@indigoai-us/hq-cli 5.345.159 → 5.345.160

package/dist/commands/billing.d.ts

@@ -13,16 +13,16 @@
  *   hq billing checkout [--company <slug>] [--personal] — mint a card-capture link
  *   hq billing usage    [--company <slug>] [--personal] — usage, projected bill,
  *                                                         drivers (read-only)
- *   hq billing upgrade  [--company <slug>]              — Workforce checkout
- *                                                         (legacy plans only)
+ *   hq billing upgrade  [--company <slug>]              — the switch to usage
+ *                                                         pricing (earlier plans)
  *   hq billing sponsor  …                               — ask a company to cover
- *                                                         your $50 plan, or
+ *                                                         your personal plan, or
  *                                                         answer such a request
  *
- * Usage pricing (US-012): a company whose billing summary says
- * `pricingPlan: "usage-only"` has no plan to upgrade to. `hq billing upgrade`
- * tells it so and points at `hq billing usage` instead of opening Workforce
- * checkout. Legacy companies keep the Workforce flow unchanged.
+ * Usage pricing (US-012, US-024): a company on usage pricing has no plan to
+ * upgrade to; `hq billing upgrade` tells it so and points at
+ * `hq billing usage`. Every other company is pointed at the switch to usage
+ * pricing: the flat-plan checkout is closed, so the CLI never opens it.
  */
 import { Command } from "commander";
 interface DatabaseBilling {

package/dist/commands/billing.js

@@ -13,22 +13,22 @@
  *   hq billing checkout [--company <slug>] [--personal] — mint a card-capture link
  *   hq billing usage    [--company <slug>] [--personal] — usage, projected bill,
  *                                                         drivers (read-only)
- *   hq billing upgrade  [--company <slug>]              — Workforce checkout
- *                                                         (legacy plans only)
+ *   hq billing upgrade  [--company <slug>]              — the switch to usage
+ *                                                         pricing (earlier plans)
  *   hq billing sponsor  …                               — ask a company to cover
- *                                                         your $50 plan, or
+ *                                                         your personal plan, or
  *                                                         answer such a request
  *
- * Usage pricing (US-012): a company whose billing summary says
- * `pricingPlan: "usage-only"` has no plan to upgrade to. `hq billing upgrade`
- * tells it so and points at `hq billing usage` instead of opening Workforce
- * checkout. Legacy companies keep the Workforce flow unchanged.
+ * Usage pricing (US-012, US-024): a company on usage pricing has no plan to
+ * upgrade to; `hq billing upgrade` tells it so and points at
+ * `hq billing usage`. Every other company is pointed at the switch to usage
+ * pricing: the flat-plan checkout is closed, so the CLI never opens it.
  */
 import chalk from "chalk";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
 import { mintPaymentLink } from "../utils/billing-gate.js";
-import { upgradeToTeam } from "../utils/team-upgrade.js";
+import { openUsageSwitch } from "../utils/team-upgrade.js";
 import { registerBillingSponsorCommands } from "./billing-sponsor.js";
 import { fetchCompanyPricingPlan, isUsageOnly, usageOnlyUpgradeLines, } from "../lib/billing/usage-only.js";
 import { fetchUsageCard } from "../lib/billing/usage-card.js";
@@ -157,10 +157,10 @@ export function registerBillingCommand(program) {
     });
     billing
         .command("upgrade")
-        .description("Open Stripe Checkout to upgrade a company on an earlier plan (usage-pricing companies have no plan to upgrade)")
+        .description("Open the switch to usage pricing for a company on an earlier plan (usage-pricing companies have nothing to change)")
         .option("--company <slug>", "Company slug (resolves to companyUid)")
-        .option("--no-browser", "Print the Stripe Checkout URL instead of opening it")
-        .option("--json", "Emit the Checkout URL as JSON")
+        .option("--no-browser", "Print the URL instead of opening it")
+        .option("--json", "Emit the URL as JSON")
         .action(async function (opts) {
         try {
             const token = await ensureCognitoToken();
@@ -177,8 +177,8 @@ export function registerBillingCommand(program) {
                     console.log(line);
                 return;
             }
-            await upgradeToTeam({
-                companyUid,
+            await openUsageSwitch({
+                companySlug: companyOf(this),
                 noBrowser: opts.browser === false,
                 json: opts.json,
             });

package/dist/commands/cloud-provision.js

@@ -484,8 +484,8 @@ async function defaultRunInitialSync(args) {
             if (event.type === "plan-limit") {
                 failureCount += Math.max(1, event.count ?? 0, event.paths?.length ?? 0);
                 firstFailure ??= {
-                    path: event.paths?.[0] ?? "plan limit",
-                    message: event.message ?? "plan limit refused upload",
+                    path: event.paths?.[0] ?? "new files",
+                    message: event.message ?? "new files are paused for this account",
                 };
                 return;
             }

package/dist/commands/cloud.js

@@ -1119,7 +1119,7 @@ export function registerCloudCommands(program) {
                 // and keep their exit status.
                 log(chalk.yellow(`\n⚠ Pushed ${result.filesUploaded} file(s) (${formatBytes(result.bytesUploaded)}, ` +
                     `${result.filesSkipped} skipped), but ${describeRefusedFiles(planLimitRefused)} ` +
-                    "refused by your plan limit."));
+                    "refused: new files are paused for this account."));
                 for (const line of renderPlanLimitRefusalLines(planLimitRefused)) {
                     log(chalk.yellow(line));
                 }
@@ -1811,7 +1811,7 @@ async function runPushAll(hqRoot, message, onConflict, skipPersonal, skipCompani
                 `${r.conflictPaths.length} conflict(s)` +
                 (r.aborted ? " — aborted" : "") +
                 (legRefused
-                    ? ` — ${describeRefusedCount(legRefused)} refused by plan limit`
+                    ? ` — ${describeRefusedCount(legRefused)} refused (new files paused)`
                     : ""));
             if (legRefused) {
                 printPlanLimitRefusal(legRefused);
@@ -1828,7 +1828,7 @@ async function runPushAll(hqRoot, message, onConflict, skipPersonal, skipCompani
         `${result.filesRefusedStale ?? 0} stale-refused; ` +
         `${result.filesUploadFailed ?? 0} failed` +
         (refusedTargets > 0
-            ? `; new files refused by a plan limit on ${refusedTargets} target(s)`
+            ? `; new files paused on ${refusedTargets} target(s)`
             : "");
     console.log(errored > 0 ||
         result.filesExcludedByScope > 0 ||
@@ -1973,7 +1973,7 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
             `${pushResult.filesDeleted} deleted, ${pushResult.filesExcludedByScope} scope-excluded` +
             (pushResult.aborted ? " — aborted" : "") +
             (pushRefused
-                ? ` — ${describeRefusedCount(pushRefused)} refused by plan limit`
+                ? ` — ${describeRefusedCount(pushRefused)} refused (new files paused)`
                 : ""));
         if (pushRefused)
             printPlanLimitRefusal(pushRefused, "      ");
@@ -2105,7 +2105,7 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
         if (pushRefused) {
             // The pull ran, but the push did not upload everything: no success line.
             console.log(chalk.yellow(`\n⚠ Sync now finished, but ${describeRefusedFiles(pushRefused)} ` +
-                "refused by your plan limit (listed above)."));
+                "refused: new files are paused for this account (listed above)."));
             throw new SyncExitError(1, { health: "succeeded" });
         }
         if (pushResult.filesExcludedByScope > 0 ||
@@ -2159,9 +2159,9 @@ async function runNowAll(hqRoot, message, onConflict, modeAllOverride, skipPerso
         // like a clean sync. Its per-target details were printed above.
         if (refused.planLimitRefused) {
             console.log(chalk.yellow(`\n⚠ Sync finished, but ${describeRefusedFiles(refused.planLimitRefused)} refused ` +
-                "by your plan limit (listed under push --all above)."));
+                "because new files are paused for this account (listed under push --all above)."));
             if (refused.planLimitRefused.upgradeUrl) {
-                console.log(chalk.yellow(`  Upgrade: ${refused.planLimitRefused.upgradeUrl}`));
+                console.log(chalk.yellow(`  Billing: ${refused.planLimitRefused.upgradeUrl}`));
             }
         }
         console.log(chalk.yellow("\n⚠ Sync finished, but one or more requested uploads were refused."));

package/dist/commands/db-remote-deps.js

@@ -74,7 +74,18 @@ export function describeRemoteError(error) {
         return "Remote databases are not available yet.";
     }
     if (status === 402 || code === "PLAN_REQUIRED") {
-        return "Remote databases require the Team plan.";
+        // US-024: the server's usage pause message, else its own sentence. The
+        // CLI names no plan: the flat plans are closed.
+        const pause = error.usagePause;
+        if (pause && typeof pause.message === "string" && pause.message) {
+            return typeof pause.actionUrl === "string" && pause.actionUrl
+                ? `${pause.message}\nBilling: ${pause.actionUrl}`
+                : pause.message;
+        }
+        const serverMessage = error.serverMessage;
+        if (typeof serverMessage === "string" && serverMessage)
+            return serverMessage;
+        return "Remote databases are not available on this company's current billing. Run `hq billing status` to check it.";
     }
     if (status === 403)
         return "You are not a member of this company, or this app belongs to another company.";

package/dist/commands/files.js

@@ -1,4 +1,5 @@
 import chalk from "chalk";
+import { aclLockedBy, describeAclLock } from "./acl-lock.js";
 import open from "open";
 import * as readline from "node:readline";
 import { resolveVaultCredential } from "../utils/resolve-vault-credential.js";
@@ -489,17 +490,21 @@ export function registerFilesCommand(program) {
                 throw new Error('Invalid ACL tree response');
             }
             const row = tree.directRow;
+            // The most-specific row has no grants, so broader grants do not apply.
+            const lockedBy = aclLockedBy(tree);
             if (opts.json) {
-                console.log(JSON.stringify({ ...tree, schemaVersion: 1, companyUid, exists: row !== null }, null, 2));
+                console.log(JSON.stringify({ ...tree, schemaVersion: 1, companyUid, exists: row !== null, lockedBy }, null, 2));
                 return;
             }
             // No own row AND nothing inherited or granted below — preserve the
             // original "no ACL record" exit path.
-            if (!row && tree.inherited.length === 0 && tree.children.length === 0) {
+            if (!row && !lockedBy && tree.inherited.length === 0 && tree.children.length === 0) {
                 console.error(chalk.red(`No ACL record exists for '${canonicalPrefix}'`));
                 process.exit(1);
             }
-            const aclStatus = row?.open ? "open" : "restricted";
+            const aclStatus = lockedBy
+                ? lockedBy.readUnknown ? "locked unless open" : "locked"
+                : row?.open ? "open" : "restricted";
             console.log(chalk.green(`ACL for ${displayAclPattern(tree.prefix)} (${aclStatus})`));
             if (isPrivateFolderPattern(tree.prefix)) {
                 console.log(chalk.gray(privateFolderExplanation(tree.prefix)));
@@ -507,9 +512,12 @@ export function registerFilesCommand(program) {
             if (row) {
                 console.log(`Creator: ${row.creatorUid}`);
             }
-            else {
+            else if (!lockedBy) {
                 console.log(chalk.gray("No direct ACL row — access flows from the inherited/descendant grants below."));
             }
+            if (lockedBy) {
+                console.log(chalk.yellow(describeAclLock(lockedBy, displayAclPattern(lockedBy.path))));
+            }
             if (tree.effectivePermission) {
                 console.log(`Your effective permission: ${tree.effectivePermission}`);
             }
@@ -560,9 +568,9 @@ export function registerFilesCommand(program) {
             const directEntries = tree.direct;
             if (directEntries.length === 0) {
                 if (row?.open) {
-                    console.log(chalk.gray("Open ACL — all active members have read access."));
+                    console.log(chalk.gray("No grants on this row (open: broader grants still apply). All active members have at least read access."));
                 }
-                else if (row) {
+                else if (row && !lockedBy) {
                     console.log(chalk.gray("No explicit grants on this prefix — only creator has access."));
                 }
             }
@@ -571,7 +579,11 @@ export function registerFilesCommand(program) {
                 printEntryTable(directEntries, false);
             }
             if (tree.inherited.length > 0) {
-                console.log("\nInherited (granted on an ancestor prefix):");
+                console.log(lockedBy
+                    ? lockedBy.readUnknown
+                        ? `\nGranted on ancestor prefixes (apply only if ${displayAclPattern(lockedBy.path)} is open):`
+                        : `\nGranted on ancestor prefixes (do not apply: locked by ${displayAclPattern(lockedBy.path)}):`
+                    : "\nInherited (granted on an ancestor prefix):");
                 printEntryTable(tree.inherited, true);
             }
             if (tree.children.length > 0) {

package/dist/commands/meetings.d.ts

@@ -3,10 +3,10 @@ import { type PricingPlan } from "../lib/billing/usage-only.js";
 /** Upper bound on list pages one short-id lookup reads (per cursor chain). */
 export declare const SHORT_ID_MAX_PAGES = 50;
 /**
- * The 402 copy for meeting bots. A usage-only company (US-012: the body or the
- * company's billing summary says `pricingPlan: "usage-only"`) has no Workforce
- * plan to buy, so it is told to add a card. Every other company keeps the
- * Workforce copy.
+ * The 402 copy for meeting bots. A usage pause (US-024) prints the server's
+ * message and Billing link. A usage-only company (US-012) is told to add a
+ * card. Every other company gets the server's sentence under a line that
+ * names no plan: the flat plans are closed.
  */
 export declare function meetingPaymentRequiredLines(body: Record<string, unknown>, resolvePlan?: () => Promise<PricingPlan | null>): Promise<string[]>;
 export declare function registerMeetingsCommand(program: Command): void;

package/dist/commands/meetings.js

@@ -4,7 +4,7 @@ import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, getCompanyUid, resolveCallerPersonUid, } from "../utils/vault-api.js";
 import { isPlanGateError, planGateErrorFromPayload, } from "../utils/plan-gate-error.js";
 import { mapWithConcurrency } from "./sync-manifest.js";
-import { isUsageOnly, pricingPlanFromBody, resolveCompanyPricingPlan, usageOnlyCardRequiredLines, } from "../lib/billing/usage-only.js";
+import { isUsageOnly, pricingPlanFromBody, resolveCompanyPricingPlan, usageOnlyCardRequiredLines, usagePauseFromBody, } from "../lib/billing/usage-only.js";
 const LIVE_SNAPSHOT_STATUSES = new Set([
     "joining",
     "recording",
@@ -318,23 +318,32 @@ async function resolveShortId(token, prefix, query) {
     process.exit(1);
 }
 /**
- * The 402 copy for meeting bots. A usage-only company (US-012: the body or the
- * company's billing summary says `pricingPlan: "usage-only"`) has no Workforce
- * plan to buy, so it is told to add a card. Every other company keeps the
- * Workforce copy.
+ * The 402 copy for meeting bots. A usage pause (US-024) prints the server's
+ * message and Billing link. A usage-only company (US-012) is told to add a
+ * card. Every other company gets the server's sentence under a line that
+ * names no plan: the flat plans are closed.
  */
 export async function meetingPaymentRequiredLines(body, resolvePlan = () => resolveCompanyPricingPlan()) {
     const plan = pricingPlanFromBody(body) ?? (await resolvePlan().catch(() => null));
     if (isUsageOnly(plan)) {
         return usageOnlyCardRequiredLines("A meeting notetaker bot").map((line, i) => i === 0 ? chalk.red(line) : chalk.dim(line));
     }
+    // US-024: a usage pause is the server's own answer: its message and link.
+    const pause = usagePauseFromBody(body);
+    if (pause) {
+        return [
+            chalk.red(pause.message),
+            ...(pause.actionUrl ? [chalk.dim(`Billing: ${pause.actionUrl}`)] : []),
+        ];
+    }
+    // The server's sentence when it sent one; otherwise copy that names no plan.
     const detail = typeof body.message === "string"
         ? body.message
         : typeof body.error === "string"
             ? body.error
-            : "Upgrade your company to HQ Workforce to record meetings.";
+            : "Run `hq billing status` or open the company's Billing page to check it.";
     return [
-        chalk.red("Meeting notetaker bots require the $500/mo HQ Workforce plan."),
+        chalk.red("Meeting notetaker bots are not available on this company's current billing."),
         chalk.dim(detail),
     ];
 }
@@ -660,7 +669,7 @@ export function registerMeetingsCommand(program) {
             const companySlug = meetings.opts().company;
             // Always name a company. With no companyId the backend files the bot
             // under Personal, which can never record, so an entitled user would
-            // get the HQ Workforce upgrade prompt. Without --company this uses the
+            // get the payment-required refusal. Without --company this uses the
             // caller's only active company, or asks them to pick one.
             const query = {
                 companyId: await getCompanyUid(token, companySlug),

package/dist/commands/skill.js

@@ -28,7 +28,7 @@ import { AuthError } from "../utils/auth-error.js";
 import { redactErrorText } from "../utils/redact-error-text.js";
 import { stampVaultAccessDenied, vaultAccessDeniedDiagnostics, } from "../utils/vault-access-denied-error.js";
 import { PlanGateError } from "../utils/plan-gate-error.js";
-import { createPlanLimitRefusalTracker, trackingProgressRecorder, } from "../lib/billing/plan-limit-refusals.js";
+import { createPlanLimitRefusalTracker, REFUSAL_FALLBACK_SENTENCE, trackingProgressRecorder, } from "../lib/billing/plan-limit-refusals.js";
 export const SKILL_UID_PATTERN = /^skl_[A-Za-z0-9]+$/;
 export const SKILL_SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
 const COMPANY_SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
@@ -54,16 +54,16 @@ async function defaultSyncFile(input) {
     };
 }
 /**
- * The upload of a stamped skill file was refused by a plan limit. Registration
+ * The upload of a stamped skill file was refused (new files paused). Registration
  * and the local stamp already succeeded, so say that on stderr, then return a
- * typed plan gate for main.ts to render (reason and upgrade link) and exit
+ * typed plan gate for main.ts to render (reason and billing link) and exit
  * non-zero. Never "Skill ready … Sync: complete".
  */
 function skillUploadRefused(skillUid, filePath, companySlug, refused) {
-    console.warn(chalk.yellow(`⚠ Skill ${skillUid} is stamped locally at '${filePath}', but the upload was refused by your plan limit.`));
+    console.warn(chalk.yellow(`⚠ Skill ${skillUid} is stamped locally at '${filePath}', but the upload was refused: new files are paused for this account.`));
     return new PlanGateError("PLAN_LIMIT_EXCEEDED", {
-        reason: `${refused.message ?? "New files are paused by your plan limit."} ` +
-            "The skill file was not uploaded. Once the limit is sorted, upload it with: " +
+        reason: `${refused.message ?? REFUSAL_FALLBACK_SENTENCE} ` +
+            "The skill file was not uploaded. Once uploads resume, upload it with: " +
             `hq sync push --company ${companySlug} '${filePath}'`,
         ...(refused.upgradeUrl ? { upgradeUrl: refused.upgradeUrl } : {}),
     });

package/dist/commands/whoami.js

@@ -123,7 +123,7 @@ export function registerWhoamiCommand(program) {
         .command('whoami')
         .description('Show the currently authenticated user')
         .option('--json', 'Output identity metadata as JSON (never tokens)')
-        .option('--company <slug>', 'Also report this company\'s workspace plan state (Starter nag)')
+        .option('--company <slug>', 'Also report this company\'s billing and usage notice')
         .action(async (opts) => {
         try {
             // Effective source (same as auth status / ensureCognitoToken): env

package/dist/hook-engine-path.js

@@ -18,7 +18,7 @@ export async function runHookEnginePath(args) {
             console.log('Usage: hq core hook-engine-path [--repair] [--for-registration]\nResolve and pin the installed native hook engine offline.\n--for-registration prints a path only when the launcher flag is enabled.');
             return;
         }
-        const { installHookEngine, hookEngineRequired, HOOK_ENGINE_REPAIR } = await import('./lib/hook-engine/resolve.js');
+        const { installHookEngine, hookEngineRequired, removeHookEnginePointer, verifyHookEngine, HOOK_ENGINE_REPAIR } = await import('./lib/hook-engine/resolve.js');
         if (args.includes('--for-registration')) {
             const { launcherEnabled } = await import('./lib/hook-engine/registration.js');
             if (!launcherEnabled()) {
@@ -27,8 +27,19 @@ export async function runHookEnginePath(args) {
             }
         }
         const binary = installHookEngine({ repair: args.includes('--repair') });
-        if (binary)
+        if (binary) {
+            // The printed path is one that runs and reports as an hq-hook engine.
+            // A binary that cannot answer its self-check must not be bridged, so the
+            // shell pointer is removed and the command exits non-zero.
+            const problem = verifyHookEngine(binary);
+            if (problem) {
+                removeHookEnginePointer();
+                console.error(`${problem}. Existing bash hooks remain active. Repair: ${HOOK_ENGINE_REPAIR}`);
+                process.exitCode = 1;
+                return;
+            }
             console.log(binary);
+        }
         else {
             console.error(`Native hook engine missing; ${hookEngineRequired() ? 'repair before running hooks' : 'existing bash hooks remain active'}. Repair: ${HOOK_ENGINE_REPAIR}`);
             process.exitCode = 1;