@indigoai-us/hq-cli 5.156.0 → 5.158.0

package/CHANGELOG.md

@@ -2,6 +2,29 @@
 
 ## [Unreleased]
 
+## [5.158.0] — 2026-09-24
+
+### Added
+
+- `hq lanes create --placement auto` selects a host with room for the provider and account. Managers can set `--default-placement` for their workers, `hq lanes list` shows capacity by host while `lanes.outpost-load-balancing` is enabled, and `hq lanes move` can relocate a queued lane that has not started. Remote worker profiles must match the creator's content hash.
+- `hq lanes outpost-identity backfill --id <id>` fills a missing Outpost marker without replacing another value. New Outposts write their id to `/etc/outpost/outpost-id` so lane commands can identify the host.
+
+## [5.157.0] — 2026-09-24
+
+### Fixed
+
+- Local bots (`hq bot run`) now receive HQ chat attachments. The runner reads
+  `attachments` on each inbox item, downloads every file with the bot's own
+  machine identity through the same checks `hq_attachment_fetch` uses (chat
+  attachment path only, DM must include the bot, company must be one of the
+  bot's own, 26 MiB cap), and saves it under `~/.hq/bots/<name>/attachments/`
+  (dir 0700, files 0600). The turn text lists each file's name, type, size and
+  local path, with small text files inlined; a file that could not be fetched
+  gets a one-line reason, which is also logged. A message that is only an
+  attachment is answered instead of being acked and dropped. Claude turns get
+  `--add-dir` for the attachments folder so gated permission modes can read it.
+  The MIME type is also read from the server's `kind` field.
+
 ## [5.156.0] — 2026-09-24
 
 ### Fixed

package/dist/command-catalog.generated.d.ts

@@ -6809,6 +6809,12 @@ export declare const COMMAND_CATALOG: readonly [{
         }, {
             readonly flags: "--outpost <id>";
             readonly description: "Run on this Outpost instead of the local host";
+        }, {
+            readonly flags: "--placement <mode>";
+            readonly description: "local | auto | outpost:<id>";
+        }, {
+            readonly flags: "--default-placement <mode>";
+            readonly description: "Default placement for lanes launched by this lane: local | auto | outpost:<id>";
         }, {
             readonly flags: "--json";
             readonly description: "JSON on stdout (always)";
@@ -6841,6 +6847,101 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "JSON on stdout (always)";
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "capacity";
+        readonly description: "Report this host's lane capacity by provider and account";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options]";
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "JSON on stdout (always)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "outpost-identity";
+        readonly description: "Repair this host's Outpost identity marker";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] [command]";
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [{
+            readonly name: "backfill";
+            readonly description: "Write a missing Outpost identity marker without replacing an existing value";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--id <outpost-id>";
+                readonly description: "Expected id of this host's Outpost";
+            }, {
+                readonly flags: "--json";
+                readonly description: "JSON on stdout (always)";
+            }];
+            readonly subcommands: readonly [];
+        }];
+    }, {
+        readonly name: "outpost-identity-backfill-target";
+        readonly description: "";
+        readonly aliases: readonly [];
+        readonly hidden: true;
+        readonly usage: "[options]";
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--expected-id <outpost-id>";
+            readonly description: "Expected id of this Outpost";
+        }, {
+            readonly flags: "--json";
+            readonly description: "JSON on stdout (always)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "move";
+        readonly description: "Move an unstarted queued lane to a host with capacity";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <lane-id>";
+        readonly arguments: readonly [{
+            readonly name: "lane-id";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--placement <mode>";
+            readonly description: "local | auto | outpost:<id>";
+        }, {
+            readonly flags: "--json";
+            readonly description: "JSON on stdout (always)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "move-target";
+        readonly description: "";
+        readonly aliases: readonly [];
+        readonly hidden: true;
+        readonly usage: "[options] <lane-id>";
+        readonly arguments: readonly [{
+            readonly name: "lane-id";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--host-kind <kind>";
+            readonly description: "local | outpost";
+        }, {
+            readonly flags: "--host-id <id>";
+            readonly description: "Target host id";
+        }, {
+            readonly flags: "--account <id>";
+            readonly description: "Provider account id";
+        }, {
+            readonly flags: "--json";
+            readonly description: "JSON on stdout (always)";
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "admit";
         readonly description: "Try to admit the oldest eligible queued lane";

package/dist/command-catalog.generated.js

@@ -8801,6 +8801,14 @@ export const COMMAND_CATALOG = [
                         "flags": "--outpost <id>",
                         "description": "Run on this Outpost instead of the local host"
                     },
+                    {
+                        "flags": "--placement <mode>",
+                        "description": "local | auto | outpost:<id>"
+                    },
+                    {
+                        "flags": "--default-placement <mode>",
+                        "description": "Default placement for lanes launched by this lane: local | auto | outpost:<id>"
+                    },
                     {
                         "flags": "--json",
                         "description": "JSON on stdout (always)"
@@ -8843,6 +8851,128 @@ export const COMMAND_CATALOG = [
                 ],
                 "subcommands": []
             },
+            {
+                "name": "capacity",
+                "description": "Report this host's lane capacity by provider and account",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options]",
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "JSON on stdout (always)"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "outpost-identity",
+                "description": "Repair this host's Outpost identity marker",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] [command]",
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "backfill",
+                        "description": "Write a missing Outpost identity marker without replacing an existing value",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options]",
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--id <outpost-id>",
+                                "description": "Expected id of this host's Outpost"
+                            },
+                            {
+                                "flags": "--json",
+                                "description": "JSON on stdout (always)"
+                            }
+                        ],
+                        "subcommands": []
+                    }
+                ]
+            },
+            {
+                "name": "outpost-identity-backfill-target",
+                "description": "",
+                "aliases": [],
+                "hidden": true,
+                "usage": "[options]",
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--expected-id <outpost-id>",
+                        "description": "Expected id of this Outpost"
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "JSON on stdout (always)"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "move",
+                "description": "Move an unstarted queued lane to a host with capacity",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] <lane-id>",
+                "arguments": [
+                    {
+                        "name": "lane-id",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--placement <mode>",
+                        "description": "local | auto | outpost:<id>"
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "JSON on stdout (always)"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "move-target",
+                "description": "",
+                "aliases": [],
+                "hidden": true,
+                "usage": "[options] <lane-id>",
+                "arguments": [
+                    {
+                        "name": "lane-id",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--host-kind <kind>",
+                        "description": "local | outpost"
+                    },
+                    {
+                        "flags": "--host-id <id>",
+                        "description": "Target host id"
+                    },
+                    {
+                        "flags": "--account <id>",
+                        "description": "Provider account id"
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "JSON on stdout (always)"
+                    }
+                ],
+                "subcommands": []
+            },
             {
                 "name": "admit",
                 "description": "Try to admit the oldest eligible queued lane",

package/dist/commands/agent-mcp.d.ts

@@ -9,18 +9,16 @@
  * hq binary with the machine-identity env pinned.
  */
 import { Command } from "commander";
-import type { Readable } from "node:stream";
 import { McpServer } from "../lib/agent-kit/mcp/jsonrpc.js";
 import { type HqRunResult, type McpToolClients } from "../lib/agent-kit/mcp/tools.js";
 import { type AgentKitPaths } from "../lib/agent-kit/paths.js";
 import type { ExternalMachineCreds } from "../lib/agent-kit/creds.js";
+export { readBounded } from "../lib/agent-kit/attachment-download.js";
 export declare const AGENT_MCP_SERVER_NAME = "hq-agent";
 export declare const AGENT_MCP_INSTRUCTIONS: string;
 export declare const HQ_SUBPROCESS_TIMEOUT_MS = 120000;
 export declare function defaultRunHq(nodeBinary: string, hqBinary: string, env: NodeJS.ProcessEnv): (args: string[]) => Promise<HqRunResult>;
 export declare function defaultMcpClients(creds: ExternalMachineCreds, credsPath: string, paths?: Pick<AgentKitPaths, "inboxDir" | "attachmentsDir">): McpToolClients;
-/** Drain a stream into memory, refusing past `max` bytes. */
-export declare function readBounded(body: Readable, max: number): Promise<Buffer>;
 export declare function createAgentMcpServer(clients: McpToolClients): McpServer;
 export declare function registerAgentMcpCommand(agent: Command): void;
 //# sourceMappingURL=agent-mcp.d.ts.map

package/dist/commands/agent-mcp.js

@@ -12,15 +12,15 @@ import { spawn } from "node:child_process";
 import * as os from "node:os";
 import { CLI_VERSION } from "../cli-version.js";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
-import { GetObjectCommand } from "@aws-sdk/client-s3";
 import { getCompanyUid, vaultApiFetch } from "../utils/vault-api.js";
-import { createCompanyPresignClient } from "./files-browse.js";
-import { MAX_ATTACHMENT_BYTES } from "../lib/agent-kit/mcp/attachments.js";
 import { McpServer } from "../lib/agent-kit/mcp/jsonrpc.js";
+import { createVaultObjectDownloader } from "../lib/agent-kit/attachment-download.js";
 import { buildAgentMcpTools } from "../lib/agent-kit/mcp/tools.js";
 import { readKitConfig } from "../lib/agent-kit/kit-config.js";
 import { agentKitPaths } from "../lib/agent-kit/paths.js";
 import { requireExternalCreds } from "./agent-kit.js";
+// Re-exported for callers that imported it from here before it moved.
+export { readBounded } from "../lib/agent-kit/attachment-download.js";
 export const AGENT_MCP_SERVER_NAME = "hq-agent";
 export const AGENT_MCP_INSTRUCTIONS = "You are acting inside HQ as an enrolled external agent. Tools run as that machine identity: " +
     "hq_whoami (identity), hq_search / hq_files_list / hq_files_read (company vault), " +
@@ -78,14 +78,8 @@ export function defaultMcpClients(creds, credsPath, paths = agentKitPaths(os.hom
                 throw err;
             }
         },
-        downloadVaultObject: async (scopeUid, key) => {
-            // Same presign path `hq files cat` uses; the vault API's per-key ACL decides.
-            const client = createCompanyPresignClient({ token: await getToken(), companyUid: scopeUid, baseUrl: creds.apiBaseUrl });
-            const res = await client.send(new GetObjectCommand({ Bucket: scopeUid, Key: key }));
-            if (!res.Body)
-                throw new Error(`no body returned for '${key}'`);
-            return readBounded(res.Body, MAX_ATTACHMENT_BYTES);
-        },
+        // Same presign path `hq files cat` uses; the vault API's per-key ACL decides.
+        downloadVaultObject: createVaultObjectDownloader({ getToken, baseUrl: creds.apiBaseUrl }),
         apiJson: async (token, path, init) => {
             const res = await vaultApiFetch({
                 token,
@@ -100,21 +94,6 @@ export function defaultMcpClients(creds, credsPath, paths = agentKitPaths(os.hom
         },
     };
 }
-/** Drain a stream into memory, refusing past `max` bytes. */
-export async function readBounded(body, max) {
-    const chunks = [];
-    let total = 0;
-    for await (const chunk of body) {
-        const b = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        total += b.length;
-        if (total > max) {
-            body.destroy();
-            throw new Error(`object exceeds the ${max}-byte attachment limit`);
-        }
-        chunks.push(b);
-    }
-    return Buffer.concat(chunks);
-}
 export function createAgentMcpServer(clients) {
     return new McpServer({
         name: AGENT_MCP_SERVER_NAME,

package/dist/commands/bot.js

@@ -25,6 +25,7 @@ import { hasPromotionHold, promotionHoldSummary } from "../lib/bot/promotion-hol
  * list (online flag), and rm. Secrets are never printed.
  */
 import { promoteLocalBot } from "../lib/bot/promote.js";
+import { createVaultObjectDownloader } from "../lib/agent-kit/attachment-download.js";
 import { addBotToCompanies, describeCompanyFailures, removeBotFromCompanies } from "./bot-companies.js";
 import { registerBotContinuityCommand } from "./bot-continuity.js";
 import { registerBotJobsCommand } from "./bot-jobs.js";
@@ -680,9 +681,19 @@ async function runBotResident(nameArg) {
             console.log(orphanBotRunMessage(name, outcome));
         return;
     }
-    const api = new BotApi({ token: botTokenSupplier(dir) });
+    const token = botTokenSupplier(dir);
+    const api = new BotApi({ token });
     const owner = new OwnerContextCache(() => lookupOwnerContext(config.ownerUid), Date.now, undefined, config.ownerUid);
-    const handle = await runBot({ dir, config, api, runtime: runtimeFor(config.runtime), ownerContext: () => owner.get() });
+    const handle = await runBot({
+        dir,
+        config,
+        api,
+        runtime: runtimeFor(config.runtime),
+        ownerContext: () => owner.get(),
+        // Chat attachments are fetched with the bot's own machine identity against
+        // the same API its inbox and posts use (BotApi has no baseUrl override either).
+        downloadAttachment: createVaultObjectDownloader({ getToken: token }),
+    });
     await handle.done;
     void name;
 }

package/dist/commands/lanes.d.ts

@@ -66,12 +66,19 @@ export interface LanesCommandDeps {
     dispatchOutpostExec?: (input: {
         outpostId: string;
         command: string;
+        timeoutSeconds?: number;
+        waitMs?: number;
     }) => Promise<OutpostDispatchResult>;
+    /** Test seam for the atomic, non-overwriting marker repair. */
+    backfillOutpostIdentity?: (expectedId: string) => "created" | "unchanged";
     fetchText?: (url: string) => Promise<string>;
     runCompaction?: RunCompactionFn;
     locateTranscript?: (home: string, sessionId: string) => string | null;
     monitorEvidence?: MonitorEvidenceReader;
+    /** Test seam for the default-off outpost placement rollout flag. */
+    lanePlacementEnabled?: () => boolean;
 }
+export declare const LANE_OUTPOST_LOAD_BALANCING_FLAG = "lanes.outpost-load-balancing";
 export declare function parseSeniorRef(raw: string): SeniorRef;
 export declare function resolveAnswerChoice(choice: string, options: string[], freeform: boolean): string;
 /**