@indigoai-us/hq-cli 5.290.0 → 5.292.0

package/dist/command-catalog.generated.d.ts

@@ -5202,6 +5202,9 @@ export declare const COMMAND_CATALOG: readonly [{
             }, {
                 readonly flags: "--variants";
                 readonly description: "merge two-file duplicate groups whose names differ only in case, spacing or punctuation (checkpoint.ontology.merge-variants)";
+            }, {
+                readonly flags: "--listed";
+                readonly description: "merge exactly the pairs in the --only file, whatever their names (checkpoint.ontology.merge-listed-pairs)";
             }, {
                 readonly flags: "--limit <n>";
                 readonly description: "handle at most this many copies";
@@ -5210,7 +5213,31 @@ export declare const COMMAND_CATALOG: readonly [{
                 readonly description: "handle only the copy -> original pairs listed in this JSON file";
             }, {
                 readonly flags: "--rewrite-refs";
-                readonly description: "also re-point signal refs, invoice, source and knowledge links to the survivor and carry external ids and web domains (checkpoint.ontology.merge-rewrite-refs)";
+                readonly description: "also re-point invoice and knowledge links to the survivor and carry external ids and web domains; pairs named by signals or sources stay held (checkpoint.ontology.merge-rewrite-refs)";
+            }, {
+                readonly flags: "--json";
+                readonly description: "print JSON";
+            }, {
+                readonly flags: "--hq-root <path>";
+                readonly description: "HQ installation to operate on";
+            }];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "drop-aliases";
+            readonly description: "Remove reviewed wrong aliases from entity files (dry run by default)";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--company <slug>";
+                readonly description: "company to change";
+            }, {
+                readonly flags: "--only <file>";
+                readonly description: "JSON array of { entity, alias } to remove; entity is a company-relative path";
+            }, {
+                readonly flags: "--apply";
+                readonly description: "write the entity files";
             }, {
                 readonly flags: "--json";
                 readonly description: "print JSON";
@@ -5404,6 +5431,71 @@ export declare const COMMAND_CATALOG: readonly [{
             }];
             readonly options: readonly [];
             readonly subcommands: readonly [];
+        }, {
+            readonly name: "bundle";
+            readonly description: "Build a portable delegation bundle";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[args...]";
+            readonly arguments: readonly [{
+                readonly name: "args";
+                readonly required: false;
+                readonly variadic: true;
+            }];
+            readonly options: readonly [];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "grant";
+            readonly description: "Grant and verify delegation vault access";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[args...]";
+            readonly arguments: readonly [{
+                readonly name: "args";
+                readonly required: false;
+                readonly variadic: true;
+            }];
+            readonly options: readonly [];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "publish";
+            readonly description: "Publish canonical delegation files";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[args...]";
+            readonly arguments: readonly [{
+                readonly name: "args";
+                readonly required: false;
+                readonly variadic: true;
+            }];
+            readonly options: readonly [];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "send";
+            readonly description: "Generate or send the delegation pickup prompt";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[args...]";
+            readonly arguments: readonly [{
+                readonly name: "args";
+                readonly required: false;
+                readonly variadic: true;
+            }];
+            readonly options: readonly [];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "verify";
+            readonly description: "Probe delegation access and publish the handoff";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[args...]";
+            readonly arguments: readonly [{
+                readonly name: "args";
+                readonly required: false;
+                readonly variadic: true;
+            }];
+            readonly options: readonly [];
+            readonly subcommands: readonly [];
         }];
     }, {
         readonly name: "handoff";
@@ -5514,6 +5606,54 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly options: readonly [];
             readonly subcommands: readonly [];
         }];
+    }, {
+        readonly name: "jobs";
+        readonly description: "Scheduled jobs helpers";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] [command]";
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [{
+            readonly name: "schedule-parse";
+            readonly description: "Resolve natural-language or raw cron schedules";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[args...]";
+            readonly arguments: readonly [{
+                readonly name: "args";
+                readonly required: false;
+                readonly variadic: true;
+            }];
+            readonly options: readonly [];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "validate";
+            readonly description: "Validate scheduled-job YAML files";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[args...]";
+            readonly arguments: readonly [{
+                readonly name: "args";
+                readonly required: false;
+                readonly variadic: true;
+            }];
+            readonly options: readonly [];
+            readonly subcommands: readonly [];
+        }, {
+            readonly name: "reconcile";
+            readonly description: "Materialize scheduled jobs on this outpost";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[args...]";
+            readonly arguments: readonly [{
+                readonly name: "args";
+                readonly required: false;
+                readonly variadic: true;
+            }];
+            readonly options: readonly [];
+            readonly subcommands: readonly [];
+        }];
     }, {
         readonly name: "worktree-gc";
         readonly description: "Safely collect old, preserved HQ worktrees";
@@ -8849,6 +8989,30 @@ export declare const COMMAND_CATALOG: readonly [{
             readonly description: "JSON on stdout (always)";
         }];
         readonly subcommands: readonly [];
+    }, {
+        readonly name: "autopilot";
+        readonly description: "Check registered team leads and wake them for ready work";
+        readonly aliases: readonly [];
+        readonly hidden: false;
+        readonly usage: "[options] [command]";
+        readonly arguments: readonly [];
+        readonly options: readonly [];
+        readonly subcommands: readonly [{
+            readonly name: "run";
+            readonly description: "Run one lead autopilot check pass";
+            readonly aliases: readonly [];
+            readonly hidden: false;
+            readonly usage: "[options]";
+            readonly arguments: readonly [];
+            readonly options: readonly [{
+                readonly flags: "--dry-run";
+                readonly description: "Report proposed wakes without writing them";
+            }, {
+                readonly flags: "--json";
+                readonly description: "Emit JSON on stdout (default)";
+            }];
+            readonly subcommands: readonly [];
+        }];
     }, {
         readonly name: "reconcile";
         readonly description: "Run one machine-owned reconcile pass and exit";

package/dist/command-catalog.generated.js

@@ -6726,6 +6726,10 @@ export const COMMAND_CATALOG = [
                                 "flags": "--variants",
                                 "description": "merge two-file duplicate groups whose names differ only in case, spacing or punctuation (checkpoint.ontology.merge-variants)"
                             },
+                            {
+                                "flags": "--listed",
+                                "description": "merge exactly the pairs in the --only file, whatever their names (checkpoint.ontology.merge-listed-pairs)"
+                            },
                             {
                                 "flags": "--limit <n>",
                                 "description": "handle at most this many copies"
@@ -6736,7 +6740,38 @@ export const COMMAND_CATALOG = [
                             },
                             {
                                 "flags": "--rewrite-refs",
-                                "description": "also re-point signal refs, invoice, source and knowledge links to the survivor and carry external ids and web domains (checkpoint.ontology.merge-rewrite-refs)"
+                                "description": "also re-point invoice and knowledge links to the survivor and carry external ids and web domains; pairs named by signals or sources stay held (checkpoint.ontology.merge-rewrite-refs)"
+                            },
+                            {
+                                "flags": "--json",
+                                "description": "print JSON"
+                            },
+                            {
+                                "flags": "--hq-root <path>",
+                                "description": "HQ installation to operate on"
+                            }
+                        ],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "drop-aliases",
+                        "description": "Remove reviewed wrong aliases from entity files (dry run by default)",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options]",
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--company <slug>",
+                                "description": "company to change"
+                            },
+                            {
+                                "flags": "--only <file>",
+                                "description": "JSON array of { entity, alias } to remove; entity is a company-relative path"
+                            },
+                            {
+                                "flags": "--apply",
+                                "description": "write the entity files"
                             },
                             {
                                 "flags": "--json",
@@ -6977,6 +7012,86 @@ export const COMMAND_CATALOG = [
                         ],
                         "options": [],
                         "subcommands": []
+                    },
+                    {
+                        "name": "bundle",
+                        "description": "Build a portable delegation bundle",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "grant",
+                        "description": "Grant and verify delegation vault access",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "publish",
+                        "description": "Publish canonical delegation files",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "send",
+                        "description": "Generate or send the delegation pickup prompt",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "verify",
+                        "description": "Probe delegation access and publish the handoff",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
                     }
                 ]
             },
@@ -7114,6 +7229,65 @@ export const COMMAND_CATALOG = [
                     }
                 ]
             },
+            {
+                "name": "jobs",
+                "description": "Scheduled jobs helpers",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] [command]",
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "schedule-parse",
+                        "description": "Resolve natural-language or raw cron schedules",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "validate",
+                        "description": "Validate scheduled-job YAML files",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    },
+                    {
+                        "name": "reconcile",
+                        "description": "Materialize scheduled jobs on this outpost",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[args...]",
+                        "arguments": [
+                            {
+                                "name": "args",
+                                "required": false,
+                                "variadic": true
+                            }
+                        ],
+                        "options": [],
+                        "subcommands": []
+                    }
+                ]
+            },
             {
                 "name": "worktree-gc",
                 "description": "Safely collect old, preserved HQ worktrees",
@@ -11430,6 +11604,36 @@ export const COMMAND_CATALOG = [
                 ],
                 "subcommands": []
             },
+            {
+                "name": "autopilot",
+                "description": "Check registered team leads and wake them for ready work",
+                "aliases": [],
+                "hidden": false,
+                "usage": "[options] [command]",
+                "arguments": [],
+                "options": [],
+                "subcommands": [
+                    {
+                        "name": "run",
+                        "description": "Run one lead autopilot check pass",
+                        "aliases": [],
+                        "hidden": false,
+                        "usage": "[options]",
+                        "arguments": [],
+                        "options": [
+                            {
+                                "flags": "--dry-run",
+                                "description": "Report proposed wakes without writing them"
+                            },
+                            {
+                                "flags": "--json",
+                                "description": "Emit JSON on stdout (default)"
+                            }
+                        ],
+                        "subcommands": []
+                    }
+                ]
+            },
             {
                 "name": "reconcile",
                 "description": "Run one machine-owned reconcile pass and exit",

package/dist/commands/cloud.d.ts

@@ -15,6 +15,7 @@
 import { Command } from "commander";
 import { type ConflictStrategy, type EntityContext, type MembershipSyncConfig, type SyncMode, type PullScope, type ExplicitGrant, type ShareOptions, type VaultServiceConfig } from "@indigoai-us/hq-cloud";
 import { type BannerLevel } from "../lib/narrow-hint-banner.js";
+import { type PlanLimitRefusalSummary } from "../lib/billing/plan-limit-refusals.js";
 /**
  * Terminal-failure signal for the sync fanout runners. The runners
  * (`runPushAll` / `runPullAll` / `runPullPersonal` / `runNowSingle` /
@@ -28,7 +29,16 @@ import { type BannerLevel } from "../lib/narrow-hint-banner.js";
  */
 export declare class SyncExitError extends Error {
     readonly code: number;
-    constructor(code: number);
+    /**
+     * The client-health outcome to record for this exit. A run whose only
+     * problem was a plan-limit refusal exits non-zero (it did not upload what
+     * was asked) but is not a sync failure: the engine worked and the refusal
+     * is plan state, so it must not count toward `consecutiveFailures`.
+     */
+    readonly health: "failed" | "succeeded";
+    constructor(code: number, opts?: {
+        health?: "failed" | "succeeded";
+    });
 }
 /**
  * Preserve the vault's typed write-scope refusal at the CLI boundary. This is
@@ -197,6 +207,12 @@ export interface PullAllRow {
 }
 export interface ShareCallOptions {
     company: string;
+    /**
+     * The target's display slug, or undefined for the personal vault. Labels the
+     * shared progress snapshot and builds the company billing link for a
+     * plan-limit refusal that arrived without one.
+     */
+    targetSlug?: string;
     hqRoot: string;
     paths: string[];
     onConflict?: ConflictStrategy;
@@ -217,6 +233,8 @@ export interface ShareCallResult {
     filesExcludedByScope: number;
     conflictPaths: string[];
     aborted: boolean;
+    /** Files this leg's plan limit refused; absent or null when none were. */
+    planLimit?: PlanLimitRefusalSummary | null;
 }
 export interface PushAllDeps {
     vaultClient: PullAllVaultClient;
@@ -294,22 +312,16 @@ export declare function pushShareCredentials(input: {
  */
 export declare function resolveCanonicalPersonUid(vaultClient: PullAllVaultClient): Promise<string>;
 /**
- * Refuse `hq sync push --personal <path>` — the combination silently
- * bypasses `PERSONAL_VAULT_EXCLUDED_TOP_LEVEL` (which is only applied by
- * `computePersonalVaultPaths`), risking cross-scope upload of `companies/`,
- * `repos/`, `workspace/`, or `.git/` content to the personal vault. Real
- * incident (2026-05-21): a single command uploaded 196 `companies/{slug}/**`
- * objects to a personal vault before being killed. Cleanup required a
- * hand-rolled S3 sweep. Closes hq-cli#25.
- *
- * Refusal — not silent filtering — is intentional: explicit is better than
- * implicit guesswork, and the legitimate "I want to push a subset of my
- * personal vault" use case has a clean workaround (drop `--personal`, the
- * subset upload targets the active company via standard semantics).
+ * Keep `hq sync push --personal <path>` refused by default. Positional paths
+ * bypass `computePersonalVaultPaths` and can send excluded `companies/`,
+ * `repos/`, `workspace/`, or `.git/` content to the personal vault. The
+ * default-off targeted-paths gate allows the combination only after every
+ * path is realpath-normalized and checked against the computed personal scope
+ * and its file exclusions. Closes hq-cli#25.
  */
 export declare function assertNoPersonalPositionalPaths(opts: {
     personal?: boolean;
-}, paths: string[] | undefined): void;
+}, paths: string[] | undefined, targetedPersonalPathsEnabled?: boolean): void;
 /**
  * Refuse ambiguous selector combinations. `--all`, `--personal`, and
  * `--company` are mutually exclusive — at most one may be set per