@indigoai-us/hq-cli 5.345.173 → 5.345.175

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 ## [Unreleased]
 
+## [5.345.175] — 2026-10-28
+- A local bot whose coding tool crashed before it could start on a message (seen as "Claude Code stopped with an error" on the first message after a day or more idle) now tries that message once more on its own. If it crashes again, the reply carries a Heal bot card so HQ can restart the bot and send the message again, and the bot's log and `hq bot status` record what the tool printed, how long it ran and which binary it was, so the cause can be found.
+- `hq dm --attach` after a person `hq login` looks up the caller's `prs_` uid
+  when the session token has no `custom:entityUid` (human tokens never carry
+  that claim). Plain `hq dm` already worked; attaching a file no longer fails
+  with "Could not read your person uid from the session token".
+
+## [5.345.174] — 2026-10-27
+- `hq channels delete <name> --yes` deletes a channel you own, including its
+  messages. Group DMs stay undeletable. Without `--yes` the command refuses.
+- New `hq deploy domains base add | status | remove` sets up a company deploy domain, so every app of the company serves at `<app>.<your-domain>`. `add` shows the monthly price for your company (included on Enterprise) and the two DNS records to create. `status --wait` checks every 15 seconds until the domain is live and gives up after 15 minutes (`--timeout` sets up to 60). `remove` releases the domain.
+- Any signed-in HQ user can now create a bot with `--hq-fleet-runtime`: the CLI downloads the signed HQ Fleet Local release through short-lived links from HQ instead of a private GitHub release, and still checks every file against its pinned hash and the release signature. GitHub access is only used when HQ has no download for the pinned version.
+- A bot created with `--hq-fleet-runtime` now runs HQ's own hooks: its tool calls, prompts and turn ends go through the HQ folder's `.claude` hooks, so it is refused the same core edits, secret dumps and unbound company reads a Claude Code session is, and it binds a company for its conversation before working on that company's files. Messages that arrive while the bot is answering now wait for that answer instead of stalling its inbox. Pins hq-fleet-local v0.4.6.
+
 ## [5.345.173] — 2026-10-27
 - The sync-core reconcile now counts the conflict and merge actions in a vault's read-only plan as writes: a vault is held read-only while its plan would write more than 100 conflict or merge copies, the count is recorded next to the plan's upload, download and delete counts in `~/.hq/sync-core/rollout.json`, and `hq sync-core status` prints it.
 - A machine can keep one vault off the new sync engine while its company switch is on: `~/.hq/sync-core/skip.json` with `{"vaults": {"<vault uid>": "<reason>"}}` makes the reconcile leave that vault on the current sync (stopping its engine unit if one ran), record the uid and reason under `skipped` in `rollout.json`, and show it in `hq sync-core status`. A malformed file is reported as a warning and skips nothing.

package/dist/command-catalog.generated.d.ts

@@ -4365,6 +4365,31 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly hidden: false;
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "delete";
+        readonly description: "Delete a channel you own, including its messages. Group DMs cannot be deleted.";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] <channel>";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "channel";
+            readonly required: true;
+            readonly variadic: false;
+            readonly description: "";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Output { ok, deleted } as JSON.";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--yes";
+            readonly description: "Confirm the delete. Required.";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
     }];
 }, {
     readonly name: "onboard";
@@ -19837,6 +19862,111 @@ export declare const COMMAND_CATALOG: readonly [{
                 readonly hidden: false;
             }];
             readonly subcommands: readonly [];
+        }, {
+            readonly name: "base";
+            readonly description: "Manage the company deploy domain: one domain for every app (<app>.<domain>)";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: true;
+            readonly usage: "[options] [command]";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [];
+            readonly options: readonly [];
+            readonly subcommands: readonly [{
+                readonly name: "add";
+                readonly description: "Claim a company deploy domain; prints the price and the DNS records";
+                readonly aliases: readonly [];
+                readonly hidden: false;
+                readonly helpOption: true;
+                readonly helpCommand: false;
+                readonly usage: "[options] <domain>";
+                readonly helpText: readonly [];
+                readonly arguments: readonly [{
+                    readonly name: "domain";
+                    readonly required: true;
+                    readonly variadic: false;
+                    readonly description: "";
+                }];
+                readonly options: readonly [{
+                    readonly flags: "--yes";
+                    readonly description: "add without a prompt (the domain can add a monthly charge)";
+                    readonly hidden: false;
+                }, {
+                    readonly flags: "--company <slug>";
+                    readonly description: "use this company instead of the linked or active company";
+                    readonly hidden: false;
+                }, {
+                    readonly flags: "--path <dir>";
+                    readonly description: "folder linked to an app of the company (default: current folder)";
+                    readonly hidden: false;
+                }, {
+                    readonly flags: "--json";
+                    readonly description: "print machine-readable JSON";
+                    readonly hidden: false;
+                }];
+                readonly subcommands: readonly [];
+            }, {
+                readonly name: "status";
+                readonly description: "Check the company deploy domain and advance it toward live (exits 2 while not live)";
+                readonly aliases: readonly [];
+                readonly hidden: false;
+                readonly helpOption: true;
+                readonly helpCommand: false;
+                readonly usage: "[options]";
+                readonly helpText: readonly [];
+                readonly arguments: readonly [];
+                readonly options: readonly [{
+                    readonly flags: "--wait";
+                    readonly description: "keep checking until it is live or the timeout passes";
+                    readonly hidden: false;
+                }, {
+                    readonly flags: "--timeout <minutes>";
+                    readonly description: "stop waiting after this many minutes (default 15, at most 60)";
+                    readonly hidden: false;
+                }, {
+                    readonly flags: "--company <slug>";
+                    readonly description: "use this company instead of the linked or active company";
+                    readonly hidden: false;
+                }, {
+                    readonly flags: "--path <dir>";
+                    readonly description: "folder linked to an app of the company (default: current folder)";
+                    readonly hidden: false;
+                }, {
+                    readonly flags: "--json";
+                    readonly description: "print machine-readable JSON";
+                    readonly hidden: false;
+                }];
+                readonly subcommands: readonly [];
+            }, {
+                readonly name: "remove";
+                readonly description: "Release the company deploy domain";
+                readonly aliases: readonly [];
+                readonly hidden: false;
+                readonly helpOption: true;
+                readonly helpCommand: false;
+                readonly usage: "[options]";
+                readonly helpText: readonly [];
+                readonly arguments: readonly [];
+                readonly options: readonly [{
+                    readonly flags: "--yes";
+                    readonly description: "remove without a prompt";
+                    readonly hidden: false;
+                }, {
+                    readonly flags: "--company <slug>";
+                    readonly description: "use this company instead of the linked or active company";
+                    readonly hidden: false;
+                }, {
+                    readonly flags: "--path <dir>";
+                    readonly description: "folder linked to an app of the company (default: current folder)";
+                    readonly hidden: false;
+                }, {
+                    readonly flags: "--json";
+                    readonly description: "print machine-readable JSON";
+                    readonly hidden: false;
+                }];
+                readonly subcommands: readonly [];
+            }];
         }, {
             readonly name: "search";
             readonly description: "Check whether a domain can be bought, and its price";

package/dist/command-catalog.generated.js

@@ -5290,6 +5290,37 @@ export const COMMAND_CATALOG = [
                     }
                 ],
                 "subcommands": []
+            },
+            {
+                "name": "delete",
+                "description": "Delete a channel you own, including its messages. Group DMs cannot be deleted.",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] <channel>",
+                "helpText": [],
+                "arguments": [
+                    {
+                        "name": "channel",
+                        "required": true,
+                        "variadic": false,
+                        "description": ""
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "Output { ok, deleted } as JSON.",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--yes",
+                        "description": "Confirm the delete. Required.",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
             }
         ]
     },
@@ -24186,6 +24217,134 @@ export const COMMAND_CATALOG = [
                         ],
                         "subcommands": []
                     },
+                    {
+                        "name": "base",
+                        "description": "Manage the company deploy domain: one domain for every app (<app>.<domain>)",
+                        "aliases": [],
+                        "hidden": false,
+                        "helpOption": true,
+                        "helpCommand": true,
+                        "usage": "[options] [command]",
+                        "helpText": [],
+                        "arguments": [],
+                        "options": [],
+                        "subcommands": [
+                            {
+                                "name": "add",
+                                "description": "Claim a company deploy domain; prints the price and the DNS records",
+                                "aliases": [],
+                                "hidden": false,
+                                "helpOption": true,
+                                "helpCommand": false,
+                                "usage": "[options] <domain>",
+                                "helpText": [],
+                                "arguments": [
+                                    {
+                                        "name": "domain",
+                                        "required": true,
+                                        "variadic": false,
+                                        "description": ""
+                                    }
+                                ],
+                                "options": [
+                                    {
+                                        "flags": "--yes",
+                                        "description": "add without a prompt (the domain can add a monthly charge)",
+                                        "hidden": false
+                                    },
+                                    {
+                                        "flags": "--company <slug>",
+                                        "description": "use this company instead of the linked or active company",
+                                        "hidden": false
+                                    },
+                                    {
+                                        "flags": "--path <dir>",
+                                        "description": "folder linked to an app of the company (default: current folder)",
+                                        "hidden": false
+                                    },
+                                    {
+                                        "flags": "--json",
+                                        "description": "print machine-readable JSON",
+                                        "hidden": false
+                                    }
+                                ],
+                                "subcommands": []
+                            },
+                            {
+                                "name": "status",
+                                "description": "Check the company deploy domain and advance it toward live (exits 2 while not live)",
+                                "aliases": [],
+                                "hidden": false,
+                                "helpOption": true,
+                                "helpCommand": false,
+                                "usage": "[options]",
+                                "helpText": [],
+                                "arguments": [],
+                                "options": [
+                                    {
+                                        "flags": "--wait",
+                                        "description": "keep checking until it is live or the timeout passes",
+                                        "hidden": false
+                                    },
+                                    {
+                                        "flags": "--timeout <minutes>",
+                                        "description": "stop waiting after this many minutes (default 15, at most 60)",
+                                        "hidden": false
+                                    },
+                                    {
+                                        "flags": "--company <slug>",
+                                        "description": "use this company instead of the linked or active company",
+                                        "hidden": false
+                                    },
+                                    {
+                                        "flags": "--path <dir>",
+                                        "description": "folder linked to an app of the company (default: current folder)",
+                                        "hidden": false
+                                    },
+                                    {
+                                        "flags": "--json",
+                                        "description": "print machine-readable JSON",
+                                        "hidden": false
+                                    }
+                                ],
+                                "subcommands": []
+                            },
+                            {
+                                "name": "remove",
+                                "description": "Release the company deploy domain",
+                                "aliases": [],
+                                "hidden": false,
+                                "helpOption": true,
+                                "helpCommand": false,
+                                "usage": "[options]",
+                                "helpText": [],
+                                "arguments": [],
+                                "options": [
+                                    {
+                                        "flags": "--yes",
+                                        "description": "remove without a prompt",
+                                        "hidden": false
+                                    },
+                                    {
+                                        "flags": "--company <slug>",
+                                        "description": "use this company instead of the linked or active company",
+                                        "hidden": false
+                                    },
+                                    {
+                                        "flags": "--path <dir>",
+                                        "description": "folder linked to an app of the company (default: current folder)",
+                                        "hidden": false
+                                    },
+                                    {
+                                        "flags": "--json",
+                                        "description": "print machine-readable JSON",
+                                        "hidden": false
+                                    }
+                                ],
+                                "subcommands": []
+                            }
+                        ]
+                    },
                     {
                         "name": "search",
                         "description": "Check whether a domain can be bought, and its price",

package/dist/commands/bot.js

@@ -1257,6 +1257,9 @@ async function runBotStatus(nameArg, opts) {
         if (status.modelHold && new Date(status.modelHold.until).getTime() > Date.now()) {
             console.log(`  ${chalk.yellow(`holding until ${status.modelHold.until}`)} after repeated model failures; the next message after that runs again`);
         }
+        if (status.lastCrash) {
+            console.log(`  last crash: ${chalk.yellow(`${status.lastCrash.at}, exit ${status.lastCrash.code ?? "?"}${status.lastCrash.durationMs !== undefined ? ` after ${status.lastCrash.durationMs} ms` : ""}`)}`);
+        }
         if (status.runtimeModelFallback) {
             console.log(`  model:      ${chalk.yellow(`running on ${status.runtimeModelFallback.to}`)} because ${row.runtime} here is too old for ${status.runtimeModelFallback.from || "its configured model"}; update ${row.runtime} to use it`);
         }

package/dist/commands/channels.js

@@ -212,6 +212,88 @@ async function runChannelsMembers(channelName, opts) {
         process.exit(1);
     }
 }
+function channelDeleteError(status, err) {
+    const code = err.code ?? "";
+    if (code === "CHANNEL_NOT_OWNER" || status === 403) {
+        return "Only the channel owner may delete the channel.";
+    }
+    if (code === "CHANNEL_GROUP_NOT_DELETABLE" || status === 409) {
+        return "Group DMs cannot be deleted.";
+    }
+    if (code === "CHANNEL_DELETE_INCOMPLETE" || status === 503) {
+        return "Channel deletion did not finish — try again.";
+    }
+    return err.error ?? err.message ?? `Could not delete channel (HTTP ${status}).`;
+}
+/**
+ * `hq channels delete` — owner-only. The server already accepts
+ * DELETE /v1/notify/channels/{id} and removes messages with the channel.
+ * `--yes` is required so a mistyped name cannot wipe a room.
+ */
+async function runChannelsDelete(channelName, opts) {
+    try {
+        if (!opts.yes) {
+            const message = "This permanently deletes the channel and its messages. Re-run with --yes to confirm.";
+            if (opts.json) {
+                console.log(JSON.stringify({ ok: false, error: message }, null, 2));
+            }
+            console.error(chalk.red(message));
+            process.exit(1);
+        }
+        const token = await ensureCognitoToken();
+        const channels = await fetchChannels(token);
+        const matches = matchChannelsByName(channels, channelName);
+        if (matches.length === 0) {
+            const message = `No channel named '${channelName}' — run \`hq channels\` to see your channels.`;
+            const suggestions = suggestChannels(channels, channelName);
+            if (opts.json) {
+                console.log(JSON.stringify({ ok: false, error: message, suggestions }, null, 2));
+            }
+            console.error(chalk.red(withChannelSuggestions(message, suggestions)));
+            process.exit(1);
+        }
+        if (matches.length > 1) {
+            const scopes = matches.map((match) => match.scope ?? "?").join(", ");
+            console.error(chalk.red(`'${channelName}' matches ${matches.length} channels (${scopes}) — this is ambiguous.`));
+            process.exit(1);
+        }
+        const target = matches[0];
+        if (target.scope === "group") {
+            const message = "Group DMs cannot be deleted.";
+            if (opts.json) {
+                console.log(JSON.stringify({ ok: false, error: message, code: "CHANNEL_GROUP_NOT_DELETABLE" }, null, 2));
+            }
+            console.error(chalk.red(message));
+            process.exit(1);
+        }
+        const res = await vaultApiFetch({
+            token,
+            path: `/v1/notify/channels/${encodeURIComponent(target.channelId)}`,
+            method: "DELETE",
+        });
+        if (!res.ok) {
+            const err = (await res.json().catch(() => ({})));
+            const message = channelDeleteError(res.status, err);
+            if (opts.json) {
+                console.log(JSON.stringify({ ok: false, error: message, code: err.code ?? null, status: res.status }, null, 2));
+            }
+            console.error(chalk.red(message));
+            process.exit(1);
+        }
+        const body = (await res.json().catch(() => ({})));
+        const deleted = body.deleted ?? target.channelId;
+        if (opts.json) {
+            console.log(JSON.stringify({ ok: true, deleted }, null, 2));
+        }
+        else {
+            console.log(`Deleted ${target.name ?? target.slug ?? deleted}.`);
+        }
+    }
+    catch (err) {
+        console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+}
 export function registerChannelsCommand(program) {
     const channels = program
         .command("channels")
@@ -239,5 +321,13 @@ export function registerChannelsCommand(program) {
         .action(async (channelName, opts) => {
         await runChannelsMembers(channelName, opts);
     });
+    channels
+        .command("delete <channel>")
+        .description("Delete a channel you own, including its messages. Group DMs cannot be deleted.")
+        .option("--json", "Output { ok, deleted } as JSON.")
+        .option("--yes", "Confirm the delete. Required.")
+        .action(async (channelName, opts) => {
+        await runChannelsDelete(channelName, opts);
+    });
 }
 //# sourceMappingURL=channels.js.map

package/dist/commands/deploy-domains.d.ts

@@ -47,6 +47,26 @@ export declare function addOnConfirmQuestion(domain: string, environment: string
 export declare const PURCHASE_TERMS_UNAVAILABLE = "The renewal and refund terms could not be loaded. Check them on the HQ pricing page before you buy.";
 /** The purchase terms published as usage.domains.purchase. Null when not published. */
 export declare function purchaseTermsLine(pricing: Record<string, unknown> | null): string | null;
+/** Hard deadline for `base status --wait`, so a script never waits forever. */
+export declare const BASE_WAIT_DEFAULT_MINUTES = 15;
+export declare const BASE_WAIT_MAX_MINUTES = 60;
+/** Clock hooks for `base status --wait`. Tests replace these. */
+export declare const deployDomainsClock: {
+    now: () => number;
+    sleep: (ms: number) => Promise<void>;
+};
+/**
+ * The price line for a company deploy domain, from the server's answer:
+ * Enterprise includes it; a company with a price override (or comped) pays
+ * what the server says, $0 included; otherwise the server's price, falling
+ * back to the published premium price, then $500.
+ */
+export declare function baseDomainPriceLine(body: {
+    billingBasis?: unknown;
+    monthlyPriceUsd?: unknown;
+}, pricing: Record<string, unknown> | null): string | undefined;
+/** The approval question for `base add`, before the server says the basis. */
+export declare function baseAddConfirmQuestion(domain: string, orgSlug: string, pricing: Record<string, unknown> | null): string;
 export declare function parsePrice(raw: string): number;
 export declare function registerDeployDomainsCommand(deploy: Command): void;
 export {};