@indigoai-us/hq-cli 5.150.0 → 5.151.0

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## [Unreleased]
 
+## [5.151.0] — 2026-09-23
+
+- `hq report publish` no longer fails when another app it cannot see holds the report's address. It publishes at the next free address (`<slug>-2`, then `-3`) and saves that address on the report.
+
 ## [5.150.0] — 2026-09-23
 
 ### Fixed

package/dist/commands/report.d.ts

@@ -1,5 +1,5 @@
 import { Command } from "commander";
-import { buildReportTarball, deployOrgContext, type ChannelReport, type DeployAccessPolicy, type ReportDeployment, type ReportPatch } from "../lib/report-publish.js";
+import { buildReportTarball, deployOrgContext, type ChannelReport, type DeployAccessPolicy, type ReportDeployment, type ReportPatch, ReportPublishError } from "../lib/report-publish.js";
 type ChannelRow = {
     channelId?: string;
     scope?: string;
@@ -17,7 +17,21 @@ export declare function withChannelCompany(report: ChannelReport, channels: Chan
 /** Explicit context has priority; discovery is the authenticated fallback for normal CLI use. */
 export declare function resolveReport(token: string, reportId: string, requestedChannelId?: string): Promise<ChannelReport>;
 export declare function patchReport(token: string, report: ChannelReport, patch: ReportPatchInput): Promise<ChannelReport>;
+/** hq-deploy refused the subdomain: another app, not visible to this caller, holds it. */
+export declare class SubdomainTakenError extends ReportPublishError {
+    constructor();
+}
+/**
+ * Subdomains to try, in order. The first is the report's own slug; the rest
+ * are used only when an app the caller cannot see already holds it (for
+ * example, one left by an earlier publish under a different account).
+ */
+export declare function candidateSlugs(slug: string, attempts?: number): string[];
 export declare function resolveCompanySlug(token: string, companyUid: string): Promise<string>;
+export declare function findOrCreateApp(token: string, slug: string, org: ReturnType<typeof deployOrgContext>): Promise<{
+    id: string;
+    subdomain: string;
+}>;
 export declare function deployReportStatic(token: string, input: {
     slug: string;
     files: Parameters<typeof buildReportTarball>[0];

package/dist/commands/report.js

@@ -232,10 +232,28 @@ async function deployJson(token, route, method, body, extraHeaders = {}) {
     catch {
         throw new ReportPublishError("Could not reach hq-deploy.");
     }
-    if (!res.ok)
+    if (!res.ok) {
+        const failure = await res.json().catch(() => ({}));
+        if (failure?.error?.code === "SUBDOMAIN_DUPLICATE")
+            throw new SubdomainTakenError();
         throw new ReportPublishError("hq-deploy rejected the report deployment.");
+    }
     return await res.json();
 }
+/** hq-deploy refused the subdomain: another app, not visible to this caller, holds it. */
+export class SubdomainTakenError extends ReportPublishError {
+    constructor() {
+        super("hq-deploy rejected the report deployment.");
+    }
+}
+/**
+ * Subdomains to try, in order. The first is the report's own slug; the rest
+ * are used only when an app the caller cannot see already holds it (for
+ * example, one left by an earlier publish under a different account).
+ */
+export function candidateSlugs(slug, attempts = 3) {
+    return [slug, ...Array.from({ length: attempts }, (_, i) => `${slug}-${i + 2}`)];
+}
 export async function resolveCompanySlug(token, companyUid) {
     const res = await vaultApiFetch({ token, path: `/entity/${encodeURIComponent(companyUid)}` });
     if (!res.ok)
@@ -250,12 +268,29 @@ async function orgFor(token, report) {
     const slug = report.companyUid ? await resolveCompanySlug(token, report.companyUid) : undefined;
     return deployOrgContext(report, slug);
 }
-async function findOrCreateApp(token, slug, org) {
+export async function findOrCreateApp(token, slug, org) {
     const listed = await deployJson(token, "/api/apps", "GET", undefined, org.headers);
-    const existing = Array.isArray(listed.apps)
-        ? listed.apps.find((app) => !!app && typeof app === "object" && (app.subdomain === slug || app.name === slug))
-        : undefined;
-    const app = existing ?? await deployJson(token, "/api/apps", "POST", { name: slug, type: "static" }, org.headers);
+    const apps = Array.isArray(listed.apps) ? listed.apps : [];
+    const mine = (name) => apps.find((app) => !!app && typeof app === "object" && (app.subdomain === name || app.name === name));
+    let app;
+    for (const name of candidateSlugs(slug)) {
+        const existing = mine(name);
+        if (existing) {
+            app = existing;
+            break;
+        }
+        try {
+            app = await deployJson(token, "/api/apps", "POST", { name, type: "static" }, org.headers);
+            break;
+        }
+        catch (error) {
+            if (error instanceof SubdomainTakenError)
+                continue;
+            throw error;
+        }
+    }
+    if (!app)
+        throw new ReportPublishError("Every address for this report is taken on hq-deploy.");
     const id = typeof app.id === "string" ? app.id : undefined;
     const subdomain = typeof app.subdomain === "string" ? app.subdomain : undefined;
     if (!id || !subdomain)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.150.0",
+  "version": "5.151.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {