@indigoai-us/hq-cli 5.345.79 → 5.345.81

package/dist/lib/storage-feature-flag.d.ts

@@ -0,0 +1,56 @@
+/**
+ * HQ Storage allowlist gate (hq-flags key `hq-storage`).
+ *
+ * Owner decision (Corey, 2026-10-11): "let's fully ship the storage feature
+ * but all behind a feature flag for indigo users only." That is an explicit
+ * hold on the default-on kill-switch rule
+ * (`indigo-feature-flags-default-on-as-fail-safes`): the registry row is
+ * `defaultValue: false` with a company override for Indigo, so this gate is
+ * an ALLOWLIST, not a kill switch. It therefore FAILS CLOSED: a missing,
+ * stale, discovered, archived or unreadable value means Storage is off.
+ *
+ * Who it is on for is decided by hq-pro's shared evaluator (person override,
+ * then company override by uid, then slug, then default), resolved
+ * server-side for the caller. A company override only fires when the read
+ * names that company, so the caller is "on" when the flag resolves true for
+ * any company they are an active member of. hq-pro refuses a resolve for a
+ * company the caller is not a member of, so the tenant boundary is the
+ * membership check on the server, never a local list.
+ *
+ * This module is the synchronous, cache-only half used to hide the command
+ * from root help. It reads only fresh persisted snapshots and never touches
+ * the network. The authoritative, live check that runs before any storage
+ * subcommand lives in `commands/storage-gate.ts`.
+ */
+import type { Command } from "commander";
+import { HQ_STORAGE_FLAG } from "./cli-flag-keys.js";
+export { HQ_STORAGE_FLAG };
+/** Machine-readable refusal code the desktop app keys on. */
+export declare const STORAGE_FEATURE_DISABLED_CODE = "feature_disabled";
+export declare const STORAGE_FEATURE_DISABLED_MESSAGE = "Storage tools aren't available on your account yet.";
+export interface StorageFlagCacheDeps {
+    env?: NodeJS.ProcessEnv;
+    /** Company uids whose persisted snapshots may be consulted. */
+    companyUids?: () => string[];
+    readCompanySnapshot?: (companyUid: string) => {
+        flags: Record<string, boolean>;
+    } | null;
+    readPersonSnapshot?: () => {
+        flags: Record<string, boolean>;
+    } | null;
+}
+/**
+ * True only when a fresh persisted snapshot already says `hq-storage` is on
+ * for this caller (person scope or one of their companies). Everything else,
+ * including any read error, is false.
+ */
+export declare function storageFeatureEnabledFromCache(deps?: StorageFlagCacheDeps): boolean;
+/** The JSON refusal printed on stdout for `--json` callers such as the desktop app. */
+export declare function storageFeatureDisabledJson(): string;
+/**
+ * Hide the catalog's `storage` root from root help unless the cached gate is
+ * on. Lives here, not in commands/storage-gate.ts, so the root-help path only
+ * loads this cache-only module.
+ */
+export declare function hideStorageInCatalog(program: Command, enabled?: () => boolean): void;
+//# sourceMappingURL=storage-feature-flag.d.ts.map

package/dist/lib/storage-feature-flag.js

@@ -0,0 +1,104 @@
+import { readLocalOverride } from "@indigoai-us/hq-flags-client";
+import { HQ_STORAGE_FLAG } from "./cli-flag-keys.js";
+import { readFlagSnapshotFile, readPersonFlagSnapshotFile } from "./flag-snapshot-file.js";
+import { resolveProcessFlagCompanyContext } from "./process-flag-company-context.js";
+import { readCompaniesManifestMap } from "./work-context/repo-remote.js";
+import { resolveDefaultHqRoot } from "../utils/hq-root-resolver.js";
+export { HQ_STORAGE_FLAG };
+/** Machine-readable refusal code the desktop app keys on. */
+export const STORAGE_FEATURE_DISABLED_CODE = "feature_disabled";
+export const STORAGE_FEATURE_DISABLED_MESSAGE = "Storage tools aren't available on your account yet.";
+const COMPANY_UID_RE = /^cmp_[A-Za-z0-9]{3,128}$/;
+function knownCompanyUids(env) {
+    const uids = new Set();
+    try {
+        const context = resolveProcessFlagCompanyContext(env);
+        if (context.companyUid)
+            uids.add(context.companyUid);
+    }
+    catch {
+        // No context: fall through to the manifest.
+    }
+    try {
+        const manifest = readCompaniesManifestMap(resolveDefaultHqRoot({ env }));
+        for (const entry of Object.values(manifest ?? {})) {
+            const uid = entry?.cloud_uid;
+            if (typeof uid === "string" && COMPANY_UID_RE.test(uid.trim()))
+                uids.add(uid.trim());
+        }
+    }
+    catch {
+        // An unreadable manifest only means fewer cached snapshots to check.
+    }
+    return [...uids];
+}
+/**
+ * True only when a fresh persisted snapshot already says `hq-storage` is on
+ * for this caller (person scope or one of their companies). Everything else,
+ * including any read error, is false.
+ */
+export function storageFeatureEnabledFromCache(deps = {}) {
+    const env = deps.env ?? process.env;
+    try {
+        const local = readLocalOverride(HQ_STORAGE_FLAG, env);
+        if (local !== null)
+            return local;
+    }
+    catch {
+        // Treat a broken override like no override.
+    }
+    const on = (snapshot) => snapshot?.flags?.[HQ_STORAGE_FLAG] === true;
+    try {
+        if (on((deps.readPersonSnapshot ?? (() => readPersonFlagSnapshotFile({ env })))()))
+            return true;
+    }
+    catch {
+        // fail closed
+    }
+    const readCompany = deps.readCompanySnapshot ?? ((uid) => readFlagSnapshotFile(uid, { env }));
+    let uids = [];
+    try {
+        uids = (deps.companyUids ?? (() => knownCompanyUids(env)))();
+    }
+    catch {
+        return false;
+    }
+    for (const uid of uids) {
+        try {
+            if (on(readCompany(uid)))
+                return true;
+        }
+        catch {
+            // fail closed for this company
+        }
+    }
+    return false;
+}
+/** The JSON refusal printed on stdout for `--json` callers such as the desktop app. */
+export function storageFeatureDisabledJson() {
+    return JSON.stringify({
+        ok: false,
+        code: STORAGE_FEATURE_DISABLED_CODE,
+        message: STORAGE_FEATURE_DISABLED_MESSAGE,
+    });
+}
+/**
+ * Hide the catalog's `storage` root from root help unless the cached gate is
+ * on. Lives here, not in commands/storage-gate.ts, so the root-help path only
+ * loads this cache-only module.
+ */
+export function hideStorageInCatalog(program, enabled = storageFeatureEnabledFromCache) {
+    const storage = program.commands.find((command) => command.name() === "storage");
+    if (!storage)
+        return;
+    let visible = false;
+    try {
+        visible = enabled();
+    }
+    catch {
+        visible = false;
+    }
+    if (!visible)
+        storage._hidden = true;
+}
+//# sourceMappingURL=storage-feature-flag.js.map

package/dist/main.js

@@ -273,11 +273,22 @@ export async function runCli() {
         const registration = await registerCommandsWithRecovery({
             register: async () => {
                 const lazy = findLazyCommand(process.argv);
-                if (lazy) {
+                if (lazy?.name === "storage") {
+                    // HQ Storage is an allowlist gate (owner hold 2026-10-11, Indigo-only):
+                    // resolve it here, where awaiting is free, and fail closed.
+                    const gate = await import("./commands/storage-gate.js");
+                    if (await gate.storageFeatureEnabled())
+                        await lazy.register(program);
+                    else
+                        gate.registerStorageRefusal(program, process.argv);
+                }
+                else if (lazy) {
                     await lazy.register(program);
                 }
                 else {
                     registerCommandCatalog(program);
+                    const { hideStorageInCatalog } = await import("./lib/storage-feature-flag.js");
+                    hideStorageInCatalog(program);
                 }
             },
             argv: process.argv,

package/dist/sentry-before-send.js

@@ -192,6 +192,7 @@ export function beforeSend(event, _hint) {
             "core-version-unavailable",
             "core-update-available",
             "no-local-tree",
+            "legacy-personal-journal",
             "never-synced",
             "invalid-last-sync",
             "stale-threshold",

package/dist/utils/resident-package-preload.js

@@ -41,7 +41,7 @@ export const RESIDENT_PACKAGE_MODULES = {
     ],
     "bot-logs-follow": [],
     mcp: ["../lib/mcp/tools.js", "../lib/mcp/prompts.js", "../lib/anywhere-person-setting.js", "../utils/cognito-session.js", "@indigoai-us/hq-cloud", "../sentry.js", "../lib/doctor/client-health-reason-codes-flag.js", "@indigoai-us/hq-flags-client"],
-    childWrapper: ["../main.js", "../lib/service-manager/startup-migration.js"],
+    childWrapper: ["../main.js", "../lib/service-manager/startup-migration.js", "../commands/storage-gate.js", "../lib/storage-feature-flag.js"],
     coreJobRun: ["../commands/core-native-jobs-flag.js", "../commands/core-native-family-flag.js", "../lib/flag-registry.js", "../lib/flag-snapshot-file.js"],
     "daemon-call": ["../lib/daemon/protocol.js"],
     daemon: [
@@ -201,6 +201,8 @@ const LOADERS = {
     childWrapper: [
         () => import("../main.js"),
         () => import("../lib/service-manager/startup-migration.js"),
+        () => import("../commands/storage-gate.js"),
+        () => import("../lib/storage-feature-flag.js"),
     ],
     coreJobRun: [
         () => import("../commands/core-native-jobs-flag.js"),

package/dist/utils/self-update.js

@@ -65,7 +65,7 @@ import chalk from "chalk";
 import { Sentry } from "../sentry.js";
 import { isCliTelemetryDisabled } from "./cli-telemetry.js";
 import { CLI_NAME, CLI_VERSION } from "../cli-version.js";
-import { buildBunInstallArgv, buildPnpmInstallArgv, buildPrefixedInstallArgv, buildSpawnPlan, canWriteNpmInstall, captureNonWritableNpmPrefixNotice, claimNonWritableNpmPrefixNotice, checkUpdateConvergence, derivePnpmHome, detachUpdateSupervisor, isBunManagedPackageDir, isLocalDependencyInstall, isPnpmManagedPackageDir, nonWritablePrefixNote, openInstallOutput, resolvePnpmPathInstall, pnpmUpdateEnv, pnpmInstalledVersion, performPnpmUpdate, resolveRunningInstall, runUpdateCommand, runSupervisedUpdateCommand, UPDATE_RECURSION_GUARD_ENV, } from "./version-gate.js";
+import { buildBunInstallArgv, buildPnpmInstallArgv, buildPrefixedInstallArgv, buildSpawnPlan, canWriteNpmInstall, captureNonWritableNpmPrefixNotice, claimNonWritableNpmPrefixNotice, checkUpdateConvergence, derivePnpmHome, detachUpdateSupervisor, isBunManagedPackageDir, isLocalDependencyInstall, isPnpmManagedPackageDir, normalizeRunningInstall, nonWritablePrefixNote, openInstallOutput, resolvePnpmPathInstall, pnpmUpdateEnv, pnpmInstalledVersion, performPnpmUpdate, resolveRunningInstall, runUpdateCommand, runSupervisedUpdateCommand, UPDATE_RECURSION_GUARD_ENV, } from "./version-gate.js";
 import { canStageInstall, stagedNpmInstall } from "./staged-install.js";
 import { acquireUpdateLock as acquireSharedUpdateLock } from "./update-lock.js";
 import { markLatestIneffective } from "./version-check.js";
@@ -926,7 +926,7 @@ async function attemptUpdateAndReexec(argv, flavor, known, deps, env) {
     // actually running would stay exactly as stale as it started while the CLI
     // reported success and re-exec'd into the same build. That is the shape of
     // the 2026-09-02 gate loop — see isLocalDependencyInstall in version-gate.ts.
-    let install = (deps.resolveInstall ?? resolveRunningInstall)();
+    let install = normalizeRunningInstall((deps.resolveInstall ?? resolveRunningInstall)());
     if (isLocalDependencyInstall(install)) {
         console.error(chalk.dim(`hq-cli ${latest} is available, but this copy is a local dependency (${install.packageRoot}) — update the project that owns it.`));
         return { action: "skipped", latest };

package/dist/utils/version-gate.d.ts

@@ -31,6 +31,9 @@ import { buildSpawnPlan, quoteForWindowsShell } from "./windows-spawn.js";
 import { type UpdateLockHandle } from "./update-lock.js";
 /** Prevent an update package manager's lifecycle child from starting another updater. */
 export declare const UPDATE_RECURSION_GUARD_ENV = "HQ_RESCUE_SELF_UPDATED";
+/** First-party hq-cli is published by this org; the 24h pnpm quarantine must not
+ *  block the version-gate from installing the server-required build. */
+export declare const PNPM_FIRST_PARTY_RELEASE_AGE_EXCLUDE: string;
 export type VersionGatePhase = "preflight" | "lock_acquired" | "installer_running" | "verifying" | "rollback" | "complete" | "failed" | "unknown";
 /** The last closed version-gate phase observed in this process. */
 export declare function getVersionGatePhase(): VersionGatePhase;
@@ -86,6 +89,8 @@ export declare function npmPrefixFromPackageDir(pkgDir: string): string | null;
  * Those layouts fall through to the ordinary npm-prefix/manual handling.
  */
 export declare function isPnpmManagedPackageDir(pkgDir: string): boolean;
+/** pnpm's content-addressed `store/vN/links/…` layout (not `store/vN/tmp` dlx). */
+export declare function isPnpmContentStoreLinksPackageDir(pkgDir: string): boolean;
 /** Whether the running package lives inside Bun's global install tree. */
 export declare function isBunManagedPackageDir(pkgDir: string): boolean;
 /**
@@ -164,6 +169,13 @@ export interface RunningInstall {
     packageRoot: string | null;
 }
 export declare function resolveRunningInstall(): RunningInstall;
+/**
+ * Repair a RunningInstall whose package root is a pnpm content store but whose
+ * manager was recorded as npm (the pre-fix classification of a realpath'd
+ * pnpm-global shim). Callers that inject an install snapshot must run this
+ * before the local-dependency hard stop, or they replay the 2420 lockout.
+ */
+export declare function normalizeRunningInstall(install: RunningInstall): RunningInstall;
 /** Convenience view of {@link resolveRunningInstall} for callers needing one field. */
 export declare function resolveRunningManager(): InstallManager;
 /** Convenience view of {@link resolveRunningInstall} for callers needing one field. */
@@ -564,8 +576,11 @@ export declare const __test__: {
     isLocalDependencyInstall: typeof isLocalDependencyInstall;
     isLocalDependencyPackageDir: typeof isLocalDependencyPackageDir;
     isNewerVersion: typeof isNewerVersion;
+    isPnpmContentStoreLinksPackageDir: typeof isPnpmContentStoreLinksPackageDir;
     isPnpmManagedPackageDir: typeof isPnpmManagedPackageDir;
     isPnpmVirtualStorePackageDir: typeof isPnpmVirtualStorePackageDir;
+    normalizeRunningInstall: typeof normalizeRunningInstall;
+    PNPM_FIRST_PARTY_RELEASE_AGE_EXCLUDE: string;
     isPrefixWritable: typeof isPrefixWritable;
     nonWritablePrefixNote: typeof nonWritablePrefixNote;
     npmPrefixFromPackageDir: typeof npmPrefixFromPackageDir;

package/dist/utils/version-gate.js

@@ -49,6 +49,9 @@ const CLIENT_ID = "hq-cli";
 const ENDPOINT_PATH = "/v1/client-version/check";
 const FETCH_TIMEOUT_MS = 3_000;
 const LATEST_PACKAGE_SPEC = `${CLI_NAME}@latest`;
+/** First-party hq-cli is published by this org; the 24h pnpm quarantine must not
+ *  block the version-gate from installing the server-required build. */
+export const PNPM_FIRST_PARTY_RELEASE_AGE_EXCLUDE = `--config.minimumReleaseAgeExclude=${CLI_NAME}`;
 let currentVersionGatePhase = "unknown";
 /** The last closed version-gate phase observed in this process. */
 export function getVersionGatePhase() {
@@ -294,6 +297,29 @@ export function isPnpmManagedPackageDir(pkgDir) {
             return true;
         }
     }
+    // Node realpaths pnpm's generated shim into the content-addressed store:
+    //   $PNPM_HOME/store/v11/links/@indigoai-us/hq-cli/<ver>/<hash>/node_modules/@indigoai-us/hq-cli
+    // There is no `global/` segment after realpath, so the checks above miss it
+    // and the gate used to label this a "local dependency" (feedback 2420).
+    // `store/vN/tmp/` is pnpm dlx and must stay non-global.
+    if (isPnpmContentStoreLinksPackageDir(normalized))
+        return true;
+    return false;
+}
+/** pnpm's content-addressed `store/vN/links/…` layout (not `store/vN/tmp` dlx). */
+export function isPnpmContentStoreLinksPackageDir(pkgDir) {
+    const normalized = pkgDir.replace(/\\/g, "/").replace(/\/+$/, "");
+    const segments = normalized.split("/").filter(Boolean);
+    for (let i = 0; i < segments.length - 2; i += 1) {
+        if (segments[i] !== "store")
+            continue;
+        if (!/^v\d+$/.test(segments[i + 1]))
+            continue;
+        if (segments[i + 2] === "tmp")
+            return false;
+        if (segments[i + 2] === "links")
+            return true;
+    }
     return false;
 }
 /** Whether the running package lives inside Bun's global install tree. */
@@ -449,6 +475,21 @@ export function resolveRunningInstall() {
         return { manager: "npm", prefix: null, packageRoot: null };
     }
 }
+/**
+ * Repair a RunningInstall whose package root is a pnpm content store but whose
+ * manager was recorded as npm (the pre-fix classification of a realpath'd
+ * pnpm-global shim). Callers that inject an install snapshot must run this
+ * before the local-dependency hard stop, or they replay the 2420 lockout.
+ */
+export function normalizeRunningInstall(install) {
+    if (!install.packageRoot)
+        return install;
+    if (install.manager === "pnpm")
+        return install;
+    if (!isPnpmManagedPackageDir(install.packageRoot))
+        return install;
+    return { manager: "pnpm", prefix: null, packageRoot: install.packageRoot };
+}
 /** Convenience view of {@link resolveRunningInstall} for callers needing one field. */
 export function resolveRunningManager() {
     return resolveRunningInstall().manager;
@@ -652,11 +693,15 @@ export function derivePnpmHome(install) {
     if (install.manager !== "pnpm" || !install.packageRoot)
         return null;
     const normalized = install.packageRoot.replace(/\\/g, "/");
-    const marker = normalized.indexOf("/global/");
-    if (marker === -1)
-        return null;
-    const home = normalized.slice(0, marker);
-    return home || null;
+    const globalMarker = normalized.indexOf("/global/");
+    if (globalMarker !== -1) {
+        const home = normalized.slice(0, globalMarker);
+        return home || null;
+    }
+    const storeMatch = normalized.match(/^(.*)\/store\/v\d+\/links\//);
+    if (storeMatch)
+        return storeMatch[1] || null;
+    return null;
 }
 /**
  * Environment for the pnpm self-update spawn. pnpm requires its configured
@@ -713,7 +758,7 @@ export function buildPrefixedInstallArgv(prefix) {
  * the new version — which is the whole point of routing here instead of npm.
  */
 export function buildPnpmInstallArgv(install) {
-    const args = ["add", "-g", LATEST_PACKAGE_SPEC];
+    const args = ["add", "-g", LATEST_PACKAGE_SPEC, PNPM_FIRST_PARTY_RELEASE_AGE_EXCLUDE];
     const dirs = install ? pnpmInstallDirs(install) : null;
     if (dirs) {
         args.push("--global-dir", dirs.globalDir, "--store-dir", dirs.storeDir);
@@ -732,8 +777,18 @@ export function pnpmInstallDirs(install) {
     const normalized = install.packageRoot.replace(/\\/g, "/");
     const global = normalized.match(/^(.*\/global\/\d+\/node_modules)(?:\/|$)|^(.*\/global\/v\d+\/[^/]+\/node_modules)(?:\/|$)/);
     const globalNodeModules = global?.[1] ?? global?.[2];
-    if (!globalNodeModules)
-        return null;
+    if (!globalNodeModules) {
+        const storeMatch = normalized.match(/^(.*)\/store\/(v\d+)\/links\//);
+        if (!storeMatch)
+            return null;
+        const pnpmHome = storeMatch[1];
+        const storeVersion = storeMatch[2];
+        return {
+            globalDir: path.join(pnpmHome, "global"),
+            storeDir: path.join(pnpmHome, "store", storeVersion),
+            virtualStoreDir: path.join(pnpmHome, "global", storeVersion, "node_modules", ".pnpm"),
+        };
+    }
     const metadataPath = path.join(globalNodeModules, ".modules.yaml");
     try {
         const metadata = yaml.load(readFileSync(metadataPath, "utf8"));
@@ -966,6 +1021,10 @@ async function fetchVersionDecision(timeoutMs = FETCH_TIMEOUT_MS) {
         return null;
     }
 }
+function isReleaseAgeInstallFailure(result) {
+    const text = `${result.detail ?? ""}\n${result.stdout ?? ""}`;
+    return /minimumReleaseAge|minimum-release-age|published less than/i.test(text);
+}
 // The Windows spawn recipe (`buildSpawnPlan` + `quoteForWindowsShell`) lives in
 // ./windows-spawn.ts so the self-update path and the qmd spawn path share one
 // implementation. Imported at the top and re-exported here to keep this module's
@@ -1353,6 +1412,7 @@ function manualUpdateCommand(install, decision) {
  * remains for callers that pass no handler.
  */
 function nudgeUpdateRecommended(decision, install = resolveRunningInstall()) {
+    install = normalizeRunningInstall(install);
     if (!isNewerVersion(decision.latestVersion, CLI_VERSION))
         return;
     const msg = chalk.yellow(`⚠ A new version of hq-cli is available: ${decision.latestVersion} (current: ${CLI_VERSION}).`);
@@ -1663,7 +1723,7 @@ function enforceUpdateRequired(decision, deps = {}) {
     // server's `updateCommand` and any npm prefix are wrong for those layouts, so
     // `resolveRunningInstall`
     // already reports `prefix: null` there and neither is consulted below.
-    const install = (deps.resolveInstall ?? resolveRunningInstall)();
+    const install = normalizeRunningInstall((deps.resolveInstall ?? resolveRunningInstall)());
     // Loop protection #1 — nothing here can update a copy this process does not
     // own. Installing globally would leave the local copy that is actually
     // running stale, so the gate would fire again on the very next invocation.
@@ -1886,6 +1946,13 @@ function attemptRequiredUpdate(decision, deps, install) {
             console.error(chalk.dim("  Continuing on the current hq-cli version."));
             return "continue";
         }
+        // A 24h pnpm quarantine that still blocks first-party hq-cli must not
+        // lock the user out of secrets (or any other command) for the rest of
+        // that window. Warn and run the current CLI — same as a timed-out updater.
+        if (isReleaseAgeInstallFailure(result)) {
+            console.error(chalk.dim("  The package manager refused a build newer than its 24h install guard; continuing on the current hq-cli version."));
+            return "continue";
+        }
         return noticeFlush ? noticeFlush.then(() => 75) : 75;
     }
     // Read-your-writes: a "successful" install into the npm prefix does not
@@ -1914,7 +1981,7 @@ export async function enforceVersionGate(onUpdateRecommended, options = {}) {
         return "continue";
     // Resolved once, here, so the up-to-date case never pays for the walk and
     // neither downstream path repeats it.
-    const install = resolveRunningInstall();
+    const install = normalizeRunningInstall(resolveRunningInstall());
     if (decision.updateRequired) {
         // Load the staged installer only when an npm prefix is resolved. The version
         // gate is imported during every CLI startup, so keep the filesystem-heavy
@@ -1985,8 +2052,11 @@ export const __test__ = {
     isLocalDependencyInstall,
     isLocalDependencyPackageDir,
     isNewerVersion,
+    isPnpmContentStoreLinksPackageDir,
     isPnpmManagedPackageDir,
     isPnpmVirtualStorePackageDir,
+    normalizeRunningInstall,
+    PNPM_FIRST_PARTY_RELEASE_AGE_EXCLUDE,
     isPrefixWritable,
     nonWritablePrefixNote,
     npmPrefixFromPackageDir,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.79",
+  "version": "5.345.81",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {
@@ -48,7 +48,7 @@
     "@aws-sdk/client-iot-data-plane": "^3.1096.0",
     "@aws-sdk/client-s3": "^3.1049.0",
     "@aws-sdk/dsql-signer": "^3.1146.0",
-    "@indigoai-us/hq-cloud": "~6.18.54",
+    "@indigoai-us/hq-cloud": "~6.18.61",
     "@indigoai-us/hq-flags-client": "^0.1.2",
     "@modelcontextprotocol/sdk": "1.29.0",
     "@sentry/node": "^10.49.0",