@indigoai-us/hq-cli 5.284.0 → 5.285.0

package/CHANGELOG.md

@@ -2,8 +2,11 @@
 
 ## [Unreleased]
 
+## [5.285.0] — 2026-09-29
+
 ## [5.284.0] — 2026-09-29
 - The existing Work Mesh MQTT subscriber can signal agent inbox wakes through a private local marker without persisting MQTT message contents.
+- Add `hq agents jobs resume <uid> <jobId>` to re-enable paused agent job schedules.
 
 ### Fixed
 
@@ -12,6 +15,13 @@
   each held a lane placed on the other ran `hq lanes list --json` on each other
   without end, which filled both boxes with SSM commands.
 
+### Fixed
+
+- Refresh remote lane mirrors on hosts with an Outpost identity, while excluding
+  mirrors owned by that host. Resolve company attribution before checking the
+  mirror gate for refreshes and remote logs; unresolved lanes stay local.
+  Remote-read invocations skip refresh to prevent reciprocal Outpost fan-out.
+
 ## [5.283.0] — 2026-09-29
 
 ### Added

package/dist/command-catalog.generated.d.ts

@@ -4257,7 +4257,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "jobs";
-        readonly description: "List, pause, or cancel an agent's scheduled jobs";
+        readonly description: "List, pause, resume, or cancel an agent's scheduled jobs";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly usage: "[options] [command]";
@@ -4302,6 +4302,26 @@ export declare const COMMAND_CATALOG: readonly [{
                 readonly description: "Company slug (to resolve an agent by name/slug)";
             }];
             readonly subcommands: readonly [];
+        }, {
+            readonly name: "resume";
+            readonly description: "Resume a paused job's schedule";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <agentUid> <jobId>";
+            readonly arguments: readonly [{
+                readonly name: "agentUid";
+                readonly required: true;
+                readonly variadic: false;
+            }, {
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company slug (to resolve an agent by name/slug)";
+            }];
+            readonly subcommands: readonly [];
         }, {
             readonly name: "cancel";
             readonly description: "Cancel a job and delete its schedule";

package/dist/command-catalog.generated.js

@@ -5512,7 +5512,7 @@ export const COMMAND_CATALOG = [
             },
             {
                 "name": "jobs",
-                "description": "List, pause, or cancel an agent's scheduled jobs",
+                "description": "List, pause, resume, or cancel an agent's scheduled jobs",
                 "aliases": [],
                 "hidden": false,
                 "usage": "[options] [command]",
@@ -5570,6 +5570,32 @@ export const COMMAND_CATALOG = [
                         ],
                         "subcommands": []
                     },
+                    {
+                        "name": "resume",
+                        "description": "Resume a paused job's schedule",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <agentUid> <jobId>",
+                        "arguments": [
+                            {
+                                "name": "agentUid",
+                                "required": true,
+                                "variadic": false
+                            },
+                            {
+                                "name": "jobId",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--company <slug>",
+                                "description": "Company slug (to resolve an agent by name/slug)"
+                            }
+                        ],
+                        "subcommands": []
+                    },
                     {
                         "name": "cancel",
                         "description": "Cancel a job and delete its schedule",

package/dist/commands/agents.d.ts

@@ -19,6 +19,7 @@
  *   hq agents revoke <uid> --yes   — revoke an external agent (--remove deletes it)
  *   hq agents jobs list <uid>      — off-box job roster (schedule + rate)
  *   hq agents jobs pause <uid> <jobId>  — flip schedule State=DISABLED
+ *   hq agents jobs resume <uid> <jobId> — flip schedule State=ENABLED
  *   hq agents jobs cancel <uid> <jobId> — delete schedule + drop the job
  *
  * Agents are company-scoped. `--company <slug>` may sit on the group
@@ -320,12 +321,20 @@ export interface PauseJobResult {
     changed: boolean;
     previousState?: string;
 }
+export interface ResumeJobResult {
+    ok: true;
+    jobId: string;
+    scheduleState: "ENABLED" | string;
+    changed: boolean;
+    previousState?: string;
+}
 export interface CancelJobResult {
     ok: true;
     jobId: string;
 }
 export declare function listAgentJobs(token: string, agentUid: string): Promise<AgentJobView[]>;
 export declare function pauseAgentJob(token: string, agentUid: string, jobId: string): Promise<PauseJobResult>;
+export declare function resumeAgentJob(token: string, agentUid: string, jobId: string): Promise<ResumeJobResult>;
 export declare function cancelAgentJob(token: string, agentUid: string, jobId: string): Promise<CancelJobResult>;
 /**
  * Map a jobs-control HTTP error to a single operator-facing line. Pure so the
@@ -336,10 +345,11 @@ export declare function cancelAgentJob(token: string, agentUid: string, jobId: s
  * the agent is cross-company) must print a clear message and exit non-zero,
  * never throw a stack trace.
  */
-export declare function formatJobsHttpError(err: AgentsHttpError, jobId?: string): string;
+export declare function formatJobsHttpError(err: AgentsHttpError, jobId?: string, action?: "resume"): string;
 /** Stable padEnd table: jobId, scheduleState, rate, lastRunOutcome, status. */
 export declare function formatJobsTable(jobs: AgentJobView[]): string;
 export declare function formatPauseResult(result: PauseJobResult): string;
+export declare function formatResumeResult(result: ResumeJobResult): string;
 /** Human-readable "hot-applied to the running box" vs "saved for next launch". */
 export declare function appliedHint(applied: boolean): string;
 /** Stable human table shared by the all-provider and provider-filtered forms. */

package/dist/commands/agents.js

@@ -19,6 +19,7 @@
  *   hq agents revoke <uid> --yes   — revoke an external agent (--remove deletes it)
  *   hq agents jobs list <uid>      — off-box job roster (schedule + rate)
  *   hq agents jobs pause <uid> <jobId>  — flip schedule State=DISABLED
+ *   hq agents jobs resume <uid> <jobId> — flip schedule State=ENABLED
  *   hq agents jobs cancel <uid> <jobId> — delete schedule + drop the job
  *
  * Agents are company-scoped. `--company <slug>` may sit on the group
@@ -790,6 +791,13 @@ export async function pauseAgentJob(token, agentUid, jobId) {
         method: "POST",
     });
 }
+export async function resumeAgentJob(token, agentUid, jobId) {
+    return agentsRequest({
+        token,
+        path: `/v1/agents/${encodeURIComponent(agentUid)}/jobs/${encodeURIComponent(jobId)}/resume`,
+        method: "POST",
+    });
+}
 export async function cancelAgentJob(token, agentUid, jobId) {
     return agentsRequest({
         token,
@@ -806,7 +814,7 @@ export async function cancelAgentJob(token, agentUid, jobId) {
  * the agent is cross-company) must print a clear message and exit non-zero,
  * never throw a stack trace.
  */
-export function formatJobsHttpError(err, jobId) {
+export function formatJobsHttpError(err, jobId, action) {
     if (err.status === 401)
         return "Not authenticated — run `hq login`.";
     // A 403 CROSS_AGENT_JOB is hq-pro's self-only jobs guard, not a role problem:
@@ -816,12 +824,17 @@ export function formatJobsHttpError(err, jobId) {
     // closed locally before the request, see crossAgentJobsRefusal).
     if (err.status === 403 && err.code === "CROSS_AGENT_JOB") {
         return ("Jobs are scoped to the calling agent's own identity — an agent may only " +
-            "list, pause, or cancel its OWN jobs (use the on-box `hq-agent-jobs` tool). " +
+            "list, pause, resume, or cancel its OWN jobs (use the on-box `hq-agent-jobs` tool). " +
             "Managing another agent's jobs needs a person session with owner/admin on " +
             "the company.");
     }
     if (err.status === 403)
         return "You need owner/admin on this company.";
+    if (action === "resume" &&
+        err.status === 404 &&
+        (err.code === "JOB_NOT_FOUND" || err.code === "SCHEDULE_NOT_FOUND")) {
+        return "job not found or its schedule was deleted; it cannot be resumed";
+    }
     if (err.status === 404 && err.code === "JOB_NOT_FOUND") {
         const id = jobId ?? extractQuotedJobId(err.message) ?? "unknown";
         return `Job '${id}' not found.`;
@@ -860,6 +873,12 @@ export function formatPauseResult(result) {
     const from = result.previousState ?? "ENABLED";
     return `Paused ${result.jobId} (${from} → ${result.scheduleState})`;
 }
+export function formatResumeResult(result) {
+    if (!result.changed)
+        return "Already active";
+    const from = result.previousState ?? "DISABLED";
+    return `Resumed ${result.jobId} (${from} → ${result.scheduleState})`;
+}
 /** Human-readable "hot-applied to the running box" vs "saved for next launch". */
 export function appliedHint(applied) {
     return applied
@@ -1119,9 +1138,9 @@ function fail(err) {
     }
     process.exit(1);
 }
-function failJobs(err, jobId) {
+function failJobs(err, jobId, action) {
     if (err instanceof AgentsHttpError) {
-        console.error(chalk.red(formatJobsHttpError(err, jobId)));
+        console.error(chalk.red(formatJobsHttpError(err, jobId, action)));
         process.exit(1);
     }
     fail(err);
@@ -1922,11 +1941,11 @@ export function registerAgentsCommand(program) {
         }
     });
     // Off-box job control (US-003). Nested group so `hq agents jobs --help`
-    // lists list|pause|cancel. Same vaultApiFetch + person JWT as the rest of
+    // lists list|pause|resume|cancel. Same vaultApiFetch + person JWT as the rest of
     // this file; keyed HQ_API_KEY rewrites /v1/agents → /v1/keys/agents.
     const jobs = agents
         .command("jobs")
-        .description("List, pause, or cancel an agent's scheduled jobs");
+        .description("List, pause, resume, or cancel an agent's scheduled jobs");
     jobs
         .command("list <agentUid>")
         .description("List an agent's scheduled jobs")
@@ -1964,6 +1983,20 @@ export function registerAgentsCommand(program) {
             failJobs(err, jobId);
         }
     });
+    jobs
+        .command("resume <agentUid> <jobId>")
+        .description("Resume a paused job's schedule")
+        .option("--company <slug>", "Company slug (to resolve an agent by name/slug)")
+        .action(async function (agentUid, jobId) {
+        const { token, targetUid } = await resolveJobsTargetOrExit(agentUid, companyOf(this));
+        try {
+            const result = await resumeAgentJob(token, targetUid, jobId);
+            console.log(chalk.green(formatResumeResult(result)));
+        }
+        catch (err) {
+            failJobs(err, jobId, "resume");
+        }
+    });
     jobs
         .command("cancel <agentUid> <jobId>")
         .description("Cancel a job and delete its schedule")

package/dist/commands/lanes.js

@@ -1238,17 +1238,17 @@ async function readOutpostLaneRecords(ctx, outpostId, requestedQuery = {}, dispa
     }
     return invocationMemo.getOrCreate(outpostId, query, () => readOutpostSnapshotWithCache(ctx, outpostLaneListSnapshotKey(outpostId, query), isLaneRecordArray, () => readOutpostLaneRecordsUncached(ctx, outpostId, query, dispatchOptions)));
 }
-/** Refresh only primary-created, non-terminal Outpost mirrors in one bounded owner query per Outpost. */
+/** Refresh only this host's non-terminal Outpost mirrors in one bounded owner query per Outpost. */
 async function refreshRemoteLaneMirrors(ctx, hqRoot, records, parentLaneIds) {
     const result = {
         updated: new Map(),
         unverifiedRemote: new Map(),
     };
     const host = reconcileHostFromCtx(ctx);
-    if (host.outpostId !== null || parentLaneIds?.size === 0)
+    if (ctx.env.HQ_LANES_REMOTE_READ === "1" || parentLaneIds?.size === 0)
         return result;
     let primaryIdentity;
-    const originMatchesThisPrimary = (lane) => {
+    const originMatchesThisHost = (lane) => {
         if (lane.origin_host_source !== "imds") {
             return lane.origin_host === host.hostname;
         }
@@ -1261,7 +1261,8 @@ async function refreshRemoteLaneMirrors(ctx, hqRoot, records, parentLaneIds) {
     };
     const candidates = records
         .filter((lane) => lane.host.kind === "outpost" &&
-        originMatchesThisPrimary(lane) &&
+        (host.outpostId === null || lane.host.id !== host.outpostId) &&
+        originMatchesThisHost(lane) &&
         (parentLaneIds === undefined || (lane.senior.kind === "lane" &&
             lane.senior.id !== undefined &&
             parentLaneIds.has(lane.senior.id))) &&
@@ -1272,11 +1273,14 @@ async function refreshRemoteLaneMirrors(ctx, hqRoot, records, parentLaneIds) {
     const enabledByCompany = new Map();
     const enabledCandidates = [];
     for (const lane of candidates) {
-        const companyKey = JSON.stringify([lane.company?.uid ?? null, lane.company?.slug ?? null]);
+        const company = resolveLaneCompany(hqRoot, lane).company;
+        if (company === null)
+            continue;
+        const companyKey = JSON.stringify([company.uid, company.slug]);
         let enabled = enabledByCompany.get(companyKey);
         if (enabled === undefined) {
             enabled = await readLanesRegistryFlag(LANE_REMOTE_MIRROR_SYNC_FLAG, {
-                company: lane.company,
+                company,
                 env: ctx.env,
             });
             enabledByCompany.set(companyKey, enabled);
@@ -1346,7 +1350,7 @@ async function refreshRemoteLaneMirrors(ctx, hqRoot, records, parentLaneIds) {
                 : undefined;
             const before = readLane(hqRoot, mirror.lane_id);
             if (before.host.kind !== "outpost" || before.host.id !== outpostId ||
-                !originMatchesThisPrimary(before) || isTerminalLaneState(before.state)) {
+                !originMatchesThisHost(before) || isTerminalLaneState(before.state)) {
                 result.updated.set(mirror.lane_id, before);
                 continue;
             }
@@ -1365,7 +1369,7 @@ async function refreshRemoteLaneMirrors(ctx, hqRoot, records, parentLaneIds) {
             }
             const updated = retryUpdateLane(hqRoot, mirror.lane_id, "reconcile", (current) => {
                 if (current.host.kind !== "outpost" || current.host.id !== outpostId ||
-                    !originMatchesThisPrimary(current) || isTerminalLaneState(current.state))
+                    !originMatchesThisHost(current) || isTerminalLaneState(current.state))
                     return current;
                 return {
                     ...current,
@@ -6805,14 +6809,18 @@ const CANONICAL_LOG_STREAMS = [
 async function runLogs(ctx, laneId, opts) {
     const hqRoot = ctx.hqRoot();
     const lane = readLane(hqRoot, laneId);
+    const remoteMirrorCompany = lane.host.kind === "outpost"
+        ? resolveLaneCompany(hqRoot, lane).company
+        : null;
     const tail = parseOptionalInt(opts.tail, "--tail");
     if (tail === 0) {
         throw new LanesError("invalid_integer", "--tail must be a positive integer", { flag: "--tail", value: opts.tail });
     }
     if (lane.host.kind === "outpost" &&
         !laneRunsHere(lane, reconcileHostFromCtx(ctx)) &&
+        remoteMirrorCompany !== null &&
         await readLanesRegistryFlag(LANE_REMOTE_MIRROR_SYNC_FLAG, {
-            company: lane.company,
+            company: remoteMirrorCompany,
             env: ctx.env,
         })) {
         const outpostId = lane.host.id;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.284.0",
+  "version": "5.285.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {