@indigoai-us/hq-cli 5.77.14 → 5.78.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (308) hide show
  1. package/CHANGELOG.md +23 -0
  2. package/assets/scaffold/core/scripts/archive-old-threads.sh +86 -0
  3. package/assets/scaffold/core/scripts/backfill-company-skill-mirrors.sh +73 -0
  4. package/assets/scaffold/core/scripts/backfill-workspace-mirror.sh +51 -0
  5. package/assets/scaffold/core/scripts/codex-skill-bridge.sh +550 -0
  6. package/assets/scaffold/core/scripts/detect-stale-core-policy-mirror.sh +185 -0
  7. package/assets/scaffold/core/scripts/hq-status-summary.sh +187 -0
  8. package/assets/scaffold/core/scripts/ontology-readme-drift.sh +264 -0
  9. package/assets/scaffold/core/scripts/qmd-reindex-after-sync.sh +93 -0
  10. package/assets/scaffold/core/scripts/rebuild-all-indexes.sh +69 -0
  11. package/assets/scaffold/core/scripts/rebuild-companies-index.sh +206 -0
  12. package/assets/scaffold/core/scripts/rebuild-company-knowledge-index.sh +127 -0
  13. package/assets/scaffold/core/scripts/rebuild-orchestrator-index.sh +86 -0
  14. package/assets/scaffold/core/scripts/rebuild-projects-index.sh +105 -0
  15. package/assets/scaffold/core/scripts/rebuild-public-knowledge-index.sh +83 -0
  16. package/assets/scaffold/core/scripts/rebuild-reports-index.sh +114 -0
  17. package/assets/scaffold/core/scripts/rebuild-social-drafts-index.sh +135 -0
  18. package/assets/scaffold/core/scripts/rebuild-threads-index.sh +82 -0
  19. package/assets/scaffold/core/scripts/rebuild-workers-index.sh +97 -0
  20. package/assets/scaffold/core/scripts/resize-screenshot.sh +47 -0
  21. package/assets/scaffold/core/scripts/token-usage-report.sh +254 -0
  22. package/assets/scaffold/core/scripts/worktree.sh +136 -0
  23. package/dist/commands/agents.js +28 -12
  24. package/dist/commands/api-keys.js +100 -20
  25. package/dist/commands/core.d.ts +90 -0
  26. package/dist/commands/core.js +279 -0
  27. package/dist/commands/files-browse.d.ts +21 -0
  28. package/dist/commands/files-browse.js +145 -24
  29. package/dist/commands/files.js +33 -7
  30. package/dist/commands/members.js +16 -5
  31. package/dist/commands/pack-install.d.ts +14 -0
  32. package/dist/commands/pack-install.js +42 -2
  33. package/dist/commands/pkg-install.js +39 -2
  34. package/dist/commands/run.js +6 -2
  35. package/dist/commands/secrets.js +120 -65
  36. package/dist/main.js +6 -0
  37. package/dist/utils/api-key-command-gate.d.ts +45 -0
  38. package/dist/utils/api-key-command-gate.js +51 -0
  39. package/dist/utils/hq-roots.d.ts +91 -0
  40. package/dist/utils/hq-roots.js +212 -0
  41. package/dist/utils/resolve-vault-credential.d.ts +63 -3
  42. package/dist/utils/resolve-vault-credential.js +152 -6
  43. package/dist/utils/run-bundled-script.d.ts +66 -0
  44. package/dist/utils/run-bundled-script.js +80 -0
  45. package/dist/utils/vault-api.d.ts +21 -0
  46. package/dist/utils/vault-api.js +74 -3
  47. package/package.json +7 -1
  48. package/.claude/policies/hq-cli-interactive-reads-use-sts-vend.md +0 -49
  49. package/.github/workflows/ci.yml +0 -46
  50. package/.github/workflows/publish.yml +0 -36
  51. package/.github/workflows/scripts/smoke-test-pkg.sh +0 -97
  52. package/e2e/cli.test.ts +0 -128
  53. package/eslint.config.js +0 -37
  54. package/pnpm-workspace.yaml +0 -4
  55. package/scripts/chmod-bins.mjs +0 -49
  56. package/scripts/generate-dsn.mjs +0 -26
  57. package/scripts/generate-scan-packages-table.mjs +0 -113
  58. package/scripts/smoke-sources-signals.sh +0 -103
  59. package/src/bin/hq-auth-refresh.ts +0 -43
  60. package/src/cli-version.ts +0 -13
  61. package/src/commands/__fixtures__/make-tar.ts +0 -126
  62. package/src/commands/_patterns.ts +0 -10
  63. package/src/commands/add.ts +0 -75
  64. package/src/commands/agents.test.ts +0 -527
  65. package/src/commands/agents.ts +0 -923
  66. package/src/commands/api-keys.test.ts +0 -291
  67. package/src/commands/api-keys.ts +0 -382
  68. package/src/commands/artifact-verify.test.ts +0 -177
  69. package/src/commands/auth.test.ts +0 -82
  70. package/src/commands/auth.ts +0 -213
  71. package/src/commands/billing.test.ts +0 -158
  72. package/src/commands/billing.ts +0 -146
  73. package/src/commands/channels.test.ts +0 -74
  74. package/src/commands/channels.ts +0 -91
  75. package/src/commands/cloud-demote.test.ts +0 -401
  76. package/src/commands/cloud-demote.ts +0 -278
  77. package/src/commands/cloud-provision.test.ts +0 -1117
  78. package/src/commands/cloud-provision.ts +0 -942
  79. package/src/commands/cloud.pull-all.test.ts +0 -711
  80. package/src/commands/cloud.pull-per-company.test.ts +0 -188
  81. package/src/commands/cloud.push-all.test.ts +0 -485
  82. package/src/commands/cloud.scope-excluded-warning.test.ts +0 -22
  83. package/src/commands/cloud.selectors.test.ts +0 -208
  84. package/src/commands/cloud.status.test.ts +0 -160
  85. package/src/commands/cloud.test.ts +0 -41
  86. package/src/commands/cloud.ts +0 -2130
  87. package/src/commands/company.test.ts +0 -202
  88. package/src/commands/company.ts +0 -148
  89. package/src/commands/creators.test.ts +0 -60
  90. package/src/commands/creators.ts +0 -117
  91. package/src/commands/crm.test.ts +0 -179
  92. package/src/commands/crm.ts +0 -236
  93. package/src/commands/db-migrate.ts +0 -55
  94. package/src/commands/db-provision.ts +0 -114
  95. package/src/commands/db-sql.ts +0 -124
  96. package/src/commands/db-status.ts +0 -108
  97. package/src/commands/db.ts +0 -26
  98. package/src/commands/dm.test.ts +0 -748
  99. package/src/commands/dm.ts +0 -1226
  100. package/src/commands/feedback.test.ts +0 -413
  101. package/src/commands/feedback.ts +0 -169
  102. package/src/commands/files-browse.test.ts +0 -1249
  103. package/src/commands/files-browse.ts +0 -1506
  104. package/src/commands/files-delete.test.ts +0 -484
  105. package/src/commands/files-recovery.test.ts +0 -370
  106. package/src/commands/files.test.ts +0 -722
  107. package/src/commands/files.ts +0 -1446
  108. package/src/commands/group-grants.test.ts +0 -330
  109. package/src/commands/group-grants.ts +0 -455
  110. package/src/commands/groups.test.ts +0 -44
  111. package/src/commands/groups.ts +0 -368
  112. package/src/commands/integrations.test.ts +0 -633
  113. package/src/commands/integrations.ts +0 -507
  114. package/src/commands/list.ts +0 -85
  115. package/src/commands/login.ts +0 -52
  116. package/src/commands/logout.ts +0 -30
  117. package/src/commands/marketplace-install.test.ts +0 -543
  118. package/src/commands/marketplace-security.test.ts +0 -646
  119. package/src/commands/mcp-registration.test.ts +0 -2787
  120. package/src/commands/mcp-registration.ts +0 -2612
  121. package/src/commands/mcp-status.test.ts +0 -483
  122. package/src/commands/mcp-status.ts +0 -575
  123. package/src/commands/mcp-status.us011.test.ts +0 -243
  124. package/src/commands/meetings.test.ts +0 -522
  125. package/src/commands/meetings.ts +0 -789
  126. package/src/commands/members.test.ts +0 -1474
  127. package/src/commands/members.ts +0 -1181
  128. package/src/commands/onboard-identity-guard.test.ts +0 -99
  129. package/src/commands/onboard-identity-guard.ts +0 -103
  130. package/src/commands/onboard-join.test.ts +0 -96
  131. package/src/commands/onboard-join.ts +0 -101
  132. package/src/commands/onboard-warning.test.ts +0 -26
  133. package/src/commands/onboard-warning.ts +0 -12
  134. package/src/commands/onboard.ts +0 -267
  135. package/src/commands/outposts-heartbeat.test.ts +0 -299
  136. package/src/commands/outposts-heartbeat.ts +0 -310
  137. package/src/commands/outposts-replica-sync.test.ts +0 -272
  138. package/src/commands/outposts-self-deploy.test.ts +0 -243
  139. package/src/commands/outposts.test.ts +0 -1039
  140. package/src/commands/outposts.ts +0 -1935
  141. package/src/commands/pack-install-secret-authorization.test.ts +0 -115
  142. package/src/commands/pack-install.test.ts +0 -1469
  143. package/src/commands/pack-install.ts +0 -2256
  144. package/src/commands/pack-update-cache.test.ts +0 -149
  145. package/src/commands/packs-update-api-key.test.ts +0 -105
  146. package/src/commands/packs.test.ts +0 -88
  147. package/src/commands/packs.ts +0 -622
  148. package/src/commands/people.test.ts +0 -807
  149. package/src/commands/people.ts +0 -422
  150. package/src/commands/pkg-install.dispatch.test.ts +0 -103
  151. package/src/commands/pkg-install.ts +0 -221
  152. package/src/commands/pkg-list.test.ts +0 -79
  153. package/src/commands/pkg-list.ts +0 -13
  154. package/src/commands/pkg-remove.ts +0 -71
  155. package/src/commands/pkg-update.ts +0 -189
  156. package/src/commands/publish.test.ts +0 -650
  157. package/src/commands/publish.ts +0 -580
  158. package/src/commands/reindex.test.ts +0 -259
  159. package/src/commands/reindex.ts +0 -274
  160. package/src/commands/rescue.test.ts +0 -39
  161. package/src/commands/rescue.ts +0 -210
  162. package/src/commands/run.env-local.test.ts +0 -88
  163. package/src/commands/run.test.ts +0 -45
  164. package/src/commands/run.ts +0 -190
  165. package/src/commands/safe-extract.test.ts +0 -459
  166. package/src/commands/safe-extract.ts +0 -444
  167. package/src/commands/secrets-scope.test.ts +0 -56
  168. package/src/commands/secrets-scope.ts +0 -32
  169. package/src/commands/secrets.parse-destination.test.ts +0 -38
  170. package/src/commands/secrets.test.ts +0 -2050
  171. package/src/commands/secrets.ts +0 -2249
  172. package/src/commands/signals.ts +0 -351
  173. package/src/commands/skill.test.ts +0 -770
  174. package/src/commands/skill.ts +0 -796
  175. package/src/commands/sources.ts +0 -362
  176. package/src/commands/sync-mode.test.ts +0 -366
  177. package/src/commands/sync-mode.ts +0 -387
  178. package/src/commands/sync-narrow.test.ts +0 -633
  179. package/src/commands/sync-narrow.ts +0 -555
  180. package/src/commands/sync.ts +0 -165
  181. package/src/commands/team-sync.ts +0 -628
  182. package/src/commands/update.ts +0 -71
  183. package/src/commands/whoami.ts +0 -83
  184. package/src/commands/workers.test.ts +0 -158
  185. package/src/commands/workers.ts +0 -301
  186. package/src/index.test.ts +0 -32
  187. package/src/index.ts +0 -20
  188. package/src/lib/db/control-plane.test.ts +0 -59
  189. package/src/lib/db/control-plane.ts +0 -113
  190. package/src/lib/db/local.test.ts +0 -81
  191. package/src/lib/db/local.ts +0 -148
  192. package/src/lib/db/migrate.test.ts +0 -133
  193. package/src/lib/db/migrate.ts +0 -137
  194. package/src/lib/db/paths.test.ts +0 -112
  195. package/src/lib/db/paths.ts +0 -128
  196. package/src/lib/db/remote-engine.test.ts +0 -44
  197. package/src/lib/db/remote-engine.ts +0 -148
  198. package/src/lib/db/remote-sql.test.ts +0 -32
  199. package/src/lib/db/remote-sql.ts +0 -62
  200. package/src/lib/db/sql.test.ts +0 -106
  201. package/src/lib/db/sql.ts +0 -192
  202. package/src/lib/hq-cloud-dep.smoke.test.ts +0 -75
  203. package/src/lib/local-tree-diff.test.ts +0 -301
  204. package/src/lib/local-tree-diff.ts +0 -362
  205. package/src/lib/narrow-hint-banner.test.ts +0 -235
  206. package/src/lib/narrow-hint-banner.ts +0 -212
  207. package/src/lib/plan-limit-nag.test.ts +0 -317
  208. package/src/lib/plan-limit-nag.ts +0 -264
  209. package/src/main.ts +0 -371
  210. package/src/node-preflight.test.ts +0 -60
  211. package/src/node-preflight.ts +0 -67
  212. package/src/outpost/session-heartbeat-bounds.test.ts +0 -195
  213. package/src/outpost/session-heartbeat-guard.test.ts +0 -105
  214. package/src/outpost/session-heartbeat-publisher.test.ts +0 -178
  215. package/src/outpost/session-heartbeat-publisher.ts +0 -186
  216. package/src/outpost/session-heartbeat-retain-guard.test.ts +0 -126
  217. package/src/outpost/session-heartbeat.test.ts +0 -459
  218. package/src/outpost/session-heartbeat.ts +0 -877
  219. package/src/packaging.test.ts +0 -109
  220. package/src/run/__fixtures__/discover-schemas/example.env.schema +0 -4
  221. package/src/run/discover-schemas.test.ts +0 -153
  222. package/src/run/discover-schemas.ts +0 -79
  223. package/src/run/hq-plugin.test.ts +0 -371
  224. package/src/run/hq-plugin.ts +0 -277
  225. package/src/run/varlock-shape.test.ts +0 -57
  226. package/src/schemas/hq-package.schema.json +0 -155
  227. package/src/sentry-before-send.test.ts +0 -359
  228. package/src/sentry-before-send.ts +0 -221
  229. package/src/sentry-epipe.test.ts +0 -37
  230. package/src/sentry-release.test.ts +0 -54
  231. package/src/sentry.test.ts +0 -24
  232. package/src/sentry.ts +0 -54
  233. package/src/strategies/link.ts +0 -62
  234. package/src/strategies/merge.ts +0 -142
  235. package/src/types.ts +0 -146
  236. package/src/utils/__fixtures__/scan-packages.generated-block.sh +0 -23
  237. package/src/utils/auth-error.test.ts +0 -40
  238. package/src/utils/auth-error.ts +0 -42
  239. package/src/utils/billing-gate.test.ts +0 -95
  240. package/src/utils/billing-gate.ts +0 -228
  241. package/src/utils/breadcrumb-buffer.ts +0 -18
  242. package/src/utils/cli-telemetry.test.ts +0 -153
  243. package/src/utils/cli-telemetry.ts +0 -61
  244. package/src/utils/cognito-session.machine.test.ts +0 -109
  245. package/src/utils/cognito-session.refresh.test.ts +0 -84
  246. package/src/utils/cognito-session.test.ts +0 -328
  247. package/src/utils/cognito-session.ts +0 -448
  248. package/src/utils/company-selection-error.test.ts +0 -42
  249. package/src/utils/company-selection-error.ts +0 -45
  250. package/src/utils/contribution-table.ts +0 -83
  251. package/src/utils/environmental-error.test.ts +0 -45
  252. package/src/utils/environmental-error.ts +0 -39
  253. package/src/utils/epipe.test.ts +0 -28
  254. package/src/utils/epipe.ts +0 -29
  255. package/src/utils/expected-cli-error.test.ts +0 -28
  256. package/src/utils/expected-cli-error.ts +0 -39
  257. package/src/utils/feedback-diagnostics.test.ts +0 -183
  258. package/src/utils/feedback-diagnostics.ts +0 -123
  259. package/src/utils/feedback-screenshots.test.ts +0 -134
  260. package/src/utils/feedback-screenshots.ts +0 -124
  261. package/src/utils/feedback-versions.test.ts +0 -98
  262. package/src/utils/feedback-versions.ts +0 -68
  263. package/src/utils/git.ts +0 -74
  264. package/src/utils/integrity.ts +0 -59
  265. package/src/utils/intercepted-process-exit.test.ts +0 -37
  266. package/src/utils/intercepted-process-exit.ts +0 -36
  267. package/src/utils/login-provider.test.ts +0 -42
  268. package/src/utils/login-provider.ts +0 -30
  269. package/src/utils/manifest.test.ts +0 -167
  270. package/src/utils/manifest.ts +0 -131
  271. package/src/utils/pack-contributions.test.ts +0 -603
  272. package/src/utils/pack-contributions.ts +0 -450
  273. package/src/utils/people.ts +0 -215
  274. package/src/utils/registry-client.ts +0 -204
  275. package/src/utils/registry.ts +0 -90
  276. package/src/utils/resolve-vault-credential.test.ts +0 -69
  277. package/src/utils/resolve-vault-credential.ts +0 -60
  278. package/src/utils/sandbox-runner-client.test.ts +0 -279
  279. package/src/utils/sandbox-runner-client.ts +0 -260
  280. package/src/utils/secrets-cache.ts +0 -183
  281. package/src/utils/sentry-identity.ts +0 -45
  282. package/src/utils/settle-with-timeout.test.ts +0 -21
  283. package/src/utils/settle-with-timeout.ts +0 -22
  284. package/src/utils/user-yaml-error.test.ts +0 -24
  285. package/src/utils/user-yaml-error.ts +0 -30
  286. package/src/utils/vault-api.test.ts +0 -536
  287. package/src/utils/vault-api.ts +0 -382
  288. package/src/utils/version-check.test.ts +0 -176
  289. package/src/utils/version-check.ts +0 -155
  290. package/src/utils/version-gate.test.ts +0 -1024
  291. package/src/utils/version-gate.ts +0 -702
  292. package/test/commands/db-tenant-isolation.test.ts +0 -94
  293. package/test/commands/db.test.ts +0 -85
  294. package/test/commands/signals.test.ts +0 -207
  295. package/test/commands/sources.test.ts +0 -231
  296. package/test/e2e/smoke-install-mcp.sh +0 -113
  297. package/test/fixtures/hq-pack-smoke-mcp/mcp/smoke-http.json +0 -1
  298. package/test/fixtures/hq-pack-smoke-mcp/package.yaml +0 -11
  299. package/test/fixtures/signals/action_item/sample.md +0 -16
  300. package/test/fixtures/signals/summary/sample.md +0 -12
  301. package/test/fixtures/sources/meetings/sample.md +0 -25
  302. package/test/helpers/cli-runner.ts +0 -150
  303. package/test/helpers/s3-list-mock.ts +0 -79
  304. package/test/helpers/vault-service-mock.ts +0 -295
  305. package/test/sources-signals/smoke.test.ts +0 -228
  306. package/tsconfig.json +0 -20
  307. package/vitest.config.ts +0 -11
  308. package/vitest.e2e.config.ts +0 -7
@@ -1,212 +0,0 @@
1
- /**
2
- * `narrow-hint-banner` (US-011) — one-time-per-session hint nudging
3
- * existing all-mode owners to switch to shared-mode sync.
4
- *
5
- * Emitted from `hq sync pull --all` and `hq sync now` after the per-target
6
- * fanout resolves each membership's sync config. Suppressed when:
7
- *
8
- * - the membership is NOT on `syncMode: 'all'` (shared / custom users
9
- * have already opted in to narrowing, so there is nothing to nudge),
10
- * - the env var `HQ_SYNC_NARROW_HINT=off` is set,
11
- * - the per-hqRoot CLI config (`<hqRoot>/.hq/config.json`) has
12
- * `syncNarrowHint: 'off'`,
13
- * - or the same `{companyUid, level}` pair has already been shown this
14
- * process (module-singleton dedupe; the runner imports the same module
15
- * once per `hq` invocation so a single invocation prints at most one
16
- * banner per company per level).
17
- *
18
- * Three escalating levels — `'hint' | 'warning' | 'strict'`. Today's
19
- * default level is `'hint'`; this release ships the plumbing so a future
20
- * hq-core-staging release can flip the default to `'warning'` and then
21
- * `'strict'` without re-touching the call sites.
22
- *
23
- * - hint → dim suggestion to stderr, never blocks.
24
- * - warning → yellow note to stderr, never blocks.
25
- * - strict → red error to stderr; callers are expected to refuse to
26
- * proceed unless the operator passes `--mode-all`. The
27
- * helper itself never throws or exits — the decision lives at
28
- * the call site so tests don't have to stub `process.exit`.
29
- *
30
- * The level is selected by the caller (typically from the
31
- * `HQ_SYNC_NARROW_HINT_LEVEL` env var). See `resolveBannerLevel` for the
32
- * default-and-override ladder.
33
- *
34
- * TODO(hq-core-staging release N+2): bump default level to 'warning'.
35
- * TODO(hq-core-staging release N+3): bump default level to 'strict' and
36
- * wire `--mode-all` as the only opt-out.
37
- */
38
-
39
- import chalk from "chalk";
40
- import * as fs from "node:fs";
41
- import * as path from "node:path";
42
-
43
- export type BannerLevel = "hint" | "warning" | "strict";
44
-
45
- export interface BannerInput {
46
- /** Company UID — used to dedupe per-process so each company emits once. */
47
- companyUid: string;
48
- /** Effective sync mode resolved from `getMembershipSyncConfig`. */
49
- syncMode: "shared" | "all" | "custom";
50
- /** Escalation level — see file header. */
51
- level: BannerLevel;
52
- }
53
-
54
- export interface ShouldShowBannerOpts {
55
- /**
56
- * Optional hqRoot — when provided, the helper checks
57
- * `<hqRoot>/.hq/config.json` for a `syncNarrowHint: 'off'` key in
58
- * addition to the env override. Falsy paths skip the file check.
59
- */
60
- hqRoot?: string;
61
- /**
62
- * Test seam: override `process.env` lookup. Defaults to
63
- * `process.env.HQ_SYNC_NARROW_HINT`.
64
- */
65
- envValue?: string | undefined;
66
- /**
67
- * Test seam: override `fs.readFileSync`. Defaults to `node:fs`.
68
- */
69
- readFile?: (p: string) => string;
70
- /** Test seam: override `fs.existsSync`. */
71
- existsFile?: (p: string) => boolean;
72
- }
73
-
74
- const SHOWN = new Set<string>();
75
-
76
- /**
77
- * Decides whether a banner should be printed AT ALL — independent of
78
- * dedupe and `syncMode` gating. Exposed for tests and for the strict-mode
79
- * call site (which needs to know whether to refuse-to-proceed even if the
80
- * banner itself is suppressed).
81
- */
82
- export function shouldShowBanner(opts: ShouldShowBannerOpts = {}): boolean {
83
- const envValue =
84
- opts.envValue !== undefined
85
- ? opts.envValue
86
- : process.env.HQ_SYNC_NARROW_HINT;
87
- if (typeof envValue === "string" && envValue.toLowerCase() === "off") {
88
- return false;
89
- }
90
-
91
- if (opts.hqRoot) {
92
- const configPath = path.join(opts.hqRoot, ".hq", "config.json");
93
- const exists = opts.existsFile ?? fs.existsSync;
94
- const read = opts.readFile ?? ((p: string) => fs.readFileSync(p, "utf-8"));
95
- if (exists(configPath)) {
96
- try {
97
- const cfg = JSON.parse(read(configPath)) as {
98
- syncNarrowHint?: unknown;
99
- };
100
- if (
101
- typeof cfg.syncNarrowHint === "string" &&
102
- cfg.syncNarrowHint.toLowerCase() === "off"
103
- ) {
104
- return false;
105
- }
106
- } catch {
107
- // Malformed config is best-effort — fall through and assume "on".
108
- }
109
- }
110
- }
111
-
112
- return true;
113
- }
114
-
115
- /**
116
- * Resolve the banner level from environment overrides. Defaults to
117
- * `'hint'`. Recognized values for `HQ_SYNC_NARROW_HINT_LEVEL`:
118
- * `hint`, `warning`, `strict` (case-insensitive). Unknown values fall
119
- * back to the default rather than throwing — the env var is operator-
120
- * facing and a typo shouldn't break a sync.
121
- */
122
- export function resolveBannerLevel(
123
- envValue: string | undefined = process.env.HQ_SYNC_NARROW_HINT_LEVEL,
124
- ): BannerLevel {
125
- if (typeof envValue !== "string") return "hint";
126
- const v = envValue.toLowerCase();
127
- if (v === "warning" || v === "strict" || v === "hint") return v;
128
- return "hint";
129
- }
130
-
131
- /**
132
- * Returns `true` when the strict-mode rollout has been opted into AND
133
- * the membership in question is still on `'all'`. Call sites should
134
- * refuse to proceed (exit non-zero) when this returns true and the
135
- * operator hasn't passed `--mode-all`.
136
- */
137
- export function isStrictRefusal(
138
- syncMode: BannerInput["syncMode"],
139
- level: BannerLevel,
140
- ): boolean {
141
- return level === "strict" && syncMode === "all";
142
- }
143
-
144
- /**
145
- * Emit a one-time-per-{company,level} banner. Writes to `stderr` by
146
- * default; tests inject a sink. Idempotent — repeated calls with the
147
- * same `{companyUid, level}` are no-ops for the lifetime of the
148
- * process.
149
- */
150
- export function emitNarrowHint(
151
- input: BannerInput,
152
- opts: {
153
- hqRoot?: string;
154
- write?: (s: string) => void;
155
- /** Test seam — overrides `shouldShowBanner` env/config lookups. */
156
- showOverride?: boolean;
157
- } = {},
158
- ): void {
159
- // Only nudge 'all'-mode memberships — shared/custom callers already
160
- // opted in to narrowing, so the hint would just be noise.
161
- if (input.syncMode !== "all") return;
162
-
163
- const show =
164
- opts.showOverride !== undefined
165
- ? opts.showOverride
166
- : shouldShowBanner({ ...(opts.hqRoot ? { hqRoot: opts.hqRoot } : {}) });
167
- if (!show) return;
168
-
169
- const key = `${input.companyUid}:${input.level}`;
170
- if (SHOWN.has(key)) return;
171
- SHOWN.add(key);
172
-
173
- const write =
174
- opts.write ?? ((s: string) => process.stderr.write(s + "\n"));
175
-
176
- if (input.level === "hint") {
177
- write(
178
- chalk.dim(
179
- "Tip: switch to shared-mode sync — fewer files, same visibility. " +
180
- "Run `hq sync narrow --dry-run` to preview.",
181
- ),
182
- );
183
- return;
184
- }
185
-
186
- if (input.level === "warning") {
187
- write(
188
- chalk.yellow(
189
- "Warning: shared-mode sync is the new default; this membership " +
190
- "still pulls everything. Run `hq sync narrow --dry-run` to " +
191
- "preview the migration before the next release flips the " +
192
- "default to strict.",
193
- ),
194
- );
195
- return;
196
- }
197
-
198
- // strict — caller is responsible for refusing to proceed unless
199
- // --mode-all was passed. We only emit the message here.
200
- write(
201
- chalk.red(
202
- "Error: shared-mode sync is now strict; pass --mode-all to keep " +
203
- "all-mode behavior for this run, or run `hq sync narrow --apply` " +
204
- "to migrate this membership.",
205
- ),
206
- );
207
- }
208
-
209
- /** Test-only helper — clears the per-process dedupe set. */
210
- export function _resetShownForTests(): void {
211
- SHOWN.clear();
212
- }
@@ -1,317 +0,0 @@
1
- /**
2
- * Unit tests for `plan-limit-nag` (US-016).
3
- *
4
- * Coverage:
5
- * 1. Warning renders when ≥80% metadata present; absent → no output.
6
- * 2. Malformed planLimits ignored (no output, no throw).
7
- * 3. Once-per-session: second emit prints nothing.
8
- * 4. Over-limit boxed notice; same-day state suppresses; >24h re-prints.
9
- * 5. HQ_NO_PLAN_LIMIT_NAG=1 disables all output.
10
- * 6. emit never throws even when statePath unwritable.
11
- * 7. Exit-code neutrality: emit does not touch process.exitCode.
12
- */
13
-
14
- import * as fs from "node:fs";
15
- import * as os from "node:os";
16
- import * as path from "node:path";
17
- import { afterEach, beforeEach, describe, expect, it } from "vitest";
18
-
19
- import {
20
- PLAN_LIMIT_UPGRADE_URL,
21
- _resetForTests,
22
- emitPlanLimitNag,
23
- recordPlanLimitStatus,
24
- } from "./plan-limit-nag.js";
25
-
26
- function makeSink(): { lines: string[]; write: (s: string) => void } {
27
- const lines: string[] = [];
28
- return {
29
- lines,
30
- write: (s: string) => {
31
- lines.push(s);
32
- },
33
- };
34
- }
35
-
36
- function tmpStatePath(): string {
37
- return path.join(
38
- os.tmpdir(),
39
- `hq-plan-limit-nag-test-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}.json`,
40
- );
41
- }
42
-
43
- /**
44
- * Portable unwritable statePath: join under a plain FILE so
45
- * mkdirSync/writeFileSync/readFileSync fail immediately with ENOTDIR
46
- * on every platform (unlike /proc paths, which hang on Linux procfs).
47
- */
48
- function unwritableStatePath(): string {
49
- const dir = fs.mkdtempSync(path.join(os.tmpdir(), "hq-nag-"));
50
- const file = path.join(dir, "not-a-dir");
51
- fs.writeFileSync(file, "x");
52
- return path.join(file, "x", "plan-limit-nag.json");
53
- }
54
-
55
- const ENV_KEY = "HQ_NO_PLAN_LIMIT_NAG";
56
- let prevEnv: string | undefined;
57
-
58
- beforeEach(() => {
59
- _resetForTests();
60
- prevEnv = process.env[ENV_KEY];
61
- delete process.env[ENV_KEY];
62
- });
63
-
64
- afterEach(() => {
65
- if (prevEnv === undefined) {
66
- delete process.env[ENV_KEY];
67
- } else {
68
- process.env[ENV_KEY] = prevEnv;
69
- }
70
- _resetForTests();
71
- });
72
-
73
- describe("recordPlanLimitStatus + emitPlanLimitNag (warning path)", () => {
74
- it("renders a one-line warning when planLimits has a ≥80% entry", () => {
75
- const sink = makeSink();
76
- recordPlanLimitStatus({
77
- ok: true,
78
- planLimits: {
79
- users: { used: 9, limit: 10, over: false },
80
- },
81
- });
82
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
83
- expect(sink.lines).toHaveLength(1);
84
- expect(sink.lines[0]).toMatch(/HQ free plan/i);
85
- expect(sink.lines[0]).toMatch(/users at 9\/10 \(90%\)/);
86
- expect(sink.lines[0]).toContain(PLAN_LIMIT_UPGRADE_URL);
87
- });
88
-
89
- it("produces no output when planLimits metadata is absent", () => {
90
- const sink = makeSink();
91
- recordPlanLimitStatus({ ok: true, items: [] });
92
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
93
- expect(sink.lines).toHaveLength(0);
94
- });
95
-
96
- it("produces no output when recordPlanLimitStatus was never called", () => {
97
- const sink = makeSink();
98
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
99
- expect(sink.lines).toHaveLength(0);
100
- });
101
-
102
- it("lists the worst resource when multiple ≥80% entries exist", () => {
103
- const sink = makeSink();
104
- recordPlanLimitStatus({
105
- planLimits: {
106
- users: { used: 8, limit: 10, over: false },
107
- secrets: { used: 19, limit: 20, over: false },
108
- },
109
- });
110
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
111
- expect(sink.lines).toHaveLength(1);
112
- expect(sink.lines[0]).toMatch(/secrets at 19\/20/);
113
- });
114
- });
115
-
116
- describe("malformed planLimits", () => {
117
- it("ignores wrong types — no output, no throw", () => {
118
- const sink = makeSink();
119
- expect(() =>
120
- recordPlanLimitStatus({
121
- planLimits: {
122
- users: { used: "9", limit: 10, over: false },
123
- secrets: { used: 5, limit: "10", over: true },
124
- agents: null,
125
- integrations: "nope",
126
- },
127
- }),
128
- ).not.toThrow();
129
- expect(() =>
130
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() }),
131
- ).not.toThrow();
132
- expect(sink.lines).toHaveLength(0);
133
- });
134
-
135
- it("ignores non-object planLimits", () => {
136
- const sink = makeSink();
137
- recordPlanLimitStatus({ planLimits: "not-an-object" });
138
- recordPlanLimitStatus({ planLimits: [1, 2, 3] });
139
- recordPlanLimitStatus({ planLimits: null });
140
- recordPlanLimitStatus(null);
141
- recordPlanLimitStatus("string");
142
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
143
- expect(sink.lines).toHaveLength(0);
144
- });
145
-
146
- it("accepts only well-formed entries and still emits when mixed", () => {
147
- const sink = makeSink();
148
- recordPlanLimitStatus({
149
- planLimits: {
150
- bad: { used: "x", limit: 1, over: false },
151
- users: { used: 9, limit: 10, over: false },
152
- },
153
- });
154
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
155
- expect(sink.lines).toHaveLength(1);
156
- expect(sink.lines[0]).toMatch(/users at 9\/10/);
157
- });
158
- });
159
-
160
- describe("once-per-session dedupe", () => {
161
- it("second emit prints nothing for the warning path", () => {
162
- const sink = makeSink();
163
- const statePath = tmpStatePath();
164
- recordPlanLimitStatus({
165
- planLimits: { users: { used: 9, limit: 10, over: false } },
166
- });
167
- emitPlanLimitNag({ write: sink.write, statePath });
168
- emitPlanLimitNag({ write: sink.write, statePath });
169
- expect(sink.lines).toHaveLength(1);
170
- });
171
- });
172
-
173
- describe("over-limit boxed notice", () => {
174
- it("prints a boxed over-limit notice listing over resources", () => {
175
- const sink = makeSink();
176
- const statePath = tmpStatePath();
177
- recordPlanLimitStatus({
178
- planLimits: {
179
- users: { used: 11, limit: 10, over: true },
180
- secrets: { used: 5, limit: 20, over: false },
181
- },
182
- requiredPlan: "agents-500",
183
- });
184
- emitPlanLimitNag({
185
- write: sink.write,
186
- statePath,
187
- now: () => new Date("2026-03-01T12:00:00.000Z"),
188
- });
189
- expect(sink.lines).toHaveLength(1);
190
- const out = sink.lines[0] ?? "";
191
- expect(out).toMatch(/plan limit exceeded/i);
192
- expect(out).toMatch(/users:\s*11\/10/);
193
- expect(out).toContain(PLAN_LIMIT_UPGRADE_URL);
194
- expect(out).toMatch(/[┌└│─]/);
195
- // Non-over resources should not appear in the over box resource list.
196
- expect(out).not.toMatch(/secrets:\s*5\/20/);
197
- });
198
-
199
- it("second emit same day (fresh shownAt in statePath) prints nothing", () => {
200
- const sink = makeSink();
201
- const statePath = tmpStatePath();
202
- const now = new Date("2026-03-01T12:00:00.000Z");
203
- fs.writeFileSync(
204
- statePath,
205
- JSON.stringify({ shownAt: now.getTime() - 60 * 60 * 1000 }),
206
- );
207
- recordPlanLimitStatus({
208
- planLimits: { users: { used: 11, limit: 10, over: true } },
209
- });
210
- emitPlanLimitNag({ write: sink.write, statePath, now: () => now });
211
- expect(sink.lines).toHaveLength(0);
212
- });
213
-
214
- it("shownAt older than 24h prints again", () => {
215
- const sink = makeSink();
216
- const statePath = tmpStatePath();
217
- const now = new Date("2026-03-02T13:00:00.000Z");
218
- fs.writeFileSync(
219
- statePath,
220
- JSON.stringify({
221
- shownAt: now.getTime() - 25 * 60 * 60 * 1000,
222
- }),
223
- );
224
- recordPlanLimitStatus({
225
- planLimits: { users: { used: 11, limit: 10, over: true } },
226
- });
227
- emitPlanLimitNag({ write: sink.write, statePath, now: () => now });
228
- expect(sink.lines).toHaveLength(1);
229
- expect(sink.lines[0]).toMatch(/plan limit exceeded/i);
230
- });
231
-
232
- it("session-dedupes over notice even without state file", () => {
233
- const sink = makeSink();
234
- // Unwritable parent: skip persistence but still session-dedupe.
235
- const statePath = unwritableStatePath();
236
- recordPlanLimitStatus({
237
- planLimits: { users: { used: 11, limit: 10, over: true } },
238
- });
239
- emitPlanLimitNag({
240
- write: sink.write,
241
- statePath,
242
- now: () => new Date("2026-03-01T12:00:00.000Z"),
243
- });
244
- emitPlanLimitNag({
245
- write: sink.write,
246
- statePath,
247
- now: () => new Date("2026-03-01T12:00:00.000Z"),
248
- });
249
- expect(sink.lines).toHaveLength(1);
250
- });
251
- });
252
-
253
- describe("env off-switch", () => {
254
- it("HQ_NO_PLAN_LIMIT_NAG=1 produces no output", () => {
255
- process.env[ENV_KEY] = "1";
256
- const sink = makeSink();
257
- recordPlanLimitStatus({
258
- planLimits: {
259
- users: { used: 11, limit: 10, over: true },
260
- },
261
- });
262
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
263
- expect(sink.lines).toHaveLength(0);
264
- });
265
- });
266
-
267
- describe("resilience + exit-code neutrality", () => {
268
- it("emit never throws even when statePath is unwritable", () => {
269
- const sink = makeSink();
270
- const statePath = unwritableStatePath();
271
- recordPlanLimitStatus({
272
- planLimits: { users: { used: 12, limit: 10, over: true } },
273
- });
274
- expect(() =>
275
- emitPlanLimitNag({
276
- write: sink.write,
277
- statePath,
278
- now: () => new Date("2026-03-01T12:00:00.000Z"),
279
- }),
280
- ).not.toThrow();
281
- // Still attempted to print (write may succeed even if state write fails).
282
- expect(sink.lines.length).toBeGreaterThanOrEqual(0);
283
- });
284
-
285
- it("does not touch process.exitCode", () => {
286
- const prev = process.exitCode;
287
- process.exitCode = 0;
288
- try {
289
- const sink = makeSink();
290
- recordPlanLimitStatus({
291
- planLimits: { users: { used: 9, limit: 10, over: false } },
292
- });
293
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
294
- expect(process.exitCode).toBe(0);
295
-
296
- process.exitCode = 1;
297
- _resetForTests();
298
- recordPlanLimitStatus({
299
- planLimits: { users: { used: 11, limit: 10, over: true } },
300
- });
301
- emitPlanLimitNag({
302
- write: sink.write,
303
- statePath: tmpStatePath(),
304
- now: () => new Date("2026-04-01T00:00:00.000Z"),
305
- });
306
- expect(process.exitCode).toBe(1);
307
- } finally {
308
- process.exitCode = prev;
309
- }
310
- });
311
-
312
- it("recordPlanLimitStatus never throws on garbage input", () => {
313
- expect(() => recordPlanLimitStatus(undefined)).not.toThrow();
314
- expect(() => recordPlanLimitStatus(42)).not.toThrow();
315
- expect(() => recordPlanLimitStatus([])).not.toThrow();
316
- });
317
- });