@indigoai-us/hq-cli 5.77.14 → 5.78.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (308) hide show
  1. package/CHANGELOG.md +23 -0
  2. package/assets/scaffold/core/scripts/archive-old-threads.sh +86 -0
  3. package/assets/scaffold/core/scripts/backfill-company-skill-mirrors.sh +73 -0
  4. package/assets/scaffold/core/scripts/backfill-workspace-mirror.sh +51 -0
  5. package/assets/scaffold/core/scripts/codex-skill-bridge.sh +550 -0
  6. package/assets/scaffold/core/scripts/detect-stale-core-policy-mirror.sh +185 -0
  7. package/assets/scaffold/core/scripts/hq-status-summary.sh +187 -0
  8. package/assets/scaffold/core/scripts/ontology-readme-drift.sh +264 -0
  9. package/assets/scaffold/core/scripts/qmd-reindex-after-sync.sh +93 -0
  10. package/assets/scaffold/core/scripts/rebuild-all-indexes.sh +69 -0
  11. package/assets/scaffold/core/scripts/rebuild-companies-index.sh +206 -0
  12. package/assets/scaffold/core/scripts/rebuild-company-knowledge-index.sh +127 -0
  13. package/assets/scaffold/core/scripts/rebuild-orchestrator-index.sh +86 -0
  14. package/assets/scaffold/core/scripts/rebuild-projects-index.sh +105 -0
  15. package/assets/scaffold/core/scripts/rebuild-public-knowledge-index.sh +83 -0
  16. package/assets/scaffold/core/scripts/rebuild-reports-index.sh +114 -0
  17. package/assets/scaffold/core/scripts/rebuild-social-drafts-index.sh +135 -0
  18. package/assets/scaffold/core/scripts/rebuild-threads-index.sh +82 -0
  19. package/assets/scaffold/core/scripts/rebuild-workers-index.sh +97 -0
  20. package/assets/scaffold/core/scripts/resize-screenshot.sh +47 -0
  21. package/assets/scaffold/core/scripts/token-usage-report.sh +254 -0
  22. package/assets/scaffold/core/scripts/worktree.sh +136 -0
  23. package/dist/commands/agents.js +28 -12
  24. package/dist/commands/api-keys.js +100 -20
  25. package/dist/commands/core.d.ts +90 -0
  26. package/dist/commands/core.js +279 -0
  27. package/dist/commands/files-browse.d.ts +21 -0
  28. package/dist/commands/files-browse.js +145 -24
  29. package/dist/commands/files.js +33 -7
  30. package/dist/commands/members.js +16 -5
  31. package/dist/commands/pack-install.d.ts +14 -0
  32. package/dist/commands/pack-install.js +42 -2
  33. package/dist/commands/pkg-install.js +39 -2
  34. package/dist/commands/run.js +6 -2
  35. package/dist/commands/secrets.js +120 -65
  36. package/dist/main.js +6 -0
  37. package/dist/utils/api-key-command-gate.d.ts +45 -0
  38. package/dist/utils/api-key-command-gate.js +51 -0
  39. package/dist/utils/hq-roots.d.ts +91 -0
  40. package/dist/utils/hq-roots.js +212 -0
  41. package/dist/utils/resolve-vault-credential.d.ts +63 -3
  42. package/dist/utils/resolve-vault-credential.js +152 -6
  43. package/dist/utils/run-bundled-script.d.ts +66 -0
  44. package/dist/utils/run-bundled-script.js +80 -0
  45. package/dist/utils/vault-api.d.ts +21 -0
  46. package/dist/utils/vault-api.js +74 -3
  47. package/package.json +7 -1
  48. package/.claude/policies/hq-cli-interactive-reads-use-sts-vend.md +0 -49
  49. package/.github/workflows/ci.yml +0 -46
  50. package/.github/workflows/publish.yml +0 -36
  51. package/.github/workflows/scripts/smoke-test-pkg.sh +0 -97
  52. package/e2e/cli.test.ts +0 -128
  53. package/eslint.config.js +0 -37
  54. package/pnpm-workspace.yaml +0 -4
  55. package/scripts/chmod-bins.mjs +0 -49
  56. package/scripts/generate-dsn.mjs +0 -26
  57. package/scripts/generate-scan-packages-table.mjs +0 -113
  58. package/scripts/smoke-sources-signals.sh +0 -103
  59. package/src/bin/hq-auth-refresh.ts +0 -43
  60. package/src/cli-version.ts +0 -13
  61. package/src/commands/__fixtures__/make-tar.ts +0 -126
  62. package/src/commands/_patterns.ts +0 -10
  63. package/src/commands/add.ts +0 -75
  64. package/src/commands/agents.test.ts +0 -527
  65. package/src/commands/agents.ts +0 -923
  66. package/src/commands/api-keys.test.ts +0 -291
  67. package/src/commands/api-keys.ts +0 -382
  68. package/src/commands/artifact-verify.test.ts +0 -177
  69. package/src/commands/auth.test.ts +0 -82
  70. package/src/commands/auth.ts +0 -213
  71. package/src/commands/billing.test.ts +0 -158
  72. package/src/commands/billing.ts +0 -146
  73. package/src/commands/channels.test.ts +0 -74
  74. package/src/commands/channels.ts +0 -91
  75. package/src/commands/cloud-demote.test.ts +0 -401
  76. package/src/commands/cloud-demote.ts +0 -278
  77. package/src/commands/cloud-provision.test.ts +0 -1117
  78. package/src/commands/cloud-provision.ts +0 -942
  79. package/src/commands/cloud.pull-all.test.ts +0 -711
  80. package/src/commands/cloud.pull-per-company.test.ts +0 -188
  81. package/src/commands/cloud.push-all.test.ts +0 -485
  82. package/src/commands/cloud.scope-excluded-warning.test.ts +0 -22
  83. package/src/commands/cloud.selectors.test.ts +0 -208
  84. package/src/commands/cloud.status.test.ts +0 -160
  85. package/src/commands/cloud.test.ts +0 -41
  86. package/src/commands/cloud.ts +0 -2130
  87. package/src/commands/company.test.ts +0 -202
  88. package/src/commands/company.ts +0 -148
  89. package/src/commands/creators.test.ts +0 -60
  90. package/src/commands/creators.ts +0 -117
  91. package/src/commands/crm.test.ts +0 -179
  92. package/src/commands/crm.ts +0 -236
  93. package/src/commands/db-migrate.ts +0 -55
  94. package/src/commands/db-provision.ts +0 -114
  95. package/src/commands/db-sql.ts +0 -124
  96. package/src/commands/db-status.ts +0 -108
  97. package/src/commands/db.ts +0 -26
  98. package/src/commands/dm.test.ts +0 -748
  99. package/src/commands/dm.ts +0 -1226
  100. package/src/commands/feedback.test.ts +0 -413
  101. package/src/commands/feedback.ts +0 -169
  102. package/src/commands/files-browse.test.ts +0 -1249
  103. package/src/commands/files-browse.ts +0 -1506
  104. package/src/commands/files-delete.test.ts +0 -484
  105. package/src/commands/files-recovery.test.ts +0 -370
  106. package/src/commands/files.test.ts +0 -722
  107. package/src/commands/files.ts +0 -1446
  108. package/src/commands/group-grants.test.ts +0 -330
  109. package/src/commands/group-grants.ts +0 -455
  110. package/src/commands/groups.test.ts +0 -44
  111. package/src/commands/groups.ts +0 -368
  112. package/src/commands/integrations.test.ts +0 -633
  113. package/src/commands/integrations.ts +0 -507
  114. package/src/commands/list.ts +0 -85
  115. package/src/commands/login.ts +0 -52
  116. package/src/commands/logout.ts +0 -30
  117. package/src/commands/marketplace-install.test.ts +0 -543
  118. package/src/commands/marketplace-security.test.ts +0 -646
  119. package/src/commands/mcp-registration.test.ts +0 -2787
  120. package/src/commands/mcp-registration.ts +0 -2612
  121. package/src/commands/mcp-status.test.ts +0 -483
  122. package/src/commands/mcp-status.ts +0 -575
  123. package/src/commands/mcp-status.us011.test.ts +0 -243
  124. package/src/commands/meetings.test.ts +0 -522
  125. package/src/commands/meetings.ts +0 -789
  126. package/src/commands/members.test.ts +0 -1474
  127. package/src/commands/members.ts +0 -1181
  128. package/src/commands/onboard-identity-guard.test.ts +0 -99
  129. package/src/commands/onboard-identity-guard.ts +0 -103
  130. package/src/commands/onboard-join.test.ts +0 -96
  131. package/src/commands/onboard-join.ts +0 -101
  132. package/src/commands/onboard-warning.test.ts +0 -26
  133. package/src/commands/onboard-warning.ts +0 -12
  134. package/src/commands/onboard.ts +0 -267
  135. package/src/commands/outposts-heartbeat.test.ts +0 -299
  136. package/src/commands/outposts-heartbeat.ts +0 -310
  137. package/src/commands/outposts-replica-sync.test.ts +0 -272
  138. package/src/commands/outposts-self-deploy.test.ts +0 -243
  139. package/src/commands/outposts.test.ts +0 -1039
  140. package/src/commands/outposts.ts +0 -1935
  141. package/src/commands/pack-install-secret-authorization.test.ts +0 -115
  142. package/src/commands/pack-install.test.ts +0 -1469
  143. package/src/commands/pack-install.ts +0 -2256
  144. package/src/commands/pack-update-cache.test.ts +0 -149
  145. package/src/commands/packs-update-api-key.test.ts +0 -105
  146. package/src/commands/packs.test.ts +0 -88
  147. package/src/commands/packs.ts +0 -622
  148. package/src/commands/people.test.ts +0 -807
  149. package/src/commands/people.ts +0 -422
  150. package/src/commands/pkg-install.dispatch.test.ts +0 -103
  151. package/src/commands/pkg-install.ts +0 -221
  152. package/src/commands/pkg-list.test.ts +0 -79
  153. package/src/commands/pkg-list.ts +0 -13
  154. package/src/commands/pkg-remove.ts +0 -71
  155. package/src/commands/pkg-update.ts +0 -189
  156. package/src/commands/publish.test.ts +0 -650
  157. package/src/commands/publish.ts +0 -580
  158. package/src/commands/reindex.test.ts +0 -259
  159. package/src/commands/reindex.ts +0 -274
  160. package/src/commands/rescue.test.ts +0 -39
  161. package/src/commands/rescue.ts +0 -210
  162. package/src/commands/run.env-local.test.ts +0 -88
  163. package/src/commands/run.test.ts +0 -45
  164. package/src/commands/run.ts +0 -190
  165. package/src/commands/safe-extract.test.ts +0 -459
  166. package/src/commands/safe-extract.ts +0 -444
  167. package/src/commands/secrets-scope.test.ts +0 -56
  168. package/src/commands/secrets-scope.ts +0 -32
  169. package/src/commands/secrets.parse-destination.test.ts +0 -38
  170. package/src/commands/secrets.test.ts +0 -2050
  171. package/src/commands/secrets.ts +0 -2249
  172. package/src/commands/signals.ts +0 -351
  173. package/src/commands/skill.test.ts +0 -770
  174. package/src/commands/skill.ts +0 -796
  175. package/src/commands/sources.ts +0 -362
  176. package/src/commands/sync-mode.test.ts +0 -366
  177. package/src/commands/sync-mode.ts +0 -387
  178. package/src/commands/sync-narrow.test.ts +0 -633
  179. package/src/commands/sync-narrow.ts +0 -555
  180. package/src/commands/sync.ts +0 -165
  181. package/src/commands/team-sync.ts +0 -628
  182. package/src/commands/update.ts +0 -71
  183. package/src/commands/whoami.ts +0 -83
  184. package/src/commands/workers.test.ts +0 -158
  185. package/src/commands/workers.ts +0 -301
  186. package/src/index.test.ts +0 -32
  187. package/src/index.ts +0 -20
  188. package/src/lib/db/control-plane.test.ts +0 -59
  189. package/src/lib/db/control-plane.ts +0 -113
  190. package/src/lib/db/local.test.ts +0 -81
  191. package/src/lib/db/local.ts +0 -148
  192. package/src/lib/db/migrate.test.ts +0 -133
  193. package/src/lib/db/migrate.ts +0 -137
  194. package/src/lib/db/paths.test.ts +0 -112
  195. package/src/lib/db/paths.ts +0 -128
  196. package/src/lib/db/remote-engine.test.ts +0 -44
  197. package/src/lib/db/remote-engine.ts +0 -148
  198. package/src/lib/db/remote-sql.test.ts +0 -32
  199. package/src/lib/db/remote-sql.ts +0 -62
  200. package/src/lib/db/sql.test.ts +0 -106
  201. package/src/lib/db/sql.ts +0 -192
  202. package/src/lib/hq-cloud-dep.smoke.test.ts +0 -75
  203. package/src/lib/local-tree-diff.test.ts +0 -301
  204. package/src/lib/local-tree-diff.ts +0 -362
  205. package/src/lib/narrow-hint-banner.test.ts +0 -235
  206. package/src/lib/narrow-hint-banner.ts +0 -212
  207. package/src/lib/plan-limit-nag.test.ts +0 -317
  208. package/src/lib/plan-limit-nag.ts +0 -264
  209. package/src/main.ts +0 -371
  210. package/src/node-preflight.test.ts +0 -60
  211. package/src/node-preflight.ts +0 -67
  212. package/src/outpost/session-heartbeat-bounds.test.ts +0 -195
  213. package/src/outpost/session-heartbeat-guard.test.ts +0 -105
  214. package/src/outpost/session-heartbeat-publisher.test.ts +0 -178
  215. package/src/outpost/session-heartbeat-publisher.ts +0 -186
  216. package/src/outpost/session-heartbeat-retain-guard.test.ts +0 -126
  217. package/src/outpost/session-heartbeat.test.ts +0 -459
  218. package/src/outpost/session-heartbeat.ts +0 -877
  219. package/src/packaging.test.ts +0 -109
  220. package/src/run/__fixtures__/discover-schemas/example.env.schema +0 -4
  221. package/src/run/discover-schemas.test.ts +0 -153
  222. package/src/run/discover-schemas.ts +0 -79
  223. package/src/run/hq-plugin.test.ts +0 -371
  224. package/src/run/hq-plugin.ts +0 -277
  225. package/src/run/varlock-shape.test.ts +0 -57
  226. package/src/schemas/hq-package.schema.json +0 -155
  227. package/src/sentry-before-send.test.ts +0 -359
  228. package/src/sentry-before-send.ts +0 -221
  229. package/src/sentry-epipe.test.ts +0 -37
  230. package/src/sentry-release.test.ts +0 -54
  231. package/src/sentry.test.ts +0 -24
  232. package/src/sentry.ts +0 -54
  233. package/src/strategies/link.ts +0 -62
  234. package/src/strategies/merge.ts +0 -142
  235. package/src/types.ts +0 -146
  236. package/src/utils/__fixtures__/scan-packages.generated-block.sh +0 -23
  237. package/src/utils/auth-error.test.ts +0 -40
  238. package/src/utils/auth-error.ts +0 -42
  239. package/src/utils/billing-gate.test.ts +0 -95
  240. package/src/utils/billing-gate.ts +0 -228
  241. package/src/utils/breadcrumb-buffer.ts +0 -18
  242. package/src/utils/cli-telemetry.test.ts +0 -153
  243. package/src/utils/cli-telemetry.ts +0 -61
  244. package/src/utils/cognito-session.machine.test.ts +0 -109
  245. package/src/utils/cognito-session.refresh.test.ts +0 -84
  246. package/src/utils/cognito-session.test.ts +0 -328
  247. package/src/utils/cognito-session.ts +0 -448
  248. package/src/utils/company-selection-error.test.ts +0 -42
  249. package/src/utils/company-selection-error.ts +0 -45
  250. package/src/utils/contribution-table.ts +0 -83
  251. package/src/utils/environmental-error.test.ts +0 -45
  252. package/src/utils/environmental-error.ts +0 -39
  253. package/src/utils/epipe.test.ts +0 -28
  254. package/src/utils/epipe.ts +0 -29
  255. package/src/utils/expected-cli-error.test.ts +0 -28
  256. package/src/utils/expected-cli-error.ts +0 -39
  257. package/src/utils/feedback-diagnostics.test.ts +0 -183
  258. package/src/utils/feedback-diagnostics.ts +0 -123
  259. package/src/utils/feedback-screenshots.test.ts +0 -134
  260. package/src/utils/feedback-screenshots.ts +0 -124
  261. package/src/utils/feedback-versions.test.ts +0 -98
  262. package/src/utils/feedback-versions.ts +0 -68
  263. package/src/utils/git.ts +0 -74
  264. package/src/utils/integrity.ts +0 -59
  265. package/src/utils/intercepted-process-exit.test.ts +0 -37
  266. package/src/utils/intercepted-process-exit.ts +0 -36
  267. package/src/utils/login-provider.test.ts +0 -42
  268. package/src/utils/login-provider.ts +0 -30
  269. package/src/utils/manifest.test.ts +0 -167
  270. package/src/utils/manifest.ts +0 -131
  271. package/src/utils/pack-contributions.test.ts +0 -603
  272. package/src/utils/pack-contributions.ts +0 -450
  273. package/src/utils/people.ts +0 -215
  274. package/src/utils/registry-client.ts +0 -204
  275. package/src/utils/registry.ts +0 -90
  276. package/src/utils/resolve-vault-credential.test.ts +0 -69
  277. package/src/utils/resolve-vault-credential.ts +0 -60
  278. package/src/utils/sandbox-runner-client.test.ts +0 -279
  279. package/src/utils/sandbox-runner-client.ts +0 -260
  280. package/src/utils/secrets-cache.ts +0 -183
  281. package/src/utils/sentry-identity.ts +0 -45
  282. package/src/utils/settle-with-timeout.test.ts +0 -21
  283. package/src/utils/settle-with-timeout.ts +0 -22
  284. package/src/utils/user-yaml-error.test.ts +0 -24
  285. package/src/utils/user-yaml-error.ts +0 -30
  286. package/src/utils/vault-api.test.ts +0 -536
  287. package/src/utils/vault-api.ts +0 -382
  288. package/src/utils/version-check.test.ts +0 -176
  289. package/src/utils/version-check.ts +0 -155
  290. package/src/utils/version-gate.test.ts +0 -1024
  291. package/src/utils/version-gate.ts +0 -702
  292. package/test/commands/db-tenant-isolation.test.ts +0 -94
  293. package/test/commands/db.test.ts +0 -85
  294. package/test/commands/signals.test.ts +0 -207
  295. package/test/commands/sources.test.ts +0 -231
  296. package/test/e2e/smoke-install-mcp.sh +0 -113
  297. package/test/fixtures/hq-pack-smoke-mcp/mcp/smoke-http.json +0 -1
  298. package/test/fixtures/hq-pack-smoke-mcp/package.yaml +0 -11
  299. package/test/fixtures/signals/action_item/sample.md +0 -16
  300. package/test/fixtures/signals/summary/sample.md +0 -12
  301. package/test/fixtures/sources/meetings/sample.md +0 -25
  302. package/test/helpers/cli-runner.ts +0 -150
  303. package/test/helpers/s3-list-mock.ts +0 -79
  304. package/test/helpers/vault-service-mock.ts +0 -295
  305. package/test/sources-signals/smoke.test.ts +0 -228
  306. package/tsconfig.json +0 -20
  307. package/vitest.config.ts +0 -11
  308. package/vitest.e2e.config.ts +0 -7
@@ -1,387 +0,0 @@
1
- /**
2
- * `hq sync mode <mode>` (US-006) — flip a membership's syncMode for a company.
3
- *
4
- * Subcommand of the `hq sync` group. Three call shapes:
5
- *
6
- * hq sync mode shared|all|custom [--company <slug>]
7
- * Resolves the target membership for the given company (or the cwd's
8
- * active company from `.hq/config.json` if `--company` is omitted) and
9
- * calls `VaultClient.setMembershipSyncConfig`. Prints membershipId +
10
- * previous mode → new mode as a chat audit trail.
11
- *
12
- * hq sync mode --show
13
- * No positional. Prints a table of every membership the caller has
14
- * with its company slug, current sync-mode, and last-updated stamp.
15
- *
16
- * hq sync mode custom --paths a/,b/ (planned follow-up)
17
- * For the `custom` mode the server requires `customPaths`. This command
18
- * accepts `--paths` as a comma-separated list to forward to the API; if
19
- * omitted on `custom` the server validation will reject.
20
- *
21
- * Auto-detect of `--company` from cwd: best-effort via the active-company
22
- * slug in `<hq-root>/.hq/config.json`. If absent, the caller must pass
23
- * `--company` explicitly — there's no cwd-walk to a `companies/<slug>/`
24
- * folder in this initial implementation (follow-up US could add it).
25
- *
26
- * Cross-package note: this command depends on `VaultClient`
27
- * (`getMembershipSyncConfig` / `setMembershipSyncConfig`) added in
28
- * hq-cloud US-004 (commit 41e5ee1). While that hq-cloud release is
29
- * unpublished, hq-cli pins `@indigoai-us/hq-cloud` to `file:../hq-cloud`
30
- * in package.json — revert that line to `^5.20.0` (or whatever the
31
- * published cut is) once US-004 ships to npm.
32
- */
33
-
34
- import { Command } from "commander";
35
- import chalk from "chalk";
36
- import * as fs from "node:fs";
37
- import * as path from "node:path";
38
-
39
- import {
40
- VaultClient,
41
- type MembershipSyncConfig,
42
- type Membership,
43
- type SyncMode,
44
- } from "@indigoai-us/hq-cloud";
45
-
46
- import {
47
- DEFAULT_HQ_ROOT,
48
- ensureCognitoToken,
49
- buildVaultConfig,
50
- } from "../utils/cognito-session.js";
51
-
52
- // ── Constants ───────────────────────────────────────────────────────────────
53
-
54
- export const LEGAL_SYNC_MODES: readonly SyncMode[] = [
55
- "shared",
56
- "all",
57
- "custom",
58
- ] as const;
59
-
60
- // ── Types ───────────────────────────────────────────────────────────────────
61
-
62
- /** Subset of VaultClient surface this command exercises (test seam). */
63
- export interface SyncModeVaultClient {
64
- listMyMemberships(): Promise<Membership[]>;
65
- getMembershipSyncConfig(membershipId: string): Promise<MembershipSyncConfig>;
66
- setMembershipSyncConfig(
67
- membershipId: string,
68
- partial: { syncMode: SyncMode; customPaths?: string[] },
69
- ): Promise<MembershipSyncConfig>;
70
- entity: {
71
- get(uid: string): Promise<{ uid: string; slug: string; name?: string }>;
72
- };
73
- }
74
-
75
- export interface SetSyncModeOptions {
76
- /** Validated mode — already known to be a legal SyncMode. */
77
- mode: SyncMode;
78
- /** Company slug (caller-provided or resolved from cwd). Required. */
79
- companySlug: string;
80
- /** Required when `mode === "custom"`. Server rejects otherwise. */
81
- customPaths?: string[];
82
- /** Injected vault client (real impl built from access token by default). */
83
- vaultClient: SyncModeVaultClient;
84
- }
85
-
86
- export interface SetSyncModeResult {
87
- membershipId: string;
88
- companySlug: string;
89
- previousMode: SyncMode;
90
- newMode: SyncMode;
91
- previousWasDefault: boolean;
92
- newConfig: MembershipSyncConfig;
93
- }
94
-
95
- export interface ShowSyncModesOptions {
96
- vaultClient: SyncModeVaultClient;
97
- }
98
-
99
- export interface ShowSyncModesRow {
100
- companySlug: string;
101
- companyName?: string;
102
- membershipId: string;
103
- syncMode: SyncMode;
104
- isDefault: boolean;
105
- updatedAt?: string;
106
- }
107
-
108
- // ── Pure helpers ────────────────────────────────────────────────────────────
109
-
110
- /** Throws a helpful Error if `mode` is not a legal SyncMode. */
111
- export function validateMode(mode: string): SyncMode {
112
- if ((LEGAL_SYNC_MODES as readonly string[]).includes(mode)) {
113
- return mode as SyncMode;
114
- }
115
- throw new Error(
116
- `Invalid sync mode '${mode}'. Legal values: ${LEGAL_SYNC_MODES.join(", ")}.`,
117
- );
118
- }
119
-
120
- /**
121
- * Read the active company slug from `<hq-root>/.hq/config.json`. Returns
122
- * undefined when the file is missing or `activeCompany` isn't set. Never
123
- * throws — auto-detect is best-effort.
124
- */
125
- export function readActiveCompanySlug(hqRoot: string): string | undefined {
126
- const configPath = path.join(hqRoot, ".hq", "config.json");
127
- if (!fs.existsSync(configPath)) return undefined;
128
- try {
129
- const cfg = JSON.parse(fs.readFileSync(configPath, "utf-8")) as {
130
- activeCompany?: unknown;
131
- };
132
- const slug = cfg.activeCompany;
133
- return typeof slug === "string" && slug.length > 0 ? slug : undefined;
134
- } catch {
135
- return undefined;
136
- }
137
- }
138
-
139
- /** Parse `--paths a/,b/c/` into trimmed non-empty entries. */
140
- export function parseCustomPaths(raw: string | undefined): string[] | undefined {
141
- if (!raw) return undefined;
142
- const parts = raw
143
- .split(",")
144
- .map((s) => s.trim())
145
- .filter((s) => s.length > 0);
146
- return parts.length > 0 ? parts : undefined;
147
- }
148
-
149
- // ── Orchestrators (pure, injectable — driven by tests) ──────────────────────
150
-
151
- /**
152
- * Resolve a membership by company slug, then PUT the new sync-mode. Returns
153
- * the membershipId, the previous mode (read via GET first), and the server's
154
- * fresh config (which sets `isDefault: false` once a row exists).
155
- */
156
- export async function setSyncMode(
157
- options: SetSyncModeOptions,
158
- ): Promise<SetSyncModeResult> {
159
- const { mode, companySlug, customPaths, vaultClient } = options;
160
-
161
- // 1. Find the caller's membership for this company.
162
- const memberships = await vaultClient.listMyMemberships();
163
- // Resolve slug → uid via entity.get on each membership's companyUid in
164
- // parallel. Cheaper than a per-membership lookup loop and matches the
165
- // pattern AppBar uses to render its company picker.
166
- const enriched = await Promise.all(
167
- memberships.map(async (m) => {
168
- try {
169
- const ent = await vaultClient.entity.get(m.companyUid);
170
- return { membership: m, slug: ent.slug, name: ent.name };
171
- } catch {
172
- return { membership: m, slug: undefined, name: undefined };
173
- }
174
- }),
175
- );
176
-
177
- const match = enriched.find((row) => row.slug === companySlug);
178
- if (!match) {
179
- const known = enriched
180
- .map((r) => r.slug)
181
- .filter((s): s is string => !!s)
182
- .join(", ");
183
- throw new Error(
184
- `No membership found for company '${companySlug}'. Memberships visible to you: ${
185
- known || "(none)"
186
- }.`,
187
- );
188
- }
189
-
190
- const membershipId = match.membership.membershipKey;
191
-
192
- // 2. Read the current config (server defaults to `shared`/isDefault:true
193
- // when no row exists). We surface this in the audit line.
194
- const before = await vaultClient.getMembershipSyncConfig(membershipId);
195
-
196
- // 3. Write the new mode.
197
- const after = await vaultClient.setMembershipSyncConfig(membershipId, {
198
- syncMode: mode,
199
- customPaths,
200
- });
201
-
202
- return {
203
- membershipId,
204
- companySlug,
205
- previousMode: before.syncMode,
206
- previousWasDefault: before.isDefault,
207
- newMode: after.syncMode,
208
- newConfig: after,
209
- };
210
- }
211
-
212
- /**
213
- * Fetch every membership the caller has, resolve company slugs, and look up
214
- * each effective sync-config in parallel. Returns rows sorted by slug for
215
- * stable table output.
216
- */
217
- export async function showSyncModes(
218
- options: ShowSyncModesOptions,
219
- ): Promise<ShowSyncModesRow[]> {
220
- const { vaultClient } = options;
221
- const memberships = await vaultClient.listMyMemberships();
222
- if (memberships.length === 0) return [];
223
-
224
- const rows = await Promise.all(
225
- memberships.map(async (m): Promise<ShowSyncModesRow> => {
226
- const [config, entity] = await Promise.all([
227
- vaultClient.getMembershipSyncConfig(m.membershipKey).catch(
228
- (): MembershipSyncConfig => ({
229
- membershipId: m.membershipKey,
230
- syncMode: "shared",
231
- isDefault: true,
232
- }),
233
- ),
234
- vaultClient.entity
235
- .get(m.companyUid)
236
- .catch(() => ({ uid: m.companyUid, slug: m.companyUid, name: undefined as string | undefined })),
237
- ]);
238
- return {
239
- companySlug: entity.slug,
240
- companyName: entity.name,
241
- membershipId: m.membershipKey,
242
- syncMode: config.syncMode,
243
- isDefault: config.isDefault,
244
- updatedAt: config.updatedAt,
245
- };
246
- }),
247
- );
248
-
249
- rows.sort((a, b) => a.companySlug.localeCompare(b.companySlug));
250
- return rows;
251
- }
252
-
253
- // ── Table rendering (used by CLI action, separable for tests) ──────────────
254
-
255
- /**
256
- * Render the `--show` table as plain text. No external dep — hq-cli doesn't
257
- * use cli-table3, so we hand-format columns to match the existing chalk +
258
- * padEnd pattern used by `hq members list`.
259
- */
260
- export function formatShowTable(rows: ShowSyncModesRow[]): string {
261
- if (rows.length === 0) {
262
- return "No memberships found. Run `hq onboard` or accept an invite first.";
263
- }
264
- const cols = ["COMPANY", "MODE", "UPDATED", "MEMBERSHIP"];
265
- const data = rows.map((r) => [
266
- r.companySlug,
267
- r.isDefault ? `${r.syncMode} (default)` : r.syncMode,
268
- r.updatedAt ?? "—",
269
- r.membershipId,
270
- ]);
271
- const widths = cols.map((c, i) =>
272
- Math.max(c.length, ...data.map((row) => row[i].length)),
273
- );
274
- const renderRow = (row: string[]): string =>
275
- row.map((cell, i) => cell.padEnd(widths[i])).join(" ");
276
- const lines = [
277
- chalk.bold(renderRow(cols)),
278
- chalk.dim(renderRow(widths.map((w) => "─".repeat(w)))),
279
- ...data.map(renderRow),
280
- ];
281
- return lines.join("\n");
282
- }
283
-
284
- // ── CLI registration ────────────────────────────────────────────────────────
285
-
286
- interface SyncModeCliOptions {
287
- company?: string;
288
- show?: boolean;
289
- hqRoot: string;
290
- paths?: string;
291
- }
292
-
293
- /**
294
- * Wire `hq sync mode` onto an existing `sync` Commander group. The caller
295
- * (`src/index.ts`) constructs the `sync` group and calls this after
296
- * `registerCloudCommands` so push/pull/status/mode all coexist.
297
- */
298
- export function registerSyncModeCommand(syncCmd: Command): void {
299
- syncCmd
300
- .command("mode [mode]")
301
- .description(
302
- "Flip a membership's sync-mode (shared|all|custom), or --show every membership's current mode",
303
- )
304
- .option(
305
- "--company <slug>",
306
- "Company slug (defaults to the active company in <hq-root>/.hq/config.json)",
307
- )
308
- .option(
309
- "--show",
310
- "Print the current sync-mode for every membership the caller has",
311
- )
312
- .option(
313
- "--paths <csv>",
314
- "Comma-separated allowed prefixes (required when mode is 'custom')",
315
- )
316
- .option(
317
- "--hq-root <path>",
318
- `Local HQ tree root (default: ${DEFAULT_HQ_ROOT})`,
319
- DEFAULT_HQ_ROOT,
320
- )
321
- .action(async (modeArg: string | undefined, options: SyncModeCliOptions) => {
322
- try {
323
- const accessToken = await ensureCognitoToken();
324
- const vaultConfig = buildVaultConfig(accessToken);
325
- const client = new VaultClient(vaultConfig);
326
-
327
- if (options.show) {
328
- if (modeArg !== undefined) {
329
- throw new Error(
330
- "`--show` is incompatible with a positional <mode>. Pass one or the other.",
331
- );
332
- }
333
- const rows = await showSyncModes({ vaultClient: client });
334
- console.log(formatShowTable(rows));
335
- return;
336
- }
337
-
338
- if (!modeArg) {
339
- throw new Error(
340
- `Missing <mode>. Usage: hq sync mode <${LEGAL_SYNC_MODES.join(
341
- "|",
342
- )}> [--company <slug>] or hq sync mode --show`,
343
- );
344
- }
345
-
346
- const mode = validateMode(modeArg);
347
- const customPaths = parseCustomPaths(options.paths);
348
- const companySlug =
349
- options.company ?? readActiveCompanySlug(options.hqRoot);
350
- if (!companySlug) {
351
- throw new Error(
352
- "No company specified. Pass --company <slug> or set activeCompany in <hq-root>/.hq/config.json.",
353
- );
354
- }
355
-
356
- const result = await setSyncMode({
357
- mode,
358
- companySlug,
359
- customPaths,
360
- vaultClient: client,
361
- });
362
-
363
- const prevLabel = result.previousWasDefault
364
- ? `${result.previousMode} (default)`
365
- : result.previousMode;
366
- console.log(
367
- chalk.green("✓"),
368
- `Set sync-mode for ${chalk.bold(result.companySlug)}: ${chalk.dim(prevLabel)} → ${chalk.bold(result.newMode)}`,
369
- );
370
- console.log(chalk.dim(` membershipId: ${result.membershipId}`));
371
- if (result.newConfig.customPaths && result.newConfig.customPaths.length > 0) {
372
- console.log(
373
- chalk.dim(` customPaths: ${result.newConfig.customPaths.join(", ")}`),
374
- );
375
- }
376
- if (result.newConfig.updatedAt) {
377
- console.log(chalk.dim(` updatedAt: ${result.newConfig.updatedAt}`));
378
- }
379
- } catch (err) {
380
- console.error(
381
- chalk.red("✗ sync mode failed:"),
382
- err instanceof Error ? err.message : String(err),
383
- );
384
- process.exit(1);
385
- }
386
- });
387
- }