@indigoai-us/hq-cli 5.345.179 → 5.345.181

package/CHANGELOG.md

@@ -2,6 +2,29 @@
 
 ## [Unreleased]
 
+## [5.345.181] — 2026-10-30
+- Local personal and company bots now share one HQ Fleet runtime installation while keeping isolated native profiles and gateway services. Existing local Fleet bots migrate in place without losing profile state.
+
+## [5.345.180] — 2026-10-30
+- New `hq channels add <channel> <member...>` and `hq channels remove <channel> <member>`. An owner can now add a personal bot (or a teammate) to a channel from the CLI by @handle, email, or prs_/agt_ uid, so everyone in the channel can @mention it. Before this there was no verb for it, and posting "@bot" into the channel was refused with "No channel member matches". The server's join-first refusal and the owner-or-company-admin rule for adding and removing members are explained in plain words. Feedback e165b286-b059-4d5c-bd44-ac344f00c821.
+- A local bot can now have a model login of its own, so it no longer has to use yours. `hq bot login <name> [--runtime claude|codex]` runs the runtime's own sign-in into `~/.hq/bots/<name>/auth/<runtime>/` (`CLAUDE_CONFIG_DIR` or `CODEX_HOME`). `hq bot logout <name>` signs that login out and deletes the folder. `hq bot set <name> --account <id|default>` points the bot at an existing `hq capacity` account instead. Every model turn uses the chosen login. When that login is missing or its account is gone, the turn does not fall back to your login: the bot replies in the DM saying so, keeps the message pending, and `hq bot status` shows the problem. `hq bot status` now has a `login:` line (default, own, or the account name) and never shows a token.
+- `hq bot set <name> --runtime <claude|codex|grok>` switches a bot's model CLI. It first runs one test turn on the new runtime with the bot's login, and changes nothing if that fails. It then stops a running bot, backs up `bot.json` and moves the old runtime's session files to `~/.hq/bots/<name>/session-archive/`, saves the new runtime, and starts the bot again. If the bot does not come back, the old runtime, settings and sessions are restored. A model or thinking level that does not fit the new runtime is reset to the default. DM history, memory and the bot's HQ identity are not touched.
+- Pins hq-fleet-local v0.4.14 so Grok browser sign-in returns valid machine-readable authentication results while retaining the first-start delivery fix.
+- Personal fleet bots now share one runtime installation per engine version on the same computer. Creating another bot keeps its own profile and credentials without reinstalling the runtime. Upgrades reuse a downloaded runtime archive only when its SHA-256 matches the new release pin.
+- The bot's daily hot-channel sync now skips a run, writing nothing, when the bot's `bot.json` is missing or cannot be read. It no longer falls back to the company the bot started with. The job stays in place and tries again at its next run.
+- A hot-channel sync that loses its lock now stops before writing meeting notes, moving a cursor, or adding a run ledger line. Only the ledger line that records the lost lock is still written.
+- Fixed (hq-cloud): bump hq-cloud to 6.18.105 so company sync keeps downloading when the server refuses some uploads.
+- Lane self-review. `hq lanes create` adds a self-review rule to every lane brief (claude, codex and grok), right after the temp-home rule. Before reporting done on work that opens or updates a PR, the lane runs the paranoid /review on its own final diff, fixes every critical and re-runs until there are 0 criticals. It puts the report in the PR body under a "Self-review" heading with the head SHA, and saves it under `workspace/reviews/` in the `hq-pr-review.v1` format that the core-pr-reviews channel guard reads. The lane never posts to core-pr-reviews, and if it cannot produce the report, the lane marks the PR as draft. A resumed lane carries the rule once.
+- On a person (`prs_`) account the mesh daemon now also subscribes to the owner's `hq/{prs}/dm` realtime topic. From each wake it reads only `type`, `channelId` and `eventId`. A channel event counts only when that channel's company is in the allowed set (the device default company plus companies from recent sessions); an unknown channel or a channel with no company is dropped. Each kept event bumps a counter in `~/.hq/work-mesh/owner-inbox-push.json` (count, last event time and type, heartbeat), which is written atomically with mode 0600. Message text, poster name and email are never stored, logged or forwarded. New `hq mesh push-status [--json]` reports whether the signal is live or stale with the last event time, and exits 1 when stale. `hq mesh daemon doctor` shows the same line and reports a stale push as unhealthy while the daemon runs. The owner subscription is best-effort: if the broker rejects it, the work topic keeps running and the daemon retries the owner subscribe with backoff, up to 6 times per connection. On an account that is not a person account, push-status reports `off` and doctor skips the check. Agent (`agt_`) accounts are unchanged.
+- Updates the new sync engine to 0.1.23, fixing concurrent rename/edit stalls
+  and delayed recovery after delete confirmations.
+- Requires version 0.1.23 or newer for full sync of both personal and company
+  vaults. If an engine update fails, an older engine cannot join the rollout.
+- Avoids full local filesystem scans for remote-only wake events when local
+  watcher coverage is complete, while preserving full scans after local changes.
+- Receive files from the new sync engine while a computer uses legacy sync, including personal vaults and rollback, with current access and single-owner checks.
+- Use a separate rollout switch for the new sync engine generation so older CLI installations stay on legacy sync until updated. This generation requires engine 0.1.23 and does not inherit approval from the previous switch when the new switch is missing or unavailable.
+
 ## [5.345.179] — 2026-10-29
 - Conduct loop lanes now count a phase's absolute `deadline` from when the lane starts the phase, so time the envelope spent waiting in the queue no longer eats its run budget. An unparsable `deadline` now falls back to the phase's normal budget instead of an invalid one.
 - Pins hq-fleet-local v0.4.13 so a personal bot's first-start kickoff waits for HQ Fleet Runtime to attach before delivery instead of being dropped during startup.

package/dist/command-catalog.generated.d.ts

@@ -4394,6 +4394,58 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "add";
+        readonly description: "Add people or your own bots to a channel, by @handle, email, or prs_/agt_ uid.";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <channel> <member...>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "channel";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }, {
+            readonly name: "member";
+            readonly required: true;
+            readonly variadic: true;
+            readonly description: "";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Output the per-member results as JSON.";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "remove";
+        readonly description: "Remove a member or bot from a channel (owner or company admin), or leave it yourself.";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <channel> <member>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "channel";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }, {
+            readonly name: "member";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Output the result as JSON.";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }];
 }, {
     readonly name: "onboard";
@@ -14009,6 +14061,22 @@ export declare const COMMAND_CATALOG: readonly [{
             }];
             readonly subcommands: readonly [];
         }];
+    }, {
+        readonly name: "push-status";
+        readonly description: "Report whether the owner DM push signal is live or stale, with the last event time";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }];
 }, {
     readonly name: "lanes";
@@ -19273,6 +19341,14 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "";
         }];
         readonly options: readonly [{
+            readonly flags: "--runtime <runtime>";
+            readonly description: "Switch the model CLI: claude|codex|grok. Checked with one test turn first; the old runtime's sessions are set aside (backed up), DM history and memory stay";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--account <id>";
+            readonly description: "Use this hq capacity account's login for the bot's runtime, or default for your own sign-in";
+            readonly hidden: false;
+        }, {
             readonly flags: "--model <model>";
             readonly description: "Model id for the runtime CLI, or default for the CLI's own default";
             readonly hidden: false;
@@ -19290,6 +19366,56 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "login";
+        readonly description: "Give the bot a model login of its own, so it does not use yours: runs the runtime's own sign-in into ~/.hq/bots/<name>/auth/<runtime>";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <name>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "name";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--runtime <runtime>";
+            readonly description: "claude|codex (default: the bot's runtime)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "logout";
+        readonly description: "Sign the bot's own model login out and delete it; the bot goes back to your default sign-in";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <name>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "name";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--runtime <runtime>";
+            readonly description: "claude|codex (default: both)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }, {
         readonly name: "set-model";
         readonly description: "Set the model this bot asks its runtime for (stored in the bot's own settings; the runtime's own config is never changed), or default to clear it";

package/dist/command-catalog.generated.js

@@ -5326,6 +5326,70 @@ export const COMMAND_CATALOG = [
                     }
                 ],
                 "subcommands": []
+            },
+            {
+                "name": "add",
+                "description": "Add people or your own bots to a channel, by @handle, email, or prs_/agt_ uid.",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] <channel> <member...>",
+                "helpText": [],
+                "arguments": [
+                    {
+                        "name": "channel",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    },
+                    {
+                        "name": "member",
+                        "required": true,
+                        "variadic": true,
+                        "description": ""
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "Output the per-member results as JSON.",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "remove",
+                "description": "Remove a member or bot from a channel (owner or company admin), or leave it yourself.",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] <channel> <member>",
+                "helpText": [],
+                "arguments": [
+                    {
+                        "name": "channel",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    },
+                    {
+                        "name": "member",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "Output the result as JSON.",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
             }
         ]
     },
@@ -17043,6 +17107,25 @@ export const COMMAND_CATALOG = [
                         "subcommands": []
                     }
                 ]
+            },
+            {
+                "name": "push-status",
+                "description": "Report whether the owner DM push signal is live or stale, with the last event time",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "Print machine-readable JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
             }
         ]
     },
@@ -23489,6 +23572,16 @@ export const COMMAND_CATALOG = [
                     }
                 ],
                 "options": [
+                    {
+                        "flags": "--runtime <runtime>",
+                        "description": "Switch the model CLI: claude|codex|grok. Checked with one test turn first; the old runtime's sessions are set aside (backed up), DM history and memory stay",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--account <id>",
+                        "description": "Use this hq capacity account's login for the bot's runtime, or default for your own sign-in",
+                        "hidden": false
+                    },
                     {
                         "flags": "--model <model>",
                         "description": "Model id for the runtime CLI, or default for the CLI's own default",
@@ -23512,6 +23605,68 @@ export const COMMAND_CATALOG = [
                 ],
                 "subcommands": []
             },
+            {
+                "name": "login",
+                "description": "Give the bot a model login of its own, so it does not use yours: runs the runtime's own sign-in into ~/.hq/bots/<name>/auth/<runtime>",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] <name>",
+                "helpText": [],
+                "arguments": [
+                    {
+                        "name": "name",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--runtime <runtime>",
+                        "description": "claude|codex (default: the bot's runtime)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print machine-readable JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "logout",
+                "description": "Sign the bot's own model login out and delete it; the bot goes back to your default sign-in",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] <name>",
+                "helpText": [],
+                "arguments": [
+                    {
+                        "name": "name",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--runtime <runtime>",
+                        "description": "claude|codex (default: both)",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print machine-readable JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
             {
                 "name": "set-model",
                 "description": "Set the model this bot asks its runtime for (stored in the bot's own settings; the runtime's own config is never changed), or default to clear it",

package/dist/commands/bot.d.ts

@@ -2,6 +2,7 @@ import { Command } from "commander";
 import { type RuntimeSignInCheck, type RuntimeSignInIssue } from "../lib/bot/runtime-sign-in.js";
 import type { BotStatusFile } from "../lib/bot/status.js";
 import { probeBotRuntime, type RuntimeProbeResult } from "../lib/bot/probe.js";
+import { type SpawnInteractive } from "../lib/bot/runtime-auth.js";
 import { type BotLocalConfig, type MyLocalBot, type BotKind, type BotMemoryMode, type BotNotRunnableReason, type RuntimeCrash, type BotConfig, type BotRuntimeId, type LaunchctlExec, type BotRole } from "../lib/bot/index.js";
 /** Real launchctl; every failure is a non-ok result, never a throw. */
 export declare const defaultLaunchctl: LaunchctlExec;
@@ -193,12 +194,39 @@ export declare function runBotWorkers(opts: {
  * from HQ changes nothing and fails.
  */
 export interface BotSetOptions {
+    runtime?: string;
+    /** A capacity account id for the bot's runtime, or "default" for the owner's own sign-in. */
+    account?: string;
     model?: string;
     effort?: string;
     displayName?: string;
     json?: boolean;
 }
-export declare function runBotSet(nameArg: string, opts: BotSetOptions): Promise<void>;
+export interface BotSetDeps {
+    probe?: typeof probeBotRuntime;
+    /** Test seam: stop and start the bot process. */
+    lifecycle?: {
+        isRunning: (dir: string) => boolean;
+        stop: (name: string, dir: string, config: BotConfig) => Promise<boolean>;
+        start: (name: string, dir: string, config: BotConfig) => Promise<boolean>;
+    };
+}
+export declare function runBotSet(nameArg: string, opts: BotSetOptions, deps?: BotSetDeps): Promise<void>;
+/** `hq bot login <name>`: sign the bot in with a login of its own. */
+export declare function runBotLogin(nameArg: string, opts: {
+    runtime?: string;
+    json?: boolean;
+}, deps?: {
+    spawn?: SpawnInteractive;
+    interactive?: boolean;
+}): Promise<void>;
+/** `hq bot logout <name>`: sign the bot's own login out and delete it. */
+export declare function runBotLogout(nameArg: string, opts: {
+    runtime?: string;
+    json?: boolean;
+}, deps?: {
+    spawn?: SpawnInteractive;
+}): Promise<void>;
 /** `hq bot probe`: exit code 0 when the runtime answered, 1 when it did not. */
 export declare function runBotProbe(opts: {
     runtime?: string;