@indigoai-us/hq-cli 5.35.0 → 5.35.1

package/dist/commands/cloud.d.ts

@@ -104,6 +104,7 @@ export interface ShareCallOptions {
     message?: string;
     skipUnchanged?: boolean;
     propagateDeletes?: boolean;
+    propagateDeletePolicy?: "owned-only" | "currency-gated" | "all";
 }
 export interface ShareCallResult {
     filesUploaded: number;

package/dist/commands/cloud.js

@@ -13,13 +13,40 @@
  *   hq sync status            — show local journal summary
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bdaf154f-b17d-5482-9e4d-feaebe606a1b")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="94a293c9-eb80-5100-a3e0-d64c93f7165c")}catch(e){}}();
 import chalk from "chalk";
 import * as fs from "fs";
 import * as path from "path";
 import { share, sync, readJournal, getJournalPath, loadCachedTokens, VaultClient, computePersonalVaultPaths, } from "@indigoai-us/hq-cloud";
 import { DEFAULT_HQ_ROOT, ensureCognitoToken, buildVaultConfig, } from "../utils/cognito-session.js";
 import { emitNarrowHint, isStrictRefusal, resolveBannerLevel, } from "../lib/narrow-hint-banner.js";
+/**
+ * Resolve the `propagateDeletePolicy` for share() calls.
+ *
+ * Mirrors `@indigoai-us/hq-cloud`'s `bin/sync-runner.js` `resolveDeletePolicy`
+ * — the same function the AppBar HQ Sync menubar uses — so the CLI and the
+ * menubar agree on the policy by default. Inlined here (rather than
+ * deep-imported from `dist/bin/sync-runner.js`) to avoid coupling to a
+ * non-public subpath.
+ *
+ * Default is `"currency-gated"` (etag-verified safe delete). Override via
+ * the `HQ_SYNC_DELETE_POLICY` env var: `owned-only` (legacy direction-of-
+ * origin filter, multi-user safe but stranded down-stream litter on
+ * personal vaults until hq-cloud 6.0.1's prs_ override), `currency-gated`
+ * (the menubar default), or `all` (emergency-reconcile, no safety gates).
+ *
+ * Prior to this helper, the CLI passed nothing → share() fell through to
+ * its own `"owned-only"` default, leaving CLI users on a stricter (and
+ * sometimes wrong, on personal vault) policy than menubar users for
+ * months. See `workspace/reports/owned-only-delete-policy-purpose-debug.md`.
+ */
+function resolveDeletePolicy() {
+    const env = process.env.HQ_SYNC_DELETE_POLICY;
+    if (env === "owned-only" || env === "all" || env === "currency-gated") {
+        return env;
+    }
+    return "currency-gated";
+}
 // Oldest-first by createdAt, ties broken by uid lexicographic — matches
 // `pickCanonicalPersonEntity` in @indigoai-us/hq-cloud so the CLI lands on
 // the same person bucket that `hq-sync-runner` picks.
@@ -171,6 +198,7 @@ export async function pushAll(options, deps) {
                 paths: [path.join(options.hqRoot, "companies", slug)],
                 skipUnchanged: true,
                 propagateDeletes: true,
+                propagateDeletePolicy: resolveDeletePolicy(),
                 ...(options.onConflict ? { onConflict: options.onConflict } : {}),
                 ...(options.message ? { message: options.message } : {}),
             },
@@ -188,6 +216,7 @@ export async function pushAll(options, deps) {
                 journalSlug: "personal",
                 skipUnchanged: true,
                 propagateDeletes: true,
+                propagateDeletePolicy: resolveDeletePolicy(),
                 ...(options.onConflict ? { onConflict: options.onConflict } : {}),
                 ...(options.message ? { message: options.message } : {}),
             },
@@ -869,6 +898,9 @@ async function runPushAll(hqRoot, message, onConflict, skipPersonal) {
                 ...(opts.propagateDeletes !== undefined
                     ? { propagateDeletes: opts.propagateDeletes }
                     : {}),
+                ...(opts.propagateDeletePolicy !== undefined
+                    ? { propagateDeletePolicy: opts.propagateDeletePolicy }
+                    : {}),
                 ...(author ? { author } : {}),
             }),
         });
@@ -949,6 +981,7 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
             hqRoot,
             skipUnchanged: true,
             propagateDeletes: true,
+            propagateDeletePolicy: resolveDeletePolicy(),
             ...(onConflict ? { onConflict } : {}),
             ...(message ? { message } : {}),
             ...(personalMode ? { personalMode: true } : {}),
@@ -1130,4 +1163,4 @@ function resolveUploadAuthorFromCache() {
     }
 }
 //# sourceMappingURL=cloud.js.map
-//# debugId=bdaf154f-b17d-5482-9e4d-feaebe606a1b
+//# debugId=94a293c9-eb80-5100-a3e0-d64c93f7165c

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.35.0",
-  "description": "HQ by Indigo management CLI — modules and cloud sync",
+  "version": "5.35.1",
+  "description": "HQ by Indigo management CLI \u2014 modules and cloud sync",
   "main": "dist/index.js",
   "bin": {
     "hq": "dist/index.js",
@@ -15,7 +15,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@indigoai-us/hq-cloud": "^6.0.0",
+    "@indigoai-us/hq-cloud": "^6.0.1",
     "@indigoai-us/hq-onboarding": "^0.1.0",
     "@sentry/node": "^10.49.0",
     "chalk": "^5.3.0",

package/src/commands/cloud.ts

@@ -45,6 +45,34 @@ import {
   type BannerLevel,
 } from "../lib/narrow-hint-banner.js";
 
+/**
+ * Resolve the `propagateDeletePolicy` for share() calls.
+ *
+ * Mirrors `@indigoai-us/hq-cloud`'s `bin/sync-runner.js` `resolveDeletePolicy`
+ * — the same function the AppBar HQ Sync menubar uses — so the CLI and the
+ * menubar agree on the policy by default. Inlined here (rather than
+ * deep-imported from `dist/bin/sync-runner.js`) to avoid coupling to a
+ * non-public subpath.
+ *
+ * Default is `"currency-gated"` (etag-verified safe delete). Override via
+ * the `HQ_SYNC_DELETE_POLICY` env var: `owned-only` (legacy direction-of-
+ * origin filter, multi-user safe but stranded down-stream litter on
+ * personal vaults until hq-cloud 6.0.1's prs_ override), `currency-gated`
+ * (the menubar default), or `all` (emergency-reconcile, no safety gates).
+ *
+ * Prior to this helper, the CLI passed nothing → share() fell through to
+ * its own `"owned-only"` default, leaving CLI users on a stricter (and
+ * sometimes wrong, on personal vault) policy than menubar users for
+ * months. See `workspace/reports/owned-only-delete-policy-purpose-debug.md`.
+ */
+function resolveDeletePolicy(): "owned-only" | "currency-gated" | "all" {
+  const env = process.env.HQ_SYNC_DELETE_POLICY;
+  if (env === "owned-only" || env === "all" || env === "currency-gated") {
+    return env;
+  }
+  return "currency-gated";
+}
+
 interface CommonSyncOptions {
   hqRoot: string;
   company?: string;
@@ -164,6 +192,7 @@ export interface ShareCallOptions {
   message?: string;
   skipUnchanged?: boolean;
   propagateDeletes?: boolean;
+  propagateDeletePolicy?: "owned-only" | "currency-gated" | "all";
 }
 
 export interface ShareCallResult {
@@ -397,6 +426,7 @@ export async function pushAll(
         paths: [path.join(options.hqRoot, "companies", slug)],
         skipUnchanged: true,
         propagateDeletes: true,
+        propagateDeletePolicy: resolveDeletePolicy(),
         ...(options.onConflict ? { onConflict: options.onConflict } : {}),
         ...(options.message ? { message: options.message } : {}),
       },
@@ -415,6 +445,7 @@ export async function pushAll(
         journalSlug: "personal",
         skipUnchanged: true,
         propagateDeletes: true,
+        propagateDeletePolicy: resolveDeletePolicy(),
         ...(options.onConflict ? { onConflict: options.onConflict } : {}),
         ...(options.message ? { message: options.message } : {}),
       },
@@ -1406,6 +1437,9 @@ async function runPushAll(
             ...(opts.propagateDeletes !== undefined
               ? { propagateDeletes: opts.propagateDeletes }
               : {}),
+            ...(opts.propagateDeletePolicy !== undefined
+              ? { propagateDeletePolicy: opts.propagateDeletePolicy }
+              : {}),
             ...(author ? { author } : {}),
           }),
       },
@@ -1505,6 +1539,7 @@ async function runNowSingle(
       hqRoot,
       skipUnchanged: true,
       propagateDeletes: true,
+      propagateDeletePolicy: resolveDeletePolicy(),
       ...(onConflict ? { onConflict } : {}),
       ...(message ? { message } : {}),
       ...(personalMode ? { personalMode: true } : {}),