@indigoai-us/hq-cli 5.345.107 → 5.345.108

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 ## [Unreleased]
 
+## [5.345.108] — 2026-10-13
+- On macOS, `hq` reads your sign-in from the Keychain copy kept by the desktop app and uses whichever of the Keychain and `~/.hq/cognito-tokens.json` is newer (hq-cloud 6.18.67). macOS asks once for access; if you deny it, `hq` keeps using the file until you run `hq auth keychain --retry`.
+
+- `hq capacity route` and `hq lanes create --account auto` now pick the
+  provider account with the most room, across Claude, Codex, and Grok. All
+  accounts are treated as one pool across companies, so you can keep working
+  on whichever provider still has usage left this cycle.
+- The native checkpoint stop gate now recognizes Windows executable extensions such as `.exe`, matching the shell's hook-state directory creation when `jq` is installed through Git Bash.
+
 ## [5.345.107] — 2026-10-13
 - Company Outposts: `hq outposts provision --company <slug>`, `hq outposts status --company <slug>` and `hq outposts jobs register` are available (hq-cloud 6.18.66). Only company admins can run them, the price and paying company are shown before anything is created, and nothing is provisioned without `--yes`.
 - Agent processes on one box share one cached Cognito sign-in again instead of each signing in separately (hq-cloud 6.18.66 fix).

package/dist/command-catalog.generated.d.ts

@@ -9630,6 +9630,45 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "route";
+        readonly description: "Pick the account with the most capacity for a new lane (read-only; port of boss-route)";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--provider <list>";
+            readonly description: "Comma-separated list: any, claude, codex, grok";
+            readonly hidden: false;
+            readonly defaultValue: "any";
+        }, {
+            readonly flags: "--model <id>";
+            readonly description: "Model id. Narrows --provider any to the mapped provider";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--prefer <list>";
+            readonly description: "Comma-separated preferred provider order";
+            readonly hidden: false;
+            readonly defaultValue: "claude,codex,grok";
+        }, {
+            readonly flags: "--floor <percent>";
+            readonly description: "Minimum headroom percent the pick must clear (0-100)";
+            readonly hidden: false;
+            readonly defaultValue: "15";
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print the route result as JSON (default)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--text";
+            readonly description: "Print a single-line text summary instead of JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "enable";
         readonly description: "Create the ledger directory and mark the collector on";
@@ -13082,7 +13121,7 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }, {
             readonly flags: "--account <id>";
-            readonly description: "Provider account id";
+            readonly description: "Provider account id, or 'auto' to pick the account with the most room (all accounts are one pool across companies)";
             readonly hidden: false;
         }, {
             readonly flags: "--model <id>";

package/dist/command-catalog.generated.js

@@ -11675,6 +11675,53 @@ export const COMMAND_CATALOG = [
                 ],
                 "subcommands": []
             },
+            {
+                "name": "route",
+                "description": "Pick the account with the most capacity for a new lane (read-only; port of boss-route)",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--provider <list>",
+                        "description": "Comma-separated list: any, claude, codex, grok",
+                        "hidden": false,
+                        "defaultValue": "any"
+                    },
+                    {
+                        "flags": "--model <id>",
+                        "description": "Model id. Narrows --provider any to the mapped provider",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--prefer <list>",
+                        "description": "Comma-separated preferred provider order",
+                        "hidden": false,
+                        "defaultValue": "claude,codex,grok"
+                    },
+                    {
+                        "flags": "--floor <percent>",
+                        "description": "Minimum headroom percent the pick must clear (0-100)",
+                        "hidden": false,
+                        "defaultValue": "15"
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print the route result as JSON (default)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--text",
+                        "description": "Print a single-line text summary instead of JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
             {
                 "name": "enable",
                 "description": "Create the ledger directory and mark the collector on",
@@ -15907,7 +15954,7 @@ export const COMMAND_CATALOG = [
                     },
                     {
                         "flags": "--account <id>",
-                        "description": "Provider account id",
+                        "description": "Provider account id, or 'auto' to pick the account with the most room (all accounts are one pool across companies)",
                         "hidden": false
                     },
                     {

package/dist/commands/capacity.d.ts

@@ -54,7 +54,7 @@ export interface DoctorReport {
     stale: boolean;
     ageMs: number;
 }
-export declare function capacityOptionsFromEnv(env?: NodeJS.ProcessEnv): LedgerOptions;
+export { capacityOptionsFromEnv } from "../lib/capacity/ledger.js";
 export declare function withSchemaVersion(view: NowView): Omit<CapacityJson, "stale" | "ageMs" | "collectorEnabled">;
 /** Stale when generatedAt is missing or older than five minutes. */
 export declare function capacityFreshness(generatedAt: string, nowMs: number): CapacityFreshness;

package/dist/commands/capacity.js

@@ -3,12 +3,15 @@ import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
 import * as readline from "node:readline";
-import { LedgerCorrupt, LedgerMissing, READING_SOURCES, capacityRoot, nowViewJsonSchema, readCollectorMark, readLedgerEvents, readNow, rebuildNow, setCollectorEnabled, } from "../lib/capacity/ledger.js";
+import { LedgerCorrupt, LedgerMissing, READING_SOURCES, capacityOptionsFromEnv, capacityRoot, nowViewJsonSchema, readCollectorMark, readLedgerEvents, readNow, rebuildNow, setCollectorEnabled, } from "../lib/capacity/ledger.js";
 import { listCapacityAccounts, registryAccountIds } from "../lib/capacity/accounts.js";
 import { claudeIdentityKeys } from "../lib/capacity/collectors/claude-oauth.js";
 import { projectCapacityView } from "../lib/capacity/project.js";
 import { capacityWidgetTimeZone, renderCapacityWidget } from "../lib/capacity/widget.js";
 import { resolveLanesHqRoot } from "../lib/lanes/hq-root.js";
+import { loadLanesConfig } from "../lib/lanes/config.js";
+import { readAllLanes } from "../lib/lanes/store.js";
+import { RouteUsageError, formatRouteText, pickAccount, resolveFloor, } from "../lib/capacity/route.js";
 import { SignInUsageError, executeCapacityLogin, formatCredits, formatLoginText, formatRefreshLine, formatRoster, generateAccountId, loginJson, presentAccount, promptsAllowed, removeCapacityAccount, renameCapacityAccount, rosterFrom, } from "../lib/capacity/sign-in.js";
 import { ingestClaudeStatuslinePayload, installStatuslineSpoolScript } from "../lib/capacity/collectors/claude-statusline.js";
 import { CapacityUsageError, REFUSAL_HELP, ingestRefusal, } from "../lib/capacity/refusal.js";
@@ -45,16 +48,7 @@ const HISTORY_HEADERS = [
     "SOURCE",
     "CLI VERSION",
 ];
-export function capacityOptionsFromEnv(env = process.env) {
-    const raw = env.HQ_CAPACITY_NOW?.trim();
-    if (!raw)
-        return { env };
-    const parsed = Date.parse(raw);
-    if (Number.isNaN(parsed)) {
-        throw new Error(`HQ_CAPACITY_NOW must be a UTC timestamp, got '${raw}'`);
-    }
-    return { env, now: () => new Date(raw) };
-}
+export { capacityOptionsFromEnv } from "../lib/capacity/ledger.js";
 export function withSchemaVersion(view) {
     return { ...view, schemaVersion: CAPACITY_SCHEMA_VERSION };
 }
@@ -297,6 +291,69 @@ export function registerCapacityCommand(program) {
                 process.exitCode = 1;
         });
     });
+    capacity
+        .command("route")
+        .description("Pick the account with the most capacity for a new lane (read-only; port of boss-route)")
+        .option("--provider <list>", "Comma-separated list: any, claude, codex, grok", "any")
+        .option("--model <id>", "Model id. Narrows --provider any to the mapped provider")
+        .option("--prefer <list>", "Comma-separated preferred provider order", "claude,codex,grok")
+        .option("--floor <percent>", "Minimum headroom percent the pick must clear (0-100)", "15")
+        .option("--json", "Print the route result as JSON (default)")
+        .option("--text", "Print a single-line text summary instead of JSON")
+        .action((_opts, command) => {
+        runCli(() => {
+            const opts = command.optsWithGlobals();
+            if (opts.json && opts.text) {
+                throw new RouteUsageError("--text cannot be combined with --json");
+            }
+            const clock = capacityClock();
+            const view = loadNow(clock.options);
+            const freshness = capacityFreshness(view.generatedAt, clock.nowMs);
+            const mark = readCollectorMark(clock.options);
+            const hqRoot = resolveLanesHqRoot({ env: process.env });
+            const lanesConfig = loadLanesConfig(hqRoot);
+            let lanes = [];
+            let lanesError = null;
+            try {
+                lanes = readAllLanes(hqRoot);
+            }
+            catch (err) {
+                lanesError = err instanceof Error ? err.message : String(err);
+            }
+            let result;
+            try {
+                result = pickAccount({
+                    view,
+                    lanes,
+                    lanesConfig,
+                    providers: splitList(opts.provider),
+                    model: opts.model ?? null,
+                    prefer: splitList(opts.prefer),
+                    floor: resolveFloor(opts.floor),
+                    now: new Date(clock.nowMs),
+                    collectorEnabled: mark ? mark.enabled : null,
+                    capacityStale: freshness.stale,
+                    lanesError,
+                });
+            }
+            catch (err) {
+                if (err instanceof RouteUsageError) {
+                    console.error(err.message);
+                    process.exitCode = 1;
+                    return;
+                }
+                throw err;
+            }
+            if (opts.text) {
+                console.log(formatRouteText(result));
+            }
+            else {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            if (!result.ok)
+                process.exitCode = 2;
+        });
+    });
     capacity
         .command("enable")
         .description("Create the ledger directory and mark the collector on")
@@ -594,6 +651,12 @@ function wantsJson(opts, command) {
     }
     return false;
 }
+function splitList(raw) {
+    if (raw === undefined)
+        return undefined;
+    const parts = raw.split(",").map((v) => v.trim()).filter(Boolean);
+    return parts.length === 0 ? undefined : parts;
+}
 function runCli(action) {
     try {
         process.exitCode = 0;

package/dist/commands/core-checkpoint-stop-gate-native.js

@@ -73,15 +73,27 @@ const defaults = () => ({
     },
     makeTempPath: () => path.join(os.tmpdir(), `tmp.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}`),
     commandExists: (name, env) => {
+        const windowsExtensions = process.platform === "win32"
+            ? (env?.PATHEXT ?? process.env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean)
+            : [];
         for (const entry of (env?.PATH ?? process.env.PATH ?? "").split(path.delimiter)) {
             if (!entry)
                 continue;
-            const candidate = path.join(entry, name);
-            try {
-                fs.accessSync(candidate, fs.constants.X_OK);
-                return true;
+            const candidates = [name, ...windowsExtensions.map((extension) => `${name}${extension}`)];
+            for (const command of candidates) {
+                const candidate = path.join(entry, command);
+                try {
+                    if (process.platform === "win32") {
+                        if (fs.statSync(candidate).isFile())
+                            return true;
+                    }
+                    else {
+                        fs.accessSync(candidate, fs.constants.X_OK);
+                        return true;
+                    }
+                }
+                catch { /* try the next candidate in PATH */ }
             }
-            catch { /* try the next PATH entry */ }
         }
         return false;
     },

package/dist/commands/lanes.js

@@ -85,6 +85,8 @@ import { writeQuestionBody } from "../lib/lanes/questions.js";
 import { compactionAfterUsage, } from "../lib/lanes/compaction.js";
 import { parseCliEffort, resolveLaneEffort, } from "../lib/lanes/effort.js";
 import { LanesError } from "../lib/lanes/errors.js";
+import { LedgerCorrupt, capacityOptionsFromEnv, readNow, rebuildNow, } from "../lib/capacity/ledger.js";
+import { pickAccount } from "../lib/capacity/route.js";
 import { readLatestEnvelopeRecord } from "../lib/lanes/watcher.js";
 import { loadQuotaState, quotaBlockFor } from "../lib/lanes/quota.js";
 import { SESSION_MOVE_REASON } from "../lib/lanes/move-account.js";
@@ -3262,9 +3264,61 @@ async function runCreate(ctx, opts) {
     if (!briefFile) {
         throw new LanesError("missing_brief_file", "--brief-file is required", {});
     }
-    const explicitProvider = opts.provider
+    let explicitProvider = opts.provider
         ? parseLaneProvider(opts.provider)
         : undefined;
+    let autoAccountPick;
+    let autoChosenProvider;
+    let autoChosenAccount;
+    if (opts.account !== undefined && opts.account.trim() === "auto") {
+        const ledgerOptions = capacityOptionsFromEnv(ctx.env);
+        let view;
+        try {
+            view = readNow(ledgerOptions);
+        }
+        catch (err) {
+            if (err instanceof LedgerCorrupt) {
+                view = rebuildNow(ledgerOptions);
+            }
+            else {
+                throw new LanesError("capacity_unavailable", `Cannot route --account auto: ${err instanceof Error ? err.message : String(err)}`, {});
+            }
+        }
+        const routeConfig = loadLanesConfig(hqRoot);
+        let routeLanes = [];
+        let routeLanesError = null;
+        try {
+            routeLanes = readAllLanes(hqRoot);
+        }
+        catch (err) {
+            routeLanesError = err instanceof Error ? err.message : String(err);
+        }
+        const result = pickAccount({
+            view,
+            lanes: routeLanes,
+            lanesConfig: routeConfig,
+            ...(explicitProvider ? { providers: [explicitProvider] } : {}),
+            model: opts.model ?? null,
+            now: ctx.now(),
+            lanesError: routeLanesError,
+        });
+        if (!result.ok || !result.pick) {
+            const resetSuffix = result.next_reset ? `; next reset ${result.next_reset}` : "";
+            throw new LanesError("no_account_with_room", `No account has room${resetSuffix}`, {
+                next_reset: result.next_reset,
+                request: result.request,
+            });
+        }
+        autoChosenProvider = parseLaneProvider(result.pick.provider);
+        autoChosenAccount = result.pick.account;
+        autoAccountPick = {
+            why: result.pick.why,
+            headroom: result.pick.headroom,
+            score: result.pick.score,
+        };
+        opts = { ...opts, account: autoChosenAccount, provider: autoChosenProvider };
+        explicitProvider = autoChosenProvider;
+    }
     if (opts.outpost !== undefined && opts.outpost !== "") {
         const requested = opts.outpost.trim();
         let known;
@@ -3975,18 +4029,23 @@ async function runCreate(ctx, opts) {
                     },
                 }
                 : {}),
-            provider_source: explicitProvider !== undefined
-                ? "cli"
-                : profile?.meta.provider !== undefined
-                    ? "profile"
-                    : "default",
+            provider_source: autoAccountPick !== undefined
+                ? "auto"
+                : explicitProvider !== undefined
+                    ? "cli"
+                    : profile?.meta.provider !== undefined
+                        ? "profile"
+                        : "default",
             account: pinnedAccount,
-            account_source: accountWasExplicit
-                ? "cli"
-                : profileAccount !== undefined
-                    ? "profile"
-                    : "balanced",
+            account_source: autoAccountPick !== undefined
+                ? "auto"
+                : accountWasExplicit
+                    ? "cli"
+                    : profileAccount !== undefined
+                        ? "profile"
+                        : "balanced",
             ...(accountSelection !== undefined ? { account_selection: accountSelection } : {}),
+            ...(autoAccountPick !== undefined ? { account_pick: autoAccountPick } : {}),
             ...(defaultPlacement !== undefined
                 ? { placement_default: defaultPlacement }
                 : {}),
@@ -4220,6 +4279,7 @@ async function runCreate(ctx, opts) {
             priority: started.priority,
             provider: started.provider,
             account: started.account ?? null,
+            ...(started.account_pick !== undefined ? { account_pick: started.account_pick } : {}),
             model: started.model ?? null,
             effort: started.effort ?? null,
             effort_source: started.effort_source ?? null,
@@ -9671,7 +9731,7 @@ export function registerLanesCommand(parent, deps = {}) {
         .option("--loop", "Keep one worker lane registered to process queued phase envelopes")
         .option("--provider <name>", "claude | codex | grok")
         .option("--remote-control", "Open a Claude lane in Remote Control using account a for login and the selected account for inference")
-        .option("--account <id>", "Provider account id")
+        .option("--account <id>", "Provider account id, or 'auto' to pick the account with the most room (all accounts are one pool across companies)")
         .option("--model <id>", "Model id for the provider CLI")
         .option("--effort <level>", "Effort level; claude: low|medium|high|xhigh|max, codex: minimal|low|medium|high|xhigh|max|ultra, grok: low|medium|high|xhigh")
         .option("--senior <ref>", "session:<id> | lane:<id> | user")