@indigoai-us/hq-cli 5.332.0 → 5.333.0

package/CHANGELOG.md

@@ -2,6 +2,11 @@
 
 ## [Unreleased]
 
+## [5.333.0] — 2026-10-03
+- Limit session-start telemetry to 30 events per machine per rolling minute.
+- Start the globally registered HQ hook with BASH_ENV cleared, so an inherited shell profile no longer runs before every hook event.
+- Report non-writable npm prefixes as informational while keeping the repair guidance visible, and attribute npm `EBUSY` update exits with a bounded class.
+
 ## [5.332.0] — 2026-10-02
 - Match macOS shell behavior in native core commands for text, diagnostics, and file modes.
 - `hq mcp status` now recognizes the real Claude plugin MCP definition and Codex PATH commands, while global and `hq-anywhere` pack installs share one Codex hook per event and one `hq` MCP server.

package/dist/lib/install/claude-targets.js

@@ -52,7 +52,7 @@ export function hookCommand(hqRoot, event, target = 'master') {
     const skipInsideRoot = `if [ -d "\${CLAUDE_PROJECT_DIR:-}" ] && [ "\${CLAUDE_PROJECT_DIR}" -ef ${shellQuote(hqRoot)} ]; then exit 0; fi; `;
     if (target === 'shim')
         return `${skipInsideRoot}exec /bin/sh ${shellQuote(shimPath(hqRoot))} ${shellQuote(event)} --runtime claude`;
-    return `${skipInsideRoot}exec bash ${shellQuote(masterHookPath(hqRoot))} ${shellQuote(event)}`;
+    return `${skipInsideRoot}BASH_ENV=/dev/null exec bash ${shellQuote(masterHookPath(hqRoot))} ${shellQuote(event)}`;
 }
 /** Quote one argument for the POSIX shell used by Claude Code command hooks. */
 function shellQuote(value) {

package/dist/utils/cli-telemetry.d.ts

@@ -1,6 +1,8 @@
 import { type FirstSyncStepOutcome } from "../lib/first-sync-next-step.js";
 export { CLI_FIRST_SYNC_NEXT_STEP_FLAG, FIRST_SYNC_CONFIRMATION_COPY, FIRST_SYNC_NEXT_STEP_COPY, claimFirstSyncStepMarker, firstSyncStepMarkerPaths, firstSyncStepTelemetryProperties, isHumanInteractiveCliSession, isWorkBearingSyncResult, maybeShowFirstSyncNextStep, recordFirstWorkBearingSync, shouldConfirmFirstWorkBearingSync, shouldShowFirstSyncNextStep, takeFirstSyncStepOutcomes, type FirstSyncStepOutcome, } from "../lib/first-sync-next-step.js";
 export declare const TELEMETRY_TIMEOUT_MS = 1200;
+export declare const CLI_SESSION_STARTED_BUDGET_MAX_EVENTS = 30;
+export declare const CLI_SESSION_STARTED_BUDGET_WINDOW_MS = 60000;
 /**
  * Exact stderr line printed once on the first signed-in TTY run that is not
  * `--json`. Keep this notice and its marker stable for session telemetry;

package/dist/utils/cli-telemetry.js

@@ -9,6 +9,8 @@ import { vaultApiFetch } from "./vault-api.js";
 import { firstSyncStepTelemetryProperties, isHumanInteractiveCliSession, } from "../lib/first-sync-next-step.js";
 export { CLI_FIRST_SYNC_NEXT_STEP_FLAG, FIRST_SYNC_CONFIRMATION_COPY, FIRST_SYNC_NEXT_STEP_COPY, claimFirstSyncStepMarker, firstSyncStepMarkerPaths, firstSyncStepTelemetryProperties, isHumanInteractiveCliSession, isWorkBearingSyncResult, maybeShowFirstSyncNextStep, recordFirstWorkBearingSync, shouldConfirmFirstWorkBearingSync, shouldShowFirstSyncNextStep, takeFirstSyncStepOutcomes, } from "../lib/first-sync-next-step.js";
 export const TELEMETRY_TIMEOUT_MS = 1_200;
+export const CLI_SESSION_STARTED_BUDGET_MAX_EVENTS = 30;
+export const CLI_SESSION_STARTED_BUDGET_WINDOW_MS = 60_000;
 /**
  * Exact stderr line printed once on the first signed-in TTY run that is not
  * `--json`. Keep this notice and its marker stable for session telemetry;
@@ -25,6 +27,8 @@ const DISCLOSURE_MARKER = "cli-telemetry-disclosed";
 const FIRST_SYNC_DISCLOSURE_MARKER = "cli-telemetry-disclosed-first-sync-v1";
 const INVITE_NUDGE_DISCLOSURE_MARKER = "cli-telemetry-disclosed-invite-nudge-v1";
 const FEATURE_USED_DISCLOSURE_MARKER = "cli-telemetry-disclosed-feature-used-v1";
+const SESSION_STARTED_BUDGET_FILE = "cli-session-started-budget.json";
+const SESSION_STARTED_BUDGET_LOCK_STALE_MS = 10_000;
 let cliSessionStartedPromise;
 const pendingPlanLimitInviteTeammateExposures = [];
 const pendingCliInviteNudgeEvents = [];
@@ -236,6 +240,84 @@ function hqConfigDir() {
     const home = process.env.HOME?.trim() || os.homedir();
     return path.join(home, ".hq");
 }
+/**
+ * Limit only session-start telemetry per machine. Local state is best effort:
+ * damaged or unwritable state must never suppress the event or affect a command.
+ */
+function allowCliSessionStartedBudget(now = Date.now()) {
+    const stampPath = path.join(hqConfigDir(), SESSION_STARTED_BUDGET_FILE);
+    const lockPath = `${stampPath}.lock`;
+    let lockFd;
+    try {
+        lockFd = fs.openSync(lockPath, "wx", 0o600);
+    }
+    catch (error) {
+        if (!isAlreadyExistsError(error)) {
+            logSessionStartedBudgetError("acquire", error);
+            return true;
+        }
+        try {
+            const lockAgeMs = Date.now() - fs.statSync(lockPath).mtimeMs;
+            if (lockAgeMs <= SESSION_STARTED_BUDGET_LOCK_STALE_MS)
+                return false;
+            fs.unlinkSync(lockPath);
+            lockFd = fs.openSync(lockPath, "wx", 0o600);
+        }
+        catch (retryError) {
+            if (isAlreadyExistsError(retryError))
+                return false;
+            logSessionStartedBudgetError("recover", retryError);
+            return true;
+        }
+    }
+    try {
+        return recordCliSessionStartedBudget(stampPath, now);
+    }
+    finally {
+        try {
+            fs.closeSync(lockFd);
+            fs.unlinkSync(lockPath);
+        }
+        catch (error) {
+            logSessionStartedBudgetError("release", error);
+        }
+    }
+}
+function recordCliSessionStartedBudget(stampPath, now) {
+    let recent = [];
+    if (fs.existsSync(stampPath)) {
+        try {
+            const parsed = JSON.parse(fs.readFileSync(stampPath, "utf8"));
+            if (Array.isArray(parsed) &&
+                parsed.every((value) => typeof value === "number" && Number.isFinite(value))) {
+                recent = parsed.filter((timestamp) => timestamp <= now && now - timestamp < CLI_SESSION_STARTED_BUDGET_WINDOW_MS);
+            }
+            else {
+                console.error("hq: Invalid CLI session telemetry budget stamp; allowing telemetry.");
+            }
+        }
+        catch (error) {
+            logSessionStartedBudgetError("read", error);
+        }
+    }
+    if (recent.length >= CLI_SESSION_STARTED_BUDGET_MAX_EVENTS)
+        return false;
+    try {
+        fs.writeFileSync(stampPath, JSON.stringify([...recent, now]), { mode: 0o600 });
+    }
+    catch (error) {
+        logSessionStartedBudgetError("write", error);
+        return true;
+    }
+    return true;
+}
+function isAlreadyExistsError(error) {
+    return typeof error === "object" && error !== null && "code" in error && error.code === "EEXIST";
+}
+function logSessionStartedBudgetError(operation, error) {
+    const errorClass = error instanceof Error ? error.name : "unknown";
+    console.error(`hq: Could not ${operation} CLI session telemetry budget stamp (${errorClass}); allowing telemetry.`);
+}
 export function telemetryDisclosureMarkerPath() {
     return path.join(hqConfigDir(), DISCLOSURE_MARKER);
 }
@@ -323,6 +405,8 @@ async function emitCachedCliSessionStarted(timeoutMs) {
         const token = isMachineIdentity() ? cached.idToken : cached.accessToken;
         if (!token)
             return;
+        if (!allowCliSessionStartedBudget())
+            return;
         const disclosed = maybeDiscloseCliTelemetry();
         const consentBasis = disclosed ? "disclosed" : "no-consent";
         const controller = new AbortController();

package/dist/utils/self-update.js

@@ -842,6 +842,7 @@ const SELF_UPDATE_ERROR_CLASSES = new Set([
     "MODULE_NOT_FOUND",
     "ENOENT",
     "EACCES",
+    "EBUSY",
     "EEXIST",
     "E404",
     "EAI_AGAIN",
@@ -861,6 +862,8 @@ function selfUpdateErrorReason(code, failureKind) {
         case "EACCES":
         case "EPERM":
             return "permission_denied";
+        case "EBUSY":
+            return "resource_busy";
         case "EEXIST":
             return "file_collision";
         case "E404":

package/dist/utils/update-command-supervisor.cjs

@@ -6,6 +6,7 @@ const fs = require("node:fs");
 const KNOWN_NPM_ERROR_CODES = new Set([
   "E404",
   "EACCES",
+  "EBUSY",
   "EAI_AGAIN",
   "ECONNREFUSED",
   "ECONNRESET",

package/dist/utils/version-gate.js

@@ -507,7 +507,7 @@ export function captureNonWritableNpmPrefixNotice(input) {
     if (!claimed)
         return Promise.resolve();
     Sentry.captureMessage("Self-update deferred: npm prefix is not writable", {
-        level: "warning",
+        level: "info",
         fingerprint: ["self-update", "npm-prefix-not-writable"],
         tags: {
             from_version: input.fromVersion,
@@ -754,6 +754,7 @@ const INSTALL_DETAIL_MAX_CHARS = 400;
 const KNOWN_NPM_UPDATE_ERROR_CODES = new Set([
     "E404",
     "EACCES",
+    "EBUSY",
     "EAI_AGAIN",
     "ECONNREFUSED",
     "ECONNRESET",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.332.0",
+  "version": "5.333.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {