@indigoai-us/hq-cli 5.345.66 → 5.345.67

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [5.345.67] — 2026-10-09
+
+- Persist the Codex SessionStart model and effort for conduct lanes, with safe fallback defaults.
+
+- Native core families go back to their strict readers from 5.345.65. In 5.345.66, a process with no company context ignored the flag registry and ran every native family, so the registry kill switch could not turn a family off on most machines.
+
 ## [5.345.66] — 2026-10-09
 - Native core families now run by default when the machine has no flag snapshot (including first-run and offline cases); explicit false in a fresh or stale snapshot remains the kill switch. Only the seven approved core-native families use default-on readers. Delegate and worker-skills keep strict default-off readers pending parity follow-ups, and other fast-route families such as hook-batch also remain on the strict reader.
 - The Windows fast-route shell fallback now converts bundled script paths to Git Bash paths, so the family kill switch can reach its shell companion.

package/dist/commands/core-delegate-w1b.js

@@ -13,6 +13,7 @@ import { ACL_SOURCE_DISPLAY_LABELS } from "../utils/files-browse-acl.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
 import { resolveWindowsBash } from "../utils/windows-bash.js";
 import { createShellCompatibleJqInvoker } from "../utils/jq-windows-compat.js";
+const FLAG = "core-native-delegate";
 const ASSETS = {
     bundle: "core/scripts/hq-delegate-bundle.sh",
     grant: "core/scripts/hq-delegate-grant.sh",
@@ -1214,8 +1215,8 @@ export function registerCoreDelegateW1b(delegate, core) {
             const options = core.opts();
             const root = resolveLiveRoot({ hqRoot: options.hqRoot });
             const context = { cwd: root, root };
-            const { coreNativeDelegateEnabled } = await import("./core-native-family-flag.js");
-            if (!(await coreNativeDelegateEnabled())) {
+            const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
+            if (!resolveProcessFlagGate(FLAG, { fallback: false }, () => false)) {
                 const result = runBundledScript({ asset: ASSETS[name], args, cwd: root, hqRoot: root });
                 if (result.code !== 0)
                     process.exit(result.code);

package/dist/commands/core-delegate.js

@@ -1022,7 +1022,8 @@ export function registerCoreDelegateCommand(core, registerWave1b) {
             const context = rootMode === "cwd"
                 ? { cwd: process.cwd() }
                 : (() => { const root = resolveLiveRoot({ hqRoot: scope.hqRoot }); return { cwd: root, root }; })();
-            if (!(await (await import("./core-native-family-flag.js")).coreNativeDelegateEnabled())) {
+            const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
+            if (!resolveProcessFlagGate(CORE_NATIVE_DELEGATE_FLAG, { fallback: false }, () => false)) {
                 const result = runBundledScript({ asset: SCRIPT_ASSETS[name], args, cwd: context.cwd, hqRoot: context.root });
                 if (result.code !== 0)
                     process.exit(result.code);

package/dist/commands/core-job-native-utils.js

@@ -1,6 +1,7 @@
 import { resolveLiveRoot } from "../utils/hq-roots.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
+import { coreNativeJobsEnabled } from "./core-native-jobs-flag.js";
 /** Preserve raw argv (including the option terminator) through Commander. */
 export function rawJobArgumentsForCommand(command, fallback, raw = process.argv) {
     const names = [];
@@ -32,7 +33,7 @@ export function registerCoreJobLeaf(group, core, name, asset, summary, run, canU
         const hqRoot = canUseLiveRoot(argv)
             ? resolveLiveRoot({ hqRoot: leafRootOverride(argv, valueOptions, booleanOptions) ?? groupHqRoot })
             : groupHqRoot ?? "";
-        if (!await (await import("./core-native-jobs-flag.js")).coreNativeJobsEnabled()) {
+        if (!await coreNativeJobsEnabled()) {
             const result = runBundledScript({ asset, args: argv, cwd: process.cwd(), hqRoot: hqRoot || undefined });
             if (result.code !== 0)
                 process.exit(result.code);

package/dist/commands/core-job-probe-native.js

@@ -7,6 +7,7 @@ import { serializeJqJson } from "../lib/core-utils/jq-json-serializer.js";
 import { resolveLiveRoot } from "../utils/hq-roots.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
+import { coreNativeJobsEnabled } from "./core-native-jobs-flag.js";
 import { resolveWindowsExecutable } from "../lib/bot/runtime/windows.js";
 import { planResolvedCommandSpawn } from "../utils/windows-spawn.js";
 export const JOB_PROBE_ASSET = "core/scripts/hq-job-probe.sh";
@@ -592,7 +593,7 @@ export function registerCoreJobProbeCommand(job) {
         const root = !forwarded.help && (!forwarded.hasRoot || Boolean(forwarded.root))
             ? resolveLiveRoot({ hqRoot: forwarded.hasRoot ? forwarded.root : core.opts().hqRoot })
             : undefined;
-        if (!await (await import("./core-native-jobs-flag.js")).coreNativeJobsEnabled()) {
+        if (!await coreNativeJobsEnabled()) {
             const r = runBundledScript({ asset: JOB_PROBE_ASSET, args: argv, cwd: process.cwd(), ...(root ? { hqRoot: root } : {}) });
             if (r.code)
                 process.exit(r.code);

package/dist/commands/core-job-run-native.js

@@ -10,6 +10,7 @@ import { serializeJqJson } from "../lib/core-utils/jq-json-serializer.js";
 import { resolveLiveRoot, resolveBundledAsset } from "../utils/hq-roots.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
+import { coreNativeJobsEnabled } from "./core-native-jobs-flag.js";
 import { releaseChildWrapperPackageUseLeaseAfterStart } from "../utils/child-wrapper-lease.js";
 import { materializeCoreJobPostExitHelpers } from "./core-job-post-exit-assets.js";
 const RUN_ASSET = "core/scripts/hq-job-run.sh";
@@ -1215,7 +1216,7 @@ export function registerCoreJobRunCommand(job) {
         .action(async (args, _options, current) => {
         const argv = rawArgumentsForCommand(current, args);
         const root = current.parent?.parent?.opts().hqRoot ?? process.env.HQ_ROOT;
-        if (!await (await import("./core-native-jobs-flag.js")).coreNativeJobsEnabled()) {
+        if (!await coreNativeJobsEnabled()) {
             const resolvedRoot = resolveLiveRoot({ hqRoot: root });
             const result = runBundledScript({ asset: RUN_ASSET, args: argv, cwd: process.cwd(), hqRoot: resolvedRoot });
             if (result.code !== 0)

package/dist/commands/core-native-handoff-flag.d.ts

@@ -1,4 +1,4 @@
-/** Default-on kill switch for the native Wave 2 worktree/resume helpers. */
+/** Default-off rollout gate for the native Wave 2 worktree/resume helpers. */
 export declare const CORE_NATIVE_HANDOFF_FLAG = "core-native-handoff";
 export declare function coreNativeHandoffEnabled(): Promise<boolean>;
 //# sourceMappingURL=core-native-handoff-flag.d.ts.map

package/dist/commands/core-native-handoff-flag.js

@@ -1,7 +1,7 @@
-/** Default-on kill switch for the native Wave 2 worktree/resume helpers. */
-import { coreNativeFamilyEnabled } from "./core-native-family-flag.js";
+/** Default-off rollout gate for the native Wave 2 worktree/resume helpers. */
 export const CORE_NATIVE_HANDOFF_FLAG = "core-native-handoff";
 export async function coreNativeHandoffEnabled() {
-    return coreNativeFamilyEnabled(CORE_NATIVE_HANDOFF_FLAG);
+    const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
+    return resolveProcessFlagGate(CORE_NATIVE_HANDOFF_FLAG, { fallback: false }, () => false);
 }
 //# sourceMappingURL=core-native-handoff-flag.js.map

package/dist/commands/core-native-hook-helpers-flag.d.ts

@@ -1,4 +1,4 @@
-/** Default-on kill switch for Wave 8 hook-time helper commands. */
+/** Default-off rollout gate for Wave 8 hook-time helper commands. */
 export declare const CORE_NATIVE_HOOK_HELPERS_FLAG = "core-native-hook-helpers";
 export declare function coreNativeHookHelpersEnabled(): Promise<boolean>;
 //# sourceMappingURL=core-native-hook-helpers-flag.d.ts.map

package/dist/commands/core-native-hook-helpers-flag.js

@@ -1,7 +1,7 @@
-/** Default-on kill switch for Wave 8 hook-time helper commands. */
-import { coreNativeFamilyEnabled } from "./core-native-family-flag.js";
+/** Default-off rollout gate for Wave 8 hook-time helper commands. */
 export const CORE_NATIVE_HOOK_HELPERS_FLAG = "core-native-hook-helpers";
 export async function coreNativeHookHelpersEnabled() {
-    return coreNativeFamilyEnabled(CORE_NATIVE_HOOK_HELPERS_FLAG);
+    const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
+    return resolveProcessFlagGate(CORE_NATIVE_HOOK_HELPERS_FLAG, { fallback: false }, () => false);
 }
 //# sourceMappingURL=core-native-hook-helpers-flag.js.map

package/dist/commands/core-native-jobs-flag.d.ts

@@ -1,4 +1,4 @@
-/** Default-on kill switch for the native scheduled-jobs helpers. */
+/** Default-off rollout gate for the native scheduled-jobs helpers. */
 export declare const CORE_NATIVE_JOBS_FLAG = "core-native-jobs";
 export declare function coreNativeJobsEnabled(): Promise<boolean>;
 //# sourceMappingURL=core-native-jobs-flag.d.ts.map

package/dist/commands/core-native-jobs-flag.js

@@ -1,7 +1,7 @@
-/** Default-on kill switch for the native scheduled-jobs helpers. */
-import { coreNativeFamilyEnabled } from "./core-native-family-flag.js";
+/** Default-off rollout gate for the native scheduled-jobs helpers. */
 export const CORE_NATIVE_JOBS_FLAG = "core-native-jobs";
 export async function coreNativeJobsEnabled() {
-    return coreNativeFamilyEnabled(CORE_NATIVE_JOBS_FLAG);
+    const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
+    return resolveProcessFlagGate(CORE_NATIVE_JOBS_FLAG, { fallback: false }, () => false);
 }
 //# sourceMappingURL=core-native-jobs-flag.js.map

package/dist/commands/core-native-policy-flag.d.ts

@@ -1,3 +1,9 @@
+/**
+ * Default-off rollout gate shared by the native knowledge and policy commands.
+ *
+ * The flag reader is loaded only after command selection. Its process gate reads
+ * the in-memory hq-flags snapshot synchronously and falls back to false.
+ */
 export declare const CORE_NATIVE_POLICY_FLAG = "core-native-policy";
 export declare function coreNativePolicyEnabled(): Promise<boolean>;
 //# sourceMappingURL=core-native-policy-flag.d.ts.map

package/dist/commands/core-native-policy-flag.js

@@ -1,12 +1,12 @@
 /**
- * Default-on kill switch shared by the native knowledge and policy commands.
+ * Default-off rollout gate shared by the native knowledge and policy commands.
  *
  * The flag reader is loaded only after command selection. Its process gate reads
- * the in-memory hq-flags snapshot synchronously and defaults on when unavailable.
+ * the in-memory hq-flags snapshot synchronously and falls back to false.
  */
-import { coreNativeFamilyEnabled } from './core-native-family-flag.js';
 export const CORE_NATIVE_POLICY_FLAG = 'core-native-policy';
 export async function coreNativePolicyEnabled() {
-    return coreNativeFamilyEnabled(CORE_NATIVE_POLICY_FLAG);
+    const { resolveProcessFlagGate } = await import('../lib/flag-registry.js');
+    return resolveProcessFlagGate(CORE_NATIVE_POLICY_FLAG, { fallback: false }, () => false);
 }
 //# sourceMappingURL=core-native-policy-flag.js.map

package/dist/commands/core-native-session-flag.d.ts

@@ -1,4 +1,4 @@
-/** Default-on kill switch for native session and Stop-hook plumbing. */
+/** Default-off rollout gate for native session and Stop-hook plumbing. */
 export declare const CORE_NATIVE_SESSION_FLAG = "core-native-session";
 export declare function coreNativeSessionEnabled(): Promise<boolean>;
 //# sourceMappingURL=core-native-session-flag.d.ts.map

package/dist/commands/core-native-session-flag.js

@@ -1,7 +1,7 @@
-/** Default-on kill switch for native session and Stop-hook plumbing. */
-import { coreNativeFamilyEnabled } from "./core-native-family-flag.js";
+/** Default-off rollout gate for native session and Stop-hook plumbing. */
 export const CORE_NATIVE_SESSION_FLAG = "core-native-session";
 export async function coreNativeSessionEnabled() {
-    return coreNativeFamilyEnabled(CORE_NATIVE_SESSION_FLAG);
+    const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
+    return resolveProcessFlagGate(CORE_NATIVE_SESSION_FLAG, { fallback: false }, () => false);
 }
 //# sourceMappingURL=core-native-session-flag.js.map

package/dist/commands/core-native-utilities-flag.d.ts

@@ -1,4 +1,4 @@
-/** Default-on kill switch for native operator utility commands. */
+/** Default-off rollout gate for native operator utility commands. */
 export declare const CORE_NATIVE_UTILITIES_FLAG = "core-native-utilities";
 export declare function coreNativeUtilitiesEnabled(): Promise<boolean>;
 //# sourceMappingURL=core-native-utilities-flag.d.ts.map

package/dist/commands/core-native-utilities-flag.js

@@ -1,7 +1,7 @@
-/** Default-on kill switch for native operator utility commands. */
-import { coreNativeFamilyEnabled } from "./core-native-family-flag.js";
+/** Default-off rollout gate for native operator utility commands. */
 export const CORE_NATIVE_UTILITIES_FLAG = "core-native-utilities";
 export async function coreNativeUtilitiesEnabled() {
-    return coreNativeFamilyEnabled(CORE_NATIVE_UTILITIES_FLAG);
+    const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
+    return resolveProcessFlagGate(CORE_NATIVE_UTILITIES_FLAG, { fallback: false }, () => false);
 }
 //# sourceMappingURL=core-native-utilities-flag.js.map

package/dist/commands/core-native-utilities.js

@@ -1,4 +1,5 @@
 import * as path from "node:path";
+import { coreNativeUtilitiesEnabled } from "./core-native-utilities-flag.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
 import { runBundledScript } from "../utils/run-bundled-script.js";
 import { packageRoot } from "../utils/hq-roots.js";
@@ -15,7 +16,7 @@ export function registerNativeUtility(core, definition) {
         const groupRoot = core.opts().hqRoot;
         const operands = cmd.args.length > 0 ? cmd.args : args;
         const root = definition.resolveRoot(cwd, groupRoot);
-        const nativeEnabled = await (await import("./core-native-utilities-flag.js")).coreNativeUtilitiesEnabled();
+        const nativeEnabled = await coreNativeUtilitiesEnabled();
         if (process.env.HQ_CM_W5_EXPECT_NATIVE === "1" && !nativeEnabled) {
             throw new Error(`core-native-utilities dispatch gate is disabled for ${definition.name}`);
         }

package/dist/commands/core-ontology-native.js

@@ -9,6 +9,7 @@ import { resolveBundledAsset } from "../utils/hq-roots.js";
 import { planResolvedCommandSpawn } from "../utils/windows-spawn.js";
 import { describeCoreCommand } from "./core-command-catalog.js";
 import { runKnowledgePrefs } from "./core-knowledge-prefs.js";
+const FLAG = "core-native-ontology";
 const ASSET = "core/scripts/";
 const SIGNAL_TYPES = ["decision", "commitment", "risk", "question", "action_item", "key_point", "participant_contribution", "summary"];
 const CANDIDATE_SIGNAL_TYPES = ["action_item", "commitment", "decision", "risk", "question", "key_point", "participant_contribution", "summary"];
@@ -1169,7 +1170,8 @@ export function registerCoreOntologyNativeCommands(ontology, rootFor) {
             const forwarded = commandIndex >= 0 ? argv.slice(commandIndex + 1)
                 : commandContext.args.length > 0 ? commandContext.args : args;
             const liveRoot = entry.root === "live" ? rootFor() : process.cwd();
-            if (!(await (await import("./core-native-family-flag.js")).coreNativeOntologyEnabled())) {
+            const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
+            if (!resolveProcessFlagGate(FLAG, { fallback: false }, () => false)) {
                 const result = runBundledScript({
                     asset: `${ASSET}${entry.asset}`,
                     args: forwarded,

package/dist/commands/lanes-session-start.js

@@ -6,6 +6,74 @@ import { randomUUID } from "node:crypto";
 import { resolveLanesHqRoot } from "../lib/lanes/hq-root.js";
 import { readLanesRegistryFlagFailOpen } from "../lib/lanes/registry-flag.js";
 import { LANE_CONDUCT_SESSION_START_FLAG } from "../lib/lanes/flag-keys.js";
+const CODEX_DEFAULT_KEYS = ["conduct_engine", "conduct_child_model", "conduct_child_effort", "conduct_default_source"];
+function readSessionMetaValue(text, key) {
+    const line = text.split(/\r?\n/).find((entry) => new RegExp(`^\\s*${key}:`).test(entry));
+    if (!line)
+        return "";
+    const value = line.replace(/^\s*[^:]+:\s*/, "");
+    return value.replace(/^"|"$/g, "");
+}
+function writeCodexSessionDefaults(root, env, payload, debug) {
+    if (env.HQ_HARNESS !== "codex")
+        return;
+    const sessionId = payload.session_id ?? payload.sessionId;
+    if (!sessionId || !/^[A-Za-z0-9._-]+$/.test(sessionId) || sessionId === "." || sessionId === "..")
+        return;
+    let model = typeof payload.model === "string" ? payload.model : "";
+    if (/\s/.test(model))
+        model = "";
+    let effort = payload.reasoning_effort ?? payload.reasoningEffort ?? payload.effort ?? "";
+    if (typeof effort !== "string" || !/^[a-z]+$/.test(effort))
+        effort = "";
+    try {
+        const sessionDir = path.join(root, "workspace", "sessions", sessionId);
+        const metaPath = path.join(sessionDir, "meta.yaml");
+        fs.mkdirSync(sessionDir, { recursive: true });
+        let text = "";
+        try {
+            text = fs.readFileSync(metaPath, "utf8");
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        if (CODEX_DEFAULT_KEYS.some((key) => readSessionMetaValue(text, key) !== ""))
+            return;
+        if (!text) {
+            text = `session_id: ${sessionId}\nstarted_at: "${new Date().toISOString().replace(/\.\d{3}Z$/, "Z")}"\nsenior: user\n`;
+        }
+        const defaults = {
+            conduct_engine: "codex",
+            conduct_child_model: model || undefined,
+            conduct_child_effort: effort || undefined,
+            conduct_default_source: model ? "codex-session" : "codex-fallback",
+        };
+        for (const key of CODEX_DEFAULT_KEYS) {
+            const value = defaults[key];
+            if (value === undefined)
+                continue;
+            const matcher = new RegExp(`^\\s*${key}:.*(?:\\r?\\n|$)`, "m");
+            const line = `${key}: ${value}\n`;
+            text = matcher.test(text) ? text.replace(matcher, line) : `${text}${text.endsWith("\n") || !text ? "" : "\n"}${line}`;
+        }
+        const tempPath = path.join(sessionDir, `.meta-${process.pid}-${randomUUID()}.tmp`);
+        try {
+            fs.writeFileSync(tempPath, text, { mode: 0o600 });
+            fs.renameSync(tempPath, metaPath);
+        }
+        finally {
+            try {
+                fs.rmSync(tempPath, { force: true });
+            }
+            catch { /* best-effort temp cleanup */ }
+        }
+    }
+    catch (error) {
+        const kind = error instanceof Error ? error.name : "Error";
+        debug(`hq lanes session-start: Codex metadata bootstrap failed (${kind})`);
+    }
+}
 function enabledFromSettings(root) {
     const personal = path.join(root, "personal", "settings", "orchestrator.yaml");
     const settings = fs.existsSync(personal) ? personal : path.join(root, "core", "settings", "orchestrator.yaml");
@@ -155,11 +223,10 @@ export async function runLaneSessionStart(options = {}) {
             chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
         const input = Buffer.concat(chunks).toString("utf8");
         let source = "startup";
-        let payloadSessionId;
+        let payload = {};
         try {
-            const payload = JSON.parse(input);
+            payload = JSON.parse(input);
             source = payload.source || "startup";
-            payloadSessionId = payload.session_id;
         }
         catch { /* malformed hook input uses startup default */ }
         if (source !== "startup")
@@ -179,7 +246,7 @@ export async function runLaneSessionStart(options = {}) {
         if (!flagEnabled)
             return;
         (options.startSweep ?? ((r, e) => startSessionStartOrphanSweep(r, e, spawn)))(root, env);
-        if (sessionWasDisabled(root, env, payloadSessionId))
+        if (sessionWasDisabled(root, env, payload.session_id ?? payload.sessionId))
             return;
         const autoConduct = env.HQ_AUTO_CONDUCT ?? "";
         const forceOn = /^(1|true|on|yes)$/i.test(autoConduct);
@@ -192,6 +259,7 @@ export async function runLaneSessionStart(options = {}) {
             enabled = true;
         if (!enabled)
             return;
+        writeCodexSessionDefaults(root, env, payload, debug);
         const core = path.join(root, ".claude", "skills", "conduct", "conductor-core.md");
         if (!fs.existsSync(core))
             return;

package/dist/fast-core.js

@@ -9,7 +9,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
-import { isDefaultOnFastFamily, parseFastCore } from "./fast-scaffold.js";
+import { parseFastCore } from "./fast-scaffold.js";
 const FAST_ROUTE_PROFILE_TOKEN = "hq-fast-route";
 function wantsFastRouteProfile(env) {
     return env.NODE_DEBUG === FAST_ROUTE_PROFILE_TOKEN;
@@ -50,16 +50,7 @@ export async function runFastCore(argv, parsed = parseFastCore(argv)) {
     let familyEnabled = true;
     if (entry.kind === "native" && entry.familyFlagKey) {
         const envOverride = localBooleanFlagOverride(entry.familyFlagKey, process.env);
-        if (envOverride !== null) {
-            familyEnabled = envOverride;
-        }
-        else {
-            const { fastFlagEnabled, fastFlagEnabledDefaultOn } = await import("./native-fast-route.js");
-            const readFamilyFlag = isDefaultOnFastFamily(entry.familyFlagKey)
-                ? fastFlagEnabledDefaultOn
-                : fastFlagEnabled;
-            familyEnabled = await readFamilyFlag(entry.familyFlagKey, process.env, { numericEnvironmentOverride: false });
-        }
+        familyEnabled = envOverride ?? await (await import("./native-fast-route.js")).fastFlagEnabled(entry.familyFlagKey, process.env, { numericEnvironmentOverride: false });
     }
     if (entry.kind === "native" && entry.fallbackToCommandGraph && !familyEnabled) {
         const { runCli } = await import("./main.js");
@@ -173,7 +164,6 @@ export async function runFastCore(argv, parsed = parseFastCore(argv)) {
         args: parsed.args,
         cwd,
         ...(injectRoot ? { hqRoot } : {}),
-        msysScriptPath: process.platform === "win32",
         ...(Object.keys(childEnv).length ? { env: childEnv } : {}),
     });
     // Propagate verbatim: these scripts use their exit code as their interface.

package/dist/fast-scaffold.d.ts

@@ -49,9 +49,6 @@ export type FastScaffoldScript = {
     /** Whether the bundled fast-route module closure needs Node's network timeout patch. */
     requiresNodeNetworkCompatibility?: boolean;
 };
-/** Family kill switches whose owner-approved default is enabled. */
-export declare const CORE_NATIVE_DEFAULT_ON_FAMILY_FLAGS: readonly ["core-native-session", "core-native-hook-helpers", "core-native-policy", "core-native-utilities", "core-native-jobs", "core-native-ontology", "core-native-handoff"];
-export declare function isDefaultOnFastFamily(flagKey: string): boolean;
 /** The relocated scripts that qualify for the entrypoint fast path. */
 export declare const FAST_SCAFFOLD_SCRIPTS: readonly FastScaffoldScript[];
 export type ParsedFastCore = {

package/dist/fast-scaffold.js

@@ -9,20 +9,6 @@
  * on every turn's Stop. The entrypoint routes eligible commands before loading
  * the graph, and this module holds the parser + table that routing needs.
  */
-/** Family kill switches whose owner-approved default is enabled. */
-export const CORE_NATIVE_DEFAULT_ON_FAMILY_FLAGS = [
-    "core-native-session",
-    "core-native-hook-helpers",
-    "core-native-policy",
-    "core-native-utilities",
-    "core-native-jobs",
-    "core-native-ontology",
-    "core-native-handoff",
-];
-const defaultOnFamilyFlags = new Set(CORE_NATIVE_DEFAULT_ON_FAMILY_FLAGS);
-export function isDefaultOnFastFamily(flagKey) {
-    return defaultOnFamilyFlags.has(flagKey);
-}
 /** The relocated scripts that qualify for the entrypoint fast path. */
 export const FAST_SCAFFOLD_SCRIPTS = [
     {

package/dist/lib/flag-registry.d.ts

@@ -67,9 +67,7 @@ export declare function resolveFlagGate(reader: FlagReader | null | undefined, f
 /** Resolve one explicit company's flag without relying on process-wide binding. */
 export declare function resolveCompanyFlagGate(companyUid: string, idToken: string, flagKey: string, lookup: FlagLookupOptions, legacyFallback: () => boolean, dependencies?: CompanyFlagGateDependencies): Promise<boolean>;
 /** Resolve a process gate against the shared snapshot reader, when configured. */
-export declare function resolveProcessFlagGate(flagKey: string, lookup: FlagLookupOptions, legacyFallback: () => boolean, companyUid?: string, options?: {
-    acceptStaleSnapshot?: boolean;
-}): boolean;
+export declare function resolveProcessFlagGate(flagKey: string, lookup: FlagLookupOptions, legacyFallback: () => boolean, companyUid?: string): boolean;
 /**
  * The registry snapshot held by this process, or null when none has arrived
  * (no endpoint configured, offline, or still fetching). Callers that must

package/dist/lib/flag-registry.js

@@ -348,7 +348,7 @@ export async function resolveCompanyFlagGate(companyUid, idToken, flagKey, looku
     }
 }
 /** Resolve a process gate against the shared snapshot reader, when configured. */
-export function resolveProcessFlagGate(flagKey, lookup, legacyFallback, companyUid, options = {}) {
+export function resolveProcessFlagGate(flagKey, lookup, legacyFallback, companyUid) {
     const targetCompanyUid = companyUid ?? (processReader
         ? refreshCompanyUid
         : resolveProcessFlagCompanyContext().companyUid);
@@ -360,9 +360,7 @@ export function resolveProcessFlagGate(flagKey, lookup, legacyFallback, companyU
     // Use the last validated, fresh company snapshot in that window, and when
     // the process reader was initialized for a different company scope.
     if (targetCompanyUid) {
-        const cached = options.acceptStaleSnapshot
-            ? readFlagSnapshotFile(targetCompanyUid, { maxAgeMs: Number.POSITIVE_INFINITY })
-            : readFlagSnapshotFile(targetCompanyUid);
+        const cached = readFlagSnapshotFile(targetCompanyUid);
         if (cached) {
             const snapshot = { version: 0, flags: cached.flags };
             const reader = createProcessSnapshotReader([targetCompanyUid], () => snapshot);

package/dist/native-fast-route.d.ts

@@ -1,6 +1,6 @@
-/** Routes native entrypoints through their default-on kill switch. */
+/** Default-off flag check for native entrypoint routes. */
 export declare function nativeFastRouteEnabled(argv: readonly string[], env?: NodeJS.ProcessEnv): Promise<boolean>;
-/** Reads the fast-route kill switch; absent scope or snapshot keeps the route enabled. */
+/** Reads a default-off fast-route gate from its local override or fresh snapshot. */
 export declare function fastFlagEnabled(flagKey: string, env?: NodeJS.ProcessEnv, options?: {
     numericEnvironmentOverride?: boolean;
 }): Promise<boolean>;

package/dist/native-fast-route.js

@@ -1,13 +1,13 @@
-/** Routes native entrypoints through their default-on kill switch. */
+/** Default-off flag check for native entrypoint routes. */
 import { localOverrideEnvVar, readLocalOverride } from "@indigoai-us/hq-flags-client";
 import { parseFastCore } from "./fast-scaffold.js";
 export async function nativeFastRouteEnabled(argv, env = process.env) {
     const parsed = parseFastCore(argv);
     if (!parsed || parsed.entry.kind !== "native")
         return false;
-    return fastFlagEnabledDefaultOn(parsed.entry.flagKey, env);
+    return fastFlagEnabled(parsed.entry.flagKey, env);
 }
-/** Reads the fast-route kill switch; absent scope or snapshot keeps the route enabled. */
+/** Reads a default-off fast-route gate from its local override or fresh snapshot. */
 export async function fastFlagEnabled(flagKey, env = process.env, options = {}) {
     const override = nativeRouteOverride(flagKey, env, options.numericEnvironmentOverride !== false);
     if (override !== null)
@@ -41,7 +41,7 @@ export async function fastFlagEnabledDefaultOn(flagKey, env = process.env, optio
         const { companyUid } = resolveProcessFlagCompanyContext(env);
         if (!companyUid)
             return true;
-        return readFlagSnapshotFile(companyUid, { env, maxAgeMs: Number.POSITIVE_INFINITY })?.flags[flagKey] !== false;
+        return readFlagSnapshotFile(companyUid, { env })?.flags[flagKey] !== false;
     }
     catch {
         // This flag is a kill switch: missing scope or cache data must leave the feature enabled.

package/dist/utils/resident-package-preload.js

@@ -42,7 +42,7 @@ export const RESIDENT_PACKAGE_MODULES = {
     "bot-logs-follow": [],
     mcp: ["../lib/mcp/tools.js", "../lib/mcp/prompts.js", "../lib/anywhere-person-setting.js", "../utils/cognito-session.js", "@indigoai-us/hq-cloud", "../sentry.js", "../lib/doctor/client-health-reason-codes-flag.js", "@indigoai-us/hq-flags-client"],
     childWrapper: ["../main.js", "../lib/service-manager/startup-migration.js"],
-    coreJobRun: ["../lib/flag-registry.js", "../commands/core-native-jobs-flag.js"],
+    coreJobRun: ["../lib/flag-registry.js"],
     "daemon-call": ["../lib/daemon/protocol.js"],
     daemon: [
         "../sentry.js",
@@ -204,7 +204,6 @@ const LOADERS = {
     ],
     coreJobRun: [
         () => import("../lib/flag-registry.js"),
-        () => import("../commands/core-native-jobs-flag.js"),
     ],
     "daemon-call": [
         () => import("../lib/daemon/protocol.js"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.66",
+  "version": "5.345.67",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {

package/dist/commands/core-native-family-flag.d.ts

@@ -1,7 +0,0 @@
-/** Shared fail-safe readers for shipped native core families. */
-export declare function coreNativeFamilyEnabled(flagKey: string): Promise<boolean>;
-export declare const CORE_NATIVE_DELEGATE_FLAG = "core-native-delegate";
-export declare const CORE_NATIVE_ONTOLOGY_FLAG = "core-native-ontology";
-export declare function coreNativeDelegateEnabled(): Promise<boolean>;
-export declare function coreNativeOntologyEnabled(): Promise<boolean>;
-//# sourceMappingURL=core-native-family-flag.d.ts.map

package/dist/commands/core-native-family-flag.js

@@ -1,16 +0,0 @@
-/** Shared fail-safe readers for shipped native core families. */
-export async function coreNativeFamilyEnabled(flagKey) {
-    const { resolveProcessFlagGate } = await import("../lib/flag-registry.js");
-    return resolveProcessFlagGate(flagKey, { fallback: true }, () => true, undefined, {
-        acceptStaleSnapshot: true,
-    });
-}
-export const CORE_NATIVE_DELEGATE_FLAG = "core-native-delegate";
-export const CORE_NATIVE_ONTOLOGY_FLAG = "core-native-ontology";
-export function coreNativeDelegateEnabled() {
-    return import("../lib/flag-registry.js").then(({ resolveProcessFlagGate }) => resolveProcessFlagGate(CORE_NATIVE_DELEGATE_FLAG, { fallback: false }, () => false));
-}
-export function coreNativeOntologyEnabled() {
-    return coreNativeFamilyEnabled(CORE_NATIVE_ONTOLOGY_FLAG);
-}
-//# sourceMappingURL=core-native-family-flag.js.map