@indigoai-us/hq-cli 5.313.0 → 5.314.0

package/assets/scaffold/core/scripts/hq-session.sh

@@ -27,46 +27,6 @@
 
 set -euo pipefail
 
-# Prefer the CLI-hosted implementation only when it advertises the exact-company
-# directory check. Older CLI bundles may recognize hq-session but still accept
-# case aliases, so they must use this in-tree implementation instead.
-# HQ_HQ_SESSION_NO_CLI=1 forces the in-tree path.
-if [ "${HQ_HQ_SESSION_NO_CLI:-}" != "1" ]; then
-  __hs_hq="$(command -v hq 2>/dev/null || true)"
-  if [ -n "$__hs_hq" ]; then
-    # `hq core --help` costs seconds of node startup, so probe it at most once
-    # per CLI build and cache the answer. Key by resolved path + mtime + size so
-    # a PATH switch or same-second rebuild cannot reuse a stale result; keep the
-    # cache in a private 0700 dir and trust it only when we own it; never persist
-    # a failed probe. HQ_CLI_CAPS_CACHE overrides the path (tests isolate it).
-    __hs_mt="$(stat -c %Y "$__hs_hq" 2>/dev/null || stat -f %m "$__hs_hq" 2>/dev/null || echo 0)"
-    __hs_sz="$(stat -c %s "$__hs_hq" 2>/dev/null || stat -f %z "$__hs_hq" 2>/dev/null || echo 0)"
-    __hs_key="$(printf '%s' "$__hs_hq:$__hs_mt:$__hs_sz" | cksum 2>/dev/null | cut -d' ' -f1)"
-    if [ -n "${HQ_CLI_CAPS_CACHE:-}" ]; then
-      __hs_cache="$HQ_CLI_CAPS_CACHE"
-    else
-      __hs_dir="${XDG_CACHE_HOME:-${HOME:-/tmp}/.cache}/hq-cli"
-      mkdir -p "$__hs_dir" 2>/dev/null && chmod 700 "$__hs_dir" 2>/dev/null || true
-      __hs_cache="$__hs_dir/core-caps.${__hs_key:-0}"
-    fi
-    __hs_caps=""
-    if [ -r "$__hs_cache" ] && [ -O "$__hs_cache" ]; then
-      __hs_caps="$(cat "$__hs_cache" 2>/dev/null || true)"
-    elif __hs_caps="$(hq core --help 2>/dev/null)"; then
-      [ -n "$__hs_caps" ] && (umask 077; printf '%s' "$__hs_caps" >"$__hs_cache" 2>/dev/null) || true
-    else
-      __hs_caps=""
-    fi
-    case "$__hs_caps" in
-      *hq-session*)
-        case "$__hs_caps" in
-          *exact-company-directory-match-v1*) exec hq core hq-session "$@" ;;
-        esac
-        ;;
-    esac
-  fi
-fi
-
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # The DATA tree (sessions, companies, hooks) is the live HQ root. When this
 # script is dispatched as `hq core hq-session` from inside the hq-cli package,
@@ -83,44 +43,6 @@ LIB_DIR="$SCRIPT_DIR/lib"
 # shellcheck source=lib/session-id.sh
 . "$LIB_DIR/session-id.sh"
 
-# These checks stay local so hq-session remains usable by fixtures and bundled
-# copies that include its capability and ID libraries but not auto-bind.
-hq_session_has_exact_company_dir() {
-  local root="${1:-}" slug="${2:-}" company_dir
-  [ -n "$root" ] && [ -n "$slug" ] || return 1
-  for company_dir in "$root"/companies/*; do
-    [ -d "$company_dir" ] || continue
-    [ -L "$company_dir" ] && continue
-    [ "${company_dir##*/}" = "$slug" ] && return 0
-  done
-  return 1
-}
-
-hq_session_has_case_alias() {
-  local root="${1:-}" slug="${2:-}" company_dir company_slug slug_fold company_fold
-  [ -n "$root" ] && [ -n "$slug" ] || return 1
-
-  # Exact, real entries are the common case. Check them before starting any
-  # case-fold subprocesses on SessionStart or a normal company bind.
-  for company_dir in "$root"/companies/*; do
-    [ -d "$company_dir" ] || continue
-    [ -L "$company_dir" ] && continue
-    company_slug="${company_dir##*/}"
-    [ "$company_slug" = "$slug" ] && return 1
-  done
-
-  slug_fold="$(printf '%s' "$slug" | LC_ALL=C tr '[:upper:]' '[:lower:]')"
-  for company_dir in "$root"/companies/*; do
-    [ -d "$company_dir" ] || continue
-    [ -L "$company_dir" ] && continue
-    company_slug="${company_dir##*/}"
-    [ "$company_slug" = "$slug" ] && continue
-    company_fold="$(printf '%s' "$company_slug" | LC_ALL=C tr '[:upper:]' '[:lower:]')"
-    [ "$company_fold" = "$slug_fold" ] && return 0
-  done
-  return 1
-}
-
 # Set by the --session-id global option; empty means "resolve it".
 SESSION_ID_OVERRIDE=""
 
@@ -156,19 +78,7 @@ cmd_get() {
   [ -n "$key" ] || { echo "usage: hq-session.sh get <key>" >&2; exit 1; }
   local meta
   meta="$(current_meta)"
-  # Missing meta.yaml: no keys to read. Print nothing, exit 0.
-  # Unreadable meta.yaml: awk fails and this function exits non-zero under
-  # set -e. Those two are not the same case — do not default either.
   [ -n "$meta" ] && [ -f "$meta" ] || return 0
-  # Absent key: print nothing. For `senior`, a record written before that
-  # field existed has no line; that is a successful read of a file that does
-  # not contain the key, not a failed read. §3.1 defaults `senior` to `user`
-  # at write time (the seed in cmd_set / master-hook.sh). This getter does
-  # not invent that default, so "never written" stays distinguishable from
-  # an explicit `senior: user`. Authority walkers apply the §3.1 default at
-  # the walk site. Substituting `user` here would collapse absence into the
-  # permissive value that hq-never-swallow-errors and
-  # monitor-unknown-paths-must-not-resolve-to-healthy forbid.
   awk -v k="$key" '
     $1 == k":" {
       sub(/^[^:]+:[[:space:]]*/, "")
@@ -183,55 +93,17 @@ cmd_set() {
   local key="${1:-}" value="${2:-}"
   [ -n "$key" ] && [ $# -ge 2 ] || { echo "usage: hq-session.sh set <key> <value>" >&2; exit 1; }
 
-  # Reject invalid company_slug values before writing anything. A case alias
-  # could otherwise bind the session and surface policies from a differently
-  # named company directory on a case-insensitive filesystem.
+  # Reject an invalid company_slug BEFORE writing anything. Otherwise a bad value
+  # lands in meta.yaml and only fails later at session_scope_mint, leaving
+  # corrupt state that the scope gate would read as a (bogus) binding. Mirrors
+  # session_scope_mint's own character-set rule; `personal` is a valid slug.
   if [ "$key" = "company_slug" ] && [ -n "$value" ]; then
     case "$value" in
-      *[!a-zA-Z0-9_-]*)
-        echo "hq-session: invalid company_slug: '$value' (allowed characters: A-Z a-z 0-9 - _)" >&2
+      *[!a-z0-9_-]*)
+        echo "hq-session: invalid company_slug: '$value' (allowed characters: a-z 0-9 - _)" >&2
         exit 1
         ;;
     esac
-    if [ "$value" != "personal" ] && {
-      [ -L "$REPO_ROOT/companies/$value" ] \
-        || hq_session_has_case_alias "$REPO_ROOT" "$value"
-    }; then
-      echo "hq-session: company_slug must use the exact real directory name: '$value'" >&2
-      exit 1
-    fi
-  fi
-
-  # Reject an invalid senior BEFORE writing anything. Otherwise a bad value
-  # lands in meta.yaml and only fails later when the authority walk reads it,
-  # leaving corrupt state that hop 2 would treat as a real parent. Same shape
-  # as the company_slug guard above.
-  #
-  # Accepted forms: user | session:<id> | lane:<id>.
-  # <id> charset is A-Za-z0-9._- — company_slug's a-z0-9_- plus `.` (hostnames
-  # contain dots) plus A-Z because lane ids on this box are ULID_hostname
-  # (e.g. 01M30KHSEX50K0G203QNV2590N_ip-172-31-47-133-ec2-internal; ULIDs are
-  # Crockford base32, typically uppercase) and session ids are UUID hex
-  # (e.g. 0026e2dd-7fff-4733-8d61-9a6fe7004908). `.` and `..` are rejected as
-  # ids: they are path segments under workspace/sessions/.
-  if [ "$key" = "senior" ]; then
-    local senior_ok=0 senior_id
-    case "$value" in
-      user)
-        senior_ok=1
-        ;;
-      session:*|lane:*)
-        senior_id="${value#*:}"
-        case "$senior_id" in
-          ""|.|..|*[!A-Za-z0-9._-]*) ;;
-          *) senior_ok=1 ;;
-        esac
-        ;;
-    esac
-    if [ "$senior_ok" != 1 ]; then
-      echo "hq-session: invalid senior: '$value' (accepted forms: user, session:<id>, lane:<id>)" >&2
-      exit 1
-    fi
   fi
 
   local id meta
@@ -243,10 +115,9 @@ cmd_set() {
   meta="$SESSIONS_DIR/$id/meta.yaml"
   mkdir -p "$(dirname "$meta")"
   # Seed the same header master-hook.sh writes, so binding a session the hook
-  # has not bootstrapped yet still produces a well-formed record. `senior: user`
-  # is the §3.1 default so hop 2 of the authority walk has a field to read.
+  # has not bootstrapped yet still produces a well-formed record.
   if [ ! -f "$meta" ]; then
-    printf 'session_id: %s\nstarted_at: "%s"\nsenior: user\n' \
+    printf 'session_id: %s\nstarted_at: "%s"\n' \
       "$id" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > "$meta"
   fi
 
@@ -288,29 +159,6 @@ cmd_set() {
       spawn_work_mesh_register "$id" || true
     fi
   fi
-
-  # US-011: mid-session project change closes the old card and opens a new one.
-  # First bind (empty prev) only updates the live-binding marker — SessionStart
-  # already emitted session_start (or reconcile will bind without a card flip).
-  if [ "$key" = "project" ] && [ -n "$value" ] && [ "$value" != "$prev" ]; then
-    local co tk
-    co="$(cmd_get company_slug 2>/dev/null || true)"
-    tk="$(cmd_get task 2>/dev/null || true)"
-    if [ -f "$REPO_ROOT/core/scripts/lib/work-mesh-enqueue.sh" ] && \
-       [ -f "$REPO_ROOT/core/scripts/lib/work-mesh-live-rebind.sh" ]; then
-      # shellcheck source=lib/work-mesh-enqueue.sh
-      . "$REPO_ROOT/core/scripts/lib/work-mesh-enqueue.sh" 2>/dev/null || true
-      # shellcheck source=lib/work-mesh-live-hook.sh
-      . "$REPO_ROOT/core/scripts/lib/work-mesh-live-hook.sh" 2>/dev/null || true
-      # shellcheck source=lib/work-mesh-live-rebind.sh
-      . "$REPO_ROOT/core/scripts/lib/work-mesh-live-rebind.sh" 2>/dev/null || true
-      if [ -n "$prev" ] && command -v work_mesh_live_rebind >/dev/null 2>&1; then
-        work_mesh_live_rebind "$id" "$co" "$prev" "$tk" "$co" "$value" "$tk" || true
-      elif command -v work_mesh_live_write_binding_marker >/dev/null 2>&1; then
-        work_mesh_live_write_binding_marker "$id" "$co" "$value" "$tk" || true
-      fi
-    fi
-  fi
 }
 
 # Spawn the client-side Work Mesh registration hook, detached, for a mid-session
@@ -319,16 +167,15 @@ cmd_set() {
 # and this backgrounds even its fast foreground path off cmd_set's return path.
 spawn_work_mesh_register() {
   local sid="$1"
-  local hook="$REPO_ROOT/core/hooks/SessionStart/35-work-mesh-session-start.sh"
+  local hook="$REPO_ROOT/core/hooks/work-mesh-register.sh"
   local logf="$REPO_ROOT/workspace/logs/work-mesh-hook.log"
-  [ -f "$hook" ] || return 0
+  [ -x "$hook" ] || return 0
   command -v jq >/dev/null 2>&1 || return 0
   local ev
   ev="$(jq -nc --arg sid "$sid" --arg cwd "${PWD:-}" '{session_id:$sid,cwd:$cwd}' 2>/dev/null)" || return 0
   [ -n "$ev" ] || return 0
   mkdir -p "$(dirname "$logf")" 2>/dev/null || true
-  HQ_ROOT="$REPO_ROOT" CLAUDE_CODE_SESSION_ID="$sid" \
-    nohup bash -c 'printf "%s" "$1" | bash "$2" SessionStart' _ "$ev" "$hook" \
+  HQ_ROOT="$REPO_ROOT" nohup bash -c 'printf "%s" "$1" | "$2" company_slug' _ "$ev" "$hook" \
     >>"$logf" 2>&1 </dev/null &
   disown 2>/dev/null || true
   return 0
@@ -336,18 +183,15 @@ spawn_work_mesh_register() {
 
 # Print a company's hard-enforcement policies, read directly from the policy
 # files (the pre-built digest was retired — the when/on trigger hook is now the
-# sole policy-surfacing path). Emits one `- [hard] **id**: rule` line per policy,
-# including its exact source path so IDs do not have to match filenames. Lines
-# are deduped (digest/README/example/sync-conflict copies are skipped) and
-# budgeted (HQ_COMPANY_BIND_POLICY_CAP lines / HQ_COMPANY_BIND_POLICY_BYTES
-# bytes, with a non-silent pointer for the overflow). An unbounded dump —
-# observed at ~298 lines for a large tenant — buries the rules it exists to
-# surface; the reactive trigger hook re-injects any withheld policy when its
-# trigger fires.
+# sole policy-surfacing path). Emits one `- [hard] **slug**: rule` line each,
+# deduped (digest/README/example/sync-conflict copies are skipped) and budgeted
+# (HQ_COMPANY_BIND_POLICY_CAP lines / HQ_COMPANY_BIND_POLICY_BYTES bytes, with a
+# non-silent pointer for the overflow). An unbounded dump — observed at ~298
+# lines for a large tenant — buries the rules it exists to surface; the
+# reactive trigger hook re-injects any withheld policy when its trigger fires.
 emit_company_hard_policies() {
   local co="$1"
   local dir="$REPO_ROOT/companies/$co/policies"
-  hq_session_has_exact_company_dir "$REPO_ROOT" "$co" || return 0
   [ -d "$dir" ] || return 0
   # Collect real policy files only. Skip the generated digest, docs, examples,
   # and sync-conflict duplicates: policy slugs never contain spaces, so a space
@@ -365,15 +209,13 @@ emit_company_hard_policies() {
   done
   [ "${#files[@]}" -gt 0 ] || return 0
   local lines
-  lines="$(awk -v co="$co" '
+  lines="$(awk '
     function bn(p,  n,a,b){ n=split(p,a,"/"); b=a[n]; sub(/\.md$/,"",b); return b }
-    function policy_file(p,  n,a){ n=split(p,a,"/"); return a[n] }
-    function flush(){ if(enf=="hard" && rule!=""){ if(id=="")id=bn(fn); printf "- [hard] **%s**: %s Full text: `companies/%s/policies/%s`.\n", id, rule, co, policy_file(fn) } }
+    function flush(){ if(enf=="hard" && rule!=""){ if(id=="")id=bn(fn); printf "- [hard] **%s**: %s\n", id, rule } }
     FNR==1 { if(seen) flush(); d=0;id="";enf="";rule="";rsec=0;rcap=0;fn=FILENAME;seen=1 }
     /^---[ \t]*$/ { d++; next }
     d==1 && /^id:/          { s=$0; sub(/^id:[ \t]*/,"",s); gsub(/^["'"'"']|["'"'"']$/,"",s); id=s; next }
     d==1 && /^enforcement:/ { s=$0; sub(/^enforcement:[ \t]*/,"",s); gsub(/[ \t]/,"",s); enf=s; next }
-    d==1 && /^status:[ \t]*retired/ { enf="" ; next }
     d>=2 && /^## Rule[ \t]*$/ { rsec=1; next }
     d>=2 && rsec && /^## / { rsec=0 }
     d>=2 && rsec && !rcap && NF { line=$0; gsub(/\*\*/,"",line); if(length(line)>160)line=substr(line,1,157)"..."; rule=line; rcap=1 }
@@ -384,14 +226,11 @@ emit_company_hard_policies() {
   # (glob order), never silent — overflow is summarized with a pointer so the
   # withheld policies stay one command away.
   local cap="${HQ_COMPANY_BIND_POLICY_CAP:-32}"
-  # 2026-09-07: was 40960. Claude Code persists hook output above ~10,000
-  # bytes and shows the model a 2 KB preview, so a 40 KB digest was never
-  # read. Keep the whole digest under the host ceiling with margin.
-  local max_bytes="${HQ_COMPANY_BIND_POLICY_BYTES:-7168}"
+  local max_bytes="${HQ_COMPANY_BIND_POLICY_BYTES:-40960}"
   printf '\n<company-policy-digest co="%s">\n' "$co"
   printf '# %s hard-enforcement policies (auto-surfaced on company bind)\n' "$co"
   printf '> Company context just bound mid-session. These HARD rules now apply.\n'
-  printf '> Full text: open the file path shown on each policy line. Browse `companies/%s/policies/` for the full set.\n\n' "$co"
+  printf '> Full text: `companies/%s/policies/{slug}.md` (or `qmd get -c %s {slug}`).\n\n' "$co" "$co"
   printf '%s\n' "$lines" | awk -v cap="$cap" -v maxb="$max_bytes" -v co="$co" '
     NF {
       n++
@@ -403,8 +242,8 @@ emit_company_hard_policies() {
     END {
       dropped = n - kept
       if (dropped > 0)
-        printf "\n> %d more hard %s not shown (bind budget: %d policies / %d bytes). Browse `companies/%s/policies/` for the full set; matching rules re-surface via the policy trigger hook when they apply.\n", \
-          dropped, (dropped == 1 ? "policy" : "policies"), cap, maxb, co
+        printf "\n> %d more hard %s not shown (bind budget: %d policies / %d bytes). Full set: `companies/%s/policies/` or `qmd get -c %s {slug}`; matching rules re-surface via the policy trigger hook when they apply.\n", \
+          dropped, (dropped == 1 ? "policy" : "policies"), cap, maxb, co, co
     }'
   printf '</company-policy-digest>\n'
 }

package/assets/scaffold/core/scripts/lib/session-id.sh

@@ -33,8 +33,7 @@
 #   3. CLAUDE_SESSION_ID       — Claude Code (alternate/legacy)
 #   4. CODEX_SESSION_ID        — Codex
 #   5. CODEX_THREAD_ID         — Codex, thread-scoped runs
-#   6. GROK_SESSION_ID         — Grok Build (Desktop / CLI)
-#   7. workspace/sessions/.current — no session env; last-writer-wins fallback
+#   6. workspace/sessions/.current — no session env; last-writer-wins fallback
 #
 # The env precedence list matches .claude/skills/_shared/journal.sh so every
 # per-session artifact (journal, session meta, scope capability) keys off the
@@ -60,7 +59,7 @@ session_id_is_valid() {
 session_id_from_env() {
   local var val
   for var in HQ_SESSION_ID CLAUDE_CODE_SESSION_ID CLAUDE_SESSION_ID \
-             CODEX_SESSION_ID CODEX_THREAD_ID GROK_SESSION_ID; do
+             CODEX_SESSION_ID CODEX_THREAD_ID; do
     val="${!var:-}"
     val="$(printf '%s' "$val" | tr -d '[:space:]')"
     if session_id_is_valid "$val"; then

package/assets/scaffold/core/scripts/lib/session-scope-capability.sh

@@ -29,7 +29,7 @@ session_scope_mint() {
   [ -n "$root" ] && [ -n "$sid" ] && [ -n "$slug" ] || return 1
 
   case "$slug" in
-    ''|*[!a-zA-Z0-9_-]*)
+    ''|*[!a-z0-9_-]*)
       echo "session-scope-capability: invalid company_slug: $slug" >&2
       return 1
       ;;

package/assets/scaffold/core/scripts/lib/work-mesh-enqueue.sh

@@ -100,8 +100,7 @@ work_mesh_ulid() {
     bytes=$(dd if=/dev/urandom bs=10 count=1 2>/dev/null | od -An -tu1 | tr -s ' ' '\n' | grep -E '^[0-9]+$' | head -n 10 | tr '\n' ' ')
     # shellcheck disable=SC2206
     local -a bb=($bytes)
-    # Bash 3.2 + set -u: empty bb[@] is unbound; keep the copy portable.
-    b=(${bb[@]+"${bb[@]}"})
+    b=("${bb[@]}")
     while [ "${#b[@]}" -lt 10 ]; do
       b+=($((RANDOM % 256)))
     done

package/assets/scaffold/core/scripts/qmd-reindex-after-sync.sh

@@ -1,16 +1,93 @@
 #!/usr/bin/env bash
-# FORWARDER — the implementation of this script lives in the hq CLI.
+# qmd-reindex-after-sync.sh — incremental qmd reindex after an HQ sync.
 #
-# This shipped compatibility path must delegate rather than invoke qmd itself:
-# `hq core qmd-reindex-after-sync` participates in hq-cli's shared embed lock.
-# Arguments, stdio, exit status, and signal disposition are preserved.
+# Why this exists: the qmd index is a per-machine local SQLite store derived
+# from local folder paths. Nothing re-indexed it after `hq-sync` pulled new
+# files in, so search results diverged between teammates depending on who ran
+# `qmd update` most recently. This script makes post-sync indexing automatic
+# and deterministic, so every machine's personal index converges to the same
+# content. The index itself stays personal (it is large, binary, and embeds
+# absolute local paths); only the *freshness* is made automatic.
+#
+# Behavior:
+#   1. Auto-registers any company knowledge dir that isn't yet a qmd
+#      collection (fixes the "newly-synced knowledge isn't searchable until I
+#      manually map it" gap).
+#   2. Runs an incremental lexical reindex (`qmd update` — fast, skips
+#      unchanged files by mtime).
+#   3. Rebuilds embeddings only when called with --embed (slow on a
+#      multi-GB index; meant for an idle/interval pass, not every sync).
+#
+# Idempotent and safe: no-op (exit 0) when qmd is absent or the path isn't an
+# HQ root. Never blocks or fails a sync.
+#
+# Usage: qmd-reindex-after-sync.sh [hq_root] [--embed]
+#   hq_root  Local HQ directory (default: $PWD). Must contain core/core.yaml.
+#   --embed  Also rebuild embeddings (deferred-cost; omit for fast lexical-only).
+
+set -uo pipefail
+
+hq_root=""
+embed=0
+for arg in "$@"; do
+  case "$arg" in
+    --embed) embed=1 ;;
+    --*)     : ;;                       # ignore unknown flags
+    *)       [ -z "$hq_root" ] && hq_root="$arg" ;;
+  esac
+done
+[ -z "$hq_root" ] && hq_root="$PWD"
+
+command -v qmd >/dev/null 2>&1 || exit 0
+[ -f "$hq_root/core/core.yaml" ] || exit 0
+
+cd "$hq_root" || exit 0
+
+# 1. Auto-register company knowledge collections that don't exist yet.
+#    Convention matches /newcompany: --name <slug> --mask "**/*.md".
+existing="$(qmd collection list 2>/dev/null || true)"
+for kdir in companies/*/knowledge; do
+  [ -d "$kdir" ] || continue
+  [ -n "$(find "$kdir" -name '*.md' -not -name 'INDEX.md' -print -quit 2>/dev/null)" ] || continue
+  slug="$(basename "$(dirname "$kdir")")"
+  printf '%s\n' "$existing" | grep -Fq "qmd://$slug/" && continue
+  qmd collection add "$hq_root/$kdir" --name "$slug" --mask "**/*.md" >/dev/null 2>&1 || true
+  qmd context add "qmd://$slug" "Knowledge base for $slug." >/dev/null 2>&1 || true
+done
+
+# 1b. Auto-register company *projects* collections that don't exist yet.
+#    Convention matches the HQ-level `hq-projects` collection: --name <slug>-projects
+#    --mask "**/*.{md,json}" (so prd.json + project docs are searchable). Without
+#    this, company projects/ dirs are indexed by nothing and /startwork's global
+#    `qmd search "prd.json"` and /brainstorm's project discovery silently miss them.
+for pdir in companies/*/projects; do
+  [ -d "$pdir" ] || continue
+  [ -n "$(find "$pdir" -type f \( -name '*.md' -o -name '*.json' \) -print -quit 2>/dev/null)" ] || continue
+  slug="$(basename "$(dirname "$pdir")")"
+  name="${slug}-projects"
+  printf '%s\n' "$existing" | grep -Fq "qmd://$name/" && continue
+  qmd collection add "$hq_root/$pdir" --name "$name" --mask "**/*.{md,json}" >/dev/null 2>&1 || true
+  qmd context add "qmd://$name" "Project PRDs and documentation for $slug." >/dev/null 2>&1 || true
+done
+
+# 1c. Auto-register the personal knowledge collection if it isn't one yet.
+#     personal/knowledge is now read DIRECTLY (the reindex symlink mirror into
+#     core/knowledge is retired), so it needs its own qmd collection to stay
+#     searchable rather than riding in under a core collection.
+if [ -d "personal/knowledge" ] && \
+   [ -n "$(find "personal/knowledge" -name '*.md' -not -name 'INDEX.md' -print -quit 2>/dev/null)" ]; then
+  printf '%s\n' "$existing" | grep -Fq "qmd://personal-knowledge/" || {
+    qmd collection add "$hq_root/personal/knowledge" --name "personal-knowledge" --mask "**/*.md" >/dev/null 2>&1 || true
+    qmd context add "qmd://personal-knowledge" "Personal knowledge base (owner overlay)." >/dev/null 2>&1 || true
+  }
+fi
 
-set -euo pipefail
+# 2. Incremental lexical reindex (cheap; mtime-incremental inside qmd).
+qmd update >/dev/null 2>&1 || true
 
-if ! command -v hq >/dev/null 2>&1; then
-  echo "qmd-reindex-after-sync.sh: requires the hq CLI — this script's implementation now ships with it." >&2
-  echo "Install it with: npm install -g @indigoai-us/hq-cli" >&2
-  exit 127
+# 3. Embeddings only on explicit request.
+if [ "$embed" -eq 1 ]; then
+  qmd embed >/dev/null 2>&1 || true
 fi
 
-exec hq core qmd-reindex-after-sync "$@"
+exit 0

package/assets/scaffold/core/scripts/rebuild-company-knowledge-index.sh

@@ -8,7 +8,7 @@
 #   - .md files → first `#` heading (stripped)
 #   - .yaml files → `description:` field if present
 #   - .json files → `description` field if present
-#   - directories → README.md `#` heading plus "{N} item(s)", or "{N} item(s)"
+#   - directories → "{N} item(s)"
 #
 # Most company knowledge dirs are embedded git repos (160000 gitlinks). The
 # generated INDEX.md lives inside the inner repo; HQ git won't track its
@@ -42,15 +42,7 @@ describe_item() {
   if [[ -d "$path" ]]; then
     local n
     n=$(find "$path" -mindepth 1 -maxdepth 1 ! -name '.*' 2>/dev/null | wc -l | tr -d ' ')
-    local h=""
-    if [[ -f "$path/README.md" ]]; then
-      h=$(awk '/^# / { sub(/^# +/, ""); print; exit }' "$path/README.md" 2>/dev/null || true)
-    fi
-    if [[ -n "$h" ]]; then
-      echo "${h} (${n} item(s))"
-    else
-      echo "${n} item(s)"
-    fi
+    echo "${n} item(s)"
     return
   fi
   case "$name" in
@@ -78,26 +70,6 @@ describe_item() {
   esac
 }
 
-sha256_file() {
-  if command -v sha256sum >/dev/null 2>&1; then
-    sha256sum "$1" | awk '{print $1}'
-  else
-    shasum -a 256 "$1" | awk '{print $1}'
-  fi
-}
-
-stamp_generated() {
-  local tmp="$1"
-  local out="$2"
-  local norm
-  norm=$(mktemp)
-  sed 's/^> Auto-generated. Updated: [0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]$/> Auto-generated. Updated: <date>/' "$tmp" > "$norm"
-  local hash
-  hash=$(sha256_file "$norm")
-  rm -f "$norm"
-  awk -v h="$hash" '{print} /^> Auto-generated. Updated: / {print "<!-- hq-generated-sha256: " h " -->"}' "$tmp" > "$out"
-}
-
 write_knowledge_index() {
   local co="$1"
   local kdir="companies/${co}/knowledge"
@@ -105,8 +77,6 @@ write_knowledge_index() {
   local out="${kdir}/INDEX.md"
   local title
   title="$(titleize "$co") Knowledge"
-  local tmp
-  tmp=$(mktemp)
 
   {
     echo "# ${title}"
@@ -138,10 +108,7 @@ write_knowledge_index() {
         find -L "$kdir" -mindepth 1 -maxdepth 1 -type f 2>/dev/null | sort
       }
     )
-  } > "$tmp"
-
-  stamp_generated "$tmp" "$out"
-  rm -f "$tmp"
+  } > "$out"
 
   echo "rebuild-company-knowledge-index: wrote ${out}" >&2
 }