@indigoai-us/hq-cli 5.123.1 → 5.124.0

package/CHANGELOG.md

@@ -2,6 +2,31 @@
 
 ## [Unreleased]
 
+## [5.124.0] — 2026-09-20
+
+### Added
+
+- `hq billing sponsor` — ask a company to cover your $50/mo HQ Individual plan
+  from the terminal, and answer those requests if you run the company.
+  `request <company>` asks, `list` shows the queue you can answer or — if you
+  are not an admin there — your own single status for that company, and
+  `approve` / `decline` / `revoke` / `withdraw` resolve one. Pass `--company`
+  to `list` when you are asking about your own state.
+
+  Approving does not always finish the job: if the company has no card on file,
+  HQ accepts the yes but nothing is covered yet, and `approve` says so with the
+  link to add one. This is off until HQ turns it on; until then the commands
+  say it is not available yet rather than failing with a validation error.
+
+## [5.123.2] — 2026-09-19
+
+### Fixed
+
+- Company slug lookup no longer prints `Failed to resolve company slug '…':`
+  with nothing after the colon. Transient failures (timeouts, 429, 5xx) are
+  retried once, and the error names the HTTP status and says it is a temporary
+  lookup failure rather than a missing company.
+
 ## [5.123.1] — 2026-09-19
 
 ### Fixed

package/dist/command-catalog.generated.d.ts

@@ -4850,6 +4850,110 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Emit the Checkout URL as JSON";
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "sponsor";
+        readonly description: "Ask a company to cover your $50 plan, or answer a request";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] [command]";
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [{
+            readonly name: "request";
+            readonly description: "Ask a company to cover your $50 HQ plan";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <company>";
+            readonly arguments: readonly [{
+                readonly name: "company";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "list";
+            readonly description: "Show sponsorship requests — the company's queue, or your own";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company slug (resolves to companyUid)";
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "approve";
+            readonly description: "Say yes — put someone's $50 plan on the company bill";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <id>";
+            readonly arguments: readonly [{
+                readonly name: "id";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "decline";
+            readonly description: "Say no to a plan sponsorship request";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <id>";
+            readonly arguments: readonly [{
+                readonly name: "id";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "revoke";
+            readonly description: "End a sponsorship the company is currently paying for";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <id>";
+            readonly arguments: readonly [{
+                readonly name: "id";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "withdraw";
+            readonly description: "Take back a sponsorship request you made";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <id>";
+            readonly arguments: readonly [{
+                readonly name: "id";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }];
     }];
 }, {
     readonly name: "core";

package/dist/command-catalog.generated.js

@@ -6268,6 +6268,141 @@ export const COMMAND_CATALOG = [
                     }
                 ],
                 "subcommands": []
+            },
+            {
+                "name": "sponsor",
+                "description": "Ask a company to cover your $50 plan, or answer a request",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] [command]",
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "request",
+                        "description": "Ask a company to cover your $50 HQ plan",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <company>",
+                        "arguments": [
+                            {
+                                "name": "company",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "list",
+                        "description": "Show sponsorship requests — the company's queue, or your own",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options]",
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--company <slug>",
+                                "description": "Company slug (resolves to companyUid)"
+                            },
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "approve",
+                        "description": "Say yes — put someone's $50 plan on the company bill",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <id>",
+                        "arguments": [
+                            {
+                                "name": "id",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "decline",
+                        "description": "Say no to a plan sponsorship request",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <id>",
+                        "arguments": [
+                            {
+                                "name": "id",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "revoke",
+                        "description": "End a sponsorship the company is currently paying for",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <id>",
+                        "arguments": [
+                            {
+                                "name": "id",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "withdraw",
+                        "description": "Take back a sponsorship request you made",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <id>",
+                        "arguments": [
+                            {
+                                "name": "id",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    }
+                ]
             }
         ]
     },

package/dist/commands/billing-sponsor.d.ts

@@ -0,0 +1,83 @@
+/**
+ * `hq billing sponsor` — the individual-pull half of plan sponsorship, from the
+ * terminal ("ask a company to sponsor me", hq-pro #3609).
+ *
+ * A person who is over a personal limit has exactly three ways out: pay $50
+ * themselves, reduce what they store, or ask a company to cover the $50 plan
+ * line. This command is the third one, plus the admin side that answers it.
+ *
+ *   hq billing sponsor request <company>   — ask that company to cover my plan
+ *   hq billing sponsor list                — the queue (admins), or my own
+ *                                            single status (everyone else)
+ *   hq billing sponsor approve <id>        — admin: say yes
+ *   hq billing sponsor decline <id>        — admin: say no
+ *   hq billing sponsor revoke  <id>        — admin: end an active sponsorship
+ *   hq billing sponsor withdraw <id>       — me: take back my own request
+ *
+ * Every subcommand talks to the SAME hq-pro routes the console uses
+ * (`/v1/billing/sponsorship/...`). hq-pro is the authoritative gate on all of
+ * them: it resolves the caller's person id and the company's admin set
+ * server-side, so nothing here is trusted from the client.
+ *
+ * FEATURE SWITCH. The `plan` request kind only exists while hq-pro's
+ * `PLAN_SPONSORSHIP_REQUESTS_ENABLED` switch is on. With the switch off the
+ * backend does not recognise `plan` and answers 400 `MISSING_FIELDS` — which
+ * would read as "you typed something wrong". We translate that one case into a
+ * plain "not available yet" line so a person never sees a validation error for
+ * a feature that simply is not turned on.
+ */
+import { Command } from "commander";
+/** The request kind this command files. Matches hq-pro's contract. */
+export declare const PLAN_RESOURCE: "plan";
+/** What a person is told when hq-pro's plan-sponsorship switch is off. */
+export declare const FEATURE_OFF_MESSAGE = "Asking a company to sponsor your plan isn't available yet.";
+/** What v1 sponsorship covers, stated wherever a person confirms or reads it. */
+export declare const COVERAGE_SENTENCE = "Your company pays your $50 plan. Storage above your plan's allowance is still yours.";
+/** What a person is told while an approval waits on the sponsor's card. */
+export declare const HELD_FOR_CARD_SENTENCE = "Your company said yes and is adding a card. Your limits still apply until then.";
+/** One request row as hq-pro persists and returns it. */
+export interface SponsorshipRequestRecord {
+    requestId: string;
+    companyUid: string;
+    requestedBy: string;
+    resourceId?: string;
+    resource: "outpost" | "agent" | "plan";
+    status: "pending" | "active" | "declined" | "pending-sponsor-billing" | "expired";
+    payer: "person" | "company";
+    requestedAt: string;
+    updatedAt: string;
+}
+/** An hq-pro error body: `{ error, code }` on every non-2xx these routes send. */
+interface ApiErrorBody {
+    error?: string;
+    message?: string;
+    code?: string;
+}
+/**
+ * Turn an hq-pro non-2xx into one plain sentence.
+ *
+ * The switch-off 400 is the important translation: with the feature off,
+ * `plan` is an unrecognised resource kind and the generic body reads
+ * "companyUid and resource ('outpost'|'agent') are required", which tells a
+ * person nothing true about what happened.
+ */
+export declare function messageForError(status: number, body: ApiErrorBody): string;
+/**
+ * The member self-read's shape. hq-pro answers
+ * `GET /v1/billing/sponsorship/mine?companyUid=…&resource=…` with ONE status —
+ * not a list — because the route is a self-scoped "am I covered" question.
+ * `active` is true only for an approved COMPANY-paid row; everything else
+ * (never asked, still pending, declined) comes back `active: false` with null
+ * fields.
+ */
+export interface SponsorshipSelfState {
+    active: boolean;
+    status: string | null;
+    payer: "person" | "company" | null;
+    requestId: string | null;
+}
+/** Plain label for a request status. Never shows the raw enum. */
+export declare function statusLabel(status: string): string;
+export declare function registerBillingSponsorCommands(billing: Command): void;
+export {};
+//# sourceMappingURL=billing-sponsor.d.ts.map

package/dist/commands/billing-sponsor.js

@@ -0,0 +1,344 @@
+/**
+ * `hq billing sponsor` — the individual-pull half of plan sponsorship, from the
+ * terminal ("ask a company to sponsor me", hq-pro #3609).
+ *
+ * A person who is over a personal limit has exactly three ways out: pay $50
+ * themselves, reduce what they store, or ask a company to cover the $50 plan
+ * line. This command is the third one, plus the admin side that answers it.
+ *
+ *   hq billing sponsor request <company>   — ask that company to cover my plan
+ *   hq billing sponsor list                — the queue (admins), or my own
+ *                                            single status (everyone else)
+ *   hq billing sponsor approve <id>        — admin: say yes
+ *   hq billing sponsor decline <id>        — admin: say no
+ *   hq billing sponsor revoke  <id>        — admin: end an active sponsorship
+ *   hq billing sponsor withdraw <id>       — me: take back my own request
+ *
+ * Every subcommand talks to the SAME hq-pro routes the console uses
+ * (`/v1/billing/sponsorship/...`). hq-pro is the authoritative gate on all of
+ * them: it resolves the caller's person id and the company's admin set
+ * server-side, so nothing here is trusted from the client.
+ *
+ * FEATURE SWITCH. The `plan` request kind only exists while hq-pro's
+ * `PLAN_SPONSORSHIP_REQUESTS_ENABLED` switch is on. With the switch off the
+ * backend does not recognise `plan` and answers 400 `MISSING_FIELDS` — which
+ * would read as "you typed something wrong". We translate that one case into a
+ * plain "not available yet" line so a person never sees a validation error for
+ * a feature that simply is not turned on.
+ */
+import chalk from "chalk";
+import { ensureCognitoToken } from "../utils/cognito-session.js";
+import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
+/** The request kind this command files. Matches hq-pro's contract. */
+export const PLAN_RESOURCE = "plan";
+/** What a person is told when hq-pro's plan-sponsorship switch is off. */
+export const FEATURE_OFF_MESSAGE = "Asking a company to sponsor your plan isn't available yet.";
+/** What v1 sponsorship covers, stated wherever a person confirms or reads it. */
+export const COVERAGE_SENTENCE = "Your company pays your $50 plan. Storage above your plan's allowance is still yours.";
+/** What a person is told while an approval waits on the sponsor's card. */
+export const HELD_FOR_CARD_SENTENCE = "Your company said yes and is adding a card. Your limits still apply until then.";
+/**
+ * An error we already have plain wording for. `expected` marks it as a normal
+ * outcome (a decline, a rate limit) rather than a fault, matching the flag the
+ * rest of the CLI uses to keep Sentry quiet.
+ */
+class SponsorError extends Error {
+    expected = true;
+}
+function fail(err) {
+    console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
+    process.exit(1);
+}
+/**
+ * Turn an hq-pro non-2xx into one plain sentence.
+ *
+ * The switch-off 400 is the important translation: with the feature off,
+ * `plan` is an unrecognised resource kind and the generic body reads
+ * "companyUid and resource ('outpost'|'agent') are required", which tells a
+ * person nothing true about what happened.
+ */
+export function messageForError(status, body) {
+    const code = body.code;
+    if (status === 400 && code === "MISSING_FIELDS")
+        return FEATURE_OFF_MESSAGE;
+    if (status === 401)
+        return "Your sign-in has expired. Run `hq login` and try again.";
+    if (status === 403 && code === "SPONSOR_PLAN_REQUIRED") {
+        return "That company's plan can't cover an individual plan. Only HQ Workforce and Enterprise companies can.";
+    }
+    if (status === 403) {
+        return "You're not allowed to do that. Only an owner or admin of the company can answer a sponsorship request.";
+    }
+    if (status === 404)
+        return "No sponsorship request with that id.";
+    if (status === 409 && code === "DUPLICATE_PENDING_REQUEST") {
+        return "You've already asked that company. They just need to answer.";
+    }
+    if (status === 429 && code === "PLAN_REQUEST_RATE_LIMITED") {
+        return "You asked that company in the last 24 hours. Give them a day before asking again.";
+    }
+    return body.error ?? body.message ?? `Request failed (${status}).`;
+}
+/** Call an hq-pro sponsorship route, or throw a sentence a person can read. */
+async function callApi(token, path, init = {}) {
+    const res = await vaultApiFetch({ token, path, ...init });
+    if (!res.ok) {
+        const body = (await res.json().catch(() => ({})));
+        throw new SponsorError(messageForError(res.status, body));
+    }
+    return (await res.json());
+}
+/**
+ * Read the caller's OWN plan-sponsorship state for one company.
+ *
+ * Two non-2xx cases mean the same thing to a person and must NOT fall through
+ * to {@link messageForError}: a 400 `MISSING_FIELDS` (hq-pro does not accept the
+ * `plan` resource kind yet) and a 404 (an hq-pro that predates this route at
+ * all). Both are "the feature is not on", never "no request with that id" —
+ * there is no id in a list command for that sentence to be about.
+ */
+async function readSelfState(token, companyUid) {
+    const res = await vaultApiFetch({
+        token,
+        path: "/v1/billing/sponsorship/mine",
+        query: { companyUid, resource: PLAN_RESOURCE },
+    });
+    if (!res.ok) {
+        const body = (await res.json().catch(() => ({})));
+        if (res.status === 404 || (res.status === 400 && body.code === "MISSING_FIELDS")) {
+            throw new SponsorError(FEATURE_OFF_MESSAGE);
+        }
+        throw new SponsorError(messageForError(res.status, body));
+    }
+    return (await res.json());
+}
+/** Plain label for a request status. Never shows the raw enum. */
+export function statusLabel(status) {
+    switch (status) {
+        case "pending":
+            return "Waiting for an answer";
+        case "pending-sponsor-billing":
+            return "Said yes — waiting on their card";
+        case "active":
+            return "Covered by the company";
+        case "declined":
+            return "Not covered";
+        case "expired":
+            return "Expired";
+        default:
+            return status;
+    }
+}
+/** One line per request, in the same column order everywhere. */
+function renderRow(r) {
+    const when = r.requestedAt.slice(0, 10);
+    return `  ${chalk.bold(r.requestId)}  ${statusLabel(r.status).padEnd(32)} asked ${when}`;
+}
+/** Only plan rows belong on this surface; outpost/agent have their own. */
+function planRowsOf(rows) {
+    return rows.filter((r) => r.resource === PLAN_RESOURCE);
+}
+/** Shared body of approve / decline / revoke / withdraw. */
+async function transition(requestId, op) {
+    const token = await ensureCognitoToken();
+    const data = await callApi(token, `/v1/billing/sponsorship/request/${op}`, {
+        method: "POST",
+        body: { requestId },
+    });
+    return { ...data.request, code: data.code, addCardUrl: data.addCardUrl };
+}
+export function registerBillingSponsorCommands(billing) {
+    const sponsor = billing
+        .command("sponsor")
+        .description("Ask a company to cover your $50 plan, or answer a request");
+    sponsor
+        .command("request")
+        .argument("<company>", "Company slug or uid to ask")
+        .description("Ask a company to cover your $50 HQ plan")
+        .option("--json", "Emit raw JSON")
+        .action(async function (company, opts) {
+        try {
+            const token = await ensureCognitoToken();
+            const companyUid = await getCompanyUid(token, company);
+            const data = await callApi(token, "/v1/billing/sponsorship/request", { method: "POST", body: { companyUid, resource: PLAN_RESOURCE } });
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(data.request, null, 2) + "\n");
+                return;
+            }
+            console.log(`Asked ${company} to cover your $50 HQ plan.`);
+            console.log(COVERAGE_SENTENCE);
+            console.log(`An owner or admin there answers next. Check with \`hq billing sponsor list\`.`);
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    sponsor
+        .command("list")
+        .description("Show sponsorship requests — the company's queue, or your own")
+        .option("--company <slug>", "Company slug (resolves to companyUid)")
+        .option("--json", "Emit raw JSON")
+        .action(async function (opts) {
+        try {
+            const token = await ensureCognitoToken();
+            // A company the caller cannot resolve is not fatal here. The person
+            // this feature is for often belongs to no company at all, and they
+            // still need to be told what to do next.
+            const named = opts.company ?? billing.opts().company;
+            const companyUid = await getCompanyUid(token, named).catch(() => null);
+            // The admin queue is the richer view. A non-admin is refused it, so we
+            // fall back to the member SELF-READ — a different route with a
+            // different answer: hq-pro returns ONE status for that person and that
+            // company, not a list. Rendering it as a list (or reusing the list's
+            // "not found" wording) is what made this read wrong.
+            let rows = null;
+            if (companyUid) {
+                try {
+                    const data = await callApi(token, "/v1/billing/sponsorship/requests", { query: { companyUid } });
+                    rows = planRowsOf(data.requests);
+                }
+                catch (err) {
+                    if (!(err instanceof SponsorError))
+                        throw err;
+                }
+            }
+            if (rows === null) {
+                // The self-read is company-scoped by contract, so without a company
+                // there is nothing to ask for. Say which flag fixes it.
+                if (!companyUid) {
+                    const line = named
+                        ? `Couldn't find a company called ${named}.`
+                        : "Name the company you asked: `hq billing sponsor list --company <slug>`.";
+                    if (opts.json) {
+                        process.stdout.write(JSON.stringify({ error: line }, null, 2) + "\n");
+                        return;
+                    }
+                    console.log(line);
+                    return;
+                }
+                const state = await readSelfState(token, companyUid);
+                if (opts.json) {
+                    process.stdout.write(JSON.stringify(state, null, 2) + "\n");
+                    return;
+                }
+                const where = named ?? "that company";
+                if (!state.active) {
+                    console.log(`No company is covering your $50 HQ plan right now.`);
+                    console.log(`If you asked ${where}, they haven't answered yet — an owner or admin there answers next.`);
+                    return;
+                }
+                console.log(`Your $50 HQ plan: ${statusLabel(state.status ?? "active")}`);
+                if (state.requestId)
+                    console.log(`  ${chalk.bold(state.requestId)}`);
+                console.log(COVERAGE_SENTENCE);
+                if (state.status === "pending-sponsor-billing") {
+                    console.log(`\n${HELD_FOR_CARD_SENTENCE}`);
+                }
+                return;
+            }
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(rows, null, 2) + "\n");
+                return;
+            }
+            if (rows.length === 0) {
+                console.log("No one has asked this company to cover their plan.");
+                return;
+            }
+            console.log("Plan sponsorship requests:");
+            for (const r of rows)
+                console.log(renderRow(r));
+            if (rows.some((r) => r.status === "pending-sponsor-billing")) {
+                console.log(`\n${chalk.yellow("Add a card")} to start the requests you said yes to. Nothing is covered until then.`);
+            }
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    sponsor
+        .command("approve")
+        .argument("<id>", "Request id")
+        .description("Say yes — put someone's $50 plan on the company bill")
+        .option("--json", "Emit raw JSON")
+        .action(async function (id, opts) {
+        try {
+            const result = await transition(id, "approve");
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+                return;
+            }
+            if (result.status === "pending-sponsor-billing") {
+                console.log("Approved. Add a card to start this sponsorship — nothing is covered until then.");
+                if (result.addCardUrl)
+                    console.log(`  ${chalk.cyan(result.addCardUrl)}`);
+                return;
+            }
+            console.log("Approved. Their $50 plan is now on the company bill.");
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    sponsor
+        .command("decline")
+        .argument("<id>", "Request id")
+        .description("Say no to a plan sponsorship request")
+        .option("--json", "Emit raw JSON")
+        .action(async function (id, opts) {
+        try {
+            const result = await transition(id, "decline");
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+                return;
+            }
+            console.log("Declined. Their plan stays theirs to pay or reduce.");
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    sponsor
+        .command("revoke")
+        .argument("<id>", "Request id")
+        .description("End a sponsorship the company is currently paying for")
+        .option("--json", "Emit raw JSON")
+        .action(async function (id, opts) {
+        try {
+            // Revoke and decline are the SAME hq-pro route: an active row flips to
+            // declined and the plan goes back to the person. Two names here because
+            // "revoke a sponsorship you're paying for" and "decline a request you
+            // haven't answered" are different things to the admin doing them.
+            const result = await transition(id, "decline");
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+                return;
+            }
+            console.log("Ended. Their $50 plan goes back to them from the next bill.");
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    sponsor
+        .command("withdraw")
+        .argument("<id>", "Request id")
+        .description("Take back a sponsorship request you made")
+        .option("--json", "Emit raw JSON")
+        .action(async function (id, opts) {
+        try {
+            // hq-pro lets a person decline THEIR OWN plan row without being an admin
+            // (it resolves the caller's person id server-side and compares it to the
+            // row's requester), so withdraw is the same route scoped to yourself.
+            const result = await transition(id, "decline");
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+                return;
+            }
+            console.log("Withdrawn. You can pay the $50 yourself, reduce what you store, or ask another company.");
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+}
+//# sourceMappingURL=billing-sponsor.js.map

package/dist/commands/billing.d.ts

@@ -11,6 +11,9 @@
  * Subcommands:
  *   hq billing status   [--company <slug>]              — subscription + card on file
  *   hq billing checkout [--company <slug>] [--personal] — mint a card-capture link
+ *   hq billing sponsor  …                               — ask a company to cover
+ *                                                         your $50 plan, or
+ *                                                         answer such a request
  */
 import { Command } from "commander";
 export declare function registerBillingCommand(program: Command): void;

package/dist/commands/billing.js

@@ -11,12 +11,16 @@
  * Subcommands:
  *   hq billing status   [--company <slug>]              — subscription + card on file
  *   hq billing checkout [--company <slug>] [--personal] — mint a card-capture link
+ *   hq billing sponsor  …                               — ask a company to cover
+ *                                                         your $50 plan, or
+ *                                                         answer such a request
  */
 import chalk from "chalk";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
 import { mintPaymentLink } from "../utils/billing-gate.js";
 import { upgradeToTeam } from "../utils/team-upgrade.js";
+import { registerBillingSponsorCommands } from "./billing-sponsor.js";
 function fail(err) {
     console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
     process.exit(1);
@@ -126,5 +130,6 @@ export function registerBillingCommand(program) {
             fail(err);
         }
     });
+    registerBillingSponsorCommands(billing);
 }
 //# sourceMappingURL=billing.js.map

package/dist/utils/vault-api.js

@@ -320,16 +320,37 @@ async function resolveCompanyByUid(token, uid) {
     if (!res.ok) {
         raiseIfUnauthorized(res);
         const body = (await res.json().catch(() => ({})));
-        throw new Error(`Failed to resolve company '${uid}': ${body.error ?? res.statusText}`);
+        throw new Error(`Failed to resolve company '${uid}': ${formatSlugLookupReason(res, body)}`);
     }
     const data = (await res.json());
     return data.entity.uid;
 }
+/**
+ * Node's fetch (undici) often leaves `statusText` empty, and some vault
+ * error bodies send `error: ""` or omit it. `??` does not treat "" as missing,
+ * so `body.error ?? res.statusText` produced
+ * `Failed to resolve company slug '…':` with nothing after the colon
+ * (Shepherd #2306). Never return an empty reason: prefer a non-blank body
+ * error, then statusText, then `HTTP <status>`.
+ */
+function formatSlugLookupReason(res, body) {
+    const fromBody = typeof body.error === "string" ? body.error.trim() : "";
+    if (fromBody)
+        return fromBody;
+    const fromStatus = (res.statusText ?? "").trim();
+    if (fromStatus)
+        return fromStatus;
+    return `HTTP ${res.status}`;
+}
+function isTransientSlugLookupStatus(status) {
+    return status === 408 || status === 425 || status === 429 || status >= 500;
+}
 /**
  * Resolve a company slug WITHIN THE CALLER'S NAMESPACE via the server's
  * caller-scoped `/entity/check-slug/me` endpoint. Returns the caller's own
- * company uid for that slug, or `null` when the caller owns / actively belongs
- * to no company with that slug.
+ * company uid for that slug, `miss` when the caller owns / actively belongs
+ * to no company with that slug, or `transient` when the lookup itself failed
+ * (timeout, 429, 5xx) after one retry.
  *
  * This is the load-bearing fix for DEV-1742. Under hq-pro's per-user-namespace
  * model two unrelated tenants may each hold "acme", so the legacy GLOBAL
@@ -344,25 +365,63 @@ async function resolveCompanyByUid(token, uid) {
  * the same primitive hq-cloud's `context.ts` already resolves slugs through.
  */
 async function resolveSlugInCallerNamespace(token, slug) {
-    const res = await vaultApiFetch({
+    const attempt = async () => {
+        const res = await vaultApiFetch({
+            token,
+            path: "/entity/check-slug/me",
+            query: { type: "company", slug },
+            signal: AbortSignal.timeout(identityLookupTimeoutMs()),
+        });
+        if (!res.ok) {
+            raiseIfUnauthorized(res);
+            // Namespace lookup unavailable (e.g. membership table not configured →
+            // 503, or the caller has no person entity). A 401 short-circuits above
+            // because the token is bad and the global fallback would only 401 again.
+            // Transient statuses are retried once below; other non-2xx still mean
+            // "couldn't resolve here" and fall back to the global lookup.
+            // vaultApiFetch already recorded the non-2xx as a Sentry breadcrumb.
+            if (isTransientSlugLookupStatus(res.status)) {
+                return { kind: "transient" };
+            }
+            return { kind: "miss" };
+        }
+        const data = (await res.json());
+        // `available: false` carries the caller's own company holding the slug.
+        const uid = data.conflictingCompanyUid;
+        return uid ? { kind: "hit", uid } : { kind: "miss" };
+    };
+    const run = async () => {
+        try {
+            return await attempt();
+        }
+        catch (err) {
+            if (networkTransportErrorCode(err) === null)
+                throw err;
+            return { kind: "transient" };
+        }
+    };
+    const first = await run();
+    if (first.kind !== "transient")
+        return first;
+    return run();
+}
+async function fetchGlobalCompanyBySlug(token, ref) {
+    const attempt = () => vaultApiFetch({
         token,
-        path: '/entity/check-slug/me',
-        query: { type: 'company', slug },
+        path: `/entity/by-slug/company/${encodeURIComponent(ref)}`,
         signal: AbortSignal.timeout(identityLookupTimeoutMs()),
     });
-    if (!res.ok) {
-        raiseIfUnauthorized(res);
-        // Namespace lookup unavailable (e.g. membership table not configured →
-        // 503, or the caller has no person entity). A 401 short-circuits above
-        // because the token is bad and the global fallback would only 401 again;
-        // other non-2xx statuses signal "couldn't resolve here" and let the caller
-        // fall back to the global lookup. vaultApiFetch already recorded the
-        // non-2xx as a Sentry breadcrumb, so this is not a silent swallow.
-        return null;
+    try {
+        const res = await attempt();
+        if (res.ok || !isTransientSlugLookupStatus(res.status))
+            return res;
     }
-    const data = (await res.json());
-    // `available: false` carries the caller's own company holding the slug.
-    return data.conflictingCompanyUid ?? null;
+    catch (err) {
+        if (networkTransportErrorCode(err) === null)
+            throw err;
+        return attempt();
+    }
+    return attempt();
 }
 async function resolveCompanyUid(token, ref) {
     // Silent escape hatch: a `cmp_` ref is a uid, not a slug — resolve directly.
@@ -379,39 +438,25 @@ async function resolveCompanyUid(token, ref) {
     // caller's OWN company (unique within their namespace by the invariant
     // above), making a stranger's same-slug company invisible.
     //
-    // A non-2xx already degrades to the global fallback below (via `return null`).
-    // A TRANSPORT failure must degrade the SAME way, not abort the command:
-    // `resolveSlugInCallerNamespace`'s fetch is bounded by AbortSignal.timeout, so
-    // a vault gateway that accepts the connection but never answers rejects with a
-    // DOMException named `TimeoutError`. Before this catch, that rejection threw
-    // straight out of `resolveCompanyUid`, skipped the global by-slug lookup, and
-    // — being unclassified by main.ts — filed a Sentry crash report instead of an
-    // actionable connectivity message (Sentry HQ-CLI-1P / issue 7716090679).
-    // Degrade ONLY on a recognized transport failure; re-throw everything else
-    // unchanged, so a genuine hq-cli defect stays fatal and the 401 AuthError that
-    // `raiseIfUnauthorized` throws still short-circuits before any fallback.
-    let mine;
-    try {
-        mine = await resolveSlugInCallerNamespace(token, ref);
+    // A non-2xx already degrades to the global fallback below (`miss` /
+    // `transient`). A TRANSPORT failure must degrade the SAME way, not abort
+    // the command: `resolveSlugInCallerNamespace`'s fetch is bounded by
+    // AbortSignal.timeout, so a vault gateway that accepts the connection but
+    // never answers rejects with a DOMException named `TimeoutError`. That is
+    // classified as `transient` (and retried once) inside the helper; a genuine
+    // hq-cli defect still throws, and the 401 AuthError that
+    // `raiseIfUnauthorized` throws still short-circuits before any fallback
+    // (Sentry HQ-CLI-1P / issue 7716090679).
+    const mine = await resolveSlugInCallerNamespace(token, ref);
+    if (mine.kind === "hit") {
+        return mine.uid;
     }
-    catch (err) {
-        if (networkTransportErrorCode(err) === null) {
-            throw err;
-        }
-        mine = null;
-    }
-    if (mine) {
-        return mine;
-    }
-    // The caller owns / belongs to no company with this slug. Fall back to the
-    // GLOBAL by-slug lookup for the cross-company / admin resolutions that
-    // intentionally target a company the caller isn't a member of (e.g. a
-    // group-grant target). A single global match resolves cleanly.
-    const res = await vaultApiFetch({
-        token,
-        path: `/entity/by-slug/company/${encodeURIComponent(ref)}`,
-        signal: AbortSignal.timeout(identityLookupTimeoutMs()),
-    });
+    // The caller owns / belongs to no company with this slug, or the namespace
+    // lookup itself failed. Fall back to the GLOBAL by-slug lookup for the
+    // cross-company / admin resolutions that intentionally target a company the
+    // caller isn't a member of (e.g. a group-grant target). A single global
+    // match resolves cleanly.
+    const res = await fetchGlobalCompanyBySlug(token, ref);
     if (!res.ok) {
         raiseIfUnauthorized(res);
         const body = (await res.json().catch(() => ({})));
@@ -425,10 +470,19 @@ async function resolveCompanyUid(token, ref) {
                 `is in your namespace. Re-run with --company <uid> to pick one:\n` +
                 body.uids.map((u) => `  --company ${u}`).join('\n'));
         }
-        if (res.status === 404 && body.error === "Entity not found") {
+        // Only a clean namespace miss plus a global 404 is "this slug does not
+        // exist". A transient namespace failure followed by 404 is still a lookup
+        // failure — treating it as not-found sent owners to check a slug that
+        // was fine (Shepherd #2306).
+        if (res.status === 404 && mine.kind === "miss") {
             throw Object.assign(new Error(`Company slug '${ref}' was not found. Check the slug or run \`hq companies list\`.`), { expected: true });
         }
-        throw new Error(`Failed to resolve company slug '${ref}': ${body.error ?? res.statusText}`);
+        const reason = formatSlugLookupReason(res, body);
+        const retryable = mine.kind === "transient" || isTransientSlugLookupStatus(res.status);
+        const hint = retryable
+            ? " This is a temporary lookup failure, not a missing company. Retry the command."
+            : "";
+        throw new Error(`Failed to resolve company slug '${ref}': ${reason}.${hint}`);
     }
     const data = (await res.json());
     return data.entity.uid;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.123.1",
+  "version": "5.124.0",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {