@indigoai-us/hq-cli 5.327.0 → 5.329.0

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## [Unreleased]
 
+## [5.329.0] — 2026-10-02
+- `hq lanes keep-alive-audit` no longer reports a keep-alive lead as not restarted when the matching launch has rolled out of capped resume histories; if only queue-time evidence remains, it reports a confirmed untimed restart instead of assigning an on-time or late launch time.
+
+- Add a default-off, flag-gated command-catalog help route for eligible CLI help requests.
+- `hq install --global --runtime claude --via plugin` installs HQ through a local Claude Code marketplace and removes prior direct HQ hook and MCP registrations.
+- Add flag-gated Codex pack hook and skill installation with ownership-safe update and removal, verify active plugin MCP status without false drift, and align global Codex hooks with the supported six events.
+- Add ChatGPT and Grok hosted MCP connector setup to hq install --global.
+
+## [5.328.0] — 2026-10-02
+- Keep successful JSON responses readable if vault API plan-limit inspection cannot reconstruct its buffered response.
+- Fixed bundled scaffold checks that could misclassify matching records when `grep -q` closed a pipe under `pipefail`.
+- Keep `hq mcp serve` initialization lightweight by avoiding the full flag registry and network-family compatibility setup.
+
 ## [5.327.0] — 2026-10-02
 - Reduce hook-time startup imports for repo-run-registry and isolate hook-helper handlers from sibling modules.
 - Keep package-root Sentry diagnostics off the fast-route import path unless root diagnostics are needed.

package/assets/scaffold/core/scripts/hq-dm-bind.sh

@@ -329,7 +329,7 @@ mention_line() {
 cmd_bind() {
   local ch="${1:-}"; [ -n "$ch" ] || die "bind needs a channel name (see: hq channels)"
   ch="${ch#\#}"
-  hq channels 2>/dev/null | grep -q -- "hq dm $ch " || die "no channel named '$ch' (see: hq channels)"
+  hq channels 2>/dev/null | grep -- "hq dm $ch " >/dev/null || die "no channel named '$ch' (see: hq channels)"
   bash "$SESSION_SH" set dm_channel "$ch" >/dev/null
   local sk; sk="$(latest_sk "$ch")"
   printf '%s\n' "$sk" > "$(cursor_file)"

package/assets/scaffold/core/scripts/hq-job-run.sh

@@ -323,24 +323,24 @@ classify_failure() {
   local lower
   lower="$(printf '%s' "$tail_txt" | tr '[:upper:]' '[:lower:]')"
 
-  if printf '%s' "$lower" | grep -Eq \
-    'not logged in|please log in|authentication (failed|required)|unauthorized|401|invalid.*(token|credential)|credentials? (missing|expired|invalid)|device.?code|login required'; then
+  if printf '%s' "$lower" | grep -E \
+    'not logged in|please log in|authentication (failed|required)|unauthorized|401|invalid.*(token|credential)|credentials? (missing|expired|invalid)|device.?code|login required' >/dev/null; then
     printf 'auth'
     return
   fi
-  if printf '%s' "$lower" | grep -Eq \
-    'secret.*(not found|missing|denied|not visible|not shared)|hq secrets.*(fail|error|denied)|missing vault|access denied.*secret'; then
+  if printf '%s' "$lower" | grep -E \
+    'secret.*(not found|missing|denied|not visible|not shared)|hq secrets.*(fail|error|denied)|missing vault|access denied.*secret' >/dev/null; then
     printf 'secrets'
     return
   fi
   # Avoid matching job metadata like timeout_seconds=N in the log header.
-  if printf '%s' "$lower" | grep -Eq \
-    '(^|[^_])timed out|command timed out|deadline exceeded|killed by timeout|exit[=:][[:space:]]*124\b'; then
+  if printf '%s' "$lower" | grep -E \
+    '(^|[^_])timed out|command timed out|deadline exceeded|killed by timeout|exit[=:][[:space:]]*124\b' >/dev/null; then
     printf 'timeout'
     return
   fi
-  if printf '%s' "$lower" | grep -Eq \
-    'connection (refused|reset|timed out)|network is unreachable|temporary failure|econnreset|enotfound|no space left|i/o error|transport error|dns (fail|error)|http[/ ]*(502|503|504)|statusingesterror|api unreachable'; then
+  if printf '%s' "$lower" | grep -E \
+    'connection (refused|reset|timed out)|network is unreachable|temporary failure|econnreset|enotfound|no space left|i/o error|transport error|dns (fail|error)|http[/ ]*(502|503|504)|statusingesterror|api unreachable' >/dev/null; then
     printf 'infra'
     return
   fi

package/assets/scaffold/core/scripts/ontology-audience-grant.sh

@@ -67,7 +67,7 @@ for aud in "$C"/signals/@*/_audience.yaml; do
     # attendees), so they are already company identities; emails must be members.
     case "$who" in
       prs_*|agt_*) ;;
-      *) if ! printf '%s\n' "$members" | grep -qxF "$who"; then echo "skip $who (not a member of $co)" >&2; skipped=$((skipped+1)); continue; fi ;;
+      *) if ! grep -qxF "$who" <<<"$members"; then echo "skip $who (not a member of $co)" >&2; skipped=$((skipped+1)); continue; fi ;;
     esac
     for p in $prefixes; do grant "$p" "$who"; done
   done

package/assets/scaffold/core/scripts/ontology-candidate.sh

@@ -79,7 +79,7 @@ id="$(printf '%s\n%s\n%s\n%s' "$kind" "$type" "$key" "$norm_body" | sha)"
 
 dir="$root/companies/$co/$store/_candidates/$(date -u +%Y-%m-%d)"
 # Idempotent across days: the same candidate already written (pending or done) is a no-op.
-if find "$root/companies/$co/$store/_candidates" -name "$id.md" 2>/dev/null | grep -q .; then
+if [ -n "$(find "$root/companies/$co/$store/_candidates" -name "$id.md" -print -quit 2>/dev/null)" ]; then
   echo "exists $id"; exit 0
 fi
 mkdir -p "$dir"

package/assets/scaffold/core/scripts/resolve-company.sh

@@ -65,7 +65,7 @@ SLUGS="$(
 [ -n "$SLUGS" ] || emit "" "none"
 
 is_known_slug() {
-  printf '%s\n' "$SLUGS" | grep -Fxq "$1"
+  printf '%s\n' "$SLUGS" | grep -Fx -- "$1" >/dev/null
 }
 
 prompt_slug() {