@indigoai-us/hq-cli 5.40.0 → 5.41.0

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## [Unreleased]
 
+## [5.41.0]
+
+### Added
+
+- **`hq dm` accepts agent recipients (`agt_…`).** Agents are first-class DM
+  participants server-side (hq-pro #468): an `agt_*` recipient rides the same
+  `toPersonUid` wire field, is gated by the unchanged membership-overlap rule
+  (you can only DM an agent you share an active company with), and is
+  delivered into the agent's durable box inbox — the agent replies by DM as
+  its own `agt_*` identity. Group DMs stay person-only (they're channels);
+  an `agt_*` in a comma-separated recipient list gets a clear error pointing
+  at the 1:1 form.
+
 ## [5.39.3]
 
 ### Fixed

package/dist/commands/dm.d.ts

@@ -4,8 +4,10 @@ export interface DmRecipient {
     toPersonUid?: string;
 }
 /**
- * Classify a recipient arg as an email or a personUid. Mirrors the
- * email/prs_ heuristic used by `hq members`. Returns null for neither.
+ * Classify a recipient arg as an email or a person/agent uid. Mirrors the
+ * email/uid heuristic used by `hq members`. Returns null for neither.
+ * Agent uids (agt_*) ride the same `toPersonUid` wire field — that is the
+ * server contract (POST /v1/notify/dm accepts prs_* or agt_*).
  */
 export declare function detectRecipient(recipient: string): DmRecipient | null;
 /**

package/dist/commands/dm.js

@@ -1,20 +1,25 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c29bef98-d624-5da1-86c9-b4dc9d6d1d7f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f4bc9146-4033-5a73-a246-6f80a5e0f7ef")}catch(e){}}();
 import chalk from "chalk";
 import { readFileSync } from "node:fs";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch } from "../utils/vault-api.js";
 const EMAIL_PATTERN = /^[^\s]+@[^\s]+$/;
-const PERSON_UID_PATTERN = /^prs_[A-Za-z0-9_-]+$/;
+// People (prs_) and agents (agt_) are both first-class DM participants; the
+// server applies the same membership-overlap gate to either and delivers
+// agt_* recipients into the agent's durable box inbox.
+const RECIPIENT_UID_PATTERN = /^(prs|agt)_[A-Za-z0-9_-]+$/;
 /**
- * Classify a recipient arg as an email or a personUid. Mirrors the
- * email/prs_ heuristic used by `hq members`. Returns null for neither.
+ * Classify a recipient arg as an email or a person/agent uid. Mirrors the
+ * email/uid heuristic used by `hq members`. Returns null for neither.
+ * Agent uids (agt_*) ride the same `toPersonUid` wire field — that is the
+ * server contract (POST /v1/notify/dm accepts prs_* or agt_*).
  */
 export function detectRecipient(recipient) {
     const r = recipient.trim();
     if (EMAIL_PATTERN.test(r))
         return { toEmail: r.toLowerCase() };
-    if (PERSON_UID_PATTERN.test(r))
+    if (RECIPIENT_UID_PATTERN.test(r))
         return { toPersonUid: r };
     return null;
 }
@@ -59,7 +64,7 @@ export function parseDuration(input) {
 export function buildDmBody(args) {
     const rcpt = detectRecipient(args.recipient);
     if (!rcpt) {
-        throw new Error(`Invalid recipient '${args.recipient}': must be an email address or a personUid (prs_…).`);
+        throw new Error(`Invalid recipient '${args.recipient}': must be an email address, a personUid (prs_…), or an agentUid (agt_…).`);
     }
     const body = (args.message ?? "").trim();
     if (!body) {
@@ -206,6 +211,12 @@ async function runGroupSend(recipients, message) {
                 console.error(chalk.red(`Invalid recipient '${r}': each must be an email address or a personUid (prs_…).`));
                 process.exit(1);
             }
+            // Group DMs are channels — agents don't participate in channels (their
+            // DM surface is 1:1 via the durable box inbox). DM an agent directly.
+            if (rc.toPersonUid?.startsWith("agt_")) {
+                console.error(chalk.red(`Agents can't join group DMs yet — DM '${r}' directly: hq dm ${r} "<message>".`));
+                process.exit(1);
+            }
             participants.push(rc.toEmail ?? rc.toPersonUid);
         }
         if (participants.length < 2) {
@@ -344,7 +355,7 @@ export function registerDmCommand(program) {
         .description("Send a direct message and manage connection requests.");
     dm
         .command("send <recipient> [message]", { isDefault: true, hidden: true })
-        .description('Send a direct message to someone (email or personUid). They receive it as an HQ Sync notification. If you aren\'t connected yet, it sends a connection request that holds your message. For a GROUP DM, pass a comma-separated recipient: hq dm send "a@x.com,b@y.com" "hi".')
+        .description('Send a direct message to someone (email, personUid, or agentUid). A person receives it as an HQ Sync notification; an agent receives it in its durable box inbox and replies by DM. If you aren\'t connected yet, it sends a connection request that holds your message. For a GROUP DM, pass a comma-separated recipient: hq dm send "a@x.com,b@y.com" "hi".')
         .option("--prompt <text>", "Agent-context prompt the recipient can one-click copy into their agent")
         .option("--prompt-file <path>", "Read the agent prompt from a file")
         .option("--details <text>", "Longer detail shown in the recipient's DM detail window")
@@ -380,4 +391,4 @@ export function registerDmCommand(program) {
     });
 }
 //# sourceMappingURL=dm.js.map
-//# debugId=c29bef98-d624-5da1-86c9-b4dc9d6d1d7f
+//# debugId=f4bc9146-4033-5a73-a246-6f80a5e0f7ef

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.40.0",
+  "version": "5.41.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {

package/src/commands/dm.test.ts

@@ -51,9 +51,16 @@ describe("detectRecipient", () => {
   it("classifies a personUid", () => {
     expect(detectRecipient("prs_01ABC")).toEqual({ toPersonUid: "prs_01ABC" });
   });
+  it("classifies an agentUid on the same wire field (server accepts agt_*)", () => {
+    expect(detectRecipient("agt_01KTT1RJJ6KQRHNHHST0K4VRGT")).toEqual({
+      toPersonUid: "agt_01KTT1RJJ6KQRHNHHST0K4VRGT",
+    });
+  });
   it("rejects anything else", () => {
     expect(detectRecipient("not-an-email")).toBeNull();
     expect(detectRecipient("")).toBeNull();
+    expect(detectRecipient("cmp_01ABC")).toBeNull();
+    expect(detectRecipient("agt")).toBeNull();
   });
 });
 
@@ -93,6 +100,12 @@ describe("buildDmBody", () => {
     ).toEqual({ toPersonUid: "prs_x", body: "m", prompt: "do the thing" });
   });
 
+  it("builds an agent DM (agt_* rides toPersonUid)", () => {
+    expect(
+      buildDmBody({ recipient: "agt_01ABC", message: "status?", now }),
+    ).toEqual({ toPersonUid: "agt_01ABC", body: "status?" });
+  });
+
   it("resolves --in to a future deliverAt", () => {
     const out = buildDmBody({ recipient: "a@b.com", message: "m", inDelay: "10m", now });
     expect(out.deliverAt).toBe("2026-05-29T00:10:00.000Z");

package/src/commands/dm.ts

@@ -5,7 +5,10 @@ import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch } from "../utils/vault-api.js";
 
 const EMAIL_PATTERN = /^[^\s]+@[^\s]+$/;
-const PERSON_UID_PATTERN = /^prs_[A-Za-z0-9_-]+$/;
+// People (prs_) and agents (agt_) are both first-class DM participants; the
+// server applies the same membership-overlap gate to either and delivers
+// agt_* recipients into the agent's durable box inbox.
+const RECIPIENT_UID_PATTERN = /^(prs|agt)_[A-Za-z0-9_-]+$/;
 
 export interface DmRecipient {
   toEmail?: string;
@@ -13,13 +16,15 @@ export interface DmRecipient {
 }
 
 /**
- * Classify a recipient arg as an email or a personUid. Mirrors the
- * email/prs_ heuristic used by `hq members`. Returns null for neither.
+ * Classify a recipient arg as an email or a person/agent uid. Mirrors the
+ * email/uid heuristic used by `hq members`. Returns null for neither.
+ * Agent uids (agt_*) ride the same `toPersonUid` wire field — that is the
+ * server contract (POST /v1/notify/dm accepts prs_* or agt_*).
  */
 export function detectRecipient(recipient: string): DmRecipient | null {
   const r = recipient.trim();
   if (EMAIL_PATTERN.test(r)) return { toEmail: r.toLowerCase() };
-  if (PERSON_UID_PATTERN.test(r)) return { toPersonUid: r };
+  if (RECIPIENT_UID_PATTERN.test(r)) return { toPersonUid: r };
   return null;
 }
 
@@ -82,7 +87,7 @@ export function buildDmBody(args: {
   const rcpt = detectRecipient(args.recipient);
   if (!rcpt) {
     throw new Error(
-      `Invalid recipient '${args.recipient}': must be an email address or a personUid (prs_…).`,
+      `Invalid recipient '${args.recipient}': must be an email address, a personUid (prs_…), or an agentUid (agt_…).`,
     );
   }
   const body = (args.message ?? "").trim();
@@ -283,6 +288,16 @@ async function runGroupSend(
         );
         process.exit(1);
       }
+      // Group DMs are channels — agents don't participate in channels (their
+      // DM surface is 1:1 via the durable box inbox). DM an agent directly.
+      if (rc.toPersonUid?.startsWith("agt_")) {
+        console.error(
+          chalk.red(
+            `Agents can't join group DMs yet — DM '${r}' directly: hq dm ${r} "<message>".`,
+          ),
+        );
+        process.exit(1);
+      }
       participants.push(rc.toEmail ?? rc.toPersonUid!);
     }
     if (participants.length < 2) {
@@ -503,7 +518,7 @@ export function registerDmCommand(program: Command): void {
   dm
     .command("send <recipient> [message]", { isDefault: true, hidden: true })
     .description(
-      'Send a direct message to someone (email or personUid). They receive it as an HQ Sync notification. If you aren\'t connected yet, it sends a connection request that holds your message. For a GROUP DM, pass a comma-separated recipient: hq dm send "a@x.com,b@y.com" "hi".',
+      'Send a direct message to someone (email, personUid, or agentUid). A person receives it as an HQ Sync notification; an agent receives it in its durable box inbox and replies by DM. If you aren\'t connected yet, it sends a connection request that holds your message. For a GROUP DM, pass a comma-separated recipient: hq dm send "a@x.com,b@y.com" "hi".',
     )
     .option(
       "--prompt <text>",