@indigoai-us/hq-cli 5.345.18 → 5.345.20

package/assets/scaffold/core/scripts/register-project.sh

@@ -21,13 +21,44 @@ resolve_uid() {
     tr -d '[:space:]' < "$file"
     return
   fi
-  die "no company uid for $company (set HQ_COMPANY_UID or companies/$company/.company-uid)"
+  if [ -f "$ROOT/companies/manifest.yaml" ]; then
+    local manifest_uid
+    manifest_uid="$(awk -v company="$company" '
+      /^companies:[[:space:]]*$/ { in_companies=1; next }
+      in_companies && /^[^[:space:]]/ { in_companies=0 }
+      in_companies && /^  [^ #][^:]*:/ {
+        slug=$1; sub(/[[:space:]]+$/, "", slug); sub(/:$/, "", slug); in_company=(slug == company); next
+      }
+      in_company && /^  [^[:space:]#]/ { exit }
+      in_company && $1 == "cloud_uid:" { gsub(/["\047]/, "", $2); sub(/[[:space:]]+$/, "", $2); print $2; exit }
+    ' "$ROOT/companies/manifest.yaml")"
+    if [ -n "$manifest_uid" ]; then
+      printf '%s\n' "$manifest_uid"
+      return
+    fi
+  fi
+  die "no company uid for $company (set HQ_COMPANY_UID, companies/$company/.company-uid, or manifest cloud_uid)"
+}
+
+mesh_project_id_for_prd() {
+  local company="$1" project="$2" board rel resolved
+  board="$(board_path "$company")"
+  rel="companies/$company/projects/$project/prd.json"
+  resolved=""
+  if [ -f "$board" ]; then
+    resolved="$(jq -r --arg path "$rel" --arg project "$project" '
+      [.projects[]? | select(.prd_path == $path or .id == $project)] | first | (.mesh_project_id // .id // empty)
+    ' "$board" 2>/dev/null | tr -d '\r' || true)"
+  fi
+  printf '%s\n' "${resolved:-$project}"
 }
 
 has_board() {
-  local company="$1" project="$2" uid
+  local company="$1" project="$2" uid mesh_project
   uid="$(resolve_uid "$company")"
-  [ -f "${HOME}/.hq/work-mesh/cache/projects/${uid}/${project}.json" ]
+  mesh_project="$(mesh_project_id_for_prd "$company" "$project")"
+  [ -f "${HOME}/.hq/work-mesh/cache/projects/${uid}/${mesh_project}.json" ] \
+    || [ -f "${HOME}/.hq/work-mesh/cache/projects/${uid}/${project}.json" ]
 }
 
 story_not_done() {
@@ -69,7 +100,7 @@ mark_pending() {
   prd="$ROOT/companies/$company/projects/$project/prd.json"
   rel="companies/$company/projects/$project/prd.json"
   now="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-  title="$(jq -r '.name // empty' "$prd" 2>/dev/null || true)"
+  title="$(jq -r '.name // empty' "$prd" 2>/dev/null | tr -d '\r' || true)"
   [ -n "$title" ] || title="$project"
   mkdir -p "$(dirname "$board")"
   if [ ! -f "$board" ]; then
@@ -108,19 +139,21 @@ mark_pending() {
 register_one() {
   local company="$1" project="$2"
   local prd="$ROOT/companies/$company/projects/$project/prd.json"
+  local mesh_project
+  mesh_project="$(mesh_project_id_for_prd "$company" "$project")"
   [ -f "$prd" ] || die "registration incomplete: missing $prd"
   if ! cli_has_project_ensure; then
     mark_pending "$company" "$project"
     die "hq-cli ${MIN_HQ_CLI} or newer is required; ${company}/${project} stays local until then"
   fi
   local ensure_json
-  if ! ensure_json="$(hq mesh project ensure "$project" --company "$company" --stories-file "$prd" --json)"; then
+  if ! ensure_json="$(hq mesh project ensure "$mesh_project" --company "$company" --stories-file "$prd" --json)"; then
     echo "registration incomplete: hq mesh project ensure failed for $company/$project" >&2
     exit 1
   fi
   local thread channel
-  thread="$(printf '%s' "$ensure_json" | jq -er '.threadId // empty')" || die "registration incomplete: ensure output missing threadId"
-  channel="$(printf '%s' "$ensure_json" | jq -er '.channelId // empty')" || die "registration incomplete: ensure output missing channelId"
+  thread="$(printf '%s' "$ensure_json" | jq -er '.threadId // empty' | tr -d '\r')" || die "registration incomplete: ensure output missing threadId"
+  channel="$(printf '%s' "$ensure_json" | jq -er '.channelId // empty' | tr -d '\r')" || die "registration incomplete: ensure output missing channelId"
   [ -n "$thread" ] || die "registration incomplete: empty threadId"
   [ -n "$channel" ] || die "registration incomplete: empty channelId"
 
@@ -128,7 +161,7 @@ register_one() {
   local rel="companies/$company/projects/$project/prd.json"
   local now title tmp
   now="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-  title="$(jq -r '.name // empty' "$prd")"
+  title="$(jq -r '.name // empty' "$prd" | tr -d '\r')"
   [ -n "$title" ] || title="$project"
   mkdir -p "$(dirname "$board")"
   if [ ! -f "$board" ]; then
@@ -136,7 +169,8 @@ register_one() {
   fi
   tmp="$(mktemp)"
   jq \
-    --arg id "$project" \
+    --arg id "$mesh_project" \
+    --arg project "$project" \
     --arg path "$rel" \
     --arg thread "$thread" \
     --arg channel "$channel" \
@@ -144,9 +178,9 @@ register_one() {
     --arg title "$title" \
     '
       .projects = (.projects // []) |
-      if any(.projects[]; .id == $id or .prd_path == $path or .mesh_project_id == $id) then
+      if any(.projects[]; .id == $id or .id == $project or .prd_path == $path or .mesh_project_id == $id) then
         .projects |= map(
-          if .id == $id or .prd_path == $path or .mesh_project_id == $id then
+          if .id == $id or .id == $project or .prd_path == $path or .mesh_project_id == $id then
             . + {threadId:$thread, channelId:$channel, updated_at:$now, prd_path:(.prd_path // $path), mesh_project_id:$id} | del(.pending_registration)
           else . end
         )
@@ -169,14 +203,45 @@ register_one() {
   jq -e \
     --arg id "$project" \
     --arg path "$rel" \
+    --arg mesh "$mesh_project" \
     --arg thread "$thread" \
     --arg channel "$channel" \
-    'any(.projects[]?; (.id == $id or .prd_path == $path or .mesh_project_id == $id) and .threadId == $thread and .channelId == $channel)' \
+    'any(.projects[]?; (.id == $id or .prd_path == $path or .mesh_project_id == $mesh) and .mesh_project_id == $mesh and .threadId == $thread and .channelId == $channel)' \
     "$board" >/dev/null \
     || die "registration incomplete: board.json entry for $project did not verify"
   echo "registered $company/$project thread=$thread channel=$channel"
 }
 
+register_brainstorm() {
+  local company="$1" project="$2" board title description ensure_json thread channel tmp
+  resolve_uid "$company" >/dev/null
+  board="$(board_path "$company")"
+  [ -f "$board" ] || die "registration incomplete: missing $board"
+  title="$(jq -r --arg id "$project" '[.projects[]? | select(.id == $id or .mesh_project_id == $id)] | first | .title // empty' "$board" | tr -d '\r')"
+  description="$(jq -r --arg id "$project" '[.projects[]? | select(.id == $id or .mesh_project_id == $id)] | first | .description // empty' "$board" | tr -d '\r')"
+  [ -n "$title" ] || die "registration incomplete: missing local Board project $company/$project"
+  if ! ensure_json="$(hq mesh project set "$project" --company "$company" --name "$title" --description "$description" --create --json)"; then
+    die "registration incomplete: hq mesh project set failed for $company/$project"
+  fi
+  thread="$(printf '%s' "$ensure_json" | jq -er '.registration.threadId // .threadId // empty' | tr -d '\r')" \
+    || die "registration incomplete: project set output missing threadId"
+  channel="$(printf '%s' "$ensure_json" | jq -er '.registration.channelId // .channelId // empty' | tr -d '\r')" \
+    || die "registration incomplete: project set output missing channelId"
+  [ -n "$thread" ] && [ -n "$channel" ] || die "registration incomplete: empty threadId or channelId"
+  tmp="$(mktemp)"
+  jq --arg id "$project" --arg thread "$thread" --arg channel "$channel" --arg now "$(date -u +%Y-%m-%dT%H:%M:%SZ)" '
+    .projects |= map(if .id == $id or .mesh_project_id == $id then . + {
+      threadId:$thread, channelId:$channel, mesh_project_id:$id,
+      mesh_registration_prompt_state:"accepted", updated_at:$now
+    } | del(.pending_registration) else . end)
+  ' "$board" > "$tmp"
+  mv "$tmp" "$board"
+  jq -e --arg id "$project" --arg thread "$thread" --arg channel "$channel" \
+    'any(.projects[]?; (.id == $id or .mesh_project_id == $id) and .threadId == $thread and .channelId == $channel)' \
+    "$board" >/dev/null || die "registration incomplete: local Board registration did not verify"
+  echo "registered $company/$project thread=$thread channel=$channel"
+}
+
 audit() {
   local company="$1"
   [ -n "$company" ] || die "usage: register-project.sh --audit <company>"
@@ -248,7 +313,10 @@ retry_pending() {
   done < <(jq -r '[.projects[]? | select(.pending_registration == true) | .id // empty] | .[]' "$board" 2>/dev/null | tr -d '\r' || true)
 }
 
-if [ "${1:-}" = "--audit" ]; then
+if [ "${1:-}" = "--brainstorm" ]; then
+  [ "$#" -eq 3 ] || die "usage: register-project.sh --brainstorm <company> <board-project-id>"
+  register_brainstorm "$2" "$3"
+elif [ "${1:-}" = "--audit" ]; then
   audit "${2:-}"
 elif [ "${1:-}" = "--backfill" ]; then
   shift
@@ -258,5 +326,5 @@ elif [ "${1:-}" = "--retry-pending" ]; then
 elif [ $# -eq 2 ]; then
   register_one "$1" "$2"
 else
-  die "usage: register-project.sh <company> <project> | --audit <company> | --backfill <company> --only-active [--yes] | --retry-pending <company>"
+  die "usage: register-project.sh <company> <project> | --brainstorm <company> <board-project-id> | --audit <company> | --backfill <company> --only-active [--yes] | --retry-pending <company>"
 fi

package/assets/scaffold/core/scripts/resume-thread-lock.sh

@@ -199,11 +199,11 @@ existing_state() {
   fi
 
   local record_thread record_session record_at record_epoch record_generation current_epoch
-  record_thread="$(jq -r '.thread_id' "$record_path")"
-  record_session="$(jq -r '.session_id' "$record_path")"
-  record_at="$(jq -r '.resumed_at' "$record_path")"
-  record_epoch="$(jq -r '.resumed_epoch' "$record_path")"
-  record_generation="$(jq -r '.generation' "$record_path")"
+  record_thread="$(jq -r '.thread_id' "$record_path" | tr -d '\r')"
+  record_session="$(jq -r '.session_id' "$record_path" | tr -d '\r')"
+  record_at="$(jq -r '.resumed_at' "$record_path" | tr -d '\r')"
+  record_epoch="$(jq -r '.resumed_epoch' "$record_path" | tr -d '\r')"
+  record_generation="$(jq -r '.generation' "$record_path" | tr -d '\r')"
 
   if [[ "$record_thread" != "$thread_id" || ! "$record_epoch" =~ ^[0-9]+$ ]]; then
     emit_stale "invalid-record" "$record_session" "$record_at" "$record_generation"

package/assets/scaffold/core/scripts/session-journal.sh

@@ -128,16 +128,65 @@ resolve_session_key() {
 }
 
 # Read-modify-write on the counter must not interleave across concurrent tasks.
+reclaim_stale_counter_lock() {
+  local lockdir="$1" owner_pid current_owner claim stale_dir suffix=0
+  owner_pid="$(cat "$lockdir/pid" 2>/dev/null || true)"
+  case "$owner_pid" in ''|*[!0-9]*) return 1 ;; esac
+  [ "$owner_pid" -gt 1 ] 2>/dev/null || return 1
+  kill -0 "$owner_pid" 2>/dev/null && return 1
+
+  claim="${lockdir}.reclaim"
+  mkdir "$claim" 2>/dev/null || return 1
+  if ! printf '%s\n' "$$" > "$claim/pid" 2>/dev/null; then
+    rmdir "$claim" 2>/dev/null || true
+    return 1
+  fi
+
+  current_owner="$(cat "$lockdir/pid" 2>/dev/null || true)"
+  if [ "$current_owner" = "$owner_pid" ] && ! kill -0 "$owner_pid" 2>/dev/null; then
+    stale_dir="${lockdir}.stale.$$.$RANDOM"
+    while [ -e "$stale_dir" ]; do
+      suffix=$((suffix + 1))
+      stale_dir="${lockdir}.stale.$$.$RANDOM.$suffix"
+    done
+    if mv "$lockdir" "$stale_dir" 2>/dev/null; then
+      rm -rf "$stale_dir" 2>/dev/null || true
+      rm -rf "$claim" 2>/dev/null || true
+      return 0
+    fi
+  fi
+
+  rm -rf "$claim" 2>/dev/null || true
+  return 1
+}
+
 with_counter_lock() {
   local lockdir="$1"; shift
-  local i=0
-  while ! mkdir "$lockdir" 2>/dev/null; do
+  local i=0 acquired=0 rc=0 tries="${HQ_JOURNAL_COUNTER_LOCK_TRIES:-250}"
+  case "$tries" in ''|*[!0-9]*) tries=250 ;; esac
+  while [ "$i" -lt "$tries" ]; do
+    if mkdir "$lockdir" 2>/dev/null; then
+      acquired=1
+      if ! printf '%s\n' "$$" > "$lockdir/pid" 2>/dev/null; then
+        rm -rf "$lockdir" 2>/dev/null || true
+        return 0
+      fi
+      break
+    fi
+    reclaim_stale_counter_lock "$lockdir" && continue
     i=$((i + 1))
-    [ "$i" -ge 50 ] && break
-    sleep 0.02 2>/dev/null || sleep 1
+    [ "$i" -ge "$tries" ] || sleep 0.02 2>/dev/null || sleep 1
   done
-  "$@"
-  rmdir "$lockdir" 2>/dev/null || true
+  if [ "$acquired" -ne 1 ]; then
+    warn "tool-counter: lock remained busy; skipped update"
+    return 0
+  fi
+
+  "$@" || rc=$?
+  if [ "$(cat "$lockdir/pid" 2>/dev/null || true)" = "$$" ]; then
+    rm -rf "$lockdir" 2>/dev/null || true
+  fi
+  return "$rc"
 }
 
 counter_read_raw() {

package/assets/scaffold/core/scripts/share-suggestion-state.sh

@@ -113,7 +113,10 @@ const sortKeys = (v) =>
 
 function readJson(p, dflt) {
   if (!fs.existsSync(p)) return dflt;
-  try { return JSON.parse(fs.readFileSync(p, "utf8")); } catch (e) { return dflt; }
+  try { return JSON.parse(fs.readFileSync(p, "utf8")); } catch (e) {
+    console.error(`share-suggestion-state: unable to read ${p} (${e.name || "Error"})`);
+    process.exit(3);
+  }
 }
 
 function writeJson(p, payload) {
@@ -537,5 +540,10 @@ process.exit(0);
 JS
 }
 
-main "$@" || log_error "internal error"
+# Exit 3 means an existing state file could not be read; callers see that
+# failure. Every other error is logged and the helper exits 0.
+main "$@"
+status=$?
+[ "$status" -eq 3 ] && exit 3
+[ "$status" -eq 0 ] || log_error "internal error"
 exit 0

package/assets/scaffold/core/scripts/work-mesh-live-bind-trusted.sh

@@ -144,9 +144,41 @@ if [ "${HQ_WORK_MESH_RECONCILE_STUB:-}" = "1" ]; then
 fi
 
 HQ_BIN="$(command -v hq 2>/dev/null || true)"
-if [ -n "$HQ_BIN" ] && [ -f "$OBS_FILE" ]; then
-  nohup "$HQ_BIN" mesh context reconcile --observation-file "$OBS_FILE" --machine \
-    >/dev/null 2>&1 </dev/null &
-  disown 2>/dev/null || true
+if [ -z "$HQ_BIN" ]; then
+  printf '%s\n' 'Work Mesh reconcile skipped: hq CLI not found on PATH.' >&2
+else
+  flag_reader="$ROOT/.claude/hooks/work-mesh-daemon-not-loaded-flag.cjs"
+  daemon_warning_enabled=false
+  if [[ -n "${HQ_FLAGS_API_URL:-}" \
+    && "${HQ_COMPANY_UID:-}" =~ ^cmp_[A-Za-z0-9]{3,128}$ ]] \
+    && command -v node >/dev/null 2>&1 && [[ -f "$flag_reader" ]]; then
+    daemon_warning_enabled="$(HQ_CLI_BIN="$HQ_BIN" node "$flag_reader")" || daemon_warning_enabled=false
+  fi
+  if [ "$daemon_warning_enabled" = "true" ]; then
+    # Status only reads the installed service and its live state. Keep this hook
+    # bounded, and fail quiet when the CLI or service manager cannot answer.
+    daemon_status_file="$(mktemp "${TMPDIR:-/tmp}/hq-work-mesh-daemon-status.XXXXXX" 2>/dev/null)" || daemon_status_file=""
+    if [ -n "$daemon_status_file" ]; then
+      HQ_NO_UPDATE_CHECK=1 "$HQ_BIN" mesh daemon status --json >"$daemon_status_file" 2>/dev/null &
+      daemon_status_pid=$!
+      ( sleep 2; kill "$daemon_status_pid" 2>/dev/null || true ) &
+      daemon_status_watchdog=$!
+      daemon_status_rc=0
+      wait "$daemon_status_pid" || daemon_status_rc=$?
+      kill "$daemon_status_watchdog" 2>/dev/null || true
+      wait "$daemon_status_watchdog" 2>/dev/null || true
+      if [ "$daemon_status_rc" -eq 0 ] && command -v jq >/dev/null 2>&1 && \
+        jq -e '(.ok == true) and (.running == false) and (.message | type == "string" and contains("installed ("))' \
+          "$daemon_status_file" >/dev/null 2>&1; then
+        printf '%s\n' 'Work Mesh daemon is installed but not loaded; start it with: hq mesh daemon install' >&2
+      fi
+      rm -f "$daemon_status_file" 2>/dev/null || true
+    fi
+  fi
+  if [ -f "$OBS_FILE" ]; then
+    nohup "$HQ_BIN" mesh context reconcile --observation-file "$OBS_FILE" --machine \
+      >/dev/null 2>&1 </dev/null &
+    disown 2>/dev/null || true
+  fi
 fi
 exit 0

package/assets/scaffold/core/scripts/worktree-gc.sh

@@ -249,7 +249,7 @@ for wt in "${CANDIDATES[@]:-}"; do
   created_epoch="$wt_mtime"
   stamp_file="$GC_META_DIR/$(path_key "$wt").json"
   if [[ -f "$stamp_file" ]]; then
-    stamped=$(jq -r '.createdAtEpoch // empty' "$stamp_file" 2>/dev/null || echo "")
+    stamped=$(jq -r '.createdAtEpoch // empty' "$stamp_file" 2>/dev/null | tr -d '\r' || echo "")
     [[ -n "$stamped" ]] && created_epoch="$stamped"
   fi
   age_days=$(( (NOW - created_epoch) / 86400 ))

package/dist/commands/core-ontology-native.js

@@ -799,15 +799,119 @@ export function worklistCommand(args, root) {
     if (validation.code !== 0)
         return err(2, `${validation.stderr}${validation.stdout}${validation.stderr}`);
     const ledger = path.join(directory, ".processed");
+    const skipLedger = path.join(directory, ".skipped");
+    const parserVersion = 2;
     if (doneItem) {
-        fs.appendFileSync(ledger, `${path.basename(doneItem)}\n`);
+        fs.appendFileSync(ledger, `${path.basename(doneItem)}\t${parserVersion}\n`);
         return ok();
     }
+    const hasFrontmatterField = (file, field) => {
+        if (!fs.existsSync(file))
+            return false;
+        let frontmatter = 0;
+        for (const rawLine of fs.readFileSync(file, "utf8").split("\n")) {
+            const line = rawLine.replace(/\r$/, "");
+            if (line === "---") {
+                frontmatter += 1;
+                if (frontmatter === 2)
+                    return false;
+                continue;
+            }
+            if (frontmatter === 1 && line.startsWith(`${field}:`))
+                return true;
+        }
+        return false;
+    };
+    const rewriteIfChanged = (file, original, output) => {
+        if (output === original)
+            return;
+        const temporary = `${file}.native-${process.pid}`;
+        fs.writeFileSync(temporary, output);
+        fs.renameSync(temporary, file);
+    };
+    // Match the shell's parser-version migration. Unstamped legacy rows are
+    // stamped unless they carry the old resolved_participants bug signature;
+    // older parser versions are dropped so those sources are re-evaluated.
+    let processed = "";
+    if (fs.existsSync(ledger)) {
+        const original = fs.readFileSync(ledger, "utf8");
+        const kept = [];
+        let changed = false;
+        const rows = original.split("\n");
+        if (rows.at(-1) === "")
+            rows.pop();
+        for (const rawLine of rows) {
+            const fields = rawLine.split("\t");
+            const basename = (fields[0] ?? "").replace(/\r$/, "");
+            const version = (fields[1] ?? "").replace(/\r$/, "");
+            if (!basename)
+                continue;
+            if (version) {
+                if (/^[+-]?\d+$/.test(version) && Number(version) < parserVersion) {
+                    changed = true;
+                    continue;
+                }
+                kept.push(`${basename}\t${version}`);
+                continue;
+            }
+            changed = true;
+            if (hasFrontmatterField(path.join(directory, basename), "resolved_participants"))
+                continue;
+            kept.push(`${basename}\t${parserVersion}`);
+        }
+        processed = kept.join("\n");
+        if (kept.length > 0)
+            processed += "\n";
+        if (changed)
+            rewriteIfChanged(ledger, original, processed);
+    }
+    let skipped = "";
+    if (fs.existsSync(skipLedger)) {
+        const original = fs.readFileSync(skipLedger, "utf8");
+        const kept = [];
+        let changed = false;
+        const rows = original.split("\n");
+        if (rows.at(-1) === "")
+            rows.pop();
+        for (const rawLine of rows) {
+            const fields = rawLine.split("\t");
+            const basename = fields[0] ?? "";
+            const reason = fields[1] ?? "";
+            const version = fields[2] ?? "";
+            if (!basename)
+                continue;
+            if (!version || (/^[+-]?\d+$/.test(version) && Number(version) < parserVersion)) {
+                changed = true;
+                continue;
+            }
+            kept.push(`${basename}\t${reason}\t${version}`);
+        }
+        skipped = kept.join("\n");
+        if (kept.length > 0)
+            skipped += "\n";
+        if (changed)
+            rewriteIfChanged(skipLedger, original, skipped);
+    }
+    const isProcessed = (basename) => processed.split("\n").some((line) => {
+        if (!line)
+            return false;
+        const [name, version] = line.split("\t");
+        if (name !== basename)
+            return false;
+        if (version === undefined || version === "")
+            return true;
+        return Number(version) >= parserVersion;
+    });
+    const isSkippedAtCurrentVersion = (basename) => skipped.split("\n").some((line) => {
+        if (!line)
+            return false;
+        const fields = line.split("\t");
+        return fields[0] === basename && fields[2] === String(parserVersion);
+    });
     const run = awkField(sourceFile, "run", false);
     const rule = awkField(sourceFile, "audience_rule", false);
     if (run === "cloud" && !force)
         return err(4, "assigned to cloud agent (run: cloud); pass --force to run locally\n");
-    const processed = fs.existsSync(ledger) ? fs.readFileSync(ledger, "utf8").split("\n") : [];
     const entries = fs.existsSync(directory)
         ? fs.readdirSync(directory).filter((name) => name.endsWith(".md") && !name.startsWith("."))
             .filter((name) => { try {
@@ -821,12 +925,12 @@ export function worklistCommand(args, root) {
     const output = [];
     let count = 0;
     for (const name of entries) {
-        if (processed.includes(name))
+        if (isProcessed(name) || isSkippedAtCurrentVersion(name))
             continue;
         if (/^[+-]?\d+$/.test(limit) && count >= Number(limit))
             break;
         if (!/^[+-]?\d+$/.test(limit)) {
-            process.stderr.write(`${resolveBundledAsset(`${ASSET}ontology-source-worklist.sh`)}: line 61: [: ${limit}: integer expression expected\n`);
+            process.stderr.write(`${resolveBundledAsset(`${ASSET}ontology-source-worklist.sh`)}: line 186: [: ${limit}: integer expression expected\n`);
         }
         count += 1;
         const file = path.join(directory, name);
@@ -860,6 +964,8 @@ export function worklistCommand(args, root) {
             }
         }
         if (!audience) {
+            fs.appendFileSync(skipLedger, `${name}\tno-audience\t${parserVersion}\n`);
+            skipped += `${name}\tno-audience\t${parserVersion}\n`;
             output.push(`${JSON.stringify({ file: relative, skip: "no-audience" })}\n`);
             continue;
         }

package/dist/commands/core-register-project-native.js

@@ -51,11 +51,44 @@ function companyUid(company, deps) {
         return direct;
     const file = path.join(deps.root, "companies", company, ".company-uid");
     try {
-        return deps.fs.readFileSync(file, "utf8").replace(/[\s\u0085\u00a0]+/g, "");
+        const fromFile = deps.fs.readFileSync(file, "utf8").replace(/[\s\u0085\u00a0]+/g, "");
+        if (fromFile)
+            return fromFile;
+    }
+    catch { /* shell falls through to companies/manifest.yaml */ }
+    const manifest = path.join(deps.root, "companies", "manifest.yaml");
+    let contents;
+    try {
+        contents = deps.fs.readFileSync(manifest, "utf8");
     }
     catch {
         return null;
     }
+    let inCompanies = false;
+    let inCompany = false;
+    for (const line of contents.split(/\r?\n/u)) {
+        if (/^companies:[\t ]*$/u.test(line)) {
+            inCompanies = true;
+            continue;
+        }
+        if (inCompanies && /^[^\t ]/u.test(line)) {
+            inCompanies = false;
+            inCompany = false;
+        }
+        if (inCompanies && /^ {2}[^ #][^:]*:/u.test(line)) {
+            const slug = line.trim().split(/[\t ]+/u, 1)[0]?.replace(/:$/u, "");
+            inCompany = slug === company;
+            continue;
+        }
+        if (inCompany && /^ {2}[^\t ]/u.test(line))
+            break;
+        if (inCompany) {
+            const fields = line.trim().split(/[\t ]+/u);
+            if (fields[0] === "cloud_uid:" && fields[1])
+                return fields[1].replace(/["']/gu, "").replace(/[\t ]+$/u, "");
+        }
+    }
+    return null;
 }
 function boardPath(company, deps) { return path.join(deps.root, "companies", company, "board.json"); }
 function runHelpProbe(deps) {
@@ -217,7 +250,7 @@ function audit(company, deps) {
                 return false;
             const uid = companyUid(company, deps);
             if (uid === null) {
-                stderr += `no company uid for ${company} (set HQ_COMPANY_UID or companies/${company}/.company-uid)\n`;
+                stderr += `no company uid for ${company} (set HQ_COMPANY_UID, companies/${company}/.company-uid, or manifest cloud_uid)\n`;
                 return true;
             }
             return !deps.fs.existsSync(path.join(deps.env.HOME || os.homedir(), ".hq/work-mesh/cache/projects", uid, `${project}.json`));
@@ -243,7 +276,7 @@ function storyNotDone(prd, deps, diagnostics) {
             diagnostics.push(jq.stderr);
         else if (jq.error?.code === "ENOENT") {
             const script = resolveBundledAsset(REGISTER_PROJECT_ASSET);
-            diagnostics.push(`${script}: line 34: jq: command not found\n`);
+            diagnostics.push(`${script}: line 65: jq: command not found\n`);
         }
         return false;
     }

package/dist/commands/core-session-journal-native.js

@@ -210,7 +210,7 @@ function runToolCounter(root, action, sessionArg, env, now, writers) {
                 fs.writeFileSync(counter, `${readCounter(counter) + 1}\n`);
             }
             catch (error) {
-                reportDirectoryWriteFailure(error, 346);
+                reportDirectoryWriteFailure(error, 395);
             }
         });
     }
@@ -223,7 +223,7 @@ function runToolCounter(root, action, sessionArg, env, now, writers) {
                 fs.writeFileSync(counter, "0\n");
             }
             catch (error) {
-                reportDirectoryWriteFailure(error, 354);
+                reportDirectoryWriteFailure(error, 403);
             }
         });
     }

package/dist/commands/pack-install.d.ts

@@ -46,6 +46,8 @@ export interface ResolveLatestOptions {
 export type Transport = 'npm' | 'git' | 'local' | 'marketplace';
 /** Prefix that routes a source through the HQ marketplace transport (US-006). */
 export declare const MARKETPLACE_PREFIX = "marketplace:";
+/** Pinned source allowed to claim the reserved hq-anywhere pack name via its CLI alias. */
+export declare const PINNED_HQ_ANYWHERE_SOURCE = "github:indigoai-us/hq-packages#packages/hq-pack-hq-anywhere";
 export declare function classify(source: string): Transport;
 /**
  * Parse a git source's '#<...>' fragment into { url, subpath, ref }.
@@ -411,6 +413,8 @@ export declare function runScanPackages(hqRoot: string, opts?: {
 }): void;
 export interface InstallPackOptions {
     allowHooks?: boolean;
+    /** Internal grant used only by the @indigoai-us/hq-anywhere CLI alias. */
+    allowPinnedHqAnywhereName?: true;
     /** Company context for online authorization of install-time MCP secret refs. */
     company?: string;
     /**

package/dist/commands/pack-install.js

@@ -112,6 +112,8 @@ async function latestWithDiskCache(cacheKey, opts, refresh) {
 }
 /** Prefix that routes a source through the HQ marketplace transport (US-006). */
 export const MARKETPLACE_PREFIX = 'marketplace:';
+/** Pinned source allowed to claim the reserved hq-anywhere pack name via its CLI alias. */
+export const PINNED_HQ_ANYWHERE_SOURCE = 'github:indigoai-us/hq-packages#packages/hq-pack-hq-anywhere';
 export function classify(source) {
     // US-006: marketplace:<slug>[@version] is recognized BEFORE the legacy
     // registry fallback and ahead of every other transport. The slug is resolved
@@ -1727,10 +1729,16 @@ async function installPackWithoutLease(source, opts) {
                 });
                 break;
         }
-        // Only an explicit local directory source may use the reserved bundled
-        // pack name. Publisher is self-declared package metadata and is not proof
-        // of registry identity, so remote transports never receive this exception.
-        const pkg = validateManifest(fetched.payloadDir, hqVersion, { allowReservedName: transport === 'local' });
+        // Local directories retain their existing reserved-name behavior. For
+        // remote sources, publisher is self-declared and cannot prove registry
+        // identity, so accept the reserved name only when the top-level CLI alias
+        // supplied its internal grant for the exact pinned GitHub source.
+        const allowPinnedAliasName = transport === 'git' &&
+            source === PINNED_HQ_ANYWHERE_SOURCE &&
+            opts.allowPinnedHqAnywhereName === true;
+        const pkg = validateManifest(fetched.payloadDir, hqVersion, {
+            allowReservedName: transport === 'local' || allowPinnedAliasName,
+        });
         // M0 — pack-to-pack dependency pre-flight. Runs BEFORE any prompts or writes
         // so a missing/unsatisfied `requires.packs` aborts with no partial state, and
         // before we bother the operator with hook/MCP trust prompts for a pack that

package/dist/commands/packs.js

@@ -26,7 +26,7 @@ import chalk from 'chalk';
 import semverSatisfies from 'semver/functions/satisfies.js';
 import { findHqRoot } from '../utils/manifest.js';
 import { resolveHqRoot as resolveDetectedHqRoot } from './doctor.js';
-import { classify, resolveLatest, resolveLatestMarketplace, runScanPackages, installPack, } from './pack-install.js';
+import { classify, PINNED_HQ_ANYWHERE_SOURCE, resolveLatest, resolveLatestMarketplace, runScanPackages, installPack, } from './pack-install.js';
 import { contributionLinks, linkStatus, listInstalledPacks, findDependentPacks, readPackManifest, unwirePack, unwirePackMcp, readHqVersion, readRecommendedPackages, packagesDir, } from '../utils/pack-contributions.js';
 import { syncCodexPackHooks, syncCodexPackSkills } from '../lib/install/codex-pack-contributions.js';
 function resolveRoot(opts) {
@@ -267,6 +267,9 @@ async function runUpdate(name, opts) {
                     allowMcp: opts.yes || opts.allowMcp,
                     followBranch: opts.branch,
                     quiet: wantsJson(opts),
+                    ...(pname === 'hq-anywhere' && source === PINNED_HQ_ANYWHERE_SOURCE
+                        ? { allowPinnedHqAnywhereName: true }
+                        : {}),
                 });
             }
             finally {