@indigoai-us/hq-cli 5.318.0 → 5.318.1-beta.0

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## [Unreleased]
 
+## [5.318.1-beta.0] — 2026-10-02
+- Let `hq access` use ACL-checked company presigned reads when STS vend rejects a truncated write-policy scope.
+- Let `hq sync now` skip unchanged server-owned cloud placeholders while keeping their warnings visible, so the sync can complete.
+
 ## [5.318.0] — 2026-10-02
 - `hq lanes autopilot run` now marks missing lead registry entries as stale and includes a command to remove each stale row.
 - Keep retired policies retired regardless of YAML field order in the session helper.

package/dist/commands/access.js

@@ -221,10 +221,20 @@ export async function runAccess(input) {
     }
     catch (err) {
         const status = httpStatusOf(err);
+        const vendError = typeof err === "object" && err !== null
+            ? err
+            : undefined;
         if (status === 403) {
             vendDenied = true;
             steps.push("vend: 403 (no-access)");
         }
+        else if ((status === 422 || vendError?.statusCode === 422) &&
+            vendError?.code === "POLICY_WRITE_SCOPE_TRUNCATED") {
+            // This failure means the company-wide STS write policy could not fit.
+            // Company reads use the separate ACL-filtered presign API, which remains
+            // the authority for listing and materializing this particular object.
+            steps.push("vend: write policy truncated; using presigned read");
+        }
         else if (status === 404) {
             steps.push("vend: 404");
         }

package/dist/commands/cloud.js

@@ -1697,6 +1697,7 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
             hqRoot,
             progressRecorder: trackingProgressRecorder(planLimitTracker, pushProgressCompany),
             skipUnchanged: true,
+            serverOwnedPathPolicy: "skip",
             propagateDeletes: true,
             propagateDeletePolicy: resolveDeletePolicy(),
             ...(onConflict ? { onConflict } : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.318.0",
+  "version": "5.318.1-beta.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {