@indigoai-us/hq-cli 5.190.0 → 5.191.0

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [5.191.0] — 2026-09-25
+
+### Fixed
+
+- `hq agents provision` now rejects an invalid `--slug` before sending the agent create request.
+
 ## [5.190.0] — 2026-09-25
 
 ### Added
@@ -19,6 +25,12 @@
 - `hq bot promote` accepts server-signed upload URLs without SSE headers when the bucket supplies encryption. SSE header names are checked case-insensitively, and any supplied encryption must be a complete SSE-KMS pair.
 - Company slug lookup errors now point to the supported `hq sources entities` command.
 
+### Added
+
+- QMD native-binding startup failures after sync can emit an actionable warning
+  when the `qmd.reindex-startup-warning` hq-flags canary is enabled. The flag
+  defaults off, and sync still succeeds when indexing cannot run.
+
 ## [5.189.0] — 2026-09-25
 
 ### Added

package/dist/commands/agents.js

@@ -55,6 +55,8 @@ export const VALID_PROVIDERS = new Set(["codex", "grok", "claude", "agents-v2"])
 export const VALID_AUTH_MODES = new Set(["subscription", "apiKey"]);
 /** Customer-facing agent size keys served by hq-pro's authoritative catalog. */
 export const VALID_AGENT_SIZE_KEYS = new Set(["basic", "power", "dev"]);
+// Keep cloud agent create slugs aligned with hq-pro-agents POST /v1/agents.
+const AGENT_SLUG_PATTERN = /^[a-z0-9][a-z0-9-]{0,62}$/;
 const CLAUDE_PROVISION_COMMAND = "hq agents provision <name> --provider agents-v2 --model claude-opus-5-5";
 const CLAUDE_API_KEY_ARGS = "--auth-mode apiKey --api-key-env <VAR>";
 function claudeProvisionGuidance() {
@@ -1281,6 +1283,12 @@ export function registerAgentsCommand(program) {
         .addHelpText("after", `\n${claudeProvisionGuidance()}\n`)
         .action(async function (name, opts) {
         try {
+            const slug = opts.slug ?? slugifyAgentName(name);
+            if (!AGENT_SLUG_PATTERN.test(slug)) {
+                console.error(chalk.red("Agent slug must start with a lowercase letter or digit, contain only lowercase letters, digits, and hyphens, and be at most 63 characters. " +
+                    "Update --slug or the agent name."));
+                process.exit(1);
+            }
             // Both of these previously fell back to their default on an
             // unrecognised value, silently provisioning a billable box the operator
             // did not ask for. They now exit(1) instead — see parseEnumOption.
@@ -1341,7 +1349,6 @@ export function registerAgentsCommand(program) {
             // Every path confirms hq-pro's company-specific quote. Omission still
             // leaves the POST size implicit, preserving the server-side default.
             confirmAgentCreateQuoteOrExit(quotedSize, opts.yes, opts.json);
-            const slug = opts.slug ?? slugifyAgentName(name);
             try {
                 const result = await provisionAgent(token, {
                     companyUid,

package/dist/lib/core-utils/qmd-reindex-after-sync.d.ts

@@ -1,6 +1,8 @@
 import { type EmbedLockDependencies } from "../search-index/embed-lock.js";
 import { type LoadGateDependencies } from "../search-index/load-gate.js";
 import { type UtilityIo } from "./common.js";
+export declare const QMD_REINDEX_STARTUP_WARNING_FLAG = "qmd.reindex-startup-warning";
+export declare const QMD_REINDEX_STARTUP_WARNING_FLAG_FALLBACK = false;
 export type QmdReindexOptions = UtilityIo & {
     cwd?: string;
     /** Test seams; default to the real search-index implementations. */
@@ -17,6 +19,8 @@ export type QmdReindexOptions = UtilityIo & {
     embedLockDependencies?: EmbedLockDependencies;
     /** Test seams for the host load gate consulted while the embed lock is held. */
     loadGateDependencies?: LoadGateDependencies;
+    /** Test seam for the hq-flags-gated warning on qmd native startup failures. */
+    startupFailureWarningsEnabled?: () => boolean;
 };
 export declare function qmdReindexAfterSync(args?: string[], options?: QmdReindexOptions): number;
 //# sourceMappingURL=qmd-reindex-after-sync.d.ts.map

package/dist/lib/core-utils/qmd-reindex-after-sync.js

@@ -15,7 +15,14 @@ import { reconcileCollections, resolveQmdBin, resolveQmdHome, runQmd } from "../
 import { applyIndexSizeLimit } from "../search-index/max-doc-bytes.js";
 import { defaultEmbedLockDependencies, runWithEmbedLock, } from "../search-index/embed-lock.js";
 import { LoadGateConfigurationError, checkEmbedLoad, defaultLoadGateDependencies, recordSuccessfulEmbed, } from "../search-index/load-gate.js";
+import { resolveProcessFlagGate } from "../flag-registry.js";
+import { isQmdNativeBindingError, QMD_NATIVE_BINDING_REMEDY, } from "../../utils/qmd-native-binding-error.js";
 import { ioFor, line } from "./common.js";
+export const QMD_REINDEX_STARTUP_WARNING_FLAG = "qmd.reindex-startup-warning";
+export const QMD_REINDEX_STARTUP_WARNING_FLAG_FALLBACK = false;
+function qmdStartupFailureWarningsEnabled() {
+    return resolveProcessFlagGate(QMD_REINDEX_STARTUP_WARNING_FLAG, { fallback: QMD_REINDEX_STARTUP_WARNING_FLAG_FALLBACK }, () => QMD_REINDEX_STARTUP_WARNING_FLAG_FALLBACK);
+}
 export function qmdReindexAfterSync(args = [], options = {}) {
     let hqRoot = "";
     let embed = false;
@@ -42,6 +49,15 @@ export function qmdReindexAfterSync(args = [], options = {}) {
     const run = options.run ?? ((argv, opts) => runQmd(argv, opts));
     const sizeLimit = options.sizeLimit ?? ((root) => applyIndexSizeLimit(root));
     const { stderr } = ioFor(options);
+    let startupFailureWarningShown = false;
+    const warnOnNativeStartupFailure = (error) => {
+        if (startupFailureWarningShown ||
+            !isQmdNativeBindingError(error) ||
+            !(options.startupFailureWarningsEnabled ?? qmdStartupFailureWarningsEnabled)())
+            return;
+        startupFailureWarningShown = true;
+        line(stderr, `hq: search index was not updated after sync; ${QMD_NATIVE_BINDING_REMEDY}`);
+    };
     // Every qmd interaction is best-effort: the shell suffixed each with `|| true`.
     try {
         reconcile(hqRoot, { bin });
@@ -62,7 +78,8 @@ export function qmdReindexAfterSync(args = [], options = {}) {
     try {
         run(["update"], { bin, cwd: hqRoot });
     }
-    catch {
+    catch (error) {
+        warnOnNativeStartupFailure(error);
         /* never fail a sync on index freshness */
     }
     if (embed) {
@@ -91,6 +108,7 @@ export function qmdReindexAfterSync(args = [], options = {}) {
         catch (error) {
             if (error instanceof LoadGateConfigurationError)
                 line(stderr, `hq: ${error.message}`);
+            warnOnNativeStartupFailure(error);
             /* embeddings are deferred-cost and optional */
         }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.190.0",
+  "version": "5.191.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {