@indigoai-us/hq-cli 5.345.162 → 5.345.164

package/CHANGELOG.md

@@ -2,6 +2,39 @@
 
 ## [Unreleased]
 
+## [5.345.164] — 2026-10-23
+- `hq billing status` and `hq billing usage --card` now show trial usage against the $500 trial cap, the $10 included usage, the spend limit and a prompt to add a card when usage passes the included amount. The plan line says "unavailable right now" instead of guessing Starter, invoice-billed companies read as a flat plan billed by invoice, and a failed read of a scheduled switch is reported.
+- `hq deploy domains` refuses a name that is really an IPv4 address. Inputs such as `1.2`, `0x7f.1` and `1.2.3.4` were rewritten to an address and accepted; a numeric last label is now refused before any request.
+- `hq deploy domains buy`: when the domain is registered but the card charge does not complete, the output now prints the order's idempotency key and says to run the same command again with it to retry the charge. It no longer says that HQ billing follows up, which nothing did.
+- `--company` that matches the folder's link in a different case is accepted, and the link's slug is sent.
+- `hq doctor` now says which cloud call the sync receiver was refused on. `sync.runtime.receiver-permission` breaks its count down by call class (the per-device queue credentials from `POST /v1/sync/subscribe`, the subscribe call itself, the latency metric, or the object pull after a change event) and gives the matching next step, instead of one bare count. A new `sync.runtime.pull-access-denied` check warns when the same vault key was refused on two or more pulls in the hour and names the repeatedly refused keys (relative keys only, at most 10, with the runner's latest reason tag; a key refused once is counted but not named). In a session locked to companies, only keys from those companies are named and the rest are counted, so doctor never prints another company's file names from the machine-wide sync log; a refusal with no company label is shown as `unknown` with no lookup command. The warning gives the `hq files acl` command to compare the stored grant with the key the pull looked up. Before this, every automated client-health report for a refused receiver carried only a count and could not be acted on (feedback_cd56a501 and 27 linked reports).
+- A stale sync journal whose `hq doctor --fix` pull ended offline, timed out, or hit a server 5xx is no longer reported as unrepaired by the client-health hook: doctor JSON leaves those rows out for 15 minutes after the attempt and lists them under `transientRefreshSyncCheckIds`, so the next SessionStart retries the pull instead of filing a report. A pull the service refused (4xx) or that failed for another reason is still reported. The `--fix` progress file records each journal's pull outcome as additive fields (still version 2, so an older CLI sharing the same HQ root keeps reading it, and an outcome value this CLI does not know is dropped rather than failing `--fix`); a journal that has failed transiently for more than 24 hours is reported again.
+- `hq-hook bridge-plan` now also lists bridged helpers: `derive-trigger-facts`
+  appears when its flag `hook-engine-port-derive-trigger-facts` is `shadow` or
+  `on`. master-hook.sh passes the plan to the policy injector, which then runs
+  its fact helper through `hq-hook bridge derive-trigger-facts` instead of
+  bash (US-008). The flag defaults to off, the kill switch still forces bash,
+  and `hq-hook --self-check` reports the list as `helper_bridge_ports`. The
+  engine version is now 0.3.0.
+- `hq-hook run policy-enforcement-gate` is the first hook port master-hook.sh
+  can bridge (US-022, flag `hook-engine-port-policy-enforcement-gate`, default
+  off). It answers the gate's allow paths without starting a process: no
+  session id, no session state, a PostToolUse with no state, an event the gate
+  does not handle, and a PreToolUse that is not outbound, matches no gate
+  policy and has no requirement to merge. For a Bash PreToolUse it writes the
+  same pre-tool pass stamp the bash gate writes. Every other case (outbound
+  tools and commands, gate policies, requirement merges, receipts,
+  UserPromptSubmit, non-ASCII input, jq not found on PATH, anything it cannot
+  parse) exits 75, and
+  the bridge runs the bash gate. The port never blocks.
+- HQ Sync now reacts to secure real-time wake notifications on macOS, so shared
+  vault changes can start syncing within seconds without frequent polling.
+
+## [5.345.163] — 2026-10-23
+- New `hq deploy domains` manages custom domains on a deployed app from the installed CLI, using the same hq-deploy routes as the desktop Deployments panel. `list`, `add <domain>`, `refresh <domain>` and `remove <domain>` take `--app <name or id>`, or use the app linked to the folder (`.hq/project.json`, or the older `hq-deploy.json`; `--path` picks the folder). Domains are checked before any request: hostname labels only (no URL, path, port or `@`), and an internationalized name is sent as punycode. A folder link that names no company needs `--company`, and a `--company` that differs from the link is refused. `add` names the app and company, shows the add-on price from `GET /v1/pricing`, and asks for approval (or `--yes`) before anything is added, then prints the DNS records to create, the guidance for a bare domain, and the billing link when the company has no card. `refresh` exits 2 while the domain is not live, so scripts can poll. `remove` names the app and company, asks for approval (or `--yes`), and says when the billing removal is queued for retry. Member, entitlement and billing errors print plain messages, and every command takes `--json`.
+- New `hq deploy domains search <query>` and `hq deploy domains buy <domain> --price <usd> --registrant-file <path>` buy a domain for the company through hq-pro's domain purchase routes. `buy` names the company that pays and shows the first-year price and the published renewal and refund terms, and asks for approval (or `--yes`). It sends one idempotency key per order and only the documented registrant fields. Whenever the outcome is not known (a network error, a server error, a pending registration), it prints the key and says to re-run with `--idempotency-key` instead of starting a new order. Buying stays unavailable until the server has registrar credentials; until then the command says nothing was charged.
+- Add `hq feedback list` (untriaged by default, or `--mine` / `--assignee <person>`), `hq feedback triage <id> --kind --area --summary [--duplicate-of <id>]` and `hq feedback close <id> --reason <text> [--wont-fix]` for staff triage. `hq feedback assign` now also takes the person as a positional argument (`--to` still works), and every one of these commands supports `--json`.
+
 ## [5.345.162] — 2026-10-23
 - `hq agent inbox` no longer reports malformed server responses as a verified empty inbox. Invalid JSON or a missing/non-array `messages` field keeps `source: "local-mirror"` and a privacy-safe warning. Mixed responses retain usable messages with `source: "server-partial"` and an incomplete-result warning; only `source: "server"` certifies completeness. Human output also says when an empty result is unverified. Reads still never send replies or acknowledgments.
 - The bundled sync engine now uses hq-cloud 6.18.100, the current npm `latest`.

package/dist/command-catalog.generated.d.ts

@@ -4605,18 +4605,133 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly hidden: false;
         readonly helpOption: true;
         readonly helpCommand: false;
-        readonly usage: "[options] <id>";
+        readonly usage: "[options] <id> [person]";
         readonly helpText: readonly [];
         readonly arguments: readonly [{
             readonly name: "id";
             readonly required: true;
             readonly variadic: false;
             readonly description: "Feedback id (feedback_<uuid>)";
+        }, {
+            readonly name: "person";
+            readonly required: false;
+            readonly variadic: false;
+            readonly description: "New assignee: an email address or a prs_ uid";
         }];
         readonly options: readonly [{
             readonly flags: "--to <assignee>";
             readonly description: "New assignee: an email address or a prs_ uid";
             readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print the result as JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "list";
+        readonly description: "List feedback: untriaged (default), yours, or one person's";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--untriaged";
+            readonly description: "Items nobody has triaged yet (the default)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--mine";
+            readonly description: "Items assigned to you";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--assignee <person>";
+            readonly description: "Items assigned to this email address or prs_ uid";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--status <status>";
+            readonly description: "Only items with this status";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--limit <n>";
+            readonly description: "Stop after this many items (default 50)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--all";
+            readonly description: "Fetch every page";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print { items, count } as JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "triage";
+        readonly description: "Label a feedback item with its kind, area and summary, or mark it a duplicate";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <id>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "id";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "Feedback id (feedback_<uuid>)";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--kind <kind>";
+            readonly description: "One of bug, feature, question";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--area <area>";
+            readonly description: "Product area, for example sync or desktop";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--summary <text>";
+            readonly description: "One-line triage summary (at most 2000 characters)";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--duplicate-of <id>";
+            readonly description: "Mark this item a duplicate of another feedback id";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print the updated item as JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "close";
+        readonly description: "Close a feedback item as resolved (or won't fix) with a reason";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <id>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "id";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "Feedback id (feedback_<uuid>)";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--reason <text>";
+            readonly description: "Why it is closed: the fix, PR or version, or the decision";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--wont-fix";
+            readonly description: "Close as won't fix instead of resolved";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print the updated item as JSON";
+            readonly hidden: false;
         }];
         readonly subcommands: readonly [];
     }];
@@ -19250,6 +19365,231 @@ export declare const COMMAND_CATALOG: readonly [{
             }];
             readonly subcommands: readonly [];
         }];
+    }, {
+        readonly name: "domains";
+        readonly description: "Manage custom domains on your deployed apps, and buy domains";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: true;
+        readonly usage: "[options] [command]";
+        readonly helpText: readonly [{
+            readonly position: "after";
+            readonly text: "\nadd, remove and buy ask for approval in an interactive terminal. Without one (a script, CI, or a Windows shell that does not report a terminal, such as Git Bash under mintty), pass --yes.";
+        }];
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [{
+            readonly name: "list";
+            readonly description: "List the custom domains on an app";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options]";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--app <app>";
+                readonly description: "app id, subdomain or name (default: the app linked to this folder)";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--path <dir>";
+                readonly description: "folder linked to the app (default: current folder)";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--company <slug>";
+                readonly description: "use this company instead of the linked or active company";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "print machine-readable JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "add";
+            readonly description: "Link a custom domain to an app and print the DNS records to create";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <domain>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "domain";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--env <name>";
+                readonly description: "environment to serve";
+                readonly hidden: false;
+                readonly defaultValue: "production";
+            }, {
+                readonly flags: "--yes";
+                readonly description: "add without a prompt (the domain can add a monthly charge)";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--app <app>";
+                readonly description: "app id, subdomain or name (default: the app linked to this folder)";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--path <dir>";
+                readonly description: "folder linked to the app (default: current folder)";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--company <slug>";
+                readonly description: "use this company instead of the linked or active company";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "print machine-readable JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "refresh";
+            readonly description: "Check DNS validation and start serving once the certificate is issued (exits 2 while not live)";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <domain>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "domain";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--app <app>";
+                readonly description: "app id, subdomain or name (default: the app linked to this folder)";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--path <dir>";
+                readonly description: "folder linked to the app (default: current folder)";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--company <slug>";
+                readonly description: "use this company instead of the linked or active company";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "print machine-readable JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "remove";
+            readonly description: "Unlink a custom domain from an app";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <domain>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "domain";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--env <name>";
+                readonly description: "pick the environment when the domain points at more than one";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--yes";
+                readonly description: "remove without a prompt";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--app <app>";
+                readonly description: "app id, subdomain or name (default: the app linked to this folder)";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--path <dir>";
+                readonly description: "folder linked to the app (default: current folder)";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--company <slug>";
+                readonly description: "use this company instead of the linked or active company";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "print machine-readable JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "search";
+            readonly description: "Check whether a domain can be bought, and its price";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <query>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "query";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "use this company instead of the active company";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "print machine-readable JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "buy";
+            readonly description: "Buy a domain for the company (owner or admin)";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <domain>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "domain";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--price <usd>";
+                readonly description: "first-year price shown by 'hq deploy domains search'";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--registrant-file <path>";
+                readonly description: "JSON file with the registrant contact";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--idempotency-key <key>";
+                readonly description: "retry an earlier order that did not finish";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--company <slug>";
+                readonly description: "use this company instead of the active company";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--yes";
+                readonly description: "buy without a prompt";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "print machine-readable JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }];
     }];
 }, {
     readonly name: "staff";