@indigoai-us/hq-cli 5.345.146 → 5.345.148

package/CHANGELOG.md

@@ -2,6 +2,51 @@
 
 ## [Unreleased]
 
+## [5.345.148] — 2026-10-19
+
+- The `hq lanes` free-memory gate (`throttle.min_available_mem_mb`) now reads the same values as macOS `memory_pressure`: the system-wide free percentage and the pressure level. A Mac that `memory_pressure` reports as normal with enough free memory no longer holds new lanes. While the gate is set, new lanes wait at the warn or critical level. The old `vm_stat` reading, which leaves out purgeable and compressible memory, is used only when those values cannot be read. A memory hold is recorded as `memory_hold` in the throttle state and in `hq lanes admit` output, with the signal, the reading, the level and the threshold.
+- The agent inbox mirror no longer stores owner credentials. `actingContext.credentials` is removed before an item is written to the per-message file or `inbox.jsonl`, and files that already contain it are rewritten on the next inbox read or poll. The rest of the item, including other acting-context fields, is kept. `hq dm inbox`, `hq agent inbox`, and the `hq_inbox_read` tool use the same removal. A scrub logs how many records changed and nothing from the record.
+- HQ Anywhere ignores cached flag-disable decisions after one hour if the registry cannot refresh. Explicit environment kill switches and the required person opt-in still apply.
+- `hq lanes` no longer loses a local lane when the network name changes (Mac.localdomain → Mac.lan, or a bare `Mac` once the machine reports `Mac.lan`). New lanes record a stable id under `~/.hq/lane-host.json`, plus this machine's hardware id. A copied home directory gets a new id instead of sharing the source machine's. A lane stamped with an earlier hostname of this machine still resumes, accepts messages, and keeps the worker's provider thread. Those lanes still count as local load. A lane from another machine stays remote. `worker_lane_busy` names the blocking lane and `hq lanes stop <lane-id>`. A corrupt lane host file names the file and how to restore or delete it, and read-only commands do not rewrite it.
+
+- `hq doctor --fix` now uploads a fresh sync manifest when one is out of date, and it lists every sync check it could not clear, with the reason and the next step in plain words. The same list appears as `unresolved` in `hq doctor --fix --json`. When `HQ_SYNC_MANIFEST_DISABLED` is set, the stale-manifest row says so and tells you to unset it. A manifest upload that runs past 90 seconds is reported as timed out.
+- `hq lanes` no longer marks a finished `--no-story` lane failed when its envelope sets `story_complete: true` with a `story_status` other than `done`. A lane with no board story now takes its status from `story_complete`. Story-bound lanes keep the strict check.
+- Envelope repair for a lane admitted by another lane's watcher no longer fails with "lane lanes not found". The watcher recorded its own script as the CLI path, so the repair started a watcher for a lane named "lanes". Newly started watchers record the real CLI path, and repair refuses a lanes runner script as the CLI path with a clear error. Watchers already running keep the old path until they exit.
+- Work Mesh no longer attaches a session to a lane another session owns. An explicit trusted project bind stays until the session binds again, including after the outbox repairs acknowledged registrations, and is refused when that project belongs to a different company. Only a session id from `--session` or the process environment can make a bind trusted. The shared session pointer file cannot. A bind with an invalid `--session` id now stops with an error.
+- The bundled sync engine now uses hq-cloud 6.18.88, which adds Company Outpost commands.
+  `hq outposts list --company <slug>` lists a company's Outposts. `status`, `login`,
+  `login-code`, `refresh-config` and the `jobs` commands take `--outpost <name|id>` to pick
+  one Outpost when a company has several. `hq outposts jobs` can now edit, pause, resume,
+  delete and run a job now. Provisioning keeps checking status after a create error instead
+  of reporting the Outpost as not created. A company job that has not run yet shows its
+  health as pending.
+- `hq lanes create --runner subagent` registers a lane that an in-session Claude subagent runs, so that work shows on the lanes board. `hq lanes progress` reports its progress and result.
+- The setup bot now ends its first message with the "Who do you work with?" card when the desktop app's first-run handoff shows the team step is not settled. It does not add the card when that step is settled.
+- `hq sync push` splits the success line when the sync engine reports which skips were already up to date. "N already up to date" counts only those files. Other skips are listed separately, for example "2 skipped (1 conflict, 1 broken link)". Until an hq-cloud release that includes this detail is bundled, the line stays "N skipped" and does not name each file. Per-file reasons appear after that release.
+- Temp homes. `hq doctor` warns about idle throwaway HOME folders in the temp dirs: `tmp.*` folders (untouched for 90+ minutes) that hold a `.rustup` or `.cargo` download, and `hq-temp-home.*` folders left by `core/scripts/with-temp-home.sh`. The check is a shallow scan that adds about 1 s on a cold first run and well under a second after that. `hq doctor --sweep-temp-homes [--dry-run]` measures and removes them and reports the GB freed. It skips a folder in use (the wrapper's lock file names a live process, or a process of this user has its cwd or an open file there; on Linux, also a process whose HOME is there), never follows symlinks, and leaves every other temp folder alone. `hq lanes create` adds a temp-home rule to every lane brief (claude, codex and grok) that names the wrapper by its absolute path under the HQ root.
+- `hq core refresh-vault-access --company <slug>` no longer drops other companies from `.hq/vault-access.json`. A scoped refresh replaces only the companies it queried successfully and keeps every other company's entry. Revoked grants still drop out for the refreshed company, and an unscoped refresh still rewrites the whole file. Concurrent refreshes take a lock file that records its owner, so they no longer overwrite each other. A lock left by a refresh that died is reclaimed safely, either once it is 30 seconds old or right away when its process on this machine has exited. The success line now names the refreshed companies, for example `(2 companies, refreshed: acme, identity: …)`.
+- Package the native hook engine for six platforms, with version-pinned offline installation and `hq core hook-engine-path`. `hq doctor` reports missing or damaged native engines while existing bash hooks remain active. Platform signing and publication are opt-in; CLI releases and installs remain independent of signing setup.
+- Adds the Windows hook launcher and custom Bash hook runner for the upcoming native hook engine. Hooks run without visible console flashes, preserve their input, output and exit status, reject oversized captured output, and clean up Windows child processes when the engine exits. Host registration and native built-in hooks follow separately.
+- Windows fixes for `hq install --global`, `hq daemon install` and `hq doctor`. When Windows refuses a symlink, skill folders fall back to a junction. When Windows refuses the junction too (for example a skill folder on a network path), HQ copies the folder and marks the copy with a `.hq-skill-copy` file; install says which skills were copied, and uninstall removes only links and the copies HQ marked, never a folder you made. The marker records the copy's name and a hash of its files, so a copy you edited, renamed or duplicated is kept and named in a notice instead of deleted. The copy step skips only a link back to a folder it is still inside, so a loop finishes, while a link to a sibling folder or a second link to the same folder each gets a full copy. If a rollback keeps a copy you changed, it says so in the install log. A failed install rolls back what it wrote instead of leaving a half-written `~/.claude` and `~/.hq/root`. Link removal, including the company skill wrapper's cleanup, deletes only the link, never the folder it points to, and removing a real folder never recurses through a link inside it. A symlink EPERM now names Developer Mode instead of cloud sync. After install, and in `hq doctor`, HQ warns when the npm folder holding `hq.cmd` is not on your Windows PATH and prints the exact PowerShell command to add it; the command also tells Windows the environment changed, so new terminals see it. HQ does not change PATH itself. An empty user Path is now read as empty instead of unreadable. `hq daemon install` says "Installed and started" only once a new daemon process is confirmed, and a daemon that was already running before the install is stopped first and not counted as the new start. HQ stops that process only after it confirms, right before the stop, that the process command line is `hq daemon run` and that it started before the daemon lock was written. If HQ cannot confirm this, including when Windows cannot read process details, it leaves the process alone and prints how to find and stop an older daemon. `hq daemon uninstall` uses the same check. When no daemon starts and you are not signed in to Windows, it says the daemon starts at your next sign-in. When you are signed in, it reports that the daemon did not start, exits non-zero, and points to `hq daemon status` and the task's last result. Under PowerShell Constrained Language Mode, where HQ cannot run the check, it says the check was unavailable and prints the next-sign-in message without failing. When the check itself breaks, it reports that the daemon did not start and that it could not check whether you are signed in, and exits non-zero. The sign-in check uses the Windows session API through PowerShell, so it works on Windows Home and in any display language. `hq doctor` now says hqd is not running, and points to `hq daemon status`, instead of blaming an unsafe named-pipe ACL.
+- `hq install` copies pack payloads in Node instead of spawning `rsync`, so git-subpath and local-directory pack installs work on Windows. Reinstalling over a prior install removes links in it as links and never deletes what they point at.
+- `hq install @scope/pack` runs npm's `npm-cli.js` with Node on Windows instead of spawning the `npm.cmd` shim, which failed with `ENOENT`.
+- `hq install C:\path\to\pack`, and UNC or `.\` relative paths, are recognized as local-directory installs on Windows instead of failing with "Cannot classify source".
+
+## [5.345.147] — 2026-10-18
+
+- Worker registry rebuild now also skips Codex worktrees (`.codex/worktrees/`). Same nested-checkout trap as `.claude/worktrees/`.
+- Worker registry rebuild now skips Claude Code worktrees (`.claude/worktrees/`). A nested HQ checkout under a company project used to land in `core/workers/registry.yaml`, and `hq lanes create` then failed with `worker_tenancy_unresolved`.
+
+- HQ bots no longer quit and relaunch the HQ desktop app when they answer a message. Bots now run with the desktop update check turned off, so the app is never restarted in the middle of onboarding or a conversation; the app still updates itself as usual.
+- `hq doctor` now reports a release link that does not open, including one left pointing at a deleted update folder. The result tells you to run `hq rescue -y` again. On Windows without Developer Mode, that retry writes a directory link as a junction and a file link as a copy.
+- The bundled sync engine now uses hq-cloud 6.18.85. `hq outposts refresh-config --company <slug>` re-applies the server's job runner configuration to a running company Outpost without rebuilding it (owner or admin).
+- The bundled sync engine now uses hq-cloud 6.18.87. Sync reports every refused stale upload as a failure instead of skipping it quietly.
+- `hq login --no-browser` and `hq auth login --no-browser` print the sign-in URL and wait without launching a browser. CI and Linux sessions without a display use the same behavior. Remote sign-in instructions include SSH port forwarding.
+- `hq files unshare <path>` reports the number of empty entries removed, distinguishes retained grants from a deleted share, and shows the server’s owner/admin-only reason when cleanup is forbidden.
+- Added the native hook engine scaffold and six-platform build checks, including
+  Windows GUI-subsystem builds and a 50-launch no-console test. This prepares
+  Windows hook parity; installed hook settings and behavior are unchanged.
+
 ## [5.345.146] — 2026-10-17
 - `hq capacity route` and `hq lanes create --account auto` can now use a Claude account whose weekly limit is used up but whose paid extra usage is on. Pass `--allow-extra-usage` to allow it; the account is picked last. Without the flag, the refusal now says extra usage is on and names the flag.
 

package/README.md

@@ -163,3 +163,17 @@ Use `--target lane:<lane-id>` or
 `--target session:<claude|codex|grok>:<session-id>` when automatic target
 detection is not appropriate. Monitor output is framed as script data before
 it is added to an agent's context.
+
+### Sign in without opening a browser
+
+Run `hq login --no-browser` or `hq auth login --no-browser` to print a sign-in
+URL and wait for completion. Open the URL in your browser. HQ also uses this
+mode in CI and on Linux without DISPLAY or WAYLAND_DISPLAY. Existing cached
+sessions are reused.
+
+For an SSH host, first connect with `ssh -L 8765:localhost:8765 user@host`,
+then run the login command there and open the printed URL on your computer.
+If your callback port is configured differently, forward that port instead.
+Keep the SSH connection open until login finishes. The sign-in uses a localhost
+callback with PKCE, so there is no device code to enter. It times out after
+15 minutes. Tokens are cached locally and never printed.

package/assets/bot-workers/setup/worker.yaml

@@ -294,6 +294,17 @@ instructions: |
     management tools: what kind of business they run, and what else a
     business like theirs should set up. For someone who joined a team it is
     the tour.
+  - When the team step is not settled (`company` is not in `done`, or
+    `team` is missing or null), end your first message with this block, as
+    the very last thing, so the app shows its "Who do you work with?" card:
+
+    ```hq-block
+    {"v":1,"blocks":[{"kind":"team"}]}
+    ```
+
+    Copy it exactly, the JSON on its own line, with no other fields. Never
+    add it when the team step is settled, and send it in your first message
+    only.
   - Do not ask the explain-or-jump question. The person already chose to jump
     straight in, in the app; write `Intro: skipped` in your progress note.
   - Do not greet again and do not repeat the plan: the app already sent your

package/dist/command-catalog.generated.d.ts

@@ -1170,6 +1170,10 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly flags: "--provider <provider>";
         readonly description: "OAuth provider to use: google, microsoft, or picker";
         readonly hidden: false;
+    }, {
+        readonly flags: "--no-browser";
+        readonly description: "Print the sign-in URL without opening a browser";
+        readonly hidden: false;
     }];
     readonly subcommands: readonly [];
 }, {
@@ -1603,6 +1607,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--provider <provider>";
             readonly description: "OAuth provider to use: google, microsoft, or picker";
             readonly hidden: false;
+        }, {
+            readonly flags: "--no-browser";
+            readonly description: "Print the sign-in URL without opening a browser";
+            readonly hidden: false;
         }];
         readonly subcommands: readonly [];
     }, {
@@ -2836,7 +2844,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "unshare";
-        readonly description: "Remove a named file access grant, or remove an empty ACL row without --with.";
+        readonly description: "Remove a named file access grant, or remove an empty ACL row or grantee-less entries without --with.";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -7334,15 +7342,23 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--company <slug>";
             readonly description: "Provision the company's Outpost instead of your personal box";
             readonly hidden: false;
+        }, {
+            readonly flags: "--name <name>";
+            readonly description: "With --company: not sent. This server creates the company's main Outpost and does not take a name yet";
+            readonly hidden: false;
         }, {
             readonly flags: "--yes";
-            readonly description: "Confirm the $80/month charge (required to provision)";
+            readonly description: "Confirm the monthly charge (required to provision or create)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "With --company, emit one JSON object. Progress goes to stderr.";
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
     }, {
         readonly name: "list";
-        readonly description: "List every Outpost you own";
+        readonly description: "List every Outpost you own, or a company's Outposts with --company";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -7351,6 +7367,10 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly helpText: readonly [];
         readonly arguments: readonly [];
         readonly options: readonly [{
+            readonly flags: "--company <slug>";
+            readonly description: "List the company's Outposts";
+            readonly hidden: false;
+        }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
             readonly hidden: false;
@@ -7374,6 +7394,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--company <slug>";
             readonly description: "Show the company Outpost, its jobs, and each job's run status";
             readonly hidden: false;
+        }, {
+            readonly flags: "--outpost <name|id>";
+            readonly description: "Which company Outpost, when the company has more than one";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
@@ -7382,7 +7406,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "jobs";
-        readonly description: "Register a job on a company Outpost";
+        readonly description: "Register, edit, pause, resume, delete, or run a job on a company Outpost";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -7429,12 +7453,217 @@ export declare const COMMAND_CATALOG: readonly [{
                 readonly flags: "--context <json>";
                 readonly description: "Optional JSON object stored with the job";
                 readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost runs the job, when the company has more than one";
+                readonly hidden: false;
             }, {
                 readonly flags: "--json";
                 readonly description: "Emit the job id and accepted revision as JSON";
                 readonly hidden: false;
             }];
             readonly subcommands: readonly [];
+        }, {
+            readonly name: "edit";
+            readonly description: "Change a company job. Omitted fields stay as they are. Requires --revision";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <jobId>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Job id from hq outposts status --company <slug>";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company that owns the Outpost";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost, when the company has more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--revision <rev>";
+                readonly description: "Accepted revision you last saw. Required for edit and delete --yes";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--prompt <text>";
+                readonly description: "What the job should do. Omit to keep the current prompt";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--timezone <name>";
+                readonly description: "IANA timezone, such as America/New_York. Omit to keep the current timezone";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--cron <expr>";
+                readonly description: "Recurring schedule: rate(N minutes|hours|days), a five-field cron with * for day of month and month (such as \"*/15 * * * *\"; translated to the AWS form), or cron(MIN HOUR ? * DOW *). Omit to keep the current schedule";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--at <iso>";
+                readonly description: "One-time ISO-8601 instant. Do not combine with --cron";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--script <text>";
+                readonly description: "Precondition script stored with the job. Omit to keep the current script";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--context <json>";
+                readonly description: "JSON object stored with the job. Omit to keep the current context";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--clear-script";
+                readonly description: "Remove the job's precondition script";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--clear-context";
+                readonly description: "Remove the job's stored context";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit the result as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "pause";
+            readonly description: "Pause a company job";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <jobId>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Job id from hq outposts status --company <slug>";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company that owns the Outpost";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost, when the company has more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--revision <rev>";
+                readonly description: "Accepted revision you last saw. Required for edit and delete --yes";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit the result as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "resume";
+            readonly description: "Resume a paused company job";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <jobId>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Job id from hq outposts status --company <slug>";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company that owns the Outpost";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost, when the company has more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--revision <rev>";
+                readonly description: "Accepted revision you last saw. Required for edit and delete --yes";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit the result as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "delete";
+            readonly description: "Delete a company job (requires --yes)";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <jobId>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Job id from hq outposts status --company <slug>";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company that owns the Outpost";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost, when the company has more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--revision <rev>";
+                readonly description: "Accepted revision you last saw. Required for edit and delete --yes";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--yes";
+                readonly description: "Confirm deletion of this job";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit the result as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "run-now";
+            readonly description: "Run a company job once now";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <jobId>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Job id from hq outposts status --company <slug>";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company that owns the Outpost";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost, when the company has more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--revision <rev>";
+                readonly description: "Accepted revision you last saw. Required for edit and delete --yes";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit the result as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
         }];
     }, {
         readonly name: "exec";
@@ -7590,6 +7819,30 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "refresh-config";
+        readonly description: "Re-apply the server's job runner configuration to the company Outpost (owner or admin)";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--company <slug>";
+            readonly description: "Company slug";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--outpost <name|id>";
+            readonly description: "Which company Outpost, when the company has more than one";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Emit raw JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "codex-enable";
         readonly description: "Enable (or retry) Codex on an Outpost";
@@ -7628,6 +7881,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--company <slug>";
             readonly description: "Request a new sign-in link for the company's Outpost (owner or admin)";
             readonly hidden: false;
+        }, {
+            readonly flags: "--outpost <name|id>";
+            readonly description: "Which company Outpost, when the company has more than one";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
@@ -7657,6 +7914,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--company <slug>";
             readonly description: "Sign in the company's Outpost (owner or admin)";
             readonly hidden: false;
+        }, {
+            readonly flags: "--outpost <name|id>";
+            readonly description: "Which company Outpost, when the company has more than one";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
@@ -8129,6 +8390,22 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "hook-engine-path";
+        readonly description: "Print the offline, version-pinned native hook engine path";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--repair";
+            readonly description: "Repair the pinned copy after closing running hook processes";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "ontology";
         readonly description: "Checkpoint ontology steps run by the checkpoint sibling (gated by checkpoint.ontology)";
@@ -10629,6 +10906,14 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly flags: "--client-health-report";
         readonly description: "Resolve the opt-in hq-flags gate used by the client-health report hook.";
         readonly hidden: true;
+    }, {
+        readonly flags: "--sweep-temp-homes";
+        readonly description: "Delete idle temp homes (90+ minutes untouched, not in use): tmp.* folders holding .rustup or .cargo, and hq-temp-home.* folders left by the wrapper. Reports GB freed.";
+        readonly hidden: false;
+    }, {
+        readonly flags: "--dry-run";
+        readonly description: "With --sweep-temp-homes, list what would be removed and delete nothing.";
+        readonly hidden: false;
     }, {
         readonly flags: "--yes";
         readonly description: "Skip the interactive --fix confirmation (non-interactive use).";
@@ -14044,6 +14329,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--provider <name>";
             readonly description: "claude | codex | grok";
             readonly hidden: false;
+        }, {
+            readonly flags: "--runner <kind>";
+            readonly description: "process (default) | subagent: register a lane an in-session Claude subagent runs; skips admission and starts no process";
+            readonly hidden: false;
         }, {
             readonly flags: "--remote-control";
             readonly description: "Open a Claude lane in Remote Control using account a for login and the selected account for inference";
@@ -14107,6 +14396,39 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "progress";
+        readonly description: "Report on a subagent lane: a progress line, the final envelope, or a failure";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <lane-id>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "lane-id";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "Lane id";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--line <text>";
+            readonly description: "Progress line shown as the lane's last line";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--envelope <path>";
+            readonly description: "Final hq-lane-envelope.v1 file; the lane state follows its decision";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--failed <reason>";
+            readonly description: "Mark the lane failed when the subagent ended without an envelope";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "JSON on stdout (always)";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "approve-target";
         readonly description: "";