@indigoai-us/hq-cli 5.119.5 → 5.119.7

package/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 ## [Unreleased]
 
+## [5.119.7] — 2026-09-17
+
+### Fixed
+
+- When the kit cannot install its `@reboot` entry because the host has no
+  `crontab` at all, the install now says so and names the package to install,
+  instead of reporting a raw ENOENT the operator cannot act on. A minimal
+  container image routinely ships without cron; the Muse pilot hit this the
+  first time the reboot entry was attempted.
+
+## [5.119.6] — 2026-09-17
+
+### Fixed
+
+- Slack token paste links now use the company's canonical Console slug. Links
+  built with an internal company ID redirected to the company home and lost the
+  agent setup form.
+
 ## [5.119.5] — 2026-09-17
 
 ### Fixed

package/dist/commands/agents.js

@@ -443,7 +443,7 @@ function currentDeviceSignInAction(status) {
         code,
     };
 }
-function pendingSlackAction(status) {
+function pendingSlackAction(status, companySlug) {
     const agent = recordValue(status.agent);
     const configuredSlack = recordValue(recordValue(agent?.channels)?.slack);
     const appId = nonEmptyString(configuredSlack?.appId);
@@ -455,6 +455,9 @@ function pendingSlackAction(status) {
         new URL(tokenPage).hostname === "api.slack.com" &&
         agentUid && AGENT_UID_PATTERN.test(agentUid) &&
         companyUid && /^cmp_[A-Za-z0-9_-]+$/.test(companyUid)) {
+        const companyUrlKey = companySlug && /^[a-z0-9][a-z0-9-]*$/.test(companySlug)
+            ? companySlug
+            : companyUid;
         return {
             type: "slack-app-token",
             title: `Finish ${nonEmptyString(agent?.name) ?? "the agent"}'s Slack connection`,
@@ -462,7 +465,7 @@ function pendingSlackAction(status) {
             instruction: "Create an app-level token with the connections:write scope, then paste it into HQ. HQ verifies the token and resumes setup; if Slack asks you to install the app, follow the install link shown there.",
             url: `https://api.slack.com/apps/${appId}/general`,
             urlLabel: "Get token",
-            pasteUrl: `https://hq.computer/companies/${encodeURIComponent(companyUid)}/agents?setup=${encodeURIComponent(agentUid)}`,
+            pasteUrl: `https://hq.computer/companies/${encodeURIComponent(companyUrlKey)}/agents?setup=${encodeURIComponent(agentUid)}`,
         };
     }
     const diagnostics = recordValue(agent?.channelDiagnostics);
@@ -496,12 +499,40 @@ function pendingSlackAction(status) {
  * status fields into a list so another operator action can be added without
  * changing the renderers or command control flow.
  */
-function pendingOperatorActions(status) {
+function pendingOperatorActions(status, companySlug) {
     return [
         currentDeviceSignInAction(status),
-        pendingSlackAction(status),
+        pendingSlackAction(status, companySlug),
     ].filter((action) => action !== null);
 }
+async function consoleCompanySlug(token, status, companyRef) {
+    if (companyRef && /^[a-z0-9][a-z0-9-]*$/.test(companyRef))
+        return companyRef;
+    const agent = recordValue(status.agent);
+    const slack = recordValue(recordValue(agent?.channels)?.slack);
+    if (!slack?.appTokenPendingUrl)
+        return undefined;
+    const companyUid = nonEmptyString(agent?.companyUid);
+    if (!companyUid)
+        return undefined;
+    try {
+        const response = await vaultApiFetch({
+            token,
+            path: "/membership/me",
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!response.ok)
+            return undefined;
+        const body = recordValue(await response.json());
+        const memberships = Array.isArray(body?.memberships) ? body.memberships : [];
+        const membership = memberships.map(recordValue).find((item) => item?.companyUid === companyUid && item?.status === "active");
+        const slug = nonEmptyString(membership?.companySlug);
+        return slug && /^[a-z0-9][a-z0-9-]*$/.test(slug) ? slug : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 function pendingActionsJson(actions) {
     return actions.map(({ type, title, instruction, url, pasteUrl, code }) => ({
         type,
@@ -1190,7 +1221,9 @@ export function registerAgentsCommand(program) {
                 const status = identity
                     ? await getAgentStatus(token, identity.uid)
                     : null;
-                const actions = status ? pendingOperatorActions(status) : [];
+                const actions = status
+                    ? pendingOperatorActions(status, await consoleCompanySlug(token, status, companyOf(this)))
+                    : [];
                 const slackInstall = actions.find((action) => action.type === "slack-install");
                 if (opts.json) {
                     console.log(JSON.stringify({
@@ -1311,7 +1344,7 @@ export function registerAgentsCommand(program) {
             const token = (await resolveVaultCredential()).token;
             const agentUid = await resolveAgentUid(token, agent, companyOf(this));
             const status = await getAgentStatus(token, agentUid);
-            const actions = pendingOperatorActions(status);
+            const actions = pendingOperatorActions(status, await consoleCompanySlug(token, status, companyOf(this)));
             if (opts.json) {
                 process.stdout.write(JSON.stringify({
                     ...status,

package/dist/lib/agent-kit/fallback.d.ts

@@ -80,19 +80,5 @@ export interface RebootCronResult {
 }
 /** Drop any previously managed block, leaving every other entry untouched. */
 export declare function stripManagedCron(existing: string): string;
-/**
- * Install the @reboot entry that brings the fallback supervisor back after a
- * restart.
- *
- * Printing the line and trusting it to be pasted is what the installer used to
- * do, and it is how the Muse pilot lost its messages: the host rebooted, the
- * supervisor died with it, nothing restarted it, and the bot went quiet while
- * every surface still reported healthy. A supervisor that does not survive a
- * reboot is not a supervisor, so the entry is now written for real.
- *
- * Failure is NOT fatal — a host with no crontab is still a working kit until
- * it restarts — but it is reported, so the caller can tell the operator the
- * one thing they must then do by hand.
- */
 export declare function ensureRebootCrontab(paths: Pick<AgentKitPaths, "agentDir" | "logsDir">, host: ServiceHostPaths, run?: CronRunner): RebootCronResult;
 //# sourceMappingURL=fallback.d.ts.map

package/dist/lib/agent-kit/fallback.js

@@ -161,6 +161,10 @@ export function stripManagedCron(existing) {
  * it restarts — but it is reported, so the caller can tell the operator the
  * one thing they must then do by hand.
  */
+/** No cron on the host: spawn failed outright, or the shell could not find it. */
+function isMissingCrontab(r) {
+    return r.status === 127 || /\bENOENT\b|command not found|not found/i.test(r.stderr);
+}
 export function ensureRebootCrontab(paths, host, run) {
     const exec = run ??
         ((args, input) => {
@@ -170,6 +174,17 @@ export function ensureRebootCrontab(paths, host, run) {
             return { status: r.status ?? 1, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
         });
     const listed = exec(["-l"]);
+    // A minimal host image often ships without cron at all, which is not an
+    // error the operator can act on unless it is named. Observed on the Muse
+    // pilot: the reboot entry could not be written because the cron package was
+    // simply not installed, and the raw ENOENT did not say so.
+    if (isMissingCrontab(listed)) {
+        return {
+            installed: false,
+            reason: "the `crontab` command is not installed on this host (install your distribution's cron package, " +
+                "for example `apt-get install -y cron` or `apk add busybox-cron`), then run `hq agent kit install` again",
+        };
+    }
     // An empty crontab exits non-zero with "no crontab for <user>"; that is not
     // a failure, it just means there is nothing to preserve. Anything else is.
     const noCrontabYet = listed.status !== 0 && /no crontab for/i.test(listed.stderr);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.119.5",
+  "version": "5.119.7",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {