Unreleased]
 
-## [5.318.1-beta.0] — 2026-10-02
+## [5.320.0] — 2026-10-02
+- Write session-journal titles as escaped YAML strings so free-form titles remain parseable.
+- Added a default-off hq-flags gate that lets lane list pollers skip remote owner refreshes to reduce poll latency.
+- Publish per-process package-use leases so Desktop updates can wait for active hq-cli work without native locks.
+
+## [5.319.0] — 2026-10-02
 - Let `hq access` use ACL-checked company presigned reads when STS vend rejects a truncated write-policy scope.
-- Let `hq sync now` skip unchanged server-owned cloud placeholders while keeping their warnings visible, so the sync can complete.
+- Lead autopilot on an Outpost can wake leads that were created on that Outpost, behind the default-off `lanes.autopilot-outpost-native-leads` flag. Before, those leads were skipped as a host mismatch and got no wakes.
+- Add a default-off fix for repo-run-registry worktree-scoped owner matching.
+- Correct keep-alive audit verdicts for pending-work wakes and lanes that were not opted in.
+- Detect and safely redeliver messages stranded in bare-ULID lane dropboxes.
 
 ## [5.318.0] — 2026-10-02
 - `hq lanes autopilot run` now marks missing lead registry entries as stale and includes a command to remove each stale row.

package/assets/scaffold/core/scripts/repo-run-registry.sh

@@ -330,12 +330,32 @@ _cmd_owner_of() {
   [[ -z "$repo" ]] && { echo ""; return; }
   _ensure_reg
   _prune_stale_locked
-  jq --arg repo "$repo" --arg target "$(_abs_path "$path")" \
-    '[.runs[] | select(
-       (.scope == "repo" and .repo_path == $repo)
-       or (.scope | startswith("worktree:")) and
-          ($target | startswith(.scope | sub("^worktree:"; "")))
-     )]' "$REG_FILE"
+  # hq core sets this bridge from the cached hq-flags value; absent means off.
+  if [[ "${HQ_FLAG_CORE_RRR_WORKTREE_SCOPE_FIX:-false}" == "true" ]]; then
+    jq --arg repo "$repo" --arg target "$(_abs_path "$path")" \
+      'def worktree_root($scope):
+         ($scope | sub("^worktree:"; "")) as $raw
+         | ($raw | sub("/+$"; "")) as $trimmed
+         | if $trimmed == "" and ($raw | startswith("/")) then "/" else $trimmed end;
+       def worktree_covers($target; $scope):
+         worktree_root($scope) as $root
+         | if $root == "/" then ($target | startswith("/"))
+           elif $root == "" then false
+           else ($target == $root or ($target | startswith($root + "/")))
+           end;
+       [.runs[] as $entry | select(
+         ($entry.scope == "repo" and $entry.repo_path == $repo)
+         or (($entry.scope | startswith("worktree:")) and
+             worktree_covers($target; $entry.scope))
+       ) | $entry]' "$REG_FILE"
+  else
+    jq --arg repo "$repo" --arg target "$(_abs_path "$path")" \
+      '[.runs[] | select(
+         (.scope == "repo" and .repo_path == $repo)
+         or (.scope | startswith("worktree:")) and
+            ($target | startswith(.scope | sub("^worktree:"; "")))
+       )]' "$REG_FILE"
+  fi
 }
 
 # Check if a target path is owned by a foreign run.
@@ -363,17 +383,41 @@ _cmd_check() {
 
   # Collect foreign entries covering this target
   local matches
-  matches=$(jq -c --arg repo "$repo" \
-                  --arg target "$abs_target" \
-                  --arg mypid "${my_pid:-0}" \
-                  --arg mysid "${my_session:-__none__}" \
-    '[.runs[] | select(
-       ((.scope == "repo" and .repo_path == $repo)
-         or ((.scope | startswith("worktree:")) and
-             ($target | startswith(.scope | sub("^worktree:"; "")))))
-       and ((.pid | tostring) != $mypid)
-       and (.session_id != $mysid)
-     )]' "$REG_FILE" 2>/dev/null || echo '[]')
+  if [[ "${HQ_FLAG_CORE_RRR_WORKTREE_SCOPE_FIX:-false}" == "true" ]]; then
+    matches=$(jq -c --arg repo "$repo" \
+                    --arg target "$abs_target" \
+                    --arg mypid "${my_pid:-0}" \
+                    --arg mysid "${my_session:-__none__}" \
+      'def worktree_root($scope):
+         ($scope | sub("^worktree:"; "")) as $raw
+         | ($raw | sub("/+$"; "")) as $trimmed
+         | if $trimmed == "" and ($raw | startswith("/")) then "/" else $trimmed end;
+       def worktree_covers($target; $scope):
+         worktree_root($scope) as $root
+         | if $root == "/" then ($target | startswith("/"))
+           elif $root == "" then false
+           else ($target == $root or ($target | startswith($root + "/")))
+           end;
+       [.runs[] as $entry | select(
+         (($entry.scope == "repo" and $entry.repo_path == $repo)
+           or (($entry.scope | startswith("worktree:")) and
+               worktree_covers($target; $entry.scope)))
+         and (($entry.pid | tostring) != $mypid)
+         and ($entry.session_id != $mysid)
+       ) | $entry]' "$REG_FILE" 2>/dev/null || echo '[]')
+  else
+    matches=$(jq -c --arg repo "$repo" \
+                    --arg target "$abs_target" \
+                    --arg mypid "${my_pid:-0}" \
+                    --arg mysid "${my_session:-__none__}" \
+      '[.runs[] | select(
+         ((.scope == "repo" and .repo_path == $repo)
+           or ((.scope | startswith("worktree:")) and
+               ($target | startswith(.scope | sub("^worktree:"; "")))))
+         and ((.pid | tostring) != $mypid)
+         and (.session_id != $mysid)
+       )]' "$REG_FILE" 2>/dev/null || echo '[]')
+  fi
 
   local n
   n=$(echo "$matches" | jq 'length')

package/assets/scaffold/core/scripts/session-journal.sh

@@ -43,6 +43,41 @@ slugify() {
     | cut -c1-40
 }
 
+yaml_double_quoted() {
+  local value="$1" output='"' character next codepoint hex
+  local LC_ALL=C index
+  for ((index = 0; index < ${#value}; index++)); do
+    character="${value:index:1}"
+    if [[ "$character" == $'\xc2' ]] && (( index + 1 < ${#value} )); then
+      next="${value:index+1:1}"
+      printf -v codepoint '%d' "'${next}"
+      if (( codepoint >= 128 && codepoint <= 159 )); then
+        printf -v hex '%04x' "$codepoint"
+        output+="\\u$hex"
+        index=$((index + 1))
+        continue
+      fi
+    fi
+    case "$character" in
+      \\) output+='\\' ;;
+      '"') output+='\"' ;;
+      $'\n') output+='\n' ;;
+      $'\r') output+='\r' ;;
+      $'\t') output+='\t' ;;
+      *)
+        if [[ "$character" == [[:cntrl:]] ]]; then
+          printf -v codepoint '%d' "'${character}"
+          printf -v hex '%02x' "$codepoint"
+          output+="\\x$hex"
+        else
+          output+="$character"
+        fi
+        ;;
+    esac
+  done
+  printf '%s"' "$output"
+}
+
 # Counters are per-session. A date-global counter lets concurrent Claude and
 # Codex tasks trip (and reset) each other's journal reminders.
 counter_key() {
@@ -140,6 +175,9 @@ case "$cmd" in
 
     slug="$(slugify "$title")"
     [ -z "$slug" ] && slug="entry"
+    yaml_title="$(yaml_double_quoted "$title")"
+    yaml_slug="$slug"
+    [[ "$slug" != *$'\n'* ]] || yaml_slug="$(yaml_double_quoted "$slug")"
     JOURNAL_WRITE_LOCK=""
     acquire_journal_write_lock "$dir" || { warn "write: failed to acquire journal lock"; exit 0; }
     trap release_journal_write_lock EXIT
@@ -161,8 +199,8 @@ case "$cmd" in
         {
           printf -- '---\n'
           printf 'ts: %s\n' "$(now_iso_z)"
-          printf 'title: %s\n' "$title"
-          printf 'slug: %s\n' "$slug"
+          printf 'title: %s\n' "$yaml_title"
+          printf 'slug: %s\n' "$yaml_slug"
           if [ -n "$files_csv" ]; then
             printf 'files:\n'
             old_ifs="$IFS"

package/dist/bin/hq-auth-refresh.d.ts

@@ -11,7 +11,9 @@
  * non-interactively.
  */
 import "../node-preflight.js";
+import { acquireCurrentPackageUseLease } from "../utils/package-use-lease.js";
 import "../node-network-compat.js";
-import { refreshCachedSession } from "../utils/cognito-session.js";
+import type { refreshCachedSession } from "../utils/cognito-session.js";
 export declare function runAuthRefresh(refreshSession?: typeof refreshCachedSession): Promise<number>;
+export declare function startAuthRefresh(acquireLease?: typeof acquireCurrentPackageUseLease): Promise<number>;
 //# sourceMappingURL=hq-auth-refresh.d.ts.map

package/dist/bin/hq-auth-refresh.js

@@ -13,15 +13,16 @@
 // MUST be first: guard the Node version before any dependency that needs a
 // Node 20+ API (e.g. util.styleText) or a newer native ABI is evaluated.
 import "../node-preflight.js";
+import { acquireCurrentPackageUseLease } from "../utils/package-use-lease.js";
 import "../node-network-compat.js";
 import { fileURLToPath } from "node:url";
 import path from "node:path";
-import { finishSentrySession, initSentry, Sentry } from "../sentry.js";
-import { refreshCachedSession } from "../utils/cognito-session.js";
-export async function runAuthRefresh(refreshSession = refreshCachedSession) {
+export async function runAuthRefresh(refreshSession) {
+    const { finishSentrySession, Sentry } = await import("../sentry.js");
+    const { refreshCachedSession: refresh } = await import("../utils/cognito-session.js");
     let exitCode = 1;
     try {
-        const result = await refreshSession();
+        const result = await (refreshSession ?? refresh)();
         if (result.refreshed) {
             exitCode = 0;
         }
@@ -41,8 +42,42 @@ export async function runAuthRefresh(refreshSession = refreshCachedSession) {
     }
     return exitCode;
 }
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+function isPackageUseUpdatePendingError(error) {
+    return Boolean(error &&
+        typeof error === "object" &&
+        error.name === "PackageUseUpdatePendingError");
+}
+function packageUseErrorClass(error) {
+    if (!error || typeof error !== "object")
+        return "unknown";
+    const value = error;
+    if (typeof value.code === "string")
+        return value.code;
+    if (value.cause && typeof value.cause === "object") {
+        const cause = value.cause;
+        if (typeof cause.code === "string")
+            return cause.code;
+        if (typeof cause.name === "string")
+            return cause.name;
+    }
+    return typeof value.name === "string" ? value.name : "unknown";
+}
+export async function startAuthRefresh(acquireLease = acquireCurrentPackageUseLease) {
+    try {
+        acquireLease();
+    }
+    catch (error) {
+        if (isPackageUseUpdatePendingError(error)) {
+            process.stderr.write(`hq-auth-refresh: ${error instanceof Error ? error.message : "The HQ CLI package is being updated"}\n`);
+            return 1;
+        }
+        process.stderr.write(`hq-auth-refresh: package-use lease unavailable (${packageUseErrorClass(error)}); continuing without lease\n`);
+    }
+    const { initSentry } = await import("../sentry.js");
     initSentry();
-    void runAuthRefresh().then((exitCode) => process.exit(exitCode));
+    return runAuthRefresh();
+}
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+    void startAuthRefresh().then((exitCode) => process.exit(exitCode));
 }
 //# sourceMappingURL=hq-auth-refresh.js.map

package/dist/command-catalog.generated.d.ts

@@ -7841,6 +7841,28 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Print a human-readable table";
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "repair-dropbox";
+        readonly description: "Inspect or redeliver messages stranded in a bare-ULID lane dropbox";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <ulid>";
+        readonly arguments: readonly [{
+            readonly name: "ulid";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--company <slug>";
+            readonly description: "Select the company by slug";
+        }, {
+            readonly flags: "--apply";
+            readonly description: "Append marked messages to the canonical lane inbox and archive the orphan folder";
+        }, {
+            readonly flags: "--json";
+            readonly description: "JSON on stdout (always)";
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "report";
         readonly description: "Generate the owner report for tracker teams";

package/dist/command-catalog.generated.js

@@ -10087,6 +10087,35 @@ export const COMMAND_CATALOG = [
                 ],
                 "subcommands": []
             },
+            {
+                "name": "repair-dropbox",
+                "description": "Inspect or redeliver messages stranded in a bare-ULID lane dropbox",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] <ulid>",
+                "arguments": [
+                    {
+                        "name": "ulid",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--company <slug>",
+                        "description": "Select the company by slug"
+                    },
+                    {
+                        "flags": "--apply",
+                        "description": "Append marked messages to the canonical lane inbox and archive the orphan folder"
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "JSON on stdout (always)"
+                    }
+                ],
+                "subcommands": []
+            },
             {
                 "name": "report",
                 "description": "Generate the owner report for tracker teams",

package/dist/commands/cloud.js

@@ -1697,7 +1697,6 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
             hqRoot,
             progressRecorder: trackingProgressRecorder(planLimitTracker, pushProgressCompany),
             skipUnchanged: true,
-            serverOwnedPathPolicy: "skip",
             propagateDeletes: true,
             propagateDeletePolicy: resolveDeletePolicy(),
             ...(onConflict ? { onConflict } : {}),

package/dist/commands/core-hook-state-helpers-native.d.ts

@@ -6,6 +6,6 @@ import { runDetectStaleReviewBase } from "./core-detect-stale-review-base-native
 export { runShareSuggestionState, runRepoRunRegistry, runDetectStaleReviewBase };
 export declare function registerCoreHookStateHelpers(core: Command): void;
 export declare function runShareSuggestionStateFast(args: readonly string[], stdin: string, _cwd: string, hqRoot: string | undefined): number;
-export declare function runRepoRunRegistryFast(args: readonly string[], _stdin: string, _cwd: string, hqRoot: string | undefined): number;
+export declare function runRepoRunRegistryFast(args: readonly string[], _stdin: string, _cwd: string, hqRoot: string | undefined, _commandName: string, _hqRootArg?: string, worktreeScopeFixEnabled?: boolean): number;
 export declare function runDetectStaleReviewBaseFast(args: readonly string[], _stdin: string, _cwd: string, hqRoot: string | undefined): number;
 //# sourceMappingURL=core-hook-state-helpers-native.d.ts.map

package/dist/commands/core-hook-state-helpers-native.js

@@ -2,16 +2,28 @@ import { resolveBundledAsset, resolveLiveRoot } from "../utils/hq-roots.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
 import { coreNativeHookHelpersEnabled } from "./core-native-hook-helpers-flag.js";
+import { coreRrrWorktreeScopeFixEnabled } from "./core-rrr-worktree-scope-fix-flag.js";
 import { runShareSuggestionState, SHARE_SUGGESTION_STATE_ASSET } from "./core-share-suggestion-state-native.js";
 import { runRepoRunRegistry, REPO_RUN_REGISTRY_ASSET } from "./core-repo-run-registry-native.js";
 import { runDetectStaleReviewBase, DETECT_STALE_REVIEW_BASE_ASSET } from "./core-detect-stale-review-base-native.js";
 export { runShareSuggestionState, runRepoRunRegistry, runDetectStaleReviewBase };
 const definitions = [
     { name: "share-suggestion-state", asset: SHARE_SUGGESTION_STATE_ASSET, summary: "Manage hook share suggestion state", run: (args, stdin, _cwd, root) => runShareSuggestionState(args, stdin, { root, cwd: root, env: process.env, stdinIsTty: process.stdin.isTTY }) },
-    { name: "repo-run-registry", asset: REPO_RUN_REGISTRY_ASSET, summary: "Coordinate active runs across repositories", run: (args, _stdin, _cwd, root) => runRepoRunRegistry(args, { root, cwd: root, env: process.env, runShellFallback: (fallbackArgs) => {
+    {
+        name: "repo-run-registry",
+        asset: REPO_RUN_REGISTRY_ASSET,
+        summary: "Coordinate active runs across repositories",
+        run: (args, _stdin, _cwd, root, worktreeScopeFixEnabled) => runRepoRunRegistry(args, {
+            root,
+            cwd: root,
+            env: process.env,
+            worktreeScopeFixEnabled,
+            runShellFallback: (fallbackArgs) => {
                 const { code } = runBundledScript({ asset: REPO_RUN_REGISTRY_ASSET, args: [...fallbackArgs], cwd: root, hqRoot: root });
                 return { code, stdout: "", stderr: "" };
-            } }) },
+            },
+        }),
+    },
     { name: "detect-stale-review-base", asset: DETECT_STALE_REVIEW_BASE_ASSET, summary: "Find stale remote review bases in an HQ root", run: (args, _stdin, _cwd, root) => runDetectStaleReviewBase(args, { cwd: root, env: { ...process.env, HQ_ROOT: root }, scriptPath: resolveBundledAsset(DETECT_STALE_REVIEW_BASE_ASSET) }) },
 ];
 async function readStdin() {
@@ -37,14 +49,25 @@ export function registerCoreHookStateHelpers(core) {
             const cwd = process.cwd(), hqRootArg = core.opts().hqRoot;
             const root = resolveLiveRoot(hqRootArg ? { hqRoot: hqRootArg } : {});
             const operands = cmd.args.length > 0 ? cmd.args : args;
+            const worktreeScopeFixEnabled = entry.name === "repo-run-registry"
+                ? await coreRrrWorktreeScopeFixEnabled()
+                : undefined;
             if (!await coreNativeHookHelpersEnabled()) {
-                const { code } = runBundledScript({ asset: entry.asset, args: operands, cwd: root, hqRoot: root });
+                const { code } = runBundledScript({
+                    asset: entry.asset,
+                    args: operands,
+                    cwd: root,
+                    hqRoot: root,
+                    ...(entry.name === "repo-run-registry"
+                        ? { env: { HQ_FLAG_CORE_RRR_WORKTREE_SCOPE_FIX: String(worktreeScopeFixEnabled) } }
+                        : {}),
+                });
                 if (code !== 0)
                     process.exitCode = code;
                 return;
             }
             const stdin = entry.name === "share-suggestion-state" ? await readStdin() : "";
-            writeResult(await entry.run(operands, stdin, cwd, root));
+            writeResult(await entry.run(operands, stdin, cwd, root, worktreeScopeFixEnabled));
         });
         describeCoreCommand(command, { execution: "native", asset: entry.asset, root: "live" });
     }
@@ -60,12 +83,18 @@ export function runShareSuggestionStateFast(args, stdin, _cwd, hqRoot) {
     const root = hqRoot ?? resolveLiveRoot();
     return writeFast(runShareSuggestionState(args, stdin, { root, cwd: root, env: process.env, stdinIsTty: process.stdin.isTTY }));
 }
-export function runRepoRunRegistryFast(args, _stdin, _cwd, hqRoot) {
+export function runRepoRunRegistryFast(args, _stdin, _cwd, hqRoot, _commandName, _hqRootArg, worktreeScopeFixEnabled = false) {
     const root = hqRoot ?? resolveLiveRoot();
-    return writeFast(runRepoRunRegistry(args, { root, cwd: root, env: process.env, runShellFallback: (fallbackArgs) => {
+    return writeFast(runRepoRunRegistry(args, {
+        root,
+        cwd: root,
+        env: process.env,
+        worktreeScopeFixEnabled,
+        runShellFallback: (fallbackArgs) => {
             const { code } = runBundledScript({ asset: REPO_RUN_REGISTRY_ASSET, args: [...fallbackArgs], cwd: root, hqRoot: root });
             return { code, stdout: "", stderr: "" };
-        } }));
+        },
+    }));
 }
 export function runDetectStaleReviewBaseFast(args, _stdin, _cwd, hqRoot) {
     const root = hqRoot ?? resolveLiveRoot();

package/dist/commands/core-repo-run-registry-native.d.ts

@@ -13,6 +13,7 @@ export type RegistryDependencies = {
     hostname?: () => string;
     sleep?: (milliseconds: number) => void;
     parseDateEpoch?: (value: string) => number;
+    worktreeScopeFixEnabled?: boolean;
     runShellFallback?: (args: readonly string[]) => HookHelperOutput;
 };
 export declare function runRepoRunRegistry(args: readonly string[], deps: RegistryDependencies): HookHelperOutput;

package/dist/commands/core-repo-run-registry-native.js

@@ -40,6 +40,14 @@ function pathAbs(value, cwd, f) {
         return value;
     }
 }
+function worktreeScopeCovers(target, scope) {
+    const rawRoot = scope.slice("worktree:".length);
+    const trimmedRoot = rawRoot.replace(/\/+$/, "");
+    const root = trimmedRoot === "" && rawRoot.startsWith("/") ? "/" : trimmedRoot;
+    if (root === "/")
+        return target.startsWith("/");
+    return root !== "" && (target === root || target.startsWith(`${root}/`));
+}
 function parseStaleMinutes(root, f) {
     const personal = path.join(root, "personal/settings/orchestrator.yaml");
     const core = path.join(root, "core/settings/orchestrator.yaml");
@@ -215,7 +223,7 @@ export function runRepoRunRegistry(args, deps) {
                 const state = JSON.parse(f.readFileSync(regFile, "utf8"));
                 if (!state || typeof state !== "object" || !Array.isArray(state.runs))
                     return deps.runShellFallback(args);
-                if ((sub === "owner-of" || sub === "check") && state.runs.some((run) => typeof run?.scope === "string" && run.scope.startsWith("worktree:"))) {
+                if (!deps.worktreeScopeFixEnabled && (sub === "owner-of" || sub === "check") && state.runs.some((run) => typeof run?.scope === "string" && run.scope.startsWith("worktree:"))) {
                     return deps.runShellFallback(args);
                 }
             }
@@ -338,7 +346,7 @@ export function runRepoRunRegistry(args, deps) {
                 return output();
             const absoluteTarget = pathAbs(target, deps.cwd, f), myPid = valueAfter(rest, "--pid") || "0", mySession = valueAfter(rest, "--session-id") || "__none__";
             const runs = Array.isArray(state.runs) ? state.runs : [];
-            const covers = (run) => (run?.scope === "repo" && run?.repo_path === repo) || (typeof run?.scope === "string" && run.scope.startsWith("worktree:") && absoluteTarget.startsWith(run.scope.slice("worktree:".length)));
+            const covers = (run) => (run?.scope === "repo" && run?.repo_path === repo) || (typeof run?.scope === "string" && run.scope.startsWith("worktree:") && worktreeScopeCovers(absoluteTarget, run.scope));
             if (sub === "owner-of")
                 return jsonOutput(0, runs.filter(covers));
             const owners = runs.filter((run) => covers(run) && String(run?.pid) !== myPid && run?.session_id !== mySession);

package/dist/commands/core-rrr-worktree-scope-fix-flag.d.ts

@@ -0,0 +1,4 @@
+/** Default-off rollout gate for repo-run-registry worktree-scope matching. */
+export declare const CORE_RRR_WORKTREE_SCOPE_FIX_FLAG = "core-rrr-worktree-scope-fix";
+export declare function coreRrrWorktreeScopeFixEnabled(): Promise<boolean>;
+//# sourceMappingURL=core-rrr-worktree-scope-fix-flag.d.ts.map

package/dist/commands/core-rrr-worktree-scope-fix-flag.js

@@ -0,0 +1,7 @@
+/** Default-off rollout gate for repo-run-registry worktree-scope matching. */
+export const CORE_RRR_WORKTREE_SCOPE_FIX_FLAG = "core-rrr-worktree-scope-fix";
+export async function coreRrrWorktreeScopeFixEnabled() {
+    const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
+    return resolveProcessFlagGate(CORE_RRR_WORKTREE_SCOPE_FIX_FLAG, { fallback: false }, () => false);
+}
+//# sourceMappingURL=core-rrr-worktree-scope-fix-flag.js.map

package/dist/commands/core-session-journal-native.js

@@ -24,7 +24,35 @@ const counterKey = (value) => {
     return key.length > 96 ? key.slice(0, 96) : key;
 };
 const slugify = (value) => value.toLowerCase()
-    .replace(/[^a-z0-9]+/g, "-").replace(/^-+/, "").replace(/-+$/, "").slice(0, 40);
+    .split("\n")
+    .map((line) => line.replace(/[^a-z0-9]+/g, "-").replace(/^-+/, "").replace(/-+$/, "").slice(0, 40))
+    .join("\n");
+function yamlDoubleQuoted(value) {
+    let escaped = "";
+    for (const character of value) {
+        const codePoint = character.codePointAt(0) ?? 0;
+        if (character === "\\")
+            escaped += "\\\\";
+        else if (character === '"')
+            escaped += '\\"';
+        else if (character === "\n")
+            escaped += "\\n";
+        else if (character === "\r")
+            escaped += "\\r";
+        else if (character === "\t")
+            escaped += "\\t";
+        else if (codePoint < 0x20 || codePoint === 0x7f) {
+            escaped += `\\x${codePoint.toString(16).padStart(2, "0")}`;
+        }
+        else if (codePoint >= 0x80 && codePoint <= 0x9f) {
+            escaped += `\\u${codePoint.toString(16).padStart(4, "0")}`;
+        }
+        else {
+            escaped += character;
+        }
+    }
+    return `"${escaped}"`;
+}
 const warning = (message) => { process.stderr.write(`session-journal: ${message}\n`); };
 const journalDir = (root, date) => path.join(root, "workspace/threads/journal", date);
 const hasFile = (file) => {
@@ -211,6 +239,7 @@ export function runSessionJournalFast(args, _stdin, cwd, hqRoot, dependencies =
             return 0;
         }
         const slug = slugify(title) || "entry";
+        const yamlSlug = slug.includes("\n") ? yamlDoubleQuoted(slug) : slug;
         const body = bodyFile && hasFile(bodyFile)
             ? fs.readFileSync(bodyFile, "utf8")
             : "## Goal\n\n## Findings\n\n## Decisions\n\n## Next\n";
@@ -226,7 +255,7 @@ export function runSessionJournalFast(args, _stdin, cwd, hqRoot, dependencies =
             for (let attempt = 0; attempt < 10_000; attempt += 1) {
                 seq = nextSequence(dir);
                 output = path.join(dir, `${seq}-${slug}.md`);
-                const lines = ["---\n", `ts: ${nowIso()}\n`, `title: ${title}\n`, `slug: ${slug}\n`];
+                const lines = ["---\n", `ts: ${nowIso()}\n`, `title: ${yamlDoubleQuoted(title)}\n`, `slug: ${yamlSlug}\n`];
                 if (files) {
                     lines.push("files:\n");
                     for (const file of files.split(","))

package/dist/commands/lanes-checks.js

@@ -12,6 +12,7 @@ import { DEFAULT_ORPHAN_USER_IDLE_HOURS, findOrphanLanes, parseOrphanMinAge, par
 import { LANES_RUNS_REL } from "../lib/lanes/spawn.js";
 import { assertNoSecretText } from "../lib/lanes/text-scan.js";
 import { checkCompanyPath } from "../lib/lanes/checked-company-path.js";
+import { findOrphanedBareIdDropboxes } from "../lib/lanes/orphaned-dropbox.js";
 export function mappingIncludesStory(mapping, storyId) {
     return (mapping.storyPrefix === undefined || storyId.startsWith(mapping.storyPrefix))
         && (mapping.excludePrefix === undefined || !storyId.startsWith(mapping.excludePrefix));
@@ -810,6 +811,17 @@ async function checkReport(root, company, projects, directiveProjects, projectFi
             host: finding.host,
         })),
     });
+    const orphanedBareIdDropboxes = findOrphanedBareIdDropboxes(root, company);
+    checks.push({
+        id: "orphaned_bare_id_dropbox",
+        result: orphanedBareIdDropboxes.length === 0 ? "ok" : "failing",
+        items: orphanedBareIdDropboxes.map((finding) => ({
+            id: finding.ulid,
+            reason: "orphaned_bare_id_dropbox",
+            message_count: finding.message_count,
+            newest_message_at: finding.newest_message_at,
+        })),
+    });
     return {
         ok: true,
         company: company.slug,

package/dist/commands/lanes-dropbox-repair.d.ts

@@ -0,0 +1,14 @@
+import type { Command } from "commander";
+import type { LaneCompanyRef, LaneRecord } from "../lib/lanes/types.js";
+type WrapHandler = <Args extends unknown[]>(action: (...args: Args) => Promise<void>) => (...args: Args) => Promise<void>;
+export interface LaneDropboxRepairDeps {
+    hqRoot: () => string;
+    now: () => Date;
+    resolveCompany: (company?: string) => Promise<LaneCompanyRef>;
+    repairEnabled: (lane: LaneRecord) => Promise<boolean>;
+    wrap: WrapHandler;
+}
+/** Register the explicit recovery command. Dry-run is read-only; mutation is separately gated. */
+export declare function registerLaneDropboxRepairCommand(parent: Command, deps: LaneDropboxRepairDeps): void;
+export {};
+//# sourceMappingURL=lanes-dropbox-repair.d.ts.map

package/dist/commands/lanes-dropbox-repair.js

@@ -0,0 +1,33 @@
+import { LanesError } from "../lib/lanes/errors.js";
+import { findOrphanedBareIdDropboxes, repairOrphanedBareIdDropbox } from "../lib/lanes/orphaned-dropbox.js";
+import { readLane } from "../lib/lanes/store.js";
+/** Register the explicit recovery command. Dry-run is read-only; mutation is separately gated. */
+export function registerLaneDropboxRepairCommand(parent, deps) {
+    parent.command("repair-dropbox")
+        .description("Inspect or redeliver messages stranded in a bare-ULID lane dropbox")
+        .argument("<ulid>", "26-character lane ULID")
+        .option("--company <slug>", "Select the company by slug")
+        .option("--apply", "Append marked messages to the canonical lane inbox and archive the orphan folder")
+        .action(deps.wrap(async (ulid, options) => {
+        const root = deps.hqRoot();
+        const globalFinding = findOrphanedBareIdDropboxes(root).find((item) => item.ulid === ulid.trim().toUpperCase());
+        if (globalFinding?.canonical_lane_ids.length !== undefined && globalFinding.canonical_lane_ids.length > 1) {
+            throw new LanesError("orphaned_dropbox_lane_ambiguous", `ULID ${globalFinding.ulid} matches more than one lane record`, { ulid: globalFinding.ulid });
+        }
+        const company = await deps.resolveCompany(options.company);
+        const finding = findOrphanedBareIdDropboxes(root, company).find((item) => item.ulid === ulid.trim().toUpperCase());
+        if (!finding)
+            throw new LanesError("orphaned_dropbox_not_found", `No orphaned bare-ID dropbox was found for ${ulid}`, { ulid });
+        if (finding.canonical_lane_ids.length !== 1)
+            throw new LanesError("orphaned_dropbox_lane_ambiguous", `ULID ${finding.ulid} matches more than one lane record`, { ulid: finding.ulid });
+        const lane = readLane(root, finding.canonical_lane_ids[0]);
+        const enabled = options.apply ? await deps.repairEnabled(lane) : false;
+        const result = repairOrphanedBareIdDropbox(root, ulid, {
+            apply: options.apply === true,
+            enabled,
+            now: deps.now(),
+        });
+        console.log(JSON.stringify({ ok: true, action: "repair-dropbox", ...result }, null, 2));
+    }));
+}
+//# sourceMappingURL=lanes-dropbox-repair.js.map