@indigoai-us/hq-cli 5.268.0 → 5.270.0

package/CHANGELOG.md

@@ -2,6 +2,38 @@
 
 ## [Unreleased]
 
+## [5.270.0] — 2026-09-28
+
+### Fixed
+
+- Company billing links in CLI plan-limit notices no longer depend on the
+  rollout flag.
+
+### Removed
+
+- Removed stale gate language from hire-grant command help. Enforcement remains
+  unconditional; backfill remains dry-run only.
+
+### Fixed
+
+- `hq files unshare --with` now accepts the same person UID principals as direct grants.
+- The update gate no longer retries failed Windows installs through `sudo -n`.
+
+## [5.269.0] — 2026-09-28
+
+### Fixed
+
+- Keep-alive no longer treats cancelled, killed, or failed project workers as
+  replacement leads, and recognizes descendants whose session senior belongs
+  to the lead.
+- Company-scoped lane flags resolve ownership from a complete lane company,
+  then a complete mesh company, then the lane's unique project company.
+
+### Added
+
+- Add `hq lanes review` records and optional reviewed-head checks to
+  `hq lanes hold check` for senior lanes.
+
 ## [5.268.0] — 2026-09-28
 
 ### Fixed
@@ -319,6 +351,10 @@
 - Removed the unused `cli.network.force-ipv4` hq-flags lookup and forced IPv4
   startup path. The existing Node family-attempt timeout remains unchanged.
 - `hq auth login` continues when it cannot read or save the remembered provider. It prints a dim warning with the state path and error code; a save failure does not turn a successful sign-in into a login failure.
+- `hq doctor`, client health metadata, and feedback attachments now use the
+  newest sync-log source from the desktop app or configured daemon directory.
+  Daemon `HQ_DAEMON_DIR` overrides and log rotations are supported, and
+  numeric runner error levels count in health metadata.
 
 ## [5.242.0] — 2026-09-27
 

package/dist/command-catalog.generated.d.ts

@@ -1701,7 +1701,7 @@ export declare const COMMAND_CATALOG: readonly [{
         }];
         readonly options: readonly [{
             readonly flags: "--with <principal>";
-            readonly description: "Email address, group id, or '@all' to remove the company-wide grant";
+            readonly description: "Person uid, email address, group id, or '@all' to remove the grant";
         }];
         readonly subcommands: readonly [];
     }, {
@@ -7471,6 +7471,79 @@ export declare const COMMAND_CATALOG: readonly [{
             }];
             readonly subcommands: readonly [];
         }];
+    }, {
+        readonly name: "review";
+        readonly description: "Record manager review of pull-request heads";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] [command]";
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [{
+            readonly name: "record";
+            readonly description: "Record a review against an exact pull-request head";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <repo> <pr-number>";
+            readonly arguments: readonly [{
+                readonly name: "repo";
+                readonly required: true;
+                readonly variadic: false;
+            }, {
+                readonly name: "pr-number";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--head <sha>";
+                readonly description: "40-character commit SHA that was reviewed";
+            }, {
+                readonly flags: "--worker <lane-id>";
+                readonly description: "Worker lane whose output was reviewed";
+            }, {
+                readonly flags: "--note <text>";
+                readonly description: "Short note about the review";
+            }, {
+                readonly flags: "--json";
+                readonly description: "Print JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "show";
+            readonly description: "Show the review record for one pull request";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options] <repo> <pr-number>";
+            readonly arguments: readonly [{
+                readonly name: "repo";
+                readonly required: true;
+                readonly variadic: false;
+            }, {
+                readonly name: "pr-number";
+                readonly required: true;
+                readonly variadic: false;
+            }];
+            readonly options: readonly [{
+                readonly flags: "--json";
+                readonly description: "Print JSON";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "list";
+            readonly description: "List recorded pull-request reviews";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--repo <owner/repo>";
+                readonly description: "Limit results to one repository";
+            }, {
+                readonly flags: "--json";
+                readonly description: "Print JSON";
+            }];
+            readonly subcommands: readonly [];
+        }];
     }, {
         readonly name: "outpost-pruner";
         readonly description: "Inspect, install, and run safe outpost worktree pruning";
@@ -7682,7 +7755,7 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Non-negative safe integer hire grant";
         }, {
             readonly flags: "--grant-context <base64url>";
-            readonly description: "Primary-authorized hire hierarchy and gate decision";
+            readonly description: "Primary-authorized hire hierarchy context";
         }, {
             readonly flags: "--json";
             readonly description: "JSON on stdout (always)";
@@ -7734,7 +7807,7 @@ export declare const COMMAND_CATALOG: readonly [{
         readonly subcommands: readonly [];
     }, {
         readonly name: "backfill-grants";
-        readonly description: "Preview or apply missing hire grants for alive manager lanes";
+        readonly description: "Preview missing hire grants for alive manager lanes; writes are disabled";
         readonly aliases: readonly [];
         readonly hidden: false;
         readonly usage: "[options]";
@@ -7744,7 +7817,7 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "Print proposed values without writing (default)";
         }, {
             readonly flags: "--apply";
-            readonly description: "Write missing hire grants; only run before enforcement is enabled";
+            readonly description: "Retained for compatibility; writes are disabled";
         }, {
             readonly flags: "--json";
             readonly description: "JSON on stdout (always)";

package/dist/command-catalog.generated.js

@@ -2170,7 +2170,7 @@ export const COMMAND_CATALOG = [
                 "options": [
                     {
                         "flags": "--with <principal>",
-                        "description": "Email address, group id, or '@all' to remove the company-wide grant"
+                        "description": "Person uid, email address, group id, or '@all' to remove the grant"
                     }
                 ],
                 "subcommands": []
@@ -9658,6 +9658,100 @@ export const COMMAND_CATALOG = [
                     }
                 ]
             },
+            {
+                "name": "review",
+                "description": "Record manager review of pull-request heads",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] [command]",
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "record",
+                        "description": "Record a review against an exact pull-request head",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <repo> <pr-number>",
+                        "arguments": [
+                            {
+                                "name": "repo",
+                                "required": true,
+                                "variadic": false
+                            },
+                            {
+                                "name": "pr-number",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--head <sha>",
+                                "description": "40-character commit SHA that was reviewed"
+                            },
+                            {
+                                "flags": "--worker <lane-id>",
+                                "description": "Worker lane whose output was reviewed"
+                            },
+                            {
+                                "flags": "--note <text>",
+                                "description": "Short note about the review"
+                            },
+                            {
+                                "flags": "--json",
+                                "description": "Print JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "show",
+                        "description": "Show the review record for one pull request",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options] <repo> <pr-number>",
+                        "arguments": [
+                            {
+                                "name": "repo",
+                                "required": true,
+                                "variadic": false
+                            },
+                            {
+                                "name": "pr-number",
+                                "required": true,
+                                "variadic": false
+                            }
+                        ],
+                        "options": [
+                            {
+                                "flags": "--json",
+                                "description": "Print JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "list",
+                        "description": "List recorded pull-request reviews",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options]",
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--repo <owner/repo>",
+                                "description": "Limit results to one repository"
+                            },
+                            {
+                                "flags": "--json",
+                                "description": "Print JSON"
+                            }
+                        ],
+                        "subcommands": []
+                    }
+                ]
+            },
             {
                 "name": "outpost-pruner",
                 "description": "Inspect, install, and run safe outpost worktree pruning",
@@ -9932,7 +10026,7 @@ export const COMMAND_CATALOG = [
                     },
                     {
                         "flags": "--grant-context <base64url>",
-                        "description": "Primary-authorized hire hierarchy and gate decision"
+                        "description": "Primary-authorized hire hierarchy context"
                     },
                     {
                         "flags": "--json",
@@ -10001,7 +10095,7 @@ export const COMMAND_CATALOG = [
             },
             {
                 "name": "backfill-grants",
-                "description": "Preview or apply missing hire grants for alive manager lanes",
+                "description": "Preview missing hire grants for alive manager lanes; writes are disabled",
                 "aliases": [],
                 "hidden": false,
                 "usage": "[options]",
@@ -10013,7 +10107,7 @@ export const COMMAND_CATALOG = [
                     },
                     {
                         "flags": "--apply",
-                        "description": "Write missing hire grants; only run before enforcement is enabled"
+                        "description": "Retained for compatibility; writes are disabled"
                     },
                     {
                         "flags": "--json",

package/dist/commands/files.js

@@ -262,7 +262,7 @@ export function registerFilesCommand(program) {
     files
         .command("unshare <prefix>")
         .description("Remove a file access grant. A trailing slash targets the private-folder row exactly.")
-        .requiredOption("--with <principal>", "Email address, group id, or '@all' to remove the company-wide grant")
+        .requiredOption("--with <principal>", "Person uid, email address, group id, or '@all' to remove the grant")
         .action(async (prefix, opts) => {
         try {
             // Unshare MUTATES access with no preview, and it resolves the target
@@ -278,7 +278,8 @@ export function registerFilesCommand(program) {
             const isAll = principal === "@all";
             const isEmail = !isAll && EMAIL_PATTERN.test(principal);
             const isGroup = !isAll && GROUP_ID_PATTERN.test(principal);
-            if (!isAll && !isEmail && !isGroup) {
+            const isPerson = !isAll && !isEmail && !isGroup && PERSON_UID_PATTERN.test(principal);
+            if (!isAll && !isEmail && !isGroup && !isPerson) {
                 console.error(chalk.red(`Invalid principal '${principal}': must be '@all', an email address, or a group id matching grp_<alphanumeric>`));
                 process.exit(1);
             }
@@ -286,7 +287,9 @@ export function registerFilesCommand(program) {
                 ? "company-wide"
                 : isEmail
                     ? "email"
-                    : "group";
+                    : isGroup
+                        ? "group"
+                        : "person";
             const granteeId = isAll
                 ? ""
                 : isEmail

package/dist/commands/lanes-hold.d.ts

@@ -1,6 +1,7 @@
 import type { Command } from "commander";
 import type { LaneCompanyRef } from "../lib/lanes/types.js";
 export declare const LANES_REPO_MERGE_HOLD_FLAG = "lanes.repo-merge-hold";
+export declare const LANES_REVIEW_BEFORE_MERGE_FLAG = "lanes.review-before-merge";
 export declare const REPO_MERGE_HOLDS_REL: string;
 declare const HOLD_SCHEMA_VERSION = "hq-lanes-repo-merge-hold.v1";
 interface HoldHistoryEntry {
@@ -31,6 +32,7 @@ export interface LaneRepoMergeHoldDeps {
     now: () => Date;
     env: NodeJS.ProcessEnv;
     mergeHoldEnabled?: (company: LaneCompanyRef) => boolean | Promise<boolean>;
+    mergeReviewEnabled?: (company: LaneCompanyRef) => boolean | Promise<boolean>;
 }
 type WrapHandler = <Args extends unknown[]>(action: (...args: Args) => Promise<void>) => (...args: Args) => Promise<void>;
 export declare function repoMergeHoldPath(hqRoot: string, repo: string): string;