@indigoai-us/hq-cli 5.345.177 → 5.345.179

package/CHANGELOG.md

@@ -2,6 +2,56 @@
 
 ## [Unreleased]
 
+## [5.345.179] — 2026-10-29
+- Conduct loop lanes now count a phase's absolute `deadline` from when the lane starts the phase, so time the envelope spent waiting in the queue no longer eats its run budget. An unparsable `deadline` now falls back to the phase's normal budget instead of an invalid one.
+- Pins hq-fleet-local v0.4.13 so a personal bot's first-start kickoff waits for HQ Fleet Runtime to attach before delivery instead of being dropped during startup.
+- `hq sources sync` runs every hot channel now for the signed-in person: each adapter once per integration connection the person created or was granted, through the HQ integration gateway. It prints sources landed per adapter and connection. A signed-out session or a revoked connection prints a reconnect prompt naming the connection, exits non-zero, and leaves the cursor unchanged. Use `--adapter <id>` to run one adapter and `--company <slug>` to pick the company. Catalog channels with no adapter in this build report "adapter not available in this hq version".
+- `hq sources runs --today` shows the hot-channel run log for the signed-in person: per adapter, the sources each run landed and the signals it generated, with start and finish times and any error. Cursors live at `sources/_cursors/@{personKey}/` and each run appends to `sources/_runs/@{personKey}/{day}.jsonl`, where the person key is a short hash of the person's email.
+- `hq bot run` registers a built-in hot-channel sync job for the bot's company: daily at 06:30 in the computer's time zone, run inside the bot with no model turn. If the computer was asleep at 06:30, the job runs once when it wakes and the ledger records `catchUp: true`. No crontab or launchd entry is written. Change the time with the new `hq bot jobs <bot> --reschedule <jobId> --every "..."` (or `--cron`); a removed job is not added back.
+- Only one hot-channel sync runs at a time per person and company. If the bot's scheduled run and `hq sources sync` overlap, the second one lands nothing, says another sync is running, and writes a `skipped` line to the run log.
+- Linear: issues assigned to you that changed since the last sync land as source documents.
+- Slack: threads HQ has saved to your company vault that you are part of become one signal each, pointing at the thread with no message text copied. A Slack rate-limit pause is reported with a prompt to retry or reconnect.
+- Attio: activity HQ has saved to your company vault becomes signals only when it is about you (changes you made, records you own, comments or notes that mention or are assigned to you), with no payload copied.
+- Meetings: transcripts already in `sources/meetings/` that you attended land as short pointer documents under `sources/meeting-events/`, with no transcript text copied.
+- Gmail ships behind the `hq.hot-channel-gmail` flag. While the flag is off, Gmail is listed as `gated` and never called. With it on, new INBOX mail lands as header-only pointers (never the body or snippet) with a read-only scope.
+- Newly landed sources are turned into signals with your own logged-in `claude`: up to 20 documents per run, each signal linked to its source and listed in the day's signal index. Signals from meetings, Slack and Attio use the full saved content each pointer names (up to 200 KB). A logged-out `claude`, a timeout, bad output, or any other error in one adapter's signals step marks that adapter failed in the run log and the run continues with the next adapter.
+- One malformed event from a channel is skipped and counted as rejected in the run log, with the reason, instead of stopping that channel on every later run.
+- Hot-channel syncs alert when sources land but no signals come out: the bot DMs you and `hq sources sync` prints the alert, at most once an hour per connection. Set `signals_alert_channel: <Slack channel id>` in the company's `settings/signals/preferences.yaml` to also post it to Slack.
+- Contributors: adding a hot channel is one adapter file plus one catalog entry, with end-to-end tests for both run triggers.
+- On Windows, `hq daemon install` now registers a scheduled task named for the current user (`ai.getindigo.hq-daemon-<SID>`, or a sanitised username when the SID cannot be read), so two people who share a PC no longer overwrite each other's daemon. Status, uninstall, `hq doctor` and the handoff and legacy lookups use the same per-user name. An older shared `ai.getindigo.hq-daemon` task that runs as the current user is moved to the new name and kept running; one that belongs to another Windows user, or whose owner cannot be read, is left untouched and `hq` says so.
+- `hq daemon uninstall` on Windows now works for users who upgraded from the shared task and have not re-run install: it checks schtasks for the per-user task instead of trusting the shared XML file, treats a per-user task that is already gone as removed, and also removes this user's task registered under the username form. A task owner stored as a bare user name is no longer treated as `DOMAIN\user`, so another domain's user of the same name keeps their task.
+
+## [5.345.178] — 2026-10-29
+- `hq dm send --attach` now uploads the bytes it read with their exact length, so a file changed after the size check no longer stalls and fails with `Upload failed (HTTP 400)`. A refused upload now names the storage error (for example `RequestTimeout`).
+- `hq daemon disable mesh` now keeps `mesh` off on machines where it is not on by default,
+  such as an agent kit with `sync-core` turned on. In 5.345.176 the disable was not saved
+  there, so `sync-core` turned `mesh` back on; the 5.345.176 note that disabling `mesh`
+  still turns it off held only for machine types that run `mesh` by default.
+- `hq run` now skips `# @optional` secrets the caller cannot read or that are missing, instead of failing the whole run. Required secrets still fail.
+- The company-gated HQ Fleet default now supports new personal Claude, Codex and Grok bots. Codex and Grok bots stay stopped until their own provider sign-in succeeds; creation and status show the sign-in command. Cancelled sign-in can be retried without creating another bot. Existing bots and the explicit legacy runner are preserved.
+- Where the company flag `agents.local-bots-hq-fleet-default` is on, `hq bot create`
+  makes personal Claude bots (the setup bot included) on the HQ Fleet Runtime.
+  These bots run on the owner's Claude Code login and need no sign-in of their own.
+  `--legacy-runtime` keeps the model-CLI runner, and Codex and Grok bots keep it
+  unless `--hq-fleet-runtime` is passed. `--hq-fleet-runtime` now takes
+  `--runtime claude|codex|grok` and `--model` to choose the bot's model login.
+- HQ Fleet Runtime bots send their intro and run their kickoff on first start.
+  `hq bot status` and `hq bot list` read their status file.
+  `hq bot adopt` and `hq bot restore` bring them back on the runtime instead of as
+  Claude CLI bots. The bot's saved settings now keep the model login it uses.
+- Pins hq-fleet-local v0.4.12. On that release a bot gives its owner the owner's
+  companies that turned the flag on, and gives a teammate only the ones the
+  teammate also belongs to. A tool call is blocked when an HQ check cannot run.
+- The fleet-default flag is read for the owner's own active memberships, and a
+  bot is given only the companies that turned it on. `HQ_BOT_FLEET_DEFAULT=1`
+  skips the flag and gives the bot every active membership whose company
+  folder is on the computer.
+- HQ Fleet Runtime bots install a smaller runtime (the mcp and anthropic extras
+  only), so creating one takes less time and disk space.
+- `hq sync pull`, `push` and `now` (including `pull --all` and the first sync after setup) now refresh the HQ session when the access token expires during a long run and retry the rejected request once. Before, the sync read the token once at the start, so a run that outlasted the one-hour token failed every remaining target with 401 Unauthorized. If the session is rejected, the sync stops with "Run `hq login`, then rerun the sync". A network or server failure during the refresh gets its own message. The refreshed token must belong to the account that started the run: if a mid-run `hq login` or the machine-identity fallback changes the account, the sync stops instead of continuing as a different account. Feedback 3d3fab0b-9475-472d-91ce-9e7aa5a7443c.
+- A sync run's account is now fixed once the run starts. If the session would switch to another account mid-run, including a fallback to this computer's machine credentials after a rejected refresh, the sync stops with an explanation instead of continuing as that account. A run whose starting token does not identify an account does not start.
+- The daemon now records the newest change number the server announced for each vault, so the sync engine can skip background requests when it already has that change once it reads this.
+
 ## [5.345.177] — 2026-10-28
 - The new sync engine now installs as release v0.1.21, and company vaults move to full mode only on v0.1.21 or later. A remote delete the server refuses because the file changed now re-reads the server's changes within seconds instead of waiting for the hourly check. Deleting a file that is already gone on the server now counts as done instead of stopping the sync until someone repairs it, and a held remote delete no longer stops the rest of the sync. A file this machine just replaced is no longer downloaded again or turned into a conflict copy while the server catches up.
 

package/dist/command-catalog.generated.d.ts

@@ -5150,6 +5150,72 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "runs";
+        readonly description: "Show the hot-channel run log: sources landed and signals generated per adapter";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--today";
+            readonly description: "Show today's runs (UTC); the default";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--date <YYYY-MM-DD>";
+            readonly description: "Show runs for this UTC day";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--company <slug>";
+            readonly description: "Company slug (defaults to .hq/config.json activeCompany)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--email <address>";
+            readonly description: "Whose runs to show (defaults to the signed-in person)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--format <fmt>";
+            readonly description: "Output format: table | json (default: table for TTY, json piped)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--hq-root <path>";
+            readonly description: "Local HQ tree root (default: <runtime-path>)";
+            readonly hidden: false;
+            readonly defaultValue: "<runtime-path>";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "sync";
+        readonly description: "Run every hot channel now: each adapter once per connection you can use";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--adapter <id>";
+            readonly description: "Run one adapter only (a catalog provider or adapter id)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--company <slug>";
+            readonly description: "Company slug (defaults to .hq/config.json activeCompany)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print the run report as JSON";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--hq-root <path>";
+            readonly description: "Local HQ tree root (default: <runtime-path>)";
+            readonly hidden: false;
+            readonly defaultValue: "<runtime-path>";
+        }];
+        readonly subcommands: readonly [];
     }];
 }, {
     readonly name: "signals";
@@ -18691,7 +18757,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "jobs";
-        readonly description: "Show, schedule, or remove a bot's recurring jobs (the schedule runs in the cloud, not on this computer)";
+        readonly description: "Show, schedule, reschedule, or remove a bot's recurring jobs (they run on this computer while the bot runs)";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -18728,6 +18794,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--rm <jobId>";
             readonly description: "Remove a scheduled job";
             readonly hidden: false;
+        }, {
+            readonly flags: "--reschedule <jobId>";
+            readonly description: "Change a job's schedule (with --every or --cron)";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Print machine-readable JSON";
@@ -18787,10 +18857,18 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--runtime <runtime>";
             readonly description: "Model CLI to run the bot with: claude|codex|grok";
             readonly hidden: false;
+        }, {
+            readonly flags: "--provider <provider>";
+            readonly description: "HQ Fleet provider: claude|codex|grok (interactive Fleet creation prompts when omitted)";
+            readonly hidden: false;
         }, {
             readonly flags: "--hq-fleet-runtime";
             readonly description: "Create this personal bot with the local HQ Fleet Runtime";
             readonly hidden: false;
+        }, {
+            readonly flags: "--legacy-runtime";
+            readonly description: "Run this bot with the model CLI even where the HQ Fleet Runtime is the default";
+            readonly hidden: false;
         }, {
             readonly flags: "--model <model>";
             readonly description: "Model override passed to the runtime CLI";

package/dist/command-catalog.generated.js

@@ -6243,6 +6243,86 @@ export const COMMAND_CATALOG = [
                     }
                 ],
                 "subcommands": []
+            },
+            {
+                "name": "runs",
+                "description": "Show the hot-channel run log: sources landed and signals generated per adapter",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--today",
+                        "description": "Show today's runs (UTC); the default",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--date <YYYY-MM-DD>",
+                        "description": "Show runs for this UTC day",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--company <slug>",
+                        "description": "Company slug (defaults to .hq/config.json activeCompany)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--email <address>",
+                        "description": "Whose runs to show (defaults to the signed-in person)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--format <fmt>",
+                        "description": "Output format: table | json (default: table for TTY, json piped)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--hq-root <path>",
+                        "description": "Local HQ tree root (default: <runtime-path>)",
+                        "hidden": false,
+                        "defaultValue": "<runtime-path>"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "sync",
+                "description": "Run every hot channel now: each adapter once per connection you can use",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--adapter <id>",
+                        "description": "Run one adapter only (a catalog provider or adapter id)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--company <slug>",
+                        "description": "Company slug (defaults to .hq/config.json activeCompany)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print the run report as JSON",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--hq-root <path>",
+                        "description": "Local HQ tree root (default: <runtime-path>)",
+                        "hidden": false,
+                        "defaultValue": "<runtime-path>"
+                    }
+                ],
+                "subcommands": []
             }
         ]
     },
@@ -22774,7 +22854,7 @@ export const COMMAND_CATALOG = [
             },
             {
                 "name": "jobs",
-                "description": "Show, schedule, or remove a bot's recurring jobs (the schedule runs in the cloud, not on this computer)",
+                "description": "Show, schedule, reschedule, or remove a bot's recurring jobs (they run on this computer while the bot runs)",
                 "aliases": [],
                 "hidden": false,
                 "helpOption": true,
@@ -22820,6 +22900,11 @@ export const COMMAND_CATALOG = [
                         "description": "Remove a scheduled job",
                         "hidden": false
                     },
+                    {
+                        "flags": "--reschedule <jobId>",
+                        "description": "Change a job's schedule (with --every or --cron)",
+                        "hidden": false
+                    },
                     {
                         "flags": "--json",
                         "description": "Print machine-readable JSON",
@@ -22893,11 +22978,21 @@ export const COMMAND_CATALOG = [
                         "description": "Model CLI to run the bot with: claude|codex|grok",
                         "hidden": false
                     },
+                    {
+                        "flags": "--provider <provider>",
+                        "description": "HQ Fleet provider: claude|codex|grok (interactive Fleet creation prompts when omitted)",
+                        "hidden": false
+                    },
                     {
                         "flags": "--hq-fleet-runtime",
                         "description": "Create this personal bot with the local HQ Fleet Runtime",
                         "hidden": false
                     },
+                    {
+                        "flags": "--legacy-runtime",
+                        "description": "Run this bot with the model CLI even where the HQ Fleet Runtime is the default",
+                        "hidden": false
+                    },
                     {
                         "flags": "--model <model>",
                         "description": "Model override passed to the runtime CLI",

package/dist/commands/bot-jobs.d.ts

@@ -5,17 +5,17 @@
  *   hq bot jobs <botName> --add "<what to do>" --every "<plain english>"
  *   hq bot jobs <botName> --add "<what to do>" --cron "0 9 * * 1-5"
  *   hq bot jobs <botName> --rm <jobId>
+ *   hq bot jobs <botName> --reschedule <jobId> --every "<plain english>"
  *
- * The schedule lives in the cloud, never on this computer: hq-pro-agents holds
- * the job and fires it on an EventBridge schedule, and the bot's inbox loop
- * runs the fired run (see lib/bot/job-run.ts). Nothing here writes a crontab,
- * a launchd plist, or a systemd unit — by rule.
- *
- * The routes are self-only per agent, so every call uses the BOT's own machine
- * identity — the same credential path its turns use — not the owner's session.
+ * The schedule lives with the bot: its jobs sit in the bot's own folder
+ * (lib/bot/local-jobs.ts) and the bot's inbox loop fires them while it runs
+ * (see lib/bot/job-run.ts). Nothing here writes a crontab, a launchd plist, or
+ * a systemd unit — by rule. Schedules are still written in the EventBridge form
+ * and held to the same limits, so a job reads the same wherever it runs.
  */
 import type { Command } from "commander";
-import { BotApi, type BotJobRecord, type CreateJobInput } from "../lib/bot/api.js";
+import { type LocalJobsApi } from "../lib/bot/local-jobs.js";
+import { type BotJobRecord, type CreateJobInput } from "../lib/bot/api.js";
 import { type BotConfig, type BotKind } from "../lib/bot/config.js";
 /** Mirrors hq-pro-agents `MIN_RECURRING_INTERVAL_SECONDS`. */
 export declare const MIN_RECURRING_INTERVAL_SECONDS: number;
@@ -100,7 +100,7 @@ export interface BotJobsDeps {
     };
     botTokenSupplier(dir: string): () => Promise<string>;
     /** Test seam: the jobs client for a bot directory. */
-    apiFor?(dir: string): Pick<BotApi, "listJobs" | "createJob" | "cancelJob">;
+    apiFor?(dir: string): LocalJobsApi;
     parseSchedule?: typeof parseScheduleText;
     timezone?: () => string;
     out?: (line: string) => void;
@@ -113,6 +113,8 @@ export interface BotJobsOptions {
     cron?: string;
     tz?: string;
     rm?: string;
+    /** Change an existing job's schedule, keeping its id, instruction and history. */
+    reschedule?: string;
     json?: boolean;
     quiet?: boolean;
 }

package/dist/commands/bot-jobs.js

@@ -5,14 +5,13 @@
  *   hq bot jobs <botName> --add "<what to do>" --every "<plain english>"
  *   hq bot jobs <botName> --add "<what to do>" --cron "0 9 * * 1-5"
  *   hq bot jobs <botName> --rm <jobId>
+ *   hq bot jobs <botName> --reschedule <jobId> --every "<plain english>"
  *
- * The schedule lives in the cloud, never on this computer: hq-pro-agents holds
- * the job and fires it on an EventBridge schedule, and the bot's inbox loop
- * runs the fired run (see lib/bot/job-run.ts). Nothing here writes a crontab,
- * a launchd plist, or a systemd unit — by rule.
- *
- * The routes are self-only per agent, so every call uses the BOT's own machine
- * identity — the same credential path its turns use — not the owner's session.
+ * The schedule lives with the bot: its jobs sit in the bot's own folder
+ * (lib/bot/local-jobs.ts) and the bot's inbox loop fires them while it runs
+ * (see lib/bot/job-run.ts). Nothing here writes a crontab, a launchd plist, or
+ * a systemd unit — by rule. Schedules are still written in the EventBridge form
+ * and held to the same limits, so a job reads the same wherever it runs.
  */
 import chalk from "chalk";
 import { localJobsClient } from "../lib/bot/local-jobs.js";
@@ -365,12 +364,56 @@ export async function runBotJobs(nameArg, opts, deps) {
         client = deps.apiFor ? deps.apiFor(dir) : localJobsClient(dir);
         return client;
     };
-    if (opts.add !== undefined && opts.rm !== undefined) {
-        refuse("Add a job or remove one, not both in the same command.");
+    if ([opts.add, opts.rm, opts.reschedule].filter((value) => value !== undefined).length > 1) {
+        refuse("Add, remove, or reschedule one job at a time, not several in the same command.");
     }
     if (opts.quiet && opts.add === undefined) {
         refuse("Use --quiet with --add to set a scheduled job's delivery option.");
     }
+    // Shared by --add and --reschedule: one schedule from --every or --cron, in
+    // the stored form, held to the same floor.
+    const scheduleFromOptions = () => {
+        if (!opts.every && !opts.cron) {
+            refuse(`Say how often it should run: --every "every weekday at 9am", or --cron "0 9 * * 1-5".`);
+        }
+        if (opts.every && opts.cron)
+            refuse("Use --every or --cron, not both.");
+        const timezone = opts.tz?.trim() || (deps.timezone ?? machineTimezone)();
+        // An unknown zone would throw RangeError on every inbox poll; refuse it now.
+        try {
+            new Intl.DateTimeFormat("en-US", { timeZone: timezone });
+        }
+        catch {
+            refuse(`"${timezone}" is not a known IANA time zone (for example America/New_York or Europe/London).`);
+        }
+        const parse = deps.parseSchedule ?? parseScheduleText;
+        return opts.every ? parse(opts.every, { timezone }) : { cron: opts.cron, timezone };
+    };
+    if (opts.reschedule !== undefined) {
+        const jobId = opts.reschedule.trim();
+        if (!jobId)
+            refuse("Say which job to reschedule: --reschedule <jobId>");
+        const schedule = scheduleFromOptions();
+        const cron = toEventBridgeCron(schedule.cron);
+        assertScheduleWithinFloor(cron);
+        const api = await jobsApi();
+        if (!api.rescheduleJob)
+            refuse(`${name}'s jobs cannot be rescheduled in place. Remove the job and add it again.`);
+        let updated;
+        try {
+            updated = await api.rescheduleJob(config.agentUid, jobId, { cron, timezone: schedule.timezone });
+        }
+        catch (err) {
+            refuse(jobsErrorMessage(err, ctx));
+        }
+        if (opts.json) {
+            out(JSON.stringify({ ok: true, job: updated }, null, 2));
+            return;
+        }
+        const words = schedule.human || describeSchedule(updated);
+        out(chalk.green(`Rescheduled ${updated.jobId}: ${name} now runs it ${words}.`));
+        return;
+    }
     if (opts.rm !== undefined) {
         const jobId = opts.rm.trim();
         if (!jobId)
@@ -389,16 +432,7 @@ export async function runBotJobs(nameArg, opts, deps) {
         if (opts.quiet && !(await quietOptionEnabled())) {
             refuse(`--quiet requires the ${BOT_JOB_QUIET_OPTION_FLAG} flag, which is currently disabled.`);
         }
-        if (!opts.every && !opts.cron) {
-            refuse(`Say how often it should run: --every "every weekday at 9am", or --cron "0 9 * * 1-5".`);
-        }
-        if (opts.every && opts.cron)
-            refuse("Use --every or --cron, not both.");
-        const timezone = opts.tz?.trim() || (deps.timezone ?? machineTimezone)();
-        const parse = deps.parseSchedule ?? parseScheduleText;
-        const schedule = opts.every
-            ? parse(opts.every, { timezone })
-            : { cron: opts.cron, timezone };
+        const schedule = scheduleFromOptions();
         const body = buildCreateJobBody({ prompt: opts.add, cron: schedule.cron, timezone: schedule.timezone, quiet: opts.quiet });
         const api = await jobsApi();
         let created;
@@ -412,7 +446,7 @@ export async function runBotJobs(nameArg, opts, deps) {
             out(JSON.stringify({ ok: true, job: created }, null, 2));
             return;
         }
-        const words = ("human" in schedule && schedule.human) || describeSchedule(created);
+        const words = schedule.human || describeSchedule(created);
         out(chalk.green(`Scheduled ${created.jobId}: ${name} will ${body.prompt.replace(/\s+/g, " ").slice(0, 120)} — ${words}.`));
         out(chalk.gray(`It runs on this computer while ${name} is running. If a run is due while the computer is asleep or ` +
             `${name} is stopped, it runs once, as a catch-up, the next time ${name} is running.`));
@@ -432,13 +466,14 @@ export async function runBotJobs(nameArg, opts, deps) {
 export function registerBotJobsCommand(bot, deps) {
     bot
         .command("jobs <name>")
-        .description("Show, schedule, or remove a bot's recurring jobs (the schedule runs in the cloud, not on this computer)")
+        .description("Show, schedule, reschedule, or remove a bot's recurring jobs (they run on this computer while the bot runs)")
         .option("--add <what>", "Schedule new work, in plain language")
         .option("--every <when>", 'How often, in plain language (e.g. "every weekday at 9am")')
         .option("--cron <expr>", 'How often, as a cron expression (e.g. "0 9 * * 1-5")')
         .option("--tz <zone>", "IANA timezone for the schedule (default: this computer's)")
         .option("--quiet", "Skip owner DMs after successful runs (requires rollout flag)")
         .option("--rm <jobId>", "Remove a scheduled job")
+        .option("--reschedule <jobId>", "Change a job's schedule (with --every or --cron)")
         .option("--json", "Print machine-readable JSON")
         .action(async (name, opts) => {
         try {

package/dist/commands/bot.d.ts

@@ -12,6 +12,9 @@ export interface BotRow {
     agentUid: string;
     ownerUid: string;
     runtime: BotRuntimeId;
+    needsSignIn?: boolean;
+    authCommand?: string;
+    serviceInstallPending?: boolean;
     model?: string;
     /** Thinking level the bot runs with (its setting, or the default). */
     effort: string;
@@ -135,7 +138,9 @@ export declare function resolveCreateKind(opts: {
 };
 export interface BotCreateOptions {
     runtime?: string;
+    provider?: string;
     hqFleetRuntime?: boolean;
+    legacyRuntime?: boolean;
     model?: string;
     effort?: string;
     autoApprove?: boolean;
@@ -374,4 +379,12 @@ export interface RemoteBotRow {
     ownerUid: string | null;
 }
 export declare function registerBotCommand(program: Command): void;
+/**
+ * The company a bot's hot-signal-sync job syncs: the bot's own company, else
+ * the first company it serves. Null = none, and no job is registered. There is
+ * no fallback to the HQ's active company: a personal bot syncs a company only
+ * when it was given one explicitly (`--company`), so the job never writes into
+ * a vault the bot does not belong to.
+ */
+export declare function hotSignalSyncCompany(config: Pick<BotConfig, "companySlug" | "kind" | "companies" | "workerId">): string | null;
 //# sourceMappingURL=bot.d.ts.map