@indigoai-us/hq-cli 5.289.0 → 5.291.0

package/dist/command-catalog.generated.js

@@ -6734,6 +6734,10 @@ export const COMMAND_CATALOG = [
                                 "flags": "--only <file>",
                                 "description": "handle only the copy -> original pairs listed in this JSON file"
                             },
+                            {
+                                "flags": "--rewrite-refs",
+                                "description": "also re-point signal refs, invoice, source and knowledge links to the survivor and carry external ids and web domains (checkpoint.ontology.merge-rewrite-refs)"
+                            },
                             {
                                 "flags": "--json",
                                 "description": "print JSON"
@@ -6976,6 +6980,65 @@ export const COMMAND_CATALOG = [
                     }
                 ]
             },
+            {
+                "name": "handoff",
+                "description": "Handoff session helpers",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] [command]",
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "finalize",
+                        "description": "Write and commit the current session handoff",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "post",
+                        "description": "Run best-effort post-handoff maintenance",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "open-steps",
+                        "description": "List and update open handoff steps",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    }
+                ]
+            },
             {
                 "name": "knowledge-prefs",
                 "description": "Resolve a company knowledge-store preference",
@@ -7051,6 +7114,49 @@ export const COMMAND_CATALOG = [
                     }
                 ]
             },
+            {
+                "name": "jobs",
+                "description": "Scheduled jobs helpers",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] [command]",
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "schedule-parse",
+                        "description": "Resolve natural-language or raw cron schedules",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "validate",
+                        "description": "Validate scheduled-job YAML files",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    }
+                ]
+            },
             {
                 "name": "worktree-gc",
                 "description": "Safely collect old, preserved HQ worktrees",
@@ -11367,6 +11473,36 @@ export const COMMAND_CATALOG = [
                 ],
                 "subcommands": []
             },
+            {
+                "name": "autopilot",
+                "description": "Check registered team leads and wake them for ready work",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] [command]",
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "run",
+                        "description": "Run one lead autopilot check pass",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options]",
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--dry-run",
+                                "description": "Report proposed wakes without writing them"
+                            },
+                            {
+                                "flags": "--json",
+                                "description": "Emit JSON on stdout (default)"
+                            }
+                        ],
+                        "subcommands": []
+                    }
+                ]
+            },
             {
                 "name": "reconcile",
                 "description": "Run one machine-owned reconcile pass and exit",

package/dist/commands/cloud.d.ts

@@ -15,6 +15,7 @@
 import { Command } from "commander";
 import { type ConflictStrategy, type EntityContext, type MembershipSyncConfig, type SyncMode, type PullScope, type ExplicitGrant, type ShareOptions, type VaultServiceConfig } from "@indigoai-us/hq-cloud";
 import { type BannerLevel } from "../lib/narrow-hint-banner.js";
+import { type PlanLimitRefusalSummary } from "../lib/billing/plan-limit-refusals.js";
 /**
  * Terminal-failure signal for the sync fanout runners. The runners
  * (`runPushAll` / `runPullAll` / `runPullPersonal` / `runNowSingle` /
@@ -28,7 +29,16 @@ import { type BannerLevel } from "../lib/narrow-hint-banner.js";
  */
 export declare class SyncExitError extends Error {
     readonly code: number;
-    constructor(code: number);
+    /**
+     * The client-health outcome to record for this exit. A run whose only
+     * problem was a plan-limit refusal exits non-zero (it did not upload what
+     * was asked) but is not a sync failure: the engine worked and the refusal
+     * is plan state, so it must not count toward `consecutiveFailures`.
+     */
+    readonly health: "failed" | "succeeded";
+    constructor(code: number, opts?: {
+        health?: "failed" | "succeeded";
+    });
 }
 /**
  * Preserve the vault's typed write-scope refusal at the CLI boundary. This is
@@ -197,6 +207,12 @@ export interface PullAllRow {
 }
 export interface ShareCallOptions {
     company: string;
+    /**
+     * The target's display slug, or undefined for the personal vault. Labels the
+     * shared progress snapshot and builds the company billing link for a
+     * plan-limit refusal that arrived without one.
+     */
+    targetSlug?: string;
     hqRoot: string;
     paths: string[];
     onConflict?: ConflictStrategy;
@@ -217,6 +233,8 @@ export interface ShareCallResult {
     filesExcludedByScope: number;
     conflictPaths: string[];
     aborted: boolean;
+    /** Files this leg's plan limit refused; absent or null when none were. */
+    planLimit?: PlanLimitRefusalSummary | null;
 }
 export interface PushAllDeps {
     vaultClient: PullAllVaultClient;
@@ -294,22 +312,16 @@ export declare function pushShareCredentials(input: {
  */
 export declare function resolveCanonicalPersonUid(vaultClient: PullAllVaultClient): Promise<string>;
 /**
- * Refuse `hq sync push --personal <path>` — the combination silently
- * bypasses `PERSONAL_VAULT_EXCLUDED_TOP_LEVEL` (which is only applied by
- * `computePersonalVaultPaths`), risking cross-scope upload of `companies/`,
- * `repos/`, `workspace/`, or `.git/` content to the personal vault. Real
- * incident (2026-05-21): a single command uploaded 196 `companies/{slug}/**`
- * objects to a personal vault before being killed. Cleanup required a
- * hand-rolled S3 sweep. Closes hq-cli#25.
- *
- * Refusal — not silent filtering — is intentional: explicit is better than
- * implicit guesswork, and the legitimate "I want to push a subset of my
- * personal vault" use case has a clean workaround (drop `--personal`, the
- * subset upload targets the active company via standard semantics).
+ * Keep `hq sync push --personal <path>` refused by default. Positional paths
+ * bypass `computePersonalVaultPaths` and can send excluded `companies/`,
+ * `repos/`, `workspace/`, or `.git/` content to the personal vault. The
+ * default-off targeted-paths gate allows the combination only after every
+ * path is realpath-normalized and checked against the computed personal scope
+ * and its file exclusions. Closes hq-cli#25.
  */
 export declare function assertNoPersonalPositionalPaths(opts: {
     personal?: boolean;
-}, paths: string[] | undefined): void;
+}, paths: string[] | undefined, targetedPersonalPathsEnabled?: boolean): void;
 /**
  * Refuse ambiguous selector combinations. `--all`, `--personal`, and
  * `--company` are mutually exclusive — at most one may be set per