@indigoai-us/hq-cli 5.345.79 → 5.345.81

package/dist/hq-cloud-sync-runner/package.json

@@ -1 +1 @@
-{"name":"hq-cli-daemon-sync-runner","type":"module","version":"6.18.54","bundleSha256":"3a2ccf7955d7a5be1ab8e9a54e810d55ec7041e1eda534b84eba75e2199ee2f6","formatVersion":1}
+{"name":"hq-cli-daemon-sync-runner","type":"module","version":"6.18.61","bundleSha256":"08a41f64915b26432d804644a2d516ef670e6d2133e8937a46c3a93f7398ab65","formatVersion":1}

package/dist/lib/cli-flag-keys.d.ts

@@ -1,4 +1,10 @@
 /** hq-flags keys used by CLI-wide routes. */
 export declare const CLI_COMMAND_HELP_CATALOG_FLAG = "cli.command-help-catalog";
 export declare const MULTI_COMPANY_SESSION_LOCK_FLAG = "hooks.multi-company-session-lock";
+/**
+ * hq-flags key for HQ Storage (`hq storage` and Settings > Storage in the
+ * desktop app). Shared with hq-desktop-app, so it carries no `cli.` prefix,
+ * like `hq-anywhere-runtime`.
+ */
+export declare const HQ_STORAGE_FLAG = "hq-storage";
 //# sourceMappingURL=cli-flag-keys.d.ts.map

package/dist/lib/cli-flag-keys.js

@@ -1,4 +1,10 @@
 /** hq-flags keys used by CLI-wide routes. */
 export const CLI_COMMAND_HELP_CATALOG_FLAG = "cli.command-help-catalog";
 export const MULTI_COMPANY_SESSION_LOCK_FLAG = "hooks.multi-company-session-lock";
+/**
+ * hq-flags key for HQ Storage (`hq storage` and Settings > Storage in the
+ * desktop app). Shared with hq-desktop-app, so it carries no `cli.` prefix,
+ * like `hq-anywhere-runtime`.
+ */
+export const HQ_STORAGE_FLAG = "hq-storage";
 //# sourceMappingURL=cli-flag-keys.js.map

package/dist/lib/doctor/checks/sync-health.d.ts

@@ -109,6 +109,8 @@ export interface SyncHealthDeps {
 export declare function isSafeCompanySlug(slug: string): boolean;
 /** True when this journal slug names a company rather than the personal tree. */
 export declare function isCompanyJournalSlug(slug: string): boolean;
+/** True when this journal slug names the personal tree or personal vault. */
+export declare function isPersonalJournalSlug(slug: string): boolean;
 /** Company slug from a `sync.journal.<slug>` check id, or null if not one. */
 export declare function journalSlugFromCheckId(checkId: string): string | null;
 /** The versions/sync check family. Registered in `createDefaultRegistry`. */

package/dist/lib/doctor/checks/sync-health.js

@@ -206,6 +206,10 @@ function journalSlugForCheckId(slug) {
 export function isCompanyJournalSlug(slug) {
     return !NON_COMPANY_JOURNAL_SLUGS.has(slug);
 }
+/** True when this journal slug names the personal tree or personal vault. */
+export function isPersonalJournalSlug(slug) {
+    return NON_COMPANY_JOURNAL_SLUGS.has(slug);
+}
 /** Company slug from a `sync.journal.<slug>` check id, or null if not one. */
 export function journalSlugFromCheckId(checkId) {
     const match = /^sync\.journal\.(.+)$/.exec(checkId);
@@ -390,9 +394,24 @@ function journalAndManifestResults(deps) {
 }
 function journalResults(deps, journals) {
     const nowMs = deps.now().getTime();
+    const hasPersonalVaultJournal = journals.some((entry) => entry.slug === PERSONAL_VAULT_SCOPE_SLUG);
     return journals.map((entry) => {
         const lastSync = entry.journal?.lastSync;
         const checkId = `sync.journal.${journalSlugForCheckId(entry.slug)}`;
+        // The legacy `personal` shard and `__hq_personal_vault__` name the same
+        // tree. Once the vault journal exists, the old file is leftover
+        // bookkeeping: WARN would make `hq doctor --fix` look like it failed to
+        // repair a row it cannot refresh (a personal pull writes the vault
+        // journal, not this one).
+        if (entry.slug === PERSONAL_SCOPE_SLUG && hasPersonalVaultJournal) {
+            return {
+                status: "NA",
+                checkId,
+                reasonCode: "legacy-personal-journal",
+                target: entry.path,
+                message: "Sync journal 'personal' is unused on this machine — personal files now sync through the personal vault journal, so this leftover shard is not a live sync target.",
+            };
+        }
         // A company journal without a local tree is leftover membership state,
         // not a live sync target. WARN would make `hq doctor --fix` look like it
         // failed to repair something it was never going to touch (US-015 health

package/dist/lib/doctor/fix/apply.d.ts

@@ -13,9 +13,10 @@
  *      and blocking the pull left `sync.journal.<slug>` WARN after `--fix`.
  *   2. Allowlist only. It repairs the classified safe classes — restore an
  *      execute bit, add a hook id to the gate profiles it is missing from,
- *      re-register a script present on disk, or pull a company whose local
- *      tree exists but whose journal is stale — and NEVER rewrites a hook body
- *      or deletes a file. Classification is owned by {@link deriveRemediation};
+ *      re-register a script present on disk, or pull a company or personal
+ *      vault whose local tree exists but whose journal is stale — and NEVER
+ *      rewrites a hook body or deletes a file. Classification is owned by
+ *      {@link deriveRemediation};
  *      a content-drift finding is manual-only and simply never appears in the
  *      fixable set.
  *   3. Preview + confirmation. Every change is shown diff-style and requires
@@ -70,8 +71,9 @@ export interface ApplyFixesOptions {
     runChecks?: (hqRoot: string) => Promise<CheckResult[]>;
     /**
      * Targeted pull used by the `refresh-sync` class. Default shells out to
-     * `hq sync pull --company <slug> --on-conflict keep`. Tests inject a stub
-     * so `--fix` never hits the network.
+     * `hq sync pull --company <slug> --on-conflict keep`, or
+     * `hq sync pull --personal --on-conflict keep` for personal journals.
+     * Tests inject a stub so `--fix` never hits the network.
      */
     refreshSync?: (target: RefreshSyncTarget) => Promise<RefreshSyncResult>;
     /**
@@ -84,12 +86,14 @@ export interface ApplyFixesOptions {
         to: string;
     } | null;
 }
-/** One company the `refresh-sync` class will pull. */
+/** One company or personal vault the `refresh-sync` class will pull. */
 export interface RefreshSyncTarget {
-    /** Company slug from the `sync.journal.<slug>` check id. */
+    /** Company slug, or `personal` for the personal vault. */
     slug: string;
     /** HQ root the pull writes into. */
     hqRoot: string;
+    /** Pull the personal vault instead of `companies/<slug>`. */
+    personal?: boolean;
 }
 /** Outcome of one {@link ApplyFixesOptions.refreshSync} call. */
 export interface RefreshSyncResult {
@@ -160,9 +164,9 @@ export interface ApplyFixesResult {
 export declare function applyFixes(options: ApplyFixesOptions): Promise<ApplyFixesResult>;
 /**
  * Default `refresh-sync` repair: a bounded, pull-only, keep-conflicts
- * `hq sync pull --company <slug>` against the tree `--fix` is repairing.
- * Never a push, never interactive. A timeout or non-zero exit is reported
- * rather than thrown so later plans still run.
+ * `hq sync pull --company <slug>` (or `--personal`) against the tree
+ * `--fix` is repairing. Never a push, never interactive. A timeout or
+ * non-zero exit is reported rather than thrown so later plans still run.
  */
 export declare function defaultRefreshSync(target: RefreshSyncTarget): Promise<RefreshSyncResult>;
 /**

package/dist/lib/doctor/fix/apply.js

@@ -13,9 +13,10 @@
  *      and blocking the pull left `sync.journal.<slug>` WARN after `--fix`.
  *   2. Allowlist only. It repairs the classified safe classes — restore an
  *      execute bit, add a hook id to the gate profiles it is missing from,
- *      re-register a script present on disk, or pull a company whose local
- *      tree exists but whose journal is stale — and NEVER rewrites a hook body
- *      or deletes a file. Classification is owned by {@link deriveRemediation};
+ *      re-register a script present on disk, or pull a company or personal
+ *      vault whose local tree exists but whose journal is stale — and NEVER
+ *      rewrites a hook body or deletes a file. Classification is owned by
+ *      {@link deriveRemediation};
  *      a content-drift finding is manual-only and simply never appears in the
  *      fixable set.
  *   3. Preview + confirmation. Every change is shown diff-style and requires
@@ -34,6 +35,7 @@
 import { spawnSync } from "node:child_process";
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { isPersonalJournalSlug } from "../checks/sync-health.js";
 import { createDefaultRegistry } from "../registry.js";
 import { flattenFamilies } from "../report.js";
 import { gateMembership, parseHookGateProfiles, } from "../hook-gate-profiles.js";
@@ -182,7 +184,13 @@ export async function applyFixes(options) {
             keysThisPass.add(key);
             plans.push(plan);
         }
-        const refreshPlans = rotateRefreshSyncPlans(plans.filter((plan) => plan.fixClass === "refresh-sync"), lastAttemptedRefreshSyncSlug).slice(0, Math.max(0, MAX_REFRESH_SYNC_PLANS_PER_RUN - refreshSyncAppliedThisRun));
+        const seenRefreshTargets = new Set();
+        const refreshPlans = rotateRefreshSyncPlans(plans.filter((plan) => plan.fixClass === "refresh-sync"), lastAttemptedRefreshSyncSlug).filter((plan) => {
+            if (seenRefreshTargets.has(plan.target))
+                return false;
+            seenRefreshTargets.add(plan.target);
+            return true;
+        }).slice(0, Math.max(0, MAX_REFRESH_SYNC_PLANS_PER_RUN - refreshSyncAppliedThisRun));
         return [
             ...plans.filter((plan) => plan.fixClass !== "refresh-sync"),
             ...refreshPlans,
@@ -330,19 +338,21 @@ async function defaultRunChecks(hqRoot) {
 }
 /**
  * Default `refresh-sync` repair: a bounded, pull-only, keep-conflicts
- * `hq sync pull --company <slug>` against the tree `--fix` is repairing.
- * Never a push, never interactive. A timeout or non-zero exit is reported
- * rather than thrown so later plans still run.
+ * `hq sync pull --company <slug>` (or `--personal`) against the tree
+ * `--fix` is repairing. Never a push, never interactive. A timeout or
+ * non-zero exit is reported rather than thrown so later plans still run.
  */
 export function defaultRefreshSync(target) {
     const hqBin = process.argv[1];
+    const selector = target.personal || isPersonalJournalSlug(target.slug)
+        ? ["--personal"]
+        : ["--company", target.slug];
     const args = hqBin
         ? [
             hqBin,
             "sync",
             "pull",
-            "--company",
-            target.slug,
+            ...selector,
             "--hq-root",
             target.hqRoot,
             "--on-conflict",
@@ -353,8 +363,7 @@ export function defaultRefreshSync(target) {
         : [
             "sync",
             "pull",
-            "--company",
-            target.slug,
+            ...selector,
             "--hq-root",
             target.hqRoot,
             "--on-conflict",
@@ -471,23 +480,28 @@ export function defaultRewriteBotNodePath(name) {
         return null;
     return rewriteBotDaemonNodePath(buildBotDaemonPaths({ name, botDir: dir, hqRoot: config.hqRoot, hqBinary: "hq" }), { platform: "darwin" });
 }
-/** Pull one company to refresh a stale or never-synced journal. */
+/** Pull one company or the personal vault to refresh a stale journal. */
 function planRefreshSync(hqRoot, result, rem, refreshSync) {
     const slug = rem.fixTarget;
     if (!slug)
         return null;
+    const personal = isPersonalJournalSlug(slug);
     let outcome;
     return {
         checkId: result.checkId,
         fixClass: "refresh-sync",
         target: slug,
         relpath: "",
-        preview: `  companies/${slug}\n` +
-            `    ~ hq sync pull --company ${slug} --on-conflict keep\n` +
-            `      refresh the stale sync journal (keeps local conflict copies)`,
+        preview: personal
+            ? `  personal vault\n` +
+                `    ~ hq sync pull --personal --on-conflict keep\n` +
+                `      refresh the stale personal sync journal (keeps local conflict copies)`
+            : `  companies/${slug}\n` +
+                `    ~ hq sync pull --company ${slug} --on-conflict keep\n` +
+                `      refresh the stale sync journal (keeps local conflict copies)`,
         summary: `pull ${slug} to refresh its sync journal`,
         apply: async () => {
-            const result = await refreshSync({ slug, hqRoot });
+            const result = await refreshSync({ slug, hqRoot, personal });
             outcome = result.outcome;
         },
         refreshSyncOutcome: () => outcome,

package/dist/lib/doctor/fix/remediation.d.ts

@@ -24,9 +24,11 @@
  *                         never auto-registered: that is what created them.)
  *   - `refresh-sync`    — run a targeted pull for a company journal that is
  *                         stale or never-synced AND has a local
- *                         `companies/<slug>` tree. Pull-only, `--on-conflict
- *                         keep`, no hook-file rewrite. Personal journals and
- *                         leftover shards without a local tree stay manual.
+ *                         `companies/<slug>` tree, or for a live personal /
+ *                         personal-vault journal. Pull-only, `--on-conflict
+ *                         keep`, no hook-file rewrite. Leftover shards
+ *                         without a local tree stay unfixed (the check reports
+ *                         NA).
  *
  * EVERYTHING else — content drift between platform copies, a missing script, a
  * missing Codex counterpart, an unquoted `$CLAUDE_PROJECT_DIR`, a stale

package/dist/lib/doctor/fix/remediation.js

@@ -24,9 +24,11 @@
  *                         never auto-registered: that is what created them.)
  *   - `refresh-sync`    — run a targeted pull for a company journal that is
  *                         stale or never-synced AND has a local
- *                         `companies/<slug>` tree. Pull-only, `--on-conflict
- *                         keep`, no hook-file rewrite. Personal journals and
- *                         leftover shards without a local tree stay manual.
+ *                         `companies/<slug>` tree, or for a live personal /
+ *                         personal-vault journal. Pull-only, `--on-conflict
+ *                         keep`, no hook-file rewrite. Leftover shards
+ *                         without a local tree stay unfixed (the check reports
+ *                         NA).
  *
  * EVERYTHING else — content drift between platform copies, a missing script, a
  * missing Codex counterpart, an unquoted `$CLAUDE_PROJECT_DIR`, a stale
@@ -36,7 +38,7 @@
  * content-drift finding is manual-only, because that boundary is load-bearing:
  * deciding which of two diverged copies is correct needs human judgement.
  */
-import { isCompanyJournalSlug, journalSlugFromCheckId, } from "../checks/sync-health.js";
+import { isCompanyJournalSlug, isPersonalJournalSlug, journalSlugFromCheckId, } from "../checks/sync-health.js";
 /** Matches an exec-bit remediation command, quoted or not: `chmod +x <path>`. */
 const CHMOD_EXEC = /^chmod\s+\+x\s+(.+)$/;
 /**
@@ -117,10 +119,22 @@ export function deriveRemediation(result) {
             command: remediation ?? `hq bot start ${target}`,
         };
     }
-    // refresh-sync — a company journal that is stale or never-synced. Only
-    // company slugs: personal shards have no companies/<slug> tree and a
-    // SessionStart `--fix --yes` must not pull the personal vault unprompted.
+    // refresh-sync — a company journal that is stale or never-synced, or a
+    // live personal / personal-vault journal. Leftover shards are NA at the
+    // check layer, so they never reach this classifier. A SessionStart
+    // `--fix --yes` pull is keep-conflicts and pull-only, matching the
+    // company repair: leaving personal journals WARN made the health hook
+    // report an unrepaired failure for a row doctor refused to touch.
     const journalSlug = journalSlugFromCheckId(checkId);
+    if (journalSlug && isPersonalJournalSlug(journalSlug)) {
+        return {
+            autoFixable: true,
+            fixClass: "refresh-sync",
+            fixTarget: "personal",
+            action: "Pull the personal vault to refresh its sync journal (keeps local conflict copies).",
+            command: "hq sync pull --personal --on-conflict keep",
+        };
+    }
     if (journalSlug && isCompanyJournalSlug(journalSlug)) {
         return {
             autoFixable: true,

package/dist/lib/doctor/types.d.ts

@@ -19,7 +19,7 @@ export declare const DOCTOR_STATUSES: readonly ["PASS", "FAIL", "WARN", "UNTESTE
  */
 export type DoctorStatus = (typeof DOCTOR_STATUSES)[number];
 /** Stable, privacy-safe diagnostics emitted by the sync health family. */
-export declare const SYNC_REASON_CODES: readonly ["core-version-unavailable", "core-update-available", "no-local-tree", "never-synced", "invalid-last-sync", "stale-threshold", "manifest-unavailable", "manifest-state-unavailable", "no-manifest-scopes", "never-uploaded", "invalid-upload-time", "unresolved-company-uid", "realtime-lag-stuck", "receiver-permission-denied", "runner-restart-loop", "device-limit-backoff", "repeated-conflicts"];
+export declare const SYNC_REASON_CODES: readonly ["core-version-unavailable", "core-update-available", "no-local-tree", "legacy-personal-journal", "never-synced", "invalid-last-sync", "stale-threshold", "manifest-unavailable", "manifest-state-unavailable", "no-manifest-scopes", "never-uploaded", "invalid-upload-time", "unresolved-company-uid", "realtime-lag-stuck", "receiver-permission-denied", "runner-restart-loop", "device-limit-backoff", "repeated-conflicts"];
 export type SyncReasonCode = (typeof SYNC_REASON_CODES)[number];
 /** Runtime type guard: true only for a member of the fixed vocabulary. */
 export declare function isDoctorStatus(value: unknown): value is DoctorStatus;

package/dist/lib/doctor/types.js

@@ -26,6 +26,7 @@ export const SYNC_REASON_CODES = [
     "core-version-unavailable",
     "core-update-available",
     "no-local-tree",
+    "legacy-personal-journal",
     "never-synced",
     "invalid-last-sync",
     "stale-threshold",