@indigoai-us/hq-cli 5.345.143 → 5.345.145

package/CHANGELOG.md

@@ -2,6 +2,96 @@
 
 ## [Unreleased]
 
+## [5.345.145] — 2026-10-17
+- `hq core checkpoint`: the background checkpoint helper now fills in automatic
+  saves that were queued before it started. It writes its own report first,
+  then works through at most 5 queued saves per run; any extra queued saves go
+  back on the queue for the next run instead of being dropped. If a run is
+  stopped partway through its queued saves, the next run puts the ones it did
+  not finish back on the queue.
+- Outpost scheduled-job alerts now reach owners recorded by their Cognito user
+  id. `hq core job notify` used to pass the id to `hq dm`, which read it as a
+  channel name and failed with "No channel named …". It now sends to the email
+  `hq whoami --json` reports for that id (the signed-in person, or the person
+  an Outpost acts for), and logs a clear reason when it cannot match one.
+- `hq whoami --json` adds `sub`, `delegatedEmail` and `delegatedSub`.
+- `hq core jobs reconcile` matches company jobs owned by the Outpost owner's
+  email or id, and reaches the user systemd manager when it runs from a system
+  service with no login session (it used to fail with "Failed to connect to
+  bus: No medium found").
+- `hq members list --json` prints each member's person id (`person_id`, the `prs_` id that file and secret grants use), email, name, slug, role and membership key. `--pending --json` does the same for pending invites. `hq members list --ids` adds a PERSON_ID column to the table. The default table is unchanged.
+
+## [5.345.144] — 2026-10-16
+- New `hq library add <file|url>...` uploads files or http(s) URLs straight to
+  the company vault and writes only a `.hqcloud` placeholder into
+  `companies/<co>/library/` (or `--to companies/<co>/<dir>`). Each upload is
+  checked against its sha256. If the same bytes are already in the vault, they
+  are not uploaded again. URLs stream to the vault without a local copy.
+  `--tags`, `--title` and `--note` set the asset details. If a plan storage
+  limit is reached, it shows the plan-limit message and writes no placeholder.
+- New `hq library tag`, `hq library ls` and `hq library fetch` edit tags, list
+  library placeholders by folder and tag, and download an asset. All of them
+  support `--json`.
+- `hq library add` now adds a description and suggested tags to image and
+  video uploads by running your local Claude Code (`claude -p`) on your
+  machine, and records `captioned-by: local:claude`. No cloud AI service is
+  called. Your own tags and `--note` description are kept. Videos use up to 4
+  frames taken with ffmpeg (first frame when ffmpeg cannot sample). If Claude
+  Code is not installed, not signed in, errors or times out, the file is still
+  saved and one "Captioning skipped" line says why. `--no-caption` skips it.
+- New `hq library describe <placeholder>` runs local captioning again for an
+  asset that is already in the library.
+- `hq api-keys create --preset library-agent` mints a key for a headless
+  agent with exactly `search:query` and `files:read`. Add `--allow-upload` to
+  also grant `files:write`. The preset cannot be combined with `--capability`,
+  `--scope`, `--deploy`, `--deploy-app` or `--permission`.
+- New `hq library link <placeholder|vault-key>` mints a download URL for a
+  library asset (default 15 minutes, `--expires` up to 60). It works on a
+  session or on an `HQ_API_KEY` with `files:read`. The URL goes to stdout
+  only. Do not post it in Slack or shared channels.
+- `hq storage fetch` (and `hq library fetch`) can now restore library assets
+  (placeholders with `vault: company` and a `.hq-offload/blobs/<sha256>` key).
+  It checks that you are an active member of that company, downloads with your
+  own company access and verifies the sha256. If you don't have read access,
+  it says so in plain words, leaves the placeholder in place, and writes no
+  partial file.
+- Bundles `@indigoai-us/hq-cloud` 6.18.82, which adds the hq-asset
+  placeholder block, the watcher delete guard and
+  `CLOUD_PLACEHOLDER_SYNC_CAPABILITIES` that the library commands rely on.
+- New `hq billing usage` shows this month's HQ usage per meter, the projected
+  bill, how much of the $10 included each month is left, and what is driving
+  the cost, with a fix for each driver. It only reads. Rates follow the usage
+  card: Sync $0.10, Gateway call (integrations and external MCP through HQ)
+  $0.05, HQ MCP call $0.05, Agent run $0.05, Storage $2.00 per GB-month, Secret
+  $0.50 per secret-month, Vault $5 per vault-month (waived during the trial).
+  They come from `GET /v1/pricing` when it publishes a `usage` block, and from
+  a bundled copy of the same card otherwise. Meters HQ cannot count for you yet
+  show as "not counted here yet", not as zero. `hq billing usage --card`
+  prints the card, including the trial, boxes and domains.
+- Accounts on usage pricing no longer see Workforce, Individual or Starter
+  prompts. `hq billing upgrade` tells a usage-pricing company there is no plan
+  to upgrade to and points to `hq billing usage`; `hq billing sponsor request`
+  files nothing for a person on usage pricing; `hq whoami --plan` shows a usage
+  pricing line; agent, external agent and meeting bot refusals ask for a card
+  and quote agent boxes by size (small t3.small $100, medium t3.medium $200,
+  large t3.large $400, xlarge t3.xlarge $800 a month). Plan refusals show no
+  free month, Starter, Workforce or Individual copy and offer no plan
+  checkout. The CLI reads usage pricing from the company's `/membership/me`
+  row and from usage-limits, so members who are not owners get the same copy.
+  `hq agents create --size` accepts small, medium, large and xlarge; on the
+  new box sizes basic, power and dev map to small, medium and large. Accounts
+  on earlier plans keep their existing copy.
+- `hq core policy age-report` now checks each policy's `when:` trigger with the
+  same evaluator the trigger hook uses. A policy whose trigger cannot parse
+  (quoted phrases, two words with no operator) is reported as
+  `malformed-trigger` instead of `never-fired`, and `hq core policy retire --auto`
+  lists it as needing a fix instead of retiring it.
+- The never-fired, dormant and single-incident windows now start from the last
+  change to the policy (`updated:` frontmatter or file modification time), so a
+  trigger that was just repaired is not retired on the history from when it
+  could not fire.
+- The bundled sync engine now uses hq-cloud 6.18.84. `hq outposts provision --company <slug> --yes` now waits for the server's background company create and reports when the box is ready or blocked, and no longer shows a timeout as a failure.
+
 ## [5.345.143] — 2026-10-16
 - The bundled sync engine now uses hq-cloud 6.18.82. Company Outposts can be signed in to Claude from the terminal: `hq outposts login --company <slug>` prints the sign-in link, `hq outposts login-code --company <slug> <code>` finishes it, and `hq outposts status --company <slug>` shows whether the box is signed in. Registering a job on a box that is not signed in now says so and shows the next step.
 

package/dist/command-catalog.generated.d.ts

@@ -2416,6 +2416,14 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--expires <ISO8601>";
             readonly description: "Optional ISO-8601 expiry timestamp";
             readonly hidden: false;
+        }, {
+            readonly flags: "--preset <name>";
+            readonly description: "Grant a fixed capability bundle: library-agent (library-agent = search:query, files:read)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--allow-upload";
+            readonly description: "With --preset library-agent, also grant files:write (hq library add)";
+            readonly hidden: false;
         }];
         readonly subcommands: readonly [];
     }, {
@@ -3578,6 +3586,14 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--pending";
             readonly description: "List pending invites instead of active members";
             readonly hidden: false;
+        }, {
+            readonly flags: "--ids";
+            readonly description: "Add a PERSON_ID column (the prs_ id used in grants and membership keys)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON, including each person id";
+            readonly hidden: false;
         }];
         readonly subcommands: readonly [];
     }, {
@@ -6417,7 +6433,7 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }, {
             readonly flags: "--size <size>";
-            readonly description: "Agent box size: basic | power | dev (omitted keeps the current default)";
+            readonly description: "Agent box size: small | medium | large | xlarge, or basic | power | dev (on usage pricing these map to small | medium | large); omitted keeps the current default";
             readonly hidden: false;
         }, {
             readonly flags: "--yes";
@@ -7399,7 +7415,7 @@ export declare const COMMAND_CATALOG: readonly [{
                 readonly hidden: false;
             }, {
                 readonly flags: "--cron <expr>";
-                readonly description: "Recurring schedule, such as rate(1 day) or a cron expression";
+                readonly description: "Recurring schedule: rate(N minutes|hours|days), a five-field cron with * for day of month and month (such as \"*/15 * * * *\"; translated to the AWS form), or cron(MIN HOUR ? * DOW *)";
                 readonly hidden: false;
             }, {
                 readonly flags: "--at <iso>";
@@ -7608,6 +7624,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--id <outpostId>";
             readonly description: "Outpost id (defaults to your primary box)";
             readonly hidden: false;
+        }, {
+            readonly flags: "--company <slug>";
+            readonly description: "Request a new sign-in link for the company's Outpost (owner or admin)";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
@@ -7633,6 +7653,10 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly flags: "--id <outpostId>";
             readonly description: "Outpost id (defaults to your primary box)";
             readonly hidden: false;
+        }, {
+            readonly flags: "--company <slug>";
+            readonly description: "Sign in the company's Outpost (owner or admin)";
+            readonly hidden: false;
         }, {
             readonly flags: "--json";
             readonly description: "Emit raw JSON";
@@ -7721,7 +7745,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "upgrade";
-        readonly description: "Open Stripe Checkout to upgrade this company to HQ Workforce ($500/mo)";
+        readonly description: "Open Stripe Checkout to upgrade a company on an earlier plan (usage-pricing companies have no plan to upgrade)";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -7745,7 +7769,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "sponsor";
-        readonly description: "Ask a company to cover your $50 plan, or answer a request";
+        readonly description: "Ask a company to cover your personal HQ plan, or answer a request";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly helpOption: true;
@@ -7756,7 +7780,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly options: readonly [];
         readonly subcommands: readonly [{
             readonly name: "request";
-            readonly description: "Ask a company to cover your $50 HQ plan";
+            readonly description: "Ask a company to cover your personal HQ plan";
             readonly aliases: readonly [];
             readonly hidden: false;
             readonly helpOption: true;
@@ -7797,7 +7821,7 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly subcommands: readonly [];
         }, {
             readonly name: "approve";
-            readonly description: "Say yes — put someone's $50 plan on the company bill";
+            readonly description: "Say yes — put someone's personal plan on the company bill";
             readonly aliases: readonly [];
             readonly hidden: false;
             readonly helpOption: true;
@@ -7880,6 +7904,42 @@ export declare const COMMAND_CATALOG: readonly [{
             }];
             readonly subcommands: readonly [];
         }];
+    }, {
+        readonly name: "usage";
+        readonly description: "Show this month's usage, projected bill, included usage left and what drives it (read-only)";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--company <slug>";
+            readonly description: "One of your companies (default: your only company)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--personal";
+            readonly description: "Your personal HQ instead of a company";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--no-storage-scan";
+            readonly description: "Skip listing cloud file versions (faster; no old-versions split)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--fresh";
+            readonly description: "List cloud file versions live instead of using figures from the last 15 minutes";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--card";
+            readonly description: "Print the usage price card (meters, included usage, trial, boxes, domains) and exit";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }];
 }, {
     readonly name: "vault";
@@ -9916,6 +9976,226 @@ export declare const COMMAND_CATALOG: readonly [{
         }];
         readonly subcommands: readonly [];
     }];
+}, {
+    readonly name: "library";
+    readonly description: "Company media library (.hqcloud asset placeholders)";
+    readonly aliases: readonly [];
+    readonly hidden: false;
+    readonly helpOption: true;
+    readonly helpCommand: true;
+    readonly usage: "[options] [command]";
+    readonly helpText: readonly [];
+    readonly arguments: readonly [];
+    readonly options: readonly [];
+    readonly subcommands: readonly [{
+        readonly name: "search";
+        readonly description: "Search library assets in the cloud, falling back to the local index when offline";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] [query...]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "query";
+            readonly required: false;
+            readonly variadic: true;
+            readonly description: "Query terms (joined with spaces)";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--tag <tag>";
+            readonly description: "Require a tag (repeatable or comma-separated)";
+            readonly hidden: false;
+            readonly defaultValue: readonly [];
+        }, {
+            readonly flags: "--company <slug>";
+            readonly description: "Restrict to one company";
+            readonly hidden: false;
+        }, {
+            readonly flags: "-n, --count <count>";
+            readonly description: "Maximum result count";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "add";
+        readonly description: "Upload files or URLs to the company vault and add .hqcloud placeholders to the library";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <sources...>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "sources";
+            readonly required: true;
+            readonly variadic: true;
+            readonly description: "Local files or http(s) URLs";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--to <dir>";
+            readonly description: "Library folder inside companies/<co>/ (default companies/<co>/library)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--tags <tags>";
+            readonly description: "Tags (comma-separated, repeatable)";
+            readonly hidden: false;
+            readonly defaultValue: readonly [];
+        }, {
+            readonly flags: "--title <title>";
+            readonly description: "Asset title (default: the file name)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--note <text>";
+            readonly description: "Asset description";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--company <slug>";
+            readonly description: "Company whose vault receives the files";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--no-caption";
+            readonly description: "Skip the AI description and suggested tags for images and videos";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "tag";
+        readonly description: "Add or remove tags on a library placeholder";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <placeholder>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "placeholder";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "A .hqcloud placeholder (or the original path)";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--add <tags>";
+            readonly description: "Tags to add (comma-separated, repeatable)";
+            readonly hidden: false;
+            readonly defaultValue: readonly [];
+        }, {
+            readonly flags: "--remove <tags>";
+            readonly description: "Tags to remove (comma-separated, repeatable)";
+            readonly hidden: false;
+            readonly defaultValue: readonly [];
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "ls";
+        readonly description: "List library placeholders in a folder (default: companies/)";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] [dir]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "dir";
+            readonly required: false;
+            readonly variadic: false;
+            readonly description: "Folder to list, relative to HQ";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--tag <tag>";
+            readonly description: "Require a tag (repeatable or comma-separated)";
+            readonly hidden: false;
+            readonly defaultValue: readonly [];
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "describe";
+        readonly description: "Re-run the AI description and suggested tags for a library image or video";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <placeholder>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "placeholder";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "A .hqcloud placeholder (or the original path)";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "fetch";
+        readonly description: "Download a library asset next to its placeholder (wraps hq storage fetch)";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <placeholder>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "placeholder";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "A .hqcloud placeholder (or the original path)";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "link";
+        readonly description: "Mint a short-lived download URL for a library asset (needs files:read)";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <target>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "target";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "A .hqcloud placeholder, its original path, or a vault key (.hq-offload/…)";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--company <company>";
+            readonly description: "Company uid (cmp_…), or a slug on a session; default: the placeholder's company or the key's";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--expires <minutes>";
+            readonly description: "Link lifetime in minutes, 1-60 (default 15)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print machine-readable JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }];
 }, {
     readonly name: "index";
     readonly description: "Manage the local HQ search index";