@indigoai-us/hq-cli 5.345.178 → 5.345.179

package/CHANGELOG.md

@@ -2,6 +2,25 @@
 
 ## [Unreleased]
 
+## [5.345.179] — 2026-10-29
+- Conduct loop lanes now count a phase's absolute `deadline` from when the lane starts the phase, so time the envelope spent waiting in the queue no longer eats its run budget. An unparsable `deadline` now falls back to the phase's normal budget instead of an invalid one.
+- Pins hq-fleet-local v0.4.13 so a personal bot's first-start kickoff waits for HQ Fleet Runtime to attach before delivery instead of being dropped during startup.
+- `hq sources sync` runs every hot channel now for the signed-in person: each adapter once per integration connection the person created or was granted, through the HQ integration gateway. It prints sources landed per adapter and connection. A signed-out session or a revoked connection prints a reconnect prompt naming the connection, exits non-zero, and leaves the cursor unchanged. Use `--adapter <id>` to run one adapter and `--company <slug>` to pick the company. Catalog channels with no adapter in this build report "adapter not available in this hq version".
+- `hq sources runs --today` shows the hot-channel run log for the signed-in person: per adapter, the sources each run landed and the signals it generated, with start and finish times and any error. Cursors live at `sources/_cursors/@{personKey}/` and each run appends to `sources/_runs/@{personKey}/{day}.jsonl`, where the person key is a short hash of the person's email.
+- `hq bot run` registers a built-in hot-channel sync job for the bot's company: daily at 06:30 in the computer's time zone, run inside the bot with no model turn. If the computer was asleep at 06:30, the job runs once when it wakes and the ledger records `catchUp: true`. No crontab or launchd entry is written. Change the time with the new `hq bot jobs <bot> --reschedule <jobId> --every "..."` (or `--cron`); a removed job is not added back.
+- Only one hot-channel sync runs at a time per person and company. If the bot's scheduled run and `hq sources sync` overlap, the second one lands nothing, says another sync is running, and writes a `skipped` line to the run log.
+- Linear: issues assigned to you that changed since the last sync land as source documents.
+- Slack: threads HQ has saved to your company vault that you are part of become one signal each, pointing at the thread with no message text copied. A Slack rate-limit pause is reported with a prompt to retry or reconnect.
+- Attio: activity HQ has saved to your company vault becomes signals only when it is about you (changes you made, records you own, comments or notes that mention or are assigned to you), with no payload copied.
+- Meetings: transcripts already in `sources/meetings/` that you attended land as short pointer documents under `sources/meeting-events/`, with no transcript text copied.
+- Gmail ships behind the `hq.hot-channel-gmail` flag. While the flag is off, Gmail is listed as `gated` and never called. With it on, new INBOX mail lands as header-only pointers (never the body or snippet) with a read-only scope.
+- Newly landed sources are turned into signals with your own logged-in `claude`: up to 20 documents per run, each signal linked to its source and listed in the day's signal index. Signals from meetings, Slack and Attio use the full saved content each pointer names (up to 200 KB). A logged-out `claude`, a timeout, bad output, or any other error in one adapter's signals step marks that adapter failed in the run log and the run continues with the next adapter.
+- One malformed event from a channel is skipped and counted as rejected in the run log, with the reason, instead of stopping that channel on every later run.
+- Hot-channel syncs alert when sources land but no signals come out: the bot DMs you and `hq sources sync` prints the alert, at most once an hour per connection. Set `signals_alert_channel: <Slack channel id>` in the company's `settings/signals/preferences.yaml` to also post it to Slack.
+- Contributors: adding a hot channel is one adapter file plus one catalog entry, with end-to-end tests for both run triggers.
+- On Windows, `hq daemon install` now registers a scheduled task named for the current user (`ai.getindigo.hq-daemon-<SID>`, or a sanitised username when the SID cannot be read), so two people who share a PC no longer overwrite each other's daemon. Status, uninstall, `hq doctor` and the handoff and legacy lookups use the same per-user name. An older shared `ai.getindigo.hq-daemon` task that runs as the current user is moved to the new name and kept running; one that belongs to another Windows user, or whose owner cannot be read, is left untouched and `hq` says so.
+- `hq daemon uninstall` on Windows now works for users who upgraded from the shared task and have not re-run install: it checks schtasks for the per-user task instead of trusting the shared XML file, treats a per-user task that is already gone as removed, and also removes this user's task registered under the username form. A task owner stored as a bare user name is no longer treated as `DOMAIN\user`, so another domain's user of the same name keeps their task.
+
 ## [5.345.178] — 2026-10-29
 - `hq dm send --attach` now uploads the bytes it read with their exact length, so a file changed after the size check no longer stalls and fails with `Upload failed (HTTP 400)`. A refused upload now names the storage error (for example `RequestTimeout`).
 - `hq daemon disable mesh` now keeps `mesh` off on machines where it is not on by default,

package/dist/command-catalog.generated.d.ts

@@ -5150,6 +5150,72 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "runs";
+        readonly description: "Show the hot-channel run log: sources landed and signals generated per adapter";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--today";
+            readonly description: "Show today's runs (UTC); the default";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--date <YYYY-MM-DD>";
+            readonly description: "Show runs for this UTC day";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--company <slug>";
+            readonly description: "Company slug (defaults to .hq/config.json activeCompany)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--email <address>";
+            readonly description: "Whose runs to show (defaults to the signed-in person)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--format <fmt>";
+            readonly description: "Output format: table | json (default: table for TTY, json piped)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--hq-root <path>";
+            readonly description: "Local HQ tree root (default: <runtime-path>)";
+            readonly hidden: false;
+            readonly defaultValue: "<runtime-path>";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "sync";
+        readonly description: "Run every hot channel now: each adapter once per connection you can use";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--adapter <id>";
+            readonly description: "Run one adapter only (a catalog provider or adapter id)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--company <slug>";
+            readonly description: "Company slug (defaults to .hq/config.json activeCompany)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print the run report as JSON";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--hq-root <path>";
+            readonly description: "Local HQ tree root (default: <runtime-path>)";
+            readonly hidden: false;
+            readonly defaultValue: "<runtime-path>";
+        }];
+        readonly subcommands: readonly [];
     }];
 }, {
     readonly name: "signals";
@@ -18691,7 +18757,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "jobs";
-        readonly description: "Show, schedule, or remove a bot's recurring jobs (the schedule runs in the cloud, not on this computer)";
+        readonly description: "Show, schedule, reschedule, or remove a bot's recurring jobs (they run on this computer while the bot runs)";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -18728,6 +18794,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--rm <jobId>";
             readonly description: "Remove a scheduled job";
             readonly hidden: false;
+        }, {
+            readonly flags: "--reschedule <jobId>";
+            readonly description: "Change a job's schedule (with --every or --cron)";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Print machine-readable JSON";

package/dist/command-catalog.generated.js

@@ -6243,6 +6243,86 @@ export const COMMAND_CATALOG = [
                     }
                 ],
                 "subcommands": []
+            },
+            {
+                "name": "runs",
+                "description": "Show the hot-channel run log: sources landed and signals generated per adapter",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--today",
+                        "description": "Show today's runs (UTC); the default",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--date <YYYY-MM-DD>",
+                        "description": "Show runs for this UTC day",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--company <slug>",
+                        "description": "Company slug (defaults to .hq/config.json activeCompany)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--email <address>",
+                        "description": "Whose runs to show (defaults to the signed-in person)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--format <fmt>",
+                        "description": "Output format: table | json (default: table for TTY, json piped)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--hq-root <path>",
+                        "description": "Local HQ tree root (default: <runtime-path>)",
+                        "hidden": false,
+                        "defaultValue": "<runtime-path>"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "sync",
+                "description": "Run every hot channel now: each adapter once per connection you can use",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--adapter <id>",
+                        "description": "Run one adapter only (a catalog provider or adapter id)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--company <slug>",
+                        "description": "Company slug (defaults to .hq/config.json activeCompany)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print the run report as JSON",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--hq-root <path>",
+                        "description": "Local HQ tree root (default: <runtime-path>)",
+                        "hidden": false,
+                        "defaultValue": "<runtime-path>"
+                    }
+                ],
+                "subcommands": []
             }
         ]
     },
@@ -22774,7 +22854,7 @@ export const COMMAND_CATALOG = [
             },
             {
                 "name": "jobs",
-                "description": "Show, schedule, or remove a bot's recurring jobs (the schedule runs in the cloud, not on this computer)",
+                "description": "Show, schedule, reschedule, or remove a bot's recurring jobs (they run on this computer while the bot runs)",
                 "aliases": [],
                 "hidden": false,
                 "helpOption": true,
@@ -22820,6 +22900,11 @@ export const COMMAND_CATALOG = [
                         "description": "Remove a scheduled job",
                         "hidden": false
                     },
+                    {
+                        "flags": "--reschedule <jobId>",
+                        "description": "Change a job's schedule (with --every or --cron)",
+                        "hidden": false
+                    },
                     {
                         "flags": "--json",
                         "description": "Print machine-readable JSON",

package/dist/commands/bot-jobs.d.ts

@@ -5,17 +5,17 @@
  *   hq bot jobs <botName> --add "<what to do>" --every "<plain english>"
  *   hq bot jobs <botName> --add "<what to do>" --cron "0 9 * * 1-5"
  *   hq bot jobs <botName> --rm <jobId>
+ *   hq bot jobs <botName> --reschedule <jobId> --every "<plain english>"
  *
- * The schedule lives in the cloud, never on this computer: hq-pro-agents holds
- * the job and fires it on an EventBridge schedule, and the bot's inbox loop
- * runs the fired run (see lib/bot/job-run.ts). Nothing here writes a crontab,
- * a launchd plist, or a systemd unit — by rule.
- *
- * The routes are self-only per agent, so every call uses the BOT's own machine
- * identity — the same credential path its turns use — not the owner's session.
+ * The schedule lives with the bot: its jobs sit in the bot's own folder
+ * (lib/bot/local-jobs.ts) and the bot's inbox loop fires them while it runs
+ * (see lib/bot/job-run.ts). Nothing here writes a crontab, a launchd plist, or
+ * a systemd unit — by rule. Schedules are still written in the EventBridge form
+ * and held to the same limits, so a job reads the same wherever it runs.
  */
 import type { Command } from "commander";
-import { BotApi, type BotJobRecord, type CreateJobInput } from "../lib/bot/api.js";
+import { type LocalJobsApi } from "../lib/bot/local-jobs.js";
+import { type BotJobRecord, type CreateJobInput } from "../lib/bot/api.js";
 import { type BotConfig, type BotKind } from "../lib/bot/config.js";
 /** Mirrors hq-pro-agents `MIN_RECURRING_INTERVAL_SECONDS`. */
 export declare const MIN_RECURRING_INTERVAL_SECONDS: number;
@@ -100,7 +100,7 @@ export interface BotJobsDeps {
     };
     botTokenSupplier(dir: string): () => Promise<string>;
     /** Test seam: the jobs client for a bot directory. */
-    apiFor?(dir: string): Pick<BotApi, "listJobs" | "createJob" | "cancelJob">;
+    apiFor?(dir: string): LocalJobsApi;
     parseSchedule?: typeof parseScheduleText;
     timezone?: () => string;
     out?: (line: string) => void;
@@ -113,6 +113,8 @@ export interface BotJobsOptions {
     cron?: string;
     tz?: string;
     rm?: string;
+    /** Change an existing job's schedule, keeping its id, instruction and history. */
+    reschedule?: string;
     json?: boolean;
     quiet?: boolean;
 }

package/dist/commands/bot-jobs.js

@@ -5,14 +5,13 @@
  *   hq bot jobs <botName> --add "<what to do>" --every "<plain english>"
  *   hq bot jobs <botName> --add "<what to do>" --cron "0 9 * * 1-5"
  *   hq bot jobs <botName> --rm <jobId>
+ *   hq bot jobs <botName> --reschedule <jobId> --every "<plain english>"
  *
- * The schedule lives in the cloud, never on this computer: hq-pro-agents holds
- * the job and fires it on an EventBridge schedule, and the bot's inbox loop
- * runs the fired run (see lib/bot/job-run.ts). Nothing here writes a crontab,
- * a launchd plist, or a systemd unit — by rule.
- *
- * The routes are self-only per agent, so every call uses the BOT's own machine
- * identity — the same credential path its turns use — not the owner's session.
+ * The schedule lives with the bot: its jobs sit in the bot's own folder
+ * (lib/bot/local-jobs.ts) and the bot's inbox loop fires them while it runs
+ * (see lib/bot/job-run.ts). Nothing here writes a crontab, a launchd plist, or
+ * a systemd unit — by rule. Schedules are still written in the EventBridge form
+ * and held to the same limits, so a job reads the same wherever it runs.
  */
 import chalk from "chalk";
 import { localJobsClient } from "../lib/bot/local-jobs.js";
@@ -365,12 +364,56 @@ export async function runBotJobs(nameArg, opts, deps) {
         client = deps.apiFor ? deps.apiFor(dir) : localJobsClient(dir);
         return client;
     };
-    if (opts.add !== undefined && opts.rm !== undefined) {
-        refuse("Add a job or remove one, not both in the same command.");
+    if ([opts.add, opts.rm, opts.reschedule].filter((value) => value !== undefined).length > 1) {
+        refuse("Add, remove, or reschedule one job at a time, not several in the same command.");
     }
     if (opts.quiet && opts.add === undefined) {
         refuse("Use --quiet with --add to set a scheduled job's delivery option.");
     }
+    // Shared by --add and --reschedule: one schedule from --every or --cron, in
+    // the stored form, held to the same floor.
+    const scheduleFromOptions = () => {
+        if (!opts.every && !opts.cron) {
+            refuse(`Say how often it should run: --every "every weekday at 9am", or --cron "0 9 * * 1-5".`);
+        }
+        if (opts.every && opts.cron)
+            refuse("Use --every or --cron, not both.");
+        const timezone = opts.tz?.trim() || (deps.timezone ?? machineTimezone)();
+        // An unknown zone would throw RangeError on every inbox poll; refuse it now.
+        try {
+            new Intl.DateTimeFormat("en-US", { timeZone: timezone });
+        }
+        catch {
+            refuse(`"${timezone}" is not a known IANA time zone (for example America/New_York or Europe/London).`);
+        }
+        const parse = deps.parseSchedule ?? parseScheduleText;
+        return opts.every ? parse(opts.every, { timezone }) : { cron: opts.cron, timezone };
+    };
+    if (opts.reschedule !== undefined) {
+        const jobId = opts.reschedule.trim();
+        if (!jobId)
+            refuse("Say which job to reschedule: --reschedule <jobId>");
+        const schedule = scheduleFromOptions();
+        const cron = toEventBridgeCron(schedule.cron);
+        assertScheduleWithinFloor(cron);
+        const api = await jobsApi();
+        if (!api.rescheduleJob)
+            refuse(`${name}'s jobs cannot be rescheduled in place. Remove the job and add it again.`);
+        let updated;
+        try {
+            updated = await api.rescheduleJob(config.agentUid, jobId, { cron, timezone: schedule.timezone });
+        }
+        catch (err) {
+            refuse(jobsErrorMessage(err, ctx));
+        }
+        if (opts.json) {
+            out(JSON.stringify({ ok: true, job: updated }, null, 2));
+            return;
+        }
+        const words = schedule.human || describeSchedule(updated);
+        out(chalk.green(`Rescheduled ${updated.jobId}: ${name} now runs it ${words}.`));
+        return;
+    }
     if (opts.rm !== undefined) {
         const jobId = opts.rm.trim();
         if (!jobId)
@@ -389,16 +432,7 @@ export async function runBotJobs(nameArg, opts, deps) {
         if (opts.quiet && !(await quietOptionEnabled())) {
             refuse(`--quiet requires the ${BOT_JOB_QUIET_OPTION_FLAG} flag, which is currently disabled.`);
         }
-        if (!opts.every && !opts.cron) {
-            refuse(`Say how often it should run: --every "every weekday at 9am", or --cron "0 9 * * 1-5".`);
-        }
-        if (opts.every && opts.cron)
-            refuse("Use --every or --cron, not both.");
-        const timezone = opts.tz?.trim() || (deps.timezone ?? machineTimezone)();
-        const parse = deps.parseSchedule ?? parseScheduleText;
-        const schedule = opts.every
-            ? parse(opts.every, { timezone })
-            : { cron: opts.cron, timezone };
+        const schedule = scheduleFromOptions();
         const body = buildCreateJobBody({ prompt: opts.add, cron: schedule.cron, timezone: schedule.timezone, quiet: opts.quiet });
         const api = await jobsApi();
         let created;
@@ -412,7 +446,7 @@ export async function runBotJobs(nameArg, opts, deps) {
             out(JSON.stringify({ ok: true, job: created }, null, 2));
             return;
         }
-        const words = ("human" in schedule && schedule.human) || describeSchedule(created);
+        const words = schedule.human || describeSchedule(created);
         out(chalk.green(`Scheduled ${created.jobId}: ${name} will ${body.prompt.replace(/\s+/g, " ").slice(0, 120)} — ${words}.`));
         out(chalk.gray(`It runs on this computer while ${name} is running. If a run is due while the computer is asleep or ` +
             `${name} is stopped, it runs once, as a catch-up, the next time ${name} is running.`));
@@ -432,13 +466,14 @@ export async function runBotJobs(nameArg, opts, deps) {
 export function registerBotJobsCommand(bot, deps) {
     bot
         .command("jobs <name>")
-        .description("Show, schedule, or remove a bot's recurring jobs (the schedule runs in the cloud, not on this computer)")
+        .description("Show, schedule, reschedule, or remove a bot's recurring jobs (they run on this computer while the bot runs)")
         .option("--add <what>", "Schedule new work, in plain language")
         .option("--every <when>", 'How often, in plain language (e.g. "every weekday at 9am")')
         .option("--cron <expr>", 'How often, as a cron expression (e.g. "0 9 * * 1-5")')
         .option("--tz <zone>", "IANA timezone for the schedule (default: this computer's)")
         .option("--quiet", "Skip owner DMs after successful runs (requires rollout flag)")
         .option("--rm <jobId>", "Remove a scheduled job")
+        .option("--reschedule <jobId>", "Change a job's schedule (with --every or --cron)")
         .option("--json", "Print machine-readable JSON")
         .action(async (name, opts) => {
         try {

package/dist/commands/bot.d.ts

@@ -379,4 +379,12 @@ export interface RemoteBotRow {
     ownerUid: string | null;
 }
 export declare function registerBotCommand(program: Command): void;
+/**
+ * The company a bot's hot-signal-sync job syncs: the bot's own company, else
+ * the first company it serves. Null = none, and no job is registered. There is
+ * no fallback to the HQ's active company: a personal bot syncs a company only
+ * when it was given one explicitly (`--company`), so the job never writes into
+ * a vault the bot does not belong to.
+ */
+export declare function hotSignalSyncCompany(config: Pick<BotConfig, "companySlug" | "kind" | "companies" | "workerId">): string | null;
 //# sourceMappingURL=bot.d.ts.map

package/dist/commands/bot.js

@@ -1,4 +1,8 @@
 import { withLocalJobs } from "../lib/bot/local-jobs.js";
+import { currentHotSignalSyncCompany, ensureHotSignalSyncJob, removeStaleHotSignalSyncJobs, runHotSignalSyncJob } from "../lib/bot/jobs/hot-signal-sync.js";
+import { createClaudeSignalsPass } from "../lib/hot-channels/signals-pass.js";
+import { machineTimeZone } from "../lib/bot/job-run.js";
+import { runCompanyHotChannelSync } from "./sources.js";
 import { OwnerContextCache, lookupOwnerContext } from "../lib/bot/owner-context.js";
 import { hasActivePromotion } from "../lib/bot/promotion-receipt.js";
 import { readInflightTurns } from "../lib/bot/inflight.js";
@@ -1274,6 +1278,27 @@ async function runBotResident(nameArg) {
     const token = botTokenSupplier(dir);
     // The bot's own schedule lives in its folder and fires from this loop.
     const api = withLocalJobs(new BotApi({ token }), dir);
+    // The built-in hot-signal-sync job, registered once in the bot's own
+    // jobs.json (06:30 daily in this computer's time zone until the owner
+    // reschedules it with `hq bot jobs`). It runs in-process, with no model turn.
+    const syncCompany = hotSignalSyncCompany(config);
+    try {
+        // A job for a company the bot no longer serves is removed before anything runs.
+        for (const stale of removeStaleHotSignalSyncJobs(dir, syncCompany)) {
+            console.log(`Removed the hot-channel sync job ${stale.jobId}: this bot no longer syncs that company.`);
+        }
+    }
+    catch (err) {
+        console.error(`Could not check the hot-channel sync jobs: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (syncCompany) {
+        try {
+            ensureHotSignalSyncJob(dir, { company: syncCompany, timezone: machineTimeZone() });
+        }
+        catch (err) {
+            console.error(`Could not register the hot-channel sync job for ${syncCompany}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
     const owner = new OwnerContextCache(() => lookupOwnerContext(config.ownerUid), Date.now, undefined, config.ownerUid);
     const handle = await runBot({
         dir,
@@ -1281,6 +1306,15 @@ async function runBotResident(nameArg) {
         api,
         runtime: runtimeFor(config.runtime),
         ownerContext: () => owner.get(),
+        hotSignalSync: ({ company, catchUp, now, sendAlert }) => runHotSignalSyncJob({
+            company,
+            catchUp,
+            now,
+            sendAlert,
+            sync: (input) => runCompanyHotChannelSync({ hqRoot: config.hqRoot, ...input }),
+            // A new pass per run: the login preflight and the 20-document cap are per run.
+            signalsPass: createClaudeSignalsPass({ hqRoot: config.hqRoot, company }),
+        }),
         // US-005: decision picks in the owner DM, with the bot's own machine token
         // (never the owner's login).
         decisions: new DecisionsClient(token),
@@ -2641,4 +2675,14 @@ export function registerBotCommand(program) {
         console.log(opts.json ? JSON.stringify({ ok: true, ...r }, null, 2) : r.message);
     })());
 }
+/**
+ * The company a bot's hot-signal-sync job syncs: the bot's own company, else
+ * the first company it serves. Null = none, and no job is registered. There is
+ * no fallback to the HQ's active company: a personal bot syncs a company only
+ * when it was given one explicitly (`--company`), so the job never writes into
+ * a vault the bot does not belong to.
+ */
+export function hotSignalSyncCompany(config) {
+    return currentHotSignalSyncCompany(config);
+}
 //# sourceMappingURL=bot.js.map

package/dist/commands/daemon.d.ts

@@ -59,6 +59,8 @@ export interface DaemonCommandDeps {
     /** Reads stdin for the one-shot daemon machine login; never reads env or argv credentials. */
     readStdin?: () => Promise<string>;
     windowsUser?: string;
+    /** The Windows user's SID; the daemon's Scheduled Task name carries it so each user on a PC has their own task. */
+    windowsSid?: string;
     windowsHeadlessLauncher?: string;
     systemUnitDir?: string;
     systemRecordPath?: string;

package/dist/commands/daemon.js

@@ -24,7 +24,7 @@ import { DEFAULT_SERVICES, SERVICE_DESCRIPTIONS, enabledServices, hqCloudUnits }
 import { applyServiceToggle, effectiveSyncOwner, readDaemonConfig, writeDaemonConfig } from "../lib/daemon/config.js";
 import { daemonUnitInstalled } from "../lib/daemon/handoff.js";
 import { adoptLegacyUnits, readAdoptedUnits, restoreLegacyUnits } from "../lib/daemon/migrate.js";
-import { DAEMON_WINDOWS_TASK, ROOT_REFUSAL, SYSTEM_UNIT_DIR, WINDOWS_START_WAIT_MS, daemonRootRefusal, installDaemonUnit, installScopeFor, uninstallDaemonUnit, windowsInteractiveSession, } from "../lib/daemon/install.js";
+import { ROOT_REFUSAL, SYSTEM_UNIT_DIR, WINDOWS_START_WAIT_MS, daemonRootRefusal, installDaemonUnit, installScopeFor, classifyWindowsTask, legacyWindowsTask, readWindowsSid, uninstallDaemonUnit, windowsInteractiveSession, windowsTaskName, } from "../lib/daemon/install.js";
 import { describeLegacyUnit, findLegacyUnits } from "../lib/daemon/legacy.js";
 import { isDaemonProcess, liveDaemonLock, runningDaemonPid } from "../lib/daemon/lock.js";
 import { bundledHqCloud, managedHqCloud, managedHqCloudRoot, readHqCloudCopy, readHqCloudUpdateState } from "../lib/daemon/hq-cloud.js";
@@ -132,7 +132,10 @@ async function loadDefaults(over) {
                 existsSync: fs.existsSync,
                 listDir: (dir) => fs.readdirSync(dir),
                 launchdJobLoaded: (label) => run("launchctl", ["print", `gui/${process.getuid?.() ?? 0}/${label}`]).status === 0,
-                windowsTaskExists: (task) => run("schtasks.exe", ["/Query", "/TN", task]).status === 0,
+                windowsTaskOwner: (task) => classifyWindowsTask(run, task, {
+                    windowsSid: over.windowsSid ?? readWindowsSid(run),
+                    windowsUser: over.windowsUser ?? mesh.resolveWindowsUser(env),
+                }).state,
             })),
         resolveHqRoot: over.resolveHqRoot ?? ((flag) => resolveDaemonHqRoot(flag, { env, cwd: process.cwd(), home })),
         userHome: over.userHome ?? ((user) => loginHome(user, run)),
@@ -140,6 +143,7 @@ async function loadDefaults(over) {
         sleep: over.sleep,
         interactiveSession: over.interactiveSession,
         windowsUser: over.windowsUser ?? (platform === "win32" ? mesh.resolveWindowsUser(env) : ""),
+        windowsSid: over.windowsSid ?? (platform === "win32" ? readWindowsSid(run) : undefined),
         windowsHeadlessLauncher: over.windowsHeadlessLauncher ?? (platform === "win32" ? mesh.resolveWindowsHeadlessLauncher(env) : undefined),
         systemUnitDir: over.systemUnitDir ?? SYSTEM_UNIT_DIR,
         syncModeClient: over.syncModeClient,
@@ -196,6 +200,7 @@ function hostFor(d, paths, pathEnv) {
         uid: d.uid,
         isRoot: d.isRoot,
         windowsUser: d.windowsUser ?? "",
+        windowsSid: d.windowsSid,
         windowsHeadlessLauncher: d.windowsHeadlessLauncher,
         systemUnitDir: d.systemUnitDir ?? SYSTEM_UNIT_DIR,
         env,
@@ -306,6 +311,8 @@ async function runInstall(d, opts) {
         runningDaemon: () => liveDaemonLock(paths.lockPath, d.daemonAlive),
     });
     handOver(d, { paths, detected, runAsUser });
+    if (result.notice)
+        d.out(result.notice);
     if (result.warning)
         d.err(result.warning);
     if (result.kind === "manual") {
@@ -333,7 +340,7 @@ async function runInstall(d, opts) {
                 ? `Installed ${result.unitPath}, but the daemon did not start within ${seconds} seconds although you are signed in to Windows.`
                 : `Installed ${result.unitPath}, but the daemon did not start within ${seconds} seconds, and HQ could not check whether you are signed in to Windows.`,
             "Check it with: hq daemon status",
-            `The task's last result: powershell -NoProfile -Command "(Get-ScheduledTaskInfo -TaskName '${DAEMON_WINDOWS_TASK}').LastTaskResult"`,
+            `The task's last result: powershell -NoProfile -Command "(Get-ScheduledTaskInfo -TaskName '${windowsTaskName({ windowsSid: d.windowsSid, windowsUser: d.windowsUser ?? "" })}').LastTaskResult"`,
         ].join("\n"));
     }
     if (!result.running) {
@@ -386,6 +393,8 @@ async function runUninstall(d, opts) {
     }
     const result = uninstallDaemonUnit(hostFor(d, paths, false), { scope: installScopeFor(detected.type) }, { run: d.run });
     d.out(result.removed ? `Removed ${result.unitPath}` : "hq daemon was not installed.");
+    if (result.notice)
+        d.out(result.notice);
     if (result.warning)
         d.err(result.warning);
     if (opts.restoreLegacy) {
@@ -869,7 +878,9 @@ async function runMigrate(d, opts) {
             platform: d.platform,
             home: d.home,
             systemUnitDir: d.systemUnitDir,
+            windowsTaskName: windowsTaskName({ windowsSid: d.windowsSid, windowsUser: d.windowsUser ?? "" }),
             windowsTaskExists: (task) => d.run("schtasks.exe", ["/Query", "/TN", task]).status === 0,
+            windowsLegacyTaskIsMine: () => legacyWindowsTask(d.run, { windowsSid: d.windowsSid, windowsUser: d.windowsUser ?? "" }).state === "mine",
         });
         if (!installed) {
             throw new DaemonCommandError("hq daemon is not installed here yet. Run `hq daemon install` first, then `hq daemon migrate --apply`.");
@@ -893,7 +904,7 @@ async function runMigrate(d, opts) {
         if (u.migratable)
             d.out(`Would take over ${u.unitId} from ${describeLegacyUnit(u)}${u.path ? ` (${u.path})` : ""}`);
         else
-            d.out(`Leaving ${u.unitId} to ${describeLegacyUnit(u)} (owned by the HQ desktop app)`);
+            d.out(`Leaving ${u.unitId} to ${describeLegacyUnit(u)} (${u.notMineReason ?? "owned by the HQ desktop app"})`);
     }
     d.out("Nothing was changed. `hq daemon migrate --apply` takes them over.");
 }

package/dist/commands/integrations-core.d.ts

@@ -299,6 +299,8 @@ export interface UsableApp {
      * provider, else `--connection <id>`.
      */
     selector: string;
+    /** The caller created this connection (`viewerAccess.isCreator`). */
+    ownedByCaller: boolean;
 }
 export interface UsableAppsResult {
     companyUid: string;

package/dist/commands/integrations-core.js

@@ -529,6 +529,7 @@ export async function fetchUsableApps(token, companyUid) {
                 status: row.status,
                 providerArg,
                 selector: shared ? `--connection ${row.id}` : `--provider ${providerArg}`,
+                ownedByCaller: row.viewerAccess?.isCreator === true,
             };
         })
             .sort((a, b) => compareNames(a.name, b.name))