@indigoai-us/hq-cli 5.12.5 → 5.13.1

package/CHANGELOG.md

@@ -1,5 +1,70 @@
 # Changelog
 
+## [Unreleased]
+
+## [5.13.1] — 2026-05-14
+
+### Fixed
+
+- **Republish hq-cli alongside `@indigoai-us/hq-cloud@5.16.0` to ship the
+  `computePersonalVaultPaths` helper.** `5.13.0` imported the new helper
+  from hq-cloud, but the publish workflow's idempotent skip-if-already-on-npm
+  gate suppressed the hq-cloud republish (its `package.json` still said
+  5.15.0). The runtime resolution of `^5.1.0` then pulled the older
+  hq-cloud, and every `hq` invocation crashed with `SyntaxError: ... does
+  not provide an export named 'computePersonalVaultPaths'`. 5.13.1 carries
+  no source delta; it bumps the version so the workflow republishes and
+  forces hq-cloud@5.16.0 to ship alongside.
+
+## [5.13.0] — 2026-05-14
+
+### Added
+
+- **`hq sync now` — bidirectional sync command.** Mirrors the AppBar HQ Sync
+  "Sync Now" button: pushes local changes to the target vault, then pulls
+  remote updates. Push runs first so the subsequent pull doesn't redownload
+  files that were about to be broadcast (matches `hq-sync-runner` ordering).
+  Supports `--company <slug>`, `--personal`, `--all`, `--message <msg>`,
+  `--on-conflict <strategy>`, and `--hq-root <path>`. The `--all` form
+  composes `pushAll` then `pullAll`, fanning out across every membership and
+  the canonical personal vault in a single invocation.
+
+- **`--personal` flag on `hq sync pull`, `hq sync push`, and `hq sync now`.**
+  Targets the caller's canonical person-entity vault without needing the
+  person UID — resolves it from the cached Cognito session, then routes
+  through `personalMode` (no `companies/<slug>/` prefix) with `journalSlug:
+  "personal"` for idempotency-state parity with the Rust personal first-push.
+  For `push --personal` with no explicit `[paths]`, defaults to the same
+  top-level scope as `--all`'s personal slot (every top-level entry under
+  `<hq-root>` minus `.git`, `companies`, `repos`, `workspace`). Mutually
+  exclusive with `--all` and `--company`.
+
+- **`--all` flag on `hq sync push`.** Symmetric with `pull --all`: pushes
+  every company you are a member of plus the canonical personal vault in
+  a single invocation. Company targets push `<hq-root>/companies/<slug>/`;
+  personal pushes the canonical personal-vault scope. Each leg uses the
+  menubar runner's bulk defaults (`skipUnchanged: true`,
+  `propagateDeletes: true`) so re-runs are cheap and on-disk deletes
+  propagate to the vault. Cannot be combined with explicit `[paths]` or
+  `--creds-from-stdin` — the fanout needs to vend per-target credentials.
+
+### Changed
+
+- **Selector flags on `hq sync {pull,push,now}` are mutually exclusive.**
+  `--all`, `--personal`, and `--company` are now validated as a single
+  selector: at most one may be set per invocation; zero means "use the
+  active company from `.hq/config.json`". Conflicting combinations are
+  rejected with a clear error before any network calls.
+
+### Fixed
+
+- **Swallow `EPIPE` on stdout/stderr to stop Sentry fatals.** When a
+  downstream consumer (`| head`, closed pager, broken shell pipe) shut the
+  read end of the CLI's stdout or stderr, Node raised `EPIPE` that Sentry
+  then captured as a fatal. Both streams now ignore `EPIPE` quietly so the
+  CLI exits cleanly when piped into truncating consumers, and the Sentry
+  dashboard stops filling up with non-actionable pipe errors.
+
 ## [5.12.4] — 2026-05-12
 
 ### Changed

package/dist/commands/cloud.d.ts

@@ -58,6 +58,50 @@ export interface PullAllRow {
     result?: SyncCallResult;
     error?: string;
 }
+export interface ShareCallOptions {
+    company: string;
+    hqRoot: string;
+    paths: string[];
+    onConflict?: ConflictStrategy;
+    personalMode?: boolean;
+    journalSlug?: string;
+    message?: string;
+    skipUnchanged?: boolean;
+    propagateDeletes?: boolean;
+}
+export interface ShareCallResult {
+    filesUploaded: number;
+    bytesUploaded: number;
+    filesSkipped: number;
+    filesDeleted: number;
+    conflictPaths: string[];
+    aborted: boolean;
+}
+export interface PushAllDeps {
+    vaultClient: PullAllVaultClient;
+    share: (options: ShareCallOptions) => Promise<ShareCallResult>;
+}
+export interface PushAllOptions {
+    hqRoot: string;
+    onConflict?: ConflictStrategy;
+    message?: string;
+}
+export interface PushAllRow {
+    slug: string;
+    result?: ShareCallResult;
+    error?: string;
+}
+export interface PushAllResult {
+    attempted: number;
+    filesUploaded: number;
+    bytesUploaded: number;
+    filesDeleted: number;
+    errors: Array<{
+        company: string;
+        message: string;
+    }>;
+    perCompany: PushAllRow[];
+}
 export interface PullAllResult {
     attempted: number;
     filesDownloaded: number;
@@ -70,5 +114,29 @@ export interface PullAllResult {
     perCompany: PullAllRow[];
 }
 export declare function pullAll(options: PullAllOptions, deps: PullAllDeps): Promise<PullAllResult>;
+/**
+ * Drives `hq sync push --all`: same membership + canonical-person fanout as
+ * pullAll, but each leg calls share() with the runner's bulk defaults
+ * (skipUnchanged: true, propagateDeletes: true). Pure function with injected
+ * deps so tests can drive it without network or filesystem.
+ */
+export declare function pushAll(options: PushAllOptions, deps: PushAllDeps): Promise<PushAllResult>;
+/**
+ * Resolve the canonical person entity UID for the logged-in user. Used by
+ * `hq sync {push,pull,now} --personal` to target the personal vault without
+ * the caller needing to know the UID. Throws a clean error if the user has
+ * no person entity (typically means they haven't run `hq onboard`).
+ */
+export declare function resolveCanonicalPersonUid(vaultClient: PullAllVaultClient): Promise<string>;
+/**
+ * Refuse ambiguous selector combinations. `--all`, `--personal`, and
+ * `--company` are mutually exclusive — at most one may be set per
+ * invocation; zero means "use the active company from .hq/config.json".
+ */
+export declare function assertSingleSelector(opts: {
+    all?: boolean;
+    personal?: boolean;
+    company?: string;
+}, command: string): void;
 export declare function registerCloudCommands(program: Command): void;
 //# sourceMappingURL=cloud.d.ts.map