@indigoai-us/hq-cli 5.94.0 → 5.94.1

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 ## [Unreleased]
 
+## [5.94.1]
+
+### Fixed
+
+- The CLI now actually uses its bundled qmd. Package-local resolution had never
+  worked, so every install silently fell through to whatever qmd was on `PATH`,
+  and a host without a global qmd reported `skipped` — defeating the reason
+  `@tobilu/qmd` is a dependency and undoing in practice what 5.93.x set out to
+  fix for Node 26 global installs. Two independent causes, both silent: the
+  resolver looked for `<pkg>/qmd` while the package declares `bin/qmd`, and the
+  package-manifest lookup throws `ERR_PACKAGE_PATH_NOT_EXPORTED` on qmd 2.x,
+  which also blanked the version in `hq index status`. Both now follow the
+  package-manager contract: the binary via `node_modules/.bin/qmd`, the version
+  read from `node_modules/@tobilu/qmd/package.json`. (#333)
+
+### Added
+
+- A shell-vs-native differential for `hq index background`, run against a frozen
+  copy of the pre-migration `qmd-reindex-bg.sh`: agent-box short-circuit before
+  any qmd lookup or lock, empty-`HOME` silence, `cleanup → update → embed`
+  ordering with completion stamp, no stamp after a failed update, and no
+  competing writer behind a held lock. It is what surfaced the resolution bug
+  above. (#333)
+
 ## [5.94.0]
 
 ### Removed

package/dist/lib/search-index/index.d.ts

@@ -28,7 +28,13 @@ export type ResolveQmdBinOptions = {
     packageBin?: () => string | undefined;
     pathBin?: () => string | undefined;
 };
-/** Return the pinned package version when qmd is supplied by this CLI. */
+/**
+ * Return the pinned package version when qmd is supplied by this CLI.
+ *
+ * Read from disk rather than `require('@tobilu/qmd/package.json')`: qmd 2.x does
+ * not export package.json, so the require form throws and the version silently
+ * disappeared from `hq index status`. Same root cause as packageLocalBin.
+ */
 export declare function resolveQmdVersion(): string | undefined;
 /** Resolve qmd without relying on a globally installed copy. */
 export declare function resolveQmdBin(options?: ResolveQmdBinOptions): string;

package/dist/lib/search-index/index.js

@@ -2,6 +2,7 @@ import { spawnSync } from 'node:child_process';
 import * as fs from 'node:fs';
 import { createRequire } from 'node:module';
 import * as path from 'node:path';
+import { fileURLToPath } from 'node:url';
 const require = createRequire(import.meta.url);
 export class QmdBinaryMissingError extends Error {
     name = 'QmdBinaryMissingError';
@@ -32,24 +33,68 @@ function isExecutable(candidate) {
         return false;
     }
 }
+/**
+ * Locate the bundled qmd through the dependency-bin link the package manager
+ * installs, walking up from this module.
+ *
+ * Two earlier approaches were wrong and both failed silently, so every host fell
+ * through to PATH and a machine without a global qmd reported "skipped" — which
+ * defeats the point of depending on qmd at all:
+ *
+ *   - `<pkg>/qmd` guessed a filename; the package declares `bin/qmd`.
+ *   - `require.resolve('@tobilu/qmd/package.json')` throws
+ *     ERR_PACKAGE_PATH_NOT_EXPORTED on qmd 2.x, whose `exports` map does not
+ *     expose package.json.
+ *
+ * `node_modules/.bin/qmd` is the contract every package manager honours and is
+ * independent of the dependency's own exports map.
+ */
 function packageLocalBin() {
-    try {
-        const packageJson = require.resolve('@tobilu/qmd/package.json');
-        return path.join(path.dirname(packageJson), 'qmd');
-    }
-    catch {
-        return undefined;
+    const names = process.platform === 'win32' ? ['qmd.cmd', 'qmd.exe', 'qmd'] : ['qmd'];
+    let directory = path.dirname(fileURLToPath(import.meta.url));
+    for (let depth = 0; depth < 10; depth++) {
+        for (const name of names) {
+            const candidate = path.join(directory, 'node_modules', '.bin', name);
+            if (fs.existsSync(candidate))
+                return candidate;
+        }
+        const parent = path.dirname(directory);
+        if (parent === directory)
+            break;
+        directory = parent;
     }
+    return undefined;
 }
-/** Return the pinned package version when qmd is supplied by this CLI. */
+/**
+ * Return the pinned package version when qmd is supplied by this CLI.
+ *
+ * Read from disk rather than `require('@tobilu/qmd/package.json')`: qmd 2.x does
+ * not export package.json, so the require form throws and the version silently
+ * disappeared from `hq index status`. Same root cause as packageLocalBin.
+ */
 export function resolveQmdVersion() {
-    try {
-        const packageJson = require('@tobilu/qmd/package.json');
-        return typeof packageJson.version === 'string' ? packageJson.version : undefined;
-    }
-    catch {
-        return undefined;
+    // Walk for the package directory itself. Neither require() nor the .bin entry
+    // works: qmd 2.x does not export package.json, and .bin/qmd is a generated
+    // shim (not a symlink) under pnpm's hoisted linker, so resolving it lands back
+    // in this package rather than qmd's.
+    let directory = path.dirname(fileURLToPath(import.meta.url));
+    for (let depth = 0; depth < 10; depth++) {
+        const manifest = path.join(directory, 'node_modules', '@tobilu', 'qmd', 'package.json');
+        if (fs.existsSync(manifest)) {
+            try {
+                const parsed = JSON.parse(fs.readFileSync(manifest, 'utf8'));
+                if (typeof parsed.version === 'string')
+                    return parsed.version;
+            }
+            catch { /* unreadable manifest: report no version rather than throwing */ }
+            return undefined;
+        }
+        const parent = path.dirname(directory);
+        if (parent === directory)
+            break;
+        directory = parent;
     }
+    return undefined;
 }
 function pathBin() {
     const paths = (process.env.PATH ?? '').split(path.delimiter).filter(Boolean);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.94.0",
+  "version": "5.94.1",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {