@indigoai-us/hq-cli 5.341.0 → 5.341.1

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## [Unreleased]
 
+## [5.341.1] — 2026-10-03
+- Match native policy frontmatter and report bytes to the bundled shell on Windows, including paths, diagnostics, and JSON newlines.
+- Keep session-journal printable paths byte-compatible with the shell on Windows.
+
 ## [5.341.0] — 2026-10-03
 - Keep-alive reconciliation polls every 15 seconds and admits due lane resumes within the same sweep.
 - Add flag-gated `hq daemon login --stdin` for machine sign-in on disposable hosts. Credentials are piped over the local daemon socket, and the resulting token stays in hqd memory until restart or token expiry. Login is deadline-bounded, and the generic argv-based `hq daemon call` command cannot submit credentials.

package/assets/scaffold/core/scripts/policy-age-report.sh

@@ -183,7 +183,7 @@ done > "$TMP/rows.tsv"
 if [ "$JSON" = 1 ]; then
   jq -R -s -c --argjson cand "$CAND" '
     split("\n") | map(select(length>0) | split("\t") | {id:.[0], path:.[1], enforcement:.[2], age_days:(.[3]|tonumber), fired:(.[4]|tonumber), last_fired:(if .[5]=="-" then null else .[5] end), stale_refs:(if .[7]=="" then [] else (.[7]|split(",")) end), single_incident:(.[8]=="1"), candidate_classes:(if .[9]=="" then [] else (.[9]|split(",")) end), retrieved:((.[10] // "0")|tonumber), refs_judged:((.[11] // "0")|tonumber), renamed_refs:(if (.[12] // "")=="" then [] else (.[12]|split(",")) end)})
-    | if $cand == 1 then map(select(.candidate_classes|length>0)) else . end' "$TMP/rows.tsv"
+    | if $cand == 1 then map(select(.candidate_classes|length>0)) else . end' "$TMP/rows.tsv" | tr -d '\r'
   exit 0
 fi
 total="$(wc -l < "$TMP/rows.tsv" | tr -d ' ')"

package/dist/commands/core-hq-session-native.js

@@ -145,10 +145,11 @@ function resolveSessionId(root, deps) {
 }
 function findMetaValue(contents, key) {
     for (const line of contents.split("\n")) {
-        const first = line.match(/^\s*(\S+)/)?.[1] ?? "";
+        const record = process.platform === "win32" ? line.replace(/\r$/, "") : line;
+        const first = record.match(/^\s*(\S+)/)?.[1] ?? "";
         if (first !== `${key}:`)
             continue;
-        return { found: true, value: line.replace(/^[^:]+:[\t ]*/, "").replace(/^"|"$/g, "") };
+        return { found: true, value: record.replace(/^[^:]+:[\t ]*/, "").replace(/^"|"$/g, "") };
     }
     return { found: false, value: "" };
 }

package/dist/commands/core-policy-frontmatter.js

@@ -39,7 +39,10 @@ export function runPolicyFrontmatter(args, cwd, pathValue = process.env.PATH, pl
     while (start < source.length) {
         const end = source.indexOf(0x0a, start);
         const lineEnd = end < 0 ? source.length : end;
-        const line = source.subarray(start, lineEnd);
+        const rawLine = source.subarray(start, lineEnd);
+        const line = platform === 'win32' && rawLine.at(-1) === 0x0d
+            ? rawLine.subarray(0, rawLine.length - 1)
+            : rawLine;
         if (line.length === 3 && line[0] === 0x2d && line[1] === 0x2d && line[2] === 0x2d) {
             markers += 1;
         }

package/dist/commands/core-policy.js

@@ -378,12 +378,12 @@ function bashInteger(value) {
     const parsed = BigInt(value);
     return parsed < BASH_INTEGER_MIN || parsed > BASH_INTEGER_MAX ? undefined : parsed;
 }
-function bashTestGreaterOrEqual(left, right, scriptPath, line) {
+function bashTestGreaterOrEqual(left, right, scriptPath, line, platform) {
     const parsed = bashInteger(right);
     if (parsed === undefined) {
         return {
             value: false,
-            stderr: `${scriptPath}: line ${line}: [: ${right}: integer expression expected\n`,
+            stderr: `${scriptPath}: line ${line}: [: ${right}: ${platform === 'win32' ? 'integer expected' : 'integer expression expected'}\n`,
         };
     }
     return { value: BigInt(left) >= parsed, stderr: '' };
@@ -448,13 +448,13 @@ export function runPolicyAgeReport(args, root, env = process.env, nowEpoch = Mat
             const singleIncident = ['user-correction', 'session-learning', 'back-pressure-failure'].includes(source) && (version || '1') === '1';
             const classes = [];
             if (fired === 0) {
-                const comparison = bashTestGreaterOrEqual(ageDays, parsed.minAge, resolveBundledAsset(POLICY_AGE_REPORT_ASSET), 173);
+                const comparison = bashTestGreaterOrEqual(ageDays, parsed.minAge, resolveBundledAsset(POLICY_AGE_REPORT_ASSET), 173, platform);
                 stderr += comparison.stderr;
                 if (comparison.value && usage.anyFiles)
                     classes.push('never-fired');
             }
             if (fired > 0) {
-                const comparison = bashTestGreaterOrEqual(lastAge, parsed.dormantDays, resolveBundledAsset(POLICY_AGE_REPORT_ASSET), 174);
+                const comparison = bashTestGreaterOrEqual(lastAge, parsed.dormantDays, resolveBundledAsset(POLICY_AGE_REPORT_ASSET), 174, platform);
                 stderr += comparison.stderr;
                 if (comparison.value)
                     classes.push('dormant');
@@ -464,14 +464,12 @@ export function runPolicyAgeReport(args, root, env = process.env, nowEpoch = Mat
             if (refs.renamed.length > 0)
                 classes.push('renamed-refs');
             if (singleIncident) {
-                const comparison = bashTestGreaterOrEqual(ageDays, parsed.incidentDays, resolveBundledAsset(POLICY_AGE_REPORT_ASSET), 178);
+                const comparison = bashTestGreaterOrEqual(ageDays, parsed.incidentDays, resolveBundledAsset(POLICY_AGE_REPORT_ASSET), 178, platform);
                 stderr += comparison.stderr;
                 if (comparison.value && fired <= 1)
                     classes.push('single-incident-old');
             }
-            let displayPath = file.startsWith(`${root}/`) ? file.slice(root.length + 1) : file;
-            if (!path.isAbsolute(file) && !file.startsWith(`${root}/`))
-                displayPath = file;
+            const displayPath = displayPolicyPath(file, root);
             rows.push({
                 id,
                 path: displayPath,
@@ -648,7 +646,7 @@ function setPolicyStatus(filePath, status, reason, by, env, now, cwd = process.c
         const trimmedDiagnostic = diagnostic.replace(/\n+$/, '');
         return {
             ok: false,
-            error: `policy-retire: refusing to write ${filePath}; canonical policy validation failed:\n${trimmedDiagnostic}\n`,
+            error: `policy-retire: refusing to write ${shellPolicyPath(filePath, env.HQ_ROOT || cwd)}; canonical policy validation failed:\n${trimmedDiagnostic}\n`,
         };
     }
     const tempPath = `${resolvedPath}.tmp`;
@@ -657,7 +655,20 @@ function setPolicyStatus(filePath, status, reason, by, env, now, cwd = process.c
     return { ok: true };
 }
 function displayPolicyPath(filePath, root) {
-    return filePath.startsWith(`${root}/`) ? filePath.slice(root.length + 1) : filePath;
+    if (!path.isAbsolute(filePath))
+        return filePath;
+    const relative = path.relative(root, filePath);
+    if (relative === '' || relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative))
+        return filePath;
+    return relative.split(path.sep).join('/');
+}
+function shellPolicyPath(filePath, root) {
+    if (process.platform !== 'win32' || !path.isAbsolute(filePath))
+        return filePath;
+    const relative = path.relative(root, filePath);
+    if (relative === '' || relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative))
+        return filePath;
+    return `${root}/${relative.split(path.sep).join('/')}`;
 }
 function resolvePolicyTarget(target, root, cwd) {
     let found = isFile(path.isAbsolute(target) ? target : path.resolve(cwd, target))
@@ -817,7 +828,7 @@ function autoRetire(options, root, cwd, env, now) {
             wouldRetire += 1;
             continue;
         }
-        const updated = setPolicyStatus(resolvedForRead, 'retired', `auto: ${why}`, options.by, env, now);
+        const updated = setPolicyStatus(resolvedForRead, 'retired', `auto: ${why}`, options.by, env, now, cwd);
         if (updated.ok) {
             stdout += `retired: ${candidate.id} — ${why}\n`;
             reportText += `- **${candidate.id}** (${candidate.path}): ${why}\n`;
@@ -875,7 +886,7 @@ function fromReport(options, root, cwd, env, now) {
     let selected = 0;
     let stdout = '';
     let stderr = report === null
-        ? `jq: error (at ${reportPath}:0): Cannot iterate over null (null)\n`
+        ? `jq: error (at ${reportPath}:0): Cannot iterate over null (null)${process.platform === 'win32' ? '\r\n' : '\n'}`
         : '';
     for (const value of rows) {
         if (value === null || typeof value !== 'object' || Array.isArray(value))

package/dist/commands/core-session-journal-native.js

@@ -55,6 +55,10 @@ function yamlDoubleQuoted(value) {
 }
 const warning = (message) => { process.stderr.write(`session-journal: ${message}\n`); };
 const journalDir = (root, date) => path.join(root, "workspace/threads/journal", date);
+// The shell companion builds printable paths by appending slash-delimited
+// suffixes to HQ_ROOT. Keep those bytes on Windows while filesystem access
+// continues to use the host path API.
+const printableJournalDir = (root, date) => path.posix.join(root, "workspace/threads/journal", date);
 const sessionJournalAsset = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../../assets/scaffold/core/scripts/session-journal.sh");
 const hasFile = (file) => {
     try {
@@ -182,7 +186,9 @@ function options(args, valueFlags) {
 function runToolCounter(root, action, sessionArg, env, now, writers) {
     const rawKey = sessionArg || env.HQ_JOURNAL_SESSION || env.HQ_HOOK_SESSION_ID || "";
     const key = counterKey(rawKey);
-    const dir = journalDir(root, now().toISOString().slice(0, 10));
+    const date = now().toISOString().slice(0, 10);
+    const dir = journalDir(root, date);
+    const printableCounter = `${printableJournalDir(root, date)}/.tool-count-${key}`;
     try {
         fs.mkdirSync(dir, { recursive: true });
     }
@@ -196,7 +202,7 @@ function runToolCounter(root, action, sessionArg, env, now, writers) {
             throw new Error("Bundled asset is missing from the installed package: assets/scaffold/core/scripts/session-journal.sh\n" +
                 "This is a packaging fault — the file exists in source but was not published.");
         }
-        writers.stderr(`${sessionJournalAsset}: line ${line}: ${counter}: Is a directory\n`);
+        writers.stderr(`${sessionJournalAsset}: line ${line}: ${printableCounter}: Is a directory\n`);
     };
     if (action === "increment") {
         withCounterLock(lock, () => {
@@ -270,7 +276,7 @@ function executeSessionJournal(args, cwd, hqRoot, dependencies, writers) {
             fs.mkdirSync(dir, { recursive: true });
         }
         catch {
-            warning(`write: mkdir failed: ${dir}`);
+            warning(`write: mkdir failed: ${printableJournalDir(root, date)}`);
             return 0;
         }
         const slug = slugify(title) || "entry";
@@ -289,7 +295,8 @@ function executeSessionJournal(args, cwd, hqRoot, dependencies, writers) {
         try {
             for (let attempt = 0; attempt < 10_000; attempt += 1) {
                 seq = nextSequence(dir);
-                output = path.join(dir, `${seq}-${slug}.md`);
+                output = `${printableJournalDir(root, date)}/${seq}-${slug}.md`;
+                const outputFile = path.join(dir, `${seq}-${slug}.md`);
                 const lines = ["---\n", `ts: ${nowIso()}\n`, `title: ${yamlDoubleQuoted(title)}\n`, `slug: ${yamlSlug}\n`];
                 if (files) {
                     lines.push("files:\n");
@@ -299,7 +306,7 @@ function executeSessionJournal(args, cwd, hqRoot, dependencies, writers) {
                 }
                 lines.push("status: closed\n", "---\n\n", `# ${seq} — ${title}\n\n`);
                 try {
-                    fs.writeFileSync(output, lines.join("") + body, { flag: "wx" });
+                    fs.writeFileSync(outputFile, lines.join("") + body, { flag: "wx" });
                     created = true;
                     break;
                 }
@@ -341,11 +348,11 @@ function executeSessionJournal(args, cwd, hqRoot, dependencies, writers) {
         const date = options(afterSequence, ["--date"]).get("--date") || today();
         const dir = journalDir(root, date);
         if (command === "dir-path") {
-            writers.stdout(dir);
+            writers.stdout(printableJournalDir(root, date));
             return 0;
         }
         if (command === "index-path") {
-            writers.stdout(`${dir}/INDEX.md\n`);
+            writers.stdout(`${printableJournalDir(root, date)}/INDEX.md\n`);
             return 0;
         }
         if (command === "list") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.341.0",
+  "version": "5.341.1",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {