@indigoai-us/hq-cli 5.118.1 → 5.118.2

package/CHANGELOG.md

@@ -2,6 +2,25 @@
 
 ## [Unreleased]
 
+## [5.118.2] — 2026-09-17
+
+### Changed
+
+- The locked-workspace notice now says what you can still do. A locked
+  workspace is read-only for new things, but deleting still works — which
+  matters, because every fix the notice lists (remove members, disconnect
+  integrations, delete secrets, deprovision agents) is a delete. The notice
+  states that outright instead of leaving "read-only" to be guessed at.
+
+- The plan-limit box names the plan: "HQ Starter plan limit exceeded" rather
+  than "HQ plan limit exceeded".
+
+### Added
+
+- `hq agents provision --model` now sets the brain model during creation. A
+  model such as `gpt-5.5` or `grok-4.6` selects the agents-v2 runtime unless
+  `--provider` is specified, avoiding a later box recreation to change brains.
+
 ## [5.118.1] — 2026-09-17
 
 ### Fixed

package/dist/command-catalog.generated.d.ts

@@ -3812,7 +3812,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Agent slug (defaults to a slug of <name>)";
         }, {
             readonly flags: "--provider <provider>";
-            readonly description: "Runtime: codex | grok | claude | agents-v2 (default codex). claude is subscription-only; agents-v2 boots its brain box (codex, or grok via a grok-* model) and receives the v2 runtime post-boot";
+            readonly description: "Runtime: agents-v2 (recommended) | codex | grok | claude (legacy). A --model selects agents-v2 by default";
+        }, {
+            readonly flags: "--model <model>";
+            readonly description: "Brain model, for example gpt-5.5 or grok-4.6";
         }, {
             readonly flags: "--auth-mode <mode>";
             readonly description: "Auth: subscription | apiKey (default subscription)";

package/dist/command-catalog.generated.js

@@ -4926,7 +4926,11 @@ export const COMMAND_CATALOG = [
                     },
                     {
                         "flags": "--provider <provider>",
-                        "description": "Runtime: codex | grok | claude | agents-v2 (default codex). claude is subscription-only; agents-v2 boots its brain box (codex, or grok via a grok-* model) and receives the v2 runtime post-boot"
+                        "description": "Runtime: agents-v2 (recommended) | codex | grok | claude (legacy). A --model selects agents-v2 by default"
+                    },
+                    {
+                        "flags": "--model <model>",
+                        "description": "Brain model, for example gpt-5.5 or grok-4.6"
                     },
                     {
                         "flags": "--auth-mode <mode>",

package/dist/commands/agents.d.ts

@@ -171,6 +171,7 @@ export interface ProvisionAgentInput {
     slug: string;
     codexAuthMode: "subscription" | "apiKey";
     provider?: "codex" | "grok" | "claude" | "agents-v2";
+    codexModel?: string;
     codexApiKey?: string;
     idempotencyKey: string;
     title?: string;

package/dist/commands/agents.js

@@ -1074,7 +1074,8 @@ export function registerAgentsCommand(program) {
         .description("Provision a new cloud agent (company-specific monthly price shown before creation)")
         .option("--company <slug>", "Company slug (resolves to companyUid)")
         .option("--slug <slug>", "Agent slug (defaults to a slug of <name>)")
-        .option("--provider <provider>", "Runtime: codex | grok | claude | agents-v2 (default codex). claude is subscription-only; agents-v2 boots its brain box (codex, or grok via a grok-* model) and receives the v2 runtime post-boot")
+        .option("--provider <provider>", "Runtime: agents-v2 (recommended) | codex | grok | claude (legacy). A --model selects agents-v2 by default")
+        .option("--model <model>", "Brain model, for example gpt-5.5 or grok-4.6")
         .option("--auth-mode <mode>", "Auth: subscription | apiKey (default subscription)", "subscription")
         .option("--api-key-env <VAR>", "Env var holding the API key for --auth-mode apiKey (never pass the key as a flag)")
         .option("--title <title>", "Org-chart job title")
@@ -1088,7 +1089,13 @@ export function registerAgentsCommand(program) {
             // unrecognised value, silently provisioning a billable box the operator
             // did not ask for. They now exit(1) instead — see parseEnumOption.
             const authMode = parseEnumOption(opts.authMode, VALID_AUTH_MODES, "--auth-mode") ?? "subscription";
-            const provider = parseEnumOption(opts.provider, VALID_PROVIDERS, "--provider");
+            const explicitProvider = parseEnumOption(opts.provider, VALID_PROVIDERS, "--provider");
+            if (opts.model !== undefined &&
+                !/^[A-Za-z0-9._-]{1,64}$/.test(opts.model)) {
+                console.error(chalk.red("--model must be a model identifier (letters, digits, dot, dash, underscore; max 64 chars)."));
+                process.exit(1);
+            }
+            const provider = explicitProvider ?? (opts.model ? "agents-v2" : undefined);
             // claude is subscription-only on hq-pro (rejectIncompatibleProviderAuthMode
             // returns AGENT_PROVIDER_INCOMPATIBLE_WITH_AUTH_MODE). Catch it here so the
             // operator gets a direct message instead of a 400 from the control plane
@@ -1139,6 +1146,7 @@ export function registerAgentsCommand(program) {
                     slug,
                     codexAuthMode: authMode,
                     ...(provider ? { provider } : {}),
+                    ...(opts.model ? { codexModel: opts.model } : {}),
                     ...(codexApiKey ? { codexApiKey } : {}),
                     idempotencyKey,
                     ...(opts.title ? { title: opts.title } : {}),

package/dist/lib/billing/plan-lock.js

@@ -281,7 +281,9 @@ export function renderPlanLockNotice(status) {
     if (lock.reasons.includes("agents")) {
         lines.push(`  Agents allowed on Starter: ${agentTarget(lock)}.`);
     }
-    lines.push("  This workspace is read-only until it is fixed. Two ways out:");
+    lines.push("  Nothing has been deleted. This workspace is read-only until it is fixed:");
+    lines.push("  you can still delete things, but you cannot create, invite or upload.");
+    lines.push("  Two ways to fix it:");
     const remedy = lock.reasons.length
         ? lock.reasons.map((reason) => reasonRemedy(reason, lock)).join(", and ")
         : "come back under the Starter plan limits";

package/dist/lib/plan-limit-nag.js

@@ -190,7 +190,7 @@ function withinDayWindow(shownAt, nowMs) {
     return nowMs - shownAt < DAY_MS;
 }
 function buildOverBox(overEntries, upgradeUrl) {
-    const title = "⚠ HQ plan limit exceeded";
+    const title = "⚠ HQ Starter plan limit exceeded";
     const upgrade = `Upgrade: ${upgradeUrl}`;
     const resourceLines = overEntries.map(([key, entry]) => `  ${key}: ${entry.used}/${entry.limit}${dimensionSuffix(key)}`);
     const contentLines = [title, "", ...resourceLines, "", upgrade];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.118.1",
+  "version": "5.118.2",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {