@indigoai-us/hq-cli 5.34.2 → 5.35.1

package/dist/commands/cloud.d.ts

@@ -104,6 +104,7 @@ export interface ShareCallOptions {
     message?: string;
     skipUnchanged?: boolean;
     propagateDeletes?: boolean;
+    propagateDeletePolicy?: "owned-only" | "currency-gated" | "all";
 }
 export interface ShareCallResult {
     filesUploaded: number;

package/dist/commands/cloud.js

@@ -13,13 +13,40 @@
  *   hq sync status            — show local journal summary
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bdaf154f-b17d-5482-9e4d-feaebe606a1b")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="94a293c9-eb80-5100-a3e0-d64c93f7165c")}catch(e){}}();
 import chalk from "chalk";
 import * as fs from "fs";
 import * as path from "path";
 import { share, sync, readJournal, getJournalPath, loadCachedTokens, VaultClient, computePersonalVaultPaths, } from "@indigoai-us/hq-cloud";
 import { DEFAULT_HQ_ROOT, ensureCognitoToken, buildVaultConfig, } from "../utils/cognito-session.js";
 import { emitNarrowHint, isStrictRefusal, resolveBannerLevel, } from "../lib/narrow-hint-banner.js";
+/**
+ * Resolve the `propagateDeletePolicy` for share() calls.
+ *
+ * Mirrors `@indigoai-us/hq-cloud`'s `bin/sync-runner.js` `resolveDeletePolicy`
+ * — the same function the AppBar HQ Sync menubar uses — so the CLI and the
+ * menubar agree on the policy by default. Inlined here (rather than
+ * deep-imported from `dist/bin/sync-runner.js`) to avoid coupling to a
+ * non-public subpath.
+ *
+ * Default is `"currency-gated"` (etag-verified safe delete). Override via
+ * the `HQ_SYNC_DELETE_POLICY` env var: `owned-only` (legacy direction-of-
+ * origin filter, multi-user safe but stranded down-stream litter on
+ * personal vaults until hq-cloud 6.0.1's prs_ override), `currency-gated`
+ * (the menubar default), or `all` (emergency-reconcile, no safety gates).
+ *
+ * Prior to this helper, the CLI passed nothing → share() fell through to
+ * its own `"owned-only"` default, leaving CLI users on a stricter (and
+ * sometimes wrong, on personal vault) policy than menubar users for
+ * months. See `workspace/reports/owned-only-delete-policy-purpose-debug.md`.
+ */
+function resolveDeletePolicy() {
+    const env = process.env.HQ_SYNC_DELETE_POLICY;
+    if (env === "owned-only" || env === "all" || env === "currency-gated") {
+        return env;
+    }
+    return "currency-gated";
+}
 // Oldest-first by createdAt, ties broken by uid lexicographic — matches
 // `pickCanonicalPersonEntity` in @indigoai-us/hq-cloud so the CLI lands on
 // the same person bucket that `hq-sync-runner` picks.
@@ -171,6 +198,7 @@ export async function pushAll(options, deps) {
                 paths: [path.join(options.hqRoot, "companies", slug)],
                 skipUnchanged: true,
                 propagateDeletes: true,
+                propagateDeletePolicy: resolveDeletePolicy(),
                 ...(options.onConflict ? { onConflict: options.onConflict } : {}),
                 ...(options.message ? { message: options.message } : {}),
             },
@@ -188,6 +216,7 @@ export async function pushAll(options, deps) {
                 journalSlug: "personal",
                 skipUnchanged: true,
                 propagateDeletes: true,
+                propagateDeletePolicy: resolveDeletePolicy(),
                 ...(options.onConflict ? { onConflict: options.onConflict } : {}),
                 ...(options.message ? { message: options.message } : {}),
             },
@@ -869,6 +898,9 @@ async function runPushAll(hqRoot, message, onConflict, skipPersonal) {
                 ...(opts.propagateDeletes !== undefined
                     ? { propagateDeletes: opts.propagateDeletes }
                     : {}),
+                ...(opts.propagateDeletePolicy !== undefined
+                    ? { propagateDeletePolicy: opts.propagateDeletePolicy }
+                    : {}),
                 ...(author ? { author } : {}),
             }),
         });
@@ -949,6 +981,7 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
             hqRoot,
             skipUnchanged: true,
             propagateDeletes: true,
+            propagateDeletePolicy: resolveDeletePolicy(),
             ...(onConflict ? { onConflict } : {}),
             ...(message ? { message } : {}),
             ...(personalMode ? { personalMode: true } : {}),
@@ -1130,4 +1163,4 @@ function resolveUploadAuthorFromCache() {
     }
 }
 //# sourceMappingURL=cloud.js.map
-//# debugId=bdaf154f-b17d-5482-9e4d-feaebe606a1b
+//# debugId=94a293c9-eb80-5100-a3e0-d64c93f7165c

package/dist/commands/reindex.d.ts

@@ -0,0 +1,15 @@
+/**
+ * hq reindex — surface namespaced skills, mirror the personal overlay into
+ * core/, and regenerate the workers registry.
+ *
+ * Thin wrapper over @indigoai-us/hq-cloud's reindex(), which execs the bundled
+ * scripts/reindex.sh against the HQ root. This command is what the hq-core
+ * reindex hook shim calls on Stop / PostToolUse, and what sync()/rescue() call
+ * after they change on-disk sources.
+ *
+ * Keeps a hidden `master-sync` alias for one release so an updated CLI still
+ * answers a not-yet-updated hook shim (and vice-versa) during rollout.
+ */
+import { Command } from 'commander';
+export declare function registerReindexCommand(program: Command): void;
+//# sourceMappingURL=reindex.d.ts.map

package/dist/commands/{master-sync.js → reindex.js}

@@ -1,15 +1,16 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c5486cda-a7fa-5274-ab0a-a61e1958aac7")}catch(e){}}();
-import { masterSync } from '@indigoai-us/hq-cloud';
-export function registerMasterSyncCommand(program) {
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9d81df7d-0153-5f51-9cfb-60f1409c6b94")}catch(e){}}();
+import { reindex } from '@indigoai-us/hq-cloud';
+export function registerReindexCommand(program) {
     program
-        .command('master-sync')
+        .command('reindex')
+        .alias('master-sync')
         .description('Surface namespaced skills, mirror the personal overlay into core/, and regenerate the workers registry')
         .option('--repo-root <path>', 'HQ root to operate on (defaults to the current directory)')
         .action((opts) => {
-        const { status } = masterSync({ repoRoot: opts.repoRoot });
+        const { status } = reindex({ repoRoot: opts.repoRoot });
         process.exit(status);
     });
 }
-//# sourceMappingURL=master-sync.js.map
-//# debugId=c5486cda-a7fa-5274-ab0a-a61e1958aac7
+//# sourceMappingURL=reindex.js.map
+//# debugId=9d81df7d-0153-5f51-9cfb-60f1409c6b94

package/dist/index.js

@@ -3,7 +3,7 @@
  * HQ CLI - Module management, package management, and cloud sync for HQ
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="004dc716-c660-5745-94db-988ac49d102e")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="202089d2-b89b-5779-aa66-f88531a9b893")}catch(e){}}();
 import { Command } from "commander";
 import { initSentry, Sentry } from "./sentry.js";
 import { registerAddCommand } from "./commands/add.js";
@@ -39,7 +39,7 @@ import { registerFeedbackCommand } from "./commands/feedback.js";
 import { registerMeetingsCommand } from "./commands/meetings.js";
 import { registerSourcesCommand } from "./commands/sources.js";
 import { registerSignalsCommand } from "./commands/signals.js";
-import { registerMasterSyncCommand } from "./commands/master-sync.js";
+import { registerReindexCommand } from "./commands/reindex.js";
 import { registerRescueCommand } from "./commands/rescue.js";
 import { sanitizeArgv } from "./utils/feedback-diagnostics.js";
 import { maybeWarnNewVersion, refreshVersionCache, } from "./utils/version-check.js";
@@ -139,10 +139,11 @@ registerMeetingsCommand(program);
 registerSourcesCommand(program);
 // Signals read surface (subcommand group — hq signals list|get|types|entities)
 registerSignalsCommand(program);
-// Skill/personal-overlay mirroring + workers-registry regen. Internal command
-// invoked by the hq-core master-sync hook shim (formerly the master-sync.sh
-// hook body). Implementation lives in @indigoai-us/hq-cloud.
-registerMasterSyncCommand(program);
+// Skill/personal-overlay mirroring + workers-registry regen. Invoked by the
+// hq-core reindex hook shim (Stop / PostToolUse) and by sync()/rescue() after
+// they change on-disk sources. Keeps a `master-sync` alias for one release.
+// Implementation lives in @indigoai-us/hq-cloud.
+registerReindexCommand(program);
 // Drift-preserving HQ-core re-sync (top-level — `hq rescue`). CLI sibling of
 // the HQ Sync app's "Update / Restore" pill; drives the same replace-rescue.sh
 // shipped from @indigoai-us/hq-cloud.
@@ -173,4 +174,4 @@ registerRescueCommand(program);
     }
 })();
 //# sourceMappingURL=index.js.map
-//# debugId=004dc716-c660-5745-94db-988ac49d102e
+//# debugId=202089d2-b89b-5779-aa66-f88531a9b893

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.34.2",
+  "version": "5.35.1",
   "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {
@@ -15,7 +15,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@indigoai-us/hq-cloud": "~5.48.4",
+    "@indigoai-us/hq-cloud": "^6.0.1",
     "@indigoai-us/hq-onboarding": "^0.1.0",
     "@sentry/node": "^10.49.0",
     "chalk": "^5.3.0",

package/src/commands/cloud.ts

@@ -45,6 +45,34 @@ import {
   type BannerLevel,
 } from "../lib/narrow-hint-banner.js";
 
+/**
+ * Resolve the `propagateDeletePolicy` for share() calls.
+ *
+ * Mirrors `@indigoai-us/hq-cloud`'s `bin/sync-runner.js` `resolveDeletePolicy`
+ * — the same function the AppBar HQ Sync menubar uses — so the CLI and the
+ * menubar agree on the policy by default. Inlined here (rather than
+ * deep-imported from `dist/bin/sync-runner.js`) to avoid coupling to a
+ * non-public subpath.
+ *
+ * Default is `"currency-gated"` (etag-verified safe delete). Override via
+ * the `HQ_SYNC_DELETE_POLICY` env var: `owned-only` (legacy direction-of-
+ * origin filter, multi-user safe but stranded down-stream litter on
+ * personal vaults until hq-cloud 6.0.1's prs_ override), `currency-gated`
+ * (the menubar default), or `all` (emergency-reconcile, no safety gates).
+ *
+ * Prior to this helper, the CLI passed nothing → share() fell through to
+ * its own `"owned-only"` default, leaving CLI users on a stricter (and
+ * sometimes wrong, on personal vault) policy than menubar users for
+ * months. See `workspace/reports/owned-only-delete-policy-purpose-debug.md`.
+ */
+function resolveDeletePolicy(): "owned-only" | "currency-gated" | "all" {
+  const env = process.env.HQ_SYNC_DELETE_POLICY;
+  if (env === "owned-only" || env === "all" || env === "currency-gated") {
+    return env;
+  }
+  return "currency-gated";
+}
+
 interface CommonSyncOptions {
   hqRoot: string;
   company?: string;
@@ -164,6 +192,7 @@ export interface ShareCallOptions {
   message?: string;
   skipUnchanged?: boolean;
   propagateDeletes?: boolean;
+  propagateDeletePolicy?: "owned-only" | "currency-gated" | "all";
 }
 
 export interface ShareCallResult {
@@ -397,6 +426,7 @@ export async function pushAll(
         paths: [path.join(options.hqRoot, "companies", slug)],
         skipUnchanged: true,
         propagateDeletes: true,
+        propagateDeletePolicy: resolveDeletePolicy(),
         ...(options.onConflict ? { onConflict: options.onConflict } : {}),
         ...(options.message ? { message: options.message } : {}),
       },
@@ -415,6 +445,7 @@ export async function pushAll(
         journalSlug: "personal",
         skipUnchanged: true,
         propagateDeletes: true,
+        propagateDeletePolicy: resolveDeletePolicy(),
         ...(options.onConflict ? { onConflict: options.onConflict } : {}),
         ...(options.message ? { message: options.message } : {}),
       },
@@ -1406,6 +1437,9 @@ async function runPushAll(
             ...(opts.propagateDeletes !== undefined
               ? { propagateDeletes: opts.propagateDeletes }
               : {}),
+            ...(opts.propagateDeletePolicy !== undefined
+              ? { propagateDeletePolicy: opts.propagateDeletePolicy }
+              : {}),
             ...(author ? { author } : {}),
           }),
       },
@@ -1505,6 +1539,7 @@ async function runNowSingle(
       hqRoot,
       skipUnchanged: true,
       propagateDeletes: true,
+      propagateDeletePolicy: resolveDeletePolicy(),
       ...(onConflict ? { onConflict } : {}),
       ...(message ? { message } : {}),
       ...(personalMode ? { personalMode: true } : {}),

package/src/commands/reindex.ts

@@ -0,0 +1,28 @@
+/**
+ * hq reindex — surface namespaced skills, mirror the personal overlay into
+ * core/, and regenerate the workers registry.
+ *
+ * Thin wrapper over @indigoai-us/hq-cloud's reindex(), which execs the bundled
+ * scripts/reindex.sh against the HQ root. This command is what the hq-core
+ * reindex hook shim calls on Stop / PostToolUse, and what sync()/rescue() call
+ * after they change on-disk sources.
+ *
+ * Keeps a hidden `master-sync` alias for one release so an updated CLI still
+ * answers a not-yet-updated hook shim (and vice-versa) during rollout.
+ */
+import { Command } from 'commander';
+import { reindex } from '@indigoai-us/hq-cloud';
+
+export function registerReindexCommand(program: Command): void {
+  program
+    .command('reindex')
+    .alias('master-sync')
+    .description(
+      'Surface namespaced skills, mirror the personal overlay into core/, and regenerate the workers registry'
+    )
+    .option('--repo-root <path>', 'HQ root to operate on (defaults to the current directory)')
+    .action((opts: { repoRoot?: string }) => {
+      const { status } = reindex({ repoRoot: opts.repoRoot });
+      process.exit(status);
+    });
+}

package/src/index.ts

@@ -39,7 +39,7 @@ import { registerFeedbackCommand } from "./commands/feedback.js";
 import { registerMeetingsCommand } from "./commands/meetings.js";
 import { registerSourcesCommand } from "./commands/sources.js";
 import { registerSignalsCommand } from "./commands/signals.js";
-import { registerMasterSyncCommand } from "./commands/master-sync.js";
+import { registerReindexCommand } from "./commands/reindex.js";
 import { registerRescueCommand } from "./commands/rescue.js";
 import { sanitizeArgv } from "./utils/feedback-diagnostics.js";
 import {
@@ -176,10 +176,11 @@ registerSourcesCommand(program);
 // Signals read surface (subcommand group — hq signals list|get|types|entities)
 registerSignalsCommand(program);
 
-// Skill/personal-overlay mirroring + workers-registry regen. Internal command
-// invoked by the hq-core master-sync hook shim (formerly the master-sync.sh
-// hook body). Implementation lives in @indigoai-us/hq-cloud.
-registerMasterSyncCommand(program);
+// Skill/personal-overlay mirroring + workers-registry regen. Invoked by the
+// hq-core reindex hook shim (Stop / PostToolUse) and by sync()/rescue() after
+// they change on-disk sources. Keeps a `master-sync` alias for one release.
+// Implementation lives in @indigoai-us/hq-cloud.
+registerReindexCommand(program);
 
 // Drift-preserving HQ-core re-sync (top-level — `hq rescue`). CLI sibling of
 // the HQ Sync app's "Update / Restore" pill; drives the same replace-rescue.sh

package/dist/commands/master-sync.d.ts

@@ -1,11 +0,0 @@
-/**
- * hq master-sync — surface namespaced skills, mirror the personal overlay into
- * core/, and regenerate the workers registry.
- *
- * Thin wrapper over @indigoai-us/hq-cloud's masterSync(), which execs the
- * bundled scripts/master-sync.sh against the HQ root. This command is what the
- * hq-core master-sync hook shim calls on Stop / PostToolUse.
- */
-import { Command } from 'commander';
-export declare function registerMasterSyncCommand(program: Command): void;
-//# sourceMappingURL=master-sync.d.ts.map

package/src/commands/master-sync.ts

@@ -1,23 +0,0 @@
-/**
- * hq master-sync — surface namespaced skills, mirror the personal overlay into
- * core/, and regenerate the workers registry.
- *
- * Thin wrapper over @indigoai-us/hq-cloud's masterSync(), which execs the
- * bundled scripts/master-sync.sh against the HQ root. This command is what the
- * hq-core master-sync hook shim calls on Stop / PostToolUse.
- */
-import { Command } from 'commander';
-import { masterSync } from '@indigoai-us/hq-cloud';
-
-export function registerMasterSyncCommand(program: Command): void {
-  program
-    .command('master-sync')
-    .description(
-      'Surface namespaced skills, mirror the personal overlay into core/, and regenerate the workers registry'
-    )
-    .option('--repo-root <path>', 'HQ root to operate on (defaults to the current directory)')
-    .action((opts: { repoRoot?: string }) => {
-      const { status } = masterSync({ repoRoot: opts.repoRoot });
-      process.exit(status);
-    });
-}