@indigoai-us/hq-cli 5.77.14 → 5.78.0

package/src/commands/sources.ts

@@ -1,362 +0,0 @@
-/**
- * `hq sources` subcommand group (US-006).
- *
- * Read-side surface over the sources written by sources-pipeline. Each
- * invocation resolves a Cognito access token (or honors HQ_ACCESS_TOKEN),
- * vends STS-scoped credentials via vault-service for the requested entity,
- * and delegates to hq-cloud's listSources/getSource primitives.
- *
- * Subcommands:
- *   hq sources list      List sources of a given channel for an entity.
- *   hq sources get       Fetch one source by id.
- *   hq sources channels  Print the canonical SOURCE_CHANNELS enum.
- *   hq sources entities  List entities the caller has access to.
- *
- * Defaults:
- *   --entity   falls back to .hq/config.json activeCompany (per sync.ts).
- *   --format   'table' when stdout is a TTY, 'json' when piped.
- *   --limit    50.
- */
-
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { Command } from "commander";
-import chalk from "chalk";
-import {
-  SOURCE_CHANNELS,
-  assertSourceChannel,
-  resolveEntity,
-  listAvailableEntities,
-  listSources,
-  getSource,
-  VaultClient,
-  type SourceChannel,
-  type SourceSummary,
-  type SourceDocument,
-  type AvailableEntity,
-  type EntityContext,
-} from "@indigoai-us/hq-cloud";
-import {
-  ensureCognitoToken,
-  buildVaultConfig,
-  DEFAULT_HQ_ROOT,
-} from "../utils/cognito-session.js";
-import { Sentry } from "../sentry.js";
-
-// ---------------------------------------------------------------------------
-// Access token resolution — honors HQ_ACCESS_TOKEN for tests + CI smoke
-// ---------------------------------------------------------------------------
-
-/**
- * Returns a usable access token. Tests and CI smoke scripts can set
- * HQ_ACCESS_TOKEN to bypass the interactive Cognito flow; otherwise we fall
- * back to the cached/refresh/browser-login pipeline in cognito-session.ts.
- */
-async function resolveAccessToken(): Promise<string> {
-  if (process.env.HQ_ACCESS_TOKEN) return process.env.HQ_ACCESS_TOKEN;
-  return ensureCognitoToken();
-}
-
-// ---------------------------------------------------------------------------
-// Entity resolution — flag → .hq/config.json activeCompany fallback
-// ---------------------------------------------------------------------------
-
-/**
- * Read the active company slug from .hq/config.json (mirrors sync.ts /
- * cloud.ts behaviour). Returns undefined when the file is missing or the
- * key isn't set; never throws.
- */
-function readActiveCompanySlug(hqRoot: string): string | undefined {
-  const configPath = path.join(hqRoot, ".hq", "config.json");
-  if (!fs.existsSync(configPath)) return undefined;
-  try {
-    const cfg = JSON.parse(fs.readFileSync(configPath, "utf-8"));
-    const slug = (cfg as { activeCompany?: unknown }).activeCompany;
-    return typeof slug === "string" && slug.length > 0 ? slug : undefined;
-  } catch {
-    return undefined;
-  }
-}
-
-function requireEntitySlug(flag: string | undefined, hqRoot: string): string {
-  const slug = flag ?? readActiveCompanySlug(hqRoot);
-  if (!slug) {
-    throw new Error(
-      "No entity specified. Pass --entity <slug> or run `hq sources entities` to see your options.",
-    );
-  }
-  return slug;
-}
-
-// ---------------------------------------------------------------------------
-// Format defaults — TTY-aware (humans get table, agents get JSON)
-// ---------------------------------------------------------------------------
-
-type ListFormat = "table" | "json";
-type GetFormat = "markdown" | "json";
-
-function defaultListFormat(): ListFormat {
-  return process.stdout.isTTY ? "table" : "json";
-}
-
-function defaultGetFormat(): GetFormat {
-  return process.stdout.isTTY ? "markdown" : "json";
-}
-
-// ---------------------------------------------------------------------------
-// Rendering helpers
-// ---------------------------------------------------------------------------
-
-function renderListTable(entries: SourceSummary[], includeFrontmatter: boolean): string {
-  if (entries.length === 0) return "(no sources)";
-  const rows = entries.map((e) => ({
-    sourceId: e.sourceId,
-    lastModified: e.lastModified.toISOString(),
-    size: String(e.size),
-    ...(includeFrontmatter
-      ? { title: typeof e.frontmatter?.title === "string" ? e.frontmatter.title : "" }
-      : {}),
-  }));
-  const headers = Object.keys(rows[0]);
-  const widths = headers.map((h) =>
-    Math.max(h.length, ...rows.map((r) => String((r as Record<string, string>)[h]).length)),
-  );
-  const pad = (s: string, w: number): string => s + " ".repeat(Math.max(0, w - s.length));
-  const headerLine = headers.map((h, i) => pad(h, widths[i])).join("  ");
-  const sep = widths.map((w) => "-".repeat(w)).join("  ");
-  const body = rows
-    .map((r) =>
-      headers.map((h, i) => pad(String((r as Record<string, string>)[h]), widths[i])).join("  "),
-    )
-    .join("\n");
-  return [headerLine, sep, body].join("\n");
-}
-
-// ---------------------------------------------------------------------------
-// Subcommand: list
-// ---------------------------------------------------------------------------
-
-interface ListOptions {
-  entity?: string;
-  type?: string;
-  limit?: string;
-  pageToken?: string;
-  format?: ListFormat;
-  includeFrontmatter?: boolean;
-  hqRoot: string;
-}
-
-async function runList(options: ListOptions): Promise<void> {
-  if (!options.type) {
-    throw new Error(
-      `--type <channel> is required. Valid channels: ${SOURCE_CHANNELS.join(", ")}`,
-    );
-  }
-  // Throws InvalidSourceChannelError with the list of valid channels if not in enum.
-  assertSourceChannel(options.type);
-  const channel: SourceChannel = options.type;
-
-  const slug = requireEntitySlug(options.entity, options.hqRoot);
-  const limit = options.limit ? Number.parseInt(options.limit, 10) : 50;
-  if (!Number.isFinite(limit) || limit <= 0) {
-    throw new Error(`--limit must be a positive integer (got '${options.limit}')`);
-  }
-  const format = options.format ?? defaultListFormat();
-
-  const accessToken = await resolveAccessToken();
-  const vaultConfig = buildVaultConfig(accessToken);
-  const entity: EntityContext = await resolveEntity({ slug, vaultConfig });
-
-  const result = await listSources({
-    entity,
-    channel,
-    limit,
-    continuationToken: options.pageToken,
-    includeFrontmatter: options.includeFrontmatter,
-    // HQ-59: route company (cmp_) reads through the ACL-filtered presign
-    // transport (no direct S3). Personal vaults / no-client stay on S3.
-    vault: new VaultClient(vaultConfig),
-  });
-
-  if (format === "json") {
-    process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-    return;
-  }
-
-  process.stdout.write(renderListTable(result.entries, !!options.includeFrontmatter) + "\n");
-  if (result.nextToken) {
-    process.stdout.write(`\nNext page token: ${result.nextToken}\n`);
-  }
-}
-
-// ---------------------------------------------------------------------------
-// Subcommand: get
-// ---------------------------------------------------------------------------
-
-interface GetOptions {
-  entity?: string;
-  type?: string;
-  id?: string;
-  format?: GetFormat;
-  includeRaw?: boolean;
-  hqRoot: string;
-}
-
-async function runGet(options: GetOptions): Promise<void> {
-  if (!options.type) {
-    throw new Error(
-      `--type <channel> is required. Valid channels: ${SOURCE_CHANNELS.join(", ")}`,
-    );
-  }
-  if (!options.id) {
-    throw new Error("--id <sourceId> is required.");
-  }
-  assertSourceChannel(options.type);
-  const channel: SourceChannel = options.type;
-
-  const slug = requireEntitySlug(options.entity, options.hqRoot);
-  const format = options.format ?? defaultGetFormat();
-
-  const accessToken = await resolveAccessToken();
-  const vaultConfig = buildVaultConfig(accessToken);
-  const entity: EntityContext = await resolveEntity({ slug, vaultConfig });
-
-  const doc: SourceDocument = await getSource({
-    entity,
-    channel,
-    sourceId: options.id,
-    includeRaw: options.includeRaw,
-    // HQ-59: company (cmp_) reads over presign; personal/no-client stay on S3.
-    vault: new VaultClient(vaultConfig),
-  });
-
-  if (format === "json") {
-    process.stdout.write(JSON.stringify(doc, null, 2) + "\n");
-    return;
-  }
-
-  // markdown: reconstruct frontmatter block + body so the output round-trips.
-  if (doc.frontmatter) {
-    const yamlLines = Object.entries(doc.frontmatter).map(
-      ([k, v]) => `${k}: ${typeof v === "string" ? v : JSON.stringify(v)}`,
-    );
-    process.stdout.write(`---\n${yamlLines.join("\n")}\n---\n\n${doc.body}\n`);
-  } else {
-    process.stdout.write(doc.body + "\n");
-  }
-}
-
-// ---------------------------------------------------------------------------
-// Subcommand: channels
-// ---------------------------------------------------------------------------
-
-function runChannels(): void {
-  const sorted = [...SOURCE_CHANNELS].sort();
-  process.stdout.write(sorted.join("\n") + "\n");
-}
-
-// ---------------------------------------------------------------------------
-// Subcommand: entities
-// ---------------------------------------------------------------------------
-
-async function runEntities(options: { format?: ListFormat }): Promise<void> {
-  const format = options.format ?? defaultListFormat();
-  const accessToken = await resolveAccessToken();
-  const vaultConfig = buildVaultConfig(accessToken);
-  const entities: AvailableEntity[] = await listAvailableEntities({ vaultConfig });
-
-  if (format === "json") {
-    process.stdout.write(JSON.stringify(entities, null, 2) + "\n");
-    return;
-  }
-
-  if (entities.length === 0) {
-    process.stdout.write("(no entities — your account has no active memberships)\n");
-    return;
-  }
-
-  const headers = ["slug", "role", "uid"];
-  const widths = headers.map((h, i) =>
-    Math.max(
-      h.length,
-      ...entities.map((e) => String([e.slug, e.role, e.uid][i]).length),
-    ),
-  );
-  const pad = (s: string, w: number): string => s + " ".repeat(Math.max(0, w - s.length));
-  const headerLine = headers.map((h, i) => pad(h, widths[i])).join("  ");
-  const sep = widths.map((w) => "-".repeat(w)).join("  ");
-  const body = entities
-    .map((e) =>
-      [e.slug, e.role, e.uid].map((cell, i) => pad(cell, widths[i])).join("  "),
-    )
-    .join("\n");
-  process.stdout.write([headerLine, sep, body].join("\n") + "\n");
-}
-
-// ---------------------------------------------------------------------------
-// Registration
-// ---------------------------------------------------------------------------
-
-/** Wrap an action so caught errors print red + capture to Sentry + exit 1. */
-function withErrorHandling<T extends unknown[]>(
-  fn: (...args: T) => Promise<void> | void,
-): (...args: T) => Promise<void> {
-  return async (...args: T) => {
-    try {
-      await fn(...args);
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      process.stderr.write(chalk.red(`✗ ${message}\n`));
-      Sentry.captureException(err);
-      process.exit(1);
-    }
-  };
-}
-
-export function registerSourcesCommand(program: Command): void {
-  const sources = program
-    .command("sources")
-    .description("Read sources (meetings, emails, etc.) from a vault entity");
-
-  sources
-    .command("list")
-    .description("List sources of a given channel for an entity")
-    .option("--entity <slug>", "Entity slug (defaults to .hq/config.json activeCompany)")
-    .option("--type <channel>", `Source channel: ${SOURCE_CHANNELS.join(" | ")}`)
-    .option("--limit <n>", "Max entries per page (default 50)")
-    .option("--page-token <token>", "Continuation token from a prior page")
-    .option("--format <fmt>", "Output format: table | json (default: table for TTY, json piped)")
-    .option("--include-frontmatter", "Fetch + parse each entry's frontmatter (extra GETs)")
-    .option(
-      "--hq-root <path>",
-      `Local HQ tree root (for .hq/config.json lookup; default: ${DEFAULT_HQ_ROOT})`,
-      DEFAULT_HQ_ROOT,
-    )
-    .action(withErrorHandling(async (options: ListOptions) => runList(options)));
-
-  sources
-    .command("get")
-    .description("Fetch a single source by id")
-    .option("--entity <slug>", "Entity slug (defaults to .hq/config.json activeCompany)")
-    .option("--type <channel>", `Source channel: ${SOURCE_CHANNELS.join(" | ")}`)
-    .option("--id <sourceId>", "Source id (filename minus .md)")
-    .option("--format <fmt>", "Output format: markdown | json (default: markdown for TTY, json piped)")
-    .option("--include-raw", "Also fetch the .raw.json sibling")
-    .option(
-      "--hq-root <path>",
-      `Local HQ tree root (for .hq/config.json lookup; default: ${DEFAULT_HQ_ROOT})`,
-      DEFAULT_HQ_ROOT,
-    )
-    .action(withErrorHandling(async (options: GetOptions) => runGet(options)));
-
-  sources
-    .command("channels")
-    .description("Print the canonical source channels (one per line)")
-    .action(withErrorHandling(() => runChannels()));
-
-  sources
-    .command("entities")
-    .description("List entities (companies/personal) your account has access to")
-    .option("--format <fmt>", "Output format: table | json (default: table for TTY, json piped)")
-    .action(withErrorHandling(async (options: { format?: ListFormat }) => runEntities(options)));
-}