@indigoai-us/hq-cli 5.312.2-beta.0 → 5.314.0

package/dist/commands/billing-sponsor.js

@@ -1,344 +0,0 @@
-/**
- * `hq billing sponsor` — the individual-pull half of plan sponsorship, from the
- * terminal ("ask a company to sponsor me", hq-pro #3609).
- *
- * A person who is over a personal limit has exactly three ways out: pay $50
- * themselves, reduce what they store, or ask a company to cover the $50 plan
- * line. This command is the third one, plus the admin side that answers it.
- *
- *   hq billing sponsor request <company>   — ask that company to cover my plan
- *   hq billing sponsor list                — the queue (admins), or my own
- *                                            single status (everyone else)
- *   hq billing sponsor approve <id>        — admin: say yes
- *   hq billing sponsor decline <id>        — admin: say no
- *   hq billing sponsor revoke  <id>        — admin: end an active sponsorship
- *   hq billing sponsor withdraw <id>       — me: take back my own request
- *
- * Every subcommand talks to the SAME hq-pro routes the console uses
- * (`/v1/billing/sponsorship/...`). hq-pro is the authoritative gate on all of
- * them: it resolves the caller's person id and the company's admin set
- * server-side, so nothing here is trusted from the client.
- *
- * FEATURE SWITCH. The `plan` request kind only exists while hq-pro's
- * `PLAN_SPONSORSHIP_REQUESTS_ENABLED` switch is on. With the switch off the
- * backend does not recognise `plan` and answers 400 `MISSING_FIELDS` — which
- * would read as "you typed something wrong". We translate that one case into a
- * plain "not available yet" line so a person never sees a validation error for
- * a feature that simply is not turned on.
- */
-import chalk from "chalk";
-import { ensureCognitoToken } from "../utils/cognito-session.js";
-import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
-/** The request kind this command files. Matches hq-pro's contract. */
-export const PLAN_RESOURCE = "plan";
-/** What a person is told when hq-pro's plan-sponsorship switch is off. */
-export const FEATURE_OFF_MESSAGE = "Asking a company to sponsor your plan isn't available yet.";
-/** What v1 sponsorship covers, stated wherever a person confirms or reads it. */
-export const COVERAGE_SENTENCE = "Your company pays your $50 plan. Storage above your plan's allowance is still yours.";
-/** What a person is told while an approval waits on the sponsor's card. */
-export const HELD_FOR_CARD_SENTENCE = "Your company said yes and is adding a card. Your limits still apply until then.";
-/**
- * An error we already have plain wording for. `expected` marks it as a normal
- * outcome (a decline, a rate limit) rather than a fault, matching the flag the
- * rest of the CLI uses to keep Sentry quiet.
- */
-class SponsorError extends Error {
-    expected = true;
-}
-function fail(err) {
-    console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
-    process.exit(1);
-}
-/**
- * Turn an hq-pro non-2xx into one plain sentence.
- *
- * The switch-off 400 is the important translation: with the feature off,
- * `plan` is an unrecognised resource kind and the generic body reads
- * "companyUid and resource ('outpost'|'agent') are required", which tells a
- * person nothing true about what happened.
- */
-export function messageForError(status, body) {
-    const code = body.code;
-    if (status === 400 && code === "MISSING_FIELDS")
-        return FEATURE_OFF_MESSAGE;
-    if (status === 401)
-        return "Your sign-in has expired. Run `hq login` and try again.";
-    if (status === 403 && code === "SPONSOR_PLAN_REQUIRED") {
-        return "That company's plan can't cover an individual plan. Only HQ Workforce and Enterprise companies can.";
-    }
-    if (status === 403) {
-        return "You're not allowed to do that. Only an owner or admin of the company can answer a sponsorship request.";
-    }
-    if (status === 404)
-        return "No sponsorship request with that id.";
-    if (status === 409 && code === "DUPLICATE_PENDING_REQUEST") {
-        return "You've already asked that company. They just need to answer.";
-    }
-    if (status === 429 && code === "PLAN_REQUEST_RATE_LIMITED") {
-        return "You asked that company in the last 24 hours. Give them a day before asking again.";
-    }
-    return body.error ?? body.message ?? `Request failed (${status}).`;
-}
-/** Call an hq-pro sponsorship route, or throw a sentence a person can read. */
-async function callApi(token, path, init = {}) {
-    const res = await vaultApiFetch({ token, path, ...init });
-    if (!res.ok) {
-        const body = (await res.json().catch(() => ({})));
-        throw new SponsorError(messageForError(res.status, body));
-    }
-    return (await res.json());
-}
-/**
- * Read the caller's OWN plan-sponsorship state for one company.
- *
- * Two non-2xx cases mean the same thing to a person and must NOT fall through
- * to {@link messageForError}: a 400 `MISSING_FIELDS` (hq-pro does not accept the
- * `plan` resource kind yet) and a 404 (an hq-pro that predates this route at
- * all). Both are "the feature is not on", never "no request with that id" —
- * there is no id in a list command for that sentence to be about.
- */
-async function readSelfState(token, companyUid) {
-    const res = await vaultApiFetch({
-        token,
-        path: "/v1/billing/sponsorship/mine",
-        query: { companyUid, resource: PLAN_RESOURCE },
-    });
-    if (!res.ok) {
-        const body = (await res.json().catch(() => ({})));
-        if (res.status === 404 || (res.status === 400 && body.code === "MISSING_FIELDS")) {
-            throw new SponsorError(FEATURE_OFF_MESSAGE);
-        }
-        throw new SponsorError(messageForError(res.status, body));
-    }
-    return (await res.json());
-}
-/** Plain label for a request status. Never shows the raw enum. */
-export function statusLabel(status) {
-    switch (status) {
-        case "pending":
-            return "Waiting for an answer";
-        case "pending-sponsor-billing":
-            return "Said yes — waiting on their card";
-        case "active":
-            return "Covered by the company";
-        case "declined":
-            return "Not covered";
-        case "expired":
-            return "Expired";
-        default:
-            return status;
-    }
-}
-/** One line per request, in the same column order everywhere. */
-function renderRow(r) {
-    const when = r.requestedAt.slice(0, 10);
-    return `  ${chalk.bold(r.requestId)}  ${statusLabel(r.status).padEnd(32)} asked ${when}`;
-}
-/** Only plan rows belong on this surface; outpost/agent have their own. */
-function planRowsOf(rows) {
-    return rows.filter((r) => r.resource === PLAN_RESOURCE);
-}
-/** Shared body of approve / decline / revoke / withdraw. */
-async function transition(requestId, op) {
-    const token = await ensureCognitoToken();
-    const data = await callApi(token, `/v1/billing/sponsorship/request/${op}`, {
-        method: "POST",
-        body: { requestId },
-    });
-    return { ...data.request, code: data.code, addCardUrl: data.addCardUrl };
-}
-export function registerBillingSponsorCommands(billing) {
-    const sponsor = billing
-        .command("sponsor")
-        .description("Ask a company to cover your $50 plan, or answer a request");
-    sponsor
-        .command("request")
-        .argument("<company>", "Company slug or uid to ask")
-        .description("Ask a company to cover your $50 HQ plan")
-        .option("--json", "Emit raw JSON")
-        .action(async function (company, opts) {
-        try {
-            const token = await ensureCognitoToken();
-            const companyUid = await getCompanyUid(token, company);
-            const data = await callApi(token, "/v1/billing/sponsorship/request", { method: "POST", body: { companyUid, resource: PLAN_RESOURCE } });
-            if (opts.json) {
-                process.stdout.write(JSON.stringify(data.request, null, 2) + "\n");
-                return;
-            }
-            console.log(`Asked ${company} to cover your $50 HQ plan.`);
-            console.log(COVERAGE_SENTENCE);
-            console.log(`An owner or admin there answers next. Check with \`hq billing sponsor list\`.`);
-        }
-        catch (err) {
-            fail(err);
-        }
-    });
-    sponsor
-        .command("list")
-        .description("Show sponsorship requests — the company's queue, or your own")
-        .option("--company <slug>", "Company slug (resolves to companyUid)")
-        .option("--json", "Emit raw JSON")
-        .action(async function (opts) {
-        try {
-            const token = await ensureCognitoToken();
-            // A company the caller cannot resolve is not fatal here. The person
-            // this feature is for often belongs to no company at all, and they
-            // still need to be told what to do next.
-            const named = opts.company ?? billing.opts().company;
-            const companyUid = await getCompanyUid(token, named).catch(() => null);
-            // The admin queue is the richer view. A non-admin is refused it, so we
-            // fall back to the member SELF-READ — a different route with a
-            // different answer: hq-pro returns ONE status for that person and that
-            // company, not a list. Rendering it as a list (or reusing the list's
-            // "not found" wording) is what made this read wrong.
-            let rows = null;
-            if (companyUid) {
-                try {
-                    const data = await callApi(token, "/v1/billing/sponsorship/requests", { query: { companyUid } });
-                    rows = planRowsOf(data.requests);
-                }
-                catch (err) {
-                    if (!(err instanceof SponsorError))
-                        throw err;
-                }
-            }
-            if (rows === null) {
-                // The self-read is company-scoped by contract, so without a company
-                // there is nothing to ask for. Say which flag fixes it.
-                if (!companyUid) {
-                    const line = named
-                        ? `Couldn't find a company called ${named}.`
-                        : "Name the company you asked: `hq billing sponsor list --company <slug>`.";
-                    if (opts.json) {
-                        process.stdout.write(JSON.stringify({ error: line }, null, 2) + "\n");
-                        return;
-                    }
-                    console.log(line);
-                    return;
-                }
-                const state = await readSelfState(token, companyUid);
-                if (opts.json) {
-                    process.stdout.write(JSON.stringify(state, null, 2) + "\n");
-                    return;
-                }
-                const where = named ?? "that company";
-                if (!state.active) {
-                    console.log(`No company is covering your $50 HQ plan right now.`);
-                    console.log(`If you asked ${where}, they haven't answered yet — an owner or admin there answers next.`);
-                    return;
-                }
-                console.log(`Your $50 HQ plan: ${statusLabel(state.status ?? "active")}`);
-                if (state.requestId)
-                    console.log(`  ${chalk.bold(state.requestId)}`);
-                console.log(COVERAGE_SENTENCE);
-                if (state.status === "pending-sponsor-billing") {
-                    console.log(`\n${HELD_FOR_CARD_SENTENCE}`);
-                }
-                return;
-            }
-            if (opts.json) {
-                process.stdout.write(JSON.stringify(rows, null, 2) + "\n");
-                return;
-            }
-            if (rows.length === 0) {
-                console.log("No one has asked this company to cover their plan.");
-                return;
-            }
-            console.log("Plan sponsorship requests:");
-            for (const r of rows)
-                console.log(renderRow(r));
-            if (rows.some((r) => r.status === "pending-sponsor-billing")) {
-                console.log(`\n${chalk.yellow("Add a card")} to start the requests you said yes to. Nothing is covered until then.`);
-            }
-        }
-        catch (err) {
-            fail(err);
-        }
-    });
-    sponsor
-        .command("approve")
-        .argument("<id>", "Request id")
-        .description("Say yes — put someone's $50 plan on the company bill")
-        .option("--json", "Emit raw JSON")
-        .action(async function (id, opts) {
-        try {
-            const result = await transition(id, "approve");
-            if (opts.json) {
-                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-                return;
-            }
-            if (result.status === "pending-sponsor-billing") {
-                console.log("Approved. Add a card to start this sponsorship — nothing is covered until then.");
-                if (result.addCardUrl)
-                    console.log(`  ${chalk.cyan(result.addCardUrl)}`);
-                return;
-            }
-            console.log("Approved. Their $50 plan is now on the company bill.");
-        }
-        catch (err) {
-            fail(err);
-        }
-    });
-    sponsor
-        .command("decline")
-        .argument("<id>", "Request id")
-        .description("Say no to a plan sponsorship request")
-        .option("--json", "Emit raw JSON")
-        .action(async function (id, opts) {
-        try {
-            const result = await transition(id, "decline");
-            if (opts.json) {
-                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-                return;
-            }
-            console.log("Declined. Their plan stays theirs to pay or reduce.");
-        }
-        catch (err) {
-            fail(err);
-        }
-    });
-    sponsor
-        .command("revoke")
-        .argument("<id>", "Request id")
-        .description("End a sponsorship the company is currently paying for")
-        .option("--json", "Emit raw JSON")
-        .action(async function (id, opts) {
-        try {
-            // Revoke and decline are the SAME hq-pro route: an active row flips to
-            // declined and the plan goes back to the person. Two names here because
-            // "revoke a sponsorship you're paying for" and "decline a request you
-            // haven't answered" are different things to the admin doing them.
-            const result = await transition(id, "decline");
-            if (opts.json) {
-                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-                return;
-            }
-            console.log("Ended. Their $50 plan goes back to them from the next bill.");
-        }
-        catch (err) {
-            fail(err);
-        }
-    });
-    sponsor
-        .command("withdraw")
-        .argument("<id>", "Request id")
-        .description("Take back a sponsorship request you made")
-        .option("--json", "Emit raw JSON")
-        .action(async function (id, opts) {
-        try {
-            // hq-pro lets a person decline THEIR OWN plan row without being an admin
-            // (it resolves the caller's person id server-side and compares it to the
-            // row's requester), so withdraw is the same route scoped to yourself.
-            const result = await transition(id, "decline");
-            if (opts.json) {
-                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-                return;
-            }
-            console.log("Withdrawn. You can pay the $50 yourself, reduce what you store, or ask another company.");
-        }
-        catch (err) {
-            fail(err);
-        }
-    });
-}
-//# sourceMappingURL=billing-sponsor.js.map

package/dist/commands/bot-companies.d.ts

@@ -1,40 +0,0 @@
-/**
- * A company bot's memberships (BOT-KINDS, 2026-09-15). A company bot acts as
- * itself, so it must be a member of every company it works for; the OWNER
- * (person token) invites it, the same `agt_` member/admin route fleet agents
- * use. Slugs resolve to company uids with the owner's sign-in.
- *
- * Both helpers keep going after a failure and report every slug's outcome,
- * so `hq bot create` can say exactly which invite did not go through.
- */
-import { inviteMember, revokeInvite } from "./members.js";
-export interface BotCompanyDeps {
-    companyUid: (token: string, slug: string) => Promise<string>;
-    callerUid: (token: string) => Promise<string>;
-    invite: typeof inviteMember;
-    revoke: typeof revokeInvite;
-}
-export interface BotCompanyOutcome {
-    /** Slugs the change went through for. */
-    done: string[];
-    /** Slugs it did not, with the reason. */
-    failed: Array<{
-        slug: string;
-        reason: string;
-    }>;
-}
-/** Invite the bot as a member of each company, with the person's token. */
-export declare function addBotToCompanies(input: {
-    agentUid: string;
-    companies: readonly string[];
-    token: string;
-}, deps?: BotCompanyDeps): Promise<BotCompanyOutcome>;
-/** Remove the bot's membership in each company (the `hq members revoke` route). */
-export declare function removeBotFromCompanies(input: {
-    agentUid: string;
-    companies: readonly string[];
-    token: string;
-}, deps?: BotCompanyDeps): Promise<BotCompanyOutcome>;
-/** One line per failure, for an error message or a log. */
-export declare function describeCompanyFailures(failed: BotCompanyOutcome["failed"]): string;
-//# sourceMappingURL=bot-companies.d.ts.map

package/dist/commands/bot-companies.js

@@ -1,64 +0,0 @@
-/**
- * A company bot's memberships (BOT-KINDS, 2026-09-15). A company bot acts as
- * itself, so it must be a member of every company it works for; the OWNER
- * (person token) invites it, the same `agt_` member/admin route fleet agents
- * use. Slugs resolve to company uids with the owner's sign-in.
- *
- * Both helpers keep going after a failure and report every slug's outcome,
- * so `hq bot create` can say exactly which invite did not go through.
- */
-import { getCallerPersonUid, inviteMember, resolveRevokeTargetToMembershipKey, revokeInvite } from "./members.js";
-import { getCompanyUid } from "../utils/vault-api.js";
-const defaultDeps = {
-    companyUid: getCompanyUid,
-    callerUid: getCallerPersonUid,
-    invite: inviteMember,
-    revoke: revokeInvite,
-};
-function reasonOf(err) {
-    return err instanceof Error ? err.message : String(err);
-}
-/** Invite the bot as a member of each company, with the person's token. */
-export async function addBotToCompanies(input, deps = defaultDeps) {
-    const out = { done: [], failed: [] };
-    if (input.companies.length === 0)
-        return out;
-    let callerUid;
-    try {
-        callerUid = await deps.callerUid(input.token);
-    }
-    catch (err) {
-        return { done: [], failed: input.companies.map((slug) => ({ slug, reason: reasonOf(err) })) };
-    }
-    for (const slug of input.companies) {
-        try {
-            const companyUid = await deps.companyUid(input.token, slug);
-            await deps.invite({ target: input.agentUid, role: "member", sendEmail: false, companyUid, callerUid, token: input.token });
-            out.done.push(slug);
-        }
-        catch (err) {
-            out.failed.push({ slug, reason: reasonOf(err) });
-        }
-    }
-    return out;
-}
-/** Remove the bot's membership in each company (the `hq members revoke` route). */
-export async function removeBotFromCompanies(input, deps = defaultDeps) {
-    const out = { done: [], failed: [] };
-    for (const slug of input.companies) {
-        try {
-            const companyUid = await deps.companyUid(input.token, slug);
-            await deps.revoke(input.token, resolveRevokeTargetToMembershipKey(input.agentUid, companyUid), companyUid);
-            out.done.push(slug);
-        }
-        catch (err) {
-            out.failed.push({ slug, reason: reasonOf(err) });
-        }
-    }
-    return out;
-}
-/** One line per failure, for an error message or a log. */
-export function describeCompanyFailures(failed) {
-    return failed.map((f) => `${f.slug} (${f.reason})`).join("; ");
-}
-//# sourceMappingURL=bot-companies.js.map

package/dist/commands/bot-continuity.d.ts

@@ -1,28 +0,0 @@
-/** On-box promotion import. Optional vault reads use the existing machine login; this never starts a runtime. */
-import { Command } from "commander";
-interface ImportOptions {
-    agentUid: string;
-    ownerUid: string;
-    sourceDigest: string;
-    hqRoot: string;
-    fleetHome: string;
-    company?: string;
-    vaultKey?: string;
-    objectSha256?: string;
-    objectBytes?: string;
-}
-export declare function importBotContinuityFile(file: string, options: ImportOptions): {
-    version: number;
-    agentUid: string;
-    ownerUid: string;
-    sourceDigest: string;
-    soulSha256: string;
-    files: {
-        path: string;
-        sha256: string;
-        sourceSha256: string;
-    }[];
-};
-export declare function registerBotContinuityCommand(bot: Command): void;
-export {};
-//# sourceMappingURL=bot-continuity.d.ts.map

package/dist/commands/bot-continuity.js

@@ -1,68 +0,0 @@
-import { downloadContinuitySnapshot } from "../lib/bot/continuity-download.js";
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { installFleetContinuity } from "../lib/bot/continuity-install.js";
-export function importBotContinuityFile(file, options) {
-    if (!/^[a-f0-9]{64}$/.test(options.sourceDigest))
-        throw new Error("Invalid expected continuity digest");
-    if (!path.isAbsolute(options.hqRoot) || !path.isAbsolute(options.fleetHome)) {
-        throw new Error("Continuity destinations must be absolute");
-    }
-    // No blocking special files, symlink traversal, or unbounded JSON reads. The
-    // coordinator delivers this private snapshot, separately from credentials.
-    const absolute = path.resolve(file);
-    if (fs.realpathSync(absolute) !== absolute)
-        throw new Error("Continuity snapshot cannot use symlinks");
-    const fd = fs.openSync(absolute, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
-    let bundle;
-    try {
-        const before = fs.fstatSync(fd);
-        if (!before.isFile() || before.size > 48 * 1024 * 1024 || (before.mode & 0o077)) {
-            throw new Error("Continuity snapshot must be a private regular file within 48 MiB");
-        }
-        const bytes = Buffer.alloc(before.size);
-        let offset = 0;
-        while (offset < bytes.length) {
-            const count = fs.readSync(fd, bytes, offset, bytes.length - offset, offset);
-            if (!count)
-                throw new Error("Continuity snapshot changed while reading");
-            offset += count;
-        }
-        const after = fs.fstatSync(fd);
-        if (before.size !== after.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs) {
-            throw new Error("Continuity snapshot changed while reading");
-        }
-        bundle = JSON.parse(bytes.toString("utf8"));
-    }
-    finally {
-        fs.closeSync(fd);
-    }
-    if (!bundle || bundle.digest !== options.sourceDigest)
-        throw new Error("Unexpected continuity snapshot digest");
-    return installFleetContinuity(bundle, {
-        agentUid: options.agentUid, ownerUid: options.ownerUid,
-        hqRoot: options.hqRoot, companySlug: options.company,
-    }, options.fleetHome);
-}
-export function registerBotContinuityCommand(bot) {
-    bot.command("continuity-import <snapshot>")
-        .description("Import verified private bot context before cloud activation (promotion coordinator)")
-        .requiredOption("--agent-uid <uid>", "Existing bot identity")
-        .requiredOption("--owner-uid <uid>", "Existing bot owner")
-        .requiredOption("--source-digest <sha256>", "Expected source digest from the promotion operation")
-        .requiredOption("--hq-root <path>", "Absolute destination HQ root")
-        .requiredOption("--fleet-home <path>", "Absolute destination Fleet home")
-        .option("--company <slug>", "Destination company slug")
-        .option("--vault-key <key>", "Exact own-vault promotion snapshot key")
-        .option("--object-sha256 <sha256>", "Expected encrypted-transfer object digest")
-        .option("--object-bytes <bytes>", "Expected transfer size")
-        .action(async (snapshot, options) => {
-        if (options.vaultKey)
-            await downloadContinuitySnapshot({ agentUid: options.agentUid, key: options.vaultKey,
-                sha256: options.objectSha256 ?? "", bytes: Number(options.objectBytes), destination: snapshot });
-        const receipt = importBotContinuityFile(snapshot, options);
-        console.log(JSON.stringify({ ok: true, agentUid: receipt.agentUid, ownerUid: receipt.ownerUid,
-            sourceDigest: receipt.sourceDigest, files: receipt.files.length }));
-    });
-}
-//# sourceMappingURL=bot-continuity.js.map

package/dist/commands/bot-jobs.d.ts

@@ -1,127 +0,0 @@
-/**
- * `hq bot jobs` — a local bot's recurring scheduled work.
- *
- *   hq bot jobs <botName>                                  list
- *   hq bot jobs <botName> --add "<what to do>" --every "<plain english>"
- *   hq bot jobs <botName> --add "<what to do>" --cron "0 9 * * 1-5"
- *   hq bot jobs <botName> --rm <jobId>
- *
- * The schedule lives in the cloud, never on this computer: hq-pro-agents holds
- * the job and fires it on an EventBridge schedule, and the bot's inbox loop
- * runs the fired run (see lib/bot/job-run.ts). Nothing here writes a crontab,
- * a launchd plist, or a systemd unit — by rule.
- *
- * The routes are self-only per agent, so every call uses the BOT's own machine
- * identity — the same credential path its turns use — not the owner's session.
- */
-import { execFileSync } from "node:child_process";
-import type { Command } from "commander";
-import { BotApi, type BotJobRecord, type CreateJobInput } from "../lib/bot/api.js";
-import { type BotConfig, type BotKind } from "../lib/bot/config.js";
-/** Mirrors hq-pro-agents `MIN_RECURRING_INTERVAL_SECONDS`. */
-export declare const MIN_RECURRING_INTERVAL_SECONDS: number;
-/** Mirrors hq-pro-agents `DEFAULT_MAX_ACTIVE_JOBS_PER_AGENT`. */
-export declare const MAX_ACTIVE_JOBS_PER_AGENT = 25;
-/** Mirrors hq-pro-agents `MAX_PROMPT_BYTES`. */
-export declare const MAX_PROMPT_BYTES: number;
-export declare class BotJobsError extends Error {
-    readonly expected: true;
-}
-/** The machine's own IANA zone, so "9am" means 9am where the owner lives. */
-export declare function machineTimezone(): string;
-/**
- * Standard 5-field cron → the EventBridge form the cloud stores.
- *
- * EventBridge cron has SIX fields (a trailing year), numbers its days of week
- * 1–7 with SUNDAY = 1 (standard cron uses 0–6 with SUNDAY = 0), and refuses
- * `*` in BOTH the day-of-month and day-of-week fields — exactly one must be
- * `?`. An expression that is already `cron(...)` or `rate(...)` is passed
- * through untouched.
- */
-export declare function toEventBridgeCron(expr: string): string;
-/**
- * The smallest gap a recurring expression can produce, in seconds, or null
- * when it is not a recognised rate()/cron() form. Mirrors hq-pro-agents
- * `recurringIntervalSeconds` so the CLI can refuse a sub-floor schedule with
- * the server's own reason instead of a round-trip and a raw 400.
- */
-export declare function recurringIntervalSeconds(expr: string): number | null;
-/** Refuse a schedule the cloud would refuse, with the cloud's own reason. */
-export declare function assertScheduleWithinFloor(expr: string): void;
-export interface ParsedSchedule {
-    /** Standard 5-field cron, as the HQ helper emits it. */
-    cron: string;
-    timezone: string;
-    /** Plain words for the schedule, when the helper supplied them. */
-    human?: string;
-}
-export declare function scheduleHelperPath(hqRoot: string): string;
-/**
- * Plain English → cron, using HQ's OWN helper (`core/scripts/jobs-schedule-parse.sh`)
- * so `hq bot jobs --every` and the `/schedule` command agree on what "every
- * weekday morning" means. When the helper is not in this HQ root, the caller is
- * told to pass `--cron` instead rather than getting a second, divergent parser.
- */
-export declare function parseScheduleText(text: string, opts: {
-    hqRoot: string;
-    timezone: string;
-    exec?: typeof execFileSync;
-    exists?: (p: string) => boolean;
-}): ParsedSchedule;
-/** The create body the cloud expects, with the client-side limits enforced first. */
-export declare function buildCreateJobBody(input: {
-    prompt: string;
-    cron: string;
-    timezone: string;
-    context?: Record<string, unknown>;
-}): CreateJobInput;
-/** A schedule in plain words, falling back to the raw expression. */
-export declare function describeSchedule(job: BotJobRecord): string;
-/** A small humaniser for the shapes `--every` actually produces. */
-export declare function cronInWords(expr: string): string | null;
-/** "never run yet" / "succeeded 2026-09-15 09:00 UTC". */
-export declare function describeLastRun(job: BotJobRecord): string;
-export declare function formatJobsList(botName: string, jobs: BotJobRecord[]): string;
-/**
- * Turn a jobs-route failure into one plain line.
- *
- * Personal bots are refused by the cloud today: their JWT carries the owner's
- * `per_…` company claim and the jobs routes require a `cmp_…`, so the fail-closed
- * guard answers 403 `CROSS_AGENT_JOB` (hq-pro-agents jobs/errors.ts
- * `CrossAgentJobError`). That server fix is a separate change; until it lands the
- * refusal must read as "not available yet for this kind of bot", not as a raw 403.
- * Once the server accepts personal bots the refusal simply stops happening — no
- * client change needed.
- *
- * ONLY that exact code is rewritten. Every other 403, and every 404, keeps its
- * real message: masking them would hide a genuinely missing job or a different
- * permission problem behind copy about the wrong thing.
- */
-export declare function jobsErrorMessage(err: unknown, ctx: {
-    botName: string;
-    kind: BotKind;
-}): string;
-export interface BotJobsDeps {
-    requireBot(name: string): {
-        name: string;
-        dir: string;
-        config: BotConfig;
-    };
-    botTokenSupplier(dir: string): () => Promise<string>;
-    /** Test seam: the jobs client for a bot directory. */
-    apiFor?(dir: string): Pick<BotApi, "listJobs" | "createJob" | "cancelJob">;
-    parseSchedule?: typeof parseScheduleText;
-    timezone?: () => string;
-    out?: (line: string) => void;
-}
-export interface BotJobsOptions {
-    add?: string;
-    every?: string;
-    cron?: string;
-    tz?: string;
-    rm?: string;
-    json?: boolean;
-}
-export declare function runBotJobs(nameArg: string, opts: BotJobsOptions, deps: BotJobsDeps): Promise<void>;
-export declare function registerBotJobsCommand(bot: Command, deps: BotJobsDeps): void;
-//# sourceMappingURL=bot-jobs.d.ts.map