@indigoai-us/hq-cli 5.345.1 → 5.345.3

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## [Unreleased]
 
+## [5.345.3] — 2026-10-05
+- Retry a blocker freshness lane-inbox fallback after a transient append failure.
+- Scope bundled-script stdin checks to changes in their workflow, build inputs, CLI sources, tests, or shell assets.
+- Always apply the lane low-disk preflight before starting or resuming workers.
+
+## [5.345.2] — 2026-10-05
+- Build and version-check the hq-cloud sync-runner bundle, then validate and atomically stage it with the daemon child bootstrap before releasing the CLI package-use lease.
+- Defer MCP tool and prompt handler imports until a request needs them so `hq mcp serve` can answer initialize without waiting on the full handler modules.
+- Add regression coverage that a cancelled superseded lane still refuses `hq lanes message` when running-superseded message delivery is enabled.
+
 ## [5.345.1] — 2026-10-05
 - Queue low-disk lanes before provider account login validation so the disk safety guard can run on hosts with low free space.
 - Defer mesh daemon and session-validation modules until their command paths need them.

package/dist/commands/daemon.js

@@ -46,12 +46,16 @@ export async function loadDaemonRunner(release = releaseCurrentPackageUseLease,
     await releasePackageUseLeaseAfterResidentPreload(preload, reportPreloadFailure, () => {
         preloadComplete = true;
     });
+    let released = false;
     return (options) => runDaemon({
         ...options,
         onStartupReadsComplete: () => {
             options.onStartupReadsComplete?.();
-            if (preloadComplete)
-                release();
+            if (!preloadComplete || released)
+                return released;
+            released = true;
+            release();
+            return true;
         },
     });
 }

package/dist/commands/lanes-message.js

@@ -13,7 +13,6 @@ import { artifactIdentityKeys, rollbackStorySwitchAttribution, storySwitchNotice
 import { laneRunDir, probePidRecord, readPidRecord, readProcStarttime, spawnLaneWorker } from "../lib/lanes/spawn.js";
 import { keepAliveExclusion, keepAliveSupersededBy, LANE_RUNNING_SUPERSEDED_MESSAGE_DELIVERY_FLAG, LANE_SUPERSESSION_LINEAGE_AWARE_FLAG, loadRetiredLaneIds } from "../lib/lanes/keep-alive.js";
 import { readLanesRegistryFlag } from "../lib/lanes/registry-flag.js";
-import { lowDiskGuardEnabledForLane } from "../lib/lanes/disk-guard.js";
 import { resolveLaneCompany } from "../lib/lanes/lane-company.js";
 import { accountMoveSummary, accountRequestKeepsCurrentLane, assertCurrentResumeAccountAvailable, callerMatchesSessionSenior, recordedResumeEffort, resetKeepAliveProgress, resolveResumeEffort } from "./lanes-shared.js";
 export function parseMonitorLaneMessagePayload(input) {
@@ -782,7 +781,6 @@ export function createLaneMessageHandlers(deps) {
                             const admission = await assessLaneAdmission(ctx, lane, { queueAt: at });
                             if (admission.action === "refuse" && admission.error)
                                 throw admission.error;
-                            const guardEnabled = admission.action === "queue" ? false : await lowDiskGuardEnabledForLane(hqRoot, lane);
                             return withResumeHireAdmission(ctx, lane, () => {
                                 if (admission.action === "queue") {
                                     const sessionId = lane.provider_session_id;
@@ -826,7 +824,6 @@ export function createLaneMessageHandlers(deps) {
                                     return queued;
                                 }
                                 const started = spawnLaneWorker(hqRoot, lane, {
-                                    lowDiskGuardEnabled: guardEnabled,
                                     env: ctx.env,
                                     modelDeps: {
                                         readFileSync: ctx.readFileSync,

package/dist/commands/lanes-resume.js

@@ -7,7 +7,6 @@ import { assertNoSecretText } from "../lib/lanes/text-scan.js";
 import { laneStories, laneStory, storyWarning } from "../lib/lanes/stories.js";
 import { artifactIdentityKeys, rollbackStorySwitchAttribution, storySwitchNotice } from "../lib/lanes/story-switch.js";
 import { spawnLaneWorker } from "../lib/lanes/spawn.js";
-import { lowDiskGuardEnabledForLane } from "../lib/lanes/disk-guard.js";
 import { accountMoveSummary, accountRequestKeepsCurrentLane, assertCurrentResumeAccountAvailable, hasKeepAliveProgress, recordedResumeEffort, resetKeepAliveProgress, resolveResumeEffort } from "./lanes-shared.js";
 export function createLaneResumeHandlers(deps) {
     const { archiveResumeMessage, assertLaneRunsHereForAdmission, assertLaneRunsHereForOperatorMutation, assessLaneAdmission, automaticBalanceMoveHistoryReason, authorizeFailedResume, authorizeResumeProfileRepin, casUpdateLane, dispatchOutpostLaneCommand, laneIsHostedHere, laneWithRecoveredProviderSession, mintMessageId, persistClaudeAccountSelection, prepareAccountMove, printJson, recordResumeSetup, resolveResumeProfile, selectAutomaticClaudeResumeAccount, validateResumeProfileModel, withResumeHireAdmission } = deps;
@@ -448,7 +447,6 @@ export function createLaneResumeHandlers(deps) {
                     const admission = await assessLaneAdmission(ctx, lane, { queueAt: at });
                     if (admission.action === "refuse" && admission.error)
                         throw admission.error;
-                    const guardEnabled = admission.action === "queue" ? false : await lowDiskGuardEnabledForLane(hqRoot, lane);
                     return withResumeHireAdmission(ctx, lane, () => {
                         if (admission.action === "queue") {
                             const sessionId = lane.provider_session_id;
@@ -492,7 +490,6 @@ export function createLaneResumeHandlers(deps) {
                             });
                         }
                         const started = spawnLaneWorker(hqRoot, lane, {
-                            lowDiskGuardEnabled: guardEnabled,
                             env: ctx.env,
                             modelDeps: {
                                 readFileSync: ctx.readFileSync,

package/dist/commands/lanes.js

@@ -37,7 +37,7 @@ import { isSsmRunCommandProcess } from "../lib/lanes/ssm-command-context.js";
 import { runResidentCommandWithPackageLease } from "../utils/resident-package-preload.js";
 import { readLanesFlagLocalOverride, readLanesRegistryFlag, readLanesRegistryFlagFailOff } from "../lib/lanes/registry-flag.js";
 import { LANE_HIRE_GRANT_FINISHED_LANES_FLAG, LANE_LIST_SKIP_REMOTE_REFRESH_FLAG, LANE_MESSAGE_ROUTE_OWNER_HOST_FLAG, LANE_ORPHANED_BARE_ID_DROPBOX_REPAIR_FLAG, LANE_REUSE_REFRESHES_PROFILE_FLAG, } from "../lib/lanes/flag-keys.js";
-import { configuredCodexRolloutHomes, lowDiskGuardEnabledForLane, retainCodexRollouts } from "../lib/lanes/disk-guard.js";
+import { configuredCodexRolloutHomes, retainCodexRollouts } from "../lib/lanes/disk-guard.js";
 import { isControllerAliasOutpostId } from "../lib/lanes/admission-host.js";
 import { runLeadAutopilotPass } from "../lib/lanes/autopilot.js";
 import { syncOutpostLeadRegistries } from "../lib/lanes/autopilot-registry.js";
@@ -3735,7 +3735,6 @@ async function runCreate(ctx, opts) {
     let started = lane;
     if (admission.action === "start") {
         started = spawnLaneWorker(hqRoot, lane, {
-            lowDiskGuardEnabled: await lowDiskGuardEnabledForLane(hqRoot, lane),
             env: ctx.env,
             modelDeps: {
                 readFileSync: ctx.readFileSync,
@@ -4877,7 +4876,6 @@ async function runPickup(ctx, opts) {
         }
         try {
             return spawnLaneWorker(hqRoot, current, {
-                lowDiskGuardEnabled: await lowDiskGuardEnabledForLane(hqRoot, current),
                 env: ctx.env,
                 modelDeps: {
                     readFileSync: ctx.readFileSync,
@@ -6252,7 +6250,6 @@ async function runAdmit(ctx, laneId, opts) {
             return;
         }
         const started = spawnLaneWorker(hqRoot, lane, {
-            lowDiskGuardEnabled: await lowDiskGuardEnabledForLane(hqRoot, lane),
             env: ctx.env,
             modelDeps: {
                 readFileSync: ctx.readFileSync,

package/dist/commands/mcp-serve.js

@@ -59,7 +59,11 @@ export async function runMcpServe(opts = {}) {
         process.exitCode = 1;
         return;
     }
-    const { tools, prompts } = await loadMcpPackageHandlers();
+    let packageHandlers;
+    const getPackageHandlers = () => {
+        packageHandlers ??= loadMcpPackageHandlers();
+        return packageHandlers;
+    };
     const preload = (residentPath, modules) => opts.preloadResidentModules
         ? opts.preloadResidentModules(residentPath, modules)
         : preloadResidentPackageModules(residentPath);
@@ -73,8 +77,8 @@ export async function runMcpServe(opts = {}) {
             process.emitWarning("hq-cli resident package preload completion failed (class=Error, module=unknown)");
         });
     };
-    // Release before the stdio read can remain open indefinitely. The request
-    // handlers and their declared lazy modules are loaded before this point.
+    // Release before the stdio read can remain open indefinitely. Request
+    // handlers stay lazy until a request needs them.
     startResidentPreload();
     const send = (msg) => {
         const response = `${JSON.stringify({ jsonrpc: "2.0", ...msg })}\n`;
@@ -83,6 +87,7 @@ export async function runMcpServe(opts = {}) {
     const reply = (id, result) => send({ id, result });
     const replyError = (id, code, message) => send({ id, error: { code, message } });
     const callTool = async (params) => {
+        const { tools } = await getPackageHandlers();
         const name = params.name;
         if (typeof name !== "string" || !tools.MCP_TOOLS.some((t) => t.name === name)) {
             return toolError("unknown_tool", `unknown tool ${String(name)}`);
@@ -119,17 +124,22 @@ export async function runMcpServe(opts = {}) {
             case "ping":
                 reply(id, {});
                 return;
-            case "tools/list":
+            case "tools/list": {
+                const { tools } = await getPackageHandlers();
                 reply(id, { tools: tools.MCP_TOOLS });
                 return;
+            }
             case "tools/call":
                 reply(id, await callTool(params));
                 return;
-            case "prompts/list":
+            case "prompts/list": {
+                const { prompts } = await getPackageHandlers();
                 reply(id, { prompts: prompts.MCP_PROMPTS });
                 return;
+            }
             case "prompts/get": {
                 const args = params.arguments && typeof params.arguments === "object" ? params.arguments : {};
+                const { prompts } = await getPackageHandlers();
                 try {
                     reply(id, prompts.getPrompt(String(params.name), args, readHqRoot(env, home)));
                 }