@indigoai-us/hq-cli 5.109.4 → 5.109.5

package/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## [Unreleased]
 
+## [5.109.5] — 2026-09-10
+
 ## [5.109.4] — 2026-09-09
 
 ### Fixed

package/dist/utils/network-transport-error.js

@@ -53,11 +53,21 @@ const TRANSPORT_CODE_REASONS = {
  * Recognized undici error names, for builds where the `code` property is
  * absent but the typed error still identifies itself (the shape Sentry
  * recorded for HQ-CLI-G was `ConnectTimeoutError`).
+ *
+ * `TimeoutError` is the DOMException `AbortSignal.timeout(...)` rejects a
+ * bounded `fetch()` with when the peer accepts the connection but never answers
+ * — Sentry HQ-CLI-1P (issue 7716090679). It is the one transport failure here
+ * that identifies itself ONLY by name: its legacy DOMException `code` is the
+ * NUMBER 23, so the string-typed `readStringProperty(node, "code")` above skips
+ * it, and it carries no `cause` to walk, leaving just the name. `AbortError` is
+ * deliberately NOT listed — a caller-initiated abort is not a transport fault
+ * and must stay reportable.
  */
 const TRANSPORT_NAME_REASONS = {
     ConnectTimeoutError: "the connection timed out",
     HeadersTimeoutError: "the server did not respond in time",
     SocketError: "the connection closed unexpectedly",
+    TimeoutError: "the server did not respond in time",
 };
 /**
  * Depth cap for `cause` traversal. A self-referential or mutually-referential

package/dist/utils/vault-api.js

@@ -19,6 +19,24 @@ import { planGateErrorFromResponse } from './plan-gate-error.js';
  * whole-process watchdog.
  */
 const IDENTITY_LOOKUP_TIMEOUT_MS = 15_000;
+/**
+ * The identity-lookup abort bound, in milliseconds. Defaults to the shipped
+ * IDENTITY_LOOKUP_TIMEOUT_MS (15s). An optional HQ_IDENTITY_LOOKUP_TIMEOUT_MS
+ * override (clamped to a sane 100..120_000 ms window; absent or non-numeric
+ * input keeps the 15s default) exists purely so the artifact E2E can force the
+ * abort in well under a second instead of stalling a spawned CLI for the full
+ * 15s per case. It does NOT change shipped behaviour: with the var unset every
+ * call uses 15s exactly as before.
+ */
+function identityLookupTimeoutMs() {
+    const raw = process.env.HQ_IDENTITY_LOOKUP_TIMEOUT_MS?.trim();
+    if (!raw)
+        return IDENTITY_LOOKUP_TIMEOUT_MS;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed))
+        return IDENTITY_LOOKUP_TIMEOUT_MS;
+    return Math.min(120_000, Math.max(100, Math.trunc(parsed)));
+}
 /**
  * Best-effort peek of a 2xx JSON body for plan-limit status (US-016).
  *
@@ -279,7 +297,7 @@ async function resolveCompanyByUid(token, uid) {
     const res = await vaultApiFetch({
         token,
         path: `/entity/${encodeURIComponent(uid)}`,
-        signal: AbortSignal.timeout(IDENTITY_LOOKUP_TIMEOUT_MS),
+        signal: AbortSignal.timeout(identityLookupTimeoutMs()),
     });
     if (!res.ok) {
         raiseIfUnauthorized(res);
@@ -312,7 +330,7 @@ async function resolveSlugInCallerNamespace(token, slug) {
         token,
         path: '/entity/check-slug/me',
         query: { type: 'company', slug },
-        signal: AbortSignal.timeout(IDENTITY_LOOKUP_TIMEOUT_MS),
+        signal: AbortSignal.timeout(identityLookupTimeoutMs()),
     });
     if (!res.ok) {
         raiseIfUnauthorized(res);
@@ -336,7 +354,28 @@ async function resolveCompanyUid(token, ref) {
     // PRIMARY PATH — caller-scoped slug resolution. Resolves the slug to the
     // caller's OWN company (unique within their namespace by the invariant
     // above), making a stranger's same-slug company invisible.
-    const mine = await resolveSlugInCallerNamespace(token, ref);
+    //
+    // A non-2xx already degrades to the global fallback below (via `return null`).
+    // A TRANSPORT failure must degrade the SAME way, not abort the command:
+    // `resolveSlugInCallerNamespace`'s fetch is bounded by AbortSignal.timeout, so
+    // a vault gateway that accepts the connection but never answers rejects with a
+    // DOMException named `TimeoutError`. Before this catch, that rejection threw
+    // straight out of `resolveCompanyUid`, skipped the global by-slug lookup, and
+    // — being unclassified by main.ts — filed a Sentry crash report instead of an
+    // actionable connectivity message (Sentry HQ-CLI-1P / issue 7716090679).
+    // Degrade ONLY on a recognized transport failure; re-throw everything else
+    // unchanged, so a genuine hq-cli defect stays fatal and the 401 AuthError that
+    // `raiseIfUnauthorized` throws still short-circuits before any fallback.
+    let mine;
+    try {
+        mine = await resolveSlugInCallerNamespace(token, ref);
+    }
+    catch (err) {
+        if (networkTransportErrorCode(err) === null) {
+            throw err;
+        }
+        mine = null;
+    }
     if (mine) {
         return mine;
     }
@@ -347,7 +386,7 @@ async function resolveCompanyUid(token, ref) {
     const res = await vaultApiFetch({
         token,
         path: `/entity/by-slug/company/${encodeURIComponent(ref)}`,
-        signal: AbortSignal.timeout(IDENTITY_LOOKUP_TIMEOUT_MS),
+        signal: AbortSignal.timeout(identityLookupTimeoutMs()),
     });
     if (!res.ok) {
         raiseIfUnauthorized(res);
@@ -374,7 +413,7 @@ async function resolveCompanyFromMemberships(token) {
     const res = await vaultApiFetch({
         token,
         path: '/membership/me',
-        signal: AbortSignal.timeout(IDENTITY_LOOKUP_TIMEOUT_MS),
+        signal: AbortSignal.timeout(identityLookupTimeoutMs()),
     });
     if (!res.ok) {
         throw new Error("Failed to fetch memberships — run `hq login` and try again");
@@ -421,7 +460,7 @@ export async function resolveCallerPersonUid(token, baseUrl) {
         token,
         path: '/entity/by-type/person',
         baseUrl,
-        signal: AbortSignal.timeout(IDENTITY_LOOKUP_TIMEOUT_MS),
+        signal: AbortSignal.timeout(identityLookupTimeoutMs()),
     });
     if (!res.ok) {
         throw new Error("Failed to fetch person entity — run `hq login` and try again");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.109.4",
+  "version": "5.109.5",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {