@indigoai-us/hq-cli 5.123.2 → 5.124.0

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 ## [Unreleased]
 
+## [5.124.0] — 2026-09-20
+
+### Added
+
+- `hq billing sponsor` — ask a company to cover your $50/mo HQ Individual plan
+  from the terminal, and answer those requests if you run the company.
+  `request <company>` asks, `list` shows the queue you can answer or — if you
+  are not an admin there — your own single status for that company, and
+  `approve` / `decline` / `revoke` / `withdraw` resolve one. Pass `--company`
+  to `list` when you are asking about your own state.
+
+  Approving does not always finish the job: if the company has no card on file,
+  HQ accepts the yes but nothing is covered yet, and `approve` says so with the
+  link to add one. This is off until HQ turns it on; until then the commands
+  say it is not available yet rather than failing with a validation error.
+
 ## [5.123.2] — 2026-09-19
 
 ### Fixed

package/dist/command-catalog.generated.d.ts

@@ -4850,6 +4850,110 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Emit the Checkout URL as JSON";
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "sponsor";
+        readonly description: "Ask a company to cover your $50 plan, or answer a request";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] [command]";
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [{
+            readonly name: "request";
+            readonly description: "Ask a company to cover your $50 HQ plan";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <company>";
+            readonly arguments: readonly [{
+                readonly name: "company";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "list";
+            readonly description: "Show sponsorship requests — the company's queue, or your own";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "Company slug (resolves to companyUid)";
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "approve";
+            readonly description: "Say yes — put someone's $50 plan on the company bill";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <id>";
+            readonly arguments: readonly [{
+                readonly name: "id";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "decline";
+            readonly description: "Say no to a plan sponsorship request";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <id>";
+            readonly arguments: readonly [{
+                readonly name: "id";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "revoke";
+            readonly description: "End a sponsorship the company is currently paying for";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <id>";
+            readonly arguments: readonly [{
+                readonly name: "id";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "withdraw";
+            readonly description: "Take back a sponsorship request you made";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <id>";
+            readonly arguments: readonly [{
+                readonly name: "id";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Emit raw JSON";
+            }];
+            readonly subcommands: readonly [];
+        }];
     }];
 }, {
     readonly name: "core";

package/dist/command-catalog.generated.js

@@ -6268,6 +6268,141 @@ export const COMMAND_CATALOG = [
                     }
                 ],
                 "subcommands": []
+            },
+            {
+                "name": "sponsor",
+                "description": "Ask a company to cover your $50 plan, or answer a request",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] [command]",
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "request",
+                        "description": "Ask a company to cover your $50 HQ plan",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <company>",
+                        "arguments": [
+                            {
+                                "name": "company",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "list",
+                        "description": "Show sponsorship requests — the company's queue, or your own",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options]",
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--company <slug>",
+                                "description": "Company slug (resolves to companyUid)"
+                            },
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "approve",
+                        "description": "Say yes — put someone's $50 plan on the company bill",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <id>",
+                        "arguments": [
+                            {
+                                "name": "id",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "decline",
+                        "description": "Say no to a plan sponsorship request",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <id>",
+                        "arguments": [
+                            {
+                                "name": "id",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "revoke",
+                        "description": "End a sponsorship the company is currently paying for",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <id>",
+                        "arguments": [
+                            {
+                                "name": "id",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "withdraw",
+                        "description": "Take back a sponsorship request you made",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <id>",
+                        "arguments": [
+                            {
+                                "name": "id",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Emit raw JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    }
+                ]
             }
         ]
     },

package/dist/commands/billing-sponsor.d.ts

@@ -0,0 +1,83 @@
+/**
+ * `hq billing sponsor` — the individual-pull half of plan sponsorship, from the
+ * terminal ("ask a company to sponsor me", hq-pro #3609).
+ *
+ * A person who is over a personal limit has exactly three ways out: pay $50
+ * themselves, reduce what they store, or ask a company to cover the $50 plan
+ * line. This command is the third one, plus the admin side that answers it.
+ *
+ *   hq billing sponsor request <company>   — ask that company to cover my plan
+ *   hq billing sponsor list                — the queue (admins), or my own
+ *                                            single status (everyone else)
+ *   hq billing sponsor approve <id>        — admin: say yes
+ *   hq billing sponsor decline <id>        — admin: say no
+ *   hq billing sponsor revoke  <id>        — admin: end an active sponsorship
+ *   hq billing sponsor withdraw <id>       — me: take back my own request
+ *
+ * Every subcommand talks to the SAME hq-pro routes the console uses
+ * (`/v1/billing/sponsorship/...`). hq-pro is the authoritative gate on all of
+ * them: it resolves the caller's person id and the company's admin set
+ * server-side, so nothing here is trusted from the client.
+ *
+ * FEATURE SWITCH. The `plan` request kind only exists while hq-pro's
+ * `PLAN_SPONSORSHIP_REQUESTS_ENABLED` switch is on. With the switch off the
+ * backend does not recognise `plan` and answers 400 `MISSING_FIELDS` — which
+ * would read as "you typed something wrong". We translate that one case into a
+ * plain "not available yet" line so a person never sees a validation error for
+ * a feature that simply is not turned on.
+ */
+import { Command } from "commander";
+/** The request kind this command files. Matches hq-pro's contract. */
+export declare const PLAN_RESOURCE: "plan";
+/** What a person is told when hq-pro's plan-sponsorship switch is off. */
+export declare const FEATURE_OFF_MESSAGE = "Asking a company to sponsor your plan isn't available yet.";
+/** What v1 sponsorship covers, stated wherever a person confirms or reads it. */
+export declare const COVERAGE_SENTENCE = "Your company pays your $50 plan. Storage above your plan's allowance is still yours.";
+/** What a person is told while an approval waits on the sponsor's card. */
+export declare const HELD_FOR_CARD_SENTENCE = "Your company said yes and is adding a card. Your limits still apply until then.";
+/** One request row as hq-pro persists and returns it. */
+export interface SponsorshipRequestRecord {
+    requestId: string;
+    companyUid: string;
+    requestedBy: string;
+    resourceId?: string;
+    resource: "outpost" | "agent" | "plan";
+    status: "pending" | "active" | "declined" | "pending-sponsor-billing" | "expired";
+    payer: "person" | "company";
+    requestedAt: string;
+    updatedAt: string;
+}
+/** An hq-pro error body: `{ error, code }` on every non-2xx these routes send. */
+interface ApiErrorBody {
+    error?: string;
+    message?: string;
+    code?: string;
+}
+/**
+ * Turn an hq-pro non-2xx into one plain sentence.
+ *
+ * The switch-off 400 is the important translation: with the feature off,
+ * `plan` is an unrecognised resource kind and the generic body reads
+ * "companyUid and resource ('outpost'|'agent') are required", which tells a
+ * person nothing true about what happened.
+ */
+export declare function messageForError(status: number, body: ApiErrorBody): string;
+/**
+ * The member self-read's shape. hq-pro answers
+ * `GET /v1/billing/sponsorship/mine?companyUid=…&resource=…` with ONE status —
+ * not a list — because the route is a self-scoped "am I covered" question.
+ * `active` is true only for an approved COMPANY-paid row; everything else
+ * (never asked, still pending, declined) comes back `active: false` with null
+ * fields.
+ */
+export interface SponsorshipSelfState {
+    active: boolean;
+    status: string | null;
+    payer: "person" | "company" | null;
+    requestId: string | null;
+}
+/** Plain label for a request status. Never shows the raw enum. */
+export declare function statusLabel(status: string): string;
+export declare function registerBillingSponsorCommands(billing: Command): void;
+export {};
+//# sourceMappingURL=billing-sponsor.d.ts.map

package/dist/commands/billing-sponsor.js

@@ -0,0 +1,344 @@
+/**
+ * `hq billing sponsor` — the individual-pull half of plan sponsorship, from the
+ * terminal ("ask a company to sponsor me", hq-pro #3609).
+ *
+ * A person who is over a personal limit has exactly three ways out: pay $50
+ * themselves, reduce what they store, or ask a company to cover the $50 plan
+ * line. This command is the third one, plus the admin side that answers it.
+ *
+ *   hq billing sponsor request <company>   — ask that company to cover my plan
+ *   hq billing sponsor list                — the queue (admins), or my own
+ *                                            single status (everyone else)
+ *   hq billing sponsor approve <id>        — admin: say yes
+ *   hq billing sponsor decline <id>        — admin: say no
+ *   hq billing sponsor revoke  <id>        — admin: end an active sponsorship
+ *   hq billing sponsor withdraw <id>       — me: take back my own request
+ *
+ * Every subcommand talks to the SAME hq-pro routes the console uses
+ * (`/v1/billing/sponsorship/...`). hq-pro is the authoritative gate on all of
+ * them: it resolves the caller's person id and the company's admin set
+ * server-side, so nothing here is trusted from the client.
+ *
+ * FEATURE SWITCH. The `plan` request kind only exists while hq-pro's
+ * `PLAN_SPONSORSHIP_REQUESTS_ENABLED` switch is on. With the switch off the
+ * backend does not recognise `plan` and answers 400 `MISSING_FIELDS` — which
+ * would read as "you typed something wrong". We translate that one case into a
+ * plain "not available yet" line so a person never sees a validation error for
+ * a feature that simply is not turned on.
+ */
+import chalk from "chalk";
+import { ensureCognitoToken } from "../utils/cognito-session.js";
+import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
+/** The request kind this command files. Matches hq-pro's contract. */
+export const PLAN_RESOURCE = "plan";
+/** What a person is told when hq-pro's plan-sponsorship switch is off. */
+export const FEATURE_OFF_MESSAGE = "Asking a company to sponsor your plan isn't available yet.";
+/** What v1 sponsorship covers, stated wherever a person confirms or reads it. */
+export const COVERAGE_SENTENCE = "Your company pays your $50 plan. Storage above your plan's allowance is still yours.";
+/** What a person is told while an approval waits on the sponsor's card. */
+export const HELD_FOR_CARD_SENTENCE = "Your company said yes and is adding a card. Your limits still apply until then.";
+/**
+ * An error we already have plain wording for. `expected` marks it as a normal
+ * outcome (a decline, a rate limit) rather than a fault, matching the flag the
+ * rest of the CLI uses to keep Sentry quiet.
+ */
+class SponsorError extends Error {
+    expected = true;
+}
+function fail(err) {
+    console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
+    process.exit(1);
+}
+/**
+ * Turn an hq-pro non-2xx into one plain sentence.
+ *
+ * The switch-off 400 is the important translation: with the feature off,
+ * `plan` is an unrecognised resource kind and the generic body reads
+ * "companyUid and resource ('outpost'|'agent') are required", which tells a
+ * person nothing true about what happened.
+ */
+export function messageForError(status, body) {
+    const code = body.code;
+    if (status === 400 && code === "MISSING_FIELDS")
+        return FEATURE_OFF_MESSAGE;
+    if (status === 401)
+        return "Your sign-in has expired. Run `hq login` and try again.";
+    if (status === 403 && code === "SPONSOR_PLAN_REQUIRED") {
+        return "That company's plan can't cover an individual plan. Only HQ Workforce and Enterprise companies can.";
+    }
+    if (status === 403) {
+        return "You're not allowed to do that. Only an owner or admin of the company can answer a sponsorship request.";
+    }
+    if (status === 404)
+        return "No sponsorship request with that id.";
+    if (status === 409 && code === "DUPLICATE_PENDING_REQUEST") {
+        return "You've already asked that company. They just need to answer.";
+    }
+    if (status === 429 && code === "PLAN_REQUEST_RATE_LIMITED") {
+        return "You asked that company in the last 24 hours. Give them a day before asking again.";
+    }
+    return body.error ?? body.message ?? `Request failed (${status}).`;
+}
+/** Call an hq-pro sponsorship route, or throw a sentence a person can read. */
+async function callApi(token, path, init = {}) {
+    const res = await vaultApiFetch({ token, path, ...init });
+    if (!res.ok) {
+        const body = (await res.json().catch(() => ({})));
+        throw new SponsorError(messageForError(res.status, body));
+    }
+    return (await res.json());
+}
+/**
+ * Read the caller's OWN plan-sponsorship state for one company.
+ *
+ * Two non-2xx cases mean the same thing to a person and must NOT fall through
+ * to {@link messageForError}: a 400 `MISSING_FIELDS` (hq-pro does not accept the
+ * `plan` resource kind yet) and a 404 (an hq-pro that predates this route at
+ * all). Both are "the feature is not on", never "no request with that id" —
+ * there is no id in a list command for that sentence to be about.
+ */
+async function readSelfState(token, companyUid) {
+    const res = await vaultApiFetch({
+        token,
+        path: "/v1/billing/sponsorship/mine",
+        query: { companyUid, resource: PLAN_RESOURCE },
+    });
+    if (!res.ok) {
+        const body = (await res.json().catch(() => ({})));
+        if (res.status === 404 || (res.status === 400 && body.code === "MISSING_FIELDS")) {
+            throw new SponsorError(FEATURE_OFF_MESSAGE);
+        }
+        throw new SponsorError(messageForError(res.status, body));
+    }
+    return (await res.json());
+}
+/** Plain label for a request status. Never shows the raw enum. */
+export function statusLabel(status) {
+    switch (status) {
+        case "pending":
+            return "Waiting for an answer";
+        case "pending-sponsor-billing":
+            return "Said yes — waiting on their card";
+        case "active":
+            return "Covered by the company";
+        case "declined":
+            return "Not covered";
+        case "expired":
+            return "Expired";
+        default:
+            return status;
+    }
+}
+/** One line per request, in the same column order everywhere. */
+function renderRow(r) {
+    const when = r.requestedAt.slice(0, 10);
+    return `  ${chalk.bold(r.requestId)}  ${statusLabel(r.status).padEnd(32)} asked ${when}`;
+}
+/** Only plan rows belong on this surface; outpost/agent have their own. */
+function planRowsOf(rows) {
+    return rows.filter((r) => r.resource === PLAN_RESOURCE);
+}
+/** Shared body of approve / decline / revoke / withdraw. */
+async function transition(requestId, op) {
+    const token = await ensureCognitoToken();
+    const data = await callApi(token, `/v1/billing/sponsorship/request/${op}`, {
+        method: "POST",
+        body: { requestId },
+    });
+    return { ...data.request, code: data.code, addCardUrl: data.addCardUrl };
+}
+export function registerBillingSponsorCommands(billing) {
+    const sponsor = billing
+        .command("sponsor")
+        .description("Ask a company to cover your $50 plan, or answer a request");
+    sponsor
+        .command("request")
+        .argument("<company>", "Company slug or uid to ask")
+        .description("Ask a company to cover your $50 HQ plan")
+        .option("--json", "Emit raw JSON")
+        .action(async function (company, opts) {
+        try {
+            const token = await ensureCognitoToken();
+            const companyUid = await getCompanyUid(token, company);
+            const data = await callApi(token, "/v1/billing/sponsorship/request", { method: "POST", body: { companyUid, resource: PLAN_RESOURCE } });
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(data.request, null, 2) + "\n");
+                return;
+            }
+            console.log(`Asked ${company} to cover your $50 HQ plan.`);
+            console.log(COVERAGE_SENTENCE);
+            console.log(`An owner or admin there answers next. Check with \`hq billing sponsor list\`.`);
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    sponsor
+        .command("list")
+        .description("Show sponsorship requests — the company's queue, or your own")
+        .option("--company <slug>", "Company slug (resolves to companyUid)")
+        .option("--json", "Emit raw JSON")
+        .action(async function (opts) {
+        try {
+            const token = await ensureCognitoToken();
+            // A company the caller cannot resolve is not fatal here. The person
+            // this feature is for often belongs to no company at all, and they
+            // still need to be told what to do next.
+            const named = opts.company ?? billing.opts().company;
+            const companyUid = await getCompanyUid(token, named).catch(() => null);
+            // The admin queue is the richer view. A non-admin is refused it, so we
+            // fall back to the member SELF-READ — a different route with a
+            // different answer: hq-pro returns ONE status for that person and that
+            // company, not a list. Rendering it as a list (or reusing the list's
+            // "not found" wording) is what made this read wrong.
+            let rows = null;
+            if (companyUid) {
+                try {
+                    const data = await callApi(token, "/v1/billing/sponsorship/requests", { query: { companyUid } });
+                    rows = planRowsOf(data.requests);
+                }
+                catch (err) {
+                    if (!(err instanceof SponsorError))
+                        throw err;
+                }
+            }
+            if (rows === null) {
+                // The self-read is company-scoped by contract, so without a company
+                // there is nothing to ask for. Say which flag fixes it.
+                if (!companyUid) {
+                    const line = named
+                        ? `Couldn't find a company called ${named}.`
+                        : "Name the company you asked: `hq billing sponsor list --company <slug>`.";
+                    if (opts.json) {
+                        process.stdout.write(JSON.stringify({ error: line }, null, 2) + "\n");
+                        return;
+                    }
+                    console.log(line);
+                    return;
+                }
+                const state = await readSelfState(token, companyUid);
+                if (opts.json) {
+                    process.stdout.write(JSON.stringify(state, null, 2) + "\n");
+                    return;
+                }
+                const where = named ?? "that company";
+                if (!state.active) {
+                    console.log(`No company is covering your $50 HQ plan right now.`);
+                    console.log(`If you asked ${where}, they haven't answered yet — an owner or admin there answers next.`);
+                    return;
+                }
+                console.log(`Your $50 HQ plan: ${statusLabel(state.status ?? "active")}`);
+                if (state.requestId)
+                    console.log(`  ${chalk.bold(state.requestId)}`);
+                console.log(COVERAGE_SENTENCE);
+                if (state.status === "pending-sponsor-billing") {
+                    console.log(`\n${HELD_FOR_CARD_SENTENCE}`);
+                }
+                return;
+            }
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(rows, null, 2) + "\n");
+                return;
+            }
+            if (rows.length === 0) {
+                console.log("No one has asked this company to cover their plan.");
+                return;
+            }
+            console.log("Plan sponsorship requests:");
+            for (const r of rows)
+                console.log(renderRow(r));
+            if (rows.some((r) => r.status === "pending-sponsor-billing")) {
+                console.log(`\n${chalk.yellow("Add a card")} to start the requests you said yes to. Nothing is covered until then.`);
+            }
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    sponsor
+        .command("approve")
+        .argument("<id>", "Request id")
+        .description("Say yes — put someone's $50 plan on the company bill")
+        .option("--json", "Emit raw JSON")
+        .action(async function (id, opts) {
+        try {
+            const result = await transition(id, "approve");
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+                return;
+            }
+            if (result.status === "pending-sponsor-billing") {
+                console.log("Approved. Add a card to start this sponsorship — nothing is covered until then.");
+                if (result.addCardUrl)
+                    console.log(`  ${chalk.cyan(result.addCardUrl)}`);
+                return;
+            }
+            console.log("Approved. Their $50 plan is now on the company bill.");
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    sponsor
+        .command("decline")
+        .argument("<id>", "Request id")
+        .description("Say no to a plan sponsorship request")
+        .option("--json", "Emit raw JSON")
+        .action(async function (id, opts) {
+        try {
+            const result = await transition(id, "decline");
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+                return;
+            }
+            console.log("Declined. Their plan stays theirs to pay or reduce.");
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    sponsor
+        .command("revoke")
+        .argument("<id>", "Request id")
+        .description("End a sponsorship the company is currently paying for")
+        .option("--json", "Emit raw JSON")
+        .action(async function (id, opts) {
+        try {
+            // Revoke and decline are the SAME hq-pro route: an active row flips to
+            // declined and the plan goes back to the person. Two names here because
+            // "revoke a sponsorship you're paying for" and "decline a request you
+            // haven't answered" are different things to the admin doing them.
+            const result = await transition(id, "decline");
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+                return;
+            }
+            console.log("Ended. Their $50 plan goes back to them from the next bill.");
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+    sponsor
+        .command("withdraw")
+        .argument("<id>", "Request id")
+        .description("Take back a sponsorship request you made")
+        .option("--json", "Emit raw JSON")
+        .action(async function (id, opts) {
+        try {
+            // hq-pro lets a person decline THEIR OWN plan row without being an admin
+            // (it resolves the caller's person id server-side and compares it to the
+            // row's requester), so withdraw is the same route scoped to yourself.
+            const result = await transition(id, "decline");
+            if (opts.json) {
+                process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+                return;
+            }
+            console.log("Withdrawn. You can pay the $50 yourself, reduce what you store, or ask another company.");
+        }
+        catch (err) {
+            fail(err);
+        }
+    });
+}
+//# sourceMappingURL=billing-sponsor.js.map

package/dist/commands/billing.d.ts

@@ -11,6 +11,9 @@
  * Subcommands:
  *   hq billing status   [--company <slug>]              — subscription + card on file
  *   hq billing checkout [--company <slug>] [--personal] — mint a card-capture link
+ *   hq billing sponsor  …                               — ask a company to cover
+ *                                                         your $50 plan, or
+ *                                                         answer such a request
  */
 import { Command } from "commander";
 export declare function registerBillingCommand(program: Command): void;

package/dist/commands/billing.js

@@ -11,12 +11,16 @@
  * Subcommands:
  *   hq billing status   [--company <slug>]              — subscription + card on file
  *   hq billing checkout [--company <slug>] [--personal] — mint a card-capture link
+ *   hq billing sponsor  …                               — ask a company to cover
+ *                                                         your $50 plan, or
+ *                                                         answer such a request
  */
 import chalk from "chalk";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
 import { mintPaymentLink } from "../utils/billing-gate.js";
 import { upgradeToTeam } from "../utils/team-upgrade.js";
+import { registerBillingSponsorCommands } from "./billing-sponsor.js";
 function fail(err) {
     console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
     process.exit(1);
@@ -126,5 +130,6 @@ export function registerBillingCommand(program) {
             fail(err);
         }
     });
+    registerBillingSponsorCommands(billing);
 }
 //# sourceMappingURL=billing.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.123.2",
+  "version": "5.124.0",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {