@indigoai-us/hq-cli 5.345.101 → 5.345.102

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [5.345.102] — 2026-10-12
+- Session-start health no longer files a leftover company journal as an
+  unrepaired doctor finding, and company manifest rows keep a real check id
+  instead of showing up as unlabeled `unknown`. `hq doctor --fix` still
+  refreshes that company journal when hook files have uncommitted changes.
+
 ## [5.345.101] — 2026-10-12
 - Doctor JSON no longer counts an ordinary HQ Core upgrade warning in its
   summary after omitting it from results. Session-start health that only saw

package/dist/commands/doctor.js

@@ -33,7 +33,7 @@ import { PARITY_FAMILY_ID, PARITY_FAMILY_TITLE, runParityReplay, } from "../lib/
 import { applyFixes } from "../lib/doctor/fix/apply.js";
 import { renderDoctorFixJson } from "../lib/doctor/fix/json-output.js";
 import { clientHealthCheckStatusEnabled as isActiveCompanyClientHealthCheckStatusEnabled, clientHealthCheckStatusEnabledForCompany, clientHealthReasonCodesEnabled as isActiveCompanyClientHealthReasonCodesEnabled, clientHealthReasonCodesEnabledForCompany, } from "../lib/doctor/client-health-reason-codes-flag.js";
-import { isCompanyJournalSlug } from "../lib/doctor/checks/sync-health.js";
+import { clientHealthCompanyScopeFromCheckId } from "../lib/doctor/checks/sync-health.js";
 import { readCompaniesManifestMap } from "../lib/work-context/repo-remote.js";
 import * as readline from "node:readline";
 import { runSideEffectTests } from "../lib/doctor/deep/sandbox.js";
@@ -207,15 +207,7 @@ async function resolveClientHealthReasonCodesCheckIds(families, resolveForCompan
                 (result.status !== "FAIL" && result.status !== "WARN")) {
                 continue;
             }
-            const scoped = /^sync\.(?:journal|manifest)\.(.+)$/.exec(result.checkId);
-            const companyUidScope = scoped
-                ? /^company:(cmp_[A-Za-z0-9]{3,128})$/.exec(scoped[1])
-                : null;
-            const companySlug = companyUidScope
-                ? `company:${companyUidScope[1]}`
-                : scoped && isCompanyJournalSlug(scoped[1])
-                    ? scoped[1]
-                    : null;
+            const companySlug = clientHealthCompanyScopeFromCheckId(result.checkId);
             const checkIds = checksByCompany.get(companySlug) ?? [];
             checkIds.push(result.checkId);
             checksByCompany.set(companySlug, checkIds);
@@ -242,8 +234,7 @@ async function resolveClientHealthCheckStatusCheckIds(families, resolveForCompan
         for (const result of run.results) {
             if (result.status !== "FAIL" && result.status !== "WARN")
                 continue;
-            const scoped = /^sync\.(?:journal|manifest)\.(.+)$/.exec(result.checkId);
-            const companySlug = scoped && isCompanyJournalSlug(scoped[1]) ? scoped[1] : null;
+            const companySlug = clientHealthCompanyScopeFromCheckId(result.checkId);
             const checkIds = checksByCompany.get(companySlug) ?? [];
             checkIds.push(result.checkId);
             checksByCompany.set(companySlug, checkIds);

package/dist/lib/doctor/checks/sync-health.d.ts

@@ -107,6 +107,23 @@ export interface SyncHealthDeps {
  * outside `companies/`.
  */
 export declare function isSafeCompanySlug(slug: string): boolean;
+/**
+ * SessionStart health only ships `checkId` values matching
+ * `^sync.[A-Za-z0-9._-]{1,160}$`. A colon (hq-cloud's `company:cmp_…` scope
+ * key) becomes the unlabeled `unknown` row in those reports.
+ */
+export declare const CLIENT_HEALTH_SYNC_CHECK_ID: RegExp;
+/**
+ * Doctor JSON `checkId` for a manifest scope. hq-cloud keys company rows
+ * `company:cmp_…`; the colon is replaced so SessionStart health can report
+ * the real id instead of `unknown`.
+ */
+export declare function manifestCheckIdFromScopeKey(scopeKey: string): string;
+/**
+ * Company slug or `company:cmp_…` uid used to resolve per-company health
+ * flags from a sync finding. Manifest ids may use a colon or a dot.
+ */
+export declare function clientHealthCompanyScopeFromCheckId(checkId: string): string | null;
 /** True when this journal slug names a company rather than the personal tree. */
 export declare function isCompanyJournalSlug(slug: string): boolean;
 /** True when this journal slug names the personal tree or personal vault. */

package/dist/lib/doctor/checks/sync-health.js

@@ -194,13 +194,64 @@ const NON_COMPANY_JOURNAL_SLUGS = new Set([
     PERSONAL_SCOPE_SLUG,
     PERSONAL_VAULT_SCOPE_SLUG,
 ]);
+/**
+ * SessionStart health only ships `checkId` values matching
+ * `^sync.[A-Za-z0-9._-]{1,160}$`. A colon (hq-cloud's `company:cmp_…` scope
+ * key) becomes the unlabeled `unknown` row in those reports.
+ */
+export const CLIENT_HEALTH_SYNC_CHECK_ID = /^sync\.[A-Za-z0-9._-]{1,160}$/;
+const COMPANY_SCOPE_UID = /^company[.:](cmp_[A-Za-z0-9]{3,128})$/;
 /** Keep malformed scopes distinct without letting them imitate valid slugs. */
 function journalSlugForCheckId(slug) {
     if (NON_COMPANY_JOURNAL_SLUGS.has(slug) || isSafeCompanySlug(slug)) {
         return slug;
     }
     const encoded = Array.from(slug, (character) => character.codePointAt(0).toString(16)).join("-");
-    return `__hq_invalid_journal_scope__${encoded}`;
+    return boundInvalidScopeToken(`__hq_invalid_journal_scope__${encoded}`);
+}
+function boundInvalidScopeToken(token) {
+    // `sync.` + token must fit the health-hook 160-char suffix budget.
+    const maxSuffix = 160;
+    if (token.length <= maxSuffix)
+        return token;
+    return token.slice(0, maxSuffix);
+}
+/**
+ * Doctor JSON `checkId` for a manifest scope. hq-cloud keys company rows
+ * `company:cmp_…`; the colon is replaced so SessionStart health can report
+ * the real id instead of `unknown`.
+ */
+export function manifestCheckIdFromScopeKey(scopeKey) {
+    if (scopeKey.startsWith("company:")) {
+        return `sync.manifest.${scopeKey.replace(/:/g, ".")}`;
+    }
+    if (scopeKey === "personal" || isSafeCompanySlug(scopeKey)) {
+        return `sync.manifest.${scopeKey}`;
+    }
+    const encoded = Array.from(scopeKey, (character) => character.codePointAt(0).toString(16)).join("-");
+    return `sync.manifest.${boundInvalidScopeToken(`__hq_invalid_scope__${encoded}`)}`;
+}
+/**
+ * Company slug or `company:cmp_…` uid used to resolve per-company health
+ * flags from a sync finding. Manifest ids may use a colon or a dot.
+ */
+export function clientHealthCompanyScopeFromCheckId(checkId) {
+    const journalSlug = journalSlugFromCheckId(checkId);
+    if (journalSlug && isCompanyJournalSlug(journalSlug) && isSafeCompanySlug(journalSlug)) {
+        return journalSlug;
+    }
+    const manifest = /^sync\.manifest\.(.+)$/.exec(checkId);
+    if (!manifest)
+        return null;
+    const rest = manifest[1];
+    const companyUid = COMPANY_SCOPE_UID.exec(rest)?.[1];
+    if (companyUid)
+        return `company:${companyUid}`;
+    if (rest === "personal" || NON_COMPANY_JOURNAL_SLUGS.has(rest))
+        return null;
+    if (isSafeCompanySlug(rest))
+        return rest;
+    return null;
 }
 /** True when this journal slug names a company rather than the personal tree. */
 export function isCompanyJournalSlug(slug) {
@@ -553,7 +604,7 @@ function manifestResults(deps, journals) {
     }
     const nowMs = deps.now().getTime();
     const reported = statuses.map((entry) => {
-        const checkId = `sync.manifest.${entry.scopeKey}`;
+        const checkId = manifestCheckIdFromScopeKey(entry.scopeKey);
         if (!entry.lastUploadAt) {
             return {
                 status: "UNTESTED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.345.101",
+  "version": "5.345.102",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {