@indigoai-us/hq-cli 5.115.6 → 5.117.0

package/CHANGELOG.md

@@ -2,20 +2,163 @@
 
 ## [Unreleased]
 
-## [5.115.6] — 2026-09-16
+## [5.117.0] — 2026-09-16
+
+### Added
+
+- Your local bots can come back after a reinstall. A bot is an identity HQ
+  keeps for you plus the state that runs it on one computer; wiping that
+  computer's HQ folder, or moving to a new Mac, used to leave every bot dead
+  with no way back — making a new one was refused, because the old one still
+  existed. Now `hq bot restore` brings back every bot you own that is missing
+  from this computer, with its own settings, memory folder and startup agent,
+  keeping the same identity and the same conversation. `hq bot adopt <name>`
+  does one bot, `hq bot list --remote` shows every bot you own and which of
+  them are set up here, and trying to create a bot you already own now says so
+  and points at adopting it instead. Bots made before this shipped come back on
+  sensible defaults, and HQ tells you it did that.
+
+### Fixed
+
+- `hq bot restore` no longer brings back a bot this Mac cannot run. A company
+  bot — one that acts for a company rather than as you — was being set up here
+  as a personal bot: it got credentials, a folder, a memory folder and a startup
+  entry, was counted as restored with nothing reported as failed, and then died
+  at every start and at every login, while the Mac offered "check that Claude
+  Code is signed in" as the remedy, which could never help. Restore, `hq bot
+  adopt` and `hq bot list --remote` now ask exactly the question the bot's own
+  startup asks, before anything is written or any password is rotated. A bot
+  that cannot run here is listed plainly, counted as skipped rather than
+  restored, and refused by adopt with one sentence saying where it does run —
+  and nothing is left behind on this computer.
+- Bringing a bot back no longer leaves a second copy of it. A bot you created
+  here as `qa-x` is `qa-x-<your suffix>` in HQ, and bringing it back built a
+  whole second folder under that longer name: a second startup entry, a second
+  memory folder, and the original folder left behind holding the live password
+  of a bot nothing could reach any more. HQ now recognises the folder a bot
+  already has on this computer — by the identity inside it, even when a wipe
+  left only its credentials — and repairs that one in place. A bot that is not
+  here at all comes back under the name you created it with. If that name
+  already belongs to a different bot, both are kept, under names that tell them
+  apart.
+- `hq bot list --remote --json` now says `ok: true` when it worked. Every
+  failure said `ok: false`, and the success document had no `ok` at all, so
+  anything that learned to check it read a good listing as a failure.
+- A bot's long answer now reaches you, in several messages. HQ Cloud refuses any
+  single message over 4000 characters, and nothing split one up: an answer over
+  that length was refused, saved, and sent again unchanged on every check — a
+  test machine recorded the same rejection 231 times in eight minutes while the
+  person saw no reply and no error at all, and the bot's 44 seconds of work was
+  thrown away. A reply that is too long is now cut into numbered parts — on
+  paragraph breaks where it can, on sentences otherwise, and never leaving a
+  block of code half-open — and posted in order. If something goes wrong partway
+  through, only the parts you have not seen are sent again. And if a message
+  truly cannot be delivered, the bot stops after five tries and tells you so in
+  one short line, instead of asking the server to do the impossible for as long
+  as it runs.
+- A bot's startup entry no longer outlives the bot. When a bot's local setup was
+  gone, the startup entry macOS keeps for it relaunched it every five seconds,
+  forever, filling its log with the same failure (one test machine recorded 267
+  of them in a row). HQ now says once what happened, tells you how to bring the
+  bot back, removes the startup entry it no longer needs, and stops cleanly so
+  nothing relaunches it. This works when macOS itself is the one running the
+  bot, which is the case that matters: the first version did its tidying in an
+  order that had macOS shut the bot down before it could finish, so the startup
+  entry survived and brought the same dead bot back at every login, and the
+  explanation never reached the bot's log. HQ now writes the explanation and
+  removes the entry first, and lets go of itself last.
+
+- You can remove a bot whose settings this computer has already lost. A wiped
+  HQ folder could leave a bot half-here — a folder and a startup entry, no
+  settings — and nothing could clear it: removing it said there was no such
+  bot and suggested creating one, and creating one said you already had it.
+  `hq bot rm <name>` now clears whatever is actually left on this computer, and
+  `hq bot rm <name> --remote` also removes the bot HQ still holds under that
+  name. It checks with HQ before it deletes anything local, so a service that
+  cannot answer leaves nothing half-done.
+
+- Removing a bot now tells the truth when HQ only gets part of the way. When
+  HQ's own teardown of a bot's cloud identity stopped half-way, the
+  machine-readable form said the removal had failed but gave no reason and no
+  explanation, reported success to anything checking the exit code, and printed
+  the raw cloud error — including internal infrastructure addresses — straight
+  at you. It now says one plain sentence, names the reason in the same
+  vocabulary as everything else, and exits non-zero, and no internal detail is
+  repeated anywhere. It also stops making you run the command twice for
+  nothing: when the part HQ could not finish would fail the same way every
+  time, the bot is removed from this computer and you are told the leftover is
+  HQ's to clear; when it is something HQ may yet finish, your settings are kept
+  exactly as they were so running the same command again picks the job back up.
+
+- Bringing bots back now fails in plain language when HQ Cloud is too old for
+  it. `hq bot adopt`, `hq bot restore`, and `hq bot list --remote` all ask HQ
+  which bots you own; against an HQ Cloud without that capability, the raw
+  network error was printed at you, and the machine-readable form printed
+  nothing at all — so the desktop app had nothing it could read. Each now says
+  one plain sentence, and `--json` always returns a result naming the reason,
+  so the app can quietly fall back to showing the bots that are on this
+  computer.
+
+## [5.116.0] — 2026-09-16
+
+### Added
+
+- External bots as team members (host side). `hq agent enroll <code>`
+  redeems a one-time enrollment code from the console: it generates an
+  Ed25519 host key at `~/.hq-agent/host-key` (0600), POSTs the public half to
+  `POST /v1/agents/enroll`, and writes `~/.hq-agent/machine-creds.json` (0600)
+  with `runtime: "external"`. It refuses to run on a host that already holds a
+  human session file or another machine identity unless `--replace`, and
+  never reads `~/.hq/cognito-tokens.json`. Every contract error (expired,
+  already redeemed, invalid, revoked, plan-gated, throttled, unreachable) maps
+  to a message that names the fix.
+- `hq agent kit install|status|uninstall|run <service>`: user-level services
+  (LaunchAgent on macOS, systemd `--user` on Linux) for the company-vault sync
+  loop, a work-mesh doorbell listener (ids-only MQTT → REST refetch into
+  `~/.hq/work-mesh/cache`), an inbox poller that mirrors new items to
+  `~/.hq-agent/inbox/` (server ack opt-in via `--inbox-ack`), and a 60 s
+  heartbeat posting `{ components: { sync, mesh, inbox } }`. Each unit just
+  runs `hq agent kit run <service>`; logs land in `~/.hq-agent/logs/`. The
+  install also ships `~/.hq-agent/skills/{dm,search,files,secrets-exec,work-mesh-status}/SKILL.md`
+  (agentskills.io format). `docker/hq-agent-kit/` runs the same four
+  processes from a mounted creds volume.
+- `hq agent probe`: whoami → vault sync → mesh presence → DM round trip to
+  self → secrets list, one PASS/FAIL line each, non-zero exit on any failure,
+  a final `heartbeat  <age>` line (the recipe format), and the result POSTed to
+  `POST /v1/agents/{uid}/probe-result` so the console flips to Enrolled.
+- `hq agent mcp`: a stdio MCP server (no SDK dependency; initialize / ping /
+  tools/list / tools/call) backed by the enrolled machine identity, exposing
+  `hq_whoami`, `hq_search`, `hq_files_list`, `hq_files_read`,
+  `hq_secrets_list`, `hq_secrets_exec` (exit code + output only, never
+  values), `hq_dm_send`, `hq_inbox_read`, `hq_work_mesh_status`. Console
+  recipes register it as `command: hq, args: [agent, mcp]`.
+- `hq agents rotate <uid>` (fresh enrollment code, shown once) and
+  `hq agents revoke <uid> [--remove] --yes` for external agents. Both fail
+  closed under `HQ_API_KEY` (JWT-only routes).
+
+### Changed
+
+- `@indigoai-us/hq-cloud` pinned to `~6.16.48`, whose machine mint signs the
+  server's nonce with the host key when creds carry `runtime: "external"`.
 
 ### Fixed
 
-- `hq doctor --fix` can now refresh a company sync journal that is stale or
-  has never synced, when that company still has a folder under `companies/`.
-  It pulls that company only, keeps your local copy if there is a conflict,
-  and does not push. Company journals left over from memberships you do not
-  keep locally are reported as unused rather than broken, so a session-start
-  health check no longer files "could not repair" reports for folders that
-  were never on this machine. Personal journals are unchanged: they still
-  warn when stale, and `--fix` will not pull your personal vault on its own.
-  The repair pass also skips the integrations inventory, which it cannot
-  repair, so a slow connection check cannot stall the fix.
+- When a new agent needs an owner action, `hq agents provision` prints the
+  current Codex sign-in code or a link to finish setting up the Slack app. `hq agents status
+  <slug>` gets the current action again. The `--json` output adds a
+  `pendingActions` array, plus `slackInstallPending` and `slackInstallUrl` for
+  Slack installs.
+
+- `hq secrets` now fails promptly instead of waiting for a browser sign-in
+  that cannot be completed when stdin or stderr is not a terminal, or in CI.
+  Run `hq login` from an interactive shell first if no valid session exists.
+
+- hq gives both visible and quiet version-gated updates 30 minutes to finish.
+  When that limit expires, it tries to terminate the updater's process group
+  on POSIX or process tree on Windows. If the operating system denies that
+  request, hq reports it instead of waiting forever. Set `HQ_UPDATE_TIMEOUT_MS`
+  to another whole number of milliseconds up to 2,147,483,647. hq ignores an
+  invalid value and tells you it is using the 30-minute limit.
 
 - HQ's housekeeping pass now clears out add-on shortcuts that lead nowhere,
   instead of warning about them forever. A pack that stops shipping one of its
@@ -37,6 +180,21 @@
   that leads to real content. Repairing a tree this way fixed a batch of
   long-broken pack shortcuts in one pass.
 
+## [5.115.6] — 2026-09-16
+
+### Fixed
+
+- `hq doctor --fix` can now refresh a company sync journal that is stale or
+  has never synced, when that company still has a folder under `companies/`.
+  It pulls that company only, keeps your local copy if there is a conflict,
+  and does not push. Company journals left over from memberships you do not
+  keep locally are reported as unused rather than broken, so a session-start
+  health check no longer files "could not repair" reports for folders that
+  were never on this machine. Personal journals are unchanged: they still
+  warn when stale, and `--fix` will not pull your personal vault on its own.
+  The repair pass also skips the integrations inventory, which it cannot
+  repair, so a slow connection check cannot stall the fix.
+
 ## [5.115.5] — 2026-09-15
 
 ### Fixed

package/dist/command-catalog.generated.d.ts

@@ -3853,9 +3853,9 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly description: "Show an agent's setup state and runtime detail";
         readonly aliases: readonly [];
         readonly hidden: false;
-        readonly usage: "[options] <agentUid>";
+        readonly usage: "[options] <agent>";
         readonly arguments: readonly [{
-            readonly name: "agentUid";
+            readonly name: "agent";
             readonly required: true;
             readonly variadic: false;
         }];
@@ -4022,6 +4022,47 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Confirm the irreversible teardown (required)";
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "rotate";
+        readonly description: "Issue a fresh enrollment code for an external agent (old secret + host key stop minting)";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <agentUid>";
+        readonly arguments: readonly [{
+            readonly name: "agentUid";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--company <slug>";
+            readonly description: "Company slug (resolves to companyUid)";
+        }, {
+            readonly flags: "--json";
+            readonly description: "Emit raw JSON (code included — pipe carefully)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "revoke";
+        readonly description: "Revoke an external agent: disable its login and drop it from the team";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <agentUid>";
+        readonly arguments: readonly [{
+            readonly name: "agentUid";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--company <slug>";
+            readonly description: "Company slug (resolves to companyUid)";
+        }, {
+            readonly flags: "--remove";
+            readonly description: "Also delete the agent entity (it disappears from the roster)";
+        }, {
+            readonly flags: "--yes";
+            readonly description: "Confirm the revoke (required)";
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "jobs";
         readonly description: "List, pause, or cancel an agent's scheduled jobs";
@@ -4091,6 +4132,125 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly subcommands: readonly [];
         }];
     }];
+}, {
+    readonly name: "agent";
+    readonly description: "Enroll and run this host as an external HQ agent";
+    readonly aliases: readonly [];
+    readonly hidden: false;
+    readonly usage: "[options] [command]";
+    readonly arguments: readonly [];
+    readonly options: readonly [];
+    readonly subcommands: readonly [{
+        readonly name: "enroll";
+        readonly description: "Enroll this host as an external HQ agent using a one-time code";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <code>";
+        readonly arguments: readonly [{
+            readonly name: "code";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--company <slug>";
+            readonly description: "Expected company slug (warns when the code belongs elsewhere)";
+        }, {
+            readonly flags: "--replace";
+            readonly description: "Overwrite an existing machine identity on this host";
+        }, {
+            readonly flags: "--api-base-url <url>";
+            readonly description: "hq-pro control plane (default: HQ_VAULT_API_URL or production)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "kit";
+        readonly description: "Install, inspect, or run the external-agent background services";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] [command]";
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [{
+            readonly name: "install";
+            readonly description: "Install sync, work-mesh, inbox and heartbeat services plus the skills directory";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--hq-root <path>";
+                readonly description: "Local HQ tree to sync the company vault into (default: ~/.hq-agent/hq)";
+            }, {
+                readonly flags: "--inbox-ack";
+                readonly description: "Ack mirrored inbox items on the server (default: leave acking to the bot)";
+            }, {
+                readonly flags: "--no-activate";
+                readonly description: "Write unit files but do not load them";
+            }, {
+                readonly flags: "--json";
+                readonly description: "Print machine-readable JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "status";
+            readonly description: "Show whether each kit service is installed and running";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Print machine-readable JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "uninstall";
+            readonly description: "Stop and remove the kit services (credentials and skills are kept)";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Print machine-readable JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "run";
+            readonly description: "Run one kit service in the foreground (sync|mesh|inbox|heartbeat)";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <service>";
+            readonly arguments: readonly [{
+                readonly name: "service";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [];
+            readonly subcommands: readonly [];
+        }];
+    }, {
+        readonly name: "probe";
+        readonly description: "Verify identity, vault sync, work-mesh presence, DMs and secrets; report to the console";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options]";
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "mcp";
+        readonly description: "Serve HQ as a stdio MCP server for the bot framework (whoami, search, files, secrets-exec, dm, inbox, work-mesh)";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options]";
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [];
+    }];
 }, {
     readonly name: "outposts";
     readonly description: "Manage your personal HQ Outposts (EC2 boxes)";
@@ -6214,6 +6374,61 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly usage: "[options]";
         readonly arguments: readonly [];
         readonly options: readonly [{
+            readonly flags: "--remote";
+            readonly description: "List the local bots your HQ account owns instead, with a here column saying which are set up on this computer";
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "adopt";
+        readonly description: "Bring a bot you already own back to this computer: new machine credentials, its saved settings, worker folder, and startup agent";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <name>";
+        readonly arguments: readonly [{
+            readonly name: "name";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--runtime <runtime>";
+            readonly description: "Model CLI to run it with, overriding its saved one: claude|codex|grok";
+        }, {
+            readonly flags: "--model <model>";
+            readonly description: "Model override passed to the runtime CLI, replacing its saved one";
+        }, {
+            readonly flags: "--no-daemon";
+            readonly description: "Do not install the launchd agent (macOS)";
+        }, {
+            readonly flags: "--no-start";
+            readonly description: "Bring it back without starting it";
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "restore";
+        readonly description: "Bring back every local bot your HQ account owns that is not set up on this computer (after a reinstall, or on a new Mac)";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options]";
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--all";
+            readonly description: "Also re-issue credentials and reinstall the startup agent for the bots already set up here";
+        }, {
+            readonly flags: "--dry-run";
+            readonly description: "Show what would be brought back, change nothing";
+        }, {
+            readonly flags: "--no-daemon";
+            readonly description: "Do not install the launchd agents (macOS)";
+        }, {
+            readonly flags: "--no-start";
+            readonly description: "Bring them back without starting them";
+        }, {
             readonly flags: "--json";
             readonly description: "Print machine-readable JSON";
         }];
@@ -6328,6 +6543,9 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly options: readonly [{
             readonly flags: "-y, --yes";
             readonly description: "Skip the confirmation prompt";
+        }, {
+            readonly flags: "--remote";
+            readonly description: "When the bot's local settings are already gone, also delete the bot HQ still has under that name";
         }, {
             readonly flags: "--json";
             readonly description: "Print machine-readable JSON";