@indigoai-us/hq-cli 5.345.9 → 5.345.10

package/CHANGELOG.md

@@ -2,6 +2,9 @@
 
 ## [Unreleased]
 
+## [5.345.10] — 2026-10-05
+- Keep a healthy recorded Claude account for lane messages when every worker-profile-pinned account is unavailable.
+
 ## [5.345.9] — 2026-10-05
 - Lane messages to exited sessions now queue durably when provider admission is busy, so delivery succeeds and reconcile can resume them later.
 - Keep the current sync runner until an hq-cloud version matching the configured pin is available.

package/dist/commands/lanes.js

@@ -6791,18 +6791,62 @@ async function selectAutomaticClaudeResumeAccount(ctx, lane, workerProfile, opti
         (model === undefined || currentConfig.model === undefined || currentConfig.model === model ||
             lane.account === recordedModelAccount))
         return undefined;
-    const selected = selectClaudeAccount({
+    const selectionInput = {
         hosts: balanceHosts.snapshots,
         targetHost: lane.host,
         config,
         quotaState: loadQuotaState(hqRoot),
         recentUsageEnabled: await readClaudeAccountBalanceSignalsEnabled(ctx, lane.company ?? undefined),
         now: ctx.now(),
-        ...(!repairUnavailableAccount && allowedAccounts !== undefined ? { allowedAccounts } : {}),
         ...(model !== undefined ? { model } : {}),
         ...(recordedModelAccount !== undefined ? { recordedModelAccount } : {}),
         unavailableHosts: balanceHosts.unavailableHosts,
-    });
+    };
+    let selected;
+    let profilePinUnavailable = false;
+    try {
+        selected = selectClaudeAccount({
+            ...selectionInput,
+            ...(!repairUnavailableAccount && allowedAccounts !== undefined ? { allowedAccounts } : {}),
+        });
+    }
+    catch (err) {
+        const accountReasons = err instanceof LanesError &&
+            err.error === "claude_account_balance_no_eligible_account" &&
+            Array.isArray(err.details.account_reasons)
+            ? err.details.account_reasons.filter((reason) => reason !== null && typeof reason === "object" && !Array.isArray(reason))
+            : [];
+        const unavailablePinReasons = new Set(["disabled", "home_missing", "not_logged_in", "model_mismatch", "quota_held"]);
+        const everyProfileAccountUnavailable = profilePin !== undefined && profilePin.length > 0 &&
+            profilePin.every((account) => accountReasons.some((reason) => reason.account === account && typeof reason.reason === "string" && unavailablePinReasons.has(reason.reason)));
+        if (!everyProfileAccountUnavailable || lane.account === undefined ||
+            (lane.admission_accounts !== undefined && !lane.admission_accounts.includes(lane.account)))
+            throw err;
+        const recordedSelection = selectClaudeAccount({
+            ...selectionInput,
+            allowedAccounts: [lane.account],
+        });
+        selected = {
+            ...recordedSelection,
+            considered: recordedSelection.considered.map((entry) => {
+                const pinnedReason = profilePin.includes(entry.account)
+                    ? accountReasons.find((reason) => reason.account === entry.account)?.reason
+                    : undefined;
+                return typeof pinnedReason === "string"
+                    ? { ...entry, eligible: false, ineligible_reason: pinnedReason }
+                    : entry;
+            }),
+            skipped_accounts: [
+                ...recordedSelection.skipped_accounts.filter((entry) => !profilePin.includes(entry.account)),
+                ...profilePin.map((account) => ({
+                    account,
+                    host: lane.host,
+                    reason: String(accountReasons.find((entry) => entry.account === account)?.reason),
+                })),
+            ],
+        };
+        profilePinUnavailable = true;
+    }
     const historyReason = lane.account === undefined
         ? "load_balance"
         : currentConfig?.enabled !== true
@@ -6815,7 +6859,11 @@ async function selectAutomaticClaudeResumeAccount(ctx, lane, workerProfile, opti
                         ? "usage_limit"
                         : "load_balance";
     return {
-        selection: { ...selected, selected_at: ctx.now().toISOString() },
+        selection: {
+            ...selected,
+            ...(profilePinUnavailable ? { reason: "profile_pin_unavailable" } : {}),
+            selected_at: ctx.now().toISOString(),
+        },
         historyReason,
         ...(preservedModel !== undefined ? { preservedModel } : {}),
     };

package/dist/lib/bot/coding-tool-activity.d.ts

@@ -45,7 +45,7 @@ export interface ActivityThreshold {
  * at least `minDistinctDays` calendar days, within the last `windowDays` days.
  */
 export declare const SIGNIFICANT_CODING_TOOL_ACTIVITY: Readonly<ActivityThreshold>;
-export interface ToolActivity {
+interface ToolActivity {
     /** Is the desktop app installed? */
     installed: boolean;
     /** App sessions used within the window (0 when the app is not installed). */
@@ -79,15 +79,8 @@ export interface DetectCodingToolActivityInput {
     extraHqRoots?: string[];
     threshold?: ActivityThreshold;
 }
-/** The desktop apps, by bundle id, and the bundle names they ship under. */
-export declare const DESKTOP_APPS: Readonly<Record<CodingTool, {
-    bundleId: string;
-    bundles: readonly string[];
-}>>;
 /** `originator` the Codex app writes into its sessions' first line. */
 export declare const CODEX_APP_ORIGINATOR = "Codex Desktop";
-/** Claude Code's project folder name for a working directory. */
-export declare function claudeProjectDirName(cwd: string): string;
 /**
  * Is `bundleId` this Info.plist's CFBundleIdentifier? An XML plist is read by
  * key. A binary plist has no readable key/value pairing, so it matches when the
@@ -139,4 +132,5 @@ export declare function pickCodingTool(claude: {
 }, threshold?: ActivityThreshold): CodingTool | null;
 /** Look for the Claude and Codex desktop apps and their recent sessions, and pick one to offer, if any. */
 export declare function detectCodingToolActivity(input: DetectCodingToolActivityInput): CodingToolActivity;
+export {};
 //# sourceMappingURL=coding-tool-activity.d.ts.map

package/dist/lib/bot/coding-tool-activity.js

@@ -48,7 +48,7 @@ export const SIGNIFICANT_CODING_TOOL_ACTIVITY = Object.freeze({
     minDistinctDays: 3,
 });
 /** The desktop apps, by bundle id, and the bundle names they ship under. */
-export const DESKTOP_APPS = Object.freeze({
+const DESKTOP_APPS = Object.freeze({
     claude: { bundleId: "com.anthropic.claudefordesktop", bundles: ["Claude.app"] },
     codex: { bundleId: "com.openai.codex", bundles: ["ChatGPT.app", "Codex.app"] },
 });
@@ -65,10 +65,6 @@ const DAY_MS = 24 * 60 * 60 * 1000;
  * many days older than the window, so a resumed session is still counted.
  */
 const CODEX_FOLDER_MARGIN_DAYS = 31;
-/** Claude Code's project folder name for a working directory. */
-export function claudeProjectDirName(cwd) {
-    return path.resolve(cwd).replace(/[^a-zA-Z0-9]/g, "-");
-}
 function codexHome(home, env) {
     const override = env.CODEX_HOME?.trim();
     return override ? override : path.join(home, ".codex");

package/dist/lib/bot/setup-tool-offer.d.ts

@@ -26,10 +26,6 @@ import type { CodingTool } from "./coding-tool-activity.js";
 export declare const KEEP_GOING_HERE_REPLY = "Keep going here";
 /** The hq-block kind the desktop app draws as the two-button card. */
 export declare const CONTINUE_IN_TOOL_BLOCK_KIND = "continueInTool";
-/** The desktop apps' product names. */
-export declare const CODING_TOOL_NAMES: Readonly<Record<CodingTool, string>>;
-/** The offer's one line. */
-export declare function setupToolOfferLine(tool: CodingTool): string;
 /**
  * The opening of the app's welcome, kept when the offer replaces it: its
  * first sentence (who the bot is and what setup covers). The rest of the

package/dist/lib/bot/setup-tool-offer.js

@@ -26,12 +26,12 @@ export const KEEP_GOING_HERE_REPLY = "Keep going here";
 /** The hq-block kind the desktop app draws as the two-button card. */
 export const CONTINUE_IN_TOOL_BLOCK_KIND = "continueInTool";
 /** The desktop apps' product names. */
-export const CODING_TOOL_NAMES = Object.freeze({
+const CODING_TOOL_NAMES = Object.freeze({
     claude: "Claude",
     codex: "Codex",
 });
 /** The offer's one line. */
-export function setupToolOfferLine(tool) {
+function setupToolOfferLine(tool) {
     return `Looks like you use the ${CODING_TOOL_NAMES[tool]} app. Want to continue setup there?`;
 }
 /**

package/dist/lib/checkpoint-ontology/tree.d.ts

@@ -25,7 +25,6 @@ export interface EntityIndex {
     /** Files under `ontology/entities/` that fail validation. Never written. */
     invalid: Set<string>;
 }
-export declare function emptyIndex(): EntityIndex;
 /** Add one parsed entity to the index (also used for entities created mid-run). */
 export declare function indexEntity(index: EntityIndex, entity: IndexedEntity): void;
 /** Record that the entity at `rel` answers to `alias`. */

package/dist/lib/checkpoint-ontology/tree.js

@@ -18,7 +18,7 @@ function add(map, key, value) {
     }
     set.add(value);
 }
-export function emptyIndex() {
+function emptyIndex() {
     return {
         byRel: new Map(),
         canonical: new Map(),

package/dist/lib/core-utils/qmd-reindex-after-sync.d.ts

@@ -1,8 +1,6 @@
 import { type EmbedLockDependencies } from "../search-index/embed-lock.js";
 import { type LoadGateDependencies } from "../search-index/load-gate.js";
 import { type UtilityIo } from "./common.js";
-export declare const QMD_REINDEX_STARTUP_WARNING_FLAG = "qmd.reindex-startup-warning";
-export declare const QMD_REINDEX_STARTUP_WARNING_FLAG_FALLBACK = false;
 export type QmdReindexOptions = UtilityIo & {
     cwd?: string;
     /** Test seams; default to the real search-index implementations. */

package/dist/lib/core-utils/qmd-reindex-after-sync.js

@@ -20,8 +20,8 @@ import { resolveProcessFlagGate } from "../flag-registry.js";
 import { qmdReindexSingleFlightEnabled } from "../search-index/reindex-single-flight-flag.js";
 import { isQmdNativeBindingError, QMD_NATIVE_BINDING_REMEDY, } from "../../utils/qmd-native-binding-error.js";
 import { ioFor, line } from "./common.js";
-export const QMD_REINDEX_STARTUP_WARNING_FLAG = "qmd.reindex-startup-warning";
-export const QMD_REINDEX_STARTUP_WARNING_FLAG_FALLBACK = false;
+const QMD_REINDEX_STARTUP_WARNING_FLAG = "qmd.reindex-startup-warning";
+const QMD_REINDEX_STARTUP_WARNING_FLAG_FALLBACK = false;
 function qmdStartupFailureWarningsEnabled() {
     return resolveProcessFlagGate(QMD_REINDEX_STARTUP_WARNING_FLAG, { fallback: QMD_REINDEX_STARTUP_WARNING_FLAG_FALLBACK }, () => QMD_REINDEX_STARTUP_WARNING_FLAG_FALLBACK);
 }

package/dist/lib/daemon/convergence.d.ts

@@ -7,8 +7,6 @@
  * on disk. Policy hq-self-updater-must-verify-convergence-after-install: the
  * caller reports a mismatch as a failure; it is never swallowed.
  */
-export declare const CONVERGENCE_TIMEOUT_MS = 10000;
-export declare const CONVERGENCE_POLL_MS = 500;
 export interface ConvergenceResult {
     converged: boolean;
     expected: string;

package/dist/lib/daemon/convergence.js

@@ -9,8 +9,8 @@
  */
 import { spawnSync } from "node:child_process";
 import { hqdRequest } from "./protocol.js";
-export const CONVERGENCE_TIMEOUT_MS = 10_000;
-export const CONVERGENCE_POLL_MS = 500;
+const CONVERGENCE_TIMEOUT_MS = 10_000;
+const CONVERGENCE_POLL_MS = 500;
 /** Ping hqd over its socket and return the version it reports. */
 export async function pingHqdVersion(socketPath, timeoutMs = 2_000) {
     const result = (await hqdRequest("ping", {}, { socketPath, timeoutMs }));

package/dist/lib/daemon/flag-monitor.d.ts

@@ -1,5 +1,3 @@
-export declare const HQ_ANYWHERE_FLAG_REFRESH_INTERVAL_MS = 30000;
-export declare const HQ_ANYWHERE_FLAG_MAX_STALENESS_MS = 60000;
 export interface BoundedDaemonFlagMonitorOptions {
     read: () => Promise<boolean>;
     now?: () => number;

package/dist/lib/daemon/flag-monitor.js

@@ -1,6 +1,6 @@
 import { performance } from "node:perf_hooks";
-export const HQ_ANYWHERE_FLAG_REFRESH_INTERVAL_MS = 30_000;
-export const HQ_ANYWHERE_FLAG_MAX_STALENESS_MS = 60_000;
+const HQ_ANYWHERE_FLAG_REFRESH_INTERVAL_MS = 30_000;
+const HQ_ANYWHERE_FLAG_MAX_STALENESS_MS = 60_000;
 /**
  * Refreshes a long-running daemon's flag independently of incoming requests.
  * A failed read keeps the last successful decision only until its 60s age limit.

package/dist/lib/daemon/legacy-sync-env.d.ts

@@ -4,7 +4,6 @@
  * sync limits. This module is deliberately tolerant: a bad or missing drop-in
  * must never stop daemon planning.
  */
-export declare const LEGACY_SYNC_DROPIN_DIR = "/etc/systemd/system/outpost-sync.service.d";
 /** Read simple KEY=VALUE and quoted "KEY=VALUE" Environment directives. */
 export declare function readLegacySyncEnv(platform: NodeJS.Platform, directory?: string): Record<string, string>;
 //# sourceMappingURL=legacy-sync-env.d.ts.map

package/dist/lib/daemon/legacy-sync-env.js

@@ -6,7 +6,7 @@
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
-export const LEGACY_SYNC_DROPIN_DIR = "/etc/systemd/system/outpost-sync.service.d";
+const LEGACY_SYNC_DROPIN_DIR = "/etc/systemd/system/outpost-sync.service.d";
 function assignments(text, into) {
     let inService = false;
     for (const rawLine of text.split(/\r?\n/)) {

package/dist/lib/daemon/ops/memory.d.ts

@@ -2,12 +2,10 @@
  * memory.get / memory.put ops (hq-anywhere US-009): session-scoped notes
  * persisted at workspace/sessions/<sid>/hqd-memory.json under HQ_ROOT.
  */
-export declare const MEMORY_FILE = "hqd-memory.json";
 export declare class MemoryOpError extends Error {
     readonly code: string;
     constructor(code: string, message: string);
 }
-export declare function memoryPath(hqRoot: string, sessionId: string): string;
 export declare function memoryPut(hqRoot: string, sessionId: string, key: string, value: unknown, now?: Date): {
     key: string;
     updatedAt: string;

package/dist/lib/daemon/ops/memory.js

@@ -5,7 +5,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 const SESSION_RE = /^[A-Za-z0-9._-]+$/;
-export const MEMORY_FILE = "hqd-memory.json";
+const MEMORY_FILE = "hqd-memory.json";
 const MAX_VALUE_BYTES = 256 * 1024;
 export class MemoryOpError extends Error {
     code;
@@ -15,7 +15,7 @@ export class MemoryOpError extends Error {
         this.name = "MemoryOpError";
     }
 }
-export function memoryPath(hqRoot, sessionId) {
+function memoryPath(hqRoot, sessionId) {
     if (!SESSION_RE.test(sessionId) || sessionId === "." || sessionId === "..") {
         throw new MemoryOpError("bad_args", "sessionId may only contain letters, digits, '.', '_' and '-'");
     }

package/dist/lib/daemon/supervisor.d.ts

@@ -26,7 +26,6 @@ import type { MachineType } from "./machine-type.js";
 import type { ControlRequest } from "./requests.js";
 import { syncPassResult } from "./sync-runner.js";
 export declare const STOP_ESCALATION_MS = 10000;
-export declare const CLI_UPDATE_SYNC_IDLE_MAX_MS: number;
 export declare const CLI_UPDATE_SYNC_IDLE_KILL_GRACE_MS = 60000;
 /** After a handoff, how long a replaced unit must stay up before the next one is replaced. */
 export declare const HANDOFF_STAGGER_MS = 15000;

package/dist/lib/daemon/supervisor.js

@@ -27,7 +27,7 @@ const BACKOFF_BASE_MS = 1_000;
 const BACKOFF_MAX_MS = 60_000;
 const HEALTHY_RUN_MS = 60_000;
 export const STOP_ESCALATION_MS = 10_000;
-export const CLI_UPDATE_SYNC_IDLE_MAX_MS = 10 * 60_000;
+const CLI_UPDATE_SYNC_IDLE_MAX_MS = 10 * 60_000;
 export const CLI_UPDATE_SYNC_IDLE_KILL_GRACE_MS = 60_000;
 const MESH_OWNER_RECHECK_MS = 15_000;
 const MESH_OWNER_LOG_INTERVAL_MS = 10 * 60_000;

package/dist/lib/daemon/sync-runner-bundle.d.ts

@@ -3,7 +3,7 @@ import * as fs from "node:fs";
 export declare const SYNC_RUNNER_BUNDLE_RUNNER_FILE = "bin/sync-runner.js";
 export declare const SYNC_RUNNER_BUNDLE_METADATA_FILE = "package.json";
 export declare const SYNC_RUNNER_BUNDLE_DIRECTORY = "hq-cloud-sync-runner";
-export declare const SYNC_RUNNER_BUNDLE_FORMAT_VERSION = 1;
+declare const SYNC_RUNNER_BUNDLE_FORMAT_VERSION = 1;
 /** Root directory where validated sync-runner bundles are selected. */
 export declare function syncRunnerBundleStageRoot(daemonRoot: string): string;
 /** package.json contract that the hq-cli build step emits beside the bundled bin directory. */
@@ -41,4 +41,5 @@ export declare function stagedSyncRunnerVersion(runnerPath: string): string;
  * Only a completed, fsynced directory is returned; temp siblings are ignored.
  */
 export declare function stageSyncRunnerBundle(options: StageSyncRunnerBundleOptions): StagedSyncRunnerBundle;
+export {};
 //# sourceMappingURL=sync-runner-bundle.d.ts.map

package/dist/lib/daemon/sync-runner-bundle.js

@@ -8,7 +8,7 @@ import { ensurePrivateDir } from "./paths.js";
 export const SYNC_RUNNER_BUNDLE_RUNNER_FILE = "bin/sync-runner.js";
 export const SYNC_RUNNER_BUNDLE_METADATA_FILE = "package.json";
 export const SYNC_RUNNER_BUNDLE_DIRECTORY = "hq-cloud-sync-runner";
-export const SYNC_RUNNER_BUNDLE_FORMAT_VERSION = 1;
+const SYNC_RUNNER_BUNDLE_FORMAT_VERSION = 1;
 /** Root directory where validated sync-runner bundles are selected. */
 export function syncRunnerBundleStageRoot(daemonRoot) {
     return path.join(daemonRoot, "bundles", "sync-runner");

package/dist/lib/daemon/sync-runner.d.ts

@@ -24,7 +24,7 @@ export type SyncRunnerProcessList = {
     ok: false;
     error: string;
 };
-export interface ProcessListCommandResult {
+interface ProcessListCommandResult {
     status: number | null;
     stdout: string;
     stderr: string;
@@ -57,4 +57,5 @@ export declare function syncPassResult(event: Record<string, unknown>, completed
 export declare function syncHeartbeatTimeoutMs(env: NodeJS.ProcessEnv): number;
 /** Preserve an explicit NODE_OPTIONS heap setting; otherwise apply the desktop runner's default/override. */
 export declare function syncRunnerNodeOptions(env: NodeJS.ProcessEnv): string | undefined;
+export {};
 //# sourceMappingURL=sync-runner.d.ts.map

package/dist/lib/doctor/checks/runtime-probe.d.ts

@@ -48,7 +48,7 @@ export declare const RUNTIME_PROBE_PREFIX = "hooks.runtime";
  */
 export declare const POLICY_TRIGGER_LEDGER_RELPATH = "workspace/orchestrator/policy-trigger-state";
 /** Whether the ledger was found. Mirrors the script's `present`/`missing`. */
-export type LedgerState = "present" | "missing";
+type LedgerState = "present" | "missing";
 /** Options for {@link reproduceCheckHqHooks}. */
 export interface ReproduceOptions {
     /** Absolute HQ tree root to inspect. */
@@ -113,13 +113,6 @@ export declare function isAgentsV2Runtime(hqRoot: string, env?: NodeJS.ProcessEn
  * `HQ_FLEET_CONFIG_FILE`.
  */
 export declare const HQ_FLEET_CONFIG_ENV = "HQ_FLEET_CONFIG_FILE";
-/**
- * The agents-v2 runtime (hq-fleet) config whose `hooks:` block wires the on-box
- * adapter into every lifecycle event — the env override, else `~/.hq-fleet/config.yaml`
- * (where `provision/render-config.sh` renders it). Mirrors the shell's
- * `HQ_FLEET_CONFIG_FILE="${HQ_FLEET_CONFIG_FILE:-$HOME/.hq-fleet/config.yaml}"`.
- */
-export declare function resolveHqFleetConfigPath(env?: NodeJS.ProcessEnv): string;
 /**
  * Whether the agents-v2 runtime actually wires the on-box hook adapter.
  *
@@ -138,14 +131,6 @@ export declare function resolveHqFleetConfigPath(env?: NodeJS.ProcessEnv): strin
  * `hq_runtime_config_wires_v2_adapter` in `check-hq-hooks.sh`.
  */
 export declare function runtimeConfigWiresV2Adapter(hqRoot: string, env?: NodeJS.ProcessEnv): boolean;
-/**
- * Whether a policy-trigger ledger evidencing a live agents-v2 turn is present:
- * the exact session's ledger when a session id is given (session identity
- * implies freshness), otherwise any ledger modified within the freshness window
- * so a long-dead tree cannot self-attest off a stale file. Mirrors
- * `hq_v2_ledger_present`.
- */
-export declare function v2LedgerPresent(opts: AgentsV2AttestationOptions): boolean;
 /**
  * All three agents-v2 self-attestation conditions. Used only to GRANT PASS to a
  * hq-fleet box that host detection leaves platform-unknown; never to withhold it.
@@ -158,4 +143,5 @@ export declare function agentsV2Attested(opts: AgentsV2AttestationOptions): bool
  * the per-platform status rationale.
  */
 export declare function checkRuntimeProbe(context: CheckContext): CheckResult[];
+export {};
 //# sourceMappingURL=runtime-probe.d.ts.map

package/dist/lib/doctor/checks/runtime-probe.js

@@ -172,7 +172,7 @@ export const HQ_FLEET_CONFIG_ENV = "HQ_FLEET_CONFIG_FILE";
  * (where `provision/render-config.sh` renders it). Mirrors the shell's
  * `HQ_FLEET_CONFIG_FILE="${HQ_FLEET_CONFIG_FILE:-$HOME/.hq-fleet/config.yaml}"`.
  */
-export function resolveHqFleetConfigPath(env = process.env) {
+function resolveHqFleetConfigPath(env = process.env) {
     const override = env[HQ_FLEET_CONFIG_ENV]?.trim();
     if (override)
         return override;
@@ -215,7 +215,7 @@ export function runtimeConfigWiresV2Adapter(hqRoot, env = process.env) {
  * so a long-dead tree cannot self-attest off a stale file. Mirrors
  * `hq_v2_ledger_present`.
  */
-export function v2LedgerPresent(opts) {
+function v2LedgerPresent(opts) {
     const env = opts.env ?? process.env;
     const dir = path.join(opts.hqRoot, ...POLICY_TRIGGER_LEDGER_RELPATH.split("/"));
     if (!isDir(dir))

package/dist/lib/doctor/fix/json-output.d.ts

@@ -1,5 +1,4 @@
 import type { AppliedFix, AppliedFixBackup, ApplyFixesResult } from "./apply.js";
-export declare const DOCTOR_FIX_JSON_SCHEMA_VERSION = 1;
 export interface DoctorFixJsonResult {
     schemaVersion: number;
     exitCode: number;

package/dist/lib/doctor/fix/json-output.js

@@ -1,4 +1,4 @@
-export const DOCTOR_FIX_JSON_SCHEMA_VERSION = 1;
+const DOCTOR_FIX_JSON_SCHEMA_VERSION = 1;
 /** Build the intentionally narrow JSON surface for `hq doctor --fix --json`. */
 export function buildDoctorFixJson(input) {
     return {

package/dist/lib/doctor/platform.d.ts

@@ -58,7 +58,7 @@ export type Platform = (typeof PLATFORMS)[number];
  * The platforms a signal can positively point at. `unknown` is never the target
  * of a signal — it is the verdict when no platform is positively established.
  */
-export type DetectablePlatform = Exclude<Platform, "unknown">;
+type DetectablePlatform = Exclude<Platform, "unknown">;
 /**
  * How dispositive a signal is:
  *   - `strong`: on its own, identifies a specific platform (e.g.
@@ -66,7 +66,7 @@ export type DetectablePlatform = Exclude<Platform, "unknown">;
  *   - `weak`: corroborating but not variant-specific (e.g. `CLAUDECODE=1`, which
  *     is shared by the CLI, app, and SDK).
  */
-export type SignalStrength = "strong" | "weak";
+type SignalStrength = "strong" | "weak";
 /** One observed signal and the platform it points at. */
 export interface PlatformEvidence {
     /** Stable machine key for the signal, e.g. `env.CLAUDE_CODE_ENTRYPOINT`. */
@@ -97,7 +97,7 @@ export interface AncestorProcess {
     command: string;
 }
 /** Reads this process's ancestor chain, nearest parent first. Injectable. */
-export type AncestryReader = () => AncestorProcess[];
+type AncestryReader = () => AncestorProcess[];
 /** Options for {@link detectPlatform}. All are injectable so runs are testable. */
 export interface DetectPlatformOptions {
     /** Environment to read. Default: `process.env`. */
@@ -147,7 +147,7 @@ export declare function ancestryEvidence(ancestors: AncestorProcess[]): Platform
  * spawned, so a test can both feed a synthetic table and assert that the only
  * command ever requested is `ps` — never an agent binary.
  */
-export type ProcessSpawner = (command: string, args: readonly string[]) => string | null;
+type ProcessSpawner = (command: string, args: readonly string[]) => string | null;
 /** Options for {@link readProcessAncestry}. */
 export interface ReadAncestryOptions {
     /** Process to start from. Default: `process.pid`. */
@@ -215,4 +215,5 @@ export declare function unknownPlatformCheckStatus(): DoctorStatus;
  * can drop in.
  */
 export declare function formatPlatformLines(detection: PlatformDetection): string[];
+export {};
 //# sourceMappingURL=platform.d.ts.map

package/dist/lib/lanes/blocker-freshness.d.ts

@@ -2,8 +2,6 @@ import { type ManagerStatusTarget } from "./manager-status-gate.js";
 import { readLanesRegistryFlag } from "./registry-flag.js";
 import type { LaneRecord } from "./types.js";
 export declare const BLOCKER_FRESHNESS_FLAG = "lanes.blocker-freshness";
-export declare const BLOCKER_FRESHNESS_DEFAULT_HOURS = 4;
-export declare const BLOCKER_FRESHNESS_FUTURE_GRACE_MS: number;
 export interface StaleBlocker {
     key: string;
     label: string;

package/dist/lib/lanes/blocker-freshness.js

@@ -7,8 +7,8 @@ import { readLanesRegistryFlag } from "./registry-flag.js";
 import { resolveLaneCompany } from "./lane-company.js";
 import { assertNoSecretText } from "./text-scan.js";
 export const BLOCKER_FRESHNESS_FLAG = "lanes.blocker-freshness";
-export const BLOCKER_FRESHNESS_DEFAULT_HOURS = DEFAULT_BLOCKER_FRESHNESS_HOURS;
-export const BLOCKER_FRESHNESS_FUTURE_GRACE_MS = 5 * 60 * 1000;
+const BLOCKER_FRESHNESS_DEFAULT_HOURS = DEFAULT_BLOCKER_FRESHNESS_HOURS;
+const BLOCKER_FRESHNESS_FUTURE_GRACE_MS = 5 * 60 * 1000;
 const TERMINAL_BLOCKER_STATUSES = new Set([
     "closed",
     "resolved",

package/dist/lib/lanes/config.d.ts

@@ -7,7 +7,7 @@
  * that resolve to the same home are refused (identity-keyed-cap rule).
  */
 import * as fs from "node:fs";
-import { type AccountConfig, type LaneProvider, type LanesConfig, type RunawaySearchGuardConfig, type LivenessWindows, type ProviderConfig, type TrackerChecksConfig } from "./types.js";
+import { type AccountConfig, type LaneProvider, type LanesConfig, type RunawaySearchGuardConfig, type LivenessWindows, type ProviderConfig } from "./types.js";
 export declare const LANES_CONFIG_REL: string;
 export declare const DEFAULT_MAX_QUEUED = 3;
 export declare const DEFAULT_CPU_BUSY_PAUSE = 0.85;
@@ -43,10 +43,6 @@ export declare const DEFAULT_SESSION_QUESTION_TIMEOUT_SECS: number;
 export declare const DEFAULT_BLOCKER_FRESHNESS_HOURS = 4;
 /** Manager key results must be re-measured within six hours by default. */
 export declare const DEFAULT_KR_FRESHNESS_HOURS = 6;
-export declare const DEFAULT_LOW_DISK_MIN_FREE_BYTES: number;
-export declare const DEFAULT_CODEX_ROLLOUT_COMPRESS_AFTER_HOURS = 24;
-export declare const DEFAULT_CODEX_ROLLOUT_DELETE_AFTER_DAYS = 7;
-export declare const DEFAULT_TRACKER_CHECKS: TrackerChecksConfig;
 export declare const DEFAULT_RUNAWAY_SEARCH_GUARD_CONFIG: RunawaySearchGuardConfig;
 export declare const DEFAULT_LIVENESS_WINDOWS: LivenessWindows;
 export declare const DEFAULT_PROVIDER_MAX_RUNNING: Record<LaneProvider, number>;

package/dist/lib/lanes/config.js

@@ -47,10 +47,10 @@ export const DEFAULT_SESSION_QUESTION_TIMEOUT_SECS = 10 * 60;
 export const DEFAULT_BLOCKER_FRESHNESS_HOURS = 4;
 /** Manager key results must be re-measured within six hours by default. */
 export const DEFAULT_KR_FRESHNESS_HOURS = 6;
-export const DEFAULT_LOW_DISK_MIN_FREE_BYTES = 5 * 1024 ** 3;
-export const DEFAULT_CODEX_ROLLOUT_COMPRESS_AFTER_HOURS = 24;
-export const DEFAULT_CODEX_ROLLOUT_DELETE_AFTER_DAYS = 7;
-export const DEFAULT_TRACKER_CHECKS = {
+const DEFAULT_LOW_DISK_MIN_FREE_BYTES = 5 * 1024 ** 3;
+const DEFAULT_CODEX_ROLLOUT_COMPRESS_AFTER_HOURS = 24;
+const DEFAULT_CODEX_ROLLOUT_DELETE_AFTER_DAYS = 7;
+const DEFAULT_TRACKER_CHECKS = {
     owner_question_surface_ms: 10 * 60 * 1000,
     open_question_age_ms: 2 * 60 * 60 * 1000,
     status_stale_ms: 90 * 60 * 1000,

package/dist/lib/lanes/keep-alive.d.ts

@@ -16,7 +16,6 @@ export declare const LANE_SUPERSESSION_LINEAGE_AWARE_DEFAULT_ENABLED = false;
 export declare const LANE_RUNNING_SUPERSEDED_MESSAGE_DELIVERY_FLAG = "lanes.running-superseded-message-delivery";
 export declare const LEAD_LANE_KEEP_ALIVE_MAX_RESUMES = 24;
 export declare const LEAD_LANE_KEEP_ALIVE_BASE_BACKOFF_MS: number;
-export declare const LEAD_LANE_KEEP_ALIVE_MAX_BACKOFF_MS: number;
 export type KeepAliveLane = Pick<LaneRecord, "lane_id" | "created_at" | "senior" | "company" | "project_id"> & Partial<Pick<LaneRecord, "mesh_company" | "worker_profile" | "hire_grant" | "provider_session_id" | "last_resume" | "state">>;
 export interface LaneTerminalResumeResult {
     lane: LaneRecord;
@@ -57,11 +56,8 @@ export declare function canResumeDoneKeepAliveLane(lane: Pick<LaneRecord, "keep_
 export declare function hasPendingKeepAliveWork(hqRoot: string, lane: Pick<LaneRecord, "lane_id" | "company" | "pending_resume">, questionRecords?: readonly QuestionRecord[]): boolean;
 /** Undelivered answers that belong to this lane and company. */
 export declare function undeliveredAnsweredQuestions(lane: Pick<LaneRecord, "lane_id" | "company">, questions: readonly QuestionRecord[]): QuestionRecord[];
-export declare function retiredLaneRegistryPath(hqRoot: string): string;
 /** Missing registry means no retired lanes; every present invalid file fails closed. */
 export declare function loadRetiredLaneIds(hqRoot: string): ReadonlySet<string>;
-/** IDs may be stored bare or with an owner-host suffix after an underscore. */
-export declare function isRetiredLaneId(laneId: string, retiredLaneIds: ReadonlySet<string>): boolean;
 export declare function keepAliveSupersededBy<T extends KeepAliveLane>(lane: T, lanes: readonly T[], lineageAware?: boolean, companyForLane?: (lane: T) => T["company"]): T | undefined;
 export declare function keepAliveExclusion<T extends KeepAliveLane>(lane: T, lanes: readonly T[], retiredLaneIds: ReadonlySet<string>, lineageAware?: boolean, companyForLane?: (lane: T) => T["company"]): "retired" | "superseded" | undefined;
 export declare function leadLaneKeepAliveBackoffMs(attempt: number): number;

package/dist/lib/lanes/keep-alive.js

@@ -21,7 +21,7 @@ export const LANE_SUPERSESSION_LINEAGE_AWARE_DEFAULT_ENABLED = false;
 export const LANE_RUNNING_SUPERSEDED_MESSAGE_DELIVERY_FLAG = "lanes.running-superseded-message-delivery";
 export const LEAD_LANE_KEEP_ALIVE_MAX_RESUMES = 24;
 export const LEAD_LANE_KEEP_ALIVE_BASE_BACKOFF_MS = 5 * 60 * 1000;
-export const LEAD_LANE_KEEP_ALIVE_MAX_BACKOFF_MS = 60 * 60 * 1000;
+const LEAD_LANE_KEEP_ALIVE_MAX_BACKOFF_MS = 60 * 60 * 1000;
 /** Shared resume transition for terminal gate follow-ups. */
 export function queueLaneTerminalResume(current, at, resumeText, options = {}) {
     if (options.mergeExisting && current.pending_resume !== undefined) {
@@ -182,7 +182,7 @@ function readKeepAliveQuestionRecords(hqRoot) {
     }
     return questions;
 }
-export function retiredLaneRegistryPath(hqRoot) {
+function retiredLaneRegistryPath(hqRoot) {
     return path.join(hqRoot, "workspace", "lane-briefs", "juniors.json");
 }
 /** Missing registry means no retired lanes; every present invalid file fails closed. */
@@ -233,7 +233,7 @@ function invalidRetiredList(filePath, message) {
     return new LanesError("keep_alive_retired_list_invalid", `Invalid retired lane list ${filePath}: ${message}`, { path: filePath });
 }
 /** IDs may be stored bare or with an owner-host suffix after an underscore. */
-export function isRetiredLaneId(laneId, retiredLaneIds) {
+function isRetiredLaneId(laneId, retiredLaneIds) {
     for (const retiredId of retiredLaneIds) {
         if (retiredId === laneId ||
             retiredId.startsWith(`${laneId}_`) ||

package/dist/lib/lanes/kr-freshness.d.ts

@@ -2,9 +2,7 @@ import { type ManagerStatusTarget } from "./manager-status-gate.js";
 import { readLanesRegistryFlag } from "./registry-flag.js";
 import type { LaneRecord } from "./types.js";
 export declare const KR_FRESHNESS_FLAG = "lanes.kr-freshness";
-export declare const KR_FRESHNESS_DEFAULT_HOURS = 6;
-export declare const KR_FRESHNESS_LEDGER_REL: string;
-export declare const KR_FRESHNESS_LEDGER_SCHEMA = "kr-freshness-ledger.v1";
+declare const KR_FRESHNESS_LEDGER_SCHEMA = "kr-freshness-ledger.v1";
 export type KrFreshnessVerdict = "moving" | "flat" | "stalled";
 export interface KrFreshnessKpi {
     name: string;
@@ -52,7 +50,6 @@ export interface KrFreshnessStatusKpi {
     entryMeasuredAt: string | null;
 }
 export declare function readKrFreshnessStatus(statusPath: string): KrFreshnessStatusKpi[];
-export declare function krFreshnessLedgerPath(root: string, laneId: string): string;
 export declare function readKrFreshnessLedger(root: string, laneId: string): KrFreshnessLedger | null;
 export declare function writeKrFreshnessLedger(root: string, ledger: KrFreshnessLedger): void;
 export declare function updateKrFreshnessLedger(laneId: string, prior: KrFreshnessLedger | null, statusKpis: readonly KrFreshnessStatusKpi[], now: number): KrFreshnessLedger;
@@ -72,4 +69,5 @@ export declare function readKrFreshnessReport(root: string, laneId: string, now:
     kr_freshness_hours: number;
     kpis: KrFreshnessView[];
 };
+export {};
 //# sourceMappingURL=kr-freshness.d.ts.map

package/dist/lib/lanes/kr-freshness.js

@@ -8,9 +8,9 @@ import { readLanesRegistryFlag } from "./registry-flag.js";
 import { resolveLaneCompany } from "./lane-company.js";
 import { assertNoSecretText } from "./text-scan.js";
 export const KR_FRESHNESS_FLAG = "lanes.kr-freshness";
-export const KR_FRESHNESS_DEFAULT_HOURS = DEFAULT_KR_FRESHNESS_HOURS;
-export const KR_FRESHNESS_LEDGER_REL = path.join("workspace", "lanes", "kpi-ledger");
-export const KR_FRESHNESS_LEDGER_SCHEMA = "kr-freshness-ledger.v1";
+const KR_FRESHNESS_DEFAULT_HOURS = DEFAULT_KR_FRESHNESS_HOURS;
+const KR_FRESHNESS_LEDGER_REL = path.join("workspace", "lanes", "kpi-ledger");
+const KR_FRESHNESS_LEDGER_SCHEMA = "kr-freshness-ledger.v1";
 const MAX_STATUS_BYTES = 1024 * 1024;
 const MAX_LEDGER_BYTES = 1024 * 1024;
 const MAX_KPIS = 1000;
@@ -190,7 +190,7 @@ export function readKrFreshnessStatus(statusPath) {
     }
     return [...found.values()];
 }
-export function krFreshnessLedgerPath(root, laneId) {
+function krFreshnessLedgerPath(root, laneId) {
     return ledgerFilePath(root, laneId);
 }
 export function readKrFreshnessLedger(root, laneId) {

package/dist/lib/lanes/outpost-pruner-install.d.ts

@@ -1,8 +1,5 @@
-export declare const OUTPOST_PRUNER_PRESSURE_SERVICE = "hq-outpost-worktree-pruner-pressure.service";
 export declare const OUTPOST_PRUNER_PRESSURE_TIMER = "hq-outpost-worktree-pruner-pressure.timer";
-export declare const OUTPOST_PRUNER_DAILY_SERVICE = "hq-outpost-worktree-pruner-daily.service";
 export declare const OUTPOST_PRUNER_DAILY_TIMER = "hq-outpost-worktree-pruner-daily.timer";
-export declare const OUTPOST_PRUNER_MIN_AGE_DAYS = 14;
 export interface OutpostPrunerInstallOptions {
     systemdRoot: string;
     hqRoot: string;

package/dist/lib/lanes/outpost-pruner-install.js

@@ -4,11 +4,11 @@ import * as path from "node:path";
 import { resolveHqBinary, resolveNodeBinary } from "../mesh/live/daemon/install.js";
 import { SYSTEMD_PATH_ENV } from "../service-manager/systemd.js";
 import { resolveFlagRegistryEndpoint } from "../flag-registry-endpoint.js";
-export const OUTPOST_PRUNER_PRESSURE_SERVICE = "hq-outpost-worktree-pruner-pressure.service";
+const OUTPOST_PRUNER_PRESSURE_SERVICE = "hq-outpost-worktree-pruner-pressure.service";
 export const OUTPOST_PRUNER_PRESSURE_TIMER = "hq-outpost-worktree-pruner-pressure.timer";
-export const OUTPOST_PRUNER_DAILY_SERVICE = "hq-outpost-worktree-pruner-daily.service";
+const OUTPOST_PRUNER_DAILY_SERVICE = "hq-outpost-worktree-pruner-daily.service";
 export const OUTPOST_PRUNER_DAILY_TIMER = "hq-outpost-worktree-pruner-daily.timer";
-export const OUTPOST_PRUNER_MIN_AGE_DAYS = 14;
+const OUTPOST_PRUNER_MIN_AGE_DAYS = 14;
 function shellQuote(value) {
     return /^[A-Za-z0-9_./:-]+$/.test(value) ? value : `'${value.replace(/'/g, `'\\''`)}'`;
 }

package/dist/lib/lanes/reviews.d.ts

@@ -1,7 +1,5 @@
-export declare const LANE_REVIEWS_REL: string;
-export declare const LANE_REVIEW_SCHEMA_VERSION = "hq-lanes-review.v1";
-export declare const LANE_REVIEW_HISTORY_CAP = 50;
-export interface LaneReviewHistoryEntry {
+declare const LANE_REVIEW_SCHEMA_VERSION = "hq-lanes-review.v1";
+interface LaneReviewHistoryEntry {
     repo: string;
     pr: number;
     head_sha: string;
@@ -34,4 +32,5 @@ export declare function parseLaneReviewPr(raw: string | number): number;
 export declare function readLaneReview(hqRoot: string, repo: string, pr: number): LaneReview | null;
 export declare function listLaneReviews(hqRoot: string, reviewerLane?: string): LaneReviewListing;
 export declare function recordLaneReview(hqRoot: string, input: RecordLaneReviewInput): Promise<LaneReview>;
+export {};
 //# sourceMappingURL=reviews.d.ts.map

package/dist/lib/lanes/reviews.js

@@ -3,9 +3,9 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import { assertNoSecretText } from "./text-scan.js";
 import { LanesError } from "./errors.js";
-export const LANE_REVIEWS_REL = path.join("workspace", "lanes", "reviews");
-export const LANE_REVIEW_SCHEMA_VERSION = "hq-lanes-review.v1";
-export const LANE_REVIEW_HISTORY_CAP = 50;
+const LANE_REVIEWS_REL = path.join("workspace", "lanes", "reviews");
+const LANE_REVIEW_SCHEMA_VERSION = "hq-lanes-review.v1";
+const LANE_REVIEW_HISTORY_CAP = 50;
 const REVIEW_LOCK_WAIT_MS = 5_000;
 const REVIEW_LOCK_STALE_MS = 5 * 60_000;
 function fail(error, message, details = {}) {

package/dist/lib/lanes/store.js

@@ -987,7 +987,7 @@ function parseLaneAccountSelection(value, filePath) {
         throw failure("account");
     if (selection.signal !== "usage" && selection.signal !== "recent_usage" && selection.signal !== "lane_count" && selection.signal !== "explicit")
         throw failure("signal");
-    if (selection.reason !== "least_loaded" && selection.reason !== "explicit")
+    if (selection.reason !== "least_loaded" && selection.reason !== "explicit" && selection.reason !== "profile_pin_unavailable")
         throw failure("reason");
     if (typeof selection.selected_at !== "string" || !Number.isFinite(Date.parse(selection.selected_at)))
         throw failure("selected_at");

package/dist/lib/lanes/types.d.ts

@@ -284,7 +284,7 @@ export interface LaneAccountSelectionConsidered {
 export interface LaneAccountSelection {
     account: string;
     signal: "usage" | "recent_usage" | "lane_count" | "explicit";
-    reason: "least_loaded" | "explicit";
+    reason: "least_loaded" | "explicit" | "profile_pin_unavailable";
     target_host: LaneHost;
     selected_at: string;
     considered: LaneAccountSelectionConsidered[];

package/dist/lib/work-context/bind-best.d.ts

@@ -8,15 +8,6 @@ export interface BindCandidate {
     title?: string;
     score: number;
 }
-export interface CatalogProject {
-    projectId: string;
-    title?: string;
-    repos: string[];
-    journalMtimeMs?: number;
-    hasPrd: boolean;
-    hasBoard: boolean;
-    prdPath?: string;
-}
 export type RefineAction = {
     action: "keep";
 } | {
@@ -33,16 +24,6 @@ export type RefineAction = {
     reason: string;
     candidates: BindCandidate[];
 };
-export declare function scoreProject(hint: string, row: CatalogProject, repoPath: string | undefined, nowMs: number): number;
-export declare function discoverProjects(input: {
-    hqRoot?: string;
-    companySlug?: string;
-    companyUid?: string;
-    env?: NodeJS.ProcessEnv;
-    home?: string;
-}): CatalogProject[];
-/** discoverProjects memoized by source directory and mtime. A hit does not rescan. */
-export declare function discoverProjectsCached(input: Parameters<typeof discoverProjects>[0], nowMs?: number): CatalogProject[];
 export declare function refineProjectBinding(input: {
     hint?: string;
     hqRoot?: string;

package/dist/lib/work-context/bind-best.js

@@ -16,7 +16,7 @@ function tokens(value) {
         .split(/[^a-z0-9]+/)
         .filter((part) => part.length > 2);
 }
-export function scoreProject(hint, row, repoPath, nowMs) {
+function scoreProject(hint, row, repoPath, nowMs) {
     const hintL = hint.toLowerCase();
     const idL = row.projectId.toLowerCase();
     let score = 0;
@@ -162,7 +162,7 @@ function listProjectDirs(parent, map) {
         absorbDir(map, dir, name);
     }
 }
-export function discoverProjects(input) {
+function discoverProjects(input) {
     const map = new Map();
     const hqRoot = input.hqRoot?.trim();
     const slug = input.companySlug?.trim();
@@ -223,7 +223,7 @@ function catalogStamp(input) {
     }).join("|");
 }
 /** discoverProjects memoized by source directory and mtime. A hit does not rescan. */
-export function discoverProjectsCached(input, nowMs = Date.now()) {
+function discoverProjectsCached(input, nowMs = Date.now()) {
     const key = `${input.hqRoot ?? ""}|${input.companySlug ?? ""}|${input.companyUid ?? ""}|${input.home ?? ""}|${catalogStamp(input)}`;
     if (catalogCache && catalogCache.key === key && nowMs - catalogCache.at < CATALOG_CACHE_TTL_MS) {
         return catalogCache.rows;

package/dist/lib/work-context/organize.d.ts

@@ -7,7 +7,7 @@
  * never invents a project or adhoc target and never repeats the ask.
  */
 import { type SessionDecision, type SessionStateFile } from "./state.js";
-export interface OrganizeCandidate {
+interface OrganizeCandidate {
     candidateId: string;
     projectId: string;
     taskId?: string;
@@ -22,7 +22,7 @@ export interface CandidatesResponse {
     decisionExpiresAt: string;
     candidates: OrganizeCandidate[];
 }
-export type OrganizeDecisionKind = "bind_existing" | "create_project" | "create_task";
+type OrganizeDecisionKind = "bind_existing" | "create_project" | "create_task";
 export interface OrganizeSubmitDecision {
     kind: OrganizeDecisionKind;
     projectId?: string;
@@ -74,15 +74,6 @@ export type PostOrganizeFn = (input: {
     expectedVersion: number;
     decisionExpiresAt?: string;
 }) => Promise<OrganizeReceipt>;
-/** Stable decision id for a session + expiry window. */
-export declare function stableDecisionId(sessionId: string, decisionExpiresAt: string): string;
-export declare function digestOrganizePayload(parts: {
-    sessionId: string;
-    companyUid: string;
-    decision: OrganizeSubmitDecision;
-    expectedVersion: number;
-}): string;
-export declare function stableOrganizeOperationId(sessionId: string, decision: OrganizeSubmitDecision): string;
 /**
  * Build a pending decision from server candidates. Soft evidence ranks on the
  * server; the CLI never auto-binds from this list.
@@ -127,4 +118,5 @@ export declare function submitOrganizeDecision(input: {
     now?: () => Date;
     postOrganize?: PostOrganizeFn;
 }): Promise<OrganizeSubmitResult>;
+export {};
 //# sourceMappingURL=organize.d.ts.map

package/dist/lib/work-context/organize.js

@@ -12,7 +12,7 @@ import { NotTrackingError } from "./errors.js";
 import { shouldAskAfter } from "./project.js";
 import { mergeLocalSessionFields, readSessionState, writeSessionState, } from "./state.js";
 /** Stable decision id for a session + expiry window. */
-export function stableDecisionId(sessionId, decisionExpiresAt) {
+function stableDecisionId(sessionId, decisionExpiresAt) {
     const h = crypto
         .createHash("sha256")
         .update(`dec:v1:${sessionId}:${decisionExpiresAt}`)
@@ -20,7 +20,7 @@ export function stableDecisionId(sessionId, decisionExpiresAt) {
         .slice(0, 24);
     return `dec_${h}`;
 }
-export function digestOrganizePayload(parts) {
+function digestOrganizePayload(parts) {
     const canonical = JSON.stringify({
         v: 1,
         sessionId: parts.sessionId,
@@ -30,7 +30,7 @@ export function digestOrganizePayload(parts) {
     });
     return crypto.createHash("sha256").update(canonical).digest("hex").slice(0, 64);
 }
-export function stableOrganizeOperationId(sessionId, decision) {
+function stableOrganizeOperationId(sessionId, decision) {
     const h = crypto
         .createHash("sha256")
         .update(`organize:v1:${sessionId}:${decision.kind}:${decision.projectId ?? ""}:${decision.taskId ?? ""}:${decision.title ?? ""}`)

package/dist/utils/pack-contributions.d.ts

@@ -37,11 +37,9 @@
  *     `merge` rows -- they never produce a symlink.
  */
 import type { PackManifest, PackContributeKey } from '../types.js';
-import { CONTRIBUTION_TABLE, type WireMode } from './contribution-table.js';
+import { type WireMode } from './contribution-table.js';
 import { type UnregisterServerResult, type SafeWriteEnv, type AcquireLockOptions } from '../commands/mcp-registration.js';
 export { readHqVersion, readRecommendedPackages } from './hq-core-yaml.js';
-export type { CatalogEntry } from './hq-core-yaml.js';
-export { CONTRIBUTION_TABLE };
 export type { WireMode };
 /**
  * Where a contributes key is ROUTED (US-005). Reads the single-source table's

package/dist/utils/pack-contributions.js

@@ -42,11 +42,6 @@ import * as yaml from 'js-yaml';
 import { CONTRIBUTION_TABLE, payloadFor } from './contribution-table.js';
 import { unregisterMcpServers, } from '../commands/mcp-registration.js';
 export { readHqVersion, readRecommendedPackages } from './hq-core-yaml.js';
-// NOTE on dependency direction: this module imports from ../commands/mcp-registration.js
-// to un-register `wire:merge` (mcp) servers on uninstall. mcp-registration.ts imports
-// ONLY fs/os/path/smol-toml (it does NOT import from pack-contributions.ts), so there
-// is NO import cycle. If that ever changes, invert via a callback injected by packs.ts.
-export { CONTRIBUTION_TABLE };
 /**
  * Where a contributes key is ROUTED (US-005). Reads the single-source table's
  * `wire` field — `'symlink'` keys go through `linkFor`/`contributionLinks` (a

package/dist/utils/package-use-lease.d.ts

@@ -8,12 +8,6 @@ export interface PackageUseLease {
     readonly leasePath: string;
     release(): void;
 }
-export interface PackageUseLeaseRecord {
-    pid: number;
-    start_time_ms: number;
-    hq_version: string;
-    purpose?: PackageUseLeasePurpose;
-}
 /** Map only fixed command words to a bounded lease purpose; never persist argv values. */
 export declare function packageUseLeasePurposeForArgv(argv: readonly string[]): PackageUseLeasePurpose;
 export interface PackageUseLeaseHandoff {
@@ -23,7 +17,6 @@ export interface PackageUseLeaseHandoff {
 }
 export declare function npmPrefix(root: string, platform?: NodeJS.Platform): string | null;
 export declare function packageUseLeaseDirectory(prefix: string, stateDirectory?: string): string;
-export declare function packageUseUpdateRequestPath(prefix: string, stateDirectory?: string): string;
 declare function waitForUpdateRequest(requestPath: string, timeoutMs: number): void;
 export declare function acquirePackageUseLease(prefix: string, hqVersion: string, stateDirectory?: string, purpose?: PackageUseLeasePurpose): PackageUseLease;
 /**

package/dist/utils/package-use-lease.js

@@ -133,7 +133,7 @@ export function packageUseLeaseDirectory(prefix, stateDirectory = packageUseStat
     const digest = createHash("sha256").update(normalizedPrefix(prefix), "utf8").digest("hex");
     return path.join(stateDirectory, digest);
 }
-export function packageUseUpdateRequestPath(prefix, stateDirectory) {
+function packageUseUpdateRequestPath(prefix, stateDirectory) {
     return path.join(packageUseLeaseDirectory(prefix, stateDirectory), UPDATE_REQUEST);
 }
 function waitForUpdateRequest(requestPath, timeoutMs) {

package/dist/utils/resolve-executable.d.ts

@@ -1,3 +1,2 @@
-export declare function executableCandidates(command: string, pathValue?: string, platform?: NodeJS.Platform, pathExt?: string): string[];
 export declare function isExecutableOnPath(command: string, pathValue?: string, platform?: NodeJS.Platform, pathExt?: string): boolean;
 //# sourceMappingURL=resolve-executable.d.ts.map

package/dist/utils/resolve-executable.js

@@ -1,6 +1,6 @@
 import * as fs from 'node:fs';
 import * as path from 'node:path';
-export function executableCandidates(command, pathValue = process.env.PATH ?? '', platform = process.platform, pathExt = process.env.PATHEXT ?? '.EXE;.CMD;.BAT;.COM') {
+function executableCandidates(command, pathValue = process.env.PATH ?? '', platform = process.platform, pathExt = process.env.PATHEXT ?? '.EXE;.CMD;.BAT;.COM') {
     const extensions = platform === 'win32'
         ? (pathExt || '.EXE;.CMD;.BAT;.COM').split(';').filter(Boolean)
         : [''];

package/dist/utils/version-gate.d.ts

@@ -385,7 +385,7 @@ declare function nudgeUpdateRecommended(decision: VersionCheckResponse, install?
  * (Windows) rather than trusting our own install path — the whole point is to
  * see what the USER's next invocation resolves.
  */
-export declare function resolveHqOnPath(): string | null;
+declare function resolveHqOnPath(): string | null;
 /**
  * Pull the CLI version out of `hq --version` / `hq version` output.
  *
@@ -400,7 +400,7 @@ export declare function resolveHqOnPath(): string | null;
  */
 export declare function parseReportedCliVersion(stdout: string): string | null;
 /** `<bin> --version` output (trimmed), or null on any failure/timeout. */
-export declare function probeCliVersion(bin: string): string | null;
+declare function probeCliVersion(bin: string): string | null;
 /**
  * Read-your-writes convergence check, run after an install reports success.
  *

package/dist/utils/version-gate.js

@@ -1129,7 +1129,7 @@ const CONVERGENCE_TIMEOUT_MS = 3_000;
  * (Windows) rather than trusting our own install path — the whole point is to
  * see what the USER's next invocation resolves.
  */
-export function resolveHqOnPath() {
+function resolveHqOnPath() {
     try {
         const probe = process.platform === "win32"
             ? spawnSync("where", ["hq"], {
@@ -1191,7 +1191,7 @@ export function parseReportedCliVersion(stdout) {
     return null;
 }
 /** `<bin> --version` output (trimmed), or null on any failure/timeout. */
-export function probeCliVersion(bin) {
+function probeCliVersion(bin) {
     try {
         const result = spawnSync(bin, ["--version"], {
             encoding: "utf-8",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.9",
+  "version": "5.345.10",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {