@indigoai-us/hq-cli 5.345.171 → 5.345.173

package/CHANGELOG.md

@@ -2,6 +2,40 @@
 
 ## [Unreleased]
 
+## [5.345.173] — 2026-10-27
+- The sync-core reconcile now counts the conflict and merge actions in a vault's read-only plan as writes: a vault is held read-only while its plan would write more than 100 conflict or merge copies, the count is recorded next to the plan's upload, download and delete counts in `~/.hq/sync-core/rollout.json`, and `hq sync-core status` prints it.
+- A machine can keep one vault off the new sync engine while its company switch is on: `~/.hq/sync-core/skip.json` with `{"vaults": {"<vault uid>": "<reason>"}}` makes the reconcile leave that vault on the current sync (stopping its engine unit if one ran), record the uid and reason under `skipped` in `rollout.json`, and show it in `hq sync-core status`. A malformed file is reported as a warning and skips nothing.
+- The reconcile never downgrades the engine: when `~/.hq/bin/hq-syncd.release` names a release newer than the pinned one and the binary is present, it keeps that binary and runs the engine units with it.
+
+## [5.345.172] — 2026-10-27
+- The daemon now moves vaults to the new sync engine by itself, following a per-company switch (`sync.rust-engine-rollout`) instead of a hand-written `syncCoreCanary` entry in `~/.hq/daemon/config.json`. A new `sync-core` service on desktop and self-hosted machines runs `hq daemon service sync-core-reconcile` every 10 minutes: it reads the switch for every company this machine belongs to, downloads the pinned hq-syncd release (v0.1.13) from the public mirror and checks it against the release's SHA256SUMS, installs it at `~/.hq/bin/hq-syncd`, writes one engine home per switched vault under `~/.hq/sync-core/engines/<vault>/`, and records the result in `~/.hq/sync-core/rollout.json`. Each vault's engine first runs read-only alongside the current sync until it has built its index and planned a pass; the reconcile records that plan's upload, download, delete, server-row and local-file counts per vault (`hq sync-core status` shows them). A vault is then promoted to full mode and turned off in the current sync (`menubar.json`) only when the plan would upload or delete at most 100 paths, and the daemon runs its `sync-core:<vault>` unit in full mode only after the current sync has stopped touching that vault. Company vaults stay read-only in this release: the engine's server snapshot is filtered by the caller's visibility while the current sync pulled the whole tree, so a full-mode company engine would upload the difference; promotion waits for an engine release that scopes the local tree the same way. The personal vault moves when at least one of the person's companies is switched on. When a switch turns off, the daemon stops that vault's engine, turns the current sync back on for it, and leaves the engine's index on disk. A switch that cannot be read keeps the vault where it was. `hq sync-core reconcile` and `hq sync-core status` run the same logic by hand (agent boxes run `reconcile --companies-only`). The old `syncCoreCanary` config key is ignored.
+
+- `hq files share 'clients/*/11_reports' --with <person>` now sends the path as typed instead of refusing it. The vault accepts one `*` standing for a whole folder name, so a single grant covers the `11_reports` folder under every client. A `*` inside a folder name (`acme*`), two wildcard folders, or a path made only of wildcards is still refused by the vault. Feedback 600e747f-e608-4266-8e1a-a9a9a4034828.
+- A bot created with `--hq-fleet-runtime` now starts with HQ knowledge: its standing HQ instructions (identity, owner, HQ folder, worker definition, persona and memory rules) become the runtime persona, the HQ folder's skills are available to it, and the runtime's own lifecycle and system notices no longer reach the conversation. The CLI checks those instructions with the runtime's own scanner before saving them and refreshes them from the worker folder on every start and restart. `hq bot list` and `hq bot status` read a runtime bot's process from its gateway, and the HQ background service no longer starts a second, legacy copy of a runtime bot. Pins hq-fleet-local v0.4.5.
+- Creating a bot with `--hq-fleet-runtime` no longer needs Python on the computer: the CLI installs a private,
+  pinned Python under the HQ fleet folder and builds the bot's runtime from it, on macOS, Linux and Windows.
+- `hq-hook` 0.3.1: the bridge runs a hook port only for a bash script version
+  the port was checked against. It hashes the `--script` it is given, and any
+  other version of `policy-enforcement-gate.sh` runs bash alone (logged as
+  `script-mismatch`), so an hq-core change to the gate is never answered by
+  an older engine.
+- The gate port now opens only the path column of the policy list, as bash
+  does, and never the excerpt text.
+- On Windows the gate port goes to bash for:
+  - UNC, device and MSYS-form policy paths, and for root forms Win32 and MSYS
+    read differently;
+  - a state folder it cannot create;
+  - Windows device names used as session ids.
+- The pass stamp records the bytes the decision read.
+- The nightly `hq-hook` workflow now runs the gate parity test on every target,
+  using Git Bash on Windows.
+- In `on` mode, a hook port that declines a payload makes `hq-hook bridge`
+  exit 75 with no output. master-hook then runs the bash hook itself, so the
+  engine no longer starts bash for those calls. On Windows this removes about
+  200 to 330 ms from every gate call the port declines.
+- Agent sign-in no longer hangs on a stale network connection (hq-cloud 6.18.103).
+- When a company's sync stops because HQ could not finish listing the company's vault files (error code `REMOTE_LIST_NOT_CONVERGING` from hq-cloud), `hq sync now`, `hq sync push`, `hq sync pull` and their `--all` and `--personal` forms now print "HQ could not finish listing this company's files. Try hq sync now again in a minute; if it keeps happening, run hq feedback bug." with the original engine message on a following `Detail:` line, instead of only the raw engine message. `hq sync push --json` carries the same text in its `fatal` event. Menubar and background sync use the sync runner bundled from hq-cloud, which reports per-company errors as plain text without the code, so it still shows the engine message. Feedback e5eda195-9191-49b7-a73c-886f8139670b (DEV-5465).
+
 ## [5.345.171] — 2026-10-26
 - The daemon's sync-core unit now accepts a `~/.hq/sync-core/config.toml` that sets `full_vault = true` instead of `canary_path`, so the Rust engine can keep the whole personal vault in sync under the same supervision (ownership check, legacy personal sync paused first, health restarts). A config that sets both keys, or neither, keeps the unit blocked with a reason that names the fix. `hq daemon status` describes the unit as the personal vault rather than a canary, and the unit's environment carries `HQ_SYNC_FULL_VAULT=1`. Company vaults and machines without the sync-core setting are unchanged. Requires an hq-sync-core release that understands `full_vault` (after 0.1.6).
 

package/dist/command-catalog.generated.d.ts

@@ -3051,7 +3051,7 @@ export declare const COMMAND_CATALOG: readonly [{
     }];
 }, {
     readonly name: "files";
-    readonly description: "Manage file access controls in HQ vault. A trailing folder slash (foo/) is a private folder; the quoted glob 'foo/*' shares all children.";
+    readonly description: "Manage file access controls in HQ vault. A trailing folder slash (foo/) is a private folder; the quoted glob 'foo/*' shares all children, and a quoted 'clients/*/reports' shares that folder under every client.";
     readonly aliases: readonly [];
     readonly hidden: false;
     readonly helpOption: true;
@@ -3066,7 +3066,7 @@ export declare const COMMAND_CATALOG: readonly [{
     }];
     readonly subcommands: readonly [{
         readonly name: "share";
-        readonly description: "Share file paths. foo/ is a private folder (children stay creator-only); quote the shared-folder glob 'foo/*' so the shell passes it literally. Without --with: mint a share-session URL and open it in the browser. With --with: grant access directly to a person, group, or @all.";
+        readonly description: "Share file paths. foo/ is a private folder (children stay creator-only); quote the shared-folder glob 'foo/*', or a one-folder wildcard such as 'clients/*/reports', so the shell passes it literally. Without --with: mint a share-session URL and open it in the browser. With --with: grant access directly to a person, group, or @all.";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -18341,6 +18341,22 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly arguments: readonly [];
             readonly options: readonly [];
             readonly subcommands: readonly [];
+        }, {
+            readonly name: "sync-core-reconcile";
+            readonly description: "Read each company's new-sync-engine switch and write this machine's engine homes and legacy off-switches";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options]";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--hq-root <path>";
+                readonly description: "HQ folder the engine works against";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
         }, {
             readonly name: "remote-control";
             readonly description: "Keep `claude remote-control` running in a tmux session in the HQ folder";
@@ -18463,6 +18479,62 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly subcommands: readonly [];
         }];
     }];
+}, {
+    readonly name: "sync-core";
+    readonly description: "Move this machine's vaults between the current sync and the new sync engine, following each company's switch";
+    readonly aliases: readonly [];
+    readonly hidden: true;
+    readonly helpOption: true;
+    readonly helpCommand: true;
+    readonly usage: "[options] [command]";
+    readonly helpText: readonly [];
+    readonly arguments: readonly [];
+    readonly options: readonly [];
+    readonly subcommands: readonly [{
+        readonly name: "reconcile";
+        readonly description: "Read each company's switch, install the engine when needed, and write the engine homes and legacy off-switches";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--hq-root <path>";
+            readonly description: "HQ folder (default: the daemon's)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--companies-only";
+            readonly description: "Never move the personal vault (agent boxes)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--token-file <path>";
+            readonly description: "Token file the engine reads (default: this user's hq sign-in)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print the written rollout state as JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "status";
+        readonly description: "Show which vaults are on the new sync engine on this machine";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Print JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }];
 }, {
     readonly name: "bot";
     readonly description: "Personal local bots that run on this computer with your own model login";

package/dist/command-catalog.generated.js

@@ -3674,7 +3674,7 @@ export const COMMAND_CATALOG = [
     },
     {
         "name": "files",
-        "description": "Manage file access controls in HQ vault. A trailing folder slash (foo/) is a private folder; the quoted glob 'foo/*' shares all children.",
+        "description": "Manage file access controls in HQ vault. A trailing folder slash (foo/) is a private folder; the quoted glob 'foo/*' shares all children, and a quoted 'clients/*/reports' shares that folder under every client.",
         "aliases": [],
         "hidden": false,
         "helpOption": true,
@@ -3692,7 +3692,7 @@ export const COMMAND_CATALOG = [
         "subcommands": [
             {
                 "name": "share",
-                "description": "Share file paths. foo/ is a private folder (children stay creator-only); quote the shared-folder glob 'foo/*' so the shell passes it literally. Without --with: mint a share-session URL and open it in the browser. With --with: grant access directly to a person, group, or @all.",
+                "description": "Share file paths. foo/ is a private folder (children stay creator-only); quote the shared-folder glob 'foo/*', or a one-folder wildcard such as 'clients/*/reports', so the shell passes it literally. Without --with: mint a share-session URL and open it in the browser. With --with: grant access directly to a person, group, or @all.",
                 "aliases": [],
                 "hidden": false,
                 "helpOption": true,
@@ -22349,6 +22349,25 @@ export const COMMAND_CATALOG = [
                         "options": [],
                         "subcommands": []
                     },
+                    {
+                        "name": "sync-core-reconcile",
+                        "description": "Read each company's new-sync-engine switch and write this machine's engine homes and legacy off-switches",
+                        "aliases": [],
+                        "hidden": false,
+                        "helpOption": true,
+                        "helpCommand": false,
+                        "usage": "[options]",
+                        "helpText": [],
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--hq-root <path>",
+                                "description": "HQ folder the engine works against",
+                                "hidden": false
+                            }
+                        ],
+                        "subcommands": []
+                    },
                     {
                         "name": "remote-control",
                         "description": "Keep `claude remote-control` running in a tmux session in the HQ folder",
@@ -22497,6 +22516,73 @@ export const COMMAND_CATALOG = [
             }
         ]
     },
+    {
+        "name": "sync-core",
+        "description": "Move this machine's vaults between the current sync and the new sync engine, following each company's switch",
+        "aliases": [],
+        "hidden": true,
+        "helpOption": true,
+        "helpCommand": true,
+        "usage": "[options] [command]",
+        "helpText": [],
+        "arguments": [],
+        "options": [],
+        "subcommands": [
+            {
+                "name": "reconcile",
+                "description": "Read each company's switch, install the engine when needed, and write the engine homes and legacy off-switches",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--hq-root <path>",
+                        "description": "HQ folder (default: the daemon's)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--companies-only",
+                        "description": "Never move the personal vault (agent boxes)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--token-file <path>",
+                        "description": "Token file the engine reads (default: this user's hq sign-in)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print the written rollout state as JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "status",
+                "description": "Show which vaults are on the new sync engine on this machine",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "Print JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            }
+        ]
+    },
     {
         "name": "bot",
         "description": "Personal local bots that run on this computer with your own model login",

package/dist/command-registration-plan.d.ts

@@ -515,6 +515,13 @@ export declare const REGISTRATION_PLAN: readonly [{
     readonly module: "./commands/daemon.js";
     readonly exportName: "registerDaemonCommand";
     readonly hidden: true;
+}, {
+    readonly type: "registrar";
+    readonly root: "sync-core";
+    readonly parent: "program";
+    readonly module: "./commands/sync-core.js";
+    readonly exportName: "registerSyncCoreCommand";
+    readonly hidden: true;
 }, {
     readonly type: "registrar";
     readonly root: "bot";

package/dist/command-registration-plan.js

@@ -88,6 +88,7 @@ export const REGISTRATION_PLAN = [
     { type: "registrar", root: "lanes", parent: "program", module: "./commands/lanes.js", exportName: "registerLanesCommand" },
     { type: "registrar", root: "monitor", parent: "program", module: "./commands/monitor.js", exportName: "registerMonitorCommand" },
     { type: "registrar", root: "daemon", parent: "program", module: "./commands/daemon.js", exportName: "registerDaemonCommand", hidden: true },
+    { type: "registrar", root: "sync-core", parent: "program", module: "./commands/sync-core.js", exportName: "registerSyncCoreCommand", hidden: true },
     { type: "registrar", root: "bot", parent: "program", module: "./commands/bot.js", exportName: "registerBotCommand" },
     { type: "registrar", root: "report", parent: "program", module: "./commands/report.js", exportName: "registerReportCommand" },
     { type: "group", root: "deploy", id: "deploy", name: "deploy", description: "Manage deployments in hq-deploy" },

package/dist/commands/bot.js

@@ -52,7 +52,7 @@ import { isAncestorProcess } from "../lib/bot/self-process.js";
 import { runtimeDisplayName } from "../lib/bot/runtime-sign-in.js";
 import { classifyRuntimeFailure, runtimeFailureReason } from "../lib/bot/runtime-failure.js";
 import { PROBE_DEFAULT_TIMEOUT_MS, probeBotRuntime } from "../lib/bot/probe.js";
-import { BotApi, BotApiError, BOT_RESTORE_DEFAULTS, buildBotLocalConfig, describeBotLocalConfig, orphanBotRunMessage, parseBotLocalConfig, removeOrphanBotDaemon, botDaemonStatus, botDir, botCredsPath, botLogPath, botsRoot, botTokenStateDir, botWorkerRelDir, buildBotDaemonPaths, createBotLogger, deleteBotCreds, installBotDaemon, repairBotDaemonIfStale, healBotDaemonNodeFromJob, introDmText, isBotMemoryMode, botLocalMemoryDir, botMemoryMode, resolveBotMemoryDir, validateBotIntro, validateBotDisplayName, validateBotKickoff, validateBotEffort, validateBotModel, effectiveBotEffort, BOT_EFFORT_LEVELS, DEFAULT_BOT_EFFORT, BOT_MEMORY_MODES, BOT_KINDS, isBotKind, effectiveBotKind, effectiveBotCompanies, normalizeBotCompanies, SETUP_BOT_WORKER_ID, isBotRuntimeId, localNameForRemoteBot, remoteBotRunnability, isPidAlive, listBotWorkerOptions, patchBotConfig, readBotConfig, readBotCredsIdentity, readBotStatus, resolveBotWorker, runBot, runtimeFor, scaffoldBotMemory, scaffoldBotWorker, startBotDaemon, stopBotDaemon, uninstallBotDaemon, validateBotName, writeBotConfig, writeBotCreds, BOT_RUNTIMES, BOT_INTRO_MAX_CHARS, BOT_DISPLAY_NAME_MAX_CHARS, BOT_KICKOFF_MAX_CHARS, detectBotPlatform, withBotLock, localBotRole, remoteBotRole, remoteBotDisplayName, personFacingName, writeCloudDisplayName, setupSlugFor, ASSISTANT_ROLE, HQ_FLEET_RUNTIME_ENGINE_ID, authenticateFleetLocalBot, bootstrapFleetLocalBot, controlFleetLocalBot, fleetLocalPromotionRuntime, installPinnedFleetLocalDistribution, removeFleetLocalBot, } from "../lib/bot/index.js";
+import { BotApi, BotApiError, BOT_RESTORE_DEFAULTS, buildBotLocalConfig, describeBotLocalConfig, orphanBotRunMessage, parseBotLocalConfig, removeOrphanBotDaemon, botDaemonStatus, botDir, botCredsPath, botLogPath, botsRoot, botTokenStateDir, botWorkerRelDir, buildBotDaemonPaths, createBotLogger, deleteBotCreds, installBotDaemon, repairBotDaemonIfStale, healBotDaemonNodeFromJob, introDmText, isBotMemoryMode, botLocalMemoryDir, botMemoryMode, resolveBotMemoryDir, validateBotIntro, validateBotDisplayName, validateBotKickoff, validateBotEffort, validateBotModel, effectiveBotEffort, BOT_EFFORT_LEVELS, DEFAULT_BOT_EFFORT, BOT_MEMORY_MODES, BOT_KINDS, isBotKind, effectiveBotKind, effectiveBotCompanies, normalizeBotCompanies, SETUP_BOT_WORKER_ID, isBotRuntimeId, localNameForRemoteBot, remoteBotRunnability, isPidAlive, listBotWorkerOptions, patchBotConfig, readBotConfig, readBotCredsIdentity, readBotStatus, resolveBotWorker, runBot, runtimeFor, scaffoldBotMemory, scaffoldBotWorker, startBotDaemon, stopBotDaemon, uninstallBotDaemon, validateBotName, writeBotConfig, writeBotCreds, BOT_RUNTIMES, BOT_INTRO_MAX_CHARS, BOT_DISPLAY_NAME_MAX_CHARS, BOT_KICKOFF_MAX_CHARS, detectBotPlatform, withBotLock, localBotRole, remoteBotRole, remoteBotDisplayName, personFacingName, writeCloudDisplayName, setupSlugFor, ASSISTANT_ROLE, HQ_FLEET_RUNTIME_ENGINE_ID, authenticateFleetLocalBot, bootstrapFleetLocalBot, buildSystemPrompt, controlFleetLocalBot, ensureFleetPython, fleetLocalGatewayPid, refreshFleetLocalInstructions, fleetLocalPromotionRuntime, installPinnedFleetLocalDistribution, readPromptSources, removeFleetLocalBot, } from "../lib/bot/index.js";
 function collectRepeated(value, previous) {
     return [...previous, value];
 }
@@ -117,7 +117,37 @@ function requireBot(name) {
 function isFleetRuntimeBot(config) {
     return config.engine?.id === HQ_FLEET_RUNTIME_ENGINE_ID;
 }
+/**
+ * The standing HQ instructions an HQ Fleet Runtime bot runs under: the same
+ * text a legacy local bot gets, read fresh from its worker folder, with the
+ * runtime's own way of labelling senders.
+ */
+function fleetBotSystemPrompt(name, config, overrides = {}) {
+    return buildSystemPrompt({
+        botName: name,
+        ...(config.displayName ? { displayName: config.displayName } : {}),
+        agentUid: config.agentUid,
+        ownerUid: config.ownerUid,
+        hqRoot: config.hqRoot,
+        workerDir: config.workerDir,
+        workerSource: config.workerSource,
+        workerId: config.workerId,
+        companySlug: config.companySlug,
+        kind: overrides.kind ?? effectiveBotKind(config),
+        companies: overrides.companies ?? effectiveBotCompanies(config),
+        memoryDir: config.memoryDir,
+        fleetRuntime: true,
+        sources: readPromptSources(config.hqRoot, config.workerDir, undefined, {
+            memoryDir: config.memoryDir,
+            workerSource: config.workerSource,
+            companySlug: config.companySlug,
+        }),
+    });
+}
 function runFleetRuntimeControl(name, config, action, json) {
+    if (action === "start" || action === "restart") {
+        refreshFleetLocalInstructions(config.agentUid, fleetBotSystemPrompt(name, config));
+    }
     const result = controlFleetLocalBot(config.agentUid, action);
     if (json) {
         console.log(JSON.stringify({ name, runtime: HQ_FLEET_RUNTIME_ENGINE_ID, ...result }, null, 2));
@@ -149,15 +179,16 @@ async function ownerToken(interactive = process.stdin.isTTY === true) {
 function rowFor(name, opts = {}) {
     const dir = botDir(name);
     const config = readBotConfig(dir);
-    const status = readBotStatus(dir);
-    const pid = status?.pid ?? null;
-    const processAlive = pid !== null && isPidAlive(pid) && status?.state === "running";
+    const fleet = isFleetRuntimeBot(config);
+    const status = fleet ? null : readBotStatus(dir);
+    const pid = fleet ? fleetLocalGatewayPid(config.agentUid) : (status?.pid ?? null);
+    const processAlive = pid !== null && isPidAlive(pid) && (fleet || status?.state === "running");
     // Turns this bot has taken and not finished: what "thinking" means.
     const inflightTurns = readInflightTurns(dir);
     let daemonInstalled = false;
     let daemonLoaded = false;
     let daemonNodeMissing = null;
-    if (opts.withDaemon !== false) {
+    if (opts.withDaemon !== false && !fleet) {
         try {
             const d = botDaemonStatus(buildBotDaemonPaths({ name, botDir: dir, hqRoot: config.hqRoot }), daemonDeps());
             daemonInstalled = d.installed;
@@ -678,6 +709,7 @@ async function runBotCreateLocked(name, opts) {
     const fleetInstallation = useFleetRuntime
         ? await installPinnedFleetLocalDistribution()
         : null;
+    const fleetPython = fleetInstallation ? await ensureFleetPython() : null;
     const token = await ownerToken();
     const owner = await resolveCallerPersonUid(token, undefined, { command: "hq bot create" });
     if (!owner)
@@ -912,15 +944,18 @@ async function runBotCreateLocked(name, opts) {
     const scaffold = worker
         ? scaffoldBotMemory(hqRoot, name, undefined, scaffoldOpts)
         : scaffoldBotWorker(hqRoot, name, agentUid, fleetInstallation ? HQ_FLEET_RUNTIME_ENGINE_ID : runtime, undefined, scaffoldOpts);
-    const fleetBootstrap = fleetInstallation
-        ? bootstrapFleetLocalBot({
+    if (fleetInstallation)
+        fs.rmSync(path.join(dir, "status.json"), { force: true });
+    const fleetBootstrap = fleetInstallation && fleetPython
+        ? await bootstrapFleetLocalBot({
             agentUid,
             ownerUid: config.ownerUid,
             hqRoot,
             botDir: dir,
             installation: fleetInstallation,
             machineCredentials: botCredsPath(dir),
-        }, { start: opts.start !== false })
+            systemPrompt: fleetBotSystemPrompt(name, config, { kind, companies }),
+        }, { start: opts.start !== false, python: fleetPython })
         : null;
     const fleetProfile = fleetBootstrap?.profile ?? null;
     const runtimeLabel = fleetInstallation ? HQ_FLEET_RUNTIME_ENGINE_ID : runtime;
@@ -1076,6 +1111,9 @@ async function runBotResident(nameArg) {
     const name = validateBotName(nameArg);
     const dir = botDir(name);
     const config = readBotConfig(dir);
+    if (config && isFleetRuntimeBot(config)) {
+        throw Object.assign(new Error(`${name} runs on the HQ Fleet Runtime under its own background service. Use hq bot start ${name}, hq bot status ${name} or hq bot logs ${name}.`), { expected: true });
+    }
     if (!config) {
         // A LaunchAgent that outlived its bot: exiting non-zero here made launchd
         // relaunch this every five seconds forever. Say so once, take the stale

package/dist/commands/cloud.js

@@ -13,6 +13,7 @@
  *   hq sync status            — show local journal summary
  */
 import { isAccessDeniedError, accessDeniedKeyOf, formatAccessDenied, } from "../utils/access-denied-hint.js";
+import { describeSyncError, formatRemoteListNotConverging, } from "../utils/remote-list-not-converging.js";
 import { findReadOnlyLocalOnly, isGrantEnforced, readVaultAccessManifest, } from "../lib/sync/read-only-local-only.js";
 import { SERVER_OWNED_FOLDERS, findServerOwnedLocalOnly, } from "../lib/sync/server-owned-local-only.js";
 import chalk from "chalk";
@@ -74,6 +75,9 @@ export function formatSyncFailure(err, ctx = {}) {
     const unreachable = formatUnreachablePushPaths(err, ctx);
     if (unreachable)
         return unreachable;
+    const remoteList = formatRemoteListNotConverging(err);
+    if (remoteList)
+        return remoteList;
     // A plan-limit refusal the runner threw (a 402 on the whole request) renders
     // with the same reason, fix options and upgrade link as every other refusal.
     const planGate = planGateErrorFromVaultError(err);
@@ -1744,7 +1748,7 @@ export function registerCloudCommands(program) {
             await withSyncHealthReport(() => runUnderSyncWatchdog(watchdogLimits, "hq sync now", () => runNowSingle(options.hqRoot, options.company, options.personal === true, options.message, options.onConflict, options.modeAll === true, options.forceScopeShrink === true)));
         }
         catch (err) {
-            console.error(chalk.red("\n✗ Sync now failed:"), err instanceof Error ? err.message : String(err));
+            console.error(chalk.red("\n✗ Sync now failed:"), describeSyncError(err));
             process.exit(1);
         }
     });
@@ -1894,7 +1898,7 @@ async function runPullAll(hqRoot, onConflict, modeAllOverride, skipPersonal, for
         });
     }
     catch (err) {
-        console.error(chalk.red("\n✗ Pull-all failed:"), err instanceof Error ? err.message : String(err));
+        console.error(chalk.red("\n✗ Pull-all failed:"), describeSyncError(err));
         // Unwind (never process.exit) so withSyncHealthReport records the
         // terminal sync_failure before exiting on our behalf.
         throw new SyncExitError(1);
@@ -1963,7 +1967,7 @@ export async function runPullPersonal(hqRoot, onConflict) {
     catch (err) {
         if (err instanceof SyncExitError)
             throw err;
-        console.error(chalk.red("\n✗ Pull (personal) failed:"), err instanceof Error ? err.message : String(err));
+        console.error(chalk.red("\n✗ Pull (personal) failed:"), describeSyncError(err));
         throw new SyncExitError(1);
     }
 }
@@ -2048,7 +2052,7 @@ async function runPushAll(hqRoot, message, onConflict, skipPersonal, skipCompani
         });
     }
     catch (err) {
-        console.error(chalk.red("\n✗ Push-all failed:"), err instanceof Error ? err.message : String(err));
+        console.error(chalk.red("\n✗ Push-all failed:"), describeSyncError(err));
         // Unwind (never process.exit) so withSyncHealthReport records the
         // terminal sync_failure before exiting on our behalf.
         throw new SyncExitError(1);
@@ -2399,7 +2403,7 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
     catch (err) {
         if (err instanceof SyncExitError)
             throw err;
-        console.error(chalk.red("\n✗ Sync now failed:"), err instanceof Error ? err.message : String(err));
+        console.error(chalk.red("\n✗ Sync now failed:"), describeSyncError(err));
         throw new SyncExitError(1);
     }
 }

package/dist/commands/daemon.js

@@ -426,7 +426,7 @@ function formatUnit(u) {
             ? `last run ${u.lastResult}`
             : (u.reason ?? "");
     const restarts = u.restarts > 0 ? ` (restarted ${u.restarts}x)` : "";
-    return `  ${u.id.padEnd(22)} ${u.status.padEnd(12)} ${detail}${restarts}`;
+    return `  ${u.id.padEnd(40)} ${u.status.padEnd(12)} ${detail}${restarts}`;
 }
 async function runStatus(d, opts) {
     const host = currentHost(d);
@@ -1538,6 +1538,21 @@ export function registerDaemonCommand(program, over = {}) {
         .command("self-update")
         .description("Update the hq CLI, Claude, Codex and Grok, then restart the daemon onto a new CLI")
         .action(wrap((d) => runServiceSelfUpdate(d)));
+    service
+        .command("sync-core-reconcile")
+        .description("Read each company's new-sync-engine switch and write this machine's engine homes and legacy off-switches")
+        .option("--hq-root <path>", "HQ folder the engine works against")
+        .action(wrap(async (d, opts) => {
+        const { runSyncCoreReconcile } = await import("./sync-core.js");
+        await runSyncCoreReconcile({ hqRoot: opts.hqRoot }, {
+            home: d.home,
+            env: d.env,
+            platform: d.platform,
+            arch: process.arch,
+            out: d.out,
+            err: d.err,
+        });
+    }));
     service
         .command("remote-control")
         .description("Keep `claude remote-control` running in a tmux session in the HQ folder")

package/dist/commands/files.d.ts

@@ -78,6 +78,7 @@ export declare function registerFilesCommand(program: Command): Command;
  * whether it is a folder (`Makefile`, `bin/hq`); resolveBareSharePrefix asks
  * the vault.
  */
+export declare function isSingleSegmentWildcardPrefix(prefix: string): boolean;
 export declare function looksLikeBareFolderPrefix(prefix: string): boolean;
 /**
  * Refuse a bare prefix that would become a malformed grant if it were

package/dist/commands/files.js

@@ -164,7 +164,7 @@ export function formatShareSessionError(err) {
 export function registerFilesCommand(program) {
     const files = program
         .command("files")
-        .description("Manage file access controls in HQ vault. A trailing folder slash (foo/) is a private folder; the quoted glob 'foo/*' shares all children.")
+        .description("Manage file access controls in HQ vault. A trailing folder slash (foo/) is a private folder; the quoted glob 'foo/*' shares all children, and a quoted 'clients/*/reports' shares that folder under every client.")
         .option("--company <slug>", "Company slug (resolves to companyUid)");
     // An exported HQ_API_KEY must never fall back to the caller's Cognito session
     // (that would ignore the key's scope entirely), so every subcommand is gated.
@@ -193,7 +193,7 @@ export function registerFilesCommand(program) {
     });
     files
         .command("share [paths...]")
-        .description("Share file paths. foo/ is a private folder (children stay creator-only); quote the shared-folder glob 'foo/*' so the shell passes it literally. Without --with: mint a share-session URL and open it in the browser. With --with: grant access directly to a person, group, or @all.")
+        .description("Share file paths. foo/ is a private folder (children stay creator-only); quote the shared-folder glob 'foo/*', or a one-folder wildcard such as 'clients/*/reports', so the shell passes it literally. Without --with: mint a share-session URL and open it in the browser. With --with: grant access directly to a person, group, or @all.")
         .option("--with <principal>", "Email address, group id, company Outpost id (out_...), or '@all' to share with every active company member")
         .option("--permission <level>", "Permission level (only with --with): read | write")
         .option("--exact", "With --with: grant exactly the object named by <prefix>, even when it looks like a folder (by default a bare folder name such as 'knowledge' is granted as the folder glob 'knowledge/*').")
@@ -763,6 +763,8 @@ export function registerFilesCommand(program) {
 async function warnIfEmptySharePrefix(params) {
     if (isPrivateFolderPattern(params.prefix))
         return;
+    if (isSingleSegmentWildcardPrefix(params.prefix))
+        return;
     let enabled;
     try {
         enabled = await resolveCompanyFlagGate(params.companyUid, params.token, FILES_SHARE_EMPTY_PREFIX_WARNING_FLAG, { fallback: false }, () => false);
@@ -879,9 +881,21 @@ async function resolveMentionPersonUid(mention, companySlug) {
  * whether it is a folder (`Makefile`, `bin/hq`); resolveBareSharePrefix asks
  * the vault.
  */
+export function isSingleSegmentWildcardPrefix(prefix) {
+    const body = prefix.endsWith("/*") ? prefix.slice(0, -2) : prefix;
+    const segments = body.split("/");
+    if (segments.some((segment) => segment.length === 0))
+        return false;
+    if (segments.some((segment) => segment !== "*" && segment.includes("*")))
+        return false;
+    const wildcards = segments.filter((segment) => segment === "*").length;
+    return wildcards === 1 && wildcards < segments.length;
+}
 export function looksLikeBareFolderPrefix(prefix) {
     if (prefix === "*" || prefix.endsWith("/") || prefix.endsWith("/*"))
         return false;
+    if (isSingleSegmentWildcardPrefix(prefix))
+        return false;
     const last = prefix.slice(prefix.lastIndexOf("/") + 1);
     return last.length > 0 && !last.includes(".");
 }
@@ -894,8 +908,12 @@ export function malformedBareSharePrefix(prefix) {
     if (!looksLikeBareFolderPrefix(prefix))
         return null;
     if (prefix.includes("*")) {
-        return (`'${prefix}' has a '*' inside a path segment. Only a whole trailing '/*' segment ` +
-            `(for example 'knowledge/*') or '*' alone (--full) is a glob.`);
+        const reason = prefix.split("/").some((segment) => segment !== "*" && segment.includes("*"))
+            ? "has a '*' inside a path segment"
+            : "has more than one '*' folder";
+        return (`'${prefix}' ${reason}. A '*' must be a whole folder name: once per path ` +
+            `(for example 'clients/*/reports'), as a trailing '/*' (for example 'knowledge/*'), ` +
+            `or '*' alone (--full).`);
     }
     if (prefix.split("/").some((segment) => segment.length === 0)) {
         return `'${prefix}' has an empty path segment. Pass a company-relative path such as 'knowledge'.`;

package/dist/commands/sync-core.d.ts

@@ -0,0 +1,22 @@
+import type { Command } from "commander";
+import { type SyncCoreReconcileResult } from "../lib/sync-core/reconcile.js";
+export interface SyncCoreReconcileCommandOptions {
+    hqRoot?: string;
+    companiesOnly?: boolean;
+    tokenFile?: string;
+    json?: boolean;
+}
+export interface SyncCoreCommandDeps {
+    home: string;
+    env: NodeJS.ProcessEnv;
+    platform: NodeJS.Platform;
+    arch: string;
+    out: (line: string) => void;
+    err: (line: string) => void;
+}
+export declare function runSyncCoreReconcile(opts: SyncCoreReconcileCommandOptions, d?: SyncCoreCommandDeps): Promise<SyncCoreReconcileResult>;
+export declare function runSyncCoreStatus(opts: {
+    json?: boolean;
+}, d?: SyncCoreCommandDeps): void;
+export declare function registerSyncCoreCommand(program: Command, over?: Partial<SyncCoreCommandDeps>): void;
+//# sourceMappingURL=sync-core.d.ts.map