@indigoai-us/hq-cli 5.345.29 → 5.345.30
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,11 @@
|
|
|
2
2
|
|
|
3
3
|
## [Unreleased]
|
|
4
4
|
|
|
5
|
+
## [5.345.30] — 2026-10-06
|
|
6
|
+
- Sanitize malformed journal scope identifiers before composing per-scope check IDs.
|
|
7
|
+
|
|
8
|
+
- Sync the bundled outpost reconciler with staging's Bash 3.2-safe PATH handling.
|
|
9
|
+
|
|
5
10
|
## [5.345.29] — 2026-10-06
|
|
6
11
|
- Route `hq core checkpoint` through an isolated fast entry and defer identity and ontology imports to the paths that use them.
|
|
7
12
|
|
|
@@ -73,7 +73,7 @@ if [ "$DRY_RUN" -eq 1 ]; then
|
|
|
73
73
|
done
|
|
74
74
|
SECRET_NAMES="(none — no .env.schema found)"
|
|
75
75
|
if [ -n "$SCHEMA" ]; then
|
|
76
|
-
SECRET_NAMES="$(grep -E '^[A-Za-z_][A-Za-z0-9_]*=' "$SCHEMA" | cut -d= -f1 | sort -u | tr '\n' ' ')"
|
|
76
|
+
SECRET_NAMES="$(grep -E '^[A-Za-z_][A-Za-z0-9_]*(/[A-Za-z_][A-Za-z0-9_]*)*=' "$SCHEMA" | cut -d= -f1 | sort -u | tr '\n' ' ')"
|
|
77
77
|
[ -n "$SECRET_NAMES" ] || SECRET_NAMES="(none declared)"
|
|
78
78
|
fi
|
|
79
79
|
|
|
@@ -170,6 +170,14 @@ const NON_COMPANY_JOURNAL_SLUGS = new Set([
|
|
|
170
170
|
PERSONAL_SCOPE_SLUG,
|
|
171
171
|
PERSONAL_VAULT_SCOPE_SLUG,
|
|
172
172
|
]);
|
|
173
|
+
/** Keep malformed scopes distinct without letting them imitate valid slugs. */
|
|
174
|
+
function journalSlugForCheckId(slug) {
|
|
175
|
+
if (NON_COMPANY_JOURNAL_SLUGS.has(slug) || isSafeCompanySlug(slug)) {
|
|
176
|
+
return slug;
|
|
177
|
+
}
|
|
178
|
+
const encoded = Array.from(slug, (character) => character.codePointAt(0).toString(16)).join("-");
|
|
179
|
+
return `__hq_invalid_journal_scope__${encoded}`;
|
|
180
|
+
}
|
|
173
181
|
/** True when this journal slug names a company rather than the personal tree. */
|
|
174
182
|
export function isCompanyJournalSlug(slug) {
|
|
175
183
|
return !NON_COMPANY_JOURNAL_SLUGS.has(slug);
|
|
@@ -360,7 +368,7 @@ function journalResults(deps, journals) {
|
|
|
360
368
|
const nowMs = deps.now().getTime();
|
|
361
369
|
return journals.map((entry) => {
|
|
362
370
|
const lastSync = entry.journal?.lastSync;
|
|
363
|
-
const checkId = `sync.journal.${entry.slug}`;
|
|
371
|
+
const checkId = `sync.journal.${journalSlugForCheckId(entry.slug)}`;
|
|
364
372
|
// A company journal without a local tree is leftover membership state,
|
|
365
373
|
// not a live sync target. WARN would make `hq doctor --fix` look like it
|
|
366
374
|
// failed to repair something it was never going to touch (US-015 health
|