@indigoai-us/hq-cli 5.345.121 → 5.345.123

package/dist/lib/capacity/collectors/claude-oauth.js

@@ -1687,6 +1687,37 @@ const defaultWriteClaudeCredentials = async (request) => {
     }
 };
 const HQ_CLI_PACKAGE_NAME = "@indigoai-us/hq-cli";
+const LOADER_FLAGS_WITH_VALUE = new Set(["--import", "--loader", "--experimental-loader", "--require", "-r", "--conditions", "-C"]);
+const LOADER_FLAGS_BARE = new Set(["--experimental-strip-types", "--experimental-transform-types"]);
+/**
+ * Node flags that load a TypeScript runner (tsx and similar). A dev run of the TS
+ * source needs them again in the child or `node src/index.ts` fails; compiled `.js`
+ * entries get none. Other exec flags (`--inspect`, memory limits) are not copied.
+ */
+function loaderArgsForSource(entry, execArgv) {
+    if (!/\.(?:[cm]?ts|tsx)$/.test(entry))
+        return [];
+    const out = [];
+    for (let i = 0; i < execArgv.length; i += 1) {
+        const arg = execArgv[i];
+        const eq = arg.indexOf("=");
+        const flag = eq === -1 ? arg : arg.slice(0, eq);
+        if (LOADER_FLAGS_BARE.has(arg)) {
+            out.push(arg);
+            continue;
+        }
+        if (!LOADER_FLAGS_WITH_VALUE.has(flag))
+            continue;
+        if (eq !== -1) {
+            out.push(arg);
+        }
+        else if (i + 1 < execArgv.length) {
+            out.push(arg, execArgv[i + 1]);
+            i += 1;
+        }
+    }
+    return out;
+}
 /**
  * How to re-invoke the running hq CLI without a PATH lookup. When argv[1] is
  * the entry of an installed hq-cli package, run it with the same node binary;
@@ -1694,7 +1725,7 @@ const HQ_CLI_PACKAGE_NAME = "@indigoai-us/hq-cli";
  * Falls back to `hq` on PATH when this process is not the hq CLI (tests,
  * embedders). Exported for tests.
  */
-export function resolveHqInvocation(argv = process.argv, execPath = process.execPath) {
+export function resolveHqInvocation(argv = process.argv, execPath = process.execPath, execArgv = process.execArgv) {
     const entry = argv[1];
     if (entry) {
         try {
@@ -1704,8 +1735,9 @@ export function resolveHqInvocation(argv = process.argv, execPath = process.exec
                 const manifest = path.join(dir, "package.json");
                 if (fs.existsSync(manifest)) {
                     const parsed = JSON.parse(fs.readFileSync(manifest, "utf8"));
-                    if (parsed.name === HQ_CLI_PACKAGE_NAME)
-                        return { command: execPath, args: [real] };
+                    if (parsed.name === HQ_CLI_PACKAGE_NAME) {
+                        return { command: execPath, args: [...loaderArgsForSource(real, execArgv), real] };
+                    }
                     break;
                 }
                 const parent = path.dirname(dir);
@@ -1720,12 +1752,20 @@ export function resolveHqInvocation(argv = process.argv, execPath = process.exec
     }
     return { command: "hq", args: [] };
 }
+/** Output cap for the `hq ... --json` reads behind the refresh gates. */
+const HQ_JSON_MAX_BUFFER_BYTES = 64 * 1024 * 1024;
+const HQ_JSON_TIMEOUT_MS = 15_000;
 /** Exported for tests; `invocation` defaults to {@link resolveHqInvocation}. */
 export function execHqJson(args, invocation = resolveHqInvocation(), env = process.env) {
     const result = spawnSync(invocation.command, [...invocation.args, ...args], {
         env,
         encoding: "utf8",
-        timeout: 5_000,
+        // The lane list takes ~2.5 s on a busy machine and grows with lane history; 5 s left too
+        // little headroom under load, and a timeout fails the gate closed.
+        timeout: HQ_JSON_TIMEOUT_MS,
+        // `hq lanes list --json` grows with lane history (1.7 MB on a busy machine). The spawnSync
+        // default of 1 MiB raised ENOBUFS, which made the live-lane gate fail closed on every collect.
+        maxBuffer: HQ_JSON_MAX_BUFFER_BYTES,
         windowsHide: true,
         stdio: ["ignore", "pipe", "pipe"],
     });
@@ -1733,6 +1773,8 @@ export function execHqJson(args, invocation = resolveHqInvocation(), env = proce
         const code = result.error.code;
         if (code === "ETIMEDOUT")
             throw new Error(`hq ${args.join(" ")} timed out`);
+        if (code === "ENOBUFS")
+            throw new Error(`hq ${args.join(" ")} output exceeded ${HQ_JSON_MAX_BUFFER_BYTES} bytes`);
         throw new Error(`hq ${args.join(" ")} failed to spawn: ${result.error.message}`);
     }
     if (result.signal)
@@ -1933,6 +1975,8 @@ const defaultListProcesses = async () => {
         const result = spawnSync("ps", ["-axo", "pid=,command="], {
             encoding: "utf8",
             timeout: 5_000,
+            // Full command lines for every process can pass the 1 MiB default on a busy machine.
+            maxBuffer: HQ_JSON_MAX_BUFFER_BYTES,
             windowsHide: true,
             stdio: ["ignore", "pipe", "pipe"],
         });

package/dist/lib/capacity/ledger.d.ts

@@ -386,6 +386,13 @@ export declare function isExpiredReason(reason: string | null | undefined): bool
 export declare function isAccountFailureReason(reason: string): boolean;
 /** Exact command for an account that has no usable credential. */
 export declare function capacityLoginCommand(provider: string, label: string): string;
+/**
+ * Fix for a signed-out default home that no HQ account is registered on. `hq capacity login
+ * <provider> --account default` is refused (reserved id), and without --account it signs a new
+ * account into a new home, leaving the default home signed out. The vendor's own login in the
+ * default home is the one command that signs that home back in.
+ */
+export declare function defaultHomeLoginCommand(provider: string): string;
 /** Open the vendor CLI so it can refresh its own token. Does not refresh anything. */
 export declare function claudeOpenCommand(home: string | null, userHome?: string): string;
 export declare function redactProviderTokens(text: string): string;

package/dist/lib/capacity/ledger.js

@@ -211,6 +211,20 @@ export function capacityLoginCommand(provider, label) {
     const safe = /^[A-Za-z0-9._-]+$/.test(label) ? label : `'${label.replace(/'/g, `'\\''`)}'`;
     return `hq capacity login ${provider} --account ${safe}`;
 }
+const DEFAULT_HOME_VENDOR_LOGIN = {
+    claude: "claude auth login",
+    codex: "codex login",
+    grok: "grok login",
+};
+/**
+ * Fix for a signed-out default home that no HQ account is registered on. `hq capacity login
+ * <provider> --account default` is refused (reserved id), and without --account it signs a new
+ * account into a new home, leaving the default home signed out. The vendor's own login in the
+ * default home is the one command that signs that home back in.
+ */
+export function defaultHomeLoginCommand(provider) {
+    return DEFAULT_HOME_VENDOR_LOGIN[provider] ?? capacityLoginCommand(provider, "default");
+}
 /** Open the vendor CLI so it can refresh its own token. Does not refresh anything. */
 export function claudeOpenCommand(home, userHome = os.homedir()) {
     const fallback = path.resolve(userHome, ".claude");
@@ -1053,7 +1067,9 @@ function clusterAccounts(provider, events) {
             fixCommand: expired
                 ? (provider.provider === "claude" ? claudeOpenCommand(home) : null)
                 : isSignedOut
-                    ? capacityLoginCommand(provider.provider, primary)
+                    ? (primary === "default"
+                        ? defaultHomeLoginCommand(provider.provider)
+                        : capacityLoginCommand(provider.provider, primary))
                     : null,
             usageStale: usageStale ? true : undefined,
             limits,

package/dist/lib/capacity/sign-in.d.ts

@@ -20,6 +20,8 @@ export interface RosterRow {
     home: string;
     /** True when the registry account is read for usage and is not used by lanes. */
     usageOnly?: boolean;
+    /** The default home with no HQ account registered on it. Only the vendor login fixes it. */
+    unregisteredDefault?: boolean;
 }
 /** Sentence printed for an expired Claude credential. Other commands pass through. */
 export declare function formatRefreshLine(provider: string, command: string): string;

package/dist/lib/capacity/sign-in.js

@@ -9,7 +9,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { defaultProviderHome } from "./accounts.js";
-import { EXPIRED_REASON, claudeOpenCommand, isExpiredReason, } from "./ledger.js";
+import { EXPIRED_REASON, capacityLoginCommand, claudeOpenCommand, defaultHomeLoginCommand, isExpiredReason, } from "./ledger.js";
 import { effectiveAccountHome } from "../lanes/account-home.js";
 import { canonicalizeHome, loadLanesConfig, writeLanesConfig } from "../lanes/config.js";
 import { LANE_PROVIDERS, parseLaneProvider } from "../lanes/types.js";
@@ -132,11 +132,18 @@ export function rosterFrom(accounts, view, userHome) {
         if (account.label === "default")
             defaultHome.set(account.provider, path.resolve(account.home));
     }
+    const registeredDefault = new Set();
+    for (const account of accounts) {
+        const home = defaultHome.get(account.provider);
+        if (account.label !== "default" && home && path.resolve(account.home) === home)
+            registeredDefault.add(account.provider);
+    }
     const rows = [];
     for (const account of accounts) {
         const folded = defaultHome.get(account.provider);
         if (account.label !== "default" && folded && path.resolve(account.home) === folded)
             continue;
+        const unregisteredDefault = account.label === "default" && !registeredDefault.has(account.provider);
         const group = view.providers.find((provider) => provider.provider === account.provider);
         const match = matchAccount(group?.accounts, account);
         const presented = match
@@ -149,11 +156,14 @@ export function rosterFrom(accounts, view, userHome) {
             state: presented.state,
             reason: presented.reason,
             command: presented.state === "signed_out"
-                ? presented.command ?? `hq capacity login ${account.provider} --account ${account.label}`
+                ? unregisteredDefault
+                    ? defaultHomeLoginCommand(account.provider)
+                    : presented.command ?? capacityLoginCommand(account.provider, account.label)
                 : presented.command,
             observedAt: match?.observedAt ?? latestLimitAt(match),
             home: account.home,
             usageOnly: account.lanes === false,
+            ...(unregisteredDefault ? { unregisteredDefault: true } : {}),
         });
     }
     return rows;
@@ -225,7 +235,7 @@ function formatRepairPlan(plan) {
     else {
         lines.push("Signed out (login again):");
         for (const row of plan.signedOut) {
-            lines.push(row.command ?? `hq capacity login ${row.provider} --account ${row.label}`);
+            lines.push(row.command ?? capacityLoginCommand(row.provider, row.label));
         }
     }
     if (plan.expired.length > 0) {
@@ -322,7 +332,12 @@ async function runRepair(request, deps) {
     const fixed = [];
     const skipped = [];
     for (const row of plan.signedOut) {
-        const fix = row.command ?? `hq capacity login ${row.provider} --account ${row.label}`;
+        const fix = row.command ?? capacityLoginCommand(row.provider, row.label);
+        if (row.unregisteredDefault) {
+            // No HQ account owns this home, so the lane login would refuse it. Name the vendor login.
+            skipped.push({ provider: row.provider, label: row.label, reason: "no HQ account uses the default home", fix });
+            continue;
+        }
         let logged;
         try {
             logged = await deps.loginAccount(row.provider, row.label);

package/dist/lib/core-utils/session-company.d.ts

@@ -0,0 +1,3 @@
+/** Reads the active session's company lock without importing the full hq-session command. */
+export declare function sessionCompanySlugs(root: string, env?: NodeJS.ProcessEnv, multiCompanyLockEnabled?: boolean): string[];
+//# sourceMappingURL=session-company.d.ts.map

package/dist/lib/core-utils/session-company.js

@@ -0,0 +1,78 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { resolveSessionId } from "./session-id.js";
+function metaValue(contents, key) {
+    for (const line of contents.split("\n")) {
+        const record = process.platform === "win32" ? line.replace(/\r$/, "") : line;
+        const first = record.match(/^\s*(\S+)/)?.[1] ?? "";
+        if (first !== `${key}:`)
+            continue;
+        return record.replace(/^[^:]+:[\t ]*/, "").replace(/^"|"$/g, "");
+    }
+    return "";
+}
+function listedCompanySlugs(contents) {
+    const listed = metaValue(contents, "company_slugs");
+    const primary = metaValue(contents, "company_slug");
+    const candidates = listed ? listed.split(",") : primary ? [primary] : [];
+    const seen = new Set();
+    const result = candidates.filter((slug) => {
+        if (!/^[A-Za-z0-9_-]+$/.test(slug) || seen.has(slug))
+            return false;
+        seen.add(slug);
+        return true;
+    });
+    if (result.length > 1 && result.includes("personal"))
+        return primary ? [primary] : [];
+    return primary && result[0] !== primary ? [primary] : result;
+}
+function isExactCompanyDirectory(root, slug) {
+    const companies = path.join(root, "companies");
+    try {
+        for (const entry of fs.readdirSync(companies)) {
+            const candidate = path.join(companies, entry);
+            try {
+                if (!fs.statSync(candidate).isDirectory() || fs.lstatSync(candidate).isSymbolicLink())
+                    continue;
+                if (entry === slug)
+                    return true;
+            }
+            catch (error) {
+                const code = error.code;
+                if (code !== "ENOENT" && code !== "ENOTDIR" && code !== "EACCES" && code !== "ELOOP")
+                    throw error;
+            }
+        }
+    }
+    catch (error) {
+        const code = error.code;
+        if (code !== "ENOENT" && code !== "ENOTDIR" && code !== "EACCES" && code !== "ELOOP")
+            throw error;
+    }
+    return false;
+}
+/** Reads the active session's company lock without importing the full hq-session command. */
+export function sessionCompanySlugs(root, env = process.env, multiCompanyLockEnabled = false) {
+    const sessionId = resolveSessionId(root, env);
+    if (!sessionId)
+        return [];
+    const metaPath = path.join(root, "workspace", "sessions", sessionId, "meta.yaml");
+    let contents;
+    try {
+        if (!fs.statSync(metaPath).isFile())
+            return [];
+        contents = fs.readFileSync(metaPath, "utf8");
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === "ENOENT" || code === "ENOTDIR" || code === "EACCES" || code === "ELOOP")
+            return [];
+        throw error;
+    }
+    if (!multiCompanyLockEnabled) {
+        const primary = metaValue(contents, "company_slug");
+        return primary ? [primary] : [];
+    }
+    return listedCompanySlugs(contents).filter((slug) => slug === "personal" || isExactCompanyDirectory(root, slug));
+}
+//# sourceMappingURL=session-company.js.map

package/dist/lib/lanes/spawn.d.ts

@@ -222,6 +222,7 @@ export interface ProviderResumeInput {
     session_id: string;
     prompt: string;
 }
+export declare function remoteControlLaneName(lane: Pick<LaneRecord, "lane_id" | "remote_control_title">): string;
 export declare function buildProviderCommand(provider: LaneProvider, input: {
     hqRoot: string;
     briefPath: string;

package/dist/lib/lanes/spawn.js

@@ -1528,6 +1528,9 @@ export function envelopeRepairPrompt(input) {
             `Output only that JSON. Do not add keys the schema does not name, and do not resume the task.`,
     ].join("\n\n");
 }
+export function remoteControlLaneName(lane) {
+    return lane.remote_control_title ?? `hq/${lane.lane_id}`;
+}
 export function buildProviderCommand(provider, input) {
     const parsed = parseLaneProvider(provider);
     const command = PROVIDER_COMMAND[parsed];
@@ -2481,7 +2484,7 @@ export function spawnLaneWorker(hqRoot, lane, deps = {}, launch = {}) {
         profile: profileLaunch,
         workerPolicyDir,
         resume,
-        ...(remoteSessionId ? { remoteControl: { sessionId: remoteSessionId, name: `hq/${lane.lane_id}` } } : {}),
+        ...(remoteSessionId ? { remoteControl: { sessionId: remoteSessionId, name: remoteControlLaneName(lane) } } : {}),
     });
     const remoteLaunch = remoteSessionId
         ? prepareRemoteControlLane({

package/dist/lib/lanes/store.js

@@ -433,6 +433,17 @@ export function parseLaneRecord(raw, filePath) {
             value: raw.remote_control,
         });
     }
+    if (raw.remote_control_title !== undefined && (raw.remote_control !== true ||
+        typeof raw.remote_control_title !== "string" ||
+        raw.remote_control_title.trim() !== raw.remote_control_title ||
+        raw.remote_control_title.length < 1 ||
+        raw.remote_control_title.length > 80 ||
+        /\p{Cc}/u.test(raw.remote_control_title))) {
+        throw new LaneSchemaError("remote_control_title requires a Claude Remote Control lane and 1–80 printable characters", {
+            path: filePath,
+            field: "remote_control_title",
+        });
+    }
     if (raw.written_by_version !== undefined) {
         const writtenByVersion = requireString(raw.written_by_version, "written_by_version");
         if (!semver.valid(writtenByVersion)) {

package/dist/lib/lanes/types.d.ts

@@ -614,6 +614,8 @@ export interface LaneRecord {
     provider: LaneProvider;
     /** Open each Claude turn as a named Remote Control session using account a's login. */
     remote_control?: boolean;
+    /** Human-readable Remote Control name, fixed when the lane is created. Older lanes may lack it. */
+    remote_control_title?: string;
     /** Whether provider came from an explicit create override, the router (`--account auto`), or the worker profile/default. */
     provider_source?: "cli" | "profile" | "default" | "auto";
     account?: string;

package/dist/lib/lanes/types.js

@@ -235,7 +235,7 @@ export const LANE_FIELD_WRITERS = {
     pickup_validation_pending_since: ["creator", "command", "spawn", "reconcile"],
     priority: ["command"], worker: ["creator", "command"], worker_path: ["creator", "command"], worker_pack: ["creator", "command"], worker_profile: ["creator", "command"], worker_profile_hash: ["creator", "command", "spawn"], registry_worker: ["creator", "command", "spawn"], registry_worker_approval_history: ["command", "watcher", "reconcile"], worker_profile_repin_history: ["command"], worker_profile_ignored: ["creator", "command", "spawn"], worker_policy_delivery: ["command", "spawn"],
     keep_alive: ["creator", "command"], keep_alive_standing: ["command"], keep_alive_opted_in_at: ["creator", "command"], keep_alive_blocked_reason: ["command", "reconcile"], keep_alive_resume_count: ["command", "reconcile", "spawn"], keep_alive_history: ["reconcile"], keep_alive_blocked_resume_streak: ["reconcile", "spawn", "watcher"], keep_alive_last_resume_at: ["command", "reconcile", "spawn"], keep_alive_next_eligible_at: ["command", "reconcile", "spawn"], keep_alive_exhausted_at: ["command", "reconcile", "spawn"], loop_mode: ["creator"],
-    provider: ["creator", "command"], remote_control: ["creator"], provider_source: ["creator", "command"], account: ["creator", "spawn", "command", "watcher", "reconcile"], account_source: ["creator", "command"], profile_settings_pinned: ["command"], account_selection: ["creator", "command"], account_pick: ["creator"], admission_accounts: ["creator", "command"], account_history: ["command", "spawn", "watcher", "reconcile"], failed_resume_history: ["command"], fallback_question_cancellation_failures: ["command"], pending_resume: ["command", "spawn", "watcher", "reconcile"], placement_default: ["creator"], host: ["creator", "command"], origin_host: ["creator"], origin_host_source: ["creator"],
+    provider: ["creator", "command"], remote_control: ["creator"], remote_control_title: ["creator"], provider_source: ["creator", "command"], account: ["creator", "spawn", "command", "watcher", "reconcile"], account_source: ["creator", "command"], profile_settings_pinned: ["command"], account_selection: ["creator", "command"], account_pick: ["creator"], admission_accounts: ["creator", "command"], account_history: ["command", "spawn", "watcher", "reconcile"], failed_resume_history: ["command"], fallback_question_cancellation_failures: ["command"], pending_resume: ["command", "spawn", "watcher", "reconcile"], placement_default: ["creator"], host: ["creator", "command"], origin_host: ["creator"], origin_host_source: ["creator"],
     version: ["creator"], created_at: ["creator"], updated_at: ["creator"], ended_at: ["reconcile"], envelope_summary: ["reconcile"], attribution_history: ["command", "watcher", "reconcile"], story_switch_pending: ["command", "watcher", "reconcile"], story_switch_unacknowledged: ["command", "watcher", "reconcile"],
     last_envelope: ["watcher", "reconcile"], model: ["creator", "spawn", "command"], model_source: ["creator", "spawn", "command"], effort: ["creator", "spawn", "command"], effort_source: ["creator", "spawn", "command"], fast_mode: ["spawn"],
     last_message_at: ["creator", "command"], status_gate: ["spawn", "watcher"], status_gate_history: ["watcher", "reconcile"], blocker_freshness_state: ["watcher"], kr_freshness_state: ["watcher"], last_compaction: ["spawn"], story_complete: ["watcher", "reconcile"], story_complete_reason: ["watcher", "reconcile"], story_status: ["watcher", "reconcile"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.121",
+  "version": "5.345.123",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {