@indigoai-us/hq-cli 5.191.0 → 5.192.1

package/CHANGELOG.md

@@ -2,6 +2,29 @@
 
 ## [Unreleased]
 
+## [5.192.1] — 2026-09-25
+
+### Fixed
+
+- `hq lanes questions answer` now resumes an asking lane as soon as its final
+  pending question is answered. When capacity or throttling prevents a start,
+  hq-cli queues the lane with an `answered_questions` resume and the answer
+  timestamp. It sends Outpost answers to the lane's owner and reports any
+  unanswered sibling questions or a named wake error. After the owner confirms
+  the answer, the primary's question copy is marked answered as well.
+
+## [5.192.0] — 2026-09-25
+
+### Added
+
+- `hq agents models` lists cloud-agent catalog entries by provider and supports JSON output.
+  Provision and update validate model IDs against the catalog. They use the cached
+  catalog when the endpoint is unavailable, and rely on server validation if no cache exists.
+
+### Fixed
+
+- `hq report adopt` checks whether scheduled jobs are enabled for the company before creating a cloud job, and explains when the server rejects a disabled job.
+
 ## [5.191.0] — 2026-09-25
 
 ### Fixed

package/dist/command-catalog.generated.d.ts

@@ -3845,6 +3845,21 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly description: "Company slug (resolves to companyUid)";
     }];
     readonly subcommands: readonly [{
+        readonly name: "models";
+        readonly description: "List the model catalog available to cloud agents";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options]";
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--provider <provider>";
+            readonly description: "Filter to one provider: codex, grok, or claude";
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print the stable catalog JSON shape";
+        }];
+        readonly subcommands: readonly [];
+    }, {
         readonly name: "message";
         readonly description: "Send a message to an agent and wait for its reply";
         readonly aliases: readonly ["msg"];
@@ -3939,7 +3954,7 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Runtime: agents-v2 (recommended) | codex | grok | claude (accepted for script compatibility; use agents-v2 for new Claude agents)";
         }, {
             readonly flags: "--model <model>";
-            readonly description: "Brain model, for example claude-opus-5-5, gpt-5.5, or grok-4.6";
+            readonly description: "Brain model from `hq agents models`";
         }, {
             readonly flags: "--auth-mode <mode>";
             readonly description: "Auth: subscription | apiKey (default subscription)";
@@ -4074,7 +4089,7 @@ export declare const COMMAND_CATALOG: readonly [{
     }, {
         readonly name: "config";
         readonly description: "Update an agent's runtime config (model / reasoning effort / service tier), or migrate its brain/runtime provider with --provider (DESTRUCTIVE: terminates + reprovisions the box)";
-        readonly aliases: readonly [];
+        readonly aliases: readonly ["update"];
         readonly hidden: false;
         readonly usage: "[options] <agentUid>";
         readonly arguments: readonly [{
@@ -4087,7 +4102,7 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Company slug (resolves to companyUid)";
         }, {
             readonly flags: "--model <model>";
-            readonly description: "Codex model id";
+            readonly description: "Model id from `hq agents models`";
         }, {
             readonly flags: "--effort <effort>";
             readonly description: "Reasoning effort: minimal | low | medium | high | xhigh";

package/dist/command-catalog.generated.js

@@ -4961,6 +4961,25 @@ export const COMMAND_CATALOG = [
             }
         ],
         "subcommands": [
+            {
+                "name": "models",
+                "description": "List the model catalog available to cloud agents",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options]",
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--provider <provider>",
+                        "description": "Filter to one provider: codex, grok, or claude"
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print the stable catalog JSON shape"
+                    }
+                ],
+                "subcommands": []
+            },
             {
                 "name": "message",
                 "description": "Send a message to an agent and wait for its reply",
@@ -5092,7 +5111,7 @@ export const COMMAND_CATALOG = [
                     },
                     {
                         "flags": "--model <model>",
-                        "description": "Brain model, for example claude-opus-5-5, gpt-5.5, or grok-4.6"
+                        "description": "Brain model from `hq agents models`"
                     },
                     {
                         "flags": "--auth-mode <mode>",
@@ -5268,7 +5287,9 @@ export const COMMAND_CATALOG = [
             {
                 "name": "config",
                 "description": "Update an agent's runtime config (model / reasoning effort / service tier), or migrate its brain/runtime provider with --provider (DESTRUCTIVE: terminates + reprovisions the box)",
-                "aliases": [],
+                "aliases": [
+                    "update"
+                ],
                 "hidden": false,
                 "usage": "[options] <agentUid>",
                 "arguments": [
@@ -5285,7 +5306,7 @@ export const COMMAND_CATALOG = [
                     },
                     {
                         "flags": "--model <model>",
-                        "description": "Codex model id"
+                        "description": "Model id from `hq agents models`"
                     },
                     {
                         "flags": "--effort <effort>",

package/dist/commands/agents.d.ts

@@ -28,6 +28,7 @@
  */
 import { Command } from "commander";
 import { type TerminalSessionPayload } from "@indigoai-us/hq-cloud/outposts/node";
+import { type AgentModelProvider, type AgentModelCatalog } from "../lib/agents/model-catalog.js";
 import { type BillingErrorPayload } from "../utils/billing-gate.js";
 /** Reasoning-effort values hq-pro accepts on `runtime-config`. */
 export declare const VALID_EFFORTS: Set<string>;
@@ -341,6 +342,8 @@ export declare function formatJobsTable(jobs: AgentJobView[]): string;
 export declare function formatPauseResult(result: PauseJobResult): string;
 /** Human-readable "hot-applied to the running box" vs "saved for next launch". */
 export declare function appliedHint(applied: boolean): string;
+/** Stable human table shared by the all-provider and provider-filtered forms. */
+export declare function formatAgentModelsTable(catalog: AgentModelCatalog, selectedProvider?: AgentModelProvider): string;
 /** Agent uid shape (`agt_…`). */
 /** One message in a DM thread, as returned by `GET /v1/notify/thread`. */
 export interface DmThreadMessage {

package/dist/commands/agents.js

@@ -38,6 +38,7 @@ import { launchSessionManagerPlugin, SessionManagerPluginLaunchError, TerminalSe
 import { peekIdToken } from "../utils/id-token.js";
 import { canOfferTeamUpgrade, formatUpgradeRefusal, isPlanGateError, offerUpgradeLink, } from "../utils/plan-gate-error.js";
 import { AGENT_UID_PATTERN, isAgentUid } from "../lib/notify-recipient.js";
+import { AGENT_MODEL_PROVIDERS, modelSelectionErrorMessage, readAgentModelCatalog, validateAgentModelSelection, } from "../lib/agents/model-catalog.js";
 import { confirmChargeOrExit, formatUsd, parseBillingPayload, surfaceBillingBlocked, } from "../utils/billing-gate.js";
 /** Reasoning-effort values hq-pro accepts on `runtime-config`. */
 export const VALID_EFFORTS = new Set([
@@ -57,11 +58,12 @@ export const VALID_AUTH_MODES = new Set(["subscription", "apiKey"]);
 export const VALID_AGENT_SIZE_KEYS = new Set(["basic", "power", "dev"]);
 // Keep cloud agent create slugs aligned with hq-pro-agents POST /v1/agents.
 const AGENT_SLUG_PATTERN = /^[a-z0-9][a-z0-9-]{0,62}$/;
-const CLAUDE_PROVISION_COMMAND = "hq agents provision <name> --provider agents-v2 --model claude-opus-5-5";
+const CLAUDE_PROVISION_COMMAND = "hq agents provision <name> --provider agents-v2 --model <model-id>";
 const CLAUDE_API_KEY_ARGS = "--auth-mode apiKey --api-key-env <VAR>";
 function claudeProvisionGuidance() {
     return [
         "The account must be enabled for Claude. Subscription auth is the default.",
+        "Use `hq agents models` to see the current model ids.",
         `Create an agent with: ${CLAUDE_PROVISION_COMMAND}`,
         `For API-key auth, add: ${CLAUDE_API_KEY_ARGS}`,
         "The CLI accepts --provider claude for script compatibility, but the server rejects new agents that use it.",
@@ -863,6 +865,50 @@ export function appliedHint(applied) {
         ? "applied to the running box now"
         : "saved — takes effect on the agent's next launch";
 }
+async function validateAgentModelOption(token, chosenProvider, modelId) {
+    const result = await readAgentModelCatalog(token);
+    if (!result.ok) {
+        if (result.reason === "unavailable") {
+            console.error(chalk.yellow("model validation skipped: catalog unavailable (the server still validates)."));
+            return;
+        }
+        throw new Error(`Could not read the model catalog (HTTP ${result.status}). Check your hq login and try again.`);
+    }
+    if (result.source === "cache") {
+        console.error(chalk.yellow(`Model catalog unavailable; validating against the cached catalog from ${new Date(result.fetchedAt).toISOString()}.`));
+    }
+    const selection = validateAgentModelSelection(result.catalog, modelId, chosenProvider);
+    if (!selection.ok) {
+        throw new Error(modelSelectionErrorMessage(modelId, selection));
+    }
+}
+/** Stable human table shared by the all-provider and provider-filtered forms. */
+export function formatAgentModelsTable(catalog, selectedProvider) {
+    const providers = selectedProvider ? [selectedProvider] : AGENT_MODEL_PROVIDERS;
+    const sections = providers.map((provider) => {
+        const view = catalog.providers[provider];
+        const columns = ["ID", "LABEL", "DEFAULT", "NEW", "AVAILABILITY"];
+        const rows = view.models.map((model) => [
+            model.id,
+            model.label,
+            model.id === view.defaultModel ? "yes" : "",
+            model.isNew ? "yes" : "",
+            model.selectable ? "available" : "not yet on agents",
+        ]);
+        const widths = columns.map((column, index) => Math.max(column.length, ...rows.map((row) => row[index].length)));
+        const render = (cells) => cells.map((cell, index) => cell.padEnd(widths[index])).join("  ").trimEnd();
+        return [
+            chalk.bold(provider.toUpperCase()),
+            render(columns),
+            ...rows.map(render),
+        ].join("\n");
+    });
+    return sections.join("\n\n");
+}
+function catalogUnavailableMessage() {
+    return ("Model catalog is unavailable and no cached copy exists. " +
+        "Check your connection and try again after model-catalog.serve is enabled.");
+}
 /**
  * Resolve an agent reference to its `agt_` uid. An `agt_…` value is used
  * directly; anything else is treated as a slug or display name and resolved
@@ -1097,6 +1143,8 @@ export function registerAgentsCommand(program) {
         bySubcommand: {
             message: { capability: "agents:use", routeAvailable: false },
             thread: { capability: "agents:use", routeAvailable: false },
+            // The catalog read endpoint is JWT-only; hq-pro has no keyed parallel.
+            models: { capability: "agents:use", routeAvailable: false },
             // Interactive terminals are for humans: hq-pro serves no keyed
             // `/v1/keys/agents/{uid}/terminal` route, so machine keys fail closed.
             terminal: { capability: "agents:use", routeAvailable: false },
@@ -1112,6 +1160,43 @@ export function registerAgentsCommand(program) {
     // `hq agents --company acme list`.
     const companyOf = (sub) => sub.opts().company ??
         agents.opts().company;
+    agents
+        .command("models")
+        .description("List the model catalog available to cloud agents")
+        .option("--provider <provider>", "Filter to one provider: codex, grok, or claude")
+        .option("--json", "Print the stable catalog JSON shape")
+        .action(async (opts) => {
+        try {
+            const token = (await resolveVaultCredential()).token;
+            const result = await readAgentModelCatalog(token);
+            if (!result.ok) {
+                if (result.reason === "request_failed") {
+                    throw new Error(`Could not read the model catalog (HTTP ${result.status}). Check your hq login and try again.`);
+                }
+                console.error(chalk.red(catalogUnavailableMessage()));
+                process.exit(1);
+            }
+            if (result.source === "cache") {
+                console.error(chalk.yellow(`Model catalog unavailable; showing cached catalog from ${new Date(result.fetchedAt).toISOString()}.`));
+            }
+            const providers = opts.provider
+                ? { [opts.provider]: result.catalog.providers[opts.provider] }
+                : result.catalog.providers;
+            if (opts.json) {
+                // Stable shape: { generatedAt, providers }. A provider filter selects
+                // one key but never changes or flattens the response envelope.
+                process.stdout.write(JSON.stringify({ generatedAt: result.catalog.generatedAt, providers }, null, 2) + "\n");
+                return;
+            }
+            console.log(formatAgentModelsTable(result.catalog, opts.provider));
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    agents.commands.find((command) => command.name() === "models")
+        ?.options.find((option) => option.long === "--provider")
+        ?.choices(AGENT_MODEL_PROVIDERS);
     agents
         .command("message <agent> <message...>")
         .alias("msg")
@@ -1269,7 +1354,7 @@ export function registerAgentsCommand(program) {
         .option("--company <slug>", "Company slug (resolves to companyUid)")
         .option("--slug <slug>", "Agent slug (defaults to a slug of <name>)")
         .option("--provider <provider>", "Runtime: agents-v2 (recommended) | codex | grok | claude (accepted for script compatibility; use agents-v2 for new Claude agents)")
-        .option("--model <model>", "Brain model, for example claude-opus-5-5, gpt-5.5, or grok-4.6")
+        .option("--model <model>", "Brain model from `hq agents models`")
         .option("--auth-mode <mode>", "Auth: subscription | apiKey (default subscription)", "subscription")
         .option("--api-key-env <VAR>", "Env var holding the API key for --auth-mode apiKey (never pass the key as a flag)")
         .option("--slack-bot-token <xoxb-token>", "Reuse an existing Slack bot token; HQ_SLACK_BOT_TOKEN or --slack-tokens-stdin avoid shell history")
@@ -1334,6 +1419,9 @@ export function registerAgentsCommand(program) {
             }
             const token = (await resolveVaultCredential()).token;
             const companyUid = await getCompanyUid(token, companyOf(this));
+            if (opts.model !== undefined) {
+                await validateAgentModelOption(token, provider, opts.model);
+            }
             const idempotencyKey = `hq-cli-${randomUUID()}`;
             const sizeKey = parseEnumOption(opts.size, VALID_AGENT_SIZE_KEYS, "--size");
             const shouldChooseInteractively = !sizeKey && process.stdin.isTTY === true;
@@ -1636,9 +1724,10 @@ export function registerAgentsCommand(program) {
     });
     agents
         .command("config <agentUid>")
+        .alias("update")
         .description("Update an agent's runtime config (model / reasoning effort / service tier), or migrate its brain/runtime provider with --provider (DESTRUCTIVE: terminates + reprovisions the box)")
         .option("--company <slug>", "Company slug (resolves to companyUid)")
-        .option("--model <model>", "Codex model id")
+        .option("--model <model>", "Model id from `hq agents models`")
         .option("--effort <effort>", "Reasoning effort: minimal | low | medium | high | xhigh")
         .option("--tier <tier>", "Service tier (speed): default | priority")
         .option("--provider <provider>", "Migrate brain/runtime provider (codex | grok | claude | agents-v2). DESTRUCTIVE: terminates and reprovisions the box; requires --model and --yes.")
@@ -1707,6 +1796,9 @@ export function registerAgentsCommand(program) {
                 process.exit(1);
             }
             const token = (await resolveVaultCredential()).token;
+            if (opts.model !== undefined) {
+                await validateAgentModelOption(token, opts.provider?.trim().toLowerCase(), opts.model);
+            }
             const result = await patchAgentRuntimeConfig(token, agentUid, patch);
             if (opts.json) {
                 process.stdout.write(JSON.stringify(result, null, 2) + "\n");

package/dist/commands/lanes.js

@@ -21,7 +21,7 @@ import { createOutpostHireGrantContext, parseOutpostHireGrantContext, sameHireGr
 import { OUTPOST_DIR, OUTPOST_ID_PATH, readOutpostIdentity, resolveAdmissionHost, } from "../lib/lanes/admission-host.js";
 export { OUTPOST_DIR, OUTPOST_ID_PATH, readOutpostIdentity } from "../lib/lanes/admission-host.js";
 export { LANE_HIRE_GRANTS_FLAG };
-import { buildOutpostCapacityCommand, buildOutpostBalanceMoveCommand, buildOutpostIdentityBackfillCommand, buildOutpostLaneCommand, buildOutpostMoveTargetCommand, buildOutpostPickupCommand, createOutpostsClient, dispatchErrorMessage, dispatchOutpostPickup, buildOutpostLaneListCommand, outpostRejectedEffortOption, parseOutpostPickupPayload, stageOutpostPayload, } from "../lib/lanes/outpost-dispatch.js";
+import { buildOutpostCapacityCommand, buildOutpostBalanceMoveCommand, buildOutpostIdentityBackfillCommand, buildOutpostLaneCommand, buildOutpostMoveTargetCommand, buildOutpostQuestionAnswerCommand, buildOutpostPickupCommand, createOutpostsClient, dispatchErrorMessage, dispatchOutpostPickup, buildOutpostLaneListCommand, outpostRejectedEffortOption, parseOutpostPickupPayload, stageOutpostPayload, } from "../lib/lanes/outpost-dispatch.js";
 import { buildHostCapacitySnapshot, chooseHostForLane, parseHostCapacitySnapshot, } from "../lib/lanes/host-capacity.js";
 import { BALANCE_MOVABLE_STATES, CLAUDE_ACCOUNT_BALANCE_FLAG, accountLoadsForReport, assertBalanceApplyEnabled, planClaudeBalanceMoves, selectClaudeAccount, } from "../lib/lanes/claude-account-balance.js";
 import { parseUserYaml } from "../utils/user-yaml-error.js";
@@ -30,7 +30,7 @@ import { vaultApiFetch } from "../utils/vault-api.js";
 import { openMeshTransport } from "../lib/mesh/client.js";
 import { createLaneMesh, emitLaneDecisionEvents, emitLaneTerminalStateEvent, laneMeshEventIdentity, } from "../lib/lanes/mesh-events.js";
 import { sessionIdFromEnv } from "../lib/mesh/live/session-identity.js";
-import { AccountResolutionError, compareLaneQueueOrder, coveredLaneIds, DEFAULT_ACCOUNT_HOMES, LANE_PROVIDERS, LANE_STATES, PROVIDER_HOME_ENV, QUESTION_STATUSES, SENIOR_KINDS, accountStatus, appendCappedHistory, canonicalizeHome, createLane, decideAdmission, defaultLivenessDeps, defaultSystemdUserDir, defaultThrottleDeps, installDrainHook, installReconcileTimer, providerPathEnv, probeDrainHookRegistration, isLanesError, isLaneVersionConflict, isTerminalLaneState, aliveDirectChildren, assignedChildHireGrants, LANE_HIRE_GRANTS_FLAG, planHireGrantBackfill, withHireGrantAdmission, laneStoryLedgerEnabled, validateProjectStories, buildLaneStatusSnapshot, formatLaneStatusHuman, listAccountStatuses, listLaneIds, listQuestionIds, listSessionLiveness, loadLanesConfig, laneRunsHere, MAX_LANE_DEPTH, MONITOR_ERROR_EXIT_CODE, MONITOR_ENGINES, MONITOR_MAX_TIMEOUT_MS, MONITOR_UNCOVERED_EXIT_CODE, MAX_WATCHED_LANES, monitorReminderText, readLiveMonitorEvidence, resolveMachineIdentity as lookupMachineIdentity, loadLivenessIndex, parseLaneProvider, parseLaneRecord, parseLaneState, parseLivenessState, parseQuestionStatus, parseSeniorKind, readDaemonPresenceConnected, readLane, retryUpdateLane, syncLaneRecordFromOwner, readQuestion, resolveAccount, resolveLaneWorker, ignoredWorkerProfileFields, loadWorkerProfile, runReconcilePass, runLaneWatch, sessionLiveness, tryReadLane, uninstallReconcileTimer, updateLane, updateQuestion, writeLanesConfig, appendDropboxMessage, answerDropboxMessage, deliveryRefusalReason, resumeCommandRefusal, dropboxDir, dropboxInboxPath, laneAcceptsDropboxDelivery, laneAcceptsOperatorMessage, laneDeliveryMechanism, hasActiveAdmissionReservation, hasActivePendingResume, hasRecordedSessionId, hasEarlierEligibleQueuedLane, laneAdmissionCapReason, providerSupportsSessionResume, withLaneAdmissionLock, withLaneHireLocks, laneIdForAnswerDelivery, operatorMessageRefusalReason, raiseLaneQuestion, sha256Text, writeQuestionBody, } from "../lib/lanes/index.js";
+import { AccountResolutionError, compareLaneQueueOrder, coveredLaneIds, DEFAULT_ACCOUNT_HOMES, LANE_PROVIDERS, LANE_STATES, PROVIDER_HOME_ENV, QUESTION_STATUSES, SENIOR_KINDS, accountStatus, appendCappedHistory, canonicalizeHome, createLane, decideAdmission, defaultLivenessDeps, defaultSystemdUserDir, defaultThrottleDeps, installDrainHook, installReconcileTimer, providerPathEnv, probeDrainHookRegistration, isLanesError, isLaneVersionConflict, isTerminalLaneState, aliveDirectChildren, assignedChildHireGrants, LANE_HIRE_GRANTS_FLAG, planHireGrantBackfill, withHireGrantAdmission, laneStoryLedgerEnabled, validateProjectStories, buildLaneStatusSnapshot, formatLaneStatusHuman, listAccountStatuses, listLaneIds, listQuestionIds, listSessionLiveness, loadLanesConfig, laneRunsHere, MAX_LANE_DEPTH, MONITOR_ERROR_EXIT_CODE, MONITOR_ENGINES, MONITOR_MAX_TIMEOUT_MS, MONITOR_UNCOVERED_EXIT_CODE, MAX_WATCHED_LANES, monitorReminderText, readLiveMonitorEvidence, resolveMachineIdentity as lookupMachineIdentity, loadLivenessIndex, parseLaneProvider, parseLaneRecord, parseLaneState, parseLivenessState, parseQuestionRecord, parseQuestionStatus, parseSeniorKind, readDaemonPresenceConnected, readLane, retryUpdateLane, syncLaneRecordFromOwner, readQuestion, resolveAccount, resolveLaneWorker, ignoredWorkerProfileFields, loadWorkerProfile, runReconcilePass, wakeAnsweredLaneNow, runLaneWatch, sessionLiveness, tryReadLane, uninstallReconcileTimer, updateLane, updateQuestion, writeLanesConfig, appendDropboxMessage, answerDropboxMessage, deliveryRefusalReason, resumeCommandRefusal, dropboxDir, dropboxInboxPath, laneAcceptsDropboxDelivery, laneAcceptsOperatorMessage, laneDeliveryMechanism, hasActiveAdmissionReservation, hasActivePendingResume, hasRecordedSessionId, hasEarlierEligibleQueuedLane, laneAdmissionCapReason, providerSupportsSessionResume, withLaneAdmissionLock, withLaneHireLocks, laneIdForAnswerDelivery, operatorMessageRefusalReason, raiseLaneQuestion, sha256Text, writeQuestionBody, } from "../lib/lanes/index.js";
 import { activeLaneStories, laneStories, laneStory, storyWarning, } from "../lib/lanes/stories.js";
 import { questionBodyAbsPath } from "../lib/lanes/questions.js";
 import { compactionAfterUsage, } from "../lib/lanes/compaction.js";
@@ -3208,6 +3208,139 @@ async function dispatchOutpostLaneCommand(ctx, lane, action, options) {
         outpost_transport: "outposts_exec",
     });
 }
+async function dispatchOutpostQuestionAnswer(ctx, lane, questionId, options) {
+    if (lane.host.kind !== "outpost") {
+        throw new LanesError("outpost_dispatch_failed", `Lane ${lane.lane_id} has no Outpost host to answer its question`, { lane_id: lane.lane_id, question_id: questionId });
+    }
+    const outpostId = lane.host.id;
+    let dispatched;
+    try {
+        dispatched = await ctx.dispatchOutpostExec({
+            outpostId,
+            command: buildOutpostQuestionAnswerCommand({
+                questionId,
+                choice: options.choice,
+                freeform: options.freeform,
+                notes: options.notes,
+            }),
+        });
+    }
+    catch (err) {
+        throw new LanesError("outpost_dispatch_failed", `Could not dispatch question ${questionId} to Outpost ${outpostId}: ${dispatchErrorMessage(err)}`, { lane_id: lane.lane_id, question_id: questionId, outpost_id: outpostId });
+    }
+    if (dispatched.done !== true || dispatched.status !== "Success" || dispatched.exitCode !== 0) {
+        throw new LanesError("outpost_dispatch_failed", `Outpost ${outpostId} did not confirm the answer for question ${questionId}`, {
+            lane_id: lane.lane_id,
+            question_id: questionId,
+            outpost_id: outpostId,
+            command_id: dispatched.commandId,
+            status: dispatched.status,
+            done: dispatched.done ?? false,
+            exit_code: dispatched.exitCode,
+        });
+    }
+    const remote = parseRemoteJson(dispatched.stdout, "Outpost question answer");
+    if (remote?.error !== undefined) {
+        throw new LanesError("outpost_remote_command_failed", typeof remote.message === "string"
+            ? remote.message
+            : `Outpost ${outpostId} rejected the answer for question ${questionId}`, {
+            lane_id: lane.lane_id,
+            question_id: questionId,
+            outpost_id: outpostId,
+            command_id: dispatched.commandId,
+            remote_error: remote.error,
+        });
+    }
+    const remoteQuestion = remote?.question !== null && typeof remote?.question === "object"
+        ? remote.question
+        : null;
+    const awaitingWakeConfirmed = lane.state !== "awaiting_input" ||
+        (remote?.wake_status === "resumed" && remote.lane_state === "running") ||
+        (remote?.wake_status === "queued" && remote.lane_state === "queued") ||
+        (remote?.wake_status === "awaiting_answers" && remote.lane_state === "awaiting_input");
+    if (remote?.ok !== true ||
+        remote.action !== "questions.answer" ||
+        remoteQuestion?.question_id !== questionId ||
+        remoteQuestion.lane_id !== lane.lane_id ||
+        remoteQuestion.status !== "answered" ||
+        typeof remote.delivery !== "string" ||
+        !awaitingWakeConfirmed) {
+        throw new LanesError("outpost_delivery_unconfirmed", `Outpost ${outpostId} completed exec without confirming the answer and wake status for question ${questionId}`, {
+            lane_id: lane.lane_id,
+            question_id: questionId,
+            outpost_id: outpostId,
+            command_id: dispatched.commandId,
+        });
+    }
+    let ownerQuestion;
+    try {
+        ownerQuestion = parseQuestionRecord(remoteQuestion);
+    }
+    catch (err) {
+        throw new LanesError("outpost_delivery_unconfirmed", `Outpost ${outpostId} did not return a valid answered question record for ${questionId}: ${dispatchErrorMessage(err)}`, {
+            lane_id: lane.lane_id,
+            question_id: questionId,
+            outpost_id: outpostId,
+            command_id: dispatched.commandId,
+        });
+    }
+    const ownerAnswer = ownerQuestion.answer;
+    if (!isQuestionAnswer(ownerAnswer)) {
+        throw new LanesError("outpost_delivery_unconfirmed", `Outpost ${outpostId} did not return the confirmed answer for question ${questionId}`, {
+            lane_id: lane.lane_id,
+            question_id: questionId,
+            outpost_id: outpostId,
+            command_id: dispatched.commandId,
+        });
+    }
+    const syncedQuestion = casUpdateQuestion(ctx.hqRoot(), questionId, (current) => {
+        if (current.lane_id !== lane.lane_id) {
+            throw new LanesError("outpost_question_sync_conflict", `Primary question ${questionId} belongs to a different lane than Outpost ${outpostId} confirmed`, { lane_id: lane.lane_id, question_id: questionId, outpost_id: outpostId });
+        }
+        if (current.status === "pending") {
+            return { ...current, status: "answered", answer: ownerAnswer };
+        }
+        if (current.status === "answered" && sameQuestionAnswer(current.answer, ownerAnswer)) {
+            return current;
+        }
+        throw new LanesError("outpost_question_sync_conflict", `Primary question ${questionId} is ${current.status} or has a different answer than Outpost ${outpostId} confirmed`, { lane_id: lane.lane_id, question_id: questionId, outpost_id: outpostId });
+    });
+    printJson({
+        ...remote,
+        lane_id: lane.lane_id,
+        question: syncedQuestion,
+        outpost_id: outpostId,
+        outpost_command_id: dispatched.commandId,
+        outpost_transport: "outposts_exec",
+    });
+}
+function isQuestionAnswer(value) {
+    if (value === null || typeof value !== "object")
+        return false;
+    const answer = value;
+    return (typeof answer.choice === "string" &&
+        answer.choice.trim() !== "" &&
+        (answer.answer_kind === undefined ||
+            answer.answer_kind === "option" ||
+            answer.answer_kind === "freeform") &&
+        (answer.notes_ref === undefined || typeof answer.notes_ref === "string") &&
+        typeof answer.answered_by === "string" &&
+        answer.answered_by.trim() !== "" &&
+        typeof answer.answered_at === "string" &&
+        Number.isFinite(Date.parse(answer.answered_at)) &&
+        typeof answer.answered_level === "number" &&
+        Number.isInteger(answer.answered_level) &&
+        answer.answered_level > 0);
+}
+function sameQuestionAnswer(left, right) {
+    return (left !== undefined &&
+        left.choice === right.choice &&
+        left.answer_kind === right.answer_kind &&
+        left.notes_ref === right.notes_ref &&
+        left.answered_by === right.answered_by &&
+        left.answered_at === right.answered_at &&
+        left.answered_level === right.answered_level);
+}
 function ingestPickupPayload(hqRoot, payload, now) {
     const laneId = payload.lane.lane_id;
     if (!laneId) {
@@ -6464,9 +6597,16 @@ async function runQuestionsShow(ctx, questionId) {
 async function runQuestionsAnswer(ctx, questionId, opts) {
     const hqRoot = ctx.hqRoot();
     const question = readQuestion(hqRoot, questionId);
-    throwIfQuestionNotPending(question);
     await yieldEventLoop();
     const askingLane = readLane(hqRoot, laneIdForAnswerDelivery(question));
+    if (askingLane.host.kind === "outpost" && !laneIsHostedHere(ctx, askingLane)) {
+        await dispatchOutpostQuestionAnswer(ctx, askingLane, questionId, opts);
+        return;
+    }
+    throwIfQuestionNotPending(question);
+    if (askingLane.state === "awaiting_input") {
+        assertLaneRunsHereForOperatorMutation(ctx, askingLane, "wake after answering");
+    }
     if (laneAcceptsDropboxDelivery(askingLane)) {
         assertLaneRunsHereForOperatorMutation(ctx, askingLane, "deliver an answer to");
     }
@@ -6511,6 +6651,53 @@ async function runQuestionsAnswer(ctx, questionId, opts) {
             },
         };
     });
+    const latestAskingLane = readLane(hqRoot, askingLane.lane_id);
+    if (latestAskingLane.state === "awaiting_input") {
+        let wake;
+        try {
+            wake = await wakeAnsweredLaneNow(hqRoot, askingLane.lane_id, {
+                now: ctx.now,
+                host: reconcileHostFromCtx(ctx),
+                dryRun: false,
+                spawnLaneDeps: {
+                    env: ctx.env,
+                    existsSync: ctx.existsSync,
+                    spawnProcess: ctx.spawnProcess,
+                    proveDetached: ctx.proveDetached,
+                    killProcess: ctx.killProcess,
+                    now: ctx.now,
+                    resolveMachineIdentity: ctx.resolveMachineIdentity,
+                    runCompaction: ctx.runCompaction,
+                    locateTranscript: ctx.locateTranscript,
+                },
+                throttleDeps: ctx.throttleDeps,
+                livenessDeps: livenessDepsFromCtx(ctx),
+                presenceConnected: ctx.presenceConnected,
+                mesh: ctx.mesh,
+                env: ctx.env,
+            });
+        }
+        catch (err) {
+            throw new LanesError("question_wake_failed", `Question ${questionId} was recorded, but lane ${askingLane.lane_id} could not be woken: ${dispatchErrorMessage(err)}`, { lane_id: askingLane.lane_id, question_id: questionId });
+        }
+        if (wake.status === "failed") {
+            throw new LanesError("question_wake_failed", `Question ${questionId} was recorded, but lane ${askingLane.lane_id} could not be woken: ${wake.error}`, { lane_id: askingLane.lane_id, question_id: questionId, wake_error: wake.error });
+        }
+        printJson({
+            ok: true,
+            action: "questions.answer",
+            lane_id: askingLane.lane_id,
+            question: updated,
+            delivery: wake.status === "awaiting_answers" ? "awaiting_other_answers" : wake.status,
+            wake_status: wake.status,
+            lane_state: wake.lane_state,
+            ...(wake.queued_reason !== undefined ? { queued_reason: wake.queued_reason } : {}),
+            ...(wake.remaining_question_ids !== undefined
+                ? { remaining_question_ids: wake.remaining_question_ids }
+                : {}),
+        });
+        return;
+    }
     const delivery = deliverAnswerToAskingLane(ctx, updated, choice, at);
     printJson({
         ok: true,

package/dist/commands/report.js

@@ -9,6 +9,7 @@ import { adoptReport, buildReportTarball, conventionReportDir, deployOrgContext,
 const DEPLOY_API_URL = process.env.HQ_DEPLOY_API_URL ?? "https://api.indigo-hq.com";
 const REPORT_CHANNEL_STATE_FILE = "report-channels.json";
 const MAX_REPORT_DISCOVERY_CHANNELS = 50;
+const JOB_EXECUTION_DISABLED_MESSAGE = "Scheduled jobs are turned off for this company. A company owner can turn them back on.";
 function reportPath(channelId, reportId) {
     return `/v1/notify/channels/${encodeURIComponent(channelId)}/reports/${encodeURIComponent(reportId)}`;
 }
@@ -414,10 +415,39 @@ async function cancelOwnedJob(token, agentUid, jobId) {
     if (!res.ok && res.status !== 404)
         throw new ReportPublishError("Could not remove the report job.");
 }
+async function requireScheduledJobsEnabled(token, agentUid) {
+    let executionEnabled;
+    try {
+        const res = await vaultApiFetch({
+            token,
+            path: `/v1/agents/${encodeURIComponent(agentUid)}/jobs`,
+            method: "GET",
+        });
+        if (!res.ok) {
+            console.debug("Scheduled job preflight was unavailable; proceeding with job creation.", { status: res.status });
+            return;
+        }
+        const body = await res.json();
+        if (body && typeof body === "object" && !Array.isArray(body)) {
+            executionEnabled = body.executionEnabled;
+        }
+    }
+    catch (error) {
+        console.debug("Scheduled job preflight failed; proceeding with job creation.", error);
+        return;
+    }
+    if (executionEnabled === false) {
+        throw new ReportPublishError(JOB_EXECUTION_DISABLED_MESSAGE, "job-execution-disabled");
+    }
+    if (executionEnabled !== true) {
+        console.debug("Scheduled job preflight did not return a boolean executionEnabled; proceeding with job creation.");
+    }
+}
 async function adoptAction(reportId, options) {
     const token = await ensureCognitoToken();
     const report = await resolveReport(token, reportId, options.channel);
     const updated = await adoptReport(report, {
+        preflightJobCreation: () => requireScheduledJobsEnabled(token, report.ownerAgentUid),
         cancelJob: (jobId) => cancelOwnedJob(token, report.ownerAgentUid, jobId),
         createJob: async (input) => {
             const res = await vaultApiFetch({
@@ -426,8 +456,21 @@ async function adoptAction(reportId, options) {
                 method: "POST",
                 body: input,
             });
-            if (!res.ok)
+            if (!res.ok) {
+                if (res.status === 409) {
+                    let rejection;
+                    try {
+                        rejection = await res.json();
+                    }
+                    catch {
+                        // A non-JSON conflict response is still the generic install failure.
+                    }
+                    if (rejection?.code === "JOB_EXECUTION_DISABLED") {
+                        throw new ReportPublishError(JOB_EXECUTION_DISABLED_MESSAGE, "job-execution-disabled");
+                    }
+                }
                 throw new ReportPublishError("Could not install the report job.");
+            }
             const body = await res.json();
             const jobId = body.job?.jobId ?? body.jobId;
             if (!jobId)