@indigoai-us/hq-cli 5.77.14 → 5.78.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (308) hide show
  1. package/CHANGELOG.md +23 -0
  2. package/assets/scaffold/core/scripts/archive-old-threads.sh +86 -0
  3. package/assets/scaffold/core/scripts/backfill-company-skill-mirrors.sh +73 -0
  4. package/assets/scaffold/core/scripts/backfill-workspace-mirror.sh +51 -0
  5. package/assets/scaffold/core/scripts/codex-skill-bridge.sh +550 -0
  6. package/assets/scaffold/core/scripts/detect-stale-core-policy-mirror.sh +185 -0
  7. package/assets/scaffold/core/scripts/hq-status-summary.sh +187 -0
  8. package/assets/scaffold/core/scripts/ontology-readme-drift.sh +264 -0
  9. package/assets/scaffold/core/scripts/qmd-reindex-after-sync.sh +93 -0
  10. package/assets/scaffold/core/scripts/rebuild-all-indexes.sh +69 -0
  11. package/assets/scaffold/core/scripts/rebuild-companies-index.sh +206 -0
  12. package/assets/scaffold/core/scripts/rebuild-company-knowledge-index.sh +127 -0
  13. package/assets/scaffold/core/scripts/rebuild-orchestrator-index.sh +86 -0
  14. package/assets/scaffold/core/scripts/rebuild-projects-index.sh +105 -0
  15. package/assets/scaffold/core/scripts/rebuild-public-knowledge-index.sh +83 -0
  16. package/assets/scaffold/core/scripts/rebuild-reports-index.sh +114 -0
  17. package/assets/scaffold/core/scripts/rebuild-social-drafts-index.sh +135 -0
  18. package/assets/scaffold/core/scripts/rebuild-threads-index.sh +82 -0
  19. package/assets/scaffold/core/scripts/rebuild-workers-index.sh +97 -0
  20. package/assets/scaffold/core/scripts/resize-screenshot.sh +47 -0
  21. package/assets/scaffold/core/scripts/token-usage-report.sh +254 -0
  22. package/assets/scaffold/core/scripts/worktree.sh +136 -0
  23. package/dist/commands/agents.js +28 -12
  24. package/dist/commands/api-keys.js +100 -20
  25. package/dist/commands/core.d.ts +90 -0
  26. package/dist/commands/core.js +279 -0
  27. package/dist/commands/files-browse.d.ts +21 -0
  28. package/dist/commands/files-browse.js +145 -24
  29. package/dist/commands/files.js +33 -7
  30. package/dist/commands/members.js +16 -5
  31. package/dist/commands/pack-install.d.ts +14 -0
  32. package/dist/commands/pack-install.js +42 -2
  33. package/dist/commands/pkg-install.js +39 -2
  34. package/dist/commands/run.js +6 -2
  35. package/dist/commands/secrets.js +120 -65
  36. package/dist/main.js +6 -0
  37. package/dist/utils/api-key-command-gate.d.ts +45 -0
  38. package/dist/utils/api-key-command-gate.js +51 -0
  39. package/dist/utils/hq-roots.d.ts +91 -0
  40. package/dist/utils/hq-roots.js +212 -0
  41. package/dist/utils/resolve-vault-credential.d.ts +63 -3
  42. package/dist/utils/resolve-vault-credential.js +152 -6
  43. package/dist/utils/run-bundled-script.d.ts +66 -0
  44. package/dist/utils/run-bundled-script.js +80 -0
  45. package/dist/utils/vault-api.d.ts +21 -0
  46. package/dist/utils/vault-api.js +74 -3
  47. package/package.json +7 -1
  48. package/.claude/policies/hq-cli-interactive-reads-use-sts-vend.md +0 -49
  49. package/.github/workflows/ci.yml +0 -46
  50. package/.github/workflows/publish.yml +0 -36
  51. package/.github/workflows/scripts/smoke-test-pkg.sh +0 -97
  52. package/e2e/cli.test.ts +0 -128
  53. package/eslint.config.js +0 -37
  54. package/pnpm-workspace.yaml +0 -4
  55. package/scripts/chmod-bins.mjs +0 -49
  56. package/scripts/generate-dsn.mjs +0 -26
  57. package/scripts/generate-scan-packages-table.mjs +0 -113
  58. package/scripts/smoke-sources-signals.sh +0 -103
  59. package/src/bin/hq-auth-refresh.ts +0 -43
  60. package/src/cli-version.ts +0 -13
  61. package/src/commands/__fixtures__/make-tar.ts +0 -126
  62. package/src/commands/_patterns.ts +0 -10
  63. package/src/commands/add.ts +0 -75
  64. package/src/commands/agents.test.ts +0 -527
  65. package/src/commands/agents.ts +0 -923
  66. package/src/commands/api-keys.test.ts +0 -291
  67. package/src/commands/api-keys.ts +0 -382
  68. package/src/commands/artifact-verify.test.ts +0 -177
  69. package/src/commands/auth.test.ts +0 -82
  70. package/src/commands/auth.ts +0 -213
  71. package/src/commands/billing.test.ts +0 -158
  72. package/src/commands/billing.ts +0 -146
  73. package/src/commands/channels.test.ts +0 -74
  74. package/src/commands/channels.ts +0 -91
  75. package/src/commands/cloud-demote.test.ts +0 -401
  76. package/src/commands/cloud-demote.ts +0 -278
  77. package/src/commands/cloud-provision.test.ts +0 -1117
  78. package/src/commands/cloud-provision.ts +0 -942
  79. package/src/commands/cloud.pull-all.test.ts +0 -711
  80. package/src/commands/cloud.pull-per-company.test.ts +0 -188
  81. package/src/commands/cloud.push-all.test.ts +0 -485
  82. package/src/commands/cloud.scope-excluded-warning.test.ts +0 -22
  83. package/src/commands/cloud.selectors.test.ts +0 -208
  84. package/src/commands/cloud.status.test.ts +0 -160
  85. package/src/commands/cloud.test.ts +0 -41
  86. package/src/commands/cloud.ts +0 -2130
  87. package/src/commands/company.test.ts +0 -202
  88. package/src/commands/company.ts +0 -148
  89. package/src/commands/creators.test.ts +0 -60
  90. package/src/commands/creators.ts +0 -117
  91. package/src/commands/crm.test.ts +0 -179
  92. package/src/commands/crm.ts +0 -236
  93. package/src/commands/db-migrate.ts +0 -55
  94. package/src/commands/db-provision.ts +0 -114
  95. package/src/commands/db-sql.ts +0 -124
  96. package/src/commands/db-status.ts +0 -108
  97. package/src/commands/db.ts +0 -26
  98. package/src/commands/dm.test.ts +0 -748
  99. package/src/commands/dm.ts +0 -1226
  100. package/src/commands/feedback.test.ts +0 -413
  101. package/src/commands/feedback.ts +0 -169
  102. package/src/commands/files-browse.test.ts +0 -1249
  103. package/src/commands/files-browse.ts +0 -1506
  104. package/src/commands/files-delete.test.ts +0 -484
  105. package/src/commands/files-recovery.test.ts +0 -370
  106. package/src/commands/files.test.ts +0 -722
  107. package/src/commands/files.ts +0 -1446
  108. package/src/commands/group-grants.test.ts +0 -330
  109. package/src/commands/group-grants.ts +0 -455
  110. package/src/commands/groups.test.ts +0 -44
  111. package/src/commands/groups.ts +0 -368
  112. package/src/commands/integrations.test.ts +0 -633
  113. package/src/commands/integrations.ts +0 -507
  114. package/src/commands/list.ts +0 -85
  115. package/src/commands/login.ts +0 -52
  116. package/src/commands/logout.ts +0 -30
  117. package/src/commands/marketplace-install.test.ts +0 -543
  118. package/src/commands/marketplace-security.test.ts +0 -646
  119. package/src/commands/mcp-registration.test.ts +0 -2787
  120. package/src/commands/mcp-registration.ts +0 -2612
  121. package/src/commands/mcp-status.test.ts +0 -483
  122. package/src/commands/mcp-status.ts +0 -575
  123. package/src/commands/mcp-status.us011.test.ts +0 -243
  124. package/src/commands/meetings.test.ts +0 -522
  125. package/src/commands/meetings.ts +0 -789
  126. package/src/commands/members.test.ts +0 -1474
  127. package/src/commands/members.ts +0 -1181
  128. package/src/commands/onboard-identity-guard.test.ts +0 -99
  129. package/src/commands/onboard-identity-guard.ts +0 -103
  130. package/src/commands/onboard-join.test.ts +0 -96
  131. package/src/commands/onboard-join.ts +0 -101
  132. package/src/commands/onboard-warning.test.ts +0 -26
  133. package/src/commands/onboard-warning.ts +0 -12
  134. package/src/commands/onboard.ts +0 -267
  135. package/src/commands/outposts-heartbeat.test.ts +0 -299
  136. package/src/commands/outposts-heartbeat.ts +0 -310
  137. package/src/commands/outposts-replica-sync.test.ts +0 -272
  138. package/src/commands/outposts-self-deploy.test.ts +0 -243
  139. package/src/commands/outposts.test.ts +0 -1039
  140. package/src/commands/outposts.ts +0 -1935
  141. package/src/commands/pack-install-secret-authorization.test.ts +0 -115
  142. package/src/commands/pack-install.test.ts +0 -1469
  143. package/src/commands/pack-install.ts +0 -2256
  144. package/src/commands/pack-update-cache.test.ts +0 -149
  145. package/src/commands/packs-update-api-key.test.ts +0 -105
  146. package/src/commands/packs.test.ts +0 -88
  147. package/src/commands/packs.ts +0 -622
  148. package/src/commands/people.test.ts +0 -807
  149. package/src/commands/people.ts +0 -422
  150. package/src/commands/pkg-install.dispatch.test.ts +0 -103
  151. package/src/commands/pkg-install.ts +0 -221
  152. package/src/commands/pkg-list.test.ts +0 -79
  153. package/src/commands/pkg-list.ts +0 -13
  154. package/src/commands/pkg-remove.ts +0 -71
  155. package/src/commands/pkg-update.ts +0 -189
  156. package/src/commands/publish.test.ts +0 -650
  157. package/src/commands/publish.ts +0 -580
  158. package/src/commands/reindex.test.ts +0 -259
  159. package/src/commands/reindex.ts +0 -274
  160. package/src/commands/rescue.test.ts +0 -39
  161. package/src/commands/rescue.ts +0 -210
  162. package/src/commands/run.env-local.test.ts +0 -88
  163. package/src/commands/run.test.ts +0 -45
  164. package/src/commands/run.ts +0 -190
  165. package/src/commands/safe-extract.test.ts +0 -459
  166. package/src/commands/safe-extract.ts +0 -444
  167. package/src/commands/secrets-scope.test.ts +0 -56
  168. package/src/commands/secrets-scope.ts +0 -32
  169. package/src/commands/secrets.parse-destination.test.ts +0 -38
  170. package/src/commands/secrets.test.ts +0 -2050
  171. package/src/commands/secrets.ts +0 -2249
  172. package/src/commands/signals.ts +0 -351
  173. package/src/commands/skill.test.ts +0 -770
  174. package/src/commands/skill.ts +0 -796
  175. package/src/commands/sources.ts +0 -362
  176. package/src/commands/sync-mode.test.ts +0 -366
  177. package/src/commands/sync-mode.ts +0 -387
  178. package/src/commands/sync-narrow.test.ts +0 -633
  179. package/src/commands/sync-narrow.ts +0 -555
  180. package/src/commands/sync.ts +0 -165
  181. package/src/commands/team-sync.ts +0 -628
  182. package/src/commands/update.ts +0 -71
  183. package/src/commands/whoami.ts +0 -83
  184. package/src/commands/workers.test.ts +0 -158
  185. package/src/commands/workers.ts +0 -301
  186. package/src/index.test.ts +0 -32
  187. package/src/index.ts +0 -20
  188. package/src/lib/db/control-plane.test.ts +0 -59
  189. package/src/lib/db/control-plane.ts +0 -113
  190. package/src/lib/db/local.test.ts +0 -81
  191. package/src/lib/db/local.ts +0 -148
  192. package/src/lib/db/migrate.test.ts +0 -133
  193. package/src/lib/db/migrate.ts +0 -137
  194. package/src/lib/db/paths.test.ts +0 -112
  195. package/src/lib/db/paths.ts +0 -128
  196. package/src/lib/db/remote-engine.test.ts +0 -44
  197. package/src/lib/db/remote-engine.ts +0 -148
  198. package/src/lib/db/remote-sql.test.ts +0 -32
  199. package/src/lib/db/remote-sql.ts +0 -62
  200. package/src/lib/db/sql.test.ts +0 -106
  201. package/src/lib/db/sql.ts +0 -192
  202. package/src/lib/hq-cloud-dep.smoke.test.ts +0 -75
  203. package/src/lib/local-tree-diff.test.ts +0 -301
  204. package/src/lib/local-tree-diff.ts +0 -362
  205. package/src/lib/narrow-hint-banner.test.ts +0 -235
  206. package/src/lib/narrow-hint-banner.ts +0 -212
  207. package/src/lib/plan-limit-nag.test.ts +0 -317
  208. package/src/lib/plan-limit-nag.ts +0 -264
  209. package/src/main.ts +0 -371
  210. package/src/node-preflight.test.ts +0 -60
  211. package/src/node-preflight.ts +0 -67
  212. package/src/outpost/session-heartbeat-bounds.test.ts +0 -195
  213. package/src/outpost/session-heartbeat-guard.test.ts +0 -105
  214. package/src/outpost/session-heartbeat-publisher.test.ts +0 -178
  215. package/src/outpost/session-heartbeat-publisher.ts +0 -186
  216. package/src/outpost/session-heartbeat-retain-guard.test.ts +0 -126
  217. package/src/outpost/session-heartbeat.test.ts +0 -459
  218. package/src/outpost/session-heartbeat.ts +0 -877
  219. package/src/packaging.test.ts +0 -109
  220. package/src/run/__fixtures__/discover-schemas/example.env.schema +0 -4
  221. package/src/run/discover-schemas.test.ts +0 -153
  222. package/src/run/discover-schemas.ts +0 -79
  223. package/src/run/hq-plugin.test.ts +0 -371
  224. package/src/run/hq-plugin.ts +0 -277
  225. package/src/run/varlock-shape.test.ts +0 -57
  226. package/src/schemas/hq-package.schema.json +0 -155
  227. package/src/sentry-before-send.test.ts +0 -359
  228. package/src/sentry-before-send.ts +0 -221
  229. package/src/sentry-epipe.test.ts +0 -37
  230. package/src/sentry-release.test.ts +0 -54
  231. package/src/sentry.test.ts +0 -24
  232. package/src/sentry.ts +0 -54
  233. package/src/strategies/link.ts +0 -62
  234. package/src/strategies/merge.ts +0 -142
  235. package/src/types.ts +0 -146
  236. package/src/utils/__fixtures__/scan-packages.generated-block.sh +0 -23
  237. package/src/utils/auth-error.test.ts +0 -40
  238. package/src/utils/auth-error.ts +0 -42
  239. package/src/utils/billing-gate.test.ts +0 -95
  240. package/src/utils/billing-gate.ts +0 -228
  241. package/src/utils/breadcrumb-buffer.ts +0 -18
  242. package/src/utils/cli-telemetry.test.ts +0 -153
  243. package/src/utils/cli-telemetry.ts +0 -61
  244. package/src/utils/cognito-session.machine.test.ts +0 -109
  245. package/src/utils/cognito-session.refresh.test.ts +0 -84
  246. package/src/utils/cognito-session.test.ts +0 -328
  247. package/src/utils/cognito-session.ts +0 -448
  248. package/src/utils/company-selection-error.test.ts +0 -42
  249. package/src/utils/company-selection-error.ts +0 -45
  250. package/src/utils/contribution-table.ts +0 -83
  251. package/src/utils/environmental-error.test.ts +0 -45
  252. package/src/utils/environmental-error.ts +0 -39
  253. package/src/utils/epipe.test.ts +0 -28
  254. package/src/utils/epipe.ts +0 -29
  255. package/src/utils/expected-cli-error.test.ts +0 -28
  256. package/src/utils/expected-cli-error.ts +0 -39
  257. package/src/utils/feedback-diagnostics.test.ts +0 -183
  258. package/src/utils/feedback-diagnostics.ts +0 -123
  259. package/src/utils/feedback-screenshots.test.ts +0 -134
  260. package/src/utils/feedback-screenshots.ts +0 -124
  261. package/src/utils/feedback-versions.test.ts +0 -98
  262. package/src/utils/feedback-versions.ts +0 -68
  263. package/src/utils/git.ts +0 -74
  264. package/src/utils/integrity.ts +0 -59
  265. package/src/utils/intercepted-process-exit.test.ts +0 -37
  266. package/src/utils/intercepted-process-exit.ts +0 -36
  267. package/src/utils/login-provider.test.ts +0 -42
  268. package/src/utils/login-provider.ts +0 -30
  269. package/src/utils/manifest.test.ts +0 -167
  270. package/src/utils/manifest.ts +0 -131
  271. package/src/utils/pack-contributions.test.ts +0 -603
  272. package/src/utils/pack-contributions.ts +0 -450
  273. package/src/utils/people.ts +0 -215
  274. package/src/utils/registry-client.ts +0 -204
  275. package/src/utils/registry.ts +0 -90
  276. package/src/utils/resolve-vault-credential.test.ts +0 -69
  277. package/src/utils/resolve-vault-credential.ts +0 -60
  278. package/src/utils/sandbox-runner-client.test.ts +0 -279
  279. package/src/utils/sandbox-runner-client.ts +0 -260
  280. package/src/utils/secrets-cache.ts +0 -183
  281. package/src/utils/sentry-identity.ts +0 -45
  282. package/src/utils/settle-with-timeout.test.ts +0 -21
  283. package/src/utils/settle-with-timeout.ts +0 -22
  284. package/src/utils/user-yaml-error.test.ts +0 -24
  285. package/src/utils/user-yaml-error.ts +0 -30
  286. package/src/utils/vault-api.test.ts +0 -536
  287. package/src/utils/vault-api.ts +0 -382
  288. package/src/utils/version-check.test.ts +0 -176
  289. package/src/utils/version-check.ts +0 -155
  290. package/src/utils/version-gate.test.ts +0 -1024
  291. package/src/utils/version-gate.ts +0 -702
  292. package/test/commands/db-tenant-isolation.test.ts +0 -94
  293. package/test/commands/db.test.ts +0 -85
  294. package/test/commands/signals.test.ts +0 -207
  295. package/test/commands/sources.test.ts +0 -231
  296. package/test/e2e/smoke-install-mcp.sh +0 -113
  297. package/test/fixtures/hq-pack-smoke-mcp/mcp/smoke-http.json +0 -1
  298. package/test/fixtures/hq-pack-smoke-mcp/package.yaml +0 -11
  299. package/test/fixtures/signals/action_item/sample.md +0 -16
  300. package/test/fixtures/signals/summary/sample.md +0 -12
  301. package/test/fixtures/sources/meetings/sample.md +0 -25
  302. package/test/helpers/cli-runner.ts +0 -150
  303. package/test/helpers/s3-list-mock.ts +0 -79
  304. package/test/helpers/vault-service-mock.ts +0 -295
  305. package/test/sources-signals/smoke.test.ts +0 -228
  306. package/tsconfig.json +0 -20
  307. package/vitest.config.ts +0 -11
  308. package/vitest.e2e.config.ts +0 -7
@@ -1,188 +0,0 @@
1
- /**
2
- * Unit tests for `resolvePerCompanyPullPlan` — the helper extracted from the
3
- * `hq sync pull --company <slug>` action handler so the US-011 banner +
4
- * strict-refusal wiring can be exercised without commander / a real
5
- * VaultClient (US-011 fix, 2026-05-21).
6
- *
7
- * The action handler itself stays a thin orchestrator. These tests cover
8
- * the membership-resolution decision tree, which is the part that broke
9
- * on the pre-fix code path (banner silently never fired because the
10
- * handler never looked up the sync-config).
11
- *
12
- * Coverage:
13
- * 1. Undefined targetCompany short-circuits to no-op.
14
- * 2. Direct UID match returns mode + companyUid.
15
- * 3. Direct membershipKey match returns mode + companyUid.
16
- * 4. Slug match via entity.get returns mode + companyUid.
17
- * 5. listMyMemberships error degrades silently to no resolution.
18
- * 6. getMembershipSyncConfig error degrades to undefined mode but keeps companyUid.
19
- * 7. Slug iteration stops at first match (doesn't fan out to all entities).
20
- * 8. No matching membership returns no resolution.
21
- */
22
-
23
- import { describe, expect, it, vi } from "vitest";
24
- import {
25
- resolvePerCompanyPullPlan,
26
- type PerCompanyPullResolveClient,
27
- } from "./cloud.js";
28
-
29
- function makeClient(opts: {
30
- memberships?: Array<{ companyUid: string; membershipKey: string }>;
31
- syncConfigs?: Record<string, { syncMode: "shared" | "all" | "custom" }>;
32
- entities?: Record<string, { slug?: string }>;
33
- failListMemberships?: boolean;
34
- failSyncConfigFor?: Set<string>;
35
- failEntityFor?: Set<string>;
36
- }): PerCompanyPullResolveClient & {
37
- _entityCalls: () => string[];
38
- } {
39
- const entityCalls: string[] = [];
40
- return {
41
- listMyMemberships: vi.fn(async () => {
42
- if (opts.failListMemberships) throw new Error("listMyMemberships boom");
43
- return opts.memberships ?? [];
44
- }),
45
- getMembershipSyncConfig: vi.fn(async (key: string) => {
46
- if (opts.failSyncConfigFor?.has(key))
47
- throw new Error(`getMembershipSyncConfig boom for ${key}`);
48
- const cfg = (opts.syncConfigs ?? {})[key];
49
- if (!cfg) throw new Error(`no fake config for ${key}`);
50
- return cfg;
51
- }),
52
- entity: {
53
- get: vi.fn(async (uid: string) => {
54
- entityCalls.push(uid);
55
- if (opts.failEntityFor?.has(uid))
56
- throw new Error(`entity.get boom for ${uid}`);
57
- return (opts.entities ?? {})[uid] ?? {};
58
- }),
59
- },
60
- _entityCalls: () => entityCalls,
61
- };
62
- }
63
-
64
- describe("resolvePerCompanyPullPlan (US-011 per-company pull fix)", () => {
65
- it("returns undefined+undefined when targetCompany is undefined", async () => {
66
- const client = makeClient({});
67
- const result = await resolvePerCompanyPullPlan(client, undefined);
68
- expect(result.resolvedCompanyUid).toBeUndefined();
69
- expect(result.resolvedMode).toBeUndefined();
70
- // Should not call any API — short-circuit.
71
- expect(client.listMyMemberships).not.toHaveBeenCalled();
72
- });
73
-
74
- it("matches by direct companyUid and returns the live syncMode", async () => {
75
- const client = makeClient({
76
- memberships: [
77
- { companyUid: "cmp_personal", membershipKey: "mbr_personal" },
78
- { companyUid: "cmp_indigo", membershipKey: "mbr_indigo" },
79
- ],
80
- syncConfigs: {
81
- mbr_personal: { syncMode: "all" },
82
- mbr_indigo: { syncMode: "shared" },
83
- },
84
- });
85
- const result = await resolvePerCompanyPullPlan(client, "cmp_indigo");
86
- expect(result.resolvedCompanyUid).toBe("cmp_indigo");
87
- expect(result.resolvedMode).toBe("shared");
88
- // Slug-fallback loop must not fire — no entity calls.
89
- expect(client._entityCalls()).toEqual([]);
90
- });
91
-
92
- it("matches by direct membershipKey", async () => {
93
- const client = makeClient({
94
- memberships: [
95
- { companyUid: "cmp_x", membershipKey: "mbr_special" },
96
- ],
97
- syncConfigs: { mbr_special: { syncMode: "custom" } },
98
- });
99
- const result = await resolvePerCompanyPullPlan(client, "mbr_special");
100
- expect(result.resolvedCompanyUid).toBe("cmp_x");
101
- expect(result.resolvedMode).toBe("custom");
102
- });
103
-
104
- it("matches by slug via entity.get fan-out", async () => {
105
- const client = makeClient({
106
- memberships: [
107
- { companyUid: "cmp_one", membershipKey: "mbr_one" },
108
- { companyUid: "cmp_two", membershipKey: "mbr_two" },
109
- ],
110
- syncConfigs: { mbr_two: { syncMode: "all" } },
111
- entities: {
112
- cmp_one: { slug: "foo" },
113
- cmp_two: { slug: "personal" },
114
- },
115
- });
116
- const result = await resolvePerCompanyPullPlan(client, "personal");
117
- expect(result.resolvedCompanyUid).toBe("cmp_two");
118
- expect(result.resolvedMode).toBe("all");
119
- });
120
-
121
- it("stops slug iteration at the first match — does not fan out", async () => {
122
- const client = makeClient({
123
- memberships: [
124
- { companyUid: "cmp_a", membershipKey: "mbr_a" },
125
- { companyUid: "cmp_b", membershipKey: "mbr_b" },
126
- { companyUid: "cmp_c", membershipKey: "mbr_c" },
127
- ],
128
- syncConfigs: { mbr_b: { syncMode: "shared" } },
129
- entities: {
130
- cmp_a: { slug: "alpha" },
131
- cmp_b: { slug: "beta" },
132
- cmp_c: { slug: "gamma" },
133
- },
134
- });
135
- const result = await resolvePerCompanyPullPlan(client, "beta");
136
- expect(result.resolvedCompanyUid).toBe("cmp_b");
137
- expect(result.resolvedMode).toBe("shared");
138
- // cmp_a was probed, cmp_b matched, cmp_c never touched.
139
- expect(client._entityCalls()).toEqual(["cmp_a", "cmp_b"]);
140
- });
141
-
142
- it("returns undefined for both when no matching membership/slug", async () => {
143
- const client = makeClient({
144
- memberships: [
145
- { companyUid: "cmp_x", membershipKey: "mbr_x" },
146
- ],
147
- entities: { cmp_x: { slug: "foo" } },
148
- });
149
- const result = await resolvePerCompanyPullPlan(client, "doesnotexist");
150
- expect(result.resolvedCompanyUid).toBeUndefined();
151
- expect(result.resolvedMode).toBeUndefined();
152
- });
153
-
154
- it("degrades silently when listMyMemberships fails — no banner, pull continues", async () => {
155
- const client = makeClient({ failListMemberships: true });
156
- const result = await resolvePerCompanyPullPlan(client, "personal");
157
- expect(result.resolvedCompanyUid).toBeUndefined();
158
- expect(result.resolvedMode).toBeUndefined();
159
- // Sync-config never reached.
160
- expect(client.getMembershipSyncConfig).not.toHaveBeenCalled();
161
- });
162
-
163
- it("on direct match, keeps companyUid even when getMembershipSyncConfig throws", async () => {
164
- const client = makeClient({
165
- memberships: [{ companyUid: "cmp_p", membershipKey: "mbr_p" }],
166
- failSyncConfigFor: new Set(["mbr_p"]),
167
- });
168
- const result = await resolvePerCompanyPullPlan(client, "cmp_p");
169
- expect(result.resolvedCompanyUid).toBe("cmp_p");
170
- // Mode unknown — caller will skip banner emit (it only fires when mode='all').
171
- expect(result.resolvedMode).toBeUndefined();
172
- });
173
-
174
- it("on slug-fallback match, skips broken entity rows and keeps looking", async () => {
175
- const client = makeClient({
176
- memberships: [
177
- { companyUid: "cmp_broken", membershipKey: "mbr_broken" },
178
- { companyUid: "cmp_good", membershipKey: "mbr_good" },
179
- ],
180
- syncConfigs: { mbr_good: { syncMode: "all" } },
181
- entities: { cmp_good: { slug: "wanted" } },
182
- failEntityFor: new Set(["cmp_broken"]),
183
- });
184
- const result = await resolvePerCompanyPullPlan(client, "wanted");
185
- expect(result.resolvedCompanyUid).toBe("cmp_good");
186
- expect(result.resolvedMode).toBe("all");
187
- });
188
- });
@@ -1,485 +0,0 @@
1
- /**
2
- * Unit tests for `pushAll` — the orchestrator behind `hq sync push --all`.
3
- *
4
- * Mirrors the DI layout used in `cloud.pull-all.test.ts`: pushAll takes a
5
- * `VaultClient`-shaped adapter and a `share`-shaped function as deps, so
6
- * the tests can exercise the membership + canonical-person fanout without
7
- * touching the network or the real share() implementation.
8
- *
9
- * Personal paths are computed via the real `computePersonalVaultPaths` so
10
- * we verify the hqRoot scope on disk. Each test that exercises personal
11
- * uses an isolated tmpdir with known top-level entries.
12
- */
13
-
14
- import { describe, expect, it, vi, beforeEach, afterEach } from "vitest";
15
- import * as fs from "fs";
16
- import * as os from "os";
17
- import * as path from "path";
18
-
19
- import {
20
- pushAll,
21
- type PushAllDeps,
22
- type PullAllVaultClient,
23
- type ShareCallOptions,
24
- type ShareCallResult,
25
- } from "./cloud.js";
26
-
27
- // ── Helpers ─────────────────────────────────────────────────────────────────
28
-
29
- interface FakeMembership {
30
- companyUid: string;
31
- }
32
-
33
- interface FakeEntity {
34
- uid: string;
35
- type: "person" | "company";
36
- slug: string;
37
- bucketName?: string;
38
- createdAt: string;
39
- }
40
-
41
- function makeVaultClient(opts: {
42
- memberships?: FakeMembership[];
43
- persons?: FakeEntity[];
44
- entitiesBySlug?: Record<string, { slug: string; name?: string }>;
45
- failGetEntityFor?: Set<string>;
46
- }): PullAllVaultClient {
47
- return {
48
- listMyMemberships: vi
49
- .fn<[], Promise<FakeMembership[]>>()
50
- .mockResolvedValue(opts.memberships ?? []),
51
- listPersonEntities: vi
52
- .fn<[], Promise<FakeEntity[]>>()
53
- .mockResolvedValue(opts.persons ?? []),
54
- getEntity: vi
55
- .fn<[string], Promise<{ slug?: string; name?: string } | null>>()
56
- .mockImplementation(async (uid: string) => {
57
- if (opts.failGetEntityFor?.has(uid)) {
58
- throw new Error(`fake getEntity failure for ${uid}`);
59
- }
60
- return opts.entitiesBySlug?.[uid] ?? null;
61
- }),
62
- };
63
- }
64
-
65
- function makeShareSpy(
66
- perCallOverrides: Record<string, Partial<ShareCallResult> | Error> = {},
67
- ): {
68
- fn: PushAllDeps["share"];
69
- calls: ShareCallOptions[];
70
- } {
71
- const calls: ShareCallOptions[] = [];
72
- const fn: PushAllDeps["share"] = vi
73
- .fn<[ShareCallOptions], Promise<ShareCallResult>>()
74
- .mockImplementation(async (options: ShareCallOptions) => {
75
- calls.push(options);
76
- const override = perCallOverrides[options.company];
77
- if (override instanceof Error) {
78
- throw override;
79
- }
80
- return {
81
- filesUploaded: 0,
82
- bytesUploaded: 0,
83
- filesSkipped: 0,
84
- filesDeleted: 0,
85
- filesExcludedByScope: 0,
86
- conflictPaths: [],
87
- aborted: false,
88
- ...override,
89
- };
90
- });
91
- return { fn, calls };
92
- }
93
-
94
- // Create a tmpdir hqRoot with a known set of top-level entries so the
95
- // personal-vault path computation produces a stable expected output.
96
- let tmpHqRoots: string[] = [];
97
-
98
- function makeHqRoot(topLevelEntries: string[]): string {
99
- const root = fs.mkdtempSync(path.join(os.tmpdir(), "hq-pushall-test-"));
100
- for (const name of topLevelEntries) {
101
- fs.mkdirSync(path.join(root, name), { recursive: true });
102
- }
103
- tmpHqRoots.push(root);
104
- return root;
105
- }
106
-
107
- beforeEach(() => {
108
- tmpHqRoots = [];
109
- });
110
-
111
- afterEach(() => {
112
- for (const root of tmpHqRoots) {
113
- try {
114
- fs.rmSync(root, { recursive: true, force: true });
115
- } catch {
116
- // Best-effort cleanup.
117
- }
118
- }
119
- });
120
-
121
- // ── 1. Happy path ───────────────────────────────────────────────────────────
122
-
123
- describe("pushAll", () => {
124
- it("pushes every membership plus the canonical person entity", async () => {
125
- const hqRoot = makeHqRoot([
126
- ".git",
127
- "companies",
128
- "repos",
129
- "workspace",
130
- ".claude",
131
- "knowledge",
132
- "personal",
133
- ]);
134
- const vaultClient = makeVaultClient({
135
- memberships: [
136
- { companyUid: "cmp_acme" },
137
- { companyUid: "cmp_globex" },
138
- ],
139
- persons: [
140
- {
141
- uid: "psn_alice",
142
- type: "person",
143
- slug: "alice",
144
- bucketName: "hq-vault-psn-alice",
145
- createdAt: "2026-01-01T00:00:00Z",
146
- },
147
- ],
148
- entitiesBySlug: {
149
- cmp_acme: { slug: "acme", name: "Acme" },
150
- cmp_globex: { slug: "globex", name: "Globex" },
151
- },
152
- });
153
- const share = makeShareSpy({
154
- cmp_acme: { filesUploaded: 4, bytesUploaded: 400 },
155
- cmp_globex: { filesUploaded: 1, bytesUploaded: 50 },
156
- psn_alice: { filesUploaded: 9, bytesUploaded: 900 },
157
- });
158
-
159
- const result = await pushAll(
160
- { hqRoot, onConflict: "abort" },
161
- { vaultClient, share: share.fn },
162
- );
163
-
164
- expect(share.calls).toHaveLength(3);
165
- expect(share.calls[0]).toMatchObject({
166
- company: "cmp_acme",
167
- hqRoot,
168
- paths: [path.join(hqRoot, "companies", "acme")],
169
- onConflict: "abort",
170
- skipUnchanged: true,
171
- propagateDeletes: true,
172
- });
173
- expect(share.calls[1]).toMatchObject({
174
- company: "cmp_globex",
175
- paths: [path.join(hqRoot, "companies", "globex")],
176
- });
177
- expect(share.calls[2]).toMatchObject({
178
- company: "psn_alice",
179
- personalMode: true,
180
- journalSlug: "__hq_personal_vault__",
181
- skipUnchanged: true,
182
- propagateDeletes: true,
183
- });
184
- // Personal paths excludes .git/companies/repos/workspace, keeps the rest.
185
- expect(new Set(share.calls[2].paths)).toEqual(
186
- new Set([
187
- path.join(hqRoot, ".claude"),
188
- path.join(hqRoot, "knowledge"),
189
- path.join(hqRoot, "personal"),
190
- ]),
191
- );
192
-
193
- expect(result.attempted).toBe(3);
194
- expect(result.filesUploaded).toBe(14);
195
- expect(result.bytesUploaded).toBe(1350);
196
- expect(result.errors).toEqual([]);
197
- expect(result.perCompany.map((row) => row.slug)).toEqual([
198
- "acme",
199
- "globex",
200
- "personal",
201
- ]);
202
- });
203
-
204
- // ── 2. Conflict + message passthrough ─────────────────────────────────────
205
-
206
- it("forwards --on-conflict and --message to every share() call", async () => {
207
- const hqRoot = makeHqRoot(["companies", ".claude"]);
208
- const vaultClient = makeVaultClient({
209
- memberships: [{ companyUid: "cmp_acme" }],
210
- persons: [
211
- {
212
- uid: "psn_alice",
213
- type: "person",
214
- slug: "alice",
215
- createdAt: "2026-01-01T00:00:00Z",
216
- },
217
- ],
218
- });
219
- const share = makeShareSpy();
220
-
221
- await pushAll(
222
- { hqRoot, onConflict: "overwrite", message: "test broadcast" },
223
- { vaultClient, share: share.fn },
224
- );
225
-
226
- for (const call of share.calls) {
227
- expect(call.onConflict).toBe("overwrite");
228
- expect(call.message).toBe("test broadcast");
229
- expect(call.skipUnchanged).toBe(true);
230
- expect(call.propagateDeletes).toBe(true);
231
- }
232
- });
233
-
234
- // ── 3. Per-company error isolation ────────────────────────────────────────
235
-
236
- it("continues past a per-company share failure and reports it in errors[]", async () => {
237
- const hqRoot = makeHqRoot(["companies"]);
238
- const vaultClient = makeVaultClient({
239
- memberships: [
240
- { companyUid: "cmp_acme" },
241
- { companyUid: "cmp_globex" },
242
- ],
243
- persons: [],
244
- entitiesBySlug: {
245
- cmp_acme: { slug: "acme" },
246
- cmp_globex: { slug: "globex" },
247
- },
248
- });
249
- const share = makeShareSpy({
250
- cmp_globex: new Error("STS denied"),
251
- });
252
-
253
- const result = await pushAll(
254
- { hqRoot },
255
- { vaultClient, share: share.fn },
256
- );
257
-
258
- expect(share.calls.map((c) => c.company)).toEqual([
259
- "cmp_acme",
260
- "cmp_globex",
261
- ]);
262
- expect(result.attempted).toBe(2);
263
- expect(result.errors).toEqual([
264
- { company: "globex", message: "STS denied" },
265
- ]);
266
- const globexRow = result.perCompany.find((r) => r.slug === "globex");
267
- expect(globexRow?.error).toBe("STS denied");
268
- expect(globexRow?.result).toBeUndefined();
269
- });
270
-
271
- // ── 4. No person entity ────────────────────────────────────────────────────
272
-
273
- it("omits the personal target when listPersonEntities returns []", async () => {
274
- const hqRoot = makeHqRoot(["companies"]);
275
- const vaultClient = makeVaultClient({
276
- memberships: [{ companyUid: "cmp_acme" }],
277
- persons: [],
278
- entitiesBySlug: { cmp_acme: { slug: "acme" } },
279
- });
280
- const share = makeShareSpy();
281
-
282
- const result = await pushAll(
283
- { hqRoot },
284
- { vaultClient, share: share.fn },
285
- );
286
-
287
- expect(share.calls).toHaveLength(1);
288
- expect(share.calls[0].company).toBe("cmp_acme");
289
- expect(share.calls[0].personalMode).toBeUndefined();
290
- expect(result.perCompany.map((r) => r.slug)).toEqual(["acme"]);
291
- });
292
-
293
- // ── 5. No memberships and no person entity ────────────────────────────────
294
-
295
- it("returns cleanly with zero attempts when there is nothing to push", async () => {
296
- const hqRoot = makeHqRoot([]);
297
- const vaultClient = makeVaultClient({});
298
- const share = makeShareSpy();
299
-
300
- const result = await pushAll(
301
- { hqRoot },
302
- { vaultClient, share: share.fn },
303
- );
304
-
305
- expect(share.calls).toEqual([]);
306
- expect(result).toEqual({
307
- attempted: 0,
308
- filesUploaded: 0,
309
- bytesUploaded: 0,
310
- filesDeleted: 0,
311
- filesExcludedByScope: 0,
312
- errors: [],
313
- perCompany: [],
314
- });
315
- });
316
-
317
- // ── 6. Canonical-person tiebreak ──────────────────────────────────────────
318
-
319
- it("picks the oldest person entity, breaking ties by uid", async () => {
320
- const hqRoot = makeHqRoot(["docs"]);
321
- const vaultClient = makeVaultClient({
322
- memberships: [],
323
- persons: [
324
- {
325
- uid: "psn_zzz",
326
- type: "person",
327
- slug: "alice-zzz",
328
- createdAt: "2026-01-01T00:00:00Z",
329
- },
330
- {
331
- uid: "psn_aaa",
332
- type: "person",
333
- slug: "alice-aaa",
334
- createdAt: "2026-01-01T00:00:00Z",
335
- },
336
- {
337
- uid: "psn_old",
338
- type: "person",
339
- slug: "alice-old",
340
- createdAt: "2025-06-01T00:00:00Z",
341
- },
342
- ],
343
- });
344
- const share = makeShareSpy();
345
-
346
- await pushAll({ hqRoot }, { vaultClient, share: share.fn });
347
-
348
- expect(share.calls).toHaveLength(1);
349
- expect(share.calls[0].company).toBe("psn_old");
350
- expect(share.calls[0].personalMode).toBe(true);
351
- expect(share.calls[0].journalSlug).toBe("__hq_personal_vault__");
352
- });
353
-
354
- // ── 7. Aggregate counts include deletes ───────────────────────────────────
355
-
356
- it("aggregates filesDeleted across every successful target", async () => {
357
- const hqRoot = makeHqRoot(["companies", "docs"]);
358
- const vaultClient = makeVaultClient({
359
- memberships: [{ companyUid: "cmp_acme" }],
360
- persons: [
361
- {
362
- uid: "psn_alice",
363
- type: "person",
364
- slug: "alice",
365
- createdAt: "2026-01-01T00:00:00Z",
366
- },
367
- ],
368
- entitiesBySlug: { cmp_acme: { slug: "acme" } },
369
- });
370
- const share = makeShareSpy({
371
- cmp_acme: { filesUploaded: 2, filesDeleted: 1 },
372
- psn_alice: { filesUploaded: 1, filesDeleted: 3 },
373
- });
374
-
375
- const result = await pushAll(
376
- { hqRoot },
377
- { vaultClient, share: share.fn },
378
- );
379
-
380
- expect(result.filesUploaded).toBe(3);
381
- expect(result.filesDeleted).toBe(4);
382
- });
383
-
384
- it("aggregates filesExcludedByScope across every successful target", async () => {
385
- const hqRoot = makeHqRoot(["companies", "docs"]);
386
- const vaultClient = makeVaultClient({
387
- memberships: [{ companyUid: "cmp_acme" }],
388
- persons: [
389
- {
390
- uid: "psn_alice",
391
- type: "person",
392
- slug: "alice",
393
- createdAt: "2026-01-01T00:00:00Z",
394
- },
395
- ],
396
- entitiesBySlug: { cmp_acme: { slug: "acme" } },
397
- });
398
- const share = makeShareSpy({
399
- cmp_acme: { filesExcludedByScope: 2 },
400
- psn_alice: { filesExcludedByScope: 3 },
401
- });
402
-
403
- const result = await pushAll(
404
- { hqRoot },
405
- { vaultClient, share: share.fn },
406
- );
407
-
408
- expect(result.filesExcludedByScope).toBe(5);
409
- });
410
-
411
- // ── skipPersonal — fanout omits the canonical-person leg ──────────────────
412
- //
413
- // Symmetric with the `pullAll` skipPersonal coverage in
414
- // `cloud.pull-all.test.ts`. Wired through from `hq sync push --all
415
- // --no-personal` (Commander's `--no-personal` is the auto-negation of the
416
- // `--personal` single-target selector). Verifies (a) the personal leg is
417
- // dropped even when a canonical person exists, and (b) the baseline
418
- // behavior — no flag → personal stays in the plan.
419
-
420
- it("skipPersonal=true omits the personal leg even when a person entity exists", async () => {
421
- const hqRoot = makeHqRoot([".git", "companies", "repos", "workspace"]);
422
- const vaultClient = makeVaultClient({
423
- memberships: [
424
- { companyUid: "cmp_acme" },
425
- { companyUid: "cmp_globex" },
426
- ],
427
- persons: [
428
- {
429
- uid: "psn_alice",
430
- type: "person",
431
- slug: "alice",
432
- bucketName: "hq-vault-psn-alice",
433
- createdAt: "2026-01-01T00:00:00Z",
434
- },
435
- ],
436
- entitiesBySlug: {
437
- cmp_acme: { slug: "acme" },
438
- cmp_globex: { slug: "globex" },
439
- },
440
- });
441
- const share = makeShareSpy();
442
-
443
- const result = await pushAll(
444
- { hqRoot, skipPersonal: true },
445
- { vaultClient, share: share.fn },
446
- );
447
-
448
- expect(share.calls.map((c) => c.company)).toEqual([
449
- "cmp_acme",
450
- "cmp_globex",
451
- ]);
452
- for (const call of share.calls) {
453
- expect(call.personalMode).toBeUndefined();
454
- expect(call.journalSlug).toBeUndefined();
455
- }
456
- expect(result.attempted).toBe(2);
457
- expect(result.perCompany.map((r) => r.slug)).toEqual(["acme", "globex"]);
458
- });
459
-
460
- it("skipPersonal omitted keeps the personal leg in the plan (baseline)", async () => {
461
- const hqRoot = makeHqRoot([".git", "companies", "repos", "workspace"]);
462
- const vaultClient = makeVaultClient({
463
- memberships: [{ companyUid: "cmp_acme" }],
464
- persons: [
465
- {
466
- uid: "psn_alice",
467
- type: "person",
468
- slug: "alice",
469
- createdAt: "2026-01-01T00:00:00Z",
470
- },
471
- ],
472
- entitiesBySlug: { cmp_acme: { slug: "acme" } },
473
- });
474
- const share = makeShareSpy();
475
-
476
- await pushAll({ hqRoot }, { vaultClient, share: share.fn });
477
-
478
- expect(share.calls.map((c) => c.company)).toEqual([
479
- "cmp_acme",
480
- "psn_alice",
481
- ]);
482
- expect(share.calls[1].personalMode).toBe(true);
483
- expect(share.calls[1].journalSlug).toBe("__hq_personal_vault__");
484
- });
485
- });
@@ -1,22 +0,0 @@
1
- import { describe, expect, it } from "vitest";
2
-
3
- import { scopeExcludedWarning } from "./cloud.js";
4
-
5
- describe("scopeExcludedWarning", () => {
6
- it("returns null for zero and negative counts", () => {
7
- expect(scopeExcludedWarning(0)).toBeNull();
8
- expect(scopeExcludedWarning(-1)).toBeNull();
9
- });
10
-
11
- it("returns a loud warning for positive counts", () => {
12
- const warning = scopeExcludedWarning(3);
13
-
14
- expect(warning).toBeTruthy();
15
- expect(warning).toContain("3");
16
- // The warning must loudly state the files did NOT reach the vault and
17
- // explain why (outside the caller's write access) — without leaning on
18
- // the jargon word "scope" in user-facing copy.
19
- expect(warning).toContain("NOT uploaded");
20
- expect(warning?.toLowerCase()).toContain("write access");
21
- });
22
- });