@indigoai-us/hq-cli 5.345.147 → 5.345.149

package/CHANGELOG.md

@@ -2,6 +2,71 @@
 
 ## [Unreleased]
 
+## [5.345.149] — 2026-10-19
+- `hq access` answers faster. It checks the exact path first and, on a miss,
+  looks only in the nearest folder instead of listing the whole vault. It
+  loads the member list only when it is about to send an access request.
+  Results and denial reasons are the same as before.
+- `hq access` takes several paths at once (`hq access a.md b.md`) or reads
+  them from `--stdin`, one per line. Each path gets its own result, `--json`
+  prints an array, and the exit code is the highest one across the paths.
+- A folder path now resolves to the folder, and the three spellings `docs`,
+  `docs/` and `docs/*` all check the same folder. Before, a bare folder name
+  was matched against every file in the vault and usually came back
+  ambiguous.
+- Two `hq bot create` error messages now call HQ's built-in bot "your assistant" instead of "setup bot", matching the desktop app. Using `--kind company` with the setup worker now says "HQ's assistant is always a personal bot; drop --kind company.", and using the reserved name `setup` with another worker now says the name is reserved for HQ's assistant. The reserved name and the worker are still `setup`, so commands are unchanged.
+- `hq channels list` takes `--json`, `--active-since <time|duration>` and
+  `--sort activity`. `--active-since 2h` (or an ISO time) lists only the
+  channels and group DMs with activity since then, newest first, so a sweep
+  no longer has to read all of your channels to find the busy ones. `--json`
+  includes each channel's last-activity time and unread count.
+- New `hq channels changes [--cursor <token>]` prints the channels that changed
+  since the last call's cursor, as JSON. With no cursor it prints a full
+  snapshot and a cursor to use next time.
+- `hq dm channel <channel id> --json` no longer downloads your whole channel
+  list first, so reading one channel by id takes about a second.
+- `hq billing usage` no longer prices meters for a company or personal account
+  on a flat plan (for example a Workforce company that subscribed before usage
+  pricing). It shows the readings and one line saying usage meters are not
+  billed, with no per-meter cost and no projected bill. `--json` carries
+  `onUsagePricing` and leaves out the cost fields. The plan comes from the
+  server; when an older server does not send it, the command uses the billing
+  summary, and it shows no cost when neither says.
+- `hq library add` now reaches the company vault for members in `shared` or `custom` sync mode. When the library folder is outside the membership's sync scope, the command pins it the same way `hq files get` does, so the next sync uploads the new placeholders and teammates and cloud search can find them. `all` mode and folders already covered by a grant or pin are left alone. If the sync scope cannot be read or the pin cannot be written, the command prints a warning with the exact `hq files get <folder>/ --company <co>` command to run. `--json` output reports this as `syncScope`.
+- `hq library add --to <folder>` no longer pins the whole target folder for `shared` or `custom` sync. Outside the default `library/` folder it pins only the placeholders it wrote, so the rest of that folder stays out of sync. When the pin cannot be written or the sync scope cannot be read, the warning lists the exact paths to add to `.hq/pins.json` (the `hq files get library/` command is still printed for the default folder).
+- Windows cold-install polish. The first `hq` command adds the npm folder that holds `hq.cmd` to the user PATH (HKCU only), idempotently, and broadcasts the environment change. It never edits the machine PATH. `hq doctor` still prints the exact PowerShell command when that folder is missing. npm install no longer needs a package postinstall for the mesh daemon: `hq mesh daemon install --if-stale` runs once on the first real command for that CLI version (the postinstall now only pins the native hook engine), and better-sqlite3 loads from its prebuilt binary or fails with `npm install -g @indigoai-us/hq-cli --allow-scripts=better-sqlite3`. On a Windows console that is not UTF-8, hq prints ASCII instead of a garbled em dash. `hq invite --help` and other unknown commands print `unknown command` plus a nested did-you-mean and exit non-zero, instead of the main help. When the hqd named pipe cannot be used, `hq doctor` says whether hqd is down, access was denied, the pipe is missing, or hqd did not answer. On Windows, `hq reindex` now finds the npm `codex.cmd` shim on PATH and runs it through cmd.exe, so Codex hook trust no longer fails with `spawn codex ENOENT`. When Codex is missing, reindex names it and says how to fix it. Any hook-trust failure now says that runtime will not run HQ hooks until trust succeeds and to rerun `hq reindex`. The SessionStart vault-access refresh (`hq core refresh-vault-access`) exits right away when nobody is signed in to HQ. Each child `hq` call it makes has a 30-second timeout (`HQ_VAULT_ACCESS_TIMEOUT_MS` changes it) and runs with `HQ_NO_BROWSER_LOGIN=1`, so a signed-out child fails fast instead of waiting on a browser login.
+- Register the pinned native hook launcher behind the default-off hook-engine-launcher flag, with Claude exec form, Codex commandWindows, and reindex rollback to bash. Project hook files are converted in place and restored exactly, and a registration file that cannot be read no longer stops the others or their Codex trust. Codex hooks are only trusted after their file was written and verified.
+
+## [5.345.148] — 2026-10-19
+
+- The `hq lanes` free-memory gate (`throttle.min_available_mem_mb`) now reads the same values as macOS `memory_pressure`: the system-wide free percentage and the pressure level. A Mac that `memory_pressure` reports as normal with enough free memory no longer holds new lanes. While the gate is set, new lanes wait at the warn or critical level. The old `vm_stat` reading, which leaves out purgeable and compressible memory, is used only when those values cannot be read. A memory hold is recorded as `memory_hold` in the throttle state and in `hq lanes admit` output, with the signal, the reading, the level and the threshold.
+- The agent inbox mirror no longer stores owner credentials. `actingContext.credentials` is removed before an item is written to the per-message file or `inbox.jsonl`, and files that already contain it are rewritten on the next inbox read or poll. The rest of the item, including other acting-context fields, is kept. `hq dm inbox`, `hq agent inbox`, and the `hq_inbox_read` tool use the same removal. A scrub logs how many records changed and nothing from the record.
+- HQ Anywhere ignores cached flag-disable decisions after one hour if the registry cannot refresh. Explicit environment kill switches and the required person opt-in still apply.
+- `hq lanes` no longer loses a local lane when the network name changes (Mac.localdomain → Mac.lan, or a bare `Mac` once the machine reports `Mac.lan`). New lanes record a stable id under `~/.hq/lane-host.json`, plus this machine's hardware id. A copied home directory gets a new id instead of sharing the source machine's. A lane stamped with an earlier hostname of this machine still resumes, accepts messages, and keeps the worker's provider thread. Those lanes still count as local load. A lane from another machine stays remote. `worker_lane_busy` names the blocking lane and `hq lanes stop <lane-id>`. A corrupt lane host file names the file and how to restore or delete it, and read-only commands do not rewrite it.
+
+- `hq doctor --fix` now uploads a fresh sync manifest when one is out of date, and it lists every sync check it could not clear, with the reason and the next step in plain words. The same list appears as `unresolved` in `hq doctor --fix --json`. When `HQ_SYNC_MANIFEST_DISABLED` is set, the stale-manifest row says so and tells you to unset it. A manifest upload that runs past 90 seconds is reported as timed out.
+- `hq lanes` no longer marks a finished `--no-story` lane failed when its envelope sets `story_complete: true` with a `story_status` other than `done`. A lane with no board story now takes its status from `story_complete`. Story-bound lanes keep the strict check.
+- Envelope repair for a lane admitted by another lane's watcher no longer fails with "lane lanes not found". The watcher recorded its own script as the CLI path, so the repair started a watcher for a lane named "lanes". Newly started watchers record the real CLI path, and repair refuses a lanes runner script as the CLI path with a clear error. Watchers already running keep the old path until they exit.
+- Work Mesh no longer attaches a session to a lane another session owns. An explicit trusted project bind stays until the session binds again, including after the outbox repairs acknowledged registrations, and is refused when that project belongs to a different company. Only a session id from `--session` or the process environment can make a bind trusted. The shared session pointer file cannot. A bind with an invalid `--session` id now stops with an error.
+- The bundled sync engine now uses hq-cloud 6.18.88, which adds Company Outpost commands.
+  `hq outposts list --company <slug>` lists a company's Outposts. `status`, `login`,
+  `login-code`, `refresh-config` and the `jobs` commands take `--outpost <name|id>` to pick
+  one Outpost when a company has several. `hq outposts jobs` can now edit, pause, resume,
+  delete and run a job now. Provisioning keeps checking status after a create error instead
+  of reporting the Outpost as not created. A company job that has not run yet shows its
+  health as pending.
+- `hq lanes create --runner subagent` registers a lane that an in-session Claude subagent runs, so that work shows on the lanes board. `hq lanes progress` reports its progress and result.
+- The setup bot now ends its first message with the "Who do you work with?" card when the desktop app's first-run handoff shows the team step is not settled. It does not add the card when that step is settled.
+- `hq sync push` splits the success line when the sync engine reports which skips were already up to date. "N already up to date" counts only those files. Other skips are listed separately, for example "2 skipped (1 conflict, 1 broken link)". Until an hq-cloud release that includes this detail is bundled, the line stays "N skipped" and does not name each file. Per-file reasons appear after that release.
+- Temp homes. `hq doctor` warns about idle throwaway HOME folders in the temp dirs: `tmp.*` folders (untouched for 90+ minutes) that hold a `.rustup` or `.cargo` download, and `hq-temp-home.*` folders left by `core/scripts/with-temp-home.sh`. The check is a shallow scan that adds about 1 s on a cold first run and well under a second after that. `hq doctor --sweep-temp-homes [--dry-run]` measures and removes them and reports the GB freed. It skips a folder in use (the wrapper's lock file names a live process, or a process of this user has its cwd or an open file there; on Linux, also a process whose HOME is there), never follows symlinks, and leaves every other temp folder alone. `hq lanes create` adds a temp-home rule to every lane brief (claude, codex and grok) that names the wrapper by its absolute path under the HQ root.
+- `hq core refresh-vault-access --company <slug>` no longer drops other companies from `.hq/vault-access.json`. A scoped refresh replaces only the companies it queried successfully and keeps every other company's entry. Revoked grants still drop out for the refreshed company, and an unscoped refresh still rewrites the whole file. Concurrent refreshes take a lock file that records its owner, so they no longer overwrite each other. A lock left by a refresh that died is reclaimed safely, either once it is 30 seconds old or right away when its process on this machine has exited. The success line now names the refreshed companies, for example `(2 companies, refreshed: acme, identity: …)`.
+- Package the native hook engine for six platforms, with version-pinned offline installation and `hq core hook-engine-path`. `hq doctor` reports missing or damaged native engines while existing bash hooks remain active. Platform signing and publication are opt-in; CLI releases and installs remain independent of signing setup.
+- Adds the Windows hook launcher and custom Bash hook runner for the upcoming native hook engine. Hooks run without visible console flashes, preserve their input, output and exit status, reject oversized captured output, and clean up Windows child processes when the engine exits. Host registration and native built-in hooks follow separately.
+- Windows fixes for `hq install --global`, `hq daemon install` and `hq doctor`. When Windows refuses a symlink, skill folders fall back to a junction. When Windows refuses the junction too (for example a skill folder on a network path), HQ copies the folder and marks the copy with a `.hq-skill-copy` file; install says which skills were copied, and uninstall removes only links and the copies HQ marked, never a folder you made. The marker records the copy's name and a hash of its files, so a copy you edited, renamed or duplicated is kept and named in a notice instead of deleted. The copy step skips only a link back to a folder it is still inside, so a loop finishes, while a link to a sibling folder or a second link to the same folder each gets a full copy. If a rollback keeps a copy you changed, it says so in the install log. A failed install rolls back what it wrote instead of leaving a half-written `~/.claude` and `~/.hq/root`. Link removal, including the company skill wrapper's cleanup, deletes only the link, never the folder it points to, and removing a real folder never recurses through a link inside it. A symlink EPERM now names Developer Mode instead of cloud sync. After install, and in `hq doctor`, HQ warns when the npm folder holding `hq.cmd` is not on your Windows PATH and prints the exact PowerShell command to add it; the command also tells Windows the environment changed, so new terminals see it. HQ does not change PATH itself. An empty user Path is now read as empty instead of unreadable. `hq daemon install` says "Installed and started" only once a new daemon process is confirmed, and a daemon that was already running before the install is stopped first and not counted as the new start. HQ stops that process only after it confirms, right before the stop, that the process command line is `hq daemon run` and that it started before the daemon lock was written. If HQ cannot confirm this, including when Windows cannot read process details, it leaves the process alone and prints how to find and stop an older daemon. `hq daemon uninstall` uses the same check. When no daemon starts and you are not signed in to Windows, it says the daemon starts at your next sign-in. When you are signed in, it reports that the daemon did not start, exits non-zero, and points to `hq daemon status` and the task's last result. Under PowerShell Constrained Language Mode, where HQ cannot run the check, it says the check was unavailable and prints the next-sign-in message without failing. When the check itself breaks, it reports that the daemon did not start and that it could not check whether you are signed in, and exits non-zero. The sign-in check uses the Windows session API through PowerShell, so it works on Windows Home and in any display language. `hq doctor` now says hqd is not running, and points to `hq daemon status`, instead of blaming an unsafe named-pipe ACL.
+- `hq install` copies pack payloads in Node instead of spawning `rsync`, so git-subpath and local-directory pack installs work on Windows. Reinstalling over a prior install removes links in it as links and never deletes what they point at.
+- `hq install @scope/pack` runs npm's `npm-cli.js` with Node on Windows instead of spawning the `npm.cmd` shim, which failed with `ENOENT`.
+- `hq install C:\path\to\pack`, and UNC or `.\` relative paths, are recognized as local-directory installs on Windows instead of failing with "Cannot classify source".
+
 ## [5.345.147] — 2026-10-18
 
 - Worker registry rebuild now also skips Codex worktrees (`.codex/worktrees/`). Same nested-checkout trap as `.claude/worktrees/`.

package/README.md

@@ -7,6 +7,8 @@ npm install -g @indigoai-us/hq-cli
 hq --help
 ```
 
+On Windows, the first `hq` command adds the folder that holds `hq.cmd` to your user PATH (HKCU only, not the machine PATH). You do not need to approve npm install scripts for hq itself. If the local database cannot load better-sqlite3 because npm skipped its install script, HQ tries to download the prebuilt binary. If that fails, the error names `npm install -g @indigoai-us/hq-cli --allow-scripts=better-sqlite3`.
+
 ## Marketplace package verification
 
 Marketplace packages must include an Ed25519 signature made with a platform

package/assets/bot-workers/setup/worker.yaml

@@ -294,6 +294,17 @@ instructions: |
     management tools: what kind of business they run, and what else a
     business like theirs should set up. For someone who joined a team it is
     the tour.
+  - When the team step is not settled (`company` is not in `done`, or
+    `team` is missing or null), end your first message with this block, as
+    the very last thing, so the app shows its "Who do you work with?" card:
+
+    ```hq-block
+    {"v":1,"blocks":[{"kind":"team"}]}
+    ```
+
+    Copy it exactly, the JSON on its own line, with no other fields. Never
+    add it when the team step is settled, and send it in your first message
+    only.
   - Do not ask the explain-or-jump question. The person already chose to jump
     straight in, in the app; write `Intro: skipped` in your progress note.
   - Do not greet again and do not repeat the plan: the app already sent your

package/dist/command-catalog.generated.d.ts

@@ -3125,20 +3125,20 @@ export declare const COMMAND_CATALOG: readonly [{
     }];
 }, {
     readonly name: "access";
-    readonly description: "Tell whether a vault file exists and whether you can read it. Never a bare not-found. Exit codes: 0 local/not-synced, 2 never-existed, 3 no-access, 4 ambiguous.";
+    readonly description: "Tell whether a vault file exists and whether you can read it. Never a bare not-found. Takes one or more paths or queries. Exit codes: 0 local/not-synced, 2 never-existed, 3 no-access, 4 ambiguous.";
     readonly aliases: readonly [];
     readonly hidden: false;
     readonly helpOption: true;
     readonly helpCommand: false;
-    readonly usage: "[options] <path-or-query>";
+    readonly usage: "[options] [vault-path...]";
     readonly helpText: readonly [{
         readonly position: "after";
-        readonly text: "\nExit codes:\n  0  local or not-synced (file exists and you can read it)\n  2  never-existed (the path was never created)\n  3  no-access (the file exists but you cannot read it)\n  4  ambiguous (several keys matched; pick one)\n";
+        readonly text: "\nExit codes:\n  0  local or not-synced (file exists and you can read it)\n  2  never-existed (the path was never created)\n  3  no-access (the file exists but you cannot read it)\n  4  ambiguous (several keys matched; pick one)\n\nWith several paths, each gets its own result block and the exit code is the\nhighest one across the paths.\n";
     }];
     readonly arguments: readonly [{
-        readonly name: "path-or-query";
-        readonly required: true;
-        readonly variadic: false;
+        readonly name: "vault-path";
+        readonly required: false;
+        readonly variadic: true;
         readonly description: "";
     }];
     readonly options: readonly [{
@@ -3151,7 +3151,11 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly hidden: false;
     }, {
         readonly flags: "--json";
-        readonly description: "Print a single JSON object";
+        readonly description: "Print a single JSON object (an array for several paths)";
+        readonly hidden: false;
+    }, {
+        readonly flags: "--stdin";
+        readonly description: "Read more paths from stdin, one per line";
         readonly hidden: false;
     }, {
         readonly flags: "--no-fix";
@@ -4026,7 +4030,35 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly usage: "[options]";
         readonly helpText: readonly [];
         readonly arguments: readonly [];
-        readonly options: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Output the channel array as JSON, including activity fields.";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--active-since <when>";
+            readonly description: "Only channels with activity at or after an ISO time or a duration back from now (30m, 2h, 1d); newest first.";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--sort <order>";
+            readonly description: "'activity' lists the most recently active channels first.";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "changes";
+        readonly description: "Print the channels that changed since a feed cursor, as JSON (no cursor → full snapshot).";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--cursor <token>";
+            readonly description: "Cursor from the previous `hq channels changes` response.";
+            readonly hidden: false;
+        }];
         readonly subcommands: readonly [];
     }, {
         readonly name: "members";
@@ -7342,15 +7374,23 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--company <slug>";
             readonly description: "Provision the company's Outpost instead of your personal box";
             readonly hidden: false;
+        }, {
+            readonly flags: "--name <name>";
+            readonly description: "With --company: not sent. This server creates the company's main Outpost and does not take a name yet";
+            readonly hidden: false;
         }, {
             readonly flags: "--yes";
-            readonly description: "Confirm the $80/month charge (required to provision)";
+            readonly description: "Confirm the monthly charge (required to provision or create)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "With --company, emit one JSON object. Progress goes to stderr.";
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
     }, {
         readonly name: "list";
-        readonly description: "List every Outpost you own";
+        readonly description: "List every Outpost you own, or a company's Outposts with --company";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -7359,6 +7399,10 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly helpText: readonly [];
         readonly arguments: readonly [];
         readonly options: readonly [{
+            readonly flags: "--company <slug>";
+            readonly description: "List the company's Outposts";
+            readonly hidden: false;
+        }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
             readonly hidden: false;
@@ -7382,6 +7426,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--company <slug>";
             readonly description: "Show the company Outpost, its jobs, and each job's run status";
             readonly hidden: false;
+        }, {
+            readonly flags: "--outpost <name|id>";
+            readonly description: "Which company Outpost, when the company has more than one";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
@@ -7390,7 +7438,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "jobs";
-        readonly description: "Register a job on a company Outpost";
+        readonly description: "Register, edit, pause, resume, delete, or run a job on a company Outpost";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -7437,12 +7485,217 @@ export declare const COMMAND_CATALOG: readonly [{
                 readonly flags: "--context <json>";
                 readonly description: "Optional JSON object stored with the job";
                 readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost runs the job, when the company has more than one";
+                readonly hidden: false;
             }, {
                 readonly flags: "--json";
                 readonly description: "Emit the job id and accepted revision as JSON";
                 readonly hidden: false;
             }];
             readonly subcommands: readonly [];
+        }, {
+            readonly name: "edit";
+            readonly description: "Change a company job. Omitted fields stay as they are. Requires --revision";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <jobId>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Job id from hq outposts status --company <slug>";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company that owns the Outpost";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost, when the company has more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--revision <rev>";
+                readonly description: "Accepted revision you last saw. Required for edit and delete --yes";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--prompt <text>";
+                readonly description: "What the job should do. Omit to keep the current prompt";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--timezone <name>";
+                readonly description: "IANA timezone, such as America/New_York. Omit to keep the current timezone";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--cron <expr>";
+                readonly description: "Recurring schedule: rate(N minutes|hours|days), a five-field cron with * for day of month and month (such as \"*/15 * * * *\"; translated to the AWS form), or cron(MIN HOUR ? * DOW *). Omit to keep the current schedule";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--at <iso>";
+                readonly description: "One-time ISO-8601 instant. Do not combine with --cron";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--script <text>";
+                readonly description: "Precondition script stored with the job. Omit to keep the current script";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--context <json>";
+                readonly description: "JSON object stored with the job. Omit to keep the current context";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--clear-script";
+                readonly description: "Remove the job's precondition script";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--clear-context";
+                readonly description: "Remove the job's stored context";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit the result as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "pause";
+            readonly description: "Pause a company job";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <jobId>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Job id from hq outposts status --company <slug>";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company that owns the Outpost";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost, when the company has more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--revision <rev>";
+                readonly description: "Accepted revision you last saw. Required for edit and delete --yes";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit the result as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "resume";
+            readonly description: "Resume a paused company job";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <jobId>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Job id from hq outposts status --company <slug>";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company that owns the Outpost";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost, when the company has more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--revision <rev>";
+                readonly description: "Accepted revision you last saw. Required for edit and delete --yes";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit the result as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "delete";
+            readonly description: "Delete a company job (requires --yes)";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <jobId>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Job id from hq outposts status --company <slug>";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company that owns the Outpost";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost, when the company has more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--revision <rev>";
+                readonly description: "Accepted revision you last saw. Required for edit and delete --yes";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--yes";
+                readonly description: "Confirm deletion of this job";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit the result as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "run-now";
+            readonly description: "Run a company job once now";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <jobId>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "jobId";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Job id from hq outposts status --company <slug>";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company that owns the Outpost";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--outpost <name|id>";
+                readonly description: "Which company Outpost, when the company has more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--revision <rev>";
+                readonly description: "Accepted revision you last saw. Required for edit and delete --yes";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit the result as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
         }];
     }, {
         readonly name: "exec";
@@ -7612,6 +7865,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--company <slug>";
             readonly description: "Company slug";
             readonly hidden: false;
+        }, {
+            readonly flags: "--outpost <name|id>";
+            readonly description: "Which company Outpost, when the company has more than one";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
@@ -7656,6 +7913,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--company <slug>";
             readonly description: "Request a new sign-in link for the company's Outpost (owner or admin)";
             readonly hidden: false;
+        }, {
+            readonly flags: "--outpost <name|id>";
+            readonly description: "Which company Outpost, when the company has more than one";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
@@ -7685,6 +7946,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--company <slug>";
             readonly description: "Sign in the company's Outpost (owner or admin)";
             readonly hidden: false;
+        }, {
+            readonly flags: "--outpost <name|id>";
+            readonly description: "Which company Outpost, when the company has more than one";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
@@ -8157,6 +8422,26 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "hook-engine-path";
+        readonly description: "Print the offline, version-pinned native hook engine path";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--repair";
+            readonly description: "Repair the pinned copy after closing running hook processes";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--for-registration";
+            readonly description: "Print a path only when the offline launcher flag is enabled";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "ontology";
         readonly description: "Checkpoint ontology steps run by the checkpoint sibling (gated by checkpoint.ontology)";
@@ -10657,6 +10942,14 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly flags: "--client-health-report";
         readonly description: "Resolve the opt-in hq-flags gate used by the client-health report hook.";
         readonly hidden: true;
+    }, {
+        readonly flags: "--sweep-temp-homes";
+        readonly description: "Delete idle temp homes (90+ minutes untouched, not in use): tmp.* folders holding .rustup or .cargo, and hq-temp-home.* folders left by the wrapper. Reports GB freed.";
+        readonly hidden: false;
+    }, {
+        readonly flags: "--dry-run";
+        readonly description: "With --sweep-temp-homes, list what would be removed and delete nothing.";
+        readonly hidden: false;
     }, {
         readonly flags: "--yes";
         readonly description: "Skip the interactive --fix confirmation (non-interactive use).";
@@ -14072,6 +14365,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--provider <name>";
             readonly description: "claude | codex | grok";
             readonly hidden: false;
+        }, {
+            readonly flags: "--runner <kind>";
+            readonly description: "process (default) | subagent: register a lane an in-session Claude subagent runs; skips admission and starts no process";
+            readonly hidden: false;
         }, {
             readonly flags: "--remote-control";
             readonly description: "Open a Claude lane in Remote Control using account a for login and the selected account for inference";
@@ -14135,6 +14432,39 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "progress";
+        readonly description: "Report on a subagent lane: a progress line, the final envelope, or a failure";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <lane-id>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "lane-id";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "Lane id";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--line <text>";
+            readonly description: "Progress line shown as the lane's last line";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--envelope <path>";
+            readonly description: "Final hq-lane-envelope.v1 file; the lane state follows its decision";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--failed <reason>";
+            readonly description: "Mark the lane failed when the subagent ended without an envelope";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "JSON on stdout (always)";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "approve-target";
         readonly description: "";