@indigoai-us/hq-cli 5.128.0 → 5.130.0

package/CHANGELOG.md

@@ -2,6 +2,27 @@
 
 ## [Unreleased]
 
+## [5.130.0] — 2026-09-22
+
+### Fixed
+
+- Hook-timeout reports remain visible as warning events with stable grouping and
+  diagnostic tags. Repeated reports are rate-limited while the next capture
+  records the suppressed count.
+
+## [5.129.0] — 2026-09-22
+
+### Added
+
+- `hq report` publishes a channel report folder to a fixed hq-deploy slug,
+  injects a strict Content-Security-Policy, and writes the run back onto the
+  report record. The same command group covers draft publish, promote,
+  discard-draft, access, adopt (install the bot's own job), and decommission.
+
+- `hq report templates --json` lists the shipped report templates
+  (`daily-digest`, `blank`). The cloud job prompt is the `update-report`
+  runbook stored in `templates/runbooks/update-report.md`.
+
 ## [5.128.0] — 2026-09-22
 
 ### Fixed

package/dist/command-catalog.generated.d.ts

@@ -7622,5 +7622,174 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly subcommands: readonly [];
         }];
     }];
+}, {
+    readonly name: "report";
+    readonly description: "Publish and manage a channel report owned by this bot.";
+    readonly aliases: readonly [];
+    readonly hidden: false;
+    readonly usage: "[options] [command]";
+    readonly arguments: readonly [];
+    readonly options: readonly [];
+    readonly subcommands: readonly [{
+        readonly name: "get";
+        readonly description: "";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <reportId>";
+        readonly arguments: readonly [{
+            readonly name: "reportId";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "";
+        }, {
+            readonly flags: "--channel <channelId>";
+            readonly description: "report channel context (or set HQ_REPORT_CHANNEL_ID)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "publish";
+        readonly description: "";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <reportId>";
+        readonly arguments: readonly [{
+            readonly name: "reportId";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--dir <path>";
+            readonly description: "";
+        }, {
+            readonly flags: "--draft";
+            readonly description: "";
+        }, {
+            readonly flags: "--json";
+            readonly description: "";
+        }, {
+            readonly flags: "--channel <channelId>";
+            readonly description: "report channel context (or set HQ_REPORT_CHANNEL_ID)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "promote";
+        readonly description: "";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <reportId>";
+        readonly arguments: readonly [{
+            readonly name: "reportId";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--dir <path>";
+            readonly description: "report folder; defaults to <workerDir>/reports/<reportId>";
+        }, {
+            readonly flags: "--json";
+            readonly description: "";
+        }, {
+            readonly flags: "--channel <channelId>";
+            readonly description: "report channel context (or set HQ_REPORT_CHANNEL_ID)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "discard-draft";
+        readonly description: "";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <reportId>";
+        readonly arguments: readonly [{
+            readonly name: "reportId";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "";
+        }, {
+            readonly flags: "--channel <channelId>";
+            readonly description: "report channel context (or set HQ_REPORT_CHANNEL_ID)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "access";
+        readonly description: "";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <reportId>";
+        readonly arguments: readonly [{
+            readonly name: "reportId";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--mode <mode>";
+            readonly description: "company|selected|password|public";
+        }, {
+            readonly flags: "--password <password>";
+            readonly description: "";
+        }, {
+            readonly flags: "--json";
+            readonly description: "";
+        }, {
+            readonly flags: "--channel <channelId>";
+            readonly description: "report channel context (or set HQ_REPORT_CHANNEL_ID)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "decommission";
+        readonly description: "";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <reportId>";
+        readonly arguments: readonly [{
+            readonly name: "reportId";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "";
+        }, {
+            readonly flags: "--channel <channelId>";
+            readonly description: "report channel context (or set HQ_REPORT_CHANNEL_ID)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "adopt";
+        readonly description: "";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] <reportId>";
+        readonly arguments: readonly [{
+            readonly name: "reportId";
+            readonly required: true;
+            readonly variadic: false;
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "";
+        }, {
+            readonly flags: "--channel <channelId>";
+            readonly description: "report channel context (or set HQ_REPORT_CHANNEL_ID)";
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "templates";
+        readonly description: "";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options]";
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "";
+        }];
+        readonly subcommands: readonly [];
+    }];
 }];
 //# sourceMappingURL=command-catalog.generated.d.ts.map

package/dist/command-catalog.generated.js

@@ -9860,6 +9860,227 @@ export const COMMAND_CATALOG = [
                 ]
             }
         ]
+    },
+    {
+        "name": "report",
+        "description": "Publish and manage a channel report owned by this bot.",
+        "aliases": [],
+        "hidden": false,
+        "usage": "[options] [command]",
+        "arguments": [],
+        "options": [],
+        "subcommands": [
+            {
+                "name": "get",
+                "description": "",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] <reportId>",
+                "arguments": [
+                    {
+                        "name": "reportId",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": ""
+                    },
+                    {
+                        "flags": "--channel <channelId>",
+                        "description": "report channel context (or set HQ_REPORT_CHANNEL_ID)"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "publish",
+                "description": "",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] <reportId>",
+                "arguments": [
+                    {
+                        "name": "reportId",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--dir <path>",
+                        "description": ""
+                    },
+                    {
+                        "flags": "--draft",
+                        "description": ""
+                    },
+                    {
+                        "flags": "--json",
+                        "description": ""
+                    },
+                    {
+                        "flags": "--channel <channelId>",
+                        "description": "report channel context (or set HQ_REPORT_CHANNEL_ID)"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "promote",
+                "description": "",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] <reportId>",
+                "arguments": [
+                    {
+                        "name": "reportId",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--dir <path>",
+                        "description": "report folder; defaults to <workerDir>/reports/<reportId>"
+                    },
+                    {
+                        "flags": "--json",
+                        "description": ""
+                    },
+                    {
+                        "flags": "--channel <channelId>",
+                        "description": "report channel context (or set HQ_REPORT_CHANNEL_ID)"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "discard-draft",
+                "description": "",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] <reportId>",
+                "arguments": [
+                    {
+                        "name": "reportId",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": ""
+                    },
+                    {
+                        "flags": "--channel <channelId>",
+                        "description": "report channel context (or set HQ_REPORT_CHANNEL_ID)"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "access",
+                "description": "",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] <reportId>",
+                "arguments": [
+                    {
+                        "name": "reportId",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--mode <mode>",
+                        "description": "company|selected|password|public"
+                    },
+                    {
+                        "flags": "--password <password>",
+                        "description": ""
+                    },
+                    {
+                        "flags": "--json",
+                        "description": ""
+                    },
+                    {
+                        "flags": "--channel <channelId>",
+                        "description": "report channel context (or set HQ_REPORT_CHANNEL_ID)"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "decommission",
+                "description": "",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] <reportId>",
+                "arguments": [
+                    {
+                        "name": "reportId",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": ""
+                    },
+                    {
+                        "flags": "--channel <channelId>",
+                        "description": "report channel context (or set HQ_REPORT_CHANNEL_ID)"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "adopt",
+                "description": "",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] <reportId>",
+                "arguments": [
+                    {
+                        "name": "reportId",
+                        "required": true,
+                        "variadic": false
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": ""
+                    },
+                    {
+                        "flags": "--channel <channelId>",
+                        "description": "report channel context (or set HQ_REPORT_CHANNEL_ID)"
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "templates",
+                "description": "",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options]",
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": ""
+                    }
+                ],
+                "subcommands": []
+            }
+        ]
     }
 ];
 //# sourceMappingURL=command-catalog.generated.js.map

package/dist/command-registration-plan.d.ts

@@ -413,6 +413,12 @@ export declare const REGISTRATION_PLAN: readonly [{
     readonly parent: "program";
     readonly module: "./commands/bot.js";
     readonly exportName: "registerBotCommand";
+}, {
+    readonly type: "registrar";
+    readonly root: "report";
+    readonly parent: "program";
+    readonly module: "./commands/report.js";
+    readonly exportName: "registerReportCommand";
 }];
 export declare function registerAllCommands(program: Command): Promise<void>;
 export declare function registerCommandRoot(program: Command, root: string): Promise<boolean>;

package/dist/command-registration-plan.js

@@ -71,6 +71,7 @@ export const REGISTRATION_PLAN = [
     { type: "registrar", root: "mesh", parent: "program", module: "./commands/mesh.js", exportName: "registerMeshCommand" },
     { type: "registrar", root: "lanes", parent: "program", module: "./commands/lanes.js", exportName: "registerLanesCommand", hidden: true },
     { type: "registrar", root: "bot", parent: "program", module: "./commands/bot.js", exportName: "registerBotCommand" },
+    { type: "registrar", root: "report", parent: "program", module: "./commands/report.js", exportName: "registerReportCommand" },
 ];
 async function executePlan(program, steps) {
     const parents = new Map([["program", program]]);

package/dist/commands/core.js

@@ -483,7 +483,13 @@ export function registerCoreCommands(program) {
         .action(async (options) => {
         const stdin = await readSentryReportStdin(process.stdin);
         const timeoutMs = options.timeoutMs === undefined ? undefined : Number(options.timeoutMs);
-        const result = await reportSentryEvent(stdin ?? "", { dryRun: options.dryRun, timeoutMs });
+        const scope = core.opts();
+        const hqRoot = scope.hqRoot ? resolveLiveRoot({ hqRoot: scope.hqRoot }) : undefined;
+        const result = await reportSentryEvent(stdin ?? "", {
+            dryRun: options.dryRun,
+            timeoutMs,
+            hqRoot,
+        });
         if (result.code !== 0)
             process.exitCode = result.code;
     });

package/dist/commands/report.d.ts

@@ -0,0 +1,16 @@
+/** `hq report` — safe channel-report lifecycle commands for bot runbooks. */
+import { Command } from "commander";
+import { buildReportTarball, deployOrgContext, type ChannelReport, type DeployAccessPolicy, type ReportDeployment, type ReportPatch } from "../lib/report-publish.js";
+/** Explicit context has priority; discovery is the authenticated fallback for normal CLI use. */
+export declare function resolveReport(token: string, reportId: string, requestedChannelId?: string): Promise<ChannelReport>;
+export declare function patchReport(token: string, report: ChannelReport, patch: ReportPatch): Promise<ChannelReport>;
+export declare function resolveCompanySlug(token: string, companyUid: string): Promise<string>;
+export declare function deployReportStatic(token: string, input: {
+    slug: string;
+    files: Parameters<typeof buildReportTarball>[0];
+    access: DeployAccessPolicy;
+    org: ReturnType<typeof deployOrgContext>;
+}): Promise<ReportDeployment>;
+export declare function registerReportCommand(program: Command): void;
+export declare function runReportCommand(action: () => Promise<void>): Promise<void>;
+//# sourceMappingURL=report.d.ts.map