@indigoai-us/hq-cli 5.345.178 → 5.345.180

package/CHANGELOG.md

@@ -2,6 +2,45 @@
 
 ## [Unreleased]
 
+## [5.345.180] — 2026-10-30
+- New `hq channels add <channel> <member...>` and `hq channels remove <channel> <member>`. An owner can now add a personal bot (or a teammate) to a channel from the CLI by @handle, email, or prs_/agt_ uid, so everyone in the channel can @mention it. Before this there was no verb for it, and posting "@bot" into the channel was refused with "No channel member matches". The server's join-first refusal and the owner-or-company-admin rule for adding and removing members are explained in plain words. Feedback e165b286-b059-4d5c-bd44-ac344f00c821.
+- A local bot can now have a model login of its own, so it no longer has to use yours. `hq bot login <name> [--runtime claude|codex]` runs the runtime's own sign-in into `~/.hq/bots/<name>/auth/<runtime>/` (`CLAUDE_CONFIG_DIR` or `CODEX_HOME`). `hq bot logout <name>` signs that login out and deletes the folder. `hq bot set <name> --account <id|default>` points the bot at an existing `hq capacity` account instead. Every model turn uses the chosen login. When that login is missing or its account is gone, the turn does not fall back to your login: the bot replies in the DM saying so, keeps the message pending, and `hq bot status` shows the problem. `hq bot status` now has a `login:` line (default, own, or the account name) and never shows a token.
+- `hq bot set <name> --runtime <claude|codex|grok>` switches a bot's model CLI. It first runs one test turn on the new runtime with the bot's login, and changes nothing if that fails. It then stops a running bot, backs up `bot.json` and moves the old runtime's session files to `~/.hq/bots/<name>/session-archive/`, saves the new runtime, and starts the bot again. If the bot does not come back, the old runtime, settings and sessions are restored. A model or thinking level that does not fit the new runtime is reset to the default. DM history, memory and the bot's HQ identity are not touched.
+- Pins hq-fleet-local v0.4.14 so Grok browser sign-in returns valid machine-readable authentication results while retaining the first-start delivery fix.
+- Personal fleet bots now share one runtime installation per engine version on the same computer. Creating another bot keeps its own profile and credentials without reinstalling the runtime. Upgrades reuse a downloaded runtime archive only when its SHA-256 matches the new release pin.
+- The bot's daily hot-channel sync now skips a run, writing nothing, when the bot's `bot.json` is missing or cannot be read. It no longer falls back to the company the bot started with. The job stays in place and tries again at its next run.
+- A hot-channel sync that loses its lock now stops before writing meeting notes, moving a cursor, or adding a run ledger line. Only the ledger line that records the lost lock is still written.
+- Fixed (hq-cloud): bump hq-cloud to 6.18.105 so company sync keeps downloading when the server refuses some uploads.
+- Lane self-review. `hq lanes create` adds a self-review rule to every lane brief (claude, codex and grok), right after the temp-home rule. Before reporting done on work that opens or updates a PR, the lane runs the paranoid /review on its own final diff, fixes every critical and re-runs until there are 0 criticals. It puts the report in the PR body under a "Self-review" heading with the head SHA, and saves it under `workspace/reviews/` in the `hq-pr-review.v1` format that the core-pr-reviews channel guard reads. The lane never posts to core-pr-reviews, and if it cannot produce the report, the lane marks the PR as draft. A resumed lane carries the rule once.
+- On a person (`prs_`) account the mesh daemon now also subscribes to the owner's `hq/{prs}/dm` realtime topic. From each wake it reads only `type`, `channelId` and `eventId`. A channel event counts only when that channel's company is in the allowed set (the device default company plus companies from recent sessions); an unknown channel or a channel with no company is dropped. Each kept event bumps a counter in `~/.hq/work-mesh/owner-inbox-push.json` (count, last event time and type, heartbeat), which is written atomically with mode 0600. Message text, poster name and email are never stored, logged or forwarded. New `hq mesh push-status [--json]` reports whether the signal is live or stale with the last event time, and exits 1 when stale. `hq mesh daemon doctor` shows the same line and reports a stale push as unhealthy while the daemon runs. The owner subscription is best-effort: if the broker rejects it, the work topic keeps running and the daemon retries the owner subscribe with backoff, up to 6 times per connection. On an account that is not a person account, push-status reports `off` and doctor skips the check. Agent (`agt_`) accounts are unchanged.
+- Updates the new sync engine to 0.1.23, fixing concurrent rename/edit stalls
+  and delayed recovery after delete confirmations.
+- Requires version 0.1.23 or newer for full sync of both personal and company
+  vaults. If an engine update fails, an older engine cannot join the rollout.
+- Avoids full local filesystem scans for remote-only wake events when local
+  watcher coverage is complete, while preserving full scans after local changes.
+- Receive files from the new sync engine while a computer uses legacy sync, including personal vaults and rollback, with current access and single-owner checks.
+- Use a separate rollout switch for the new sync engine generation so older CLI installations stay on legacy sync until updated. This generation requires engine 0.1.23 and does not inherit approval from the previous switch when the new switch is missing or unavailable.
+
+## [5.345.179] — 2026-10-29
+- Conduct loop lanes now count a phase's absolute `deadline` from when the lane starts the phase, so time the envelope spent waiting in the queue no longer eats its run budget. An unparsable `deadline` now falls back to the phase's normal budget instead of an invalid one.
+- Pins hq-fleet-local v0.4.13 so a personal bot's first-start kickoff waits for HQ Fleet Runtime to attach before delivery instead of being dropped during startup.
+- `hq sources sync` runs every hot channel now for the signed-in person: each adapter once per integration connection the person created or was granted, through the HQ integration gateway. It prints sources landed per adapter and connection. A signed-out session or a revoked connection prints a reconnect prompt naming the connection, exits non-zero, and leaves the cursor unchanged. Use `--adapter <id>` to run one adapter and `--company <slug>` to pick the company. Catalog channels with no adapter in this build report "adapter not available in this hq version".
+- `hq sources runs --today` shows the hot-channel run log for the signed-in person: per adapter, the sources each run landed and the signals it generated, with start and finish times and any error. Cursors live at `sources/_cursors/@{personKey}/` and each run appends to `sources/_runs/@{personKey}/{day}.jsonl`, where the person key is a short hash of the person's email.
+- `hq bot run` registers a built-in hot-channel sync job for the bot's company: daily at 06:30 in the computer's time zone, run inside the bot with no model turn. If the computer was asleep at 06:30, the job runs once when it wakes and the ledger records `catchUp: true`. No crontab or launchd entry is written. Change the time with the new `hq bot jobs <bot> --reschedule <jobId> --every "..."` (or `--cron`); a removed job is not added back.
+- Only one hot-channel sync runs at a time per person and company. If the bot's scheduled run and `hq sources sync` overlap, the second one lands nothing, says another sync is running, and writes a `skipped` line to the run log.
+- Linear: issues assigned to you that changed since the last sync land as source documents.
+- Slack: threads HQ has saved to your company vault that you are part of become one signal each, pointing at the thread with no message text copied. A Slack rate-limit pause is reported with a prompt to retry or reconnect.
+- Attio: activity HQ has saved to your company vault becomes signals only when it is about you (changes you made, records you own, comments or notes that mention or are assigned to you), with no payload copied.
+- Meetings: transcripts already in `sources/meetings/` that you attended land as short pointer documents under `sources/meeting-events/`, with no transcript text copied.
+- Gmail ships behind the `hq.hot-channel-gmail` flag. While the flag is off, Gmail is listed as `gated` and never called. With it on, new INBOX mail lands as header-only pointers (never the body or snippet) with a read-only scope.
+- Newly landed sources are turned into signals with your own logged-in `claude`: up to 20 documents per run, each signal linked to its source and listed in the day's signal index. Signals from meetings, Slack and Attio use the full saved content each pointer names (up to 200 KB). A logged-out `claude`, a timeout, bad output, or any other error in one adapter's signals step marks that adapter failed in the run log and the run continues with the next adapter.
+- One malformed event from a channel is skipped and counted as rejected in the run log, with the reason, instead of stopping that channel on every later run.
+- Hot-channel syncs alert when sources land but no signals come out: the bot DMs you and `hq sources sync` prints the alert, at most once an hour per connection. Set `signals_alert_channel: <Slack channel id>` in the company's `settings/signals/preferences.yaml` to also post it to Slack.
+- Contributors: adding a hot channel is one adapter file plus one catalog entry, with end-to-end tests for both run triggers.
+- On Windows, `hq daemon install` now registers a scheduled task named for the current user (`ai.getindigo.hq-daemon-<SID>`, or a sanitised username when the SID cannot be read), so two people who share a PC no longer overwrite each other's daemon. Status, uninstall, `hq doctor` and the handoff and legacy lookups use the same per-user name. An older shared `ai.getindigo.hq-daemon` task that runs as the current user is moved to the new name and kept running; one that belongs to another Windows user, or whose owner cannot be read, is left untouched and `hq` says so.
+- `hq daemon uninstall` on Windows now works for users who upgraded from the shared task and have not re-run install: it checks schtasks for the per-user task instead of trusting the shared XML file, treats a per-user task that is already gone as removed, and also removes this user's task registered under the username form. A task owner stored as a bare user name is no longer treated as `DOMAIN\user`, so another domain's user of the same name keeps their task.
+
 ## [5.345.178] — 2026-10-29
 - `hq dm send --attach` now uploads the bytes it read with their exact length, so a file changed after the size check no longer stalls and fails with `Upload failed (HTTP 400)`. A refused upload now names the storage error (for example `RequestTimeout`).
 - `hq daemon disable mesh` now keeps `mesh` off on machines where it is not on by default,

package/dist/command-catalog.generated.d.ts

@@ -4394,6 +4394,58 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "add";
+        readonly description: "Add people or your own bots to a channel, by @handle, email, or prs_/agt_ uid.";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <channel> <member...>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "channel";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }, {
+            readonly name: "member";
+            readonly required: true;
+            readonly variadic: true;
+            readonly description: "";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Output the per-member results as JSON.";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "remove";
+        readonly description: "Remove a member or bot from a channel (owner or company admin), or leave it yourself.";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <channel> <member>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "channel";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }, {
+            readonly name: "member";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Output the result as JSON.";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }];
 }, {
     readonly name: "onboard";
@@ -5150,6 +5202,72 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "runs";
+        readonly description: "Show the hot-channel run log: sources landed and signals generated per adapter";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--today";
+            readonly description: "Show today's runs (UTC); the default";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--date <YYYY-MM-DD>";
+            readonly description: "Show runs for this UTC day";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--company <slug>";
+            readonly description: "Company slug (defaults to .hq/config.json activeCompany)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--email <address>";
+            readonly description: "Whose runs to show (defaults to the signed-in person)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--format <fmt>";
+            readonly description: "Output format: table | json (default: table for TTY, json piped)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--hq-root <path>";
+            readonly description: "Local HQ tree root (default: <runtime-path>)";
+            readonly hidden: false;
+            readonly defaultValue: "<runtime-path>";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "sync";
+        readonly description: "Run every hot channel now: each adapter once per connection you can use";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--adapter <id>";
+            readonly description: "Run one adapter only (a catalog provider or adapter id)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--company <slug>";
+            readonly description: "Company slug (defaults to .hq/config.json activeCompany)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print the run report as JSON";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--hq-root <path>";
+            readonly description: "Local HQ tree root (default: <runtime-path>)";
+            readonly hidden: false;
+            readonly defaultValue: "<runtime-path>";
+        }];
+        readonly subcommands: readonly [];
     }];
 }, {
     readonly name: "signals";
@@ -13943,6 +14061,22 @@ export declare const COMMAND_CATALOG: readonly [{
             }];
             readonly subcommands: readonly [];
         }];
+    }, {
+        readonly name: "push-status";
+        readonly description: "Report whether the owner DM push signal is live or stale, with the last event time";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }];
 }, {
     readonly name: "lanes";
@@ -18691,7 +18825,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "jobs";
-        readonly description: "Show, schedule, or remove a bot's recurring jobs (the schedule runs in the cloud, not on this computer)";
+        readonly description: "Show, schedule, reschedule, or remove a bot's recurring jobs (they run on this computer while the bot runs)";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -18728,6 +18862,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--rm <jobId>";
             readonly description: "Remove a scheduled job";
             readonly hidden: false;
+        }, {
+            readonly flags: "--reschedule <jobId>";
+            readonly description: "Change a job's schedule (with --every or --cron)";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Print machine-readable JSON";
@@ -19203,6 +19341,14 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "";
         }];
         readonly options: readonly [{
+            readonly flags: "--runtime <runtime>";
+            readonly description: "Switch the model CLI: claude|codex|grok. Checked with one test turn first; the old runtime's sessions are set aside (backed up), DM history and memory stay";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--account <id>";
+            readonly description: "Use this hq capacity account's login for the bot's runtime, or default for your own sign-in";
+            readonly hidden: false;
+        }, {
             readonly flags: "--model <model>";
             readonly description: "Model id for the runtime CLI, or default for the CLI's own default";
             readonly hidden: false;
@@ -19220,6 +19366,56 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "login";
+        readonly description: "Give the bot a model login of its own, so it does not use yours: runs the runtime's own sign-in into ~/.hq/bots/<name>/auth/<runtime>";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <name>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "name";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--runtime <runtime>";
+            readonly description: "claude|codex (default: the bot's runtime)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "logout";
+        readonly description: "Sign the bot's own model login out and delete it; the bot goes back to your default sign-in";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <name>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "name";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--runtime <runtime>";
+            readonly description: "claude|codex (default: both)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "set-model";
         readonly description: "Set the model this bot asks its runtime for (stored in the bot's own settings; the runtime's own config is never changed), or default to clear it";

package/dist/command-catalog.generated.js

@@ -5326,6 +5326,70 @@ export const COMMAND_CATALOG = [
                     }
                 ],
                 "subcommands": []
+            },
+            {
+                "name": "add",
+                "description": "Add people or your own bots to a channel, by @handle, email, or prs_/agt_ uid.",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] <channel> <member...>",
+                "helpText": [],
+                "arguments": [
+                    {
+                        "name": "channel",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    },
+                    {
+                        "name": "member",
+                        "required": true,
+                        "variadic": true,
+                        "description": ""
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "Output the per-member results as JSON.",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "remove",
+                "description": "Remove a member or bot from a channel (owner or company admin), or leave it yourself.",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] <channel> <member>",
+                "helpText": [],
+                "arguments": [
+                    {
+                        "name": "channel",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    },
+                    {
+                        "name": "member",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "Output the result as JSON.",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
             }
         ]
     },
@@ -6243,6 +6307,86 @@ export const COMMAND_CATALOG = [
                     }
                 ],
                 "subcommands": []
+            },
+            {
+                "name": "runs",
+                "description": "Show the hot-channel run log: sources landed and signals generated per adapter",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--today",
+                        "description": "Show today's runs (UTC); the default",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--date <YYYY-MM-DD>",
+                        "description": "Show runs for this UTC day",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--company <slug>",
+                        "description": "Company slug (defaults to .hq/config.json activeCompany)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--email <address>",
+                        "description": "Whose runs to show (defaults to the signed-in person)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--format <fmt>",
+                        "description": "Output format: table | json (default: table for TTY, json piped)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--hq-root <path>",
+                        "description": "Local HQ tree root (default: <runtime-path>)",
+                        "hidden": false,
+                        "defaultValue": "<runtime-path>"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "sync",
+                "description": "Run every hot channel now: each adapter once per connection you can use",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--adapter <id>",
+                        "description": "Run one adapter only (a catalog provider or adapter id)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--company <slug>",
+                        "description": "Company slug (defaults to .hq/config.json activeCompany)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print the run report as JSON",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--hq-root <path>",
+                        "description": "Local HQ tree root (default: <runtime-path>)",
+                        "hidden": false,
+                        "defaultValue": "<runtime-path>"
+                    }
+                ],
+                "subcommands": []
             }
         ]
     },
@@ -16963,6 +17107,25 @@ export const COMMAND_CATALOG = [
                         "subcommands": []
                     }
                 ]
+            },
+            {
+                "name": "push-status",
+                "description": "Report whether the owner DM push signal is live or stale, with the last event time",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "Print machine-readable JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
             }
         ]
     },
@@ -22774,7 +22937,7 @@ export const COMMAND_CATALOG = [
             },
             {
                 "name": "jobs",
-                "description": "Show, schedule, or remove a bot's recurring jobs (the schedule runs in the cloud, not on this computer)",
+                "description": "Show, schedule, reschedule, or remove a bot's recurring jobs (they run on this computer while the bot runs)",
                 "aliases": [],
                 "hidden": false,
                 "helpOption": true,
@@ -22820,6 +22983,11 @@ export const COMMAND_CATALOG = [
                         "description": "Remove a scheduled job",
                         "hidden": false
                     },
+                    {
+                        "flags": "--reschedule <jobId>",
+                        "description": "Change a job's schedule (with --every or --cron)",
+                        "hidden": false
+                    },
                     {
                         "flags": "--json",
                         "description": "Print machine-readable JSON",
@@ -23404,6 +23572,16 @@ export const COMMAND_CATALOG = [
                     }
                 ],
                 "options": [
+                    {
+                        "flags": "--runtime <runtime>",
+                        "description": "Switch the model CLI: claude|codex|grok. Checked with one test turn first; the old runtime's sessions are set aside (backed up), DM history and memory stay",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--account <id>",
+                        "description": "Use this hq capacity account's login for the bot's runtime, or default for your own sign-in",
+                        "hidden": false
+                    },
                     {
                         "flags": "--model <model>",
                         "description": "Model id for the runtime CLI, or default for the CLI's own default",
@@ -23427,6 +23605,68 @@ export const COMMAND_CATALOG = [
                 ],
                 "subcommands": []
             },
+            {
+                "name": "login",
+                "description": "Give the bot a model login of its own, so it does not use yours: runs the runtime's own sign-in into ~/.hq/bots/<name>/auth/<runtime>",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] <name>",
+                "helpText": [],
+                "arguments": [
+                    {
+                        "name": "name",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--runtime <runtime>",
+                        "description": "claude|codex (default: the bot's runtime)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print machine-readable JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "logout",
+                "description": "Sign the bot's own model login out and delete it; the bot goes back to your default sign-in",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] <name>",
+                "helpText": [],
+                "arguments": [
+                    {
+                        "name": "name",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--runtime <runtime>",
+                        "description": "claude|codex (default: both)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print machine-readable JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
             {
                 "name": "set-model",
                 "description": "Set the model this bot asks its runtime for (stored in the bot's own settings; the runtime's own config is never changed), or default to clear it",

package/dist/commands/bot-jobs.d.ts

@@ -5,17 +5,17 @@
  *   hq bot jobs <botName> --add "<what to do>" --every "<plain english>"
  *   hq bot jobs <botName> --add "<what to do>" --cron "0 9 * * 1-5"
  *   hq bot jobs <botName> --rm <jobId>
+ *   hq bot jobs <botName> --reschedule <jobId> --every "<plain english>"
  *
- * The schedule lives in the cloud, never on this computer: hq-pro-agents holds
- * the job and fires it on an EventBridge schedule, and the bot's inbox loop
- * runs the fired run (see lib/bot/job-run.ts). Nothing here writes a crontab,
- * a launchd plist, or a systemd unit — by rule.
- *
- * The routes are self-only per agent, so every call uses the BOT's own machine
- * identity — the same credential path its turns use — not the owner's session.
+ * The schedule lives with the bot: its jobs sit in the bot's own folder
+ * (lib/bot/local-jobs.ts) and the bot's inbox loop fires them while it runs
+ * (see lib/bot/job-run.ts). Nothing here writes a crontab, a launchd plist, or
+ * a systemd unit — by rule. Schedules are still written in the EventBridge form
+ * and held to the same limits, so a job reads the same wherever it runs.
  */
 import type { Command } from "commander";
-import { BotApi, type BotJobRecord, type CreateJobInput } from "../lib/bot/api.js";
+import { type LocalJobsApi } from "../lib/bot/local-jobs.js";
+import { type BotJobRecord, type CreateJobInput } from "../lib/bot/api.js";
 import { type BotConfig, type BotKind } from "../lib/bot/config.js";
 /** Mirrors hq-pro-agents `MIN_RECURRING_INTERVAL_SECONDS`. */
 export declare const MIN_RECURRING_INTERVAL_SECONDS: number;
@@ -100,7 +100,7 @@ export interface BotJobsDeps {
     };
     botTokenSupplier(dir: string): () => Promise<string>;
     /** Test seam: the jobs client for a bot directory. */
-    apiFor?(dir: string): Pick<BotApi, "listJobs" | "createJob" | "cancelJob">;
+    apiFor?(dir: string): LocalJobsApi;
     parseSchedule?: typeof parseScheduleText;
     timezone?: () => string;
     out?: (line: string) => void;
@@ -113,6 +113,8 @@ export interface BotJobsOptions {
     cron?: string;
     tz?: string;
     rm?: string;
+    /** Change an existing job's schedule, keeping its id, instruction and history. */
+    reschedule?: string;
     json?: boolean;
     quiet?: boolean;
 }