@indigoai-us/hq-cli 5.345.92 → 5.345.93

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 ## [Unreleased]
 
+## [5.345.93] — 2026-10-12
+- New `hq capacity` command shows how much of each signed-in Claude, Codex,
+  and Grok account's usage limit is left and when it resets. The numbers come
+  from a local ledger that the mesh daemon fills in the background after you
+  run `hq capacity enable`. `hq capacity login` signs in another account
+  through the same flow as `hq lanes accounts login`; a new account is only
+  read for usage, and lanes do not use it until you run
+  `hq lanes accounts enable`. `hq capacity --widget` prints the same view as
+  an HTML card for chat. `hq lanes create` now prints one line with current
+  usage before it starts a provider, and it never changes which provider runs.
+- Connect and re-add Gmail even when the app catalog lists it without an MCP
+  server URL, using Google's documented Gmail MCP endpoint. A catalog app that
+  still has no URL now fails with a non-zero exit instead of looking successful.
+
 ## [5.345.92] — 2026-10-12
 - The background search-index worker no longer spins at full CPU when its working directory is deleted: it only writes to absolute log paths, rejects a `C:/...` log path on macOS and Linux, receives the launcher's HQ root, and kills any qmd cleanup, update, or embed step that runs past 2 hours (`QMD_REINDEX_STEP_TIMEOUT_SEC` overrides). The bundled `qmd-reindex-bg.sh` converts paths with `cygpath` only on Git Bash, MSYS2, or Cygwin.
 

package/dist/command-catalog.generated.d.ts

@@ -9358,6 +9358,258 @@ export declare const COMMAND_CATALOG: readonly [{
         }];
         readonly subcommands: readonly [];
     }];
+}, {
+    readonly name: "capacity";
+    readonly description: "Show provider capacity from the local ledger (read-only; enable, login, and ingest write to it)";
+    readonly aliases: readonly [];
+    readonly hidden: false;
+    readonly helpOption: true;
+    readonly helpCommand: false;
+    readonly usage: "[options] [command]";
+    readonly helpText: readonly [{
+        readonly position: "after";
+        readonly text: "\nCodex rate limits are read with `codex app-server` only when Codex has been idle for 30 minutes and no codex process is running. account/rateLimits/read does not refresh tokens, but starting app-server can still rewrite ~/.codex/auth.json for a managed ChatGPT login, so the read stays idle-gated.\n";
+    }];
+    readonly arguments: readonly [];
+    readonly options: readonly [{
+        readonly flags: "--json";
+        readonly description: "Print now.json plus schemaVersion";
+        readonly hidden: false;
+    }, {
+        readonly flags: "--widget";
+        readonly description: "Print an HTML usage card for chat";
+        readonly hidden: false;
+    }];
+    readonly subcommands: readonly [{
+        readonly name: "history";
+        readonly description: "Print readings from the ledger event log";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--provider <name>";
+            readonly description: "Only this provider";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--since <when>";
+            readonly description: "Duration (24h, 7d, 30m) or a UTC timestamp";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print readings as JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "doctor";
+        readonly description: "Report last success, pinned versus installed CLI versions, and parser failures";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Print JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "enable";
+        readonly description: "Create the ledger directory and mark the collector on";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "disable";
+        readonly description: "Mark the collector off without deleting readings";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "ingest";
+        readonly description: "Record a provider capacity reading";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: true;
+        readonly usage: "[options] [command]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [{
+            readonly name: "claude-statusline";
+            readonly description: "Read one Claude Code statusline JSON payload from stdin and record its rate limits";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options]";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [];
+            readonly options: readonly [];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "refusal";
+            readonly description: "Record a classified provider rate-limit refusal as an exhausted reading";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options]";
+            readonly helpText: readonly [{
+                readonly position: "after";
+                readonly text: "\nworkflow-runner and /conduct call this after a provider failure has been\nclassified as a rate-limit refusal (policy\nindigo-provider-failures-classified-not-masked-as-timeout). Do not call it\nfor a timeout that was not classified as a rate-limit refusal:\n\n  hq capacity ingest refusal --provider <claude|codex|grok> [--limit-id <id>] [--resets-at <iso|epoch>] [--account <hash>]\n\nWhen --limit-id is omitted, the provider's weekly_all limit id in now.json\nis used, or weekly when that view has none. This command does not wire\nthose callers.\n";
+            }];
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--provider <name>";
+                readonly description: "claude, codex, or grok";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--limit-id <id>";
+                readonly description: "Limit to mark; default is the provider's weekly_all id in now.json, else weekly";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--resets-at <when>";
+                readonly description: "UTC timestamp or epoch when this limit resets";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--account <hash>";
+                readonly description: "Hashed account id; default is the account on the chosen limit";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--json";
+                readonly description: "Print the recorded limit as JSON";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }];
+    }, {
+        readonly name: "login";
+        readonly description: "Show signed-in accounts, or sign into a provider through hq lanes accounts login";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] [provider]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [{
+            readonly name: "provider";
+            readonly required: false;
+            readonly variadic: false;
+            readonly description: "claude, codex, or grok";
+        }];
+        readonly options: readonly [{
+            readonly flags: "--account <name>";
+            readonly description: "Registry account id. Omit to name it from the organization after the first read";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--repair";
+            readonly description: "Sign in again for signed-out accounts. Expired accounts are listed, not logged in again";
+            readonly hidden: false;
+        }, {
+            readonly flags: "--json";
+            readonly description: "Print the account list and commands as JSON. Never prompts";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [];
+    }, {
+        readonly name: "accounts";
+        readonly description: "List provider accounts from the registry and default homes";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly helpOption: true;
+        readonly helpCommand: false;
+        readonly usage: "[options] [command]";
+        readonly helpText: readonly [];
+        readonly arguments: readonly [];
+        readonly options: readonly [{
+            readonly flags: "--json";
+            readonly description: "Print JSON";
+            readonly hidden: false;
+        }];
+        readonly subcommands: readonly [{
+            readonly name: "rename";
+            readonly description: "Rename a registry account id. Does not touch the provider credential";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <provider> <id> <new-id>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "provider";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "claude, codex, or grok";
+            }, {
+                readonly name: "id";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Current account id";
+            }, {
+                readonly name: "new-id";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "New account id";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--force";
+                readonly description: "Rename even when a live lane references the account";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "remove";
+            readonly description: "Forget a registry account. Does not delete its home unless --delete-home is set";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly helpOption: true;
+            readonly helpCommand: false;
+            readonly usage: "[options] <provider> <id>";
+            readonly helpText: readonly [];
+            readonly arguments: readonly [{
+                readonly name: "provider";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "claude, codex, or grok";
+            }, {
+                readonly name: "id";
+                readonly required: true;
+                readonly variadic: false;
+                readonly description: "Account id";
+            }];
+            readonly options: readonly [{
+                readonly flags: "--delete-home";
+                readonly description: "Delete the account home. Refuses the default provider home, the home directory, and any path outside ~/.provider-id";
+                readonly hidden: false;
+            }, {
+                readonly flags: "--force";
+                readonly description: "Rename or remove even when a live lane references the account";
+                readonly hidden: false;
+            }];
+            readonly subcommands: readonly [];
+        }];
+    }];
 }, {
     readonly name: "doctor";
     readonly description: "Verify HQ hook wiring, runtimes, and connection health (read-only; integrations uses one control-plane inventory read).";

package/dist/command-catalog.generated.js

@@ -11347,6 +11347,312 @@ export const COMMAND_CATALOG = [
             }
         ]
     },
+    {
+        "name": "capacity",
+        "description": "Show provider capacity from the local ledger (read-only; enable, login, and ingest write to it)",
+        "aliases": [],
+        "hidden": false,
+        "helpOption": true,
+        "helpCommand": false,
+        "usage": "[options] [command]",
+        "helpText": [
+            {
+                "position": "after",
+                "text": "\nCodex rate limits are read with `codex app-server` only when Codex has been idle for 30 minutes and no codex process is running. account/rateLimits/read does not refresh tokens, but starting app-server can still rewrite ~/.codex/auth.json for a managed ChatGPT login, so the read stays idle-gated.\n"
+            }
+        ],
+        "arguments": [],
+        "options": [
+            {
+                "flags": "--json",
+                "description": "Print now.json plus schemaVersion",
+                "hidden": false
+            },
+            {
+                "flags": "--widget",
+                "description": "Print an HTML usage card for chat",
+                "hidden": false
+            }
+        ],
+        "subcommands": [
+            {
+                "name": "history",
+                "description": "Print readings from the ledger event log",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--provider <name>",
+                        "description": "Only this provider",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--since <when>",
+                        "description": "Duration (24h, 7d, 30m) or a UTC timestamp",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print readings as JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "doctor",
+                "description": "Report last success, pinned versus installed CLI versions, and parser failures",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "Print JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "enable",
+                "description": "Create the ledger directory and mark the collector on",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [],
+                "subcommands": []
+            },
+            {
+                "name": "disable",
+                "description": "Mark the collector off without deleting readings",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options]",
+                "helpText": [],
+                "arguments": [],
+                "options": [],
+                "subcommands": []
+            },
+            {
+                "name": "ingest",
+                "description": "Record a provider capacity reading",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": true,
+                "usage": "[options] [command]",
+                "helpText": [],
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "claude-statusline",
+                        "description": "Read one Claude Code statusline JSON payload from stdin and record its rate limits",
+                        "aliases": [],
+                        "hidden": false,
+                        "helpOption": true,
+                        "helpCommand": false,
+                        "usage": "[options]",
+                        "helpText": [],
+                        "arguments": [],
+                        "options": [],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "refusal",
+                        "description": "Record a classified provider rate-limit refusal as an exhausted reading",
+                        "aliases": [],
+                        "hidden": false,
+                        "helpOption": true,
+                        "helpCommand": false,
+                        "usage": "[options]",
+                        "helpText": [
+                            {
+                                "position": "after",
+                                "text": "\nworkflow-runner and /conduct call this after a provider failure has been\nclassified as a rate-limit refusal (policy\nindigo-provider-failures-classified-not-masked-as-timeout). Do not call it\nfor a timeout that was not classified as a rate-limit refusal:\n\n  hq capacity ingest refusal --provider <claude|codex|grok> [--limit-id <id>] [--resets-at <iso|epoch>] [--account <hash>]\n\nWhen --limit-id is omitted, the provider's weekly_all limit id in now.json\nis used, or weekly when that view has none. This command does not wire\nthose callers.\n"
+                            }
+                        ],
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--provider <name>",
+                                "description": "claude, codex, or grok",
+                                "hidden": false
+                            },
+                            {
+                                "flags": "--limit-id <id>",
+                                "description": "Limit to mark; default is the provider's weekly_all id in now.json, else weekly",
+                                "hidden": false
+                            },
+                            {
+                                "flags": "--resets-at <when>",
+                                "description": "UTC timestamp or epoch when this limit resets",
+                                "hidden": false
+                            },
+                            {
+                                "flags": "--account <hash>",
+                                "description": "Hashed account id; default is the account on the chosen limit",
+                                "hidden": false
+                            },
+                            {
+                                "flags": "--json",
+                                "description": "Print the recorded limit as JSON",
+                                "hidden": false
+                            }
+                        ],
+                        "subcommands": []
+                    }
+                ]
+            },
+            {
+                "name": "login",
+                "description": "Show signed-in accounts, or sign into a provider through hq lanes accounts login",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] [provider]",
+                "helpText": [],
+                "arguments": [
+                    {
+                        "name": "provider",
+                        "required": false,
+                        "variadic": false,
+                        "description": "claude, codex, or grok"
+                    }
+                ],
+                "options": [
+                    {
+                        "flags": "--account <name>",
+                        "description": "Registry account id. Omit to name it from the organization after the first read",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--repair",
+                        "description": "Sign in again for signed-out accounts. Expired accounts are listed, not logged in again",
+                        "hidden": false
+                    },
+                    {
+                        "flags": "--json",
+                        "description": "Print the account list and commands as JSON. Never prompts",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": []
+            },
+            {
+                "name": "accounts",
+                "description": "List provider accounts from the registry and default homes",
+                "aliases": [],
+                "hidden": false,
+                "helpOption": true,
+                "helpCommand": false,
+                "usage": "[options] [command]",
+                "helpText": [],
+                "arguments": [],
+                "options": [
+                    {
+                        "flags": "--json",
+                        "description": "Print JSON",
+                        "hidden": false
+                    }
+                ],
+                "subcommands": [
+                    {
+                        "name": "rename",
+                        "description": "Rename a registry account id. Does not touch the provider credential",
+                        "aliases": [],
+                        "hidden": false,
+                        "helpOption": true,
+                        "helpCommand": false,
+                        "usage": "[options] <provider> <id> <new-id>",
+                        "helpText": [],
+                        "arguments": [
+                            {
+                                "name": "provider",
+                                "required": true,
+                                "variadic": false,
+                                "description": "claude, codex, or grok"
+                            },
+                            {
+                                "name": "id",
+                                "required": true,
+                                "variadic": false,
+                                "description": "Current account id"
+                            },
+                            {
+                                "name": "new-id",
+                                "required": true,
+                                "variadic": false,
+                                "description": "New account id"
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--force",
+                                "description": "Rename even when a live lane references the account",
+                                "hidden": false
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "remove",
+                        "description": "Forget a registry account. Does not delete its home unless --delete-home is set",
+                        "aliases": [],
+                        "hidden": false,
+                        "helpOption": true,
+                        "helpCommand": false,
+                        "usage": "[options] <provider> <id>",
+                        "helpText": [],
+                        "arguments": [
+                            {
+                                "name": "provider",
+                                "required": true,
+                                "variadic": false,
+                                "description": "claude, codex, or grok"
+                            },
+                            {
+                                "name": "id",
+                                "required": true,
+                                "variadic": false,
+                                "description": "Account id"
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--delete-home",
+                                "description": "Delete the account home. Refuses the default provider home, the home directory, and any path outside ~/.provider-id",
+                                "hidden": false
+                            },
+                            {
+                                "flags": "--force",
+                                "description": "Rename or remove even when a live lane references the account",
+                                "hidden": false
+                            }
+                        ],
+                        "subcommands": []
+                    }
+                ]
+            }
+        ]
+    },
     {
         "name": "doctor",
         "description": "Verify HQ hook wiring, runtimes, and connection health (read-only; integrations uses one control-plane inventory read).",

package/dist/command-registration-plan.d.ts

@@ -442,6 +442,12 @@ export declare const REGISTRATION_PLAN: readonly [{
     readonly parent: "program";
     readonly module: "./commands/index-cmd.js";
     readonly exportName: "registerIndexCommand";
+}, {
+    readonly type: "registrar";
+    readonly root: "capacity";
+    readonly parent: "program";
+    readonly module: "./commands/capacity.js";
+    readonly exportName: "registerCapacityCommand";
 }, {
     readonly type: "registrar";
     readonly root: "doctor";

package/dist/command-registration-plan.js

@@ -76,6 +76,7 @@ export const REGISTRATION_PLAN = [
     { type: "registrar", root: "core", parent: "program", module: "./commands/core.js", exportName: "registerCoreCommands" },
     { type: "registrar", root: "search", parent: "program", module: "./commands/search.js", exportName: "registerSearchCommand" },
     { type: "registrar", root: "index", parent: "program", module: "./commands/index-cmd.js", exportName: "registerIndexCommand" },
+    { type: "registrar", root: "capacity", parent: "program", module: "./commands/capacity.js", exportName: "registerCapacityCommand" },
     { type: "registrar", root: "doctor", parent: "program", module: "./commands/doctor.js", exportName: "registerDoctorCommand" },
     { type: "registrar", root: "mesh", parent: "program", module: "./commands/mesh.js", exportName: "registerMeshCommand" },
     { type: "registrar", root: "lanes", parent: "program", module: "./commands/lanes.js", exportName: "registerLanesCommand" },