@indigoai-us/hq-cli 5.103.4 → 5.103.6

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## [Unreleased]
 
+## [5.103.6] — 2026-08-19
+
+## [5.103.5] — 2026-08-19
+
 ## [5.103.4] — 2026-08-19
 
 ## [5.103.3] — 2026-08-19

package/dist/commands/api-keys.js

@@ -190,7 +190,11 @@ export function registerApiKeysCommand(program) {
             const deployCapabilities = capabilities.filter((cap) => cap === "deploy:write" || cap === "deploy:read");
             const expiresAt = parseExpires(opts.expires);
             const token = await requireCognitoForApiKeys("api-keys create");
-            const companyUid = await getCompanyUid(token, apiKeys.opts().company);
+            // The company selector the caller typed (a slug, e.g. `indigo`, unless
+            // they passed a raw uid). Kept so the metadata can lead with the slug
+            // instead of only the resolved uid.
+            const companyRef = apiKeys.opts().company;
+            const companyUid = await getCompanyUid(token, companyRef);
             const res = await vaultApiFetch({
                 token,
                 path: "/v1/api-keys",
@@ -224,7 +228,12 @@ export function registerApiKeysCommand(program) {
             console.log(chalk.bold("Metadata"));
             console.log(`  Key ID: ${data.apiKey.keyId}`);
             console.log(`  Name: ${data.apiKey.name}`);
-            console.log(`  Company: ${data.apiKey.companyUid}`);
+            // Lead with the slug the caller typed (uid in parens, since the key is
+            // uid-bound); fall back to the bare uid when they passed a uid or relied
+            // on a single active membership.
+            console.log(`  Company: ${companyRef && companyRef !== data.apiKey.companyUid
+                ? `${companyRef} (${data.apiKey.companyUid})`
+                : data.apiKey.companyUid}`);
             console.log(`  Permission: ${data.apiKey.scope.permission}`);
             console.log(`  Capabilities: ${formatCapabilities(data.apiKey.scope.capabilities ?? capabilities)}`);
             console.log(`  Prefixes: ${formatPrefixes(data.apiKey.scope.allowedPrefixes)}`);

package/dist/utils/vault-api.js

@@ -368,10 +368,12 @@ async function resolveCompanyFromMemberships(token) {
     if (active.length === 1) {
         return active[0].companyUid;
     }
-    const uids = active.map((m) => m.companyUid);
-    throw new CompanySelectionError(`Multiple active companies found. Re-run with --company <slug-or-uid> to ` +
+    // Prefer the slug (the documented `--company` input) over the raw uid; fall
+    // back to the uid only when the server did not enrich a slug.
+    const picks = active.map((m) => `  --company ${m.companySlug ?? m.companyUid}`);
+    throw new CompanySelectionError(`Multiple active companies found. Re-run with --company <slug> to ` +
         `pick one:\n` +
-        uids.map((u) => `  --company ${u}`).join('\n'));
+        picks.join('\n'));
 }
 export async function getCompanyUid(token, companySlug) {
     // Vault API keys are company-bound. Entity slug resolution has no keyed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.103.4",
+  "version": "5.103.6",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {