@indigoai-us/hq-cli 5.345.149 → 5.345.151

package/dist/lib/lanes/index.d.ts

@@ -20,7 +20,7 @@ export { LANE_STORY_LEDGER_FLAG, buildLaneStatusSnapshot, formatLaneStatusHuman,
 export type { LaneStatusSnapshot, ProjectStoryLedger, StoryLedgerWriteDeps } from "./story-ledger.js";
 export { buildOutpostPickupCommand, parseOutpostPickupPayload, } from "./outpost-dispatch.js";
 export type { OutpostDispatchResult, OutpostPickupPayload, } from "./outpost-dispatch.js";
-export { LANES_STORE_REL, LANE_RECORDS_DIR, PENDING_INDEX_DIR, QUESTION_RECORDS_DIR, appendCappedHistory, appendLaneAttribution, appendLaneSeniorHistory, appendQuestionRouting, createLane, createQuestion, isConflictSidecarName, laneRecordPath, lanesStoreRoot, listLaneIds, listQuestionIds, mergeLaneRecords, mergeQuestionRecords, mintLaneId, mintQuestionId, parseLaneRecord, parseQuestionRecord, pendingMarkerPath, questionRecordPath, readAllLanes, readLane, readQuestion, resolveStoreHqRoot, sanitizeHostComponent, tryReadLane, tryReadQuestion, retryUpdateLane, retryUpdateQuestion, syncLaneRecordFromOwner, updateLane, updateQuestion, withLaneHireLocks, } from "./store.js";
+export { LANES_STORE_REL, LANE_RECORDS_DIR, PENDING_INDEX_DIR, QUESTION_RECORDS_DIR, appendCappedHistory, appendLaneAttribution, appendLaneSeniorHistory, appendQuestionRouting, createLane, createQuestion, isConflictSidecarName, laneRecordPath, lanesStoreRoot, listLaneIds, expandLocalLaneIdPrefix, LANE_ID_PREFIX_MIN, listQuestionIds, mergeLaneRecords, mergeQuestionRecords, mintLaneId, mintQuestionId, parseLaneRecord, parseQuestionRecord, pendingMarkerPath, questionRecordPath, readAllLanes, readLane, readQuestion, resolveStoreHqRoot, sanitizeHostComponent, tryReadLane, tryReadQuestion, retryUpdateLane, retryUpdateQuestion, syncLaneRecordFromOwner, updateLane, updateQuestion, withLaneHireLocks, } from "./store.js";
 export type { StoreDeps } from "./store.js";
 export { DEFAULT_LANE_WATCH_INTERVAL_MS, MAX_LANE_WATCH_INTERVAL_MS, MAX_WATCHED_LANES, MAX_WATCH_OUTPUT_LINES, runLaneWatch, } from "./watch.js";
 export type { LaneWatchDeps, LaneWatchResult } from "./watch.js";

package/dist/lib/lanes/index.js

@@ -12,7 +12,7 @@ export { DEFAULT_ACCOUNT_HOMES, DEFAULT_AUTO_COMPACT_TOKENS, DEFAULT_COMPACT_AFT
 export { resolveLanesHqRoot } from "./hq-root.js";
 export { LANE_STORY_LEDGER_FLAG, buildLaneStatusSnapshot, formatLaneStatusHuman, laneStoryLedgerEnabled, resolveProjectStoryLedger, syncLaneToProjectStoryLedger, removeLaneFromProjectStoryLedger, validateProjectStories, } from "./story-ledger.js";
 export { buildOutpostPickupCommand, parseOutpostPickupPayload, } from "./outpost-dispatch.js";
-export { LANES_STORE_REL, LANE_RECORDS_DIR, PENDING_INDEX_DIR, QUESTION_RECORDS_DIR, appendCappedHistory, appendLaneAttribution, appendLaneSeniorHistory, appendQuestionRouting, createLane, createQuestion, isConflictSidecarName, laneRecordPath, lanesStoreRoot, listLaneIds, listQuestionIds, mergeLaneRecords, mergeQuestionRecords, mintLaneId, mintQuestionId, parseLaneRecord, parseQuestionRecord, pendingMarkerPath, questionRecordPath, readAllLanes, readLane, readQuestion, resolveStoreHqRoot, sanitizeHostComponent, tryReadLane, tryReadQuestion, retryUpdateLane, retryUpdateQuestion, syncLaneRecordFromOwner, updateLane, updateQuestion, withLaneHireLocks, } from "./store.js";
+export { LANES_STORE_REL, LANE_RECORDS_DIR, PENDING_INDEX_DIR, QUESTION_RECORDS_DIR, appendCappedHistory, appendLaneAttribution, appendLaneSeniorHistory, appendQuestionRouting, createLane, createQuestion, isConflictSidecarName, laneRecordPath, lanesStoreRoot, listLaneIds, expandLocalLaneIdPrefix, LANE_ID_PREFIX_MIN, listQuestionIds, mergeLaneRecords, mergeQuestionRecords, mintLaneId, mintQuestionId, parseLaneRecord, parseQuestionRecord, pendingMarkerPath, questionRecordPath, readAllLanes, readLane, readQuestion, resolveStoreHqRoot, sanitizeHostComponent, tryReadLane, tryReadQuestion, retryUpdateLane, retryUpdateQuestion, syncLaneRecordFromOwner, updateLane, updateQuestion, withLaneHireLocks, } from "./store.js";
 export { DEFAULT_LANE_WATCH_INTERVAL_MS, MAX_LANE_WATCH_INTERVAL_MS, MAX_WATCHED_LANES, MAX_WATCH_OUTPUT_LINES, runLaneWatch, } from "./watch.js";
 export { MONITOR_ERROR_EXIT_CODE, MONITOR_ENGINES, MONITOR_MAX_TIMEOUT_MS, MONITOR_TASK_OUTPUT_MAX_BYTES, MONITOR_TRANSCRIPT_MAX_BYTES, MONITOR_UNCOVERED_EXIT_CODE, coveredLaneIds, isMonitorTaskLive, monitorReminderText, parseCanonicalWatchCommand, parseMonitorTranscript, readLiveMonitorEvidence, } from "./monitor.js";
 export { IMDS_HOST, IMDS_INSTANCE_ID_URL, IMDS_TIMEOUT_MS, IMDS_TOKEN_URL, defaultReadImdsInstanceId, resolveMachineIdentity, } from "./machine-identity.js";

package/dist/lib/lanes/links.js

@@ -267,28 +267,44 @@ function hookMessage(root, pointer) {
         throw new LaneLinkError("link_pointer_invalid", "Child link pointer has no child name");
     return { inbox: queueDir(root, pointer.link, pointer.name), role: "child", child: pointer.name };
 }
+// Same markers as core's conduct-lanes-link-deliver.sh. A parent session id
+// alone is not one: resumed, forked, or launcher-spawned Grok roots carry it,
+// and Grok marks its real children with subagent_type.
+function isChildHookPayload(payload) {
+    const nonEmpty = (...keys) => keys.some((key) => typeof payload[key] === "string" && payload[key].length > 0);
+    if (["agent_id", "agentId"].some((key) => payload[key] !== undefined && payload[key] !== null && payload[key] !== ""))
+        return true;
+    if (nonEmpty("parent_thread_id", "parentThreadId", "agent_transcript_path", "agentTranscriptPath", "subagent_type", "subagentType"))
+        return true;
+    const transcript = payload.transcript_path ?? payload.transcriptPath;
+    return typeof transcript === "string" && /[/\\]subagents[/\\][^/\\]+\.jsonl$/.test(transcript);
+}
 export async function runLaneLink(subcommand, options) {
     const now = options.now ?? (() => new Date());
     const env = options.env ?? process.env;
     const root = options.hqRoot;
     let sid = "";
+    let childContext = false;
     if (subcommand === "_deliver") {
-        sid = (() => {
-            let payload = {};
-            try {
-                payload = JSON.parse(options.input ?? "{}");
-            }
-            catch { /* malformed hooks are inert */ }
-            const value = payload.session_id ?? payload.sessionId;
-            return typeof value === "string" && safeId(value) ? value : "";
-        })();
+        let payload = {};
+        try {
+            const parsed = JSON.parse(options.input ?? "{}");
+            if (parsed && typeof parsed === "object" && !Array.isArray(parsed))
+                payload = parsed;
+        }
+        catch { /* malformed hooks are inert */ }
+        const value = payload.session_id ?? payload.sessionId;
+        sid = typeof value === "string" && safeId(value) ? value : "";
+        childContext = isChildHookPayload(payload);
     }
     const requireSid = () => sid || (sid = resolveLinkSessionId(root, options.sessionId, env));
     const links = rootDir(root);
     if (subcommand === "_deliver") {
-        if (!sid || !["PostToolUse", "Stop", "SubagentStop"].includes(options.event ?? ""))
+        // Subagent hook events carry the parent's session_id. Delivering there would
+        // drain the root's queue into the subagent, so leave the message queued.
+        if (!sid || childContext || !["PostToolUse", "Stop"].includes(options.event ?? ""))
             return {};
-        if (["Stop", "SubagentStop"].includes(options.event ?? "") && env.HQ_STOP_DECISION_DELIVERABLE === "0")
+        if (options.event === "Stop" && env.HQ_STOP_DECISION_DELIVERABLE === "0")
             return {};
         const pointer = readPointer(root, sid);
         if (!pointer)

package/dist/lib/lanes/store.d.ts

@@ -87,5 +87,16 @@ export declare function createQuestion(hqRoot: string, init: Omit<QuestionRecord
 export declare function updateQuestion(hqRoot: string, questionId: string, expectedVersion: number, updater: (current: QuestionRecord) => QuestionRecord, deps?: StoreDeps): QuestionRecord;
 export declare function appendQuestionRouting(hqRoot: string, questionId: string, expectedVersion: number, entry: RoutingHistoryEntry, deps?: StoreDeps): QuestionRecord;
 export declare function listLaneIds(hqRoot: string, deps?: StoreDeps): string[];
+/** Shortest lane-id prefix a command expands to a full local lane id. */
+export declare const LANE_ID_PREFIX_MIN = 8;
+/**
+ * Expand a short lane-id prefix (at least `LANE_ID_PREFIX_MIN` ULID chars,
+ * no host suffix) to the one local lane id it starts. Returns `undefined`
+ * when the input is not such a prefix or matches no local lane, and throws
+ * `lane_id_ambiguous` listing every candidate when it matches more than one.
+ * Lane records, questions, run dirs and envelopes are always keyed by the
+ * full lane id; a prefix is only ever a lookup convenience.
+ */
+export declare function expandLocalLaneIdPrefix(hqRoot: string, input: string, deps?: StoreDeps): string | undefined;
 export declare function listQuestionIds(hqRoot: string, deps?: StoreDeps): string[];
 //# sourceMappingURL=store.d.ts.map

package/dist/lib/lanes/store.js

@@ -2072,6 +2072,26 @@ function listRecordIds(dir, label, deps) {
 export function listLaneIds(hqRoot, deps = defaultStoreDeps()) {
     return listRecordIds(path.join(lanesStoreRoot(hqRoot), LANE_RECORDS_DIR), "lane", deps);
 }
+/** Shortest lane-id prefix a command expands to a full local lane id. */
+export const LANE_ID_PREFIX_MIN = 8;
+/**
+ * Expand a short lane-id prefix (at least `LANE_ID_PREFIX_MIN` ULID chars,
+ * no host suffix) to the one local lane id it starts. Returns `undefined`
+ * when the input is not such a prefix or matches no local lane, and throws
+ * `lane_id_ambiguous` listing every candidate when it matches more than one.
+ * Lane records, questions, run dirs and envelopes are always keyed by the
+ * full lane id; a prefix is only ever a lookup convenience.
+ */
+export function expandLocalLaneIdPrefix(hqRoot, input, deps = defaultStoreDeps()) {
+    if (!new RegExp(`^[0-9A-HJKMNP-TV-Z]{${LANE_ID_PREFIX_MIN},26}$`, "i").test(input))
+        return undefined;
+    const prefix = input.toUpperCase();
+    const matches = listLaneIds(hqRoot, deps).filter((laneId) => laneId.toUpperCase().startsWith(prefix)).sort();
+    if (matches.length > 1) {
+        throw new LanesError("lane_id_ambiguous", `Lane id prefix ${input} matches ${matches.length} lanes: ${matches.join(", ")}. Pass the full lane id.`, { lane_id: input, matches });
+    }
+    return matches[0];
+}
 export function listQuestionIds(hqRoot, deps = defaultStoreDeps()) {
     return listRecordIds(path.join(lanesStoreRoot(hqRoot), QUESTION_RECORDS_DIR), "question", deps);
 }

package/dist/lib/lanes/watch.js

@@ -1,4 +1,4 @@
-import { listQuestionIds, readLane, readQuestion, } from "./store.js";
+import { expandLocalLaneIdPrefix, listQuestionIds, readLane, readQuestion, } from "./store.js";
 import { LaneNotFoundError, LanesError } from "./errors.js";
 import { providerSupportsSessionResume } from "./delivery.js";
 import { canResumeDoneKeepAliveLane, hasPendingKeepAliveWork, keepAliveNextCheckAtMs, LEAD_LANE_KEEP_ALIVE_MAX_RESUMES, } from "./keep-alive.js";
@@ -62,7 +62,9 @@ function canResumeKeepAliveLane(hqRoot, lane, nowMs = Date.now()) {
     return false;
 }
 export async function runLaneWatch(hqRoot, laneIds, deps = {}) {
-    const watchedIds = validateLaneIds(laneIds);
+    // Watch by full lane id: a short prefix expands only when it names exactly
+    // one local lane, and an ambiguous prefix is refused with its candidates.
+    const watchedIds = [...new Set(validateLaneIds(laneIds).map((laneId) => expandLocalLaneIdPrefix(hqRoot, laneId) ?? laneId))];
     const readLaneRecord = deps.readLane ?? readLane;
     const listQuestions = deps.listQuestionIds ?? listQuestionIds;
     const readQuestionRecord = deps.readQuestion ?? readQuestion;
@@ -130,7 +132,7 @@ export async function runLaneWatch(hqRoot, laneIds, deps = {}) {
             }
             records.push(record);
             if (previousStates.get(laneId) !== record.state) {
-                emit(`lane ${laneId}: state=${record.state}${isTerminalLaneState(record.state) ? " (terminal)" : ""}`);
+                emit(`lane ${record.lane_id}: state=${record.state}${isTerminalLaneState(record.state) ? " (terminal)" : ""}`);
                 previousStates.set(laneId, record.state);
             }
         }

package/dist/lib/vault-sync-switches.d.ts

@@ -0,0 +1,41 @@
+/**
+ * The HQ app's Settings > Sync switches on this computer (usage-only-pricing
+ * US-016), read from the desktop settings file (`menubar.json` in the HQ state
+ * directory):
+ *
+ * - `cloudPaused: true` turns sync off for every vault;
+ * - `personalSyncEnabled: false` turns the personal vault off;
+ * - `workspaceSyncEnabled: { "<slug>": false }` turns one company vault off.
+ *
+ * Dependency-free on purpose (node:fs/os/path only): the `hq daemon` planner
+ * reads it every reconcile.
+ *
+ * A missing file, a missing key, or a value of the wrong type means on, so
+ * CLI-only installs and agent boxes keep syncing. A file that exists but
+ * cannot be read or parsed also means on, and is reported through
+ * `unreadable` so callers can warn instead of turning sync back on silently.
+ */
+export interface VaultSyncSwitches {
+    /** "Turn off all cloud sync" is on. */
+    allOff: boolean;
+    /** The personal vault's switch is off. */
+    personalOff: boolean;
+    /** Lowercased slugs of company vaults whose switch is off. */
+    offCompanies: ReadonlySet<string>;
+    /**
+     * Set when the settings file exists but could not be read or parsed. Every
+     * switch then reads as on; callers should warn.
+     */
+    unreadable?: string;
+}
+export declare function vaultSyncSettingsPath(home?: string): string;
+/** Read every switch. Never throws. */
+export declare function readVaultSyncSwitches(home?: string): VaultSyncSwitches;
+/** The warning printed when the settings file is unreadable. */
+export declare function unreadableSwitchesWarning(reason: string): string;
+/**
+ * Environment for an hq-cloud sync runner so it skips off vaults
+ * (`HQ_SYNC_SKIP_COMPANIES`, `HQ_SYNC_SKIP_PERSONAL`). Empty when all are on.
+ */
+export declare function vaultSkipEnv(switches: VaultSyncSwitches): Record<string, string>;
+//# sourceMappingURL=vault-sync-switches.d.ts.map

package/dist/lib/vault-sync-switches.js

@@ -0,0 +1,86 @@
+/**
+ * The HQ app's Settings > Sync switches on this computer (usage-only-pricing
+ * US-016), read from the desktop settings file (`menubar.json` in the HQ state
+ * directory):
+ *
+ * - `cloudPaused: true` turns sync off for every vault;
+ * - `personalSyncEnabled: false` turns the personal vault off;
+ * - `workspaceSyncEnabled: { "<slug>": false }` turns one company vault off.
+ *
+ * Dependency-free on purpose (node:fs/os/path only): the `hq daemon` planner
+ * reads it every reconcile.
+ *
+ * A missing file, a missing key, or a value of the wrong type means on, so
+ * CLI-only installs and agent boxes keep syncing. A file that exists but
+ * cannot be read or parsed also means on, and is reported through
+ * `unreadable` so callers can warn instead of turning sync back on silently.
+ */
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+export function vaultSyncSettingsPath(home = os.homedir()) {
+    return path.join(home, ".hq", "menubar.json");
+}
+function allOn(unreadable) {
+    return {
+        allOff: false,
+        personalOff: false,
+        offCompanies: new Set(),
+        ...(unreadable ? { unreadable } : {}),
+    };
+}
+/** Read every switch. Never throws. */
+export function readVaultSyncSwitches(home = os.homedir()) {
+    const file = vaultSyncSettingsPath(home);
+    let text;
+    try {
+        text = fs.readFileSync(file, "utf8");
+    }
+    catch (err) {
+        if (err?.code === "ENOENT")
+            return allOn();
+        return allOn(`could not read ${file}`);
+    }
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        return allOn(`${file} is not valid JSON`);
+    }
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+        return allOn(`${file} is not a JSON object`);
+    }
+    const prefs = raw;
+    const offCompanies = new Set();
+    const map = prefs.workspaceSyncEnabled;
+    if (typeof map === "object" && map !== null && !Array.isArray(map)) {
+        for (const [slug, enabled] of Object.entries(map)) {
+            if (enabled === false && slug.trim())
+                offCompanies.add(slug.trim().toLowerCase());
+        }
+    }
+    return {
+        allOff: prefs.cloudPaused === true,
+        personalOff: prefs.personalSyncEnabled === false,
+        offCompanies,
+    };
+}
+/** The warning printed when the settings file is unreadable. */
+export function unreadableSwitchesWarning(reason) {
+    return `Warning: ${reason}, so HQ cannot tell which vaults have sync turned off on this computer. Every vault will sync. Fix or remove the file, or set the switches again in HQ Settings > Sync.`;
+}
+/**
+ * Environment for an hq-cloud sync runner so it skips off vaults
+ * (`HQ_SYNC_SKIP_COMPANIES`, `HQ_SYNC_SKIP_PERSONAL`). Empty when all are on.
+ */
+export function vaultSkipEnv(switches) {
+    const env = {};
+    if (switches.offCompanies.size > 0) {
+        env.HQ_SYNC_SKIP_COMPANIES = [...switches.offCompanies].sort().join(",");
+    }
+    if (switches.personalOff)
+        env.HQ_SYNC_SKIP_PERSONAL = "1";
+    return env;
+}
+//# sourceMappingURL=vault-sync-switches.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.149",
+  "version": "5.345.151",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {
@@ -52,7 +52,7 @@
     "@aws-sdk/client-iot-data-plane": "^3.1096.0",
     "@aws-sdk/client-s3": "^3.1049.0",
     "@aws-sdk/dsql-signer": "^3.1146.0",
-    "@indigoai-us/hq-cloud": "~6.18.88",
+    "@indigoai-us/hq-cloud": "~6.18.90",
     "@indigoai-us/hq-flags-client": "^0.1.2",
     "@modelcontextprotocol/sdk": "1.29.0",
     "@sentry/node": "^10.49.0",
@@ -114,11 +114,11 @@
     "*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}": "eslint --cache --no-error-on-unmatched-pattern"
   },
   "optionalDependencies": {
-    "@indigoai-us/hq-hook-win32-x64": "5.345.149",
-    "@indigoai-us/hq-hook-win32-arm64": "5.345.149",
-    "@indigoai-us/hq-hook-darwin-x64": "5.345.149",
-    "@indigoai-us/hq-hook-darwin-arm64": "5.345.149",
-    "@indigoai-us/hq-hook-linux-x64": "5.345.149",
-    "@indigoai-us/hq-hook-linux-arm64": "5.345.149"
+    "@indigoai-us/hq-hook-win32-x64": "5.345.151",
+    "@indigoai-us/hq-hook-win32-arm64": "5.345.151",
+    "@indigoai-us/hq-hook-darwin-x64": "5.345.151",
+    "@indigoai-us/hq-hook-darwin-arm64": "5.345.151",
+    "@indigoai-us/hq-hook-linux-x64": "5.345.151",
+    "@indigoai-us/hq-hook-linux-arm64": "5.345.151"
   }
 }