@indigoai-us/hq-cli 5.345.65 → 5.345.67

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## [Unreleased]
 
+## [5.345.67] — 2026-10-09
+
+- Persist the Codex SessionStart model and effort for conduct lanes, with safe fallback defaults.
+
+- Native core families go back to their strict readers from 5.345.65. In 5.345.66, a process with no company context ignored the flag registry and ran every native family, so the registry kill switch could not turn a family off on most machines.
+
+## [5.345.66] — 2026-10-09
+- Native core families now run by default when the machine has no flag snapshot (including first-run and offline cases); explicit false in a fresh or stale snapshot remains the kill switch. Only the seven approved core-native families use default-on readers. Delegate and worker-skills keep strict default-off readers pending parity follow-ups, and other fast-route families such as hook-batch also remain on the strict reader.
+- The Windows fast-route shell fallback now converts bundled script paths to Git Bash paths, so the family kill switch can reach its shell companion.
+
 ## [5.345.65] — 2026-10-09
 - Reject unsafe lane and child ids before they reach inbox or state paths.
 

package/dist/commands/lanes-session-start.js

@@ -6,6 +6,74 @@ import { randomUUID } from "node:crypto";
 import { resolveLanesHqRoot } from "../lib/lanes/hq-root.js";
 import { readLanesRegistryFlagFailOpen } from "../lib/lanes/registry-flag.js";
 import { LANE_CONDUCT_SESSION_START_FLAG } from "../lib/lanes/flag-keys.js";
+const CODEX_DEFAULT_KEYS = ["conduct_engine", "conduct_child_model", "conduct_child_effort", "conduct_default_source"];
+function readSessionMetaValue(text, key) {
+    const line = text.split(/\r?\n/).find((entry) => new RegExp(`^\\s*${key}:`).test(entry));
+    if (!line)
+        return "";
+    const value = line.replace(/^\s*[^:]+:\s*/, "");
+    return value.replace(/^"|"$/g, "");
+}
+function writeCodexSessionDefaults(root, env, payload, debug) {
+    if (env.HQ_HARNESS !== "codex")
+        return;
+    const sessionId = payload.session_id ?? payload.sessionId;
+    if (!sessionId || !/^[A-Za-z0-9._-]+$/.test(sessionId) || sessionId === "." || sessionId === "..")
+        return;
+    let model = typeof payload.model === "string" ? payload.model : "";
+    if (/\s/.test(model))
+        model = "";
+    let effort = payload.reasoning_effort ?? payload.reasoningEffort ?? payload.effort ?? "";
+    if (typeof effort !== "string" || !/^[a-z]+$/.test(effort))
+        effort = "";
+    try {
+        const sessionDir = path.join(root, "workspace", "sessions", sessionId);
+        const metaPath = path.join(sessionDir, "meta.yaml");
+        fs.mkdirSync(sessionDir, { recursive: true });
+        let text = "";
+        try {
+            text = fs.readFileSync(metaPath, "utf8");
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        if (CODEX_DEFAULT_KEYS.some((key) => readSessionMetaValue(text, key) !== ""))
+            return;
+        if (!text) {
+            text = `session_id: ${sessionId}\nstarted_at: "${new Date().toISOString().replace(/\.\d{3}Z$/, "Z")}"\nsenior: user\n`;
+        }
+        const defaults = {
+            conduct_engine: "codex",
+            conduct_child_model: model || undefined,
+            conduct_child_effort: effort || undefined,
+            conduct_default_source: model ? "codex-session" : "codex-fallback",
+        };
+        for (const key of CODEX_DEFAULT_KEYS) {
+            const value = defaults[key];
+            if (value === undefined)
+                continue;
+            const matcher = new RegExp(`^\\s*${key}:.*(?:\\r?\\n|$)`, "m");
+            const line = `${key}: ${value}\n`;
+            text = matcher.test(text) ? text.replace(matcher, line) : `${text}${text.endsWith("\n") || !text ? "" : "\n"}${line}`;
+        }
+        const tempPath = path.join(sessionDir, `.meta-${process.pid}-${randomUUID()}.tmp`);
+        try {
+            fs.writeFileSync(tempPath, text, { mode: 0o600 });
+            fs.renameSync(tempPath, metaPath);
+        }
+        finally {
+            try {
+                fs.rmSync(tempPath, { force: true });
+            }
+            catch { /* best-effort temp cleanup */ }
+        }
+    }
+    catch (error) {
+        const kind = error instanceof Error ? error.name : "Error";
+        debug(`hq lanes session-start: Codex metadata bootstrap failed (${kind})`);
+    }
+}
 function enabledFromSettings(root) {
     const personal = path.join(root, "personal", "settings", "orchestrator.yaml");
     const settings = fs.existsSync(personal) ? personal : path.join(root, "core", "settings", "orchestrator.yaml");
@@ -155,11 +223,10 @@ export async function runLaneSessionStart(options = {}) {
             chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
         const input = Buffer.concat(chunks).toString("utf8");
         let source = "startup";
-        let payloadSessionId;
+        let payload = {};
         try {
-            const payload = JSON.parse(input);
+            payload = JSON.parse(input);
             source = payload.source || "startup";
-            payloadSessionId = payload.session_id;
         }
         catch { /* malformed hook input uses startup default */ }
         if (source !== "startup")
@@ -179,7 +246,7 @@ export async function runLaneSessionStart(options = {}) {
         if (!flagEnabled)
             return;
         (options.startSweep ?? ((r, e) => startSessionStartOrphanSweep(r, e, spawn)))(root, env);
-        if (sessionWasDisabled(root, env, payloadSessionId))
+        if (sessionWasDisabled(root, env, payload.session_id ?? payload.sessionId))
             return;
         const autoConduct = env.HQ_AUTO_CONDUCT ?? "";
         const forceOn = /^(1|true|on|yes)$/i.test(autoConduct);
@@ -192,6 +259,7 @@ export async function runLaneSessionStart(options = {}) {
             enabled = true;
         if (!enabled)
             return;
+        writeCodexSessionDefaults(root, env, payload, debug);
         const core = path.join(root, ".claude", "skills", "conduct", "conductor-core.md");
         if (!fs.existsSync(core))
             return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.65",
+  "version": "5.345.67",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {