@indigoai-us/hq-cli 5.77.13 → 5.78.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +34 -0
- package/assets/scaffold/core/scripts/archive-old-threads.sh +86 -0
- package/assets/scaffold/core/scripts/backfill-company-skill-mirrors.sh +73 -0
- package/assets/scaffold/core/scripts/backfill-workspace-mirror.sh +51 -0
- package/assets/scaffold/core/scripts/codex-skill-bridge.sh +550 -0
- package/assets/scaffold/core/scripts/detect-stale-core-policy-mirror.sh +185 -0
- package/assets/scaffold/core/scripts/hq-status-summary.sh +187 -0
- package/assets/scaffold/core/scripts/ontology-readme-drift.sh +264 -0
- package/assets/scaffold/core/scripts/qmd-reindex-after-sync.sh +93 -0
- package/assets/scaffold/core/scripts/rebuild-all-indexes.sh +69 -0
- package/assets/scaffold/core/scripts/rebuild-companies-index.sh +206 -0
- package/assets/scaffold/core/scripts/rebuild-company-knowledge-index.sh +127 -0
- package/assets/scaffold/core/scripts/rebuild-orchestrator-index.sh +86 -0
- package/assets/scaffold/core/scripts/rebuild-projects-index.sh +105 -0
- package/assets/scaffold/core/scripts/rebuild-public-knowledge-index.sh +83 -0
- package/assets/scaffold/core/scripts/rebuild-reports-index.sh +114 -0
- package/assets/scaffold/core/scripts/rebuild-social-drafts-index.sh +135 -0
- package/assets/scaffold/core/scripts/rebuild-threads-index.sh +82 -0
- package/assets/scaffold/core/scripts/rebuild-workers-index.sh +97 -0
- package/assets/scaffold/core/scripts/resize-screenshot.sh +47 -0
- package/assets/scaffold/core/scripts/token-usage-report.sh +254 -0
- package/assets/scaffold/core/scripts/worktree.sh +136 -0
- package/dist/commands/agents.js +28 -12
- package/dist/commands/api-keys.js +100 -20
- package/dist/commands/core.d.ts +90 -0
- package/dist/commands/core.js +279 -0
- package/dist/commands/files-browse.d.ts +21 -0
- package/dist/commands/files-browse.js +145 -24
- package/dist/commands/files.js +33 -7
- package/dist/commands/members.js +16 -5
- package/dist/commands/pack-install.d.ts +14 -0
- package/dist/commands/pack-install.js +51 -2
- package/dist/commands/pkg-install.js +43 -0
- package/dist/commands/run.js +8 -0
- package/dist/commands/secrets.js +125 -65
- package/dist/main.js +6 -0
- package/dist/utils/api-key-command-gate.d.ts +45 -0
- package/dist/utils/api-key-command-gate.js +51 -0
- package/dist/utils/hq-roots.d.ts +91 -0
- package/dist/utils/hq-roots.js +212 -0
- package/dist/utils/resolve-vault-credential.d.ts +63 -3
- package/dist/utils/resolve-vault-credential.js +152 -6
- package/dist/utils/run-bundled-script.d.ts +66 -0
- package/dist/utils/run-bundled-script.js +80 -0
- package/dist/utils/vault-api.d.ts +21 -0
- package/dist/utils/vault-api.js +74 -3
- package/package.json +7 -1
- package/.claude/policies/hq-cli-interactive-reads-use-sts-vend.md +0 -49
- package/.github/workflows/ci.yml +0 -46
- package/.github/workflows/publish.yml +0 -36
- package/.github/workflows/scripts/smoke-test-pkg.sh +0 -97
- package/e2e/cli.test.ts +0 -128
- package/eslint.config.js +0 -37
- package/pnpm-workspace.yaml +0 -4
- package/scripts/chmod-bins.mjs +0 -49
- package/scripts/generate-dsn.mjs +0 -26
- package/scripts/generate-scan-packages-table.mjs +0 -113
- package/scripts/smoke-sources-signals.sh +0 -103
- package/src/bin/hq-auth-refresh.ts +0 -43
- package/src/cli-version.ts +0 -13
- package/src/commands/__fixtures__/make-tar.ts +0 -126
- package/src/commands/_patterns.ts +0 -10
- package/src/commands/add.ts +0 -75
- package/src/commands/agents.test.ts +0 -527
- package/src/commands/agents.ts +0 -923
- package/src/commands/api-keys.test.ts +0 -291
- package/src/commands/api-keys.ts +0 -382
- package/src/commands/artifact-verify.test.ts +0 -177
- package/src/commands/auth.test.ts +0 -82
- package/src/commands/auth.ts +0 -213
- package/src/commands/billing.test.ts +0 -158
- package/src/commands/billing.ts +0 -146
- package/src/commands/channels.test.ts +0 -74
- package/src/commands/channels.ts +0 -91
- package/src/commands/cloud-demote.test.ts +0 -401
- package/src/commands/cloud-demote.ts +0 -278
- package/src/commands/cloud-provision.test.ts +0 -1117
- package/src/commands/cloud-provision.ts +0 -942
- package/src/commands/cloud.pull-all.test.ts +0 -711
- package/src/commands/cloud.pull-per-company.test.ts +0 -188
- package/src/commands/cloud.push-all.test.ts +0 -485
- package/src/commands/cloud.scope-excluded-warning.test.ts +0 -22
- package/src/commands/cloud.selectors.test.ts +0 -208
- package/src/commands/cloud.status.test.ts +0 -160
- package/src/commands/cloud.test.ts +0 -41
- package/src/commands/cloud.ts +0 -2130
- package/src/commands/company.test.ts +0 -202
- package/src/commands/company.ts +0 -148
- package/src/commands/creators.test.ts +0 -60
- package/src/commands/creators.ts +0 -117
- package/src/commands/crm.test.ts +0 -179
- package/src/commands/crm.ts +0 -236
- package/src/commands/db-migrate.ts +0 -55
- package/src/commands/db-provision.ts +0 -114
- package/src/commands/db-sql.ts +0 -124
- package/src/commands/db-status.ts +0 -108
- package/src/commands/db.ts +0 -26
- package/src/commands/dm.test.ts +0 -748
- package/src/commands/dm.ts +0 -1226
- package/src/commands/feedback.test.ts +0 -413
- package/src/commands/feedback.ts +0 -169
- package/src/commands/files-browse.test.ts +0 -1249
- package/src/commands/files-browse.ts +0 -1506
- package/src/commands/files-delete.test.ts +0 -484
- package/src/commands/files-recovery.test.ts +0 -370
- package/src/commands/files.test.ts +0 -722
- package/src/commands/files.ts +0 -1446
- package/src/commands/group-grants.test.ts +0 -330
- package/src/commands/group-grants.ts +0 -455
- package/src/commands/groups.test.ts +0 -44
- package/src/commands/groups.ts +0 -368
- package/src/commands/integrations.test.ts +0 -633
- package/src/commands/integrations.ts +0 -507
- package/src/commands/list.ts +0 -85
- package/src/commands/login.ts +0 -52
- package/src/commands/logout.ts +0 -30
- package/src/commands/marketplace-install.test.ts +0 -543
- package/src/commands/marketplace-security.test.ts +0 -646
- package/src/commands/mcp-registration.test.ts +0 -2787
- package/src/commands/mcp-registration.ts +0 -2612
- package/src/commands/mcp-status.test.ts +0 -483
- package/src/commands/mcp-status.ts +0 -575
- package/src/commands/mcp-status.us011.test.ts +0 -243
- package/src/commands/meetings.test.ts +0 -522
- package/src/commands/meetings.ts +0 -789
- package/src/commands/members.test.ts +0 -1474
- package/src/commands/members.ts +0 -1181
- package/src/commands/onboard-identity-guard.test.ts +0 -99
- package/src/commands/onboard-identity-guard.ts +0 -103
- package/src/commands/onboard-join.test.ts +0 -96
- package/src/commands/onboard-join.ts +0 -101
- package/src/commands/onboard-warning.test.ts +0 -26
- package/src/commands/onboard-warning.ts +0 -12
- package/src/commands/onboard.ts +0 -267
- package/src/commands/outposts-heartbeat.test.ts +0 -299
- package/src/commands/outposts-heartbeat.ts +0 -310
- package/src/commands/outposts-replica-sync.test.ts +0 -272
- package/src/commands/outposts-self-deploy.test.ts +0 -243
- package/src/commands/outposts.test.ts +0 -1039
- package/src/commands/outposts.ts +0 -1935
- package/src/commands/pack-install-secret-authorization.test.ts +0 -115
- package/src/commands/pack-install.test.ts +0 -1469
- package/src/commands/pack-install.ts +0 -2247
- package/src/commands/pack-update-cache.test.ts +0 -149
- package/src/commands/packs.test.ts +0 -88
- package/src/commands/packs.ts +0 -622
- package/src/commands/people.test.ts +0 -807
- package/src/commands/people.ts +0 -422
- package/src/commands/pkg-install.dispatch.test.ts +0 -71
- package/src/commands/pkg-install.ts +0 -215
- package/src/commands/pkg-list.test.ts +0 -79
- package/src/commands/pkg-list.ts +0 -13
- package/src/commands/pkg-remove.ts +0 -71
- package/src/commands/pkg-update.ts +0 -189
- package/src/commands/publish.test.ts +0 -650
- package/src/commands/publish.ts +0 -580
- package/src/commands/reindex.test.ts +0 -259
- package/src/commands/reindex.ts +0 -274
- package/src/commands/rescue.test.ts +0 -39
- package/src/commands/rescue.ts +0 -210
- package/src/commands/run.env-local.test.ts +0 -88
- package/src/commands/run.test.ts +0 -45
- package/src/commands/run.ts +0 -184
- package/src/commands/safe-extract.test.ts +0 -459
- package/src/commands/safe-extract.ts +0 -444
- package/src/commands/secrets-scope.test.ts +0 -56
- package/src/commands/secrets-scope.ts +0 -32
- package/src/commands/secrets.parse-destination.test.ts +0 -38
- package/src/commands/secrets.test.ts +0 -2037
- package/src/commands/secrets.ts +0 -2240
- package/src/commands/signals.ts +0 -351
- package/src/commands/skill.test.ts +0 -770
- package/src/commands/skill.ts +0 -796
- package/src/commands/sources.ts +0 -362
- package/src/commands/sync-mode.test.ts +0 -366
- package/src/commands/sync-mode.ts +0 -387
- package/src/commands/sync-narrow.test.ts +0 -633
- package/src/commands/sync-narrow.ts +0 -555
- package/src/commands/sync.ts +0 -165
- package/src/commands/team-sync.ts +0 -628
- package/src/commands/update.ts +0 -71
- package/src/commands/whoami.ts +0 -83
- package/src/commands/workers.test.ts +0 -158
- package/src/commands/workers.ts +0 -301
- package/src/index.test.ts +0 -32
- package/src/index.ts +0 -20
- package/src/lib/db/control-plane.test.ts +0 -59
- package/src/lib/db/control-plane.ts +0 -113
- package/src/lib/db/local.test.ts +0 -81
- package/src/lib/db/local.ts +0 -148
- package/src/lib/db/migrate.test.ts +0 -133
- package/src/lib/db/migrate.ts +0 -137
- package/src/lib/db/paths.test.ts +0 -112
- package/src/lib/db/paths.ts +0 -128
- package/src/lib/db/remote-engine.test.ts +0 -44
- package/src/lib/db/remote-engine.ts +0 -148
- package/src/lib/db/remote-sql.test.ts +0 -32
- package/src/lib/db/remote-sql.ts +0 -62
- package/src/lib/db/sql.test.ts +0 -106
- package/src/lib/db/sql.ts +0 -192
- package/src/lib/hq-cloud-dep.smoke.test.ts +0 -75
- package/src/lib/local-tree-diff.test.ts +0 -301
- package/src/lib/local-tree-diff.ts +0 -362
- package/src/lib/narrow-hint-banner.test.ts +0 -235
- package/src/lib/narrow-hint-banner.ts +0 -212
- package/src/lib/plan-limit-nag.test.ts +0 -317
- package/src/lib/plan-limit-nag.ts +0 -264
- package/src/main.ts +0 -371
- package/src/node-preflight.test.ts +0 -60
- package/src/node-preflight.ts +0 -67
- package/src/outpost/session-heartbeat-bounds.test.ts +0 -195
- package/src/outpost/session-heartbeat-guard.test.ts +0 -105
- package/src/outpost/session-heartbeat-publisher.test.ts +0 -178
- package/src/outpost/session-heartbeat-publisher.ts +0 -186
- package/src/outpost/session-heartbeat-retain-guard.test.ts +0 -126
- package/src/outpost/session-heartbeat.test.ts +0 -459
- package/src/outpost/session-heartbeat.ts +0 -877
- package/src/packaging.test.ts +0 -109
- package/src/run/__fixtures__/discover-schemas/example.env.schema +0 -4
- package/src/run/discover-schemas.test.ts +0 -153
- package/src/run/discover-schemas.ts +0 -79
- package/src/run/hq-plugin.test.ts +0 -371
- package/src/run/hq-plugin.ts +0 -277
- package/src/run/varlock-shape.test.ts +0 -57
- package/src/schemas/hq-package.schema.json +0 -155
- package/src/sentry-before-send.test.ts +0 -359
- package/src/sentry-before-send.ts +0 -221
- package/src/sentry-epipe.test.ts +0 -37
- package/src/sentry-release.test.ts +0 -54
- package/src/sentry.test.ts +0 -24
- package/src/sentry.ts +0 -54
- package/src/strategies/link.ts +0 -62
- package/src/strategies/merge.ts +0 -142
- package/src/types.ts +0 -146
- package/src/utils/__fixtures__/scan-packages.generated-block.sh +0 -23
- package/src/utils/auth-error.test.ts +0 -40
- package/src/utils/auth-error.ts +0 -42
- package/src/utils/billing-gate.test.ts +0 -95
- package/src/utils/billing-gate.ts +0 -228
- package/src/utils/breadcrumb-buffer.ts +0 -18
- package/src/utils/cli-telemetry.test.ts +0 -153
- package/src/utils/cli-telemetry.ts +0 -61
- package/src/utils/cognito-session.machine.test.ts +0 -109
- package/src/utils/cognito-session.refresh.test.ts +0 -84
- package/src/utils/cognito-session.test.ts +0 -328
- package/src/utils/cognito-session.ts +0 -448
- package/src/utils/company-selection-error.test.ts +0 -42
- package/src/utils/company-selection-error.ts +0 -45
- package/src/utils/contribution-table.ts +0 -83
- package/src/utils/environmental-error.test.ts +0 -45
- package/src/utils/environmental-error.ts +0 -39
- package/src/utils/epipe.test.ts +0 -28
- package/src/utils/epipe.ts +0 -29
- package/src/utils/expected-cli-error.test.ts +0 -28
- package/src/utils/expected-cli-error.ts +0 -39
- package/src/utils/feedback-diagnostics.test.ts +0 -183
- package/src/utils/feedback-diagnostics.ts +0 -123
- package/src/utils/feedback-screenshots.test.ts +0 -134
- package/src/utils/feedback-screenshots.ts +0 -124
- package/src/utils/feedback-versions.test.ts +0 -98
- package/src/utils/feedback-versions.ts +0 -68
- package/src/utils/git.ts +0 -74
- package/src/utils/integrity.ts +0 -59
- package/src/utils/intercepted-process-exit.test.ts +0 -37
- package/src/utils/intercepted-process-exit.ts +0 -36
- package/src/utils/login-provider.test.ts +0 -42
- package/src/utils/login-provider.ts +0 -30
- package/src/utils/manifest.test.ts +0 -167
- package/src/utils/manifest.ts +0 -131
- package/src/utils/pack-contributions.test.ts +0 -603
- package/src/utils/pack-contributions.ts +0 -450
- package/src/utils/people.ts +0 -215
- package/src/utils/registry-client.ts +0 -204
- package/src/utils/registry.ts +0 -90
- package/src/utils/resolve-vault-credential.test.ts +0 -69
- package/src/utils/resolve-vault-credential.ts +0 -60
- package/src/utils/sandbox-runner-client.test.ts +0 -279
- package/src/utils/sandbox-runner-client.ts +0 -260
- package/src/utils/secrets-cache.ts +0 -183
- package/src/utils/sentry-identity.ts +0 -45
- package/src/utils/settle-with-timeout.test.ts +0 -21
- package/src/utils/settle-with-timeout.ts +0 -22
- package/src/utils/user-yaml-error.test.ts +0 -24
- package/src/utils/user-yaml-error.ts +0 -30
- package/src/utils/vault-api.test.ts +0 -536
- package/src/utils/vault-api.ts +0 -382
- package/src/utils/version-check.test.ts +0 -176
- package/src/utils/version-check.ts +0 -155
- package/src/utils/version-gate.test.ts +0 -1024
- package/src/utils/version-gate.ts +0 -702
- package/test/commands/db-tenant-isolation.test.ts +0 -94
- package/test/commands/db.test.ts +0 -85
- package/test/commands/signals.test.ts +0 -207
- package/test/commands/sources.test.ts +0 -231
- package/test/e2e/smoke-install-mcp.sh +0 -113
- package/test/fixtures/hq-pack-smoke-mcp/mcp/smoke-http.json +0 -1
- package/test/fixtures/hq-pack-smoke-mcp/package.yaml +0 -11
- package/test/fixtures/signals/action_item/sample.md +0 -16
- package/test/fixtures/signals/summary/sample.md +0 -12
- package/test/fixtures/sources/meetings/sample.md +0 -25
- package/test/helpers/cli-runner.ts +0 -150
- package/test/helpers/s3-list-mock.ts +0 -79
- package/test/helpers/vault-service-mock.ts +0 -295
- package/test/sources-signals/smoke.test.ts +0 -228
- package/tsconfig.json +0 -20
- package/vitest.config.ts +0 -11
- package/vitest.e2e.config.ts +0 -7
|
@@ -1,212 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* `narrow-hint-banner` (US-011) — one-time-per-session hint nudging
|
|
3
|
-
* existing all-mode owners to switch to shared-mode sync.
|
|
4
|
-
*
|
|
5
|
-
* Emitted from `hq sync pull --all` and `hq sync now` after the per-target
|
|
6
|
-
* fanout resolves each membership's sync config. Suppressed when:
|
|
7
|
-
*
|
|
8
|
-
* - the membership is NOT on `syncMode: 'all'` (shared / custom users
|
|
9
|
-
* have already opted in to narrowing, so there is nothing to nudge),
|
|
10
|
-
* - the env var `HQ_SYNC_NARROW_HINT=off` is set,
|
|
11
|
-
* - the per-hqRoot CLI config (`<hqRoot>/.hq/config.json`) has
|
|
12
|
-
* `syncNarrowHint: 'off'`,
|
|
13
|
-
* - or the same `{companyUid, level}` pair has already been shown this
|
|
14
|
-
* process (module-singleton dedupe; the runner imports the same module
|
|
15
|
-
* once per `hq` invocation so a single invocation prints at most one
|
|
16
|
-
* banner per company per level).
|
|
17
|
-
*
|
|
18
|
-
* Three escalating levels — `'hint' | 'warning' | 'strict'`. Today's
|
|
19
|
-
* default level is `'hint'`; this release ships the plumbing so a future
|
|
20
|
-
* hq-core-staging release can flip the default to `'warning'` and then
|
|
21
|
-
* `'strict'` without re-touching the call sites.
|
|
22
|
-
*
|
|
23
|
-
* - hint → dim suggestion to stderr, never blocks.
|
|
24
|
-
* - warning → yellow note to stderr, never blocks.
|
|
25
|
-
* - strict → red error to stderr; callers are expected to refuse to
|
|
26
|
-
* proceed unless the operator passes `--mode-all`. The
|
|
27
|
-
* helper itself never throws or exits — the decision lives at
|
|
28
|
-
* the call site so tests don't have to stub `process.exit`.
|
|
29
|
-
*
|
|
30
|
-
* The level is selected by the caller (typically from the
|
|
31
|
-
* `HQ_SYNC_NARROW_HINT_LEVEL` env var). See `resolveBannerLevel` for the
|
|
32
|
-
* default-and-override ladder.
|
|
33
|
-
*
|
|
34
|
-
* TODO(hq-core-staging release N+2): bump default level to 'warning'.
|
|
35
|
-
* TODO(hq-core-staging release N+3): bump default level to 'strict' and
|
|
36
|
-
* wire `--mode-all` as the only opt-out.
|
|
37
|
-
*/
|
|
38
|
-
|
|
39
|
-
import chalk from "chalk";
|
|
40
|
-
import * as fs from "node:fs";
|
|
41
|
-
import * as path from "node:path";
|
|
42
|
-
|
|
43
|
-
export type BannerLevel = "hint" | "warning" | "strict";
|
|
44
|
-
|
|
45
|
-
export interface BannerInput {
|
|
46
|
-
/** Company UID — used to dedupe per-process so each company emits once. */
|
|
47
|
-
companyUid: string;
|
|
48
|
-
/** Effective sync mode resolved from `getMembershipSyncConfig`. */
|
|
49
|
-
syncMode: "shared" | "all" | "custom";
|
|
50
|
-
/** Escalation level — see file header. */
|
|
51
|
-
level: BannerLevel;
|
|
52
|
-
}
|
|
53
|
-
|
|
54
|
-
export interface ShouldShowBannerOpts {
|
|
55
|
-
/**
|
|
56
|
-
* Optional hqRoot — when provided, the helper checks
|
|
57
|
-
* `<hqRoot>/.hq/config.json` for a `syncNarrowHint: 'off'` key in
|
|
58
|
-
* addition to the env override. Falsy paths skip the file check.
|
|
59
|
-
*/
|
|
60
|
-
hqRoot?: string;
|
|
61
|
-
/**
|
|
62
|
-
* Test seam: override `process.env` lookup. Defaults to
|
|
63
|
-
* `process.env.HQ_SYNC_NARROW_HINT`.
|
|
64
|
-
*/
|
|
65
|
-
envValue?: string | undefined;
|
|
66
|
-
/**
|
|
67
|
-
* Test seam: override `fs.readFileSync`. Defaults to `node:fs`.
|
|
68
|
-
*/
|
|
69
|
-
readFile?: (p: string) => string;
|
|
70
|
-
/** Test seam: override `fs.existsSync`. */
|
|
71
|
-
existsFile?: (p: string) => boolean;
|
|
72
|
-
}
|
|
73
|
-
|
|
74
|
-
const SHOWN = new Set<string>();
|
|
75
|
-
|
|
76
|
-
/**
|
|
77
|
-
* Decides whether a banner should be printed AT ALL — independent of
|
|
78
|
-
* dedupe and `syncMode` gating. Exposed for tests and for the strict-mode
|
|
79
|
-
* call site (which needs to know whether to refuse-to-proceed even if the
|
|
80
|
-
* banner itself is suppressed).
|
|
81
|
-
*/
|
|
82
|
-
export function shouldShowBanner(opts: ShouldShowBannerOpts = {}): boolean {
|
|
83
|
-
const envValue =
|
|
84
|
-
opts.envValue !== undefined
|
|
85
|
-
? opts.envValue
|
|
86
|
-
: process.env.HQ_SYNC_NARROW_HINT;
|
|
87
|
-
if (typeof envValue === "string" && envValue.toLowerCase() === "off") {
|
|
88
|
-
return false;
|
|
89
|
-
}
|
|
90
|
-
|
|
91
|
-
if (opts.hqRoot) {
|
|
92
|
-
const configPath = path.join(opts.hqRoot, ".hq", "config.json");
|
|
93
|
-
const exists = opts.existsFile ?? fs.existsSync;
|
|
94
|
-
const read = opts.readFile ?? ((p: string) => fs.readFileSync(p, "utf-8"));
|
|
95
|
-
if (exists(configPath)) {
|
|
96
|
-
try {
|
|
97
|
-
const cfg = JSON.parse(read(configPath)) as {
|
|
98
|
-
syncNarrowHint?: unknown;
|
|
99
|
-
};
|
|
100
|
-
if (
|
|
101
|
-
typeof cfg.syncNarrowHint === "string" &&
|
|
102
|
-
cfg.syncNarrowHint.toLowerCase() === "off"
|
|
103
|
-
) {
|
|
104
|
-
return false;
|
|
105
|
-
}
|
|
106
|
-
} catch {
|
|
107
|
-
// Malformed config is best-effort — fall through and assume "on".
|
|
108
|
-
}
|
|
109
|
-
}
|
|
110
|
-
}
|
|
111
|
-
|
|
112
|
-
return true;
|
|
113
|
-
}
|
|
114
|
-
|
|
115
|
-
/**
|
|
116
|
-
* Resolve the banner level from environment overrides. Defaults to
|
|
117
|
-
* `'hint'`. Recognized values for `HQ_SYNC_NARROW_HINT_LEVEL`:
|
|
118
|
-
* `hint`, `warning`, `strict` (case-insensitive). Unknown values fall
|
|
119
|
-
* back to the default rather than throwing — the env var is operator-
|
|
120
|
-
* facing and a typo shouldn't break a sync.
|
|
121
|
-
*/
|
|
122
|
-
export function resolveBannerLevel(
|
|
123
|
-
envValue: string | undefined = process.env.HQ_SYNC_NARROW_HINT_LEVEL,
|
|
124
|
-
): BannerLevel {
|
|
125
|
-
if (typeof envValue !== "string") return "hint";
|
|
126
|
-
const v = envValue.toLowerCase();
|
|
127
|
-
if (v === "warning" || v === "strict" || v === "hint") return v;
|
|
128
|
-
return "hint";
|
|
129
|
-
}
|
|
130
|
-
|
|
131
|
-
/**
|
|
132
|
-
* Returns `true` when the strict-mode rollout has been opted into AND
|
|
133
|
-
* the membership in question is still on `'all'`. Call sites should
|
|
134
|
-
* refuse to proceed (exit non-zero) when this returns true and the
|
|
135
|
-
* operator hasn't passed `--mode-all`.
|
|
136
|
-
*/
|
|
137
|
-
export function isStrictRefusal(
|
|
138
|
-
syncMode: BannerInput["syncMode"],
|
|
139
|
-
level: BannerLevel,
|
|
140
|
-
): boolean {
|
|
141
|
-
return level === "strict" && syncMode === "all";
|
|
142
|
-
}
|
|
143
|
-
|
|
144
|
-
/**
|
|
145
|
-
* Emit a one-time-per-{company,level} banner. Writes to `stderr` by
|
|
146
|
-
* default; tests inject a sink. Idempotent — repeated calls with the
|
|
147
|
-
* same `{companyUid, level}` are no-ops for the lifetime of the
|
|
148
|
-
* process.
|
|
149
|
-
*/
|
|
150
|
-
export function emitNarrowHint(
|
|
151
|
-
input: BannerInput,
|
|
152
|
-
opts: {
|
|
153
|
-
hqRoot?: string;
|
|
154
|
-
write?: (s: string) => void;
|
|
155
|
-
/** Test seam — overrides `shouldShowBanner` env/config lookups. */
|
|
156
|
-
showOverride?: boolean;
|
|
157
|
-
} = {},
|
|
158
|
-
): void {
|
|
159
|
-
// Only nudge 'all'-mode memberships — shared/custom callers already
|
|
160
|
-
// opted in to narrowing, so the hint would just be noise.
|
|
161
|
-
if (input.syncMode !== "all") return;
|
|
162
|
-
|
|
163
|
-
const show =
|
|
164
|
-
opts.showOverride !== undefined
|
|
165
|
-
? opts.showOverride
|
|
166
|
-
: shouldShowBanner({ ...(opts.hqRoot ? { hqRoot: opts.hqRoot } : {}) });
|
|
167
|
-
if (!show) return;
|
|
168
|
-
|
|
169
|
-
const key = `${input.companyUid}:${input.level}`;
|
|
170
|
-
if (SHOWN.has(key)) return;
|
|
171
|
-
SHOWN.add(key);
|
|
172
|
-
|
|
173
|
-
const write =
|
|
174
|
-
opts.write ?? ((s: string) => process.stderr.write(s + "\n"));
|
|
175
|
-
|
|
176
|
-
if (input.level === "hint") {
|
|
177
|
-
write(
|
|
178
|
-
chalk.dim(
|
|
179
|
-
"Tip: switch to shared-mode sync — fewer files, same visibility. " +
|
|
180
|
-
"Run `hq sync narrow --dry-run` to preview.",
|
|
181
|
-
),
|
|
182
|
-
);
|
|
183
|
-
return;
|
|
184
|
-
}
|
|
185
|
-
|
|
186
|
-
if (input.level === "warning") {
|
|
187
|
-
write(
|
|
188
|
-
chalk.yellow(
|
|
189
|
-
"Warning: shared-mode sync is the new default; this membership " +
|
|
190
|
-
"still pulls everything. Run `hq sync narrow --dry-run` to " +
|
|
191
|
-
"preview the migration before the next release flips the " +
|
|
192
|
-
"default to strict.",
|
|
193
|
-
),
|
|
194
|
-
);
|
|
195
|
-
return;
|
|
196
|
-
}
|
|
197
|
-
|
|
198
|
-
// strict — caller is responsible for refusing to proceed unless
|
|
199
|
-
// --mode-all was passed. We only emit the message here.
|
|
200
|
-
write(
|
|
201
|
-
chalk.red(
|
|
202
|
-
"Error: shared-mode sync is now strict; pass --mode-all to keep " +
|
|
203
|
-
"all-mode behavior for this run, or run `hq sync narrow --apply` " +
|
|
204
|
-
"to migrate this membership.",
|
|
205
|
-
),
|
|
206
|
-
);
|
|
207
|
-
}
|
|
208
|
-
|
|
209
|
-
/** Test-only helper — clears the per-process dedupe set. */
|
|
210
|
-
export function _resetShownForTests(): void {
|
|
211
|
-
SHOWN.clear();
|
|
212
|
-
}
|
|
@@ -1,317 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Unit tests for `plan-limit-nag` (US-016).
|
|
3
|
-
*
|
|
4
|
-
* Coverage:
|
|
5
|
-
* 1. Warning renders when ≥80% metadata present; absent → no output.
|
|
6
|
-
* 2. Malformed planLimits ignored (no output, no throw).
|
|
7
|
-
* 3. Once-per-session: second emit prints nothing.
|
|
8
|
-
* 4. Over-limit boxed notice; same-day state suppresses; >24h re-prints.
|
|
9
|
-
* 5. HQ_NO_PLAN_LIMIT_NAG=1 disables all output.
|
|
10
|
-
* 6. emit never throws even when statePath unwritable.
|
|
11
|
-
* 7. Exit-code neutrality: emit does not touch process.exitCode.
|
|
12
|
-
*/
|
|
13
|
-
|
|
14
|
-
import * as fs from "node:fs";
|
|
15
|
-
import * as os from "node:os";
|
|
16
|
-
import * as path from "node:path";
|
|
17
|
-
import { afterEach, beforeEach, describe, expect, it } from "vitest";
|
|
18
|
-
|
|
19
|
-
import {
|
|
20
|
-
PLAN_LIMIT_UPGRADE_URL,
|
|
21
|
-
_resetForTests,
|
|
22
|
-
emitPlanLimitNag,
|
|
23
|
-
recordPlanLimitStatus,
|
|
24
|
-
} from "./plan-limit-nag.js";
|
|
25
|
-
|
|
26
|
-
function makeSink(): { lines: string[]; write: (s: string) => void } {
|
|
27
|
-
const lines: string[] = [];
|
|
28
|
-
return {
|
|
29
|
-
lines,
|
|
30
|
-
write: (s: string) => {
|
|
31
|
-
lines.push(s);
|
|
32
|
-
},
|
|
33
|
-
};
|
|
34
|
-
}
|
|
35
|
-
|
|
36
|
-
function tmpStatePath(): string {
|
|
37
|
-
return path.join(
|
|
38
|
-
os.tmpdir(),
|
|
39
|
-
`hq-plan-limit-nag-test-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}.json`,
|
|
40
|
-
);
|
|
41
|
-
}
|
|
42
|
-
|
|
43
|
-
/**
|
|
44
|
-
* Portable unwritable statePath: join under a plain FILE so
|
|
45
|
-
* mkdirSync/writeFileSync/readFileSync fail immediately with ENOTDIR
|
|
46
|
-
* on every platform (unlike /proc paths, which hang on Linux procfs).
|
|
47
|
-
*/
|
|
48
|
-
function unwritableStatePath(): string {
|
|
49
|
-
const dir = fs.mkdtempSync(path.join(os.tmpdir(), "hq-nag-"));
|
|
50
|
-
const file = path.join(dir, "not-a-dir");
|
|
51
|
-
fs.writeFileSync(file, "x");
|
|
52
|
-
return path.join(file, "x", "plan-limit-nag.json");
|
|
53
|
-
}
|
|
54
|
-
|
|
55
|
-
const ENV_KEY = "HQ_NO_PLAN_LIMIT_NAG";
|
|
56
|
-
let prevEnv: string | undefined;
|
|
57
|
-
|
|
58
|
-
beforeEach(() => {
|
|
59
|
-
_resetForTests();
|
|
60
|
-
prevEnv = process.env[ENV_KEY];
|
|
61
|
-
delete process.env[ENV_KEY];
|
|
62
|
-
});
|
|
63
|
-
|
|
64
|
-
afterEach(() => {
|
|
65
|
-
if (prevEnv === undefined) {
|
|
66
|
-
delete process.env[ENV_KEY];
|
|
67
|
-
} else {
|
|
68
|
-
process.env[ENV_KEY] = prevEnv;
|
|
69
|
-
}
|
|
70
|
-
_resetForTests();
|
|
71
|
-
});
|
|
72
|
-
|
|
73
|
-
describe("recordPlanLimitStatus + emitPlanLimitNag (warning path)", () => {
|
|
74
|
-
it("renders a one-line warning when planLimits has a ≥80% entry", () => {
|
|
75
|
-
const sink = makeSink();
|
|
76
|
-
recordPlanLimitStatus({
|
|
77
|
-
ok: true,
|
|
78
|
-
planLimits: {
|
|
79
|
-
users: { used: 9, limit: 10, over: false },
|
|
80
|
-
},
|
|
81
|
-
});
|
|
82
|
-
emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
|
|
83
|
-
expect(sink.lines).toHaveLength(1);
|
|
84
|
-
expect(sink.lines[0]).toMatch(/HQ free plan/i);
|
|
85
|
-
expect(sink.lines[0]).toMatch(/users at 9\/10 \(90%\)/);
|
|
86
|
-
expect(sink.lines[0]).toContain(PLAN_LIMIT_UPGRADE_URL);
|
|
87
|
-
});
|
|
88
|
-
|
|
89
|
-
it("produces no output when planLimits metadata is absent", () => {
|
|
90
|
-
const sink = makeSink();
|
|
91
|
-
recordPlanLimitStatus({ ok: true, items: [] });
|
|
92
|
-
emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
|
|
93
|
-
expect(sink.lines).toHaveLength(0);
|
|
94
|
-
});
|
|
95
|
-
|
|
96
|
-
it("produces no output when recordPlanLimitStatus was never called", () => {
|
|
97
|
-
const sink = makeSink();
|
|
98
|
-
emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
|
|
99
|
-
expect(sink.lines).toHaveLength(0);
|
|
100
|
-
});
|
|
101
|
-
|
|
102
|
-
it("lists the worst resource when multiple ≥80% entries exist", () => {
|
|
103
|
-
const sink = makeSink();
|
|
104
|
-
recordPlanLimitStatus({
|
|
105
|
-
planLimits: {
|
|
106
|
-
users: { used: 8, limit: 10, over: false },
|
|
107
|
-
secrets: { used: 19, limit: 20, over: false },
|
|
108
|
-
},
|
|
109
|
-
});
|
|
110
|
-
emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
|
|
111
|
-
expect(sink.lines).toHaveLength(1);
|
|
112
|
-
expect(sink.lines[0]).toMatch(/secrets at 19\/20/);
|
|
113
|
-
});
|
|
114
|
-
});
|
|
115
|
-
|
|
116
|
-
describe("malformed planLimits", () => {
|
|
117
|
-
it("ignores wrong types — no output, no throw", () => {
|
|
118
|
-
const sink = makeSink();
|
|
119
|
-
expect(() =>
|
|
120
|
-
recordPlanLimitStatus({
|
|
121
|
-
planLimits: {
|
|
122
|
-
users: { used: "9", limit: 10, over: false },
|
|
123
|
-
secrets: { used: 5, limit: "10", over: true },
|
|
124
|
-
agents: null,
|
|
125
|
-
integrations: "nope",
|
|
126
|
-
},
|
|
127
|
-
}),
|
|
128
|
-
).not.toThrow();
|
|
129
|
-
expect(() =>
|
|
130
|
-
emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() }),
|
|
131
|
-
).not.toThrow();
|
|
132
|
-
expect(sink.lines).toHaveLength(0);
|
|
133
|
-
});
|
|
134
|
-
|
|
135
|
-
it("ignores non-object planLimits", () => {
|
|
136
|
-
const sink = makeSink();
|
|
137
|
-
recordPlanLimitStatus({ planLimits: "not-an-object" });
|
|
138
|
-
recordPlanLimitStatus({ planLimits: [1, 2, 3] });
|
|
139
|
-
recordPlanLimitStatus({ planLimits: null });
|
|
140
|
-
recordPlanLimitStatus(null);
|
|
141
|
-
recordPlanLimitStatus("string");
|
|
142
|
-
emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
|
|
143
|
-
expect(sink.lines).toHaveLength(0);
|
|
144
|
-
});
|
|
145
|
-
|
|
146
|
-
it("accepts only well-formed entries and still emits when mixed", () => {
|
|
147
|
-
const sink = makeSink();
|
|
148
|
-
recordPlanLimitStatus({
|
|
149
|
-
planLimits: {
|
|
150
|
-
bad: { used: "x", limit: 1, over: false },
|
|
151
|
-
users: { used: 9, limit: 10, over: false },
|
|
152
|
-
},
|
|
153
|
-
});
|
|
154
|
-
emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
|
|
155
|
-
expect(sink.lines).toHaveLength(1);
|
|
156
|
-
expect(sink.lines[0]).toMatch(/users at 9\/10/);
|
|
157
|
-
});
|
|
158
|
-
});
|
|
159
|
-
|
|
160
|
-
describe("once-per-session dedupe", () => {
|
|
161
|
-
it("second emit prints nothing for the warning path", () => {
|
|
162
|
-
const sink = makeSink();
|
|
163
|
-
const statePath = tmpStatePath();
|
|
164
|
-
recordPlanLimitStatus({
|
|
165
|
-
planLimits: { users: { used: 9, limit: 10, over: false } },
|
|
166
|
-
});
|
|
167
|
-
emitPlanLimitNag({ write: sink.write, statePath });
|
|
168
|
-
emitPlanLimitNag({ write: sink.write, statePath });
|
|
169
|
-
expect(sink.lines).toHaveLength(1);
|
|
170
|
-
});
|
|
171
|
-
});
|
|
172
|
-
|
|
173
|
-
describe("over-limit boxed notice", () => {
|
|
174
|
-
it("prints a boxed over-limit notice listing over resources", () => {
|
|
175
|
-
const sink = makeSink();
|
|
176
|
-
const statePath = tmpStatePath();
|
|
177
|
-
recordPlanLimitStatus({
|
|
178
|
-
planLimits: {
|
|
179
|
-
users: { used: 11, limit: 10, over: true },
|
|
180
|
-
secrets: { used: 5, limit: 20, over: false },
|
|
181
|
-
},
|
|
182
|
-
requiredPlan: "agents-500",
|
|
183
|
-
});
|
|
184
|
-
emitPlanLimitNag({
|
|
185
|
-
write: sink.write,
|
|
186
|
-
statePath,
|
|
187
|
-
now: () => new Date("2026-03-01T12:00:00.000Z"),
|
|
188
|
-
});
|
|
189
|
-
expect(sink.lines).toHaveLength(1);
|
|
190
|
-
const out = sink.lines[0] ?? "";
|
|
191
|
-
expect(out).toMatch(/plan limit exceeded/i);
|
|
192
|
-
expect(out).toMatch(/users:\s*11\/10/);
|
|
193
|
-
expect(out).toContain(PLAN_LIMIT_UPGRADE_URL);
|
|
194
|
-
expect(out).toMatch(/[┌└│─]/);
|
|
195
|
-
// Non-over resources should not appear in the over box resource list.
|
|
196
|
-
expect(out).not.toMatch(/secrets:\s*5\/20/);
|
|
197
|
-
});
|
|
198
|
-
|
|
199
|
-
it("second emit same day (fresh shownAt in statePath) prints nothing", () => {
|
|
200
|
-
const sink = makeSink();
|
|
201
|
-
const statePath = tmpStatePath();
|
|
202
|
-
const now = new Date("2026-03-01T12:00:00.000Z");
|
|
203
|
-
fs.writeFileSync(
|
|
204
|
-
statePath,
|
|
205
|
-
JSON.stringify({ shownAt: now.getTime() - 60 * 60 * 1000 }),
|
|
206
|
-
);
|
|
207
|
-
recordPlanLimitStatus({
|
|
208
|
-
planLimits: { users: { used: 11, limit: 10, over: true } },
|
|
209
|
-
});
|
|
210
|
-
emitPlanLimitNag({ write: sink.write, statePath, now: () => now });
|
|
211
|
-
expect(sink.lines).toHaveLength(0);
|
|
212
|
-
});
|
|
213
|
-
|
|
214
|
-
it("shownAt older than 24h prints again", () => {
|
|
215
|
-
const sink = makeSink();
|
|
216
|
-
const statePath = tmpStatePath();
|
|
217
|
-
const now = new Date("2026-03-02T13:00:00.000Z");
|
|
218
|
-
fs.writeFileSync(
|
|
219
|
-
statePath,
|
|
220
|
-
JSON.stringify({
|
|
221
|
-
shownAt: now.getTime() - 25 * 60 * 60 * 1000,
|
|
222
|
-
}),
|
|
223
|
-
);
|
|
224
|
-
recordPlanLimitStatus({
|
|
225
|
-
planLimits: { users: { used: 11, limit: 10, over: true } },
|
|
226
|
-
});
|
|
227
|
-
emitPlanLimitNag({ write: sink.write, statePath, now: () => now });
|
|
228
|
-
expect(sink.lines).toHaveLength(1);
|
|
229
|
-
expect(sink.lines[0]).toMatch(/plan limit exceeded/i);
|
|
230
|
-
});
|
|
231
|
-
|
|
232
|
-
it("session-dedupes over notice even without state file", () => {
|
|
233
|
-
const sink = makeSink();
|
|
234
|
-
// Unwritable parent: skip persistence but still session-dedupe.
|
|
235
|
-
const statePath = unwritableStatePath();
|
|
236
|
-
recordPlanLimitStatus({
|
|
237
|
-
planLimits: { users: { used: 11, limit: 10, over: true } },
|
|
238
|
-
});
|
|
239
|
-
emitPlanLimitNag({
|
|
240
|
-
write: sink.write,
|
|
241
|
-
statePath,
|
|
242
|
-
now: () => new Date("2026-03-01T12:00:00.000Z"),
|
|
243
|
-
});
|
|
244
|
-
emitPlanLimitNag({
|
|
245
|
-
write: sink.write,
|
|
246
|
-
statePath,
|
|
247
|
-
now: () => new Date("2026-03-01T12:00:00.000Z"),
|
|
248
|
-
});
|
|
249
|
-
expect(sink.lines).toHaveLength(1);
|
|
250
|
-
});
|
|
251
|
-
});
|
|
252
|
-
|
|
253
|
-
describe("env off-switch", () => {
|
|
254
|
-
it("HQ_NO_PLAN_LIMIT_NAG=1 produces no output", () => {
|
|
255
|
-
process.env[ENV_KEY] = "1";
|
|
256
|
-
const sink = makeSink();
|
|
257
|
-
recordPlanLimitStatus({
|
|
258
|
-
planLimits: {
|
|
259
|
-
users: { used: 11, limit: 10, over: true },
|
|
260
|
-
},
|
|
261
|
-
});
|
|
262
|
-
emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
|
|
263
|
-
expect(sink.lines).toHaveLength(0);
|
|
264
|
-
});
|
|
265
|
-
});
|
|
266
|
-
|
|
267
|
-
describe("resilience + exit-code neutrality", () => {
|
|
268
|
-
it("emit never throws even when statePath is unwritable", () => {
|
|
269
|
-
const sink = makeSink();
|
|
270
|
-
const statePath = unwritableStatePath();
|
|
271
|
-
recordPlanLimitStatus({
|
|
272
|
-
planLimits: { users: { used: 12, limit: 10, over: true } },
|
|
273
|
-
});
|
|
274
|
-
expect(() =>
|
|
275
|
-
emitPlanLimitNag({
|
|
276
|
-
write: sink.write,
|
|
277
|
-
statePath,
|
|
278
|
-
now: () => new Date("2026-03-01T12:00:00.000Z"),
|
|
279
|
-
}),
|
|
280
|
-
).not.toThrow();
|
|
281
|
-
// Still attempted to print (write may succeed even if state write fails).
|
|
282
|
-
expect(sink.lines.length).toBeGreaterThanOrEqual(0);
|
|
283
|
-
});
|
|
284
|
-
|
|
285
|
-
it("does not touch process.exitCode", () => {
|
|
286
|
-
const prev = process.exitCode;
|
|
287
|
-
process.exitCode = 0;
|
|
288
|
-
try {
|
|
289
|
-
const sink = makeSink();
|
|
290
|
-
recordPlanLimitStatus({
|
|
291
|
-
planLimits: { users: { used: 9, limit: 10, over: false } },
|
|
292
|
-
});
|
|
293
|
-
emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
|
|
294
|
-
expect(process.exitCode).toBe(0);
|
|
295
|
-
|
|
296
|
-
process.exitCode = 1;
|
|
297
|
-
_resetForTests();
|
|
298
|
-
recordPlanLimitStatus({
|
|
299
|
-
planLimits: { users: { used: 11, limit: 10, over: true } },
|
|
300
|
-
});
|
|
301
|
-
emitPlanLimitNag({
|
|
302
|
-
write: sink.write,
|
|
303
|
-
statePath: tmpStatePath(),
|
|
304
|
-
now: () => new Date("2026-04-01T00:00:00.000Z"),
|
|
305
|
-
});
|
|
306
|
-
expect(process.exitCode).toBe(1);
|
|
307
|
-
} finally {
|
|
308
|
-
process.exitCode = prev;
|
|
309
|
-
}
|
|
310
|
-
});
|
|
311
|
-
|
|
312
|
-
it("recordPlanLimitStatus never throws on garbage input", () => {
|
|
313
|
-
expect(() => recordPlanLimitStatus(undefined)).not.toThrow();
|
|
314
|
-
expect(() => recordPlanLimitStatus(42)).not.toThrow();
|
|
315
|
-
expect(() => recordPlanLimitStatus([])).not.toThrow();
|
|
316
|
-
});
|
|
317
|
-
});
|