@indigoai-us/hq-cli 5.312.0 → 5.312.2-beta.0

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## [Unreleased]
 
+## [5.312.2-beta.0] — 2026-10-02
+- Fix checkpoint Stop hook-state creation and the jq-absent early exit to match the bundled shell.
+- Let `hq sync now` skip unchanged server-owned cloud placeholders while keeping their warnings visible, so the sync can complete.
+
 ## [5.312.0] — 2026-10-02
 - The desktop app can turn event-driven daemon sync on or off with its Instant Sync setting. The daemon stores the preference and restarts when a running daemon needs to apply it.
 - `hq dm channel` now explains empty channels and displays a readable fallback for bodyless system notifications.

package/dist/commands/cloud.js

@@ -1697,6 +1697,7 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
             hqRoot,
             progressRecorder: trackingProgressRecorder(planLimitTracker, pushProgressCompany),
             skipUnchanged: true,
+            serverOwnedPathPolicy: "skip",
             propagateDeletes: true,
             propagateDeletePolicy: resolveDeletePolicy(),
             ...(onConflict ? { onConflict } : {}),

package/dist/commands/core-checkpoint-stop-gate-native.js

@@ -481,6 +481,11 @@ export function executeCheckpointStopGate(input, context, overrides = {}) {
         return { code: 0, stdout: "", stderr: "" };
     }
     const evidence = payloadReplyEvidence(payload);
+    // The shell's jq-backed input_fields assignment exits successfully before
+    // any state work when jq is unavailable. Keep that early-exit ordering even
+    // though the native parser does not otherwise need jq.
+    if (!deps.commandExists("jq", env))
+        return { code: 0, stdout: "", stderr: "" };
     const transcriptPath = toShellString(payload.transcript_path);
     const sessionId = toShellString(payload.session_id);
     if (env.HQ_CHECKPOINT_SIBLING === "1")
@@ -517,6 +522,13 @@ export function executeCheckpointStopGate(input, context, overrides = {}) {
     else
         return { code: 0, stdout: "", stderr };
     const stateDir = path.join(root, "workspace", "orchestrator", "hook-state");
+    try {
+        deps.mkdir(stateDir);
+    }
+    catch {
+        // hook-lib.sh runs `mkdir -p ... 2>/dev/null || true`; the directory and
+        // write checks below determine whether this invocation can continue.
+    }
     if (!deps.isDirectory(stateDir) || !deps.canWrite(stateDir))
         return { code: 0, stdout: "", stderr };
     const eligibilityFile = path.join(stateDir, `checkpoint-gate-eligible-${runtime}`);

package/dist/lib/agents/model-catalog.d.ts

@@ -1,6 +1,6 @@
 export declare const AGENT_MODEL_PROVIDERS: readonly ["codex", "grok", "claude"];
 export type AgentModelProvider = (typeof AGENT_MODEL_PROVIDERS)[number];
-export interface AgentCatalogModel {
+interface AgentCatalogModel {
     id: string;
     label: string;
     visibility: string;
@@ -10,7 +10,7 @@ export interface AgentCatalogModel {
     selectable: boolean;
     unavailableReason?: string | null;
 }
-export interface AgentCatalogProvider {
+interface AgentCatalogProvider {
     models: AgentCatalogModel[];
     defaultModel: string;
 }
@@ -58,4 +58,5 @@ export declare function validateAgentModelSelection(catalog: AgentModelCatalog,
 export declare function modelSelectionErrorMessage(modelId: string, result: Extract<ModelSelectionResult, {
     ok: false;
 }>): string;
+export {};
 //# sourceMappingURL=model-catalog.d.ts.map

package/dist/lib/company-skill-wrapper.d.ts

@@ -1,12 +1,4 @@
 import * as fs from "node:fs";
-export interface CompanySkillWrapperOwnershipDiagnostics {
-    kind: "directory" | "symlink" | "file" | "other";
-    bridgeState: "all_live" | "partial" | "none" | "empty" | "not_applicable";
-    markerState: "bound" | "missing" | "invalid" | "unbound" | "unavailable" | "not_applicable";
-    linkTarget: "company_skills" | "outside_company_skills" | "unavailable" | "not_applicable";
-    platform: "win32" | "darwin" | "linux" | "other";
-    nameEncoding: "percent_encoded" | "literal";
-}
 export declare function companySkillWrapperSentryTagsFor(error: unknown): Record<string, string> | undefined;
 export interface SurfaceCompanySkillInput {
     hqRoot: string;

package/dist/lib/core-utils/codex-skill-bridge.d.ts

@@ -1,4 +1,4 @@
-export type BridgeCommand = "status" | "install" | "doctor";
+type BridgeCommand = "status" | "install" | "doctor";
 export type BridgeOptions = {
     command: BridgeCommand;
     hqRoot: string;
@@ -28,4 +28,5 @@ export declare function isHqRootLike(candidate: string): boolean;
 export declare function outputStyleSlug(name: string): string;
 /** Runs one bridge command; returns the process exit code. */
 export declare function runCodexSkillBridge(options: BridgeOptions, io: BridgeIo): number;
+export {};
 //# sourceMappingURL=codex-skill-bridge.d.ts.map

package/dist/lib/deploy-api.d.ts

@@ -1,6 +1,5 @@
 /** Shared authenticated request path for the hq-deploy control plane. */
 export declare const DEPLOY_API_URL: string;
 export declare function deployHeaders(token: string, json?: boolean, extra?: Record<string, string>): Record<string, string>;
-export declare function deployApiUrl(route: string): string;
 export declare function deployApiRequest(token: string, route: string, method: string, body?: unknown, extraHeaders?: Record<string, string>): Promise<Response>;
 //# sourceMappingURL=deploy-api.d.ts.map

package/dist/lib/deploy-api.js

@@ -8,7 +8,7 @@ export function deployHeaders(token, json = true, extra = {}) {
         ...extra,
     };
 }
-export function deployApiUrl(route) {
+function deployApiUrl(route) {
     return `${DEPLOY_API_URL.replace(/\/+$/, "")}${route}`;
 }
 export async function deployApiRequest(token, route, method, body, extraHeaders = {}) {

package/dist/lib/report-run.d.ts

@@ -8,12 +8,12 @@ export type DigestSignal = {
     kind: string;
     text: string;
 };
-export type FocusItem = {
+type FocusItem = {
     title: string;
     project: string;
     reason: string;
 };
-export type ReportRunRecord = {
+type ReportRunRecord = {
     generatedAt: string;
     inputs: {
         template: string;
@@ -58,4 +58,5 @@ export declare function renderDailyDigest(input: {
     generatedAt?: string;
 }): DigestPage;
 export declare function writeDigestPage(directory: string, page: DigestPage): void;
+export {};
 //# sourceMappingURL=report-run.d.ts.map

package/dist/lib/report-templates.d.ts

@@ -3,7 +3,6 @@ export type ReportTemplate = {
     path: string;
     body: string;
 };
-export declare function reportPackageRoot(): string;
 export declare function listReportTemplates(root?: string): ReportTemplate[];
 /** Verbatim runbook. Callers substitute `<reportId>` when the id is known. */
 export declare function loadUpdateReportRunbook(root?: string): string;

package/dist/lib/report-templates.js

@@ -3,9 +3,6 @@ import { readdirSync, readFileSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 const PACKAGE_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "..");
-export function reportPackageRoot() {
-    return PACKAGE_ROOT;
-}
 export function listReportTemplates(root = PACKAGE_ROOT) {
     const dir = path.join(root, "templates", "reports");
     return readdirSync(dir)

package/dist/lib/scaffold-cli-floor.d.ts

@@ -1,4 +1,3 @@
-export declare const SCAFFOLD_CLI_UPGRADE_COMMAND = "npm install -g @indigoai-us/hq-cli@latest";
 export type ScaffoldCliFloorComparison = {
     status: "pass" | "fail" | "warn" | "skip";
     message: string;

package/dist/lib/scaffold-cli-floor.js

@@ -1,5 +1,5 @@
 import semver from "semver";
-export const SCAFFOLD_CLI_UPGRADE_COMMAND = "npm install -g @indigoai-us/hq-cli@latest";
+const SCAFFOLD_CLI_UPGRADE_COMMAND = "npm install -g @indigoai-us/hq-cli@latest";
 const MINIMUM_VERSION_RANGE = /^>=(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
 /** Compare an installed CLI version with the scaffold's supported floor. */
 export function compareScaffoldCliFloor(required, currentVersion) {

package/dist/run/discover-schemas.d.ts

@@ -1,4 +1,4 @@
-export interface SchemaConflict {
+interface SchemaConflict {
     paths: [string, string];
     slugs: [string, string];
 }
@@ -9,4 +9,5 @@ export interface DiscoverSchemasResult {
     conflict: SchemaConflict | null;
 }
 export declare function discoverSchemas(cwd: string): DiscoverSchemasResult;
+export {};
 //# sourceMappingURL=discover-schemas.d.ts.map

package/dist/utils/hq-roots.d.ts

@@ -59,8 +59,6 @@ export declare function createPackageRootResolver(options: PackageRootResolverOp
  * answer survives a change in output layout.
  */
 export declare function packageRoot(): string;
-/** Reset the memoized package root. Tests only. */
-export declare function __resetPackageRootCache(): void;
 /**
  * Derive this package's installed root from the running module's OWN path using
  * STRING operations only — no `readFileSync`, `realpathSync`, or `existsSync`.

package/dist/utils/hq-roots.js

@@ -170,7 +170,7 @@ export function createPackageRootResolver(options) {
     };
 }
 const currentModulePath = fileURLToPath(import.meta.url);
-let defaultPackageRootResolver = createPackageRootResolver({
+const defaultPackageRootResolver = createPackageRootResolver({
     moduleDir: path.dirname(currentModulePath),
     modulePath: currentModulePath,
 });
@@ -184,13 +184,6 @@ let defaultPackageRootResolver = createPackageRootResolver({
 export function packageRoot() {
     return defaultPackageRootResolver();
 }
-/** Reset the memoized package root. Tests only. */
-export function __resetPackageRootCache() {
-    defaultPackageRootResolver = createPackageRootResolver({
-        moduleDir: path.dirname(currentModulePath),
-        modulePath: currentModulePath,
-    });
-}
 /**
  * The trailing path segments that mark an installed copy of this package:
  * `node_modules` followed by the package name's own segments (for

package/dist/utils/incomplete-install-error.d.ts

@@ -11,7 +11,7 @@ export declare const INCOMPLETE_INSTALL_REMEDY: string;
 /** A resolver for the running install's root; returns null instead of throwing. */
 export type PackageRootResolver = () => string | null;
 /** Which strategy produced the running install's root, recorded in diagnostics. */
-export type PackageRootResolverSource = "manifest-walk" | "string-derivation" | "unresolved" | "injected";
+type PackageRootResolverSource = "manifest-walk" | "string-derivation" | "unresolved" | "injected";
 /**
  * If `err` is an in-process incomplete-install module-load failure — the CJS
  * relative-sibling shape (HQ-CLI-1N), the ESM vanished-at-read shape (HQ-CLI-1M),
@@ -30,7 +30,7 @@ export declare function incompleteInstallMessage(err: unknown, resolvePackageRoo
  * whose `path` did not survive delivery — the esm-loader open shape (HQ-CLI-1M) or
  * the resolve-time lstat shape (HQ-CLI-1S). The two frame booleans say which.
  */
-export type IncompleteInstallEsmDiagnostics = {
+type IncompleteInstallEsmDiagnostics = {
     /** The resolved install root, or the literal `<unresolved>` when none was found. */
     packageRoot: string;
     /** True only when a root was actually resolved (by any strategy). */
@@ -62,7 +62,7 @@ export type IncompleteInstallEsmDiagnostics = {
  * the closed error name and the bounded package name are recorded; never the
  * message, argv, or a full path.
  */
-export type IncompleteInstallEvalThrowDiagnostics = {
+type IncompleteInstallEvalThrowDiagnostics = {
     evalThrow: true;
     errorName: string;
     throwSitePackage: string;
@@ -77,13 +77,13 @@ export type IncompleteInstallEvalThrowDiagnostics = {
  * the requirer's own manifest did NOT declare it. Both names live inside
  * hq-cli's dependency graph, so grouping cardinality stays bounded.
  */
-export type IncompleteInstallBareDiagnostics = {
+type IncompleteInstallBareDiagnostics = {
     missingPackage: string;
     requiringPackage: string;
     requirerDeclaresMissing: false;
 };
 /** The four lexical scopes a NOT-suppressed CJS relative requirer can fall into. */
-export type RelativeRequirerScope = "dist" | "assets" | "outside-root" | "unresolved-root";
+type RelativeRequirerScope = "dist" | "assets" | "outside-root" | "unresolved-root";
 /**
  * Bounded, scrubber-safe diagnostics for a NOT-suppressed CJS RELATIVE-specifier
  * miss (HQ-CLI-1N): the CJS relative-sibling shape that reached the capture path
@@ -93,7 +93,7 @@ export type RelativeRequirerScope = "dist" | "assets" | "outside-root" | "unreso
  * against the root — never the requirer path and never the specifier — so
  * grouping cardinality cannot inflate. `code` is always `MODULE_NOT_FOUND`.
  */
-export type IncompleteInstallRelativeDiagnostics = {
+type IncompleteInstallRelativeDiagnostics = {
     code: string;
     relativeSpecifier: true;
     packageRoot: string;
@@ -136,4 +136,5 @@ export type IncompleteInstallDiagnostics = Partial<IncompleteInstallEsmDiagnosti
 export declare function incompleteInstallCaptureContext(err: unknown, resolvePackageRoot?: PackageRootResolver, fileSystem?: Pick<typeof fs, "existsSync"> & Partial<Pick<typeof fs, "readFileSync">>): {
     incomplete_install: IncompleteInstallDiagnostics;
 } | undefined;
+export {};
 //# sourceMappingURL=incomplete-install-error.d.ts.map

package/dist/utils/large-file-guard.d.ts

@@ -18,16 +18,6 @@ export interface LargeFileGuardOptions {
     /** Bypass the throttle. */
     force?: boolean;
 }
-/**
- * Render a repo-relative path as a literal `.gitignore` pattern.
- *
- * The leading slash anchors it to the repo root — without it a bare filename
- * would also ignore same-named files in every subdirectory. Glob and
- * character-class metacharacters are escaped so the rule matches the one real
- * path and nothing else, and a trailing space is escaped because git strips
- * unescaped ones.
- */
-export declare function toGitignorePattern(relPath: string): string;
 /**
  * Scan `hqRoot` for files above the size limit, ignore them, and drop any that
  * are already in the index.

package/dist/utils/large-file-guard.js

@@ -177,7 +177,7 @@ function oversizedInWorktree(hqRoot, threshold) {
  * path and nothing else, and a trailing space is escaped because git strips
  * unescaped ones.
  */
-export function toGitignorePattern(relPath) {
+function toGitignorePattern(relPath) {
     const escaped = relPath.replace(/([\\*?[\]!#])/g, "\\$1");
     const anchored = `/${escaped}`;
     return anchored.endsWith(" ") ? `${anchored.slice(0, -1)}\\ ` : anchored;

package/dist/utils/package-root-diagnostics.d.ts

@@ -6,7 +6,7 @@
  * so a malformed install cannot turn an error report into an unbounded or
  * multi-line payload.
  */
-export type PackageRootVisitOutcome = "no-manifest" | "eacces" | "eisdir" | "parse-error" | "name-mismatch" | "read-error" | "omitted";
+type PackageRootVisitOutcome = "no-manifest" | "eacces" | "eisdir" | "parse-error" | "name-mismatch" | "read-error" | "omitted";
 export type PackageRootVisit = {
     directory: string;
     outcome: PackageRootVisitOutcome;

package/dist/utils/self-update.d.ts

@@ -64,7 +64,7 @@ import { type RestartDaemonResult } from "../lib/mesh/live/daemon/install.js";
  * One update + one re-exec per user invocation, ever.
  */
 export declare const REEXEC_GUARD_ENV = "HQ_RESCUE_SELF_UPDATED";
-export type SelfUpdateAction = 
+type SelfUpdateAction = 
 /** Opted out, guard set, lock held elsewhere, or latest unknown — nothing attempted. */
 "skipped"
 /** Already at (or ahead of) npm latest. */
@@ -200,4 +200,5 @@ export declare function selfUpdateAndReexec(argv: readonly string[], deps?: Self
  * outcome the daemon restarts itself onto the new version.
  */
 export declare function daemonSelfUpdate(deps?: SelfUpdateDeps): Promise<SelfUpdateOutcome>;
+export {};
 //# sourceMappingURL=self-update.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.312.0",
+  "version": "5.312.2-beta.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {