@indigoai-us/hq-cli 5.180.0 → 5.182.0

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 ## [Unreleased]
 
+## [5.182.0] — 2026-09-24
+
+### Fixed
+
+- `hq mesh daemon status` now asks the service manager whether the daemon is loaded (`launchctl print` on macOS, `systemctl --user is-active` on Linux). Before, it never probed and always reported "installed (not loaded)" or "installed (inactive)", even while the daemon was running.
+
+## [5.181.0] — 2026-09-24
+
+### Changed
+
+- `hq daemon` runs the session host from the hq-cloud copy it keeps up to date (hq-cloud's `hq-outpost-session-host`, when that copy has it), the same way it already runs sync and the outpost heartbeat, and restarts it after an hq-cloud update. Session-host fixes, such as starting on an Outpost that signs in with machine credentials, now reach boxes without an hq CLI release.
+
 ## [5.180.0] — 2026-09-24
 
 ## [5.179.1] — 2026-09-24

package/dist/commands/daemon.js

@@ -432,7 +432,7 @@ async function runServiceSelfUpdate(d) {
         updateCli: cliSelfUpdatable() ? () => daemonSelfUpdate({ env }) : null,
         tools: TOOL_NAMES.map((name) => hostToolUpdater(name, env, d.home)),
         updateHqCloud: async () => updateManagedHqCloud(paths.root, env),
-        hqCloudUnits: hqCloudUnits(detected.type),
+        hqCloudUnits: hqCloudUnits(detected.type, enabledServices(detected.type, readDaemonConfig(paths.configPath))),
         requestDaemonRestart: () => writeControlRequest(paths.requestsDir, { action: "restart-daemon" }),
         requestRestart: (unit) => writeControlRequest(paths.requestsDir, { action: "restart", unit }),
         log: d.out,

package/dist/commands/mesh.d.ts

@@ -7,6 +7,8 @@
  */
 import { Command } from "commander";
 import { type MeshCompany, type MeshThread } from "../lib/mesh/api.js";
+import { type DaemonInstallPlatform, type InstallPaths } from "../lib/mesh/live/daemon/index.js";
+import { type RunCommand } from "../lib/service-manager/launchd.js";
 export declare function formatCheckLines(threads: MeshThread[], company: MeshCompany, projectId?: string): string[];
 /** Injectable confirmation seam for `hq mesh context correct` (stubbed in tests). */
 export type MeshConfirmFn = (message: string) => Promise<boolean>;
@@ -24,4 +26,13 @@ export declare function runContextCorrect(opts: {
     confirm?: MeshConfirmFn;
 }): Promise<void>;
 export declare function registerMeshCommand(program: Command): void;
+export declare function runDaemonStatus(opts: {
+    json?: boolean;
+}, deps?: {
+    platform?: DaemonInstallPlatform;
+    paths?: InstallPaths;
+    /** launchctl/systemctl runner for the loaded probe (tests inject). */
+    run?: RunCommand;
+    uid?: number;
+}): Promise<void>;
 //# sourceMappingURL=mesh.d.ts.map

package/dist/commands/mesh.js

@@ -35,7 +35,7 @@ import { generateUlid } from "../lib/mesh/live/ulid.js";
 import { readLegacyBacklog } from "../lib/mesh/live/emit-replay.js";
 import { resolveMeshEmitMode, writeMeshConfigMode, } from "../lib/mesh/live/daemon/mode.js";
 import { workMeshRoot } from "../lib/mesh/live/paths.js";
-import { buildInstallPaths, collectDaemonDoctor, daemonServiceStatus, findAncestorHqRoot, resolveInstallHqRoot, detectPlatform, formatCliIdentityLines, formatDaemonDoctor, installDaemonIfStale, installDaemonService, readDaemonState, resolveAbsoluteNodeBinary, resolveRunningCliEntry, runMeshDaemon, uninstallDaemonService, daemonDir, } from "../lib/mesh/live/daemon/index.js";
+import { buildInstallPaths, collectDaemonDoctor, daemonServiceIsLoaded, daemonServiceStatus, findAncestorHqRoot, resolveInstallHqRoot, detectPlatform, formatCliIdentityLines, formatDaemonDoctor, installDaemonIfStale, installDaemonService, readDaemonState, resolveAbsoluteNodeBinary, resolveRunningCliEntry, runMeshDaemon, uninstallDaemonService, } from "../lib/mesh/live/daemon/index.js";
 import { defaultRunCommand } from "../lib/service-manager/launchd.js";
 import { workContextRoot } from "../lib/work-context/paths.js";
 import { formatMigrateConfirmation, submitSessionMigration, } from "../lib/work-context/migrate.js";
@@ -2122,12 +2122,14 @@ async function runDaemonUninstall(opts) {
     }
     console.log(result.message);
 }
-async function runDaemonStatus(opts) {
+export async function runDaemonStatus(opts, deps = {}) {
+    const paths = deps.paths ?? buildInstallPaths({});
     const result = daemonServiceStatus({
-        platform: detectPlatform(),
-        paths: buildInstallPaths({}),
+        platform: deps.platform ?? detectPlatform(),
+        paths,
+        isLoaded: daemonServiceIsLoaded(deps.run ?? defaultRunCommand, deps.uid),
     });
-    const state = readDaemonState(daemonDir());
+    const state = readDaemonState(paths.daemonDir);
     const presenceRefusal = state?.presenceRefusal ?? null;
     if (opts.json) {
         console.log(JSON.stringify({

package/dist/lib/daemon/catalog.d.ts

@@ -64,6 +64,8 @@ export interface PlanContext {
     syncRunnerPath: string | null;
     /** hq-cloud's `hq-outpost-heartbeat` bin, when the hq-cloud in use has one. */
     heartbeatRunnerPath: string | null;
+    /** hq-cloud's `hq-outpost-session-host` bin, when the hq-cloud in use has one. */
+    sessionHostRunnerPath: string | null;
     signedIn: boolean;
     /** ~/.hq-agent/kit.json exists. */
     kitConfigured: boolean;
@@ -89,11 +91,12 @@ export interface PlanContext {
     codexRunnerScript: string | null;
 }
 /**
- * The units that run hq-cloud's code on a machine type, restarted after the
- * updater installs a new hq-cloud. Only outposts and self-hosted machines run
- * the outpost heartbeat; agent machines run the agent kit's own.
+ * The units that run hq-cloud's code on this host, restarted after the updater
+ * installs a new hq-cloud. Only outposts and self-hosted machines run the
+ * outpost heartbeat (agent machines run the agent kit's own); the session host
+ * is included wherever it is enabled.
  */
-export declare function hqCloudUnits(machineType: MachineType): ServiceName[];
+export declare function hqCloudUnits(machineType: MachineType, enabled: readonly ServiceName[]): ServiceName[];
 /** Written by outpost provisioning; the daemon runs it rather than re-implementing Codex login and relay setup. */
 export declare const CODEX_RUNNER_SCRIPT = "/usr/local/bin/outpost-codex-runner.sh";
 /** The outpost's Claude runner script, read for the session name it uses. */

package/dist/lib/daemon/catalog.js

@@ -97,12 +97,18 @@ function firstBlock(checks) {
     return hit ? { state: "waiting", reason: hit[1] } : undefined;
 }
 /**
- * The units that run hq-cloud's code on a machine type, restarted after the
- * updater installs a new hq-cloud. Only outposts and self-hosted machines run
- * the outpost heartbeat; agent machines run the agent kit's own.
+ * The units that run hq-cloud's code on this host, restarted after the updater
+ * installs a new hq-cloud. Only outposts and self-hosted machines run the
+ * outpost heartbeat (agent machines run the agent kit's own); the session host
+ * is included wherever it is enabled.
  */
-export function hqCloudUnits(machineType) {
-    return machineType === "outpost" || machineType === "self-hosted" ? ["sync", "heartbeat"] : ["sync"];
+export function hqCloudUnits(machineType, enabled) {
+    const units = ["sync"];
+    if (machineType === "outpost" || machineType === "self-hosted")
+        units.push("heartbeat");
+    if (enabled.includes("session-host"))
+        units.push("session-host");
+    return units;
 }
 /** Written by outpost provisioning; the daemon runs it rather than re-implementing Codex login and relay setup. */
 export const CODEX_RUNNER_SCRIPT = "/usr/local/bin/outpost-codex-runner.sh";
@@ -181,7 +187,10 @@ function planService(service, ctx) {
         case "session-host":
             return [
                 base(service, {
-                    command: { type: "hq", args: ["outposts", "session-host"] },
+                    // hq-cloud's own session host picks up hq-cloud updates without a CLI release.
+                    command: ctx.sessionHostRunnerPath
+                        ? { type: "node", script: ctx.sessionHostRunnerPath, args: [] }
+                        : { type: "hq", args: ["outposts", "session-host"] },
                     env: ctx.hqRoot ? { HQ_ROOT: ctx.hqRoot } : {},
                     blocked: firstBlock([[!ctx.signedIn, NOT_SIGNED_IN]]),
                 }),

package/dist/lib/daemon/hq-cloud.d.ts

@@ -1,5 +1,5 @@
 /**
- * Which hq-cloud the daemon runs sync and the outpost heartbeat from.
+ * Which hq-cloud the daemon runs sync, the outpost heartbeat and the session host from.
  *
  * The hq CLI ships with a copy of hq-cloud, but hq-cloud releases more often
  * than the CLI. The updater keeps a newer copy of the same major version in
@@ -27,6 +27,8 @@ export interface HqCloudRunners {
     syncRunner: string | null;
     /** `hq-outpost-heartbeat`, which older hq-cloud releases do not have. */
     heartbeat: string | null;
+    /** `hq-outpost-session-host`, which older hq-cloud releases do not have. */
+    sessionHost: string | null;
 }
 export declare function hqCloudRunners(root: string, exists?: (p: string) => boolean): HqCloudRunners;
 /** Install the newest release of the bundled major version, never older than the bundled copy. */

package/dist/lib/daemon/hq-cloud.js

@@ -1,5 +1,5 @@
 /**
- * Which hq-cloud the daemon runs sync and the outpost heartbeat from.
+ * Which hq-cloud the daemon runs sync, the outpost heartbeat and the session host from.
  *
  * The hq CLI ships with a copy of hq-cloud, but hq-cloud releases more often
  * than the CLI. The updater keeps a newer copy of the same major version in
@@ -48,7 +48,11 @@ export function hqCloudRunners(root, exists = fs.existsSync) {
         const p = path.join(root, "dist", "bin", name);
         return exists(p) ? p : null;
     };
-    return { syncRunner: bin("sync-runner.js"), heartbeat: bin("outpost-heartbeat.js") };
+    return {
+        syncRunner: bin("sync-runner.js"),
+        heartbeat: bin("outpost-heartbeat.js"),
+        sessionHost: bin("outpost-session-host.js"),
+    };
 }
 /** Install the newest release of the bundled major version, never older than the bundled copy. */
 export function hqCloudInstallCommand(prefix, bundledVersion, platform = process.platform) {

package/dist/lib/daemon/run.js

@@ -249,7 +249,7 @@ export async function runDaemon(opts) {
         const hqRoot = configured && fs.existsSync(configured) ? configured : undefined;
         // Re-picked every reconcile, so a newer hq-cloud from the updater is used as soon as it lands.
         const hqCloud = currentHqCloud(paths.root);
-        const runners = hqCloud ? hqCloudRunners(hqCloud.root) : { syncRunner: null, heartbeat: null };
+        const runners = hqCloud ? hqCloudRunners(hqCloud.root) : { syncRunner: null, heartbeat: null, sessionHost: null };
         return planUnits(enabledServices(machineType, config), {
             machineType,
             platform,
@@ -257,6 +257,7 @@ export async function runDaemon(opts) {
             hqRoot,
             syncRunnerPath: runners.syncRunner,
             heartbeatRunnerPath: runners.heartbeat,
+            sessionHostRunnerPath: runners.sessionHost,
             signedIn: signedIn(env, home, log),
             kitConfigured: fs.existsSync(agentKitPaths(home, env).kitConfigPath),
             desktopAppManagesSync: machineType === "desktop" &&

package/dist/lib/mesh/live/daemon/index.d.ts

@@ -12,7 +12,7 @@ export type { DaemonStateFile, PresenceRefusalState } from "./state.js";
 export { appendDaemonLog, daemonLogLine, ensureDaemonLog, resolveDaemonAssetDir, rotateDaemonLogIfNeeded, } from "./log.js";
 export { BOARD_REFRESH_INTERVAL_MS, createVaultBoardReader, formatBoardMarkdown, refreshBoundSessionBoards, writeBoardMarkdown, } from "./board-refresh.js";
 export type { BoardReader, BoardRefreshDeps, BoardStorySnapshot } from "./board-refresh.js";
-export { buildInstallPaths, daemonServiceStatus, detectPlatform, installDaemonIfStale, installDaemonService, isNewerCliVersion, readAssetTemplate, restartDaemonServiceIfInstalled, renderLaunchdPlist, renderSystemdSystemUnit, renderSystemdUserUnit, resolveAbsoluteNodeBinary, resolveHqBinary, resolveNodeBinary, resolveRunningCliEntry, parseSchtasksLastResult, parseWindowsTaskHqRoot, readRecordedWindowsHqRoot, schtasksLastResultFailed, uninstallDaemonService, windowsLaunchMode, windowsLogonNotice, } from "./install.js";
+export { buildInstallPaths, daemonServiceIsLoaded, daemonServiceStatus, detectPlatform, installDaemonIfStale, installDaemonService, isNewerCliVersion, readAssetTemplate, restartDaemonServiceIfInstalled, renderLaunchdPlist, renderSystemdSystemUnit, renderSystemdUserUnit, resolveAbsoluteNodeBinary, resolveHqBinary, resolveNodeBinary, resolveRunningCliEntry, parseSchtasksLastResult, parseWindowsTaskHqRoot, readRecordedWindowsHqRoot, schtasksLastResultFailed, uninstallDaemonService, windowsLaunchMode, windowsLogonNotice, } from "./install.js";
 export type { DaemonInstallPlatform, InstallIfStaleResult, InstallPaths, InstallResult, } from "./install.js";
 export { daemonConfigPath, findAncestorHqRoot, isInstallableHqRoot, readDaemonConfig, registerTrustedHqRoot, resolveInstallHqRoot, verifyHqRoot, } from "./config.js";
 export type { InstallHqRootResolution } from "./config.js";

package/dist/lib/mesh/live/daemon/index.js

@@ -6,7 +6,7 @@ export { CLOSE_LOG_ALWAYS_COUNT, CLOSE_LOG_INTERVAL_MS, CONNECT_STABLE_GRACE_MS,
 export { defaultDaemonState, patchDaemonState, readDaemonState, writeDaemonState, } from "./state.js";
 export { appendDaemonLog, daemonLogLine, ensureDaemonLog, resolveDaemonAssetDir, rotateDaemonLogIfNeeded, } from "./log.js";
 export { BOARD_REFRESH_INTERVAL_MS, createVaultBoardReader, formatBoardMarkdown, refreshBoundSessionBoards, writeBoardMarkdown, } from "./board-refresh.js";
-export { buildInstallPaths, daemonServiceStatus, detectPlatform, installDaemonIfStale, installDaemonService, isNewerCliVersion, readAssetTemplate, restartDaemonServiceIfInstalled, renderLaunchdPlist, renderSystemdSystemUnit, renderSystemdUserUnit, resolveAbsoluteNodeBinary, resolveHqBinary, resolveNodeBinary, resolveRunningCliEntry, parseSchtasksLastResult, parseWindowsTaskHqRoot, readRecordedWindowsHqRoot, schtasksLastResultFailed, uninstallDaemonService, windowsLaunchMode, windowsLogonNotice, } from "./install.js";
+export { buildInstallPaths, daemonServiceIsLoaded, daemonServiceStatus, detectPlatform, installDaemonIfStale, installDaemonService, isNewerCliVersion, readAssetTemplate, restartDaemonServiceIfInstalled, renderLaunchdPlist, renderSystemdSystemUnit, renderSystemdUserUnit, resolveAbsoluteNodeBinary, resolveHqBinary, resolveNodeBinary, resolveRunningCliEntry, parseSchtasksLastResult, parseWindowsTaskHqRoot, readRecordedWindowsHqRoot, schtasksLastResultFailed, uninstallDaemonService, windowsLaunchMode, windowsLogonNotice, } from "./install.js";
 export { daemonConfigPath, findAncestorHqRoot, isInstallableHqRoot, readDaemonConfig, registerTrustedHqRoot, resolveInstallHqRoot, verifyHqRoot, } from "./config.js";
 export { UNHEALTHY_SPOOL_AGE_MS, collectDaemonDoctor, formatCliIdentityLines, formatCliMismatchLine, formatDaemonDoctor, listHqBinariesOnPath, } from "./doctor.js";
 export { scopeBundleToAgentIdentity, } from "./credentials.js";

package/dist/lib/mesh/live/daemon/install.d.ts

@@ -312,6 +312,11 @@ export declare function uninstallDaemonService(opts: {
     /** Windows: terminate the recorded daemon pid after `schtasks /End` (tests inject). */
     kill?: (pid: number) => void;
 }): InstallResult;
+/**
+ * Live service-manager probe for `daemonServiceStatus`: `launchctl print
+ * gui/<uid>/<label>` on macOS, `systemctl --user is-active` on Linux.
+ */
+export declare function daemonServiceIsLoaded(run: RunCommand, uid?: number): (platform: DaemonInstallPlatform, dest: string) => boolean;
 export declare function daemonServiceStatus(opts: {
     platform?: DaemonInstallPlatform;
     paths?: InstallPaths;

package/dist/lib/mesh/live/daemon/install.js

@@ -22,8 +22,8 @@ import { isInstallableHqRoot, readDaemonConfig, registerTrustedHqRoot, verifyHqR
 import { defaultPidLockDeps, pidLockStatus, readPidLock } from "./pid-lock.js";
 import { retireLegacyListen } from "./legacy-listen.js";
 import { readDaemonState } from "./state.js";
-import { activateLaunchd, launchdPlistProgramArguments, launchdProgramArgumentsDiffer, parseLaunchctlPrintArguments, } from "../../../service-manager/launchd.js";
-import { activateSystemd } from "../../../service-manager/systemd.js";
+import { activateLaunchd, launchdIsLoaded, launchdPlistProgramArguments, launchdProgramArgumentsDiffer, parseLaunchctlPrintArguments, } from "../../../service-manager/launchd.js";
+import { activateSystemd, systemdIsActive } from "../../../service-manager/systemd.js";
 import { nodeBinaryProblem, preferStableNodeBinary } from "../../../node-binary.js";
 /**
  * `schtasks /End` terminates the task's root process only. The daemon is
@@ -990,6 +990,19 @@ export function uninstallDaemonService(opts) {
         message: "Nothing to uninstall on this platform",
     };
 }
+/**
+ * Live service-manager probe for `daemonServiceStatus`: `launchctl print
+ * gui/<uid>/<label>` on macOS, `systemctl --user is-active` on Linux.
+ */
+export function daemonServiceIsLoaded(run, uid) {
+    return (platform) => {
+        if (platform === "darwin")
+            return launchdIsLoaded(LAUNCHD_LABEL, run, uid);
+        if (platform === "linux")
+            return systemdIsActive(SYSTEMD_UNIT_NAME, run);
+        return false;
+    };
+}
 export function daemonServiceStatus(opts) {
     const platform = opts.platform ?? detectPlatform();
     const paths = opts.paths ?? buildInstallPaths({});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.180.0",
+  "version": "5.182.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {