@indigoai-us/hq-cli 5.127.0 → 5.128.0

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 ## [Unreleased]
 
+## [5.128.0] — 2026-09-22
+
+### Fixed
+
+- Expected hook-timeout warnings are counted as Sentry metrics, so a slow hook
+  does not create its own Sentry issue. Genuine timeouts use stable grouping.
+
 ## [5.127.0] — 2026-09-22
 
 ### Added

package/dist/lib/core-utils/sentry-report.d.ts

@@ -12,6 +12,7 @@
  * than truncated. Unknown scalar metadata is dropped instead: the allowlist,
  * not a caller version match, determines what may leave the machine.
  */
+import * as Sentry from "@sentry/node";
 import type { CaptureContext, SeverityLevel } from "@sentry/node";
 export declare const DEFAULT_SENTRY_REPORT_TIMEOUT_MS = 750;
 export declare const MAX_SENTRY_REPORT_TIMEOUT_MS = 5000;
@@ -41,6 +42,7 @@ export type SentryReportOptions = {
 export type SentryReportDependencies = {
     sentry: {
         captureMessage: (message: string, context?: CaptureContext | SeverityLevel) => string;
+        metrics: Pick<typeof Sentry.metrics, "count">;
         flush: (timeout?: number) => PromiseLike<boolean>;
     };
     stdout: Pick<NodeJS.WriteStream, "write">;

package/dist/lib/core-utils/sentry-report.js

@@ -29,6 +29,9 @@ const SENTRY_REPORT_LEVELS = new Set([
     "info",
     "debug",
 ]);
+const HOOK_TIMEOUT_WARNING_TYPE = "hook_timeout_warning";
+const HOOK_TIMEOUT_WARNING_METRIC = "hq.hook_timeout_warning";
+const HOOK_TIMEOUT_EXCEEDED_FINGERPRINT = "hook-timeout-exceeded";
 /**
  * The only hook diagnostics that can be attached as metadata. The list omits
  * command text, prompts, payloads, company names, and repositories. `hook_path`
@@ -182,21 +185,43 @@ function resolveTimeout(timeoutMs) {
         return null;
     return timeout;
 }
-function sentryEnvelope(event) {
+function sentryEnvelope(event, overrides) {
     return {
-        level: event.level,
-        fingerprint: [event.fingerprint],
+        level: overrides?.level ?? event.level,
+        fingerprint: overrides?.fingerprint ?? [event.fingerprint],
         tags: { sentry_event_type: event.type },
         extra: event.metadata,
     };
 }
 /** Build the same scrubbed event projection that the live SDK path uses. */
-function scrubbedSentryEnvelope(event) {
+function scrubbedSentryEnvelope(event, overrides) {
     return beforeSend({
         message: event.message,
-        ...sentryEnvelope(event),
+        ...sentryEnvelope(event, overrides),
     }, {});
 }
+/**
+ * The watchdog's relative threshold fires before the declared timeout and
+ * clamps remaining_ms at zero, so its real warnings stay on the metric path.
+ * Keep a defensive branch for a genuine exceeded payload from another
+ * producer without restoring per-hook grouping.
+ */
+function hookTimeoutExceededOverrides(event) {
+    if (event.type !== HOOK_TIMEOUT_WARNING_TYPE)
+        return undefined;
+    const elapsedMs = event.metadata.elapsed_ms;
+    const declaredTimeoutMs = event.metadata.declared_timeout_ms;
+    if (typeof elapsedMs !== "number" ||
+        typeof declaredTimeoutMs !== "number" ||
+        elapsedMs < declaredTimeoutMs) {
+        return undefined;
+    }
+    const hookEvent = typeof event.metadata.hook_event === "string" ? event.metadata.hook_event : "unknown";
+    return {
+        level: "warning",
+        fingerprint: [HOOK_TIMEOUT_EXCEEDED_FINGERPRINT, hookEvent],
+    };
+}
 /**
  * Resolve true only when the local transport queue drains within the budget.
  * This does not confirm that the ingest service accepted the event.
@@ -234,13 +259,28 @@ export async function reportSentryEvent(stdin, options = {}, dependencies = defa
         const noun = result.droppedMetadataKeys === 1 ? "key" : "keys";
         dependencies.stderr.write(`Dropped ${result.droppedMetadataKeys} unsupported Sentry report metadata ${noun}.\n`);
     }
-    const envelope = sentryEnvelope(result.event);
+    const overrides = hookTimeoutExceededOverrides(result.event);
     if (options.dryRun) {
-        const scrubbed = scrubbedSentryEnvelope(result.event);
+        const scrubbed = scrubbedSentryEnvelope(result.event, overrides);
         if (scrubbed)
             dependencies.stdout.write(`${JSON.stringify(scrubbed)}\n`);
         return result;
     }
+    if (result.event.type === HOOK_TIMEOUT_WARNING_TYPE && !overrides) {
+        try {
+            dependencies.sentry.metrics.count(HOOK_TIMEOUT_WARNING_METRIC, 1, {
+                attributes: result.event.metadata,
+            });
+            if (await flushWithin(dependencies.sentry, timeoutMs))
+                return result;
+        }
+        catch {
+            // Report failure below without exposing event fields or transport details.
+        }
+        dependencies.stderr.write("Sentry report failed.\n");
+        return invalidInput();
+    }
+    const envelope = sentryEnvelope(result.event, overrides);
     try {
         dependencies.sentry.captureMessage(result.event.message, envelope);
         if (await flushWithin(dependencies.sentry, timeoutMs))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.127.0",
+  "version": "5.128.0",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {