@indigoai-us/hq-cli 5.119.4 → 5.119.6

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 ## [Unreleased]
 
+## [5.119.6] — 2026-09-17
+
+### Fixed
+
+- Slack token paste links now use the company's canonical Console slug. Links
+  built with an internal company ID redirected to the company home and lost the
+  agent setup form.
+
+## [5.119.5] — 2026-09-17
+
+### Fixed
+
+- When a new Slack agent is waiting for a Socket Mode app-level token, `hq
+  agents status` now shows a link to create the token and a direct link to the
+  HQ form where it can be pasted. The same links are included in JSON output.
+
+### Changed
+
+- Starter now includes 1 integration instead of none, and the lock copy says
+  so. The notice reads "too many integrations", quotes "Integrations allowed
+  on Starter: 1", and tells you to "disconnect integrations until you are at 1
+  or fewer"; the per-turn line reads "over its 1-integration limit". Nothing in
+  the CLI says Starter has no integrations any more.
+
 ## [5.119.4] — 2026-09-17
 
 ### Fixed

package/dist/commands/agents.js

@@ -443,8 +443,31 @@ function currentDeviceSignInAction(status) {
         code,
     };
 }
-function pendingSlackAction(status) {
+function pendingSlackAction(status, companySlug) {
     const agent = recordValue(status.agent);
+    const configuredSlack = recordValue(recordValue(agent?.channels)?.slack);
+    const appId = nonEmptyString(configuredSlack?.appId);
+    const agentUid = nonEmptyString(agent?.uid);
+    const companyUid = nonEmptyString(agent?.companyUid);
+    const tokenPage = safeActionUrl(configuredSlack?.appTokenPendingUrl);
+    if (tokenPage &&
+        appId && /^A[A-Z0-9]+$/.test(appId) &&
+        new URL(tokenPage).hostname === "api.slack.com" &&
+        agentUid && AGENT_UID_PATTERN.test(agentUid) &&
+        companyUid && /^cmp_[A-Za-z0-9_-]+$/.test(companyUid)) {
+        const companyUrlKey = companySlug && /^[a-z0-9][a-z0-9-]*$/.test(companySlug)
+            ? companySlug
+            : companyUid;
+        return {
+            type: "slack-app-token",
+            title: `Finish ${nonEmptyString(agent?.name) ?? "the agent"}'s Slack connection`,
+            summary: "connect it to Slack",
+            instruction: "Create an app-level token with the connections:write scope, then paste it into HQ. HQ verifies the token and resumes setup; if Slack asks you to install the app, follow the install link shown there.",
+            url: `https://api.slack.com/apps/${appId}/general`,
+            urlLabel: "Get token",
+            pasteUrl: `https://hq.computer/companies/${encodeURIComponent(companyUrlKey)}/agents?setup=${encodeURIComponent(agentUid)}`,
+        };
+    }
     const diagnostics = recordValue(agent?.channelDiagnostics);
     const slack = recordValue(diagnostics?.slack);
     const url = safeActionUrl(slack?.pendingInstallUrl);
@@ -476,18 +499,47 @@ function pendingSlackAction(status) {
  * status fields into a list so another operator action can be added without
  * changing the renderers or command control flow.
  */
-function pendingOperatorActions(status) {
+function pendingOperatorActions(status, companySlug) {
     return [
         currentDeviceSignInAction(status),
-        pendingSlackAction(status),
+        pendingSlackAction(status, companySlug),
     ].filter((action) => action !== null);
 }
+async function consoleCompanySlug(token, status, companyRef) {
+    if (companyRef && /^[a-z0-9][a-z0-9-]*$/.test(companyRef))
+        return companyRef;
+    const agent = recordValue(status.agent);
+    const slack = recordValue(recordValue(agent?.channels)?.slack);
+    if (!slack?.appTokenPendingUrl)
+        return undefined;
+    const companyUid = nonEmptyString(agent?.companyUid);
+    if (!companyUid)
+        return undefined;
+    try {
+        const response = await vaultApiFetch({
+            token,
+            path: "/membership/me",
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!response.ok)
+            return undefined;
+        const body = recordValue(await response.json());
+        const memberships = Array.isArray(body?.memberships) ? body.memberships : [];
+        const membership = memberships.map(recordValue).find((item) => item?.companyUid === companyUid && item?.status === "active");
+        const slug = nonEmptyString(membership?.companySlug);
+        return slug && /^[a-z0-9][a-z0-9-]*$/.test(slug) ? slug : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 function pendingActionsJson(actions) {
-    return actions.map(({ type, title, instruction, url, code }) => ({
+    return actions.map(({ type, title, instruction, url, pasteUrl, code }) => ({
         type,
         title,
         instruction,
         ...(url ? { url } : {}),
+        ...(pasteUrl ? { pasteUrl } : {}),
         ...(code ? { code } : {}),
     }));
 }
@@ -514,6 +566,8 @@ function printPendingOperatorActions(slug, actions) {
         console.log(action.instruction);
         if (action.url)
             console.log(chalk.cyan(`${action.urlLabel ?? "Open"}: ${action.url}`));
+        if (action.pasteUrl)
+            console.log(chalk.cyan(`Paste token: ${action.pasteUrl}`));
         if (action.code)
             console.log(chalk.bold(`Code: ${action.code}`));
     }
@@ -1167,7 +1221,9 @@ export function registerAgentsCommand(program) {
                 const status = identity
                     ? await getAgentStatus(token, identity.uid)
                     : null;
-                const actions = status ? pendingOperatorActions(status) : [];
+                const actions = status
+                    ? pendingOperatorActions(status, await consoleCompanySlug(token, status, companyOf(this)))
+                    : [];
                 const slackInstall = actions.find((action) => action.type === "slack-install");
                 if (opts.json) {
                     console.log(JSON.stringify({
@@ -1288,7 +1344,7 @@ export function registerAgentsCommand(program) {
             const token = (await resolveVaultCredential()).token;
             const agentUid = await resolveAgentUid(token, agent, companyOf(this));
             const status = await getAgentStatus(token, agentUid);
-            const actions = pendingOperatorActions(status);
+            const actions = pendingOperatorActions(status, await consoleCompanySlug(token, status, companyOf(this)));
             if (opts.json) {
                 process.stdout.write(JSON.stringify({
                     ...status,

package/dist/lib/billing/plan-lock.d.ts

@@ -41,6 +41,7 @@ export interface PlanLock {
 export interface PlanLockFixOptions {
     removeMembersTo: number;
     disconnectIntegrations: boolean;
+    disconnectIntegrationsTo?: number;
     removeSecretsTo?: number;
     deprovisionAgentsTo?: number;
 }
@@ -64,6 +65,12 @@ export interface PlanLockStatus {
 }
 /** Starter member cap quoted when the server did not send `removeMembersTo`. */
 export declare const STARTER_MEMBER_TARGET = 5;
+/**
+ * Starter integration cap quoted when the server did not send
+ * `disconnectIntegrationsTo`. One: Starter includes a single integration
+ * (US-020 owner decision 11, 2026-09-17 — it was zero before that).
+ */
+export declare const STARTER_INTEGRATION_TARGET = 1;
 /** Starter secret cap quoted when the server did not send `removeSecretsTo`. */
 export declare const STARTER_SECRET_TARGET = 10;
 /** Starter agent cap quoted when the server did not send `deprovisionAgentsTo`. */

package/dist/lib/billing/plan-lock.js

@@ -36,6 +36,12 @@ function isPlanLockReason(value) {
 }
 /** Starter member cap quoted when the server did not send `removeMembersTo`. */
 export const STARTER_MEMBER_TARGET = 5;
+/**
+ * Starter integration cap quoted when the server did not send
+ * `disconnectIntegrationsTo`. One: Starter includes a single integration
+ * (US-020 owner decision 11, 2026-09-17 — it was zero before that).
+ */
+export const STARTER_INTEGRATION_TARGET = 1;
 /** Starter secret cap quoted when the server did not send `removeSecretsTo`. */
 export const STARTER_SECRET_TARGET = 10;
 /** Starter agent cap quoted when the server did not send `deprovisionAgentsTo`. */
@@ -73,6 +79,7 @@ export function parsePlanLock(value) {
     }
     const fix = asRecord(rec.fixOptions);
     const removeMembersTo = finiteNumber(fix?.removeMembersTo) ?? STARTER_MEMBER_TARGET;
+    const disconnectIntegrationsTo = finiteNumber(fix?.disconnectIntegrationsTo);
     const removeSecretsTo = finiteNumber(fix?.removeSecretsTo);
     const deprovisionAgentsTo = finiteNumber(fix?.deprovisionAgentsTo);
     const fixOptions = {
@@ -81,6 +88,9 @@ export function parsePlanLock(value) {
     };
     // Absent stays absent: an omitted remedy target is UNKNOWN, and the renderer
     // quotes the published Starter cap rather than inventing a server answer.
+    if (disconnectIntegrationsTo !== null) {
+        fixOptions.disconnectIntegrationsTo = disconnectIntegrationsTo;
+    }
     if (removeSecretsTo !== null)
         fixOptions.removeSecretsTo = removeSecretsTo;
     if (deprovisionAgentsTo !== null) {
@@ -200,13 +210,16 @@ export function reasonLabel(reason) {
         case "users":
             return "too many members";
         case "integrations":
-            return "integrations are not included on Starter";
+            return "too many integrations";
         case "secrets":
             return "too many secrets";
         case "agents":
             return "agents are not included on Starter";
     }
 }
+function integrationTarget(lock) {
+    return lock.fixOptions.disconnectIntegrationsTo ?? STARTER_INTEGRATION_TARGET;
+}
 function secretTarget(lock) {
     return lock.fixOptions.removeSecretsTo ?? STARTER_SECRET_TARGET;
 }
@@ -219,7 +232,7 @@ function reasonRemedy(reason, lock) {
         case "users":
             return `remove members until you are at ${lock.fixOptions.removeMembersTo} or fewer`;
         case "integrations":
-            return "disconnect the workspace's integrations";
+            return `disconnect integrations until you are at ${integrationTarget(lock)} or fewer`;
         case "secrets":
             return `delete secrets until you are at ${secretTarget(lock)} or fewer`;
         case "agents": {
@@ -241,7 +254,7 @@ function reasonDetail(reason, status) {
                 : `over its ${target}-member limit`;
         }
         case "integrations":
-            return "integrations are not included on Starter";
+            return `over its ${integrationTarget(status.lock)}-integration limit`;
         case "secrets":
             return `over its ${secretTarget(status.lock)}-secret limit`;
         case "agents":
@@ -275,6 +288,9 @@ export function renderPlanLockNotice(status) {
             ? `  Members: ${members.used} of ${target}.`
             : `  Members allowed on Starter: ${target}.`);
     }
+    if (lock.reasons.includes("integrations")) {
+        lines.push(`  Integrations allowed on Starter: ${integrationTarget(lock)}.`);
+    }
     if (lock.reasons.includes("secrets")) {
         lines.push(`  Secrets allowed on Starter: ${secretTarget(lock)}.`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.119.4",
+  "version": "5.119.6",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {