@indigoai-us/hq-cli 5.345.190 → 5.345.191

package/CHANGELOG.md

@@ -2,6 +2,28 @@
 
 ## [Unreleased]
 
+## [5.345.191] — 2026-11-02
+- `hq bot list` and `hq bot status --json` rows now carry `engine: "hq-fleet-runtime"` for a bot on
+  the HQ Fleet Runtime, so the desktop app can tell a Fleet bot from a model-CLI bot (Create brief
+  uses this to prefer a Fleet bot).
+- `hq bot auth` on an HQ Fleet Runtime bot gives the restarted gateway up to 15 s to come up before
+  reporting; it used to say "signed in, but did not start" while the bot was in fact starting.
+- `hq bot status` on an HQ Fleet Runtime bot shows whether its gateway is installed as a login
+  service instead of a "launchd: not installed" line that was about the legacy bot daemon.
+- `hq bot create --no-auto-approve` now reaches an HQ Fleet Runtime bot's profile (`autoApprove:
+  false`); with hq-fleet-local 0.4.18 the default profile runs with command approvals off, like a
+  model-CLI bot, so a headless bot no longer stalls on an approval nobody can answer.
+- HQ Fleet Runtime pin moves to hq-fleet-local 0.4.18, which stores the bot's
+  machine credential with Windows DPAPI under PowerShell 5.1 and no longer
+  flashes a console on Windows. The CLI now trusts two release signing keys
+  (the 2026-10-30 key and a second key added 2026-11-01); a manifest signed by
+  either verifies, and any other key is rejected.
+- `hq bot create` / `hq bot start` (HQ Fleet Runtime): every helper, uv and
+  Python child process now always starts with `windowsHide`, which a caller's
+  options can no longer turn off, so no console window flashes on Windows.
+  A new test records every child process in a Windows create, start, stop and
+  status run and checks each one.
+
 ## [5.345.190] — 2026-11-01
 - `hq files purge <path> --version-id <id>` permanently deletes one old version of a vault file, after a confirmation prompt.
 - `hq bot create` / `hq bot start` on Windows: the shared HQ Fleet Runtime now

package/dist/commands/bot.d.ts

@@ -3,7 +3,7 @@ import { type RuntimeSignInCheck, type RuntimeSignInIssue } from "../lib/bot/run
 import type { BotStatusFile } from "../lib/bot/status.js";
 import { probeBotRuntime, type RuntimeProbeResult } from "../lib/bot/probe.js";
 import { type SpawnInteractive } from "../lib/bot/runtime-auth.js";
-import { type BotLocalConfig, type MyLocalBot, type BotKind, type BotMemoryMode, type BotNotRunnableReason, type RuntimeCrash, type BotConfig, type BotRuntimeId, type LaunchctlExec, type BotRole } from "../lib/bot/index.js";
+import { type BotLocalConfig, type MyLocalBot, type BotKind, type BotMemoryMode, type BotNotRunnableReason, type RuntimeCrash, type BotConfig, type BotRuntimeId, type LaunchctlExec, HQ_FLEET_RUNTIME_ENGINE_ID, type BotRole } from "../lib/bot/index.js";
 /** Real launchctl; every failure is a non-ok result, never a throw. */
 export declare const defaultLaunchctl: LaunchctlExec;
 /** The desktop app creates HQ's setup bot under this name, always from the `setup` worker. */
@@ -13,6 +13,8 @@ export interface BotRow {
     agentUid: string;
     ownerUid: string;
     runtime: BotRuntimeId;
+    /** `hq-fleet-runtime` for a bot on the HQ Fleet Runtime; absent for a model-CLI bot. */
+    engine?: typeof HQ_FLEET_RUNTIME_ENGINE_ID;
     needsSignIn?: boolean;
     authCommand?: string;
     serviceInstallPending?: boolean;

package/dist/commands/bot.js

@@ -57,7 +57,7 @@ import { runtimeDisplayName, signInCommand } from "../lib/bot/runtime-sign-in.js
 import { classifyRuntimeFailure, runtimeFailureReason } from "../lib/bot/runtime-failure.js";
 import { PROBE_DEFAULT_TIMEOUT_MS, probeBotRuntime } from "../lib/bot/probe.js";
 import { BOT_LOGIN_RUNTIMES, botAuthEnv, botRuntimeAuth, capacityAccountHome, describeBotAuth, formatBotAuth, isBotLoginRuntime, restoreBotSessions, setAsideBotSessions, signInBotRuntime, signOutBotRuntime, withRuntimeAuth, } from "../lib/bot/runtime-auth.js";
-import { BotApi, BotApiError, BOT_RESTORE_DEFAULTS, buildBotLocalConfig, describeBotLocalConfig, orphanBotRunMessage, parseBotLocalConfig, removeOrphanBotDaemon, botDaemonStatus, botDir, botCredsPath, botLogPath, botsRoot, botTokenStateDir, botWorkerRelDir, buildBotDaemonPaths, createBotLogger, deleteBotCreds, installBotDaemon, repairBotDaemonIfStale, healBotDaemonNodeFromJob, introDmText, isBotMemoryMode, botLocalMemoryDir, botMemoryMode, resolveBotMemoryDir, validateBotIntro, validateBotDisplayName, validateBotKickoff, validateBotEffort, validateBotModel, effectiveBotEffort, BOT_EFFORT_LEVELS, DEFAULT_BOT_EFFORT, BOT_MEMORY_MODES, BOT_KINDS, isBotKind, effectiveBotKind, effectiveBotCompanies, normalizeBotCompanies, SETUP_BOT_WORKER_ID, isBotRuntimeId, localNameForRemoteBot, remoteBotRunnability, isPidAlive, listBotWorkerOptions, patchBotConfig, readBotConfig, readBotCredsIdentity, readBotStatus, runtimeCrashSinceStart, resolveBotWorker, runBot, runtimeFor, scaffoldBotMemory, scaffoldBotWorker, startBotDaemon, stopBotDaemon, uninstallBotDaemon, validateBotName, writeBotConfig, writeBotCreds, BOT_RUNTIMES, BOT_INTRO_MAX_CHARS, BOT_DISPLAY_NAME_MAX_CHARS, BOT_KICKOFF_MAX_CHARS, detectBotPlatform, withBotLock, localBotRole, remoteBotRole, remoteBotDisplayName, personFacingName, writeCloudDisplayName, setupSlugFor, ASSISTANT_ROLE, HQ_FLEET_RUNTIME_ENGINE_ID, authenticateFleetLocalBot, bootstrapFleetLocalBot, buildSystemPrompt, controlFleetLocalBot, ensureFleetPython, fleetLocalGatewayPid, fleetLocalProfileNeedsAdoption, fleetProviderForRuntime, importFleetLocalMachineCredential, fleetProviderNeedsSignIn, fleetDefaultCompanies, fleetOwnerCompanies, fleetRuntimeIsDefault, refreshFleetLocalInstructions, fleetLocalPromotionRuntime, installPinnedFleetLocalDistribution, readPromptSources, removeFleetLocalBot, } from "../lib/bot/index.js";
+import { BotApi, BotApiError, BOT_RESTORE_DEFAULTS, buildBotLocalConfig, describeBotLocalConfig, orphanBotRunMessage, parseBotLocalConfig, removeOrphanBotDaemon, botDaemonStatus, botDir, botCredsPath, botLogPath, botsRoot, botTokenStateDir, botWorkerRelDir, buildBotDaemonPaths, createBotLogger, deleteBotCreds, installBotDaemon, repairBotDaemonIfStale, healBotDaemonNodeFromJob, introDmText, isBotMemoryMode, botLocalMemoryDir, botMemoryMode, resolveBotMemoryDir, validateBotIntro, validateBotDisplayName, validateBotKickoff, validateBotEffort, validateBotModel, effectiveBotEffort, BOT_EFFORT_LEVELS, DEFAULT_BOT_EFFORT, BOT_MEMORY_MODES, BOT_KINDS, isBotKind, effectiveBotKind, effectiveBotCompanies, normalizeBotCompanies, SETUP_BOT_WORKER_ID, isBotRuntimeId, localNameForRemoteBot, remoteBotRunnability, isPidAlive, listBotWorkerOptions, patchBotConfig, readBotConfig, readBotCredsIdentity, readBotStatus, runtimeCrashSinceStart, resolveBotWorker, runBot, runtimeFor, scaffoldBotMemory, scaffoldBotWorker, startBotDaemon, stopBotDaemon, uninstallBotDaemon, validateBotName, writeBotConfig, writeBotCreds, BOT_RUNTIMES, BOT_INTRO_MAX_CHARS, BOT_DISPLAY_NAME_MAX_CHARS, BOT_KICKOFF_MAX_CHARS, detectBotPlatform, withBotLock, localBotRole, remoteBotRole, remoteBotDisplayName, personFacingName, writeCloudDisplayName, setupSlugFor, ASSISTANT_ROLE, HQ_FLEET_RUNTIME_ENGINE_ID, authenticateFleetLocalBot, bootstrapFleetLocalBot, buildSystemPrompt, controlFleetLocalBot, ensureFleetPython, fleetLocalGatewayPid, fleetLocalProfileNeedsAdoption, fleetLocalServiceInstalled, fleetProviderForRuntime, importFleetLocalMachineCredential, fleetProviderNeedsSignIn, fleetDefaultCompanies, fleetOwnerCompanies, fleetRuntimeIsDefault, refreshFleetLocalInstructions, fleetLocalPromotionRuntime, installPinnedFleetLocalDistribution, readPromptSources, removeFleetLocalBot, } from "../lib/bot/index.js";
 function collectRepeated(value, previous) {
     return [...previous, value];
 }
@@ -152,6 +152,22 @@ function fleetBotSystemPrompt(name, config, overrides = {}) {
 function fleetAuthCommand(name, config) {
     return `hq bot auth ${name} --provider ${config.runtime === "grok" ? "grok" : config.runtime === "codex" ? "chatgpt" : "claude"}`;
 }
+/** How long a just-(re)started HQ Fleet gateway gets to write its pid before it counts as not started. */
+function fleetStartWaitMs() {
+    const raw = Number(process.env.HQ_BOT_FLEET_START_WAIT_MS);
+    return Number.isFinite(raw) && raw >= 0 ? raw : 15_000;
+}
+async function fleetGatewayComesUp(agentUid, waitMs, stepMs = 500) {
+    const deadline = Date.now() + waitMs;
+    for (;;) {
+        const pid = fleetLocalGatewayPid(agentUid);
+        if (pid !== null && isPidAlive(pid))
+            return true;
+        if (Date.now() >= deadline)
+            return false;
+        await new Promise((r) => setTimeout(r, stepMs));
+    }
+}
 function runFleetRuntimeControl(name, config, action, json) {
     if ((action === "install" || action === "start" || action === "restart") && config.fleetAuthPending === true) {
         const authCommand = fleetAuthCommand(name, config);
@@ -236,6 +252,7 @@ function rowFor(name, opts = {}) {
         agentUid: config.agentUid,
         ownerUid: config.ownerUid,
         runtime: config.runtime,
+        ...(fleet ? { engine: HQ_FLEET_RUNTIME_ENGINE_ID } : {}),
         model: config.model,
         effort: effectiveBotEffort(config),
         effortIsDefault: !config.effort,
@@ -477,6 +494,7 @@ async function adoptFleetRuntimeProfile(name, dir, config) {
         systemPrompt: fleetBotSystemPrompt(name, config),
         provider: fleetProviderForRuntime(config.runtime, config.model),
         ownerCompanies: companyScope,
+        ...(config.autoApprove === false ? { autoApprove: false } : {}),
     }, { python, start: false });
     patchBotConfig(dir, { engine: installation.engine });
     const credentials = botCredsPath(dir);
@@ -1124,6 +1142,7 @@ async function runBotCreateLocked(name, opts) {
             systemPrompt: fleetBotSystemPrompt(name, config, { kind, companies }),
             provider: fleetProvider,
             ownerCompanies,
+            ...(opts.autoApprove === false ? { autoApprove: false } : {}),
             firstStart: {
                 intro: introDmText(name, runtime, intro, { kind, companies }),
                 ...(kickoff ? { kickoff } : {}),
@@ -1452,7 +1471,12 @@ async function runBotStatus(nameArg, opts) {
         console.log(`  inbox:      last poll ${status.lastInboxPollAt}`);
     }
     console.log(`  answering:  ${row.busy ? chalk.green(`yes${row.busySince ? `, since ${row.busySince}` : ""}`) : chalk.gray("no")}`);
-    console.log(`  launchd:    ${row.daemonInstalled ? (row.daemonLoaded ? "installed, loaded" : "installed, not loaded") : "not installed"}`);
+    if (fleet) {
+        console.log(`  service:    ${fleetLocalServiceInstalled(config.agentUid) ? "installed (HQ Fleet gateway, starts at login)" : row.serviceInstallPending ? "not installed yet; installs on hq bot start" : "not installed"}`);
+    }
+    else {
+        console.log(`  launchd:    ${row.daemonInstalled ? (row.daemonLoaded ? "installed, loaded" : "installed, not loaded") : "not installed"}`);
+    }
     if (row.daemonNodeMissing) {
         console.log(`  ${chalk.red(`node missing: ${row.daemonNodeMissing}`)} — launchd cannot start ${name}; fix with: hq bot start ${name}`);
     }
@@ -2150,8 +2174,7 @@ async function runBotAuth(nameArg, opts) {
         model: result.model,
         ...(b.config.fleetAuthPending === true ? { fleetAuthPending: false, fleetServiceInstallPending: !result.restarted, enabled: result.restarted } : {}),
     });
-    const pid = fleetLocalGatewayPid(b.config.agentUid);
-    const running = pid !== null && isPidAlive(pid);
+    const running = await fleetGatewayComesUp(b.config.agentUid, result.restarted ? fleetStartWaitMs() : 0);
     if (opts.json) {
         console.log(JSON.stringify({ ok: true, name: b.name, runtime: HQ_FLEET_RUNTIME_ENGINE_ID, ...result, needsSignIn: false, running, serviceInstallPending: b.config.fleetAuthPending === true && !result.restarted }, null, 2));
         return;
@@ -2446,6 +2469,7 @@ async function adoptRemoteBotLocked(input) {
             systemPrompt: fleetBotSystemPrompt(name, config),
             provider: fleetProviderForRuntime(config.runtime, config.model),
             ownerCompanies: await fleetOwnerCompanies(),
+            ...(config.autoApprove === false ? { autoApprove: false } : {}),
             ...(input.preserveFirstStart
                 ? {
                     firstStart: {

package/dist/lib/bot/fleet-local.d.ts

@@ -41,6 +41,7 @@ export interface FleetLocalProfile {
         transport?: string;
     };
     ownerCompanies?: string[];
+    autoApprove?: boolean;
     hqRoot: string;
     profileDir: string;
     runtime: {
@@ -60,7 +61,7 @@ export interface FleetLocalInstallDeps {
     hqReleaseLinks?: (release: FleetLocalReleasePin) => Promise<Map<string, string> | null>;
     now?: () => Date;
     release?: FleetLocalReleasePin;
-    publicKey?: string;
+    publicKey?: string | readonly string[];
 }
 export interface FleetLocalProfileInput {
     agentUid: string;
@@ -79,6 +80,8 @@ export interface FleetLocalProfileInput {
     };
     /** Companies the owner's own turns may use; other senders get none of them. */
     ownerCompanies?: string[];
+    /** False keeps the runtime's command approval prompts (`hq bot create --no-auto-approve`). */
+    autoApprove?: boolean;
 }
 /** The model the HQ Fleet Runtime asks for when a Claude bot names none. */
 export declare const FLEET_CLAUDE_DEFAULT_MODEL = "claude-opus-5-5";
@@ -162,9 +165,16 @@ export interface FleetLocalRemovalResult {
     credentialsRemoved: number;
 }
 export declare const HQ_FLEET_LOCAL_RELEASE: FleetLocalReleasePin;
+/** hq-fleet-local trust/release-public.pem (rotated 2026-10-30; signed v0.4.17). */
 export declare const HQ_FLEET_LOCAL_PUBLIC_KEY = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEASJoapvo0WMTg+Wu3Jvt0nzlXLOBEr+G1aJRi0JkEb4A=\n-----END PUBLIC KEY-----\n";
+/** hq-fleet-local trust/release-public-v2.pem (added 2026-11-01; signs v0.4.18). */
+export declare const HQ_FLEET_LOCAL_PUBLIC_KEY_V2 = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAmgUi7pKTJUmf3yzwcuH65wSvn1NyJrDfZHZUX08sGN8=\n-----END PUBLIC KEY-----\n";
+/** Every key a release manifest may be signed with. Any one must verify it. */
+export declare const HQ_FLEET_LOCAL_PUBLIC_KEYS: readonly string[];
+/** True when any trusted Ed25519 key verifies the manifest signature. */
+export declare function fleetLocalManifestSignatureValid(manifest: Buffer, signature: Buffer, publicKey?: string | readonly string[]): boolean;
 export declare function fleetHome(home?: string, env?: NodeJS.ProcessEnv): string;
-export declare function verifyFleetLocalRelease(files: FleetLocalReleaseFiles, release?: FleetLocalReleasePin, publicKey?: string): void;
+export declare function verifyFleetLocalRelease(files: FleetLocalReleaseFiles, release?: FleetLocalReleasePin, publicKey?: string | readonly string[]): void;
 /**
  * Warning text when the signed manifest asks for a newer hq CLI than this
  * one, or null. Advisory only: the pinned runtime is still installed, since
@@ -181,6 +191,15 @@ export declare const FLEET_LOCAL_RUNTIME_DOWNLOAD_TIMEOUT_MS: number;
 export declare function installPinnedFleetLocalDistribution(deps?: FleetLocalInstallDeps): Promise<FleetLocalInstallation>;
 /** The process id the bot's gateway recorded, when its file reads; the caller checks whether it is alive. */
 export declare function fleetLocalGatewayPid(agentUid: string, deps?: Pick<FleetLocalControlDeps, "fleetHome">): number | null;
+/**
+ * Whether the bot's HQ Fleet gateway is installed as a login service. The
+ * runtime registers it with launchd as `ai.hq-fleet.gateway-<profile>`; null
+ * on platforms where hq-cli does not know the service layout.
+ */
+export declare function fleetLocalServiceInstalled(agentUid: string, deps?: {
+    platform?: NodeJS.Platform;
+    home?: string;
+}): boolean | null;
 export declare function fleetLocalProfileNeedsAdoption(agentUid: string, deps?: Pick<FleetLocalControlDeps, "fleetHome" | "platform"> & {
     release?: FleetLocalReleasePin;
 }): boolean;

package/dist/lib/bot/fleet-local.js

@@ -78,20 +78,42 @@ export function sharedRuntimeLayout(root, id, platform) {
 }
 export const HQ_FLEET_LOCAL_RELEASE = {
     repository: "indigoai-us/hq-fleet-local",
-    tag: "v0.4.17",
-    version: "0.4.17",
-    artifact: "hq-fleet-local-0.4.17.zip",
-    artifactSha256: "d2c5c49d4ef47da6003f4c2f3be7dcd2d8a287523c8577dfe0239e6e0705e4b4",
+    tag: "v0.4.18",
+    version: "0.4.18",
+    artifact: "hq-fleet-local-0.4.18.zip",
+    artifactSha256: "194ae7da24d02205061b18172a84c972754bd0607ed3b4c32af7ac10d73904a7",
     runtimeArtifact: "hq-fleet-runtime-abccac13bd9e.tar",
     runtimeArtifactSha256: "29bcfe718ad7fbd3636afd00623772f2a25bc84c4f6f10d8d57f38e549d528d5",
-    manifestSha256: "63663ffe8c6bef4f2aefa587d20431156cab4170a0f23533cdab7aab444a7d35",
-    signatureSha256: "bb4af0b453ae03fdbc18e6335ca23e2f0de42bd9e322dba7c4f31d0c8dc08aa7",
+    manifestSha256: "ce14449198a0f5d8558ecc617c19551b7a2a31dba5bd563501a93d2ee58e5ff0",
+    signatureSha256: "ca7dac6bcc2d12f6e304d1940e7b00243f9c306e7f0a72fd4aa236b7778d3a93",
     runtimeCommit: "abccac13bd9ea593b24c8cd9c0ba28d5c6050cc9",
 };
+/** hq-fleet-local trust/release-public.pem (rotated 2026-10-30; signed v0.4.17). */
 export const HQ_FLEET_LOCAL_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
 MCowBQYDK2VwAyEASJoapvo0WMTg+Wu3Jvt0nzlXLOBEr+G1aJRi0JkEb4A=
 -----END PUBLIC KEY-----
 `;
+/** hq-fleet-local trust/release-public-v2.pem (added 2026-11-01; signs v0.4.18). */
+export const HQ_FLEET_LOCAL_PUBLIC_KEY_V2 = `-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEAmgUi7pKTJUmf3yzwcuH65wSvn1NyJrDfZHZUX08sGN8=
+-----END PUBLIC KEY-----
+`;
+/** Every key a release manifest may be signed with. Any one must verify it. */
+export const HQ_FLEET_LOCAL_PUBLIC_KEYS = [HQ_FLEET_LOCAL_PUBLIC_KEY, HQ_FLEET_LOCAL_PUBLIC_KEY_V2];
+function publicKeyList(publicKey) {
+    return typeof publicKey === "string" ? [publicKey] : publicKey;
+}
+/** True when any trusted Ed25519 key verifies the manifest signature. */
+export function fleetLocalManifestSignatureValid(manifest, signature, publicKey = HQ_FLEET_LOCAL_PUBLIC_KEYS) {
+    return publicKeyList(publicKey).some((key) => {
+        try {
+            return crypto.verify(null, manifest, crypto.createPublicKey(key), signature);
+        }
+        catch {
+            return false;
+        }
+    });
+}
 function digest(value) {
     return crypto.createHash("sha256").update(value).digest("hex");
 }
@@ -110,7 +132,7 @@ function engineMetadata(release) {
 export function fleetHome(home = os.homedir(), env = process.env) {
     return env.HQ_FLEET_HOME?.trim() || path.join(home, ".hq-fleet");
 }
-export function verifyFleetLocalRelease(files, release = HQ_FLEET_LOCAL_RELEASE, publicKey = HQ_FLEET_LOCAL_PUBLIC_KEY) {
+export function verifyFleetLocalRelease(files, release = HQ_FLEET_LOCAL_RELEASE, publicKey = HQ_FLEET_LOCAL_PUBLIC_KEYS) {
     if (digest(files.archive) !== release.artifactSha256) {
         throw expectedError(`HQ Fleet Local ${release.version} archive hash did not match the release pin.`);
     }
@@ -142,7 +164,7 @@ export function verifyFleetLocalRelease(files, release = HQ_FLEET_LOCAL_RELEASE,
     if (signature.algorithm !== "ed25519" || typeof signature.signature !== "string") {
         throw expectedError(`HQ Fleet Local ${release.version} signature record is invalid.`);
     }
-    const valid = crypto.verify(null, files.manifest, crypto.createPublicKey(publicKey), Buffer.from(signature.signature, "base64"));
+    const valid = fleetLocalManifestSignatureValid(files.manifest, Buffer.from(signature.signature, "base64"), publicKey);
     if (!valid) {
         throw expectedError(`HQ Fleet Local ${release.version} manifest signature is invalid.`);
     }
@@ -326,7 +348,7 @@ function installFiles(target, files, release, publicKey) {
         fs.writeFileSync(path.join(staging, release.runtimeArtifact), files.runtimeArchive, { mode: 0o644 });
         fs.writeFileSync(path.join(staging, "release-manifest.json"), files.manifest, { mode: 0o644 });
         fs.writeFileSync(path.join(staging, "release-manifest.sig"), files.signature, { mode: 0o644 });
-        fs.writeFileSync(path.join(staging, "release-public.pem"), publicKey, { mode: 0o644 });
+        fs.writeFileSync(path.join(staging, "release-public.pem"), publicKeyList(publicKey).join(""), { mode: 0o644 });
         fs.writeFileSync(path.join(staging, "install.json"), `${JSON.stringify({ schemaVersion: 1, release, engine: engineMetadata(release) }, null, 2)}\n`, { mode: 0o644 });
         if (fs.existsSync(target))
             fs.renameSync(target, backup);
@@ -366,7 +388,7 @@ function cachedRuntimeArchive(root, release) {
 }
 export async function installPinnedFleetLocalDistribution(deps = {}) {
     const release = deps.release ?? HQ_FLEET_LOCAL_RELEASE;
-    const publicKey = deps.publicKey ?? HQ_FLEET_LOCAL_PUBLIC_KEY;
+    const publicKey = deps.publicKey ?? HQ_FLEET_LOCAL_PUBLIC_KEYS;
     const root = deps.fleetHome ?? fleetHome();
     const dir = path.join(root, "distributions", "hq-fleet-local", release.version);
     const current = installedFiles(dir, release);
@@ -513,7 +535,8 @@ function fleetLocalExecutables(agentUid, deps) {
 function runJson(run, executable, args, options, label) {
     let output;
     try {
-        output = run(executable, args, { windowsHide: true, encoding: "utf8", ...options });
+        // windowsHide last: a helper, uv or Python child never opens a console window on Windows.
+        output = run(executable, args, { encoding: "utf8", ...options, windowsHide: true });
     }
     catch {
         throw expectedError(`HQ Fleet Local ${label} failed.`);
@@ -541,6 +564,31 @@ export function fleetLocalGatewayPid(agentUid, deps = {}) {
         return null;
     }
 }
+/** The first hq-fleet-local release whose profile schema accepts `autoApprove`; older ones reject unknown fields. */
+const AUTO_APPROVE_RELEASE = [0, 4, 18];
+function releaseKnowsAutoApprove(release) {
+    const parts = release.version.split(".").map((part) => Number.parseInt(part, 10));
+    for (let i = 0; i < AUTO_APPROVE_RELEASE.length; i += 1) {
+        const have = Number.isFinite(parts[i]) ? parts[i] : 0;
+        if (have !== AUTO_APPROVE_RELEASE[i])
+            return have > AUTO_APPROVE_RELEASE[i];
+    }
+    return true;
+}
+/**
+ * Whether the bot's HQ Fleet gateway is installed as a login service. The
+ * runtime registers it with launchd as `ai.hq-fleet.gateway-<profile>`; null
+ * on platforms where hq-cli does not know the service layout.
+ */
+export function fleetLocalServiceInstalled(agentUid, deps = {}) {
+    if (!/^agt_[A-Za-z0-9_-]+$/.test(agentUid))
+        return null;
+    const platform = deps.platform ?? process.platform;
+    if (platform !== "darwin")
+        return null;
+    const home = deps.home ?? os.homedir();
+    return fs.existsSync(path.join(home, "Library", "LaunchAgents", `ai.hq-fleet.gateway-${profileName(agentUid)}.plist`));
+}
 export function fleetLocalProfileNeedsAdoption(agentUid, deps = {}) {
     if (!/^agt_[A-Za-z0-9_-]+$/.test(agentUid))
         return true;
@@ -842,6 +890,7 @@ export function writeFleetLocalProfile(input, deps = {}) {
         botId: input.agentUid,
         ownerUid: input.ownerUid,
         ...(input.ownerCompanies?.length ? { ownerCompanies: [...new Set(input.ownerCompanies)].sort() } : {}),
+        ...(input.autoApprove === false && releaseKnowsAutoApprove(input.installation.release) ? { autoApprove: false } : {}),
         provider: input.provider ?? { id: "custom:personal-chatgpt", model: "gpt-5.6-sol" },
         hqRoot: path.resolve(input.hqRoot),
         profileDir: path.resolve(dir),
@@ -958,10 +1007,11 @@ function checkedRun(run, executable, args, options, label) {
     const stdio = options.stdio === "ignore" ? ["ignore", "ignore", "pipe"] : options.stdio;
     try {
         run(executable, args, {
-            windowsHide: true,
             maxBuffer: 16 * 1024 * 1024,
             ...options,
             ...(stdio === undefined ? {} : { stdio }),
+            // Last, so no caller can turn it off: no console window flashes on Windows.
+            windowsHide: true,
         });
     }
     catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.190",
+  "version": "5.345.191",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {
@@ -114,11 +114,11 @@
     "*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}": "eslint --cache --no-error-on-unmatched-pattern"
   },
   "optionalDependencies": {
-    "@indigoai-us/hq-hook-win32-x64": "5.345.190",
-    "@indigoai-us/hq-hook-win32-arm64": "5.345.190",
-    "@indigoai-us/hq-hook-darwin-x64": "5.345.190",
-    "@indigoai-us/hq-hook-darwin-arm64": "5.345.190",
-    "@indigoai-us/hq-hook-linux-x64": "5.345.190",
-    "@indigoai-us/hq-hook-linux-arm64": "5.345.190"
+    "@indigoai-us/hq-hook-win32-x64": "5.345.191",
+    "@indigoai-us/hq-hook-win32-arm64": "5.345.191",
+    "@indigoai-us/hq-hook-darwin-x64": "5.345.191",
+    "@indigoai-us/hq-hook-darwin-arm64": "5.345.191",
+    "@indigoai-us/hq-hook-linux-x64": "5.345.191",
+    "@indigoai-us/hq-hook-linux-arm64": "5.345.191"
   }
 }