@indigoai-us/hq-cli 5.121.0 → 5.121.1

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## [Unreleased]
 
+## [5.121.1] — 2026-09-18
+
+### Fixed
+
+- `hq --version` prints only the CLI version again. The labelled HQ vs CLI vs
+  latest hq-core report stays on `hq version` (and `--json`). Older updaters
+  compare the whole `--version` output to the CLI they just installed; reading
+  the HQ line made every successful update look like a second install was
+  shadowing it.
+
 ### Documentation
 
 - The 2026-09-18 fleet-bots GA notes group the published CLI changes for plan

package/dist/commands/version.d.ts

@@ -1,9 +1,9 @@
 /**
  * hq version — labelled HQ vs CLI vs latest hq-core.
  *
- * `hq --version` is intercepted on the fast path in index.ts and prints the
- * same report. This registrar exists so `hq --help` lists the command and so
- * `hq version --json` still works if the fast path is skipped.
+ * Bare `hq --version` is intercepted on the fast path in index.ts and prints
+ * only the CLI semver. This registrar exists so `hq --help` lists the command
+ * and so `hq version` / `hq version --json` still work if the fast path is skipped.
  */
 import { Command } from "commander";
 export declare function registerVersionCommand(program: Command): void;

package/dist/index.js

@@ -3,7 +3,7 @@
 // Node 20+ API (e.g. util.styleText) or a newer native ABI is evaluated.
 import "./node-preflight.js";
 import "./node-network-compat.js";
-import { isVersionRequest } from "./version-request.js";
+import { isVersionRequest, wantsLabelledVersionReport } from "./version-request.js";
 // Dependency-light: a pure parser + table, no command graph. Safe to load on
 // every path (including --version) without reintroducing the heavy startup.
 import { isFastCoreRequest } from "./commands/scaffold-fast.js";
@@ -18,9 +18,17 @@ import { installProcessRejectionBoundary } from "./unhandled-rejection-boundary.
 // so runCli's finally still finalizes release health and flushes Sentry.
 installProcessRejectionBoundary();
 if (isVersionRequest(process.argv)) {
-    // Same report as `hq version`: HQ, CLI, latest hq-core. Lazy so --version
-    // still skips the command graph.
-    void import("./utils/version-report.js").then(({ runVersionCommand }) => runVersionCommand(process.argv));
+    // Bare `--version` is the CLI semver only (the contract field updaters
+    // compare). `hq version` and `--json` print the labelled HQ/CLI report.
+    // Lazy so this path still skips the command graph.
+    if (wantsLabelledVersionReport(process.argv)) {
+        void import("./utils/version-report.js").then(({ runVersionCommand }) => runVersionCommand(process.argv));
+    }
+    else {
+        void import("./cli-version.js").then(({ CLI_VERSION }) => {
+            process.stdout.write(`${CLI_VERSION}\n`);
+        });
+    }
 }
 else if (isFastCoreRequest(process.argv)) {
     // Hot relocated plumbing (`hq core hq-session`, `hq core checkpoint-stop-gate`)

package/dist/utils/version-gate.d.ts

@@ -348,11 +348,16 @@ declare function nudgeUpdateRecommended(decision: VersionCheckResponse, install?
  */
 export declare function resolveHqOnPath(): string | null;
 /**
- * Pull the CLI version out of `hq --version` output.
+ * Pull the CLI version out of `hq --version` / `hq version` output.
  *
- * Older builds printed a bare semver. Current builds print a labelled report
- * (`HQ …` / `CLI 5.119.12` / …). Convergence must accept both, otherwise a
- * successful install looks like a PATH shadow.
+ * Compare CLI to CLI. Never take the first version-shaped token: 5.119.13–
+ * 5.121.0 printed `HQ <core>` above `CLI <cli>`, and scraping the HQ line
+ * made a successful install look like a PATH shadow.
+ *
+ * Accepts:
+ *   - bare semver (historical `--version`, and `--version` again after this fix)
+ *   - labelled `CLI x.y.z` (those 5.119.13–5.121.0 builds)
+ *   - JSON `{ "cli": "x.y.z", ... }` from `--json`
  */
 export declare function parseReportedCliVersion(stdout: string): string | null;
 /** `<bin> --version` output (trimmed), or null on any failure/timeout. */

package/dist/utils/version-gate.js

@@ -811,17 +811,33 @@ export function resolveHqOnPath() {
     }
 }
 /**
- * Pull the CLI version out of `hq --version` output.
+ * Pull the CLI version out of `hq --version` / `hq version` output.
  *
- * Older builds printed a bare semver. Current builds print a labelled report
- * (`HQ …` / `CLI 5.119.12` / …). Convergence must accept both, otherwise a
- * successful install looks like a PATH shadow.
+ * Compare CLI to CLI. Never take the first version-shaped token: 5.119.13–
+ * 5.121.0 printed `HQ <core>` above `CLI <cli>`, and scraping the HQ line
+ * made a successful install look like a PATH shadow.
+ *
+ * Accepts:
+ *   - bare semver (historical `--version`, and `--version` again after this fix)
+ *   - labelled `CLI x.y.z` (those 5.119.13–5.121.0 builds)
+ *   - JSON `{ "cli": "x.y.z", ... }` from `--json`
  */
 export function parseReportedCliVersion(stdout) {
     const text = stdout.trim();
     if (!text)
         return null;
-    const labelled = /^CLI\s+(\S+)/m.exec(text);
+    if (text.startsWith("{")) {
+        try {
+            const parsed = JSON.parse(text);
+            if (typeof parsed.cli === "string" && parsed.cli.trim()) {
+                return parsed.cli.trim();
+            }
+        }
+        catch {
+            // Fall through to labelled / bare parsers.
+        }
+    }
+    const labelled = /^[ \t]*CLI[ \t]+(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)/m.exec(text);
     if (labelled)
         return labelled[1];
     const lines = text

package/dist/utils/version-report.d.ts

@@ -19,8 +19,7 @@ export declare function fetchLatestHqCoreRelease(fetchImpl?: typeof fetch, timeo
 export declare function collectVersionReport(deps?: VersionReportDeps): Promise<VersionReport>;
 export declare function formatVersionReport(report: VersionReport): string;
 export declare function versionReportJson(report: VersionReport): string;
-export { isVersionRequest } from "../version-request.js";
-export declare function wantsJson(argv: readonly string[]): boolean;
+export { isVersionRequest, wantsJson } from "../version-request.js";
 export declare function runVersionCommand(argv?: readonly string[], deps?: VersionReportDeps, stdout?: {
     write(chunk: string): unknown;
 }): Promise<void>;

package/dist/utils/version-report.js

@@ -1,12 +1,16 @@
 /**
- * The payload behind `hq version` / labelled `hq --version`.
+ * The payload behind `hq version` and `hq --version --json`.
  *
  * Prints the installed HQ scaffold version, the CLI version (labelled so it
  * cannot be confused with HQ), and the latest hq-core GitHub release. A
  * network failure is an explicit line, never a silent omission.
+ *
+ * Bare `hq --version` / `-V` / `-v` do not use this report: they print the
+ * CLI semver alone so older updaters that compare whole stdout still work.
  */
 import semver from "semver";
 import { CLI_VERSION } from "../cli-version.js";
+import { wantsJson } from "../version-request.js";
 import { findHqRoot } from "./manifest.js";
 import { readHqVersion } from "./pack-contributions.js";
 export const HQ_CORE_LATEST_URL = "https://api.github.com/repos/indigoai-us/hq-core/releases/latest";
@@ -86,10 +90,7 @@ export function versionReportJson(report) {
         latestLookup: report.latestLookup,
     }, null, 2)}\n`;
 }
-export { isVersionRequest } from "../version-request.js";
-export function wantsJson(argv) {
-    return argv.includes("--json");
-}
+export { isVersionRequest, wantsJson } from "../version-request.js";
 export async function runVersionCommand(argv = process.argv, deps = {}, stdout = process.stdout) {
     const report = await collectVersionReport(deps);
     stdout.write(wantsJson(argv) ? versionReportJson(report) : formatVersionReport(report));

package/dist/version-request.d.ts

@@ -4,4 +4,11 @@
  * yaml, semver, or the command graph.
  */
 export declare function isVersionRequest(argv: readonly string[]): boolean;
+export declare function wantsJson(argv: readonly string[]): boolean;
+/**
+ * The labelled HQ / CLI / latest-hq-core report (and JSON). Bare
+ * `--version` / `-V` / `-v` stay a single CLI semver so field updaters that
+ * compare the whole stdout to the version they just installed still converge.
+ */
+export declare function wantsLabelledVersionReport(argv: readonly string[]): boolean;
 //# sourceMappingURL=version-request.d.ts.map

package/dist/version-request.js

@@ -19,4 +19,18 @@ export function isVersionRequest(argv) {
     }
     return positionals.length === 1 && positionals[0] === "version";
 }
+export function wantsJson(argv) {
+    return argv.includes("--json");
+}
+/**
+ * The labelled HQ / CLI / latest-hq-core report (and JSON). Bare
+ * `--version` / `-V` / `-v` stay a single CLI semver so field updaters that
+ * compare the whole stdout to the version they just installed still converge.
+ */
+export function wantsLabelledVersionReport(argv) {
+    if (wantsJson(argv))
+        return true;
+    const positionals = argv.slice(2).filter((a) => !a.startsWith("-"));
+    return positionals.length === 1 && positionals[0] === "version";
+}
 //# sourceMappingURL=version-request.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.121.0",
+  "version": "5.121.1",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {