@indigoai-us/hq-cli 5.345.121 → 5.345.122

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 ## [Unreleased]
 
+## [5.345.122] — 2026-10-13
+- `hq capacity` now renews Claude sign-ins on machines with a long lane
+  history. Its safety check read the lane list with a 1 MB limit, so on busy
+  machines every renewal was skipped and accounts showed as expired until
+  Claude Code was opened.
+- `hq capacity login --repair` and `hq capacity accounts` now show the right
+  fix for a signed-out default account that no HQ account uses: the
+  provider's own login (for example `claude auth login`). Before, they named
+  `--account default`, which hq refuses.
+- `hq lanes create --remote-control` now requires `--title <text>` and uses that title as the Claude Remote Control session name. Existing Remote Control lanes retain their previous names when resumed.
+
 ## [5.345.121] — 2026-10-13
 - `hq capture` ships in this release. It was listed under 5.345.120, but that tag was cut before the change merged, so 5.345.120 does not include it. `hq capture` drives HQ Capture, the hq-capture pack's screen recorder: `doctor`, `build`, `start [--record]`, `record`, `status`, `wait`, `stop`, `run` and `resume` run the pack's launcher from the HQ root with the arguments unchanged and pass its JSON and exit code through. `hq capture record` starts a recording without anyone pressing Start (pack 0.1.3 or later).
 

package/dist/command-catalog.generated.d.ts

@@ -13334,6 +13334,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--remote-control";
             readonly description: "Open a Claude lane in Remote Control using account a for login and the selected account for inference";
             readonly hidden: false;
+        }, {
+            readonly flags: "--title <text>";
+            readonly description: "Human-readable Claude Remote Control session title; required with --remote-control";
+            readonly hidden: false;
         }, {
             readonly flags: "--account <id>";
             readonly description: "Provider account id, or 'auto' to pick the account with the most room (all accounts are one pool across companies)";

package/dist/command-catalog.generated.js

@@ -16206,6 +16206,11 @@ export const COMMAND_CATALOG = [
                         "description": "Open a Claude lane in Remote Control using account a for login and the selected account for inference",
                         "hidden": false
                     },
+                    {
+                        "flags": "--title <text>",
+                        "description": "Human-readable Claude Remote Control session title; required with --remote-control",
+                        "hidden": false
+                    },
                     {
                         "flags": "--account <id>",
                         "description": "Provider account id, or 'auto' to pick the account with the most room (all accounts are one pool across companies)",

package/dist/commands/lanes.js

@@ -3454,6 +3454,13 @@ async function runCreate(ctx, opts) {
     if (opts.remoteControl === true && provider !== "claude") {
         throw new LanesError("remote_control_requires_claude", "--remote-control requires a Claude lane", { provider });
     }
+    const remoteControlTitle = opts.title?.trim();
+    if (opts.remoteControl === true && (!remoteControlTitle || remoteControlTitle.length > 80 || /\p{Cc}/u.test(remoteControlTitle))) {
+        throw new LanesError("remote_control_title_required", "--remote-control requires --title with 1–80 printable characters", {});
+    }
+    if (opts.remoteControl !== true && opts.title !== undefined) {
+        throw new LanesError("lane_title_requires_remote_control", "--title is only supported with --remote-control", {});
+    }
     const continuityEnabled = opts.remoteControl !== true && opts.worker !== undefined && await readLanesRegistryFlagFailOpen(LANE_WORKER_CONTINUITY_FLAG, { company: company ?? meshCompany, env: ctx.env, defaultValue: true });
     let workerContinuity = continuityEnabled
         ? findWorkerContinuityLane(loadAllLanes(hqRoot), {
@@ -4017,7 +4024,7 @@ async function runCreate(ctx, opts) {
             ...(opts.loop === true ? { loop_mode: true } : {}),
             ...(keepAlive ? { keep_alive_opted_in_at: createdAt } : {}),
             provider,
-            ...(opts.remoteControl === true ? { remote_control: true } : {}),
+            ...(opts.remoteControl === true ? { remote_control: true, remote_control_title: remoteControlTitle } : {}),
             ...(workerContinuity.resumable && workerContinuity.previous
                 ? {
                     provider_session_id: workerContinuity.previous.provider_session_id,
@@ -9732,6 +9739,7 @@ export function registerLanesCommand(parent, deps = {}) {
         .option("--loop", "Keep one worker lane registered to process queued phase envelopes")
         .option("--provider <name>", "claude | codex | grok")
         .option("--remote-control", "Open a Claude lane in Remote Control using account a for login and the selected account for inference")
+        .option("--title <text>", "Human-readable Claude Remote Control session title; required with --remote-control")
         .option("--account <id>", "Provider account id, or 'auto' to pick the account with the most room (all accounts are one pool across companies)")
         .option("--model <id>", "Model id for the provider CLI")
         .option("--effort <level>", "Effort level; claude: low|medium|high|xhigh|max, codex: minimal|low|medium|high|xhigh|max|ultra, grok: low|medium|high|xhigh")

package/dist/lib/capacity/collectors/claude-oauth.d.ts

@@ -339,7 +339,7 @@ interface RawAccountRow {
  * Falls back to `hq` on PATH when this process is not the hq CLI (tests,
  * embedders). Exported for tests.
  */
-export declare function resolveHqInvocation(argv?: readonly string[], execPath?: string): {
+export declare function resolveHqInvocation(argv?: readonly string[], execPath?: string, execArgv?: readonly string[]): {
     command: string;
     args: string[];
 };

package/dist/lib/capacity/collectors/claude-oauth.js

@@ -1687,6 +1687,37 @@ const defaultWriteClaudeCredentials = async (request) => {
     }
 };
 const HQ_CLI_PACKAGE_NAME = "@indigoai-us/hq-cli";
+const LOADER_FLAGS_WITH_VALUE = new Set(["--import", "--loader", "--experimental-loader", "--require", "-r", "--conditions", "-C"]);
+const LOADER_FLAGS_BARE = new Set(["--experimental-strip-types", "--experimental-transform-types"]);
+/**
+ * Node flags that load a TypeScript runner (tsx and similar). A dev run of the TS
+ * source needs them again in the child or `node src/index.ts` fails; compiled `.js`
+ * entries get none. Other exec flags (`--inspect`, memory limits) are not copied.
+ */
+function loaderArgsForSource(entry, execArgv) {
+    if (!/\.(?:[cm]?ts|tsx)$/.test(entry))
+        return [];
+    const out = [];
+    for (let i = 0; i < execArgv.length; i += 1) {
+        const arg = execArgv[i];
+        const eq = arg.indexOf("=");
+        const flag = eq === -1 ? arg : arg.slice(0, eq);
+        if (LOADER_FLAGS_BARE.has(arg)) {
+            out.push(arg);
+            continue;
+        }
+        if (!LOADER_FLAGS_WITH_VALUE.has(flag))
+            continue;
+        if (eq !== -1) {
+            out.push(arg);
+        }
+        else if (i + 1 < execArgv.length) {
+            out.push(arg, execArgv[i + 1]);
+            i += 1;
+        }
+    }
+    return out;
+}
 /**
  * How to re-invoke the running hq CLI without a PATH lookup. When argv[1] is
  * the entry of an installed hq-cli package, run it with the same node binary;
@@ -1694,7 +1725,7 @@ const HQ_CLI_PACKAGE_NAME = "@indigoai-us/hq-cli";
  * Falls back to `hq` on PATH when this process is not the hq CLI (tests,
  * embedders). Exported for tests.
  */
-export function resolveHqInvocation(argv = process.argv, execPath = process.execPath) {
+export function resolveHqInvocation(argv = process.argv, execPath = process.execPath, execArgv = process.execArgv) {
     const entry = argv[1];
     if (entry) {
         try {
@@ -1704,8 +1735,9 @@ export function resolveHqInvocation(argv = process.argv, execPath = process.exec
                 const manifest = path.join(dir, "package.json");
                 if (fs.existsSync(manifest)) {
                     const parsed = JSON.parse(fs.readFileSync(manifest, "utf8"));
-                    if (parsed.name === HQ_CLI_PACKAGE_NAME)
-                        return { command: execPath, args: [real] };
+                    if (parsed.name === HQ_CLI_PACKAGE_NAME) {
+                        return { command: execPath, args: [...loaderArgsForSource(real, execArgv), real] };
+                    }
                     break;
                 }
                 const parent = path.dirname(dir);
@@ -1720,12 +1752,20 @@ export function resolveHqInvocation(argv = process.argv, execPath = process.exec
     }
     return { command: "hq", args: [] };
 }
+/** Output cap for the `hq ... --json` reads behind the refresh gates. */
+const HQ_JSON_MAX_BUFFER_BYTES = 64 * 1024 * 1024;
+const HQ_JSON_TIMEOUT_MS = 15_000;
 /** Exported for tests; `invocation` defaults to {@link resolveHqInvocation}. */
 export function execHqJson(args, invocation = resolveHqInvocation(), env = process.env) {
     const result = spawnSync(invocation.command, [...invocation.args, ...args], {
         env,
         encoding: "utf8",
-        timeout: 5_000,
+        // The lane list takes ~2.5 s on a busy machine and grows with lane history; 5 s left too
+        // little headroom under load, and a timeout fails the gate closed.
+        timeout: HQ_JSON_TIMEOUT_MS,
+        // `hq lanes list --json` grows with lane history (1.7 MB on a busy machine). The spawnSync
+        // default of 1 MiB raised ENOBUFS, which made the live-lane gate fail closed on every collect.
+        maxBuffer: HQ_JSON_MAX_BUFFER_BYTES,
         windowsHide: true,
         stdio: ["ignore", "pipe", "pipe"],
     });
@@ -1733,6 +1773,8 @@ export function execHqJson(args, invocation = resolveHqInvocation(), env = proce
         const code = result.error.code;
         if (code === "ETIMEDOUT")
             throw new Error(`hq ${args.join(" ")} timed out`);
+        if (code === "ENOBUFS")
+            throw new Error(`hq ${args.join(" ")} output exceeded ${HQ_JSON_MAX_BUFFER_BYTES} bytes`);
         throw new Error(`hq ${args.join(" ")} failed to spawn: ${result.error.message}`);
     }
     if (result.signal)
@@ -1933,6 +1975,8 @@ const defaultListProcesses = async () => {
         const result = spawnSync("ps", ["-axo", "pid=,command="], {
             encoding: "utf8",
             timeout: 5_000,
+            // Full command lines for every process can pass the 1 MiB default on a busy machine.
+            maxBuffer: HQ_JSON_MAX_BUFFER_BYTES,
             windowsHide: true,
             stdio: ["ignore", "pipe", "pipe"],
         });

package/dist/lib/capacity/ledger.d.ts

@@ -386,6 +386,13 @@ export declare function isExpiredReason(reason: string | null | undefined): bool
 export declare function isAccountFailureReason(reason: string): boolean;
 /** Exact command for an account that has no usable credential. */
 export declare function capacityLoginCommand(provider: string, label: string): string;
+/**
+ * Fix for a signed-out default home that no HQ account is registered on. `hq capacity login
+ * <provider> --account default` is refused (reserved id), and without --account it signs a new
+ * account into a new home, leaving the default home signed out. The vendor's own login in the
+ * default home is the one command that signs that home back in.
+ */
+export declare function defaultHomeLoginCommand(provider: string): string;
 /** Open the vendor CLI so it can refresh its own token. Does not refresh anything. */
 export declare function claudeOpenCommand(home: string | null, userHome?: string): string;
 export declare function redactProviderTokens(text: string): string;

package/dist/lib/capacity/ledger.js

@@ -211,6 +211,20 @@ export function capacityLoginCommand(provider, label) {
     const safe = /^[A-Za-z0-9._-]+$/.test(label) ? label : `'${label.replace(/'/g, `'\\''`)}'`;
     return `hq capacity login ${provider} --account ${safe}`;
 }
+const DEFAULT_HOME_VENDOR_LOGIN = {
+    claude: "claude auth login",
+    codex: "codex login",
+    grok: "grok login",
+};
+/**
+ * Fix for a signed-out default home that no HQ account is registered on. `hq capacity login
+ * <provider> --account default` is refused (reserved id), and without --account it signs a new
+ * account into a new home, leaving the default home signed out. The vendor's own login in the
+ * default home is the one command that signs that home back in.
+ */
+export function defaultHomeLoginCommand(provider) {
+    return DEFAULT_HOME_VENDOR_LOGIN[provider] ?? capacityLoginCommand(provider, "default");
+}
 /** Open the vendor CLI so it can refresh its own token. Does not refresh anything. */
 export function claudeOpenCommand(home, userHome = os.homedir()) {
     const fallback = path.resolve(userHome, ".claude");
@@ -1053,7 +1067,9 @@ function clusterAccounts(provider, events) {
             fixCommand: expired
                 ? (provider.provider === "claude" ? claudeOpenCommand(home) : null)
                 : isSignedOut
-                    ? capacityLoginCommand(provider.provider, primary)
+                    ? (primary === "default"
+                        ? defaultHomeLoginCommand(provider.provider)
+                        : capacityLoginCommand(provider.provider, primary))
                     : null,
             usageStale: usageStale ? true : undefined,
             limits,

package/dist/lib/capacity/sign-in.d.ts

@@ -20,6 +20,8 @@ export interface RosterRow {
     home: string;
     /** True when the registry account is read for usage and is not used by lanes. */
     usageOnly?: boolean;
+    /** The default home with no HQ account registered on it. Only the vendor login fixes it. */
+    unregisteredDefault?: boolean;
 }
 /** Sentence printed for an expired Claude credential. Other commands pass through. */
 export declare function formatRefreshLine(provider: string, command: string): string;

package/dist/lib/capacity/sign-in.js

@@ -9,7 +9,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { defaultProviderHome } from "./accounts.js";
-import { EXPIRED_REASON, claudeOpenCommand, isExpiredReason, } from "./ledger.js";
+import { EXPIRED_REASON, capacityLoginCommand, claudeOpenCommand, defaultHomeLoginCommand, isExpiredReason, } from "./ledger.js";
 import { effectiveAccountHome } from "../lanes/account-home.js";
 import { canonicalizeHome, loadLanesConfig, writeLanesConfig } from "../lanes/config.js";
 import { LANE_PROVIDERS, parseLaneProvider } from "../lanes/types.js";
@@ -132,11 +132,18 @@ export function rosterFrom(accounts, view, userHome) {
         if (account.label === "default")
             defaultHome.set(account.provider, path.resolve(account.home));
     }
+    const registeredDefault = new Set();
+    for (const account of accounts) {
+        const home = defaultHome.get(account.provider);
+        if (account.label !== "default" && home && path.resolve(account.home) === home)
+            registeredDefault.add(account.provider);
+    }
     const rows = [];
     for (const account of accounts) {
         const folded = defaultHome.get(account.provider);
         if (account.label !== "default" && folded && path.resolve(account.home) === folded)
             continue;
+        const unregisteredDefault = account.label === "default" && !registeredDefault.has(account.provider);
         const group = view.providers.find((provider) => provider.provider === account.provider);
         const match = matchAccount(group?.accounts, account);
         const presented = match
@@ -149,11 +156,14 @@ export function rosterFrom(accounts, view, userHome) {
             state: presented.state,
             reason: presented.reason,
             command: presented.state === "signed_out"
-                ? presented.command ?? `hq capacity login ${account.provider} --account ${account.label}`
+                ? unregisteredDefault
+                    ? defaultHomeLoginCommand(account.provider)
+                    : presented.command ?? capacityLoginCommand(account.provider, account.label)
                 : presented.command,
             observedAt: match?.observedAt ?? latestLimitAt(match),
             home: account.home,
             usageOnly: account.lanes === false,
+            ...(unregisteredDefault ? { unregisteredDefault: true } : {}),
         });
     }
     return rows;
@@ -225,7 +235,7 @@ function formatRepairPlan(plan) {
     else {
         lines.push("Signed out (login again):");
         for (const row of plan.signedOut) {
-            lines.push(row.command ?? `hq capacity login ${row.provider} --account ${row.label}`);
+            lines.push(row.command ?? capacityLoginCommand(row.provider, row.label));
         }
     }
     if (plan.expired.length > 0) {
@@ -322,7 +332,12 @@ async function runRepair(request, deps) {
     const fixed = [];
     const skipped = [];
     for (const row of plan.signedOut) {
-        const fix = row.command ?? `hq capacity login ${row.provider} --account ${row.label}`;
+        const fix = row.command ?? capacityLoginCommand(row.provider, row.label);
+        if (row.unregisteredDefault) {
+            // No HQ account owns this home, so the lane login would refuse it. Name the vendor login.
+            skipped.push({ provider: row.provider, label: row.label, reason: "no HQ account uses the default home", fix });
+            continue;
+        }
         let logged;
         try {
             logged = await deps.loginAccount(row.provider, row.label);

package/dist/lib/lanes/spawn.d.ts

@@ -222,6 +222,7 @@ export interface ProviderResumeInput {
     session_id: string;
     prompt: string;
 }
+export declare function remoteControlLaneName(lane: Pick<LaneRecord, "lane_id" | "remote_control_title">): string;
 export declare function buildProviderCommand(provider: LaneProvider, input: {
     hqRoot: string;
     briefPath: string;

package/dist/lib/lanes/spawn.js

@@ -1528,6 +1528,9 @@ export function envelopeRepairPrompt(input) {
             `Output only that JSON. Do not add keys the schema does not name, and do not resume the task.`,
     ].join("\n\n");
 }
+export function remoteControlLaneName(lane) {
+    return lane.remote_control_title ?? `hq/${lane.lane_id}`;
+}
 export function buildProviderCommand(provider, input) {
     const parsed = parseLaneProvider(provider);
     const command = PROVIDER_COMMAND[parsed];
@@ -2481,7 +2484,7 @@ export function spawnLaneWorker(hqRoot, lane, deps = {}, launch = {}) {
         profile: profileLaunch,
         workerPolicyDir,
         resume,
-        ...(remoteSessionId ? { remoteControl: { sessionId: remoteSessionId, name: `hq/${lane.lane_id}` } } : {}),
+        ...(remoteSessionId ? { remoteControl: { sessionId: remoteSessionId, name: remoteControlLaneName(lane) } } : {}),
     });
     const remoteLaunch = remoteSessionId
         ? prepareRemoteControlLane({

package/dist/lib/lanes/store.js

@@ -433,6 +433,17 @@ export function parseLaneRecord(raw, filePath) {
             value: raw.remote_control,
         });
     }
+    if (raw.remote_control_title !== undefined && (raw.remote_control !== true ||
+        typeof raw.remote_control_title !== "string" ||
+        raw.remote_control_title.trim() !== raw.remote_control_title ||
+        raw.remote_control_title.length < 1 ||
+        raw.remote_control_title.length > 80 ||
+        /\p{Cc}/u.test(raw.remote_control_title))) {
+        throw new LaneSchemaError("remote_control_title requires a Claude Remote Control lane and 1–80 printable characters", {
+            path: filePath,
+            field: "remote_control_title",
+        });
+    }
     if (raw.written_by_version !== undefined) {
         const writtenByVersion = requireString(raw.written_by_version, "written_by_version");
         if (!semver.valid(writtenByVersion)) {

package/dist/lib/lanes/types.d.ts

@@ -614,6 +614,8 @@ export interface LaneRecord {
     provider: LaneProvider;
     /** Open each Claude turn as a named Remote Control session using account a's login. */
     remote_control?: boolean;
+    /** Human-readable Remote Control name, fixed when the lane is created. Older lanes may lack it. */
+    remote_control_title?: string;
     /** Whether provider came from an explicit create override, the router (`--account auto`), or the worker profile/default. */
     provider_source?: "cli" | "profile" | "default" | "auto";
     account?: string;

package/dist/lib/lanes/types.js

@@ -235,7 +235,7 @@ export const LANE_FIELD_WRITERS = {
     pickup_validation_pending_since: ["creator", "command", "spawn", "reconcile"],
     priority: ["command"], worker: ["creator", "command"], worker_path: ["creator", "command"], worker_pack: ["creator", "command"], worker_profile: ["creator", "command"], worker_profile_hash: ["creator", "command", "spawn"], registry_worker: ["creator", "command", "spawn"], registry_worker_approval_history: ["command", "watcher", "reconcile"], worker_profile_repin_history: ["command"], worker_profile_ignored: ["creator", "command", "spawn"], worker_policy_delivery: ["command", "spawn"],
     keep_alive: ["creator", "command"], keep_alive_standing: ["command"], keep_alive_opted_in_at: ["creator", "command"], keep_alive_blocked_reason: ["command", "reconcile"], keep_alive_resume_count: ["command", "reconcile", "spawn"], keep_alive_history: ["reconcile"], keep_alive_blocked_resume_streak: ["reconcile", "spawn", "watcher"], keep_alive_last_resume_at: ["command", "reconcile", "spawn"], keep_alive_next_eligible_at: ["command", "reconcile", "spawn"], keep_alive_exhausted_at: ["command", "reconcile", "spawn"], loop_mode: ["creator"],
-    provider: ["creator", "command"], remote_control: ["creator"], provider_source: ["creator", "command"], account: ["creator", "spawn", "command", "watcher", "reconcile"], account_source: ["creator", "command"], profile_settings_pinned: ["command"], account_selection: ["creator", "command"], account_pick: ["creator"], admission_accounts: ["creator", "command"], account_history: ["command", "spawn", "watcher", "reconcile"], failed_resume_history: ["command"], fallback_question_cancellation_failures: ["command"], pending_resume: ["command", "spawn", "watcher", "reconcile"], placement_default: ["creator"], host: ["creator", "command"], origin_host: ["creator"], origin_host_source: ["creator"],
+    provider: ["creator", "command"], remote_control: ["creator"], remote_control_title: ["creator"], provider_source: ["creator", "command"], account: ["creator", "spawn", "command", "watcher", "reconcile"], account_source: ["creator", "command"], profile_settings_pinned: ["command"], account_selection: ["creator", "command"], account_pick: ["creator"], admission_accounts: ["creator", "command"], account_history: ["command", "spawn", "watcher", "reconcile"], failed_resume_history: ["command"], fallback_question_cancellation_failures: ["command"], pending_resume: ["command", "spawn", "watcher", "reconcile"], placement_default: ["creator"], host: ["creator", "command"], origin_host: ["creator"], origin_host_source: ["creator"],
     version: ["creator"], created_at: ["creator"], updated_at: ["creator"], ended_at: ["reconcile"], envelope_summary: ["reconcile"], attribution_history: ["command", "watcher", "reconcile"], story_switch_pending: ["command", "watcher", "reconcile"], story_switch_unacknowledged: ["command", "watcher", "reconcile"],
     last_envelope: ["watcher", "reconcile"], model: ["creator", "spawn", "command"], model_source: ["creator", "spawn", "command"], effort: ["creator", "spawn", "command"], effort_source: ["creator", "spawn", "command"], fast_mode: ["spawn"],
     last_message_at: ["creator", "command"], status_gate: ["spawn", "watcher"], status_gate_history: ["watcher", "reconcile"], blocker_freshness_state: ["watcher"], kr_freshness_state: ["watcher"], last_compaction: ["spawn"], story_complete: ["watcher", "reconcile"], story_complete_reason: ["watcher", "reconcile"], story_status: ["watcher", "reconcile"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.121",
+  "version": "5.345.122",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {