@indigoai-us/hq-cli 5.77.13 → 5.78.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (307) hide show
  1. package/CHANGELOG.md +34 -0
  2. package/assets/scaffold/core/scripts/archive-old-threads.sh +86 -0
  3. package/assets/scaffold/core/scripts/backfill-company-skill-mirrors.sh +73 -0
  4. package/assets/scaffold/core/scripts/backfill-workspace-mirror.sh +51 -0
  5. package/assets/scaffold/core/scripts/codex-skill-bridge.sh +550 -0
  6. package/assets/scaffold/core/scripts/detect-stale-core-policy-mirror.sh +185 -0
  7. package/assets/scaffold/core/scripts/hq-status-summary.sh +187 -0
  8. package/assets/scaffold/core/scripts/ontology-readme-drift.sh +264 -0
  9. package/assets/scaffold/core/scripts/qmd-reindex-after-sync.sh +93 -0
  10. package/assets/scaffold/core/scripts/rebuild-all-indexes.sh +69 -0
  11. package/assets/scaffold/core/scripts/rebuild-companies-index.sh +206 -0
  12. package/assets/scaffold/core/scripts/rebuild-company-knowledge-index.sh +127 -0
  13. package/assets/scaffold/core/scripts/rebuild-orchestrator-index.sh +86 -0
  14. package/assets/scaffold/core/scripts/rebuild-projects-index.sh +105 -0
  15. package/assets/scaffold/core/scripts/rebuild-public-knowledge-index.sh +83 -0
  16. package/assets/scaffold/core/scripts/rebuild-reports-index.sh +114 -0
  17. package/assets/scaffold/core/scripts/rebuild-social-drafts-index.sh +135 -0
  18. package/assets/scaffold/core/scripts/rebuild-threads-index.sh +82 -0
  19. package/assets/scaffold/core/scripts/rebuild-workers-index.sh +97 -0
  20. package/assets/scaffold/core/scripts/resize-screenshot.sh +47 -0
  21. package/assets/scaffold/core/scripts/token-usage-report.sh +254 -0
  22. package/assets/scaffold/core/scripts/worktree.sh +136 -0
  23. package/dist/commands/agents.js +28 -12
  24. package/dist/commands/api-keys.js +100 -20
  25. package/dist/commands/core.d.ts +90 -0
  26. package/dist/commands/core.js +279 -0
  27. package/dist/commands/files-browse.d.ts +21 -0
  28. package/dist/commands/files-browse.js +145 -24
  29. package/dist/commands/files.js +33 -7
  30. package/dist/commands/members.js +16 -5
  31. package/dist/commands/pack-install.d.ts +14 -0
  32. package/dist/commands/pack-install.js +51 -2
  33. package/dist/commands/pkg-install.js +43 -0
  34. package/dist/commands/run.js +8 -0
  35. package/dist/commands/secrets.js +125 -65
  36. package/dist/main.js +6 -0
  37. package/dist/utils/api-key-command-gate.d.ts +45 -0
  38. package/dist/utils/api-key-command-gate.js +51 -0
  39. package/dist/utils/hq-roots.d.ts +91 -0
  40. package/dist/utils/hq-roots.js +212 -0
  41. package/dist/utils/resolve-vault-credential.d.ts +63 -3
  42. package/dist/utils/resolve-vault-credential.js +152 -6
  43. package/dist/utils/run-bundled-script.d.ts +66 -0
  44. package/dist/utils/run-bundled-script.js +80 -0
  45. package/dist/utils/vault-api.d.ts +21 -0
  46. package/dist/utils/vault-api.js +74 -3
  47. package/package.json +7 -1
  48. package/.claude/policies/hq-cli-interactive-reads-use-sts-vend.md +0 -49
  49. package/.github/workflows/ci.yml +0 -46
  50. package/.github/workflows/publish.yml +0 -36
  51. package/.github/workflows/scripts/smoke-test-pkg.sh +0 -97
  52. package/e2e/cli.test.ts +0 -128
  53. package/eslint.config.js +0 -37
  54. package/pnpm-workspace.yaml +0 -4
  55. package/scripts/chmod-bins.mjs +0 -49
  56. package/scripts/generate-dsn.mjs +0 -26
  57. package/scripts/generate-scan-packages-table.mjs +0 -113
  58. package/scripts/smoke-sources-signals.sh +0 -103
  59. package/src/bin/hq-auth-refresh.ts +0 -43
  60. package/src/cli-version.ts +0 -13
  61. package/src/commands/__fixtures__/make-tar.ts +0 -126
  62. package/src/commands/_patterns.ts +0 -10
  63. package/src/commands/add.ts +0 -75
  64. package/src/commands/agents.test.ts +0 -527
  65. package/src/commands/agents.ts +0 -923
  66. package/src/commands/api-keys.test.ts +0 -291
  67. package/src/commands/api-keys.ts +0 -382
  68. package/src/commands/artifact-verify.test.ts +0 -177
  69. package/src/commands/auth.test.ts +0 -82
  70. package/src/commands/auth.ts +0 -213
  71. package/src/commands/billing.test.ts +0 -158
  72. package/src/commands/billing.ts +0 -146
  73. package/src/commands/channels.test.ts +0 -74
  74. package/src/commands/channels.ts +0 -91
  75. package/src/commands/cloud-demote.test.ts +0 -401
  76. package/src/commands/cloud-demote.ts +0 -278
  77. package/src/commands/cloud-provision.test.ts +0 -1117
  78. package/src/commands/cloud-provision.ts +0 -942
  79. package/src/commands/cloud.pull-all.test.ts +0 -711
  80. package/src/commands/cloud.pull-per-company.test.ts +0 -188
  81. package/src/commands/cloud.push-all.test.ts +0 -485
  82. package/src/commands/cloud.scope-excluded-warning.test.ts +0 -22
  83. package/src/commands/cloud.selectors.test.ts +0 -208
  84. package/src/commands/cloud.status.test.ts +0 -160
  85. package/src/commands/cloud.test.ts +0 -41
  86. package/src/commands/cloud.ts +0 -2130
  87. package/src/commands/company.test.ts +0 -202
  88. package/src/commands/company.ts +0 -148
  89. package/src/commands/creators.test.ts +0 -60
  90. package/src/commands/creators.ts +0 -117
  91. package/src/commands/crm.test.ts +0 -179
  92. package/src/commands/crm.ts +0 -236
  93. package/src/commands/db-migrate.ts +0 -55
  94. package/src/commands/db-provision.ts +0 -114
  95. package/src/commands/db-sql.ts +0 -124
  96. package/src/commands/db-status.ts +0 -108
  97. package/src/commands/db.ts +0 -26
  98. package/src/commands/dm.test.ts +0 -748
  99. package/src/commands/dm.ts +0 -1226
  100. package/src/commands/feedback.test.ts +0 -413
  101. package/src/commands/feedback.ts +0 -169
  102. package/src/commands/files-browse.test.ts +0 -1249
  103. package/src/commands/files-browse.ts +0 -1506
  104. package/src/commands/files-delete.test.ts +0 -484
  105. package/src/commands/files-recovery.test.ts +0 -370
  106. package/src/commands/files.test.ts +0 -722
  107. package/src/commands/files.ts +0 -1446
  108. package/src/commands/group-grants.test.ts +0 -330
  109. package/src/commands/group-grants.ts +0 -455
  110. package/src/commands/groups.test.ts +0 -44
  111. package/src/commands/groups.ts +0 -368
  112. package/src/commands/integrations.test.ts +0 -633
  113. package/src/commands/integrations.ts +0 -507
  114. package/src/commands/list.ts +0 -85
  115. package/src/commands/login.ts +0 -52
  116. package/src/commands/logout.ts +0 -30
  117. package/src/commands/marketplace-install.test.ts +0 -543
  118. package/src/commands/marketplace-security.test.ts +0 -646
  119. package/src/commands/mcp-registration.test.ts +0 -2787
  120. package/src/commands/mcp-registration.ts +0 -2612
  121. package/src/commands/mcp-status.test.ts +0 -483
  122. package/src/commands/mcp-status.ts +0 -575
  123. package/src/commands/mcp-status.us011.test.ts +0 -243
  124. package/src/commands/meetings.test.ts +0 -522
  125. package/src/commands/meetings.ts +0 -789
  126. package/src/commands/members.test.ts +0 -1474
  127. package/src/commands/members.ts +0 -1181
  128. package/src/commands/onboard-identity-guard.test.ts +0 -99
  129. package/src/commands/onboard-identity-guard.ts +0 -103
  130. package/src/commands/onboard-join.test.ts +0 -96
  131. package/src/commands/onboard-join.ts +0 -101
  132. package/src/commands/onboard-warning.test.ts +0 -26
  133. package/src/commands/onboard-warning.ts +0 -12
  134. package/src/commands/onboard.ts +0 -267
  135. package/src/commands/outposts-heartbeat.test.ts +0 -299
  136. package/src/commands/outposts-heartbeat.ts +0 -310
  137. package/src/commands/outposts-replica-sync.test.ts +0 -272
  138. package/src/commands/outposts-self-deploy.test.ts +0 -243
  139. package/src/commands/outposts.test.ts +0 -1039
  140. package/src/commands/outposts.ts +0 -1935
  141. package/src/commands/pack-install-secret-authorization.test.ts +0 -115
  142. package/src/commands/pack-install.test.ts +0 -1469
  143. package/src/commands/pack-install.ts +0 -2247
  144. package/src/commands/pack-update-cache.test.ts +0 -149
  145. package/src/commands/packs.test.ts +0 -88
  146. package/src/commands/packs.ts +0 -622
  147. package/src/commands/people.test.ts +0 -807
  148. package/src/commands/people.ts +0 -422
  149. package/src/commands/pkg-install.dispatch.test.ts +0 -71
  150. package/src/commands/pkg-install.ts +0 -215
  151. package/src/commands/pkg-list.test.ts +0 -79
  152. package/src/commands/pkg-list.ts +0 -13
  153. package/src/commands/pkg-remove.ts +0 -71
  154. package/src/commands/pkg-update.ts +0 -189
  155. package/src/commands/publish.test.ts +0 -650
  156. package/src/commands/publish.ts +0 -580
  157. package/src/commands/reindex.test.ts +0 -259
  158. package/src/commands/reindex.ts +0 -274
  159. package/src/commands/rescue.test.ts +0 -39
  160. package/src/commands/rescue.ts +0 -210
  161. package/src/commands/run.env-local.test.ts +0 -88
  162. package/src/commands/run.test.ts +0 -45
  163. package/src/commands/run.ts +0 -184
  164. package/src/commands/safe-extract.test.ts +0 -459
  165. package/src/commands/safe-extract.ts +0 -444
  166. package/src/commands/secrets-scope.test.ts +0 -56
  167. package/src/commands/secrets-scope.ts +0 -32
  168. package/src/commands/secrets.parse-destination.test.ts +0 -38
  169. package/src/commands/secrets.test.ts +0 -2037
  170. package/src/commands/secrets.ts +0 -2240
  171. package/src/commands/signals.ts +0 -351
  172. package/src/commands/skill.test.ts +0 -770
  173. package/src/commands/skill.ts +0 -796
  174. package/src/commands/sources.ts +0 -362
  175. package/src/commands/sync-mode.test.ts +0 -366
  176. package/src/commands/sync-mode.ts +0 -387
  177. package/src/commands/sync-narrow.test.ts +0 -633
  178. package/src/commands/sync-narrow.ts +0 -555
  179. package/src/commands/sync.ts +0 -165
  180. package/src/commands/team-sync.ts +0 -628
  181. package/src/commands/update.ts +0 -71
  182. package/src/commands/whoami.ts +0 -83
  183. package/src/commands/workers.test.ts +0 -158
  184. package/src/commands/workers.ts +0 -301
  185. package/src/index.test.ts +0 -32
  186. package/src/index.ts +0 -20
  187. package/src/lib/db/control-plane.test.ts +0 -59
  188. package/src/lib/db/control-plane.ts +0 -113
  189. package/src/lib/db/local.test.ts +0 -81
  190. package/src/lib/db/local.ts +0 -148
  191. package/src/lib/db/migrate.test.ts +0 -133
  192. package/src/lib/db/migrate.ts +0 -137
  193. package/src/lib/db/paths.test.ts +0 -112
  194. package/src/lib/db/paths.ts +0 -128
  195. package/src/lib/db/remote-engine.test.ts +0 -44
  196. package/src/lib/db/remote-engine.ts +0 -148
  197. package/src/lib/db/remote-sql.test.ts +0 -32
  198. package/src/lib/db/remote-sql.ts +0 -62
  199. package/src/lib/db/sql.test.ts +0 -106
  200. package/src/lib/db/sql.ts +0 -192
  201. package/src/lib/hq-cloud-dep.smoke.test.ts +0 -75
  202. package/src/lib/local-tree-diff.test.ts +0 -301
  203. package/src/lib/local-tree-diff.ts +0 -362
  204. package/src/lib/narrow-hint-banner.test.ts +0 -235
  205. package/src/lib/narrow-hint-banner.ts +0 -212
  206. package/src/lib/plan-limit-nag.test.ts +0 -317
  207. package/src/lib/plan-limit-nag.ts +0 -264
  208. package/src/main.ts +0 -371
  209. package/src/node-preflight.test.ts +0 -60
  210. package/src/node-preflight.ts +0 -67
  211. package/src/outpost/session-heartbeat-bounds.test.ts +0 -195
  212. package/src/outpost/session-heartbeat-guard.test.ts +0 -105
  213. package/src/outpost/session-heartbeat-publisher.test.ts +0 -178
  214. package/src/outpost/session-heartbeat-publisher.ts +0 -186
  215. package/src/outpost/session-heartbeat-retain-guard.test.ts +0 -126
  216. package/src/outpost/session-heartbeat.test.ts +0 -459
  217. package/src/outpost/session-heartbeat.ts +0 -877
  218. package/src/packaging.test.ts +0 -109
  219. package/src/run/__fixtures__/discover-schemas/example.env.schema +0 -4
  220. package/src/run/discover-schemas.test.ts +0 -153
  221. package/src/run/discover-schemas.ts +0 -79
  222. package/src/run/hq-plugin.test.ts +0 -371
  223. package/src/run/hq-plugin.ts +0 -277
  224. package/src/run/varlock-shape.test.ts +0 -57
  225. package/src/schemas/hq-package.schema.json +0 -155
  226. package/src/sentry-before-send.test.ts +0 -359
  227. package/src/sentry-before-send.ts +0 -221
  228. package/src/sentry-epipe.test.ts +0 -37
  229. package/src/sentry-release.test.ts +0 -54
  230. package/src/sentry.test.ts +0 -24
  231. package/src/sentry.ts +0 -54
  232. package/src/strategies/link.ts +0 -62
  233. package/src/strategies/merge.ts +0 -142
  234. package/src/types.ts +0 -146
  235. package/src/utils/__fixtures__/scan-packages.generated-block.sh +0 -23
  236. package/src/utils/auth-error.test.ts +0 -40
  237. package/src/utils/auth-error.ts +0 -42
  238. package/src/utils/billing-gate.test.ts +0 -95
  239. package/src/utils/billing-gate.ts +0 -228
  240. package/src/utils/breadcrumb-buffer.ts +0 -18
  241. package/src/utils/cli-telemetry.test.ts +0 -153
  242. package/src/utils/cli-telemetry.ts +0 -61
  243. package/src/utils/cognito-session.machine.test.ts +0 -109
  244. package/src/utils/cognito-session.refresh.test.ts +0 -84
  245. package/src/utils/cognito-session.test.ts +0 -328
  246. package/src/utils/cognito-session.ts +0 -448
  247. package/src/utils/company-selection-error.test.ts +0 -42
  248. package/src/utils/company-selection-error.ts +0 -45
  249. package/src/utils/contribution-table.ts +0 -83
  250. package/src/utils/environmental-error.test.ts +0 -45
  251. package/src/utils/environmental-error.ts +0 -39
  252. package/src/utils/epipe.test.ts +0 -28
  253. package/src/utils/epipe.ts +0 -29
  254. package/src/utils/expected-cli-error.test.ts +0 -28
  255. package/src/utils/expected-cli-error.ts +0 -39
  256. package/src/utils/feedback-diagnostics.test.ts +0 -183
  257. package/src/utils/feedback-diagnostics.ts +0 -123
  258. package/src/utils/feedback-screenshots.test.ts +0 -134
  259. package/src/utils/feedback-screenshots.ts +0 -124
  260. package/src/utils/feedback-versions.test.ts +0 -98
  261. package/src/utils/feedback-versions.ts +0 -68
  262. package/src/utils/git.ts +0 -74
  263. package/src/utils/integrity.ts +0 -59
  264. package/src/utils/intercepted-process-exit.test.ts +0 -37
  265. package/src/utils/intercepted-process-exit.ts +0 -36
  266. package/src/utils/login-provider.test.ts +0 -42
  267. package/src/utils/login-provider.ts +0 -30
  268. package/src/utils/manifest.test.ts +0 -167
  269. package/src/utils/manifest.ts +0 -131
  270. package/src/utils/pack-contributions.test.ts +0 -603
  271. package/src/utils/pack-contributions.ts +0 -450
  272. package/src/utils/people.ts +0 -215
  273. package/src/utils/registry-client.ts +0 -204
  274. package/src/utils/registry.ts +0 -90
  275. package/src/utils/resolve-vault-credential.test.ts +0 -69
  276. package/src/utils/resolve-vault-credential.ts +0 -60
  277. package/src/utils/sandbox-runner-client.test.ts +0 -279
  278. package/src/utils/sandbox-runner-client.ts +0 -260
  279. package/src/utils/secrets-cache.ts +0 -183
  280. package/src/utils/sentry-identity.ts +0 -45
  281. package/src/utils/settle-with-timeout.test.ts +0 -21
  282. package/src/utils/settle-with-timeout.ts +0 -22
  283. package/src/utils/user-yaml-error.test.ts +0 -24
  284. package/src/utils/user-yaml-error.ts +0 -30
  285. package/src/utils/vault-api.test.ts +0 -536
  286. package/src/utils/vault-api.ts +0 -382
  287. package/src/utils/version-check.test.ts +0 -176
  288. package/src/utils/version-check.ts +0 -155
  289. package/src/utils/version-gate.test.ts +0 -1024
  290. package/src/utils/version-gate.ts +0 -702
  291. package/test/commands/db-tenant-isolation.test.ts +0 -94
  292. package/test/commands/db.test.ts +0 -85
  293. package/test/commands/signals.test.ts +0 -207
  294. package/test/commands/sources.test.ts +0 -231
  295. package/test/e2e/smoke-install-mcp.sh +0 -113
  296. package/test/fixtures/hq-pack-smoke-mcp/mcp/smoke-http.json +0 -1
  297. package/test/fixtures/hq-pack-smoke-mcp/package.yaml +0 -11
  298. package/test/fixtures/signals/action_item/sample.md +0 -16
  299. package/test/fixtures/signals/summary/sample.md +0 -12
  300. package/test/fixtures/sources/meetings/sample.md +0 -25
  301. package/test/helpers/cli-runner.ts +0 -150
  302. package/test/helpers/s3-list-mock.ts +0 -79
  303. package/test/helpers/vault-service-mock.ts +0 -295
  304. package/test/sources-signals/smoke.test.ts +0 -228
  305. package/tsconfig.json +0 -20
  306. package/vitest.config.ts +0 -11
  307. package/vitest.e2e.config.ts +0 -7
@@ -1,387 +0,0 @@
1
- /**
2
- * `hq sync mode <mode>` (US-006) — flip a membership's syncMode for a company.
3
- *
4
- * Subcommand of the `hq sync` group. Three call shapes:
5
- *
6
- * hq sync mode shared|all|custom [--company <slug>]
7
- * Resolves the target membership for the given company (or the cwd's
8
- * active company from `.hq/config.json` if `--company` is omitted) and
9
- * calls `VaultClient.setMembershipSyncConfig`. Prints membershipId +
10
- * previous mode → new mode as a chat audit trail.
11
- *
12
- * hq sync mode --show
13
- * No positional. Prints a table of every membership the caller has
14
- * with its company slug, current sync-mode, and last-updated stamp.
15
- *
16
- * hq sync mode custom --paths a/,b/ (planned follow-up)
17
- * For the `custom` mode the server requires `customPaths`. This command
18
- * accepts `--paths` as a comma-separated list to forward to the API; if
19
- * omitted on `custom` the server validation will reject.
20
- *
21
- * Auto-detect of `--company` from cwd: best-effort via the active-company
22
- * slug in `<hq-root>/.hq/config.json`. If absent, the caller must pass
23
- * `--company` explicitly — there's no cwd-walk to a `companies/<slug>/`
24
- * folder in this initial implementation (follow-up US could add it).
25
- *
26
- * Cross-package note: this command depends on `VaultClient`
27
- * (`getMembershipSyncConfig` / `setMembershipSyncConfig`) added in
28
- * hq-cloud US-004 (commit 41e5ee1). While that hq-cloud release is
29
- * unpublished, hq-cli pins `@indigoai-us/hq-cloud` to `file:../hq-cloud`
30
- * in package.json — revert that line to `^5.20.0` (or whatever the
31
- * published cut is) once US-004 ships to npm.
32
- */
33
-
34
- import { Command } from "commander";
35
- import chalk from "chalk";
36
- import * as fs from "node:fs";
37
- import * as path from "node:path";
38
-
39
- import {
40
- VaultClient,
41
- type MembershipSyncConfig,
42
- type Membership,
43
- type SyncMode,
44
- } from "@indigoai-us/hq-cloud";
45
-
46
- import {
47
- DEFAULT_HQ_ROOT,
48
- ensureCognitoToken,
49
- buildVaultConfig,
50
- } from "../utils/cognito-session.js";
51
-
52
- // ── Constants ───────────────────────────────────────────────────────────────
53
-
54
- export const LEGAL_SYNC_MODES: readonly SyncMode[] = [
55
- "shared",
56
- "all",
57
- "custom",
58
- ] as const;
59
-
60
- // ── Types ───────────────────────────────────────────────────────────────────
61
-
62
- /** Subset of VaultClient surface this command exercises (test seam). */
63
- export interface SyncModeVaultClient {
64
- listMyMemberships(): Promise<Membership[]>;
65
- getMembershipSyncConfig(membershipId: string): Promise<MembershipSyncConfig>;
66
- setMembershipSyncConfig(
67
- membershipId: string,
68
- partial: { syncMode: SyncMode; customPaths?: string[] },
69
- ): Promise<MembershipSyncConfig>;
70
- entity: {
71
- get(uid: string): Promise<{ uid: string; slug: string; name?: string }>;
72
- };
73
- }
74
-
75
- export interface SetSyncModeOptions {
76
- /** Validated mode — already known to be a legal SyncMode. */
77
- mode: SyncMode;
78
- /** Company slug (caller-provided or resolved from cwd). Required. */
79
- companySlug: string;
80
- /** Required when `mode === "custom"`. Server rejects otherwise. */
81
- customPaths?: string[];
82
- /** Injected vault client (real impl built from access token by default). */
83
- vaultClient: SyncModeVaultClient;
84
- }
85
-
86
- export interface SetSyncModeResult {
87
- membershipId: string;
88
- companySlug: string;
89
- previousMode: SyncMode;
90
- newMode: SyncMode;
91
- previousWasDefault: boolean;
92
- newConfig: MembershipSyncConfig;
93
- }
94
-
95
- export interface ShowSyncModesOptions {
96
- vaultClient: SyncModeVaultClient;
97
- }
98
-
99
- export interface ShowSyncModesRow {
100
- companySlug: string;
101
- companyName?: string;
102
- membershipId: string;
103
- syncMode: SyncMode;
104
- isDefault: boolean;
105
- updatedAt?: string;
106
- }
107
-
108
- // ── Pure helpers ────────────────────────────────────────────────────────────
109
-
110
- /** Throws a helpful Error if `mode` is not a legal SyncMode. */
111
- export function validateMode(mode: string): SyncMode {
112
- if ((LEGAL_SYNC_MODES as readonly string[]).includes(mode)) {
113
- return mode as SyncMode;
114
- }
115
- throw new Error(
116
- `Invalid sync mode '${mode}'. Legal values: ${LEGAL_SYNC_MODES.join(", ")}.`,
117
- );
118
- }
119
-
120
- /**
121
- * Read the active company slug from `<hq-root>/.hq/config.json`. Returns
122
- * undefined when the file is missing or `activeCompany` isn't set. Never
123
- * throws — auto-detect is best-effort.
124
- */
125
- export function readActiveCompanySlug(hqRoot: string): string | undefined {
126
- const configPath = path.join(hqRoot, ".hq", "config.json");
127
- if (!fs.existsSync(configPath)) return undefined;
128
- try {
129
- const cfg = JSON.parse(fs.readFileSync(configPath, "utf-8")) as {
130
- activeCompany?: unknown;
131
- };
132
- const slug = cfg.activeCompany;
133
- return typeof slug === "string" && slug.length > 0 ? slug : undefined;
134
- } catch {
135
- return undefined;
136
- }
137
- }
138
-
139
- /** Parse `--paths a/,b/c/` into trimmed non-empty entries. */
140
- export function parseCustomPaths(raw: string | undefined): string[] | undefined {
141
- if (!raw) return undefined;
142
- const parts = raw
143
- .split(",")
144
- .map((s) => s.trim())
145
- .filter((s) => s.length > 0);
146
- return parts.length > 0 ? parts : undefined;
147
- }
148
-
149
- // ── Orchestrators (pure, injectable — driven by tests) ──────────────────────
150
-
151
- /**
152
- * Resolve a membership by company slug, then PUT the new sync-mode. Returns
153
- * the membershipId, the previous mode (read via GET first), and the server's
154
- * fresh config (which sets `isDefault: false` once a row exists).
155
- */
156
- export async function setSyncMode(
157
- options: SetSyncModeOptions,
158
- ): Promise<SetSyncModeResult> {
159
- const { mode, companySlug, customPaths, vaultClient } = options;
160
-
161
- // 1. Find the caller's membership for this company.
162
- const memberships = await vaultClient.listMyMemberships();
163
- // Resolve slug → uid via entity.get on each membership's companyUid in
164
- // parallel. Cheaper than a per-membership lookup loop and matches the
165
- // pattern AppBar uses to render its company picker.
166
- const enriched = await Promise.all(
167
- memberships.map(async (m) => {
168
- try {
169
- const ent = await vaultClient.entity.get(m.companyUid);
170
- return { membership: m, slug: ent.slug, name: ent.name };
171
- } catch {
172
- return { membership: m, slug: undefined, name: undefined };
173
- }
174
- }),
175
- );
176
-
177
- const match = enriched.find((row) => row.slug === companySlug);
178
- if (!match) {
179
- const known = enriched
180
- .map((r) => r.slug)
181
- .filter((s): s is string => !!s)
182
- .join(", ");
183
- throw new Error(
184
- `No membership found for company '${companySlug}'. Memberships visible to you: ${
185
- known || "(none)"
186
- }.`,
187
- );
188
- }
189
-
190
- const membershipId = match.membership.membershipKey;
191
-
192
- // 2. Read the current config (server defaults to `shared`/isDefault:true
193
- // when no row exists). We surface this in the audit line.
194
- const before = await vaultClient.getMembershipSyncConfig(membershipId);
195
-
196
- // 3. Write the new mode.
197
- const after = await vaultClient.setMembershipSyncConfig(membershipId, {
198
- syncMode: mode,
199
- customPaths,
200
- });
201
-
202
- return {
203
- membershipId,
204
- companySlug,
205
- previousMode: before.syncMode,
206
- previousWasDefault: before.isDefault,
207
- newMode: after.syncMode,
208
- newConfig: after,
209
- };
210
- }
211
-
212
- /**
213
- * Fetch every membership the caller has, resolve company slugs, and look up
214
- * each effective sync-config in parallel. Returns rows sorted by slug for
215
- * stable table output.
216
- */
217
- export async function showSyncModes(
218
- options: ShowSyncModesOptions,
219
- ): Promise<ShowSyncModesRow[]> {
220
- const { vaultClient } = options;
221
- const memberships = await vaultClient.listMyMemberships();
222
- if (memberships.length === 0) return [];
223
-
224
- const rows = await Promise.all(
225
- memberships.map(async (m): Promise<ShowSyncModesRow> => {
226
- const [config, entity] = await Promise.all([
227
- vaultClient.getMembershipSyncConfig(m.membershipKey).catch(
228
- (): MembershipSyncConfig => ({
229
- membershipId: m.membershipKey,
230
- syncMode: "shared",
231
- isDefault: true,
232
- }),
233
- ),
234
- vaultClient.entity
235
- .get(m.companyUid)
236
- .catch(() => ({ uid: m.companyUid, slug: m.companyUid, name: undefined as string | undefined })),
237
- ]);
238
- return {
239
- companySlug: entity.slug,
240
- companyName: entity.name,
241
- membershipId: m.membershipKey,
242
- syncMode: config.syncMode,
243
- isDefault: config.isDefault,
244
- updatedAt: config.updatedAt,
245
- };
246
- }),
247
- );
248
-
249
- rows.sort((a, b) => a.companySlug.localeCompare(b.companySlug));
250
- return rows;
251
- }
252
-
253
- // ── Table rendering (used by CLI action, separable for tests) ──────────────
254
-
255
- /**
256
- * Render the `--show` table as plain text. No external dep — hq-cli doesn't
257
- * use cli-table3, so we hand-format columns to match the existing chalk +
258
- * padEnd pattern used by `hq members list`.
259
- */
260
- export function formatShowTable(rows: ShowSyncModesRow[]): string {
261
- if (rows.length === 0) {
262
- return "No memberships found. Run `hq onboard` or accept an invite first.";
263
- }
264
- const cols = ["COMPANY", "MODE", "UPDATED", "MEMBERSHIP"];
265
- const data = rows.map((r) => [
266
- r.companySlug,
267
- r.isDefault ? `${r.syncMode} (default)` : r.syncMode,
268
- r.updatedAt ?? "—",
269
- r.membershipId,
270
- ]);
271
- const widths = cols.map((c, i) =>
272
- Math.max(c.length, ...data.map((row) => row[i].length)),
273
- );
274
- const renderRow = (row: string[]): string =>
275
- row.map((cell, i) => cell.padEnd(widths[i])).join(" ");
276
- const lines = [
277
- chalk.bold(renderRow(cols)),
278
- chalk.dim(renderRow(widths.map((w) => "─".repeat(w)))),
279
- ...data.map(renderRow),
280
- ];
281
- return lines.join("\n");
282
- }
283
-
284
- // ── CLI registration ────────────────────────────────────────────────────────
285
-
286
- interface SyncModeCliOptions {
287
- company?: string;
288
- show?: boolean;
289
- hqRoot: string;
290
- paths?: string;
291
- }
292
-
293
- /**
294
- * Wire `hq sync mode` onto an existing `sync` Commander group. The caller
295
- * (`src/index.ts`) constructs the `sync` group and calls this after
296
- * `registerCloudCommands` so push/pull/status/mode all coexist.
297
- */
298
- export function registerSyncModeCommand(syncCmd: Command): void {
299
- syncCmd
300
- .command("mode [mode]")
301
- .description(
302
- "Flip a membership's sync-mode (shared|all|custom), or --show every membership's current mode",
303
- )
304
- .option(
305
- "--company <slug>",
306
- "Company slug (defaults to the active company in <hq-root>/.hq/config.json)",
307
- )
308
- .option(
309
- "--show",
310
- "Print the current sync-mode for every membership the caller has",
311
- )
312
- .option(
313
- "--paths <csv>",
314
- "Comma-separated allowed prefixes (required when mode is 'custom')",
315
- )
316
- .option(
317
- "--hq-root <path>",
318
- `Local HQ tree root (default: ${DEFAULT_HQ_ROOT})`,
319
- DEFAULT_HQ_ROOT,
320
- )
321
- .action(async (modeArg: string | undefined, options: SyncModeCliOptions) => {
322
- try {
323
- const accessToken = await ensureCognitoToken();
324
- const vaultConfig = buildVaultConfig(accessToken);
325
- const client = new VaultClient(vaultConfig);
326
-
327
- if (options.show) {
328
- if (modeArg !== undefined) {
329
- throw new Error(
330
- "`--show` is incompatible with a positional <mode>. Pass one or the other.",
331
- );
332
- }
333
- const rows = await showSyncModes({ vaultClient: client });
334
- console.log(formatShowTable(rows));
335
- return;
336
- }
337
-
338
- if (!modeArg) {
339
- throw new Error(
340
- `Missing <mode>. Usage: hq sync mode <${LEGAL_SYNC_MODES.join(
341
- "|",
342
- )}> [--company <slug>] or hq sync mode --show`,
343
- );
344
- }
345
-
346
- const mode = validateMode(modeArg);
347
- const customPaths = parseCustomPaths(options.paths);
348
- const companySlug =
349
- options.company ?? readActiveCompanySlug(options.hqRoot);
350
- if (!companySlug) {
351
- throw new Error(
352
- "No company specified. Pass --company <slug> or set activeCompany in <hq-root>/.hq/config.json.",
353
- );
354
- }
355
-
356
- const result = await setSyncMode({
357
- mode,
358
- companySlug,
359
- customPaths,
360
- vaultClient: client,
361
- });
362
-
363
- const prevLabel = result.previousWasDefault
364
- ? `${result.previousMode} (default)`
365
- : result.previousMode;
366
- console.log(
367
- chalk.green("✓"),
368
- `Set sync-mode for ${chalk.bold(result.companySlug)}: ${chalk.dim(prevLabel)} → ${chalk.bold(result.newMode)}`,
369
- );
370
- console.log(chalk.dim(` membershipId: ${result.membershipId}`));
371
- if (result.newConfig.customPaths && result.newConfig.customPaths.length > 0) {
372
- console.log(
373
- chalk.dim(` customPaths: ${result.newConfig.customPaths.join(", ")}`),
374
- );
375
- }
376
- if (result.newConfig.updatedAt) {
377
- console.log(chalk.dim(` updatedAt: ${result.newConfig.updatedAt}`));
378
- }
379
- } catch (err) {
380
- console.error(
381
- chalk.red("✗ sync mode failed:"),
382
- err instanceof Error ? err.message : String(err),
383
- );
384
- process.exit(1);
385
- }
386
- });
387
- }