@indigoai-us/hq-cli 5.110.0 → 5.111.0

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## [Unreleased]
 
+## [5.111.0] — 2026-09-14
+
+### Added
+
+- `hq skill delete <target>`: delete a company skill and all of its files for
+  everyone. Accepts a `skl_…` id, a SKILL.md path, or a skill slug; names the
+  skill and asks for confirmation (`--yes` skips it, and it refuses to run
+  unattended without `--yes`). Synced copies are removed on the next sync.
+  Requires access-admin rights on the skill.
+
 ## [5.110.0] — 2026-09-14
 
 ### Added

package/dist/commands/skill.d.ts

@@ -5,12 +5,13 @@
  * immutable UID, surfaces its generated runtime wrapper, and syncs it.
  * `hq skill propose <uid|path> --message "…"` posts a whole-skill comment to
  * the same improvement thread shown in HQ Console. It never uploads a modified
- * SKILL.md and cannot overwrite live content. Structured suggest/list/review
- * commands intentionally are not registered.
+ * SKILL.md and cannot overwrite live content. `hq skill delete <target>` removes
+ * a skill and its files for the whole company (confirmation unless --yes).
+ * Structured suggest/list/review commands intentionally are not registered.
  */
 import { Command } from "commander";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
-import { vaultApiFetch } from "../utils/vault-api.js";
+import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
 import { surfaceCompanySkill } from "../lib/company-skill-wrapper.js";
 export declare const SKILL_UID_PATTERN: RegExp;
 export declare const SKILL_SLUG_PATTERN: RegExp;
@@ -98,9 +99,17 @@ export declare function mapSkillError(status: number, body: Record<string, unkno
 export declare function skillApiError(status: number, body: Record<string, unknown>, opts?: {
     machineIdentity?: boolean;
 }): Error;
+export type SkillConfirmFn = (message: string) => Promise<boolean>;
+/**
+ * Resolve a delete target: a `skl_…` uid, a SKILL.md path or its directory, or
+ * a bare skill slug under `companies/<company>/skills/<slug>/`.
+ */
+export declare function resolveDeleteTarget(target: string, cwd: string, hqRoot: string, companySlug: string): string;
 interface SkillCommandDeps {
     ensureToken?: typeof ensureCognitoToken;
     apiFetch?: typeof vaultApiFetch;
+    confirm?: SkillConfirmFn;
+    resolveCompanyUid?: typeof getCompanyUid;
     cwd?: () => string;
     hqRoot?: string;
     syncFile?: (input: SkillSyncInput) => Promise<SkillSyncResult>;

package/dist/commands/skill.js

@@ -5,8 +5,9 @@
  * immutable UID, surfaces its generated runtime wrapper, and syncs it.
  * `hq skill propose <uid|path> --message "…"` posts a whole-skill comment to
  * the same improvement thread shown in HQ Console. It never uploads a modified
- * SKILL.md and cannot overwrite live content. Structured suggest/list/review
- * commands intentionally are not registered.
+ * SKILL.md and cannot overwrite live content. `hq skill delete <target>` removes
+ * a skill and its files for the whole company (confirmation unless --yes).
+ * Structured suggest/list/review commands intentionally are not registered.
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
@@ -14,7 +15,8 @@ import chalk from "chalk";
 import yaml from "js-yaml";
 import { share } from "@indigoai-us/hq-cloud";
 import { ensureCognitoToken, DEFAULT_HQ_ROOT, buildVaultConfig, isMachineIdentity, } from "../utils/cognito-session.js";
-import { vaultApiFetch } from "../utils/vault-api.js";
+import * as readline from "node:readline";
+import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
 import { surfaceCompanySkill } from "../lib/company-skill-wrapper.js";
 import { AuthError } from "../utils/auth-error.js";
 import { redactErrorText } from "../utils/redact-error-text.js";
@@ -322,6 +324,31 @@ export function skillApiError(status, body, opts = {}) {
     }
     return new Error(message);
 }
+function realConfirm(message) {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    return new Promise((resolve) => {
+        rl.question(`${message} [y/N] `, (answer) => {
+            rl.close();
+            resolve(/^y(es)?$/i.test(answer.trim()));
+        });
+    });
+}
+/**
+ * Resolve a delete target: a `skl_…` uid, a SKILL.md path or its directory, or
+ * a bare skill slug under `companies/<company>/skills/<slug>/`.
+ */
+export function resolveDeleteTarget(target, cwd, hqRoot, companySlug) {
+    if (SKILL_UID_PATTERN.test(target))
+        return target;
+    const asPath = path.resolve(cwd, target);
+    if (!fs.existsSync(asPath) && SKILL_SLUG_PATTERN.test(target)) {
+        return resolveSkillUid(canonicalCompanySkillPath(hqRoot, companySlug, target), cwd);
+    }
+    return resolveSkillUid(target, cwd);
+}
 export function registerSkillCommand(program, deps = {}) {
     const ensureToken = deps.ensureToken ?? ensureCognitoToken;
     const apiFetch = deps.apiFetch ?? vaultApiFetch;
@@ -329,6 +356,8 @@ export function registerSkillCommand(program, deps = {}) {
     const hqRoot = deps.hqRoot ?? DEFAULT_HQ_ROOT;
     const syncFile = deps.syncFile ?? defaultSyncFile;
     const surfaceSkillFn = deps.surfaceSkillFn ?? surfaceCompanySkill;
+    const confirm = deps.confirm ?? realConfirm;
+    const resolveCompanyUid = deps.resolveCompanyUid ?? getCompanyUid;
     const skill = program
         .command("skill")
         .description("Create company skills and discuss improvements")
@@ -516,6 +545,53 @@ export function registerSkillCommand(program, deps = {}) {
         console.log(`  Message:  ${posted.body}`);
         console.log(chalk.dim("  Review it in HQ Console → Skills → Improvements"));
     });
+    skill
+        .command("delete <target>")
+        .description("Delete a company skill and all of its files for everyone (skl_… uid, SKILL.md path, or skill slug). Prompts for confirmation unless --yes.")
+        .option("-y, --yes", "Skip the confirmation prompt (for scripts)")
+        .action(async (target, opts) => {
+        const parentOpts = skill.opts();
+        const resolvedRoot = path.resolve(parentOpts.hqRoot ?? hqRoot);
+        const companySlug = resolveCompanySlug(parentOpts.company, resolvedRoot);
+        const skillUid = resolveDeleteTarget(target, cwd(), resolvedRoot, companySlug);
+        const token = await ensureToken();
+        const companyUid = await resolveCompanyUid(token, companySlug);
+        const skillPath = `/v1/skills/${encodeURIComponent(companyUid)}/${encodeURIComponent(skillUid)}`;
+        const detail = await apiFetch({ token, path: skillPath, method: "GET" });
+        if (!detail.ok) {
+            const body = (await detail.json().catch(() => ({})));
+            throw skillApiError(detail.status, body, {
+                machineIdentity: isMachineIdentity(),
+            });
+        }
+        const { skill: record } = (await detail.json());
+        const name = typeof record?.name === "string" ? record.name : skillUid;
+        if (opts.yes !== true) {
+            if (!process.stdin.isTTY) {
+                throw localSkillError(`Refusing to delete '${name}' without confirmation. Re-run with --yes.`);
+            }
+            const ok = await confirm(`Delete skill '${name}' (${skillUid}) and all of its files for everyone in ${companySlug}? This can't be undone from the CLI.`);
+            if (!ok) {
+                console.log("Cancelled — nothing was deleted.");
+                return;
+            }
+        }
+        const response = await apiFetch({ token, path: skillPath, method: "DELETE" });
+        if (!response.ok) {
+            const body = (await response.json().catch(() => ({})));
+            throw skillApiError(response.status, body, {
+                machineIdentity: isMachineIdentity(),
+            });
+        }
+        const result = (await response.json());
+        console.log(chalk.green(`Skill deleted: ${name}`));
+        console.log(`  Skill:    ${skillUid}`);
+        console.log(`  Files:    ${typeof result.filesDeleted === "number" ? result.filesDeleted : 0} removed`);
+        if (result.tombstoneIncomplete === true) {
+            console.warn(chalk.yellow("⚠ Some synced computers may not be told to remove their copy. Delete it locally if it reappears."));
+        }
+        console.log(chalk.dim("  Local copies are removed on the next sync (hq sync now)."));
+    });
     return skill;
 }
 //# sourceMappingURL=skill.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.110.0",
+  "version": "5.111.0",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {