@indigoai-us/hq-cli 5.111.1 → 5.111.2

package/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## [Unreleased]
 
+## [5.111.2] — 2026-09-15
+
 ## [5.111.1] — 2026-09-14
 
 ### Fixed

package/dist/commands/whoami.d.ts

@@ -2,5 +2,22 @@
  * hq whoami — displays current user or 'not logged in'
  */
 import { Command } from 'commander';
+export interface WhoamiTokenIdentity {
+    email?: string;
+    sub?: string;
+    delegatedEmail?: string;
+    delegatedSub?: string;
+    entityType?: string;
+    entityUid?: string;
+}
+export interface WhoamiDisplayIdentity {
+    email?: string;
+    sub?: string;
+}
+/**
+ * Resolves the person represented by an ID token without pairing a delegated
+ * email with the token subject of the delegating machine.
+ */
+export declare function resolveWhoamiIdentity(identity: WhoamiTokenIdentity): WhoamiDisplayIdentity;
 export declare function registerWhoamiCommand(program: Command): void;
 //# sourceMappingURL=whoami.d.ts.map

package/dist/commands/whoami.js

@@ -5,11 +5,33 @@ import chalk from 'chalk';
 import { loadCachedTokens, isExpiring, loadMachineCreds, } from '@indigoai-us/hq-cloud';
 import { peekIdToken as decodeIdToken } from "../utils/id-token.js";
 import { loadMachineCachedTokens, resolveCognitoTokenSource } from "../utils/cognito-session.js";
+/**
+ * Resolves the person represented by an ID token without pairing a delegated
+ * email with the token subject of the delegating machine.
+ */
+export function resolveWhoamiIdentity(identity) {
+    if (identity.email !== undefined && identity.sub !== undefined) {
+        return { email: identity.email, sub: identity.sub };
+    }
+    if (identity.delegatedEmail !== undefined && identity.delegatedSub !== undefined) {
+        return { email: identity.delegatedEmail, sub: identity.delegatedSub };
+    }
+    if (identity.email !== undefined || identity.sub !== undefined) {
+        return { email: identity.email, sub: identity.sub };
+    }
+    return {};
+}
 function peekIdToken(idToken) {
     const decoded = decodeIdToken(idToken);
     return {
         email: typeof decoded.email === "string" ? decoded.email : undefined,
         sub: typeof decoded.sub === "string" ? decoded.sub : undefined,
+        delegatedEmail: typeof decoded["custom:delegatedEmail"] === "string"
+            ? decoded["custom:delegatedEmail"]
+            : undefined,
+        delegatedSub: typeof decoded["custom:delegatedSub"] === "string"
+            ? decoded["custom:delegatedSub"]
+            : undefined,
         entityType: typeof decoded["custom:entityType"] === "string"
             ? decoded["custom:entityType"]
             : undefined,
@@ -34,6 +56,7 @@ export function registerWhoamiCommand(program) {
                 const machineCreds = machine ? loadMachineCreds() : null;
                 const identityCache = machine ? loadMachineCachedTokens() : cached;
                 const identity = identityCache ? peekIdToken(identityCache.idToken) : {};
+                const displayedIdentity = resolveWhoamiIdentity(identity);
                 const claims = identityCache ? decodeIdToken(identityCache.idToken) : {};
                 // Modern credentials carry the canonical UID. Legacy caches may only
                 // supply a UID when their subject is bound to the selected username.
@@ -48,7 +71,7 @@ export function registerWhoamiCommand(program) {
                     schemaVersion: 1,
                     authenticated: machine ? Boolean(machineCreds) : Boolean(cached && !isExpiring(cached, 0)),
                     tokenSource: machine ? 'machine' : 'person',
-                    email: machine ? null : identity.email ?? null,
+                    email: machine ? null : displayedIdentity.email ?? null,
                     personUid: !machine && identity.entityType === 'person' ? identity.entityUid ?? null : null,
                     agentUid,
                     username: machineCreds?.username ?? null,
@@ -72,11 +95,11 @@ export function registerWhoamiCommand(program) {
                 return;
             }
             if (isExpiring(cached, 0)) {
-                const who = peekIdToken(cached.idToken).email ?? 'unknown';
+                const who = resolveWhoamiIdentity(peekIdToken(cached.idToken)).email ?? 'unknown';
                 console.log(chalk.yellow(`Session expired for ${who}. Run 'hq login' to re-authenticate.`));
                 return;
             }
-            const { email, sub } = peekIdToken(cached.idToken);
+            const { email, sub } = resolveWhoamiIdentity(peekIdToken(cached.idToken));
             console.log(`Logged in as ${email ?? 'unknown'}${sub ? ` (${sub})` : ''}`);
         }
         catch (error) {

package/dist/lib/plan-limit-nag.d.ts

@@ -15,7 +15,7 @@
  * Additive only — never throws, never touches `process.exitCode`, never
  * writes to stdout. Env off-switch: `HQ_NO_PLAN_LIMIT_NAG=1`.
  */
-export declare const PLAN_LIMIT_UPGRADE_URL = "https://app.indigo-hq.com/billing/upgrade";
+export declare const PLAN_LIMIT_UPGRADE_URL = "https://hq.computer/billing/upgrade";
 export interface PlanLimitEntry {
     used: number;
     limit: number;

package/dist/lib/plan-limit-nag.js

@@ -19,7 +19,7 @@ import chalk from "chalk";
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
-export const PLAN_LIMIT_UPGRADE_URL = "https://app.indigo-hq.com/billing/upgrade";
+export const PLAN_LIMIT_UPGRADE_URL = "https://hq.computer/billing/upgrade";
 const DAY_MS = 24 * 60 * 60 * 1000;
 /** Module-level last-seen cell — overwritten by each successful parse. */
 let lastSeen = null;
@@ -58,9 +58,24 @@ function parseEntry(value) {
     }
     return { used: rec.used, limit: rec.limit, over: rec.over };
 }
+/** Validate the server-provided optional upgrade URL without throwing. */
+function parseUpgradeUrl(value) {
+    if (typeof value !== "string")
+        return null;
+    try {
+        const parsed = new URL(value);
+        // hq-pro permits an environment-configured console base URL, so stages
+        // cannot use a production-host allowlist. HTTPS is the trust boundary.
+        return parsed.protocol === "https:" ? parsed.toString() : null;
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Defensively parse a decoded JSON body for a well-formed top-level
- * `planLimits` object. Malformed or absent → null. Never throws.
+ * `planLimits` object and its optional `upgradeUrl`. Malformed or absent →
+ * null. Never throws.
  */
 function parsePlanLimits(body) {
     if (body === null || typeof body !== "object" || Array.isArray(body)) {
@@ -81,7 +96,12 @@ function parsePlanLimits(body) {
         out[key] = entry;
         anyValid = true;
     }
-    return anyValid ? out : null;
+    return anyValid
+        ? {
+            limits: out,
+            upgradeUrl: parseUpgradeUrl(planLimits.upgradeUrl),
+        }
+        : null;
 }
 /**
  * Record plan-limit status from a decoded JSON response body.
@@ -90,11 +110,11 @@ function parsePlanLimits(body) {
  */
 export function recordPlanLimitStatus(body) {
     try {
-        const limits = parsePlanLimits(body);
-        if (limits === null)
+        const status = parsePlanLimits(body);
+        if (status === null)
             return;
-        const anyOver = Object.values(limits).some((e) => e.over);
-        lastSeen = { limits, anyOver };
+        const anyOver = Object.values(status.limits).some((e) => e.over);
+        lastSeen = { ...status, anyOver };
     }
     catch {
         // Never throw from record path.
@@ -150,9 +170,9 @@ function writeShownAt(statePath, shownAt) {
 function withinDayWindow(shownAt, nowMs) {
     return nowMs - shownAt < DAY_MS;
 }
-function buildOverBox(overEntries) {
+function buildOverBox(overEntries, upgradeUrl) {
     const title = "⚠ HQ plan limit exceeded";
-    const upgrade = `Upgrade: ${PLAN_LIMIT_UPGRADE_URL}`;
+    const upgrade = `Upgrade: ${upgradeUrl}`;
     const resourceLines = overEntries.map(([key, entry]) => `  ${key}: ${entry.used}/${entry.limit}`);
     const contentLines = [title, "", ...resourceLines, "", upgrade];
     const innerWidth = Math.max(...contentLines.map((l) => l.length), 40);
@@ -178,7 +198,8 @@ export function emitPlanLimitNag(opts = {}) {
         const write = opts.write ?? ((s) => process.stderr.write(s));
         const now = opts.now ?? (() => new Date());
         const statePath = opts.statePath ?? defaultStatePath();
-        const { limits, anyOver } = lastSeen;
+        const { limits, anyOver, upgradeUrl } = lastSeen;
+        const resolvedUpgradeUrl = upgradeUrl ?? PLAN_LIMIT_UPGRADE_URL;
         const entries = Object.entries(limits);
         if (entries.length === 0)
             return;
@@ -191,7 +212,7 @@ export function emitPlanLimitNag(opts = {}) {
                 return;
             overShownThisSession = true;
             const overEntries = entries.filter(([, e]) => e.over);
-            const box = buildOverBox(overEntries);
+            const box = buildOverBox(overEntries, resolvedUpgradeUrl);
             write(chalk.yellow(box) + "\n");
             writeShownAt(statePath, nowMs);
             return;
@@ -203,7 +224,7 @@ export function emitPlanLimitNag(opts = {}) {
         if (worst === null)
             return;
         warningShownThisSession = true;
-        const line = `⚠ HQ free plan: ${formatEntryLine(worst.key, worst.entry)}. Upgrade: ${PLAN_LIMIT_UPGRADE_URL}`;
+        const line = `⚠ HQ free plan: ${formatEntryLine(worst.key, worst.entry)}. Upgrade: ${resolvedUpgradeUrl}`;
         write(chalk.yellow(line) + "\n");
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.111.1",
+  "version": "5.111.2",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {