@indigoai-us/hq-cli 5.345.110 → 5.345.111

package/CHANGELOG.md

@@ -2,6 +2,32 @@
 
 ## [Unreleased]
 
+## [5.345.111] — 2026-10-13
+- The local bot runs a Create brief job from the desktop app in a fresh model session of its own instead of resuming the owner's whole DM conversation, and schedules it like a DM rather than behind the job slot. A resumed session that fails twice in a row with the model CLI's "An unknown error occurred (Unexpected)" is cleared so the next turn starts fresh; a single failure never clears it.
+
+- Add `--personal` support to `hq db provision`, `status`, and `sql` for a person's remote database.
+- `hq capacity` now keeps its Claude OAuth sessions awake on its own: when a
+  token is about to expire it refreshes in the background, with per-home
+  backoff so busy lanes do not thrash the auth endpoint. If a refresh is
+  rejected (revoked or invalid grant), the account is reported as "signed
+  out: sign-in revoked" and the printed fix is `hq capacity login claude
+  --account <id> --repair` for a managed non-default home, or `claude auth
+  login` for the default home.
+- Refreshes fail closed when the live-lane or running-process gates cannot
+  be verified (unexpected `hq lanes list --json` shape, `ps` failure, or
+  darwin credential pre-read failure with a prior refresh token), so a
+  rotation never races a running Claude Code.
+- Doctor's refresh error record stores only the HTTP status and a fixed
+  classification (`invalid_grant`, `revoked`, `server_error`, `timeout`),
+  never a response body.
+- An expired Claude account whose newest usage reading predates the token
+  expiry is now flagged as stale, so the router does not trust an old
+  reading as live headroom.
+- `hq capacity doctor` adds a per-account Claude table showing token age,
+  time to expiry, last refresh attempt and outcome, and any backoff
+  window. All strings in the report are passed through a token-redaction
+  scrubber before display.
+
 ## [5.345.110] — 2026-10-13
 - The bundled sync runner now uses hq-cloud 6.18.69, which compacts the sync-state write-ahead log into a snapshot once the log grows past a size-scaled ratio of the snapshot, so large companies stop accumulating oversized sync-state files.
 - Remove the three policy-family shell rollback copies after the native route's clean release soak. `hq core policy age-report`, `policy retire`, and `policy frontmatter` now use the native route regardless of the retained `core-native-policy` flag, which still gates `knowledge-prefs`.

package/dist/command-catalog.generated.d.ts

@@ -1916,7 +1916,7 @@ export declare const COMMAND_CATALOG: readonly [{
     readonly options: readonly [];
     readonly subcommands: readonly [{
         readonly name: "status";
-        readonly description: "Show local (and remote when bound) vault DB status; auto-creates local SQLite if missing";
+        readonly description: "Show company local/remote status or your personal database status";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -1926,7 +1926,11 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly arguments: readonly [];
         readonly options: readonly [{
             readonly flags: "--company <slug>";
-            readonly description: "Company slug (tenant scope; required)";
+            readonly description: "Company slug (tenant scope)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--personal";
+            readonly description: "Show your personal database status";
             readonly hidden: false;
         }, {
             readonly flags: "--home <path>";
@@ -1945,7 +1949,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "sql";
-        readonly description: "Run SQL against the company vault DB (local) or an app's remote database (--app); read-only by default";
+        readonly description: "Run read-only SQL against a company or personal database; use --write for changes";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -1960,7 +1964,11 @@ export declare const COMMAND_CATALOG: readonly [{
         }];
         readonly options: readonly [{
             readonly flags: "--company <slug>";
-            readonly description: "Company slug (tenant scope; required)";
+            readonly description: "Company slug (tenant scope)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--personal";
+            readonly description: "Run against your personal remote database";
             readonly hidden: false;
         }, {
             readonly flags: "--app <app>";
@@ -2027,7 +2035,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "provision";
-        readonly description: "Create the company remote database (Team plan)";
+        readonly description: "Create a company remote database or your personal database";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -2039,6 +2047,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--company <slug>";
             readonly description: "Company slug";
             readonly hidden: false;
+        }, {
+            readonly flags: "--personal";
+            readonly description: "Provision your personal database";
+            readonly hidden: false;
         }, {
             readonly flags: "--region <region>";
             readonly description: "AWS region";

package/dist/command-catalog.generated.js

@@ -2298,7 +2298,7 @@ export const COMMAND_CATALOG = [
         "subcommands": [
             {
                 "name": "status",
-                "description": "Show local (and remote when bound) vault DB status; auto-creates local SQLite if missing",
+                "description": "Show company local/remote status or your personal database status",
                 "aliases": [],
                 "hidden": false,
                 "helpOption": true,
@@ -2309,7 +2309,12 @@ export const COMMAND_CATALOG = [
                 "options": [
                     {
                         "flags": "--company <slug>",
-                        "description": "Company slug (tenant scope; required)",
+                        "description": "Company slug (tenant scope)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--personal",
+                        "description": "Show your personal database status",
                         "hidden": false
                     },
                     {
@@ -2333,7 +2338,7 @@ export const COMMAND_CATALOG = [
             },
             {
                 "name": "sql",
-                "description": "Run SQL against the company vault DB (local) or an app's remote database (--app); read-only by default",
+                "description": "Run read-only SQL against a company or personal database; use --write for changes",
                 "aliases": [],
                 "hidden": false,
                 "helpOption": true,
@@ -2351,7 +2356,12 @@ export const COMMAND_CATALOG = [
                 "options": [
                     {
                         "flags": "--company <slug>",
-                        "description": "Company slug (tenant scope; required)",
+                        "description": "Company slug (tenant scope)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--personal",
+                        "description": "Run against your personal remote database",
                         "hidden": false
                     },
                     {
@@ -2433,7 +2443,7 @@ export const COMMAND_CATALOG = [
             },
             {
                 "name": "provision",
-                "description": "Create the company remote database (Team plan)",
+                "description": "Create a company remote database or your personal database",
                 "aliases": [],
                 "hidden": false,
                 "helpOption": true,
@@ -2447,6 +2457,11 @@ export const COMMAND_CATALOG = [
                         "description": "Company slug",
                         "hidden": false
                     },
+                    {
+                        "flags": "--personal",
+                        "description": "Provision your personal database",
+                        "hidden": false
+                    },
                     {
                         "flags": "--region <region>",
                         "description": "AWS region",

package/dist/commands/capacity.d.ts

@@ -11,6 +11,7 @@
 import { Command } from "commander";
 import { type CapacityState, type LedgerEvent, type LedgerOptions, type NowView, type ParserFailureEvent, type Reading, type ReadingSource } from "../lib/capacity/ledger.js";
 import { type CapacityAccount } from "../lib/capacity/accounts.js";
+import { type ClaudeRefreshLastEntry } from "../lib/capacity/collectors/claude-oauth.js";
 export declare const CAPACITY_SCHEMA_VERSION: "hq-capacity-now-view.v1";
 export declare const DOCTOR_SCHEMA_VERSION = "hq-capacity-doctor.v1";
 export declare const PARSER_FAILURE_WINDOW_MS: number;
@@ -40,6 +41,30 @@ export interface DoctorVersion {
     installed: string | null;
     match: boolean;
 }
+export interface DoctorClaudeAccount {
+    /** Account label from the capacity registry (eg "default"). */
+    label: string;
+    /** Resolved credential home directory. */
+    home: string;
+    /** ISO timestamp of the last refresh attempt, redacted. Null when nothing was tried for this home. */
+    lastRefreshAttempt: string | null;
+    /** Outcome of the last refresh attempt. Null when nothing was tried. */
+    lastRefreshOutcome: ClaudeRefreshLastEntry["outcome"] | null;
+    /** ms since the last refresh attempt. Null when nothing was tried. */
+    tokenAgeMs: number | null;
+    /** ms until the token's recorded expiry. Negative when past expiry. Null when the collector has not recorded one. */
+    timeToExpiryMs: number | null;
+    /** ISO expiry of the token the entry describes. Null when unknown. */
+    tokenExpiresAt: string | null;
+    /** ISO backoff window end, when the last outcome set one. Null otherwise. */
+    backoffUntil: string | null;
+    /** Short, token-free diagnostic from the last attempt. Null otherwise. Never contains a response body. */
+    errorMessage: string | null;
+    /** Fixed classification string for the last error outcome. Null otherwise. */
+    errorClass: ClaudeRefreshLastEntry["errorClass"] | null;
+    /** HTTP status from the last attempt that reached the token endpoint. Null otherwise. */
+    httpStatus: number | null;
+}
 export interface DoctorReport {
     schemaVersion: typeof DOCTOR_SCHEMA_VERSION;
     collector: "on" | "off";
@@ -50,6 +75,7 @@ export interface DoctorReport {
         provider: string;
         state: CapacityState;
     }[];
+    claudeAccounts: DoctorClaudeAccount[];
     ok: boolean;
     stale: boolean;
     ageMs: number;

package/dist/commands/capacity.js

@@ -3,9 +3,9 @@ import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
 import * as readline from "node:readline";
-import { LedgerCorrupt, LedgerMissing, READING_SOURCES, capacityOptionsFromEnv, capacityRoot, nowViewJsonSchema, readCollectorMark, readLedgerEvents, readNow, rebuildNow, setCollectorEnabled, } from "../lib/capacity/ledger.js";
+import { LedgerCorrupt, LedgerMissing, READING_SOURCES, capacityOptionsFromEnv, capacityRoot, nowViewJsonSchema, readCollectorMark, readLedgerEvents, readNow, rebuildNow, redactProviderTokens, setCollectorEnabled, } from "../lib/capacity/ledger.js";
 import { listCapacityAccounts, registryAccountIds } from "../lib/capacity/accounts.js";
-import { claudeIdentityKeys } from "../lib/capacity/collectors/claude-oauth.js";
+import { claudeIdentityKeys, readClaudeRefreshLast } from "../lib/capacity/collectors/claude-oauth.js";
 import { projectCapacityView } from "../lib/capacity/project.js";
 import { capacityWidgetTimeZone, renderCapacityWidget } from "../lib/capacity/widget.js";
 import { resolveLanesHqRoot } from "../lib/lanes/hq-root.js";
@@ -185,6 +185,7 @@ export function buildDoctorReport(options) {
         provider: provider.provider,
         state: provider.state,
     }));
+    const claudeAccounts = buildClaudeAccountDoctor(resolved.options, resolved.nowMs);
     const freshness = capacityFreshness(view.generatedAt, resolved.nowMs);
     return {
         schemaVersion: DOCTOR_SCHEMA_VERSION,
@@ -193,11 +194,56 @@ export function buildDoctorReport(options) {
         versions,
         parserFailures,
         providers,
+        claudeAccounts,
         ok: providers.every((provider) => provider.state !== "unknown"),
         stale: freshness.stale,
         ageMs: freshness.ageMs,
     };
 }
+function buildClaudeAccountDoctor(options, nowMs) {
+    const env = options.env ?? process.env;
+    const home = options.home ?? env.HOME;
+    const root = options.root ?? capacityRoot(env, home);
+    const accounts = listCapacityAccounts({ env, hqRoot: env.HQ_ROOT, home })
+        .filter((account) => account.provider === "claude");
+    return accounts.map((account) => {
+        const entry = readClaudeRefreshLast(root, account.home);
+        if (!entry) {
+            return {
+                label: account.label,
+                home: account.home,
+                lastRefreshAttempt: null,
+                lastRefreshOutcome: null,
+                tokenAgeMs: null,
+                timeToExpiryMs: null,
+                tokenExpiresAt: null,
+                backoffUntil: null,
+                errorMessage: null,
+                errorClass: null,
+                httpStatus: null,
+            };
+        }
+        const attemptedAtMs = Date.parse(entry.attemptedAt);
+        const expiresAtMs = entry.tokenExpiresAt ? Date.parse(entry.tokenExpiresAt) : NaN;
+        const tokenAgeMs = entry.outcome === "refreshed" && Number.isFinite(attemptedAtMs)
+            ? nowMs - attemptedAtMs
+            : null;
+        const timeToExpiryMs = Number.isFinite(expiresAtMs) ? expiresAtMs - nowMs : null;
+        return {
+            label: account.label,
+            home: account.home,
+            lastRefreshAttempt: redactProviderTokens(entry.attemptedAt),
+            lastRefreshOutcome: entry.outcome,
+            tokenAgeMs,
+            timeToExpiryMs,
+            tokenExpiresAt: entry.tokenExpiresAt ?? null,
+            backoffUntil: entry.backoffUntil ?? null,
+            errorMessage: entry.errorMessage ? redactProviderTokens(entry.errorMessage) : null,
+            errorClass: entry.errorClass ?? null,
+            httpStatus: typeof entry.httpStatus === "number" ? entry.httpStatus : null,
+        };
+    });
+}
 export function formatDoctor(report) {
     const sources = formatTable(["SOURCE", "LAST SUCCESS"], report.sources.map((source) => [source.source, source.lastSuccess ?? "—"]));
     const versions = formatTable(["PROVIDER", "PINNED", "INSTALLED", "MATCH"], report.versions.map((version) => [
@@ -212,6 +258,16 @@ export function formatDoctor(report) {
     const states = report.providers.length === 0
         ? "none"
         : report.providers.map((provider) => `${provider.provider}  ${provider.state}`).join("\n");
+    const claudeAccounts = report.claudeAccounts.length === 0
+        ? "none"
+        : formatTable(["ACCOUNT", "LAST ATTEMPT", "OUTCOME", "TOKEN AGE", "EXPIRES IN", "BACKOFF UNTIL"], report.claudeAccounts.map((account) => [
+            account.label,
+            account.lastRefreshAttempt ?? "—",
+            account.lastRefreshOutcome ?? "—",
+            account.tokenAgeMs === null ? "—" : formatSignedSpan(account.tokenAgeMs),
+            account.timeToExpiryMs === null ? "—" : formatSignedSpan(account.timeToExpiryMs),
+            account.backoffUntil ?? "—",
+        ]));
     const warning = report.stale
         ? report.ageMs === 0
             ? "collector not running, numbers may be stale; last update unknown"
@@ -226,8 +282,14 @@ export function formatDoctor(report) {
         failures,
         "provider state",
         states,
+        "claude accounts",
+        claudeAccounts,
     ].join("\n");
 }
+function formatSignedSpan(ms) {
+    const span = formatSpan(Math.floor(Math.abs(ms) / 1000));
+    return ms < 0 ? `-${span}` : span;
+}
 export function registerCapacityCommand(program) {
     const capacity = program
         .command("capacity")

package/dist/commands/db-provision.js

@@ -9,24 +9,43 @@ import { defaultRemoteDeps, describeRemoteError, } from "./db-remote-deps.js";
 const defaultDeps = defaultRemoteDeps;
 export function registerDbProvisionCommand(db, depsFactory = defaultDeps) {
     db.command("provision")
-        .description("Create the company remote database (Team plan)")
-        .requiredOption("--company <slug>", "Company slug")
+        .description("Create a company remote database or your personal database")
+        .option("--company <slug>", "Company slug")
+        .option("--personal", "Provision your personal database")
         .option("--region <region>", "AWS region", "us-east-1")
         .action(async (opts) => {
         try {
             const deps = depsFactory();
             const company = String(opts.company ?? "").trim();
-            if (!company) {
-                console.error(chalk.red("Error: --company is required"));
+            if (opts.personal && opts.company !== undefined) {
+                console.error(chalk.red("Error: --personal cannot be used with --company"));
+                process.exitCode = 1;
+                return;
+            }
+            if (!opts.personal && !company) {
+                console.error(chalk.red("error: required option '--company <slug>' not specified"));
                 process.exitCode = 1;
                 return;
             }
-            const resolved = await deps.resolveCompany(company);
             const client = new ControlPlaneDbClient({
                 baseUrl: deps.apiBaseUrl,
                 getAccessToken: deps.getAccessToken,
                 fetchImpl: deps.fetchImpl,
             });
+            if (opts.personal) {
+                const result = await client.personalProvision({ region: opts.region });
+                if (result.status === "provisioning") {
+                    console.log("Your personal database is still being set up. Run this again in a minute.");
+                }
+                else if (result.idempotent || result.status === "existing") {
+                    console.log(`Your personal database already exists and is ready (${result.region}).`);
+                }
+                else {
+                    console.log(`Your personal database is ready (${result.region}).`);
+                }
+                return;
+            }
+            const resolved = await deps.resolveCompany(company);
             const result = await client.provision({
                 companyUid: resolved.companyUid,
                 companySlug: resolved.companySlug,
@@ -50,11 +69,13 @@ export function registerDbProvisionCommand(db, depsFactory = defaultDeps) {
             const status = error.status;
             if (described) {
                 console.error(chalk.red("Error:"), described);
-                if (status === 501 || error.code === "REMOTE_DB_NOT_AVAILABLE") {
-                    console.error(chalk.dim("Local hq db status|sql|migrate still work offline."));
-                }
-                else {
-                    console.error(chalk.dim("Local databases still work: hq db status|sql|migrate."));
+                if (!opts.personal) {
+                    if (status === 501 || error.code === "REMOTE_DB_NOT_AVAILABLE") {
+                        console.error(chalk.dim("Local hq db status|sql|migrate still work offline."));
+                    }
+                    else {
+                        console.error(chalk.dim("Local databases still work: hq db status|sql|migrate."));
+                    }
                 }
             }
             else if (status === 404) {

package/dist/commands/db-remote-deps.js

@@ -54,6 +54,18 @@ export function describeRemoteError(error) {
         return error.message;
     const status = error.status;
     const code = error.code;
+    if (code === "PERSONAL_DB_NOT_ENABLED") {
+        return "Personal databases are not turned on for your account.";
+    }
+    if (code === "PERSONAL_DB_NOT_PROVISIONED") {
+        return "You don't have a personal database yet. Run: hq db provision --personal";
+    }
+    if (code === "PERSONAL_DB_APP_LIMIT") {
+        return "Your personal database already holds 8 apps, which is the limit.";
+    }
+    if (status === 404 && error.personalRoute) {
+        return "The HQ API does not support personal databases yet. Update the CLI or try again later.";
+    }
     if (code === "REMOTE_DB_NOT_AVAILABLE" || status === 501) {
         const reason = error.reason;
         const message = error.message;

package/dist/commands/db-sql.js

@@ -8,10 +8,10 @@ import { Option } from "commander";
 import chalk from "chalk";
 import fs from "node:fs";
 import { safeErrorMessage } from "../lib/db/redact.js";
-import { formatRemoteResults, openRemoteAppConnection, runRemoteSql, } from "../lib/db/remote-engine.js";
+import { formatRemoteResults, openRemoteAppConnection, openRemoteSessionConnection, runRemoteSql, } from "../lib/db/remote-engine.js";
 import { formatSqlResult, runLocalSql } from "../lib/db/sql.js";
 import { isPlanGateError } from "../utils/plan-gate-error.js";
-import { defaultRemoteDeps, describeRemoteError, remoteEngineDeps, resolveAppId, } from "./db-remote-deps.js";
+import { defaultRemoteDeps, controlPlaneClient, describeRemoteError, remoteEngineDeps, resolveAppId, } from "./db-remote-deps.js";
 import { describeSessionGap } from "./db-dump.js";
 function readSqlArg(sqlArgs, stdinFlag) {
     if (stdinFlag || sqlArgs.length === 0) {
@@ -24,8 +24,9 @@ function readSqlArg(sqlArgs, stdinFlag) {
 }
 export function registerDbSqlCommand(db, remoteDepsFactory = defaultRemoteDeps) {
     db.command("sql")
-        .description("Run SQL against the company vault DB (local) or an app's remote database (--app); read-only by default")
-        .requiredOption("--company <slug>", "Company slug (tenant scope; required)")
+        .description("Run read-only SQL against a company or personal database; use --write for changes")
+        .option("--company <slug>", "Company slug (tenant scope)")
+        .option("--personal", "Run against your personal remote database")
         .option("--app <app>", "Run against this app's remote database (app id, name or subdomain)")
         .option("--write", "Allow write/DDL statements (discouraged for ad-hoc DDL)", false)
         .addOption(new Option("--remote", "Remote SQL is not available in this CLI build yet; local queries work without --remote").hideHelp())
@@ -38,8 +39,26 @@ export function registerDbSqlCommand(db, remoteDepsFactory = defaultRemoteDeps)
         .action(async (sqlParts, opts) => {
         try {
             const company = String(opts.company ?? "").trim();
-            if (!company) {
-                console.error(chalk.red("Error: --company is required"));
+            if (opts.personal && opts.company !== undefined) {
+                console.error(chalk.red("Error: --personal cannot be used with --company"));
+                process.exitCode = 1;
+                return;
+            }
+            if (opts.personal) {
+                const conflicts = [
+                    opts.app !== undefined && "--app",
+                    !!opts.remote && "--remote",
+                    opts.dbPath !== undefined && "--db-path",
+                    !!opts.allowCrossCompanyPath && "--allow-cross-company-path",
+                ].filter(Boolean);
+                if (conflicts.length > 0) {
+                    console.error(chalk.red(`Error: --personal cannot be used with ${conflicts.join(", ")}`));
+                    process.exitCode = 1;
+                    return;
+                }
+            }
+            if (!opts.personal && !company) {
+                console.error(chalk.red("error: required option '--company <slug>' not specified"));
                 process.exitCode = 1;
                 return;
             }
@@ -50,8 +69,12 @@ export function registerDbSqlCommand(db, remoteDepsFactory = defaultRemoteDeps)
             }
             const sql = readSqlArg(sqlParts, !!opts.stdin).trim();
             const format = opts.format === "table" ? "table" : "jsonl";
+            if (opts.personal) {
+                await runPersonalRemote(remoteDepsFactory(), sql, !!opts.write, format);
+                return;
+            }
             if (opts.app) {
-                await runRemote(remoteDepsFactory(), company, opts.app, sql, !!opts.write);
+                await runRemote(remoteDepsFactory(), company, opts.app, sql, !!opts.write, format);
                 return;
             }
             const result = runLocalSql({
@@ -73,7 +96,17 @@ export function registerDbSqlCommand(db, remoteDepsFactory = defaultRemoteDeps)
         }
     });
 }
-async function runRemote(deps, company, app, sql, write) {
+async function runPersonalRemote(deps, sql, write, format) {
+    const session = await controlPlaneClient(deps).personalSession();
+    const conn = await openRemoteSessionConnection(remoteEngineDeps(deps), session, (schema) => schema === "personal");
+    try {
+        console.log(formatRemoteResults(await runRemoteSql(conn, sql, write), format));
+    }
+    finally {
+        await conn.close();
+    }
+}
+async function runRemote(deps, company, app, sql, write, format) {
     const resolved = await deps.resolveCompany(company);
     const appId = await resolveAppId(deps, resolved.companySlug, app);
     const conn = await openRemoteAppConnection(remoteEngineDeps(deps), {
@@ -81,7 +114,7 @@ async function runRemote(deps, company, app, sql, write) {
         appId,
     });
     try {
-        console.log(formatRemoteResults(await runRemoteSql(conn, sql, write)));
+        console.log(formatRemoteResults(await runRemoteSql(conn, sql, write), format));
     }
     finally {
         await conn.close();

package/dist/commands/db-status.d.ts

@@ -3,5 +3,6 @@
  * Optionally reports remote tier when control plane returns a binding (US-009).
  */
 import { Command } from "commander";
-export declare function registerDbStatusCommand(db: Command): void;
+import { type DbRemoteCommandDeps } from "./db-remote-deps.js";
+export declare function registerDbStatusCommand(db: Command, depsFactory?: () => DbRemoteCommandDeps): void;
 //# sourceMappingURL=db-status.d.ts.map

package/dist/commands/db-status.js

@@ -5,21 +5,47 @@
 import chalk from "chalk";
 import { ControlPlaneDbClient } from "../lib/db/control-plane.js";
 import { ensureAndStatusLocalDb, formatLocalDbStatus, } from "../lib/db/local.js";
-export function registerDbStatusCommand(db) {
+import { safeErrorMessage } from "../lib/db/redact.js";
+import { controlPlaneClient, defaultRemoteDeps, describeRemoteError, } from "./db-remote-deps.js";
+export function registerDbStatusCommand(db, depsFactory = defaultRemoteDeps) {
     db.command("status")
-        .description("Show local (and remote when bound) vault DB status; auto-creates local SQLite if missing")
-        .requiredOption("--company <slug>", "Company slug (tenant scope; required)")
+        .description("Show company local/remote status or your personal database status")
+        .option("--company <slug>", "Company slug (tenant scope)")
+        .option("--personal", "Show your personal database status")
         .option("--home <path>", "Override home directory for local DB root (tests / advanced only)")
         .option("--remote", "Also query control plane for remote tier status (requires auth)", false)
         .option("--company-uid <uid>", "Company uid for remote status (with --remote)")
         .action(async (opts) => {
         try {
             const company = String(opts.company ?? "").trim();
-            if (!company) {
-                console.error(chalk.red("Error: --company is required"));
+            if (opts.personal && opts.company !== undefined) {
+                console.error(chalk.red("Error: --personal cannot be used with --company"));
                 process.exitCode = 1;
                 return;
             }
+            if (opts.personal && (opts.remote || opts.companyUid !== undefined)) {
+                console.error(chalk.red("Error: --personal cannot be used with --remote or --company-uid"));
+                process.exitCode = 1;
+                return;
+            }
+            if (!opts.personal && !company) {
+                console.error(chalk.red("error: required option '--company <slug>' not specified"));
+                process.exitCode = 1;
+                return;
+            }
+            if (opts.personal) {
+                const remote = await controlPlaneClient(depsFactory()).personalStatus();
+                if (!remote.remote) {
+                    console.log("remote: (none)");
+                }
+                else {
+                    console.log(`remote: ${remote.remote.status}`);
+                    console.log(`remoteEngine: ${remote.remote.engineId}`);
+                    console.log(`remoteRegion: ${remote.remote.region}`);
+                    console.log(`remoteResourceArn: ${remote.remote.resourceArn}`);
+                }
+                return;
+            }
             const status = ensureAndStatusLocalDb(company, opts.home ? { home: opts.home } : undefined);
             // Never print remote connection material.
             console.log(formatLocalDbStatus(status));
@@ -54,7 +80,7 @@ export function registerDbStatusCommand(db) {
                     }
                 }
                 catch (e) {
-                    const msg = e instanceof Error ? e.message : "remote status failed";
+                    const msg = describeRemoteError(e) ?? safeErrorMessage(e);
                     console.log(`remote: error (${msg})`);
                 }
             }
@@ -63,7 +89,7 @@ export function registerDbStatusCommand(db) {
             }
         }
         catch (error) {
-            console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
+            console.error(chalk.red("Error:"), describeRemoteError(error) ?? safeErrorMessage(error));
             process.exitCode = 1;
         }
     });

package/dist/lib/bot/brief-job.d.ts

@@ -0,0 +1,22 @@
+/**
+ * A Create brief job the desktop app sends its local bot as an owner DM. The
+ * body starts with the skill invocation and names the run:
+ *
+ *   /daily-brief <company> --run-id <run_id>
+ *
+ * Such a turn is a job, not a reply: it runs the daily-brief skill once and
+ * reports through workspace/brief/<run_id>/status.json. Resuming the owner's
+ * DM conversation for it replayed the whole history on every brief (hundreds
+ * of thousands of tokens on 2026-10-12), so a brief job gets a fresh model
+ * session of its own and never writes the owner's DM session file. The DM
+ * history still records the job message and the bot's posts, so the owner's
+ * next fresh session knows the brief ran. Unlike a scheduled job, a brief is
+ * a person's click: it is scheduled like a DM, not held behind the job slot.
+ */
+import { type BotSessionScope } from "./paths.js";
+/** The run id when the text is a brief job message, else null. */
+export declare function briefJobRunId(text: string | null | undefined): string | null;
+/** One fresh session per brief run; the session file is never kept. */
+export declare function briefJobSessionScope(runId: string): BotSessionScope;
+export declare function isBriefJobSessionScope(scope: BotSessionScope): boolean;
+//# sourceMappingURL=brief-job.d.ts.map

package/dist/lib/bot/brief-job.js

@@ -0,0 +1,38 @@
+/**
+ * A Create brief job the desktop app sends its local bot as an owner DM. The
+ * body starts with the skill invocation and names the run:
+ *
+ *   /daily-brief <company> --run-id <run_id>
+ *
+ * Such a turn is a job, not a reply: it runs the daily-brief skill once and
+ * reports through workspace/brief/<run_id>/status.json. Resuming the owner's
+ * DM conversation for it replayed the whole history on every brief (hundreds
+ * of thousands of tokens on 2026-10-12), so a brief job gets a fresh model
+ * session of its own and never writes the owner's DM session file. The DM
+ * history still records the job message and the bot's posts, so the owner's
+ * next fresh session knows the brief ran. Unlike a scheduled job, a brief is
+ * a person's click: it is scheduled like a DM, not held behind the job slot.
+ */
+import { jobSessionScope } from "./paths.js";
+const BRIEF_JOB_RUN = /^\s*\/daily-brief\b[^\n]*?--run-id[\s=]+([A-Za-z0-9][A-Za-z0-9_-]*)/;
+/** The run id when the text is a brief job message, else null. */
+export function briefJobRunId(text) {
+    if (!text)
+        return null;
+    const m = BRIEF_JOB_RUN.exec(text);
+    return m ? m[1] : null;
+}
+/**
+ * Reserved so no cloud job id can land in a brief scope: cloud ids are
+ * `job_...` and this token contains a character the session path never gets
+ * from them. The path sanitizer maps it to an underscore in the file name.
+ */
+const BRIEF_JOB_PREFIX = "brief-run:";
+/** One fresh session per brief run; the session file is never kept. */
+export function briefJobSessionScope(runId) {
+    return jobSessionScope(`${BRIEF_JOB_PREFIX}${runId}`);
+}
+export function isBriefJobSessionScope(scope) {
+    return scope.startsWith(`job:${BRIEF_JOB_PREFIX}`);
+}
+//# sourceMappingURL=brief-job.js.map