@indigoai-us/hq-cli 5.77.14 → 5.79.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (309) hide show
  1. package/CHANGELOG.md +31 -0
  2. package/assets/scaffold/core/scripts/archive-old-threads.sh +86 -0
  3. package/assets/scaffold/core/scripts/backfill-company-skill-mirrors.sh +73 -0
  4. package/assets/scaffold/core/scripts/backfill-workspace-mirror.sh +51 -0
  5. package/assets/scaffold/core/scripts/codex-skill-bridge.sh +550 -0
  6. package/assets/scaffold/core/scripts/detect-stale-core-policy-mirror.sh +185 -0
  7. package/assets/scaffold/core/scripts/hq-status-summary.sh +187 -0
  8. package/assets/scaffold/core/scripts/ontology-readme-drift.sh +264 -0
  9. package/assets/scaffold/core/scripts/qmd-reindex-after-sync.sh +93 -0
  10. package/assets/scaffold/core/scripts/rebuild-all-indexes.sh +69 -0
  11. package/assets/scaffold/core/scripts/rebuild-companies-index.sh +206 -0
  12. package/assets/scaffold/core/scripts/rebuild-company-knowledge-index.sh +127 -0
  13. package/assets/scaffold/core/scripts/rebuild-orchestrator-index.sh +86 -0
  14. package/assets/scaffold/core/scripts/rebuild-projects-index.sh +105 -0
  15. package/assets/scaffold/core/scripts/rebuild-public-knowledge-index.sh +83 -0
  16. package/assets/scaffold/core/scripts/rebuild-reports-index.sh +114 -0
  17. package/assets/scaffold/core/scripts/rebuild-social-drafts-index.sh +135 -0
  18. package/assets/scaffold/core/scripts/rebuild-threads-index.sh +82 -0
  19. package/assets/scaffold/core/scripts/rebuild-workers-index.sh +97 -0
  20. package/assets/scaffold/core/scripts/resize-screenshot.sh +47 -0
  21. package/assets/scaffold/core/scripts/token-usage-report.sh +254 -0
  22. package/assets/scaffold/core/scripts/worktree.sh +136 -0
  23. package/dist/commands/agents.js +28 -12
  24. package/dist/commands/api-keys.js +100 -20
  25. package/dist/commands/core.d.ts +90 -0
  26. package/dist/commands/core.js +279 -0
  27. package/dist/commands/files-browse.d.ts +21 -0
  28. package/dist/commands/files-browse.js +145 -24
  29. package/dist/commands/files.js +33 -7
  30. package/dist/commands/meetings.js +16 -9
  31. package/dist/commands/members.js +16 -5
  32. package/dist/commands/pack-install.d.ts +14 -0
  33. package/dist/commands/pack-install.js +42 -2
  34. package/dist/commands/pkg-install.js +39 -2
  35. package/dist/commands/run.js +6 -2
  36. package/dist/commands/secrets.js +120 -65
  37. package/dist/main.js +6 -0
  38. package/dist/utils/api-key-command-gate.d.ts +45 -0
  39. package/dist/utils/api-key-command-gate.js +51 -0
  40. package/dist/utils/hq-roots.d.ts +91 -0
  41. package/dist/utils/hq-roots.js +212 -0
  42. package/dist/utils/resolve-vault-credential.d.ts +63 -3
  43. package/dist/utils/resolve-vault-credential.js +152 -6
  44. package/dist/utils/run-bundled-script.d.ts +66 -0
  45. package/dist/utils/run-bundled-script.js +80 -0
  46. package/dist/utils/vault-api.d.ts +21 -0
  47. package/dist/utils/vault-api.js +74 -3
  48. package/package.json +7 -1
  49. package/.claude/policies/hq-cli-interactive-reads-use-sts-vend.md +0 -49
  50. package/.github/workflows/ci.yml +0 -46
  51. package/.github/workflows/publish.yml +0 -36
  52. package/.github/workflows/scripts/smoke-test-pkg.sh +0 -97
  53. package/e2e/cli.test.ts +0 -128
  54. package/eslint.config.js +0 -37
  55. package/pnpm-workspace.yaml +0 -4
  56. package/scripts/chmod-bins.mjs +0 -49
  57. package/scripts/generate-dsn.mjs +0 -26
  58. package/scripts/generate-scan-packages-table.mjs +0 -113
  59. package/scripts/smoke-sources-signals.sh +0 -103
  60. package/src/bin/hq-auth-refresh.ts +0 -43
  61. package/src/cli-version.ts +0 -13
  62. package/src/commands/__fixtures__/make-tar.ts +0 -126
  63. package/src/commands/_patterns.ts +0 -10
  64. package/src/commands/add.ts +0 -75
  65. package/src/commands/agents.test.ts +0 -527
  66. package/src/commands/agents.ts +0 -923
  67. package/src/commands/api-keys.test.ts +0 -291
  68. package/src/commands/api-keys.ts +0 -382
  69. package/src/commands/artifact-verify.test.ts +0 -177
  70. package/src/commands/auth.test.ts +0 -82
  71. package/src/commands/auth.ts +0 -213
  72. package/src/commands/billing.test.ts +0 -158
  73. package/src/commands/billing.ts +0 -146
  74. package/src/commands/channels.test.ts +0 -74
  75. package/src/commands/channels.ts +0 -91
  76. package/src/commands/cloud-demote.test.ts +0 -401
  77. package/src/commands/cloud-demote.ts +0 -278
  78. package/src/commands/cloud-provision.test.ts +0 -1117
  79. package/src/commands/cloud-provision.ts +0 -942
  80. package/src/commands/cloud.pull-all.test.ts +0 -711
  81. package/src/commands/cloud.pull-per-company.test.ts +0 -188
  82. package/src/commands/cloud.push-all.test.ts +0 -485
  83. package/src/commands/cloud.scope-excluded-warning.test.ts +0 -22
  84. package/src/commands/cloud.selectors.test.ts +0 -208
  85. package/src/commands/cloud.status.test.ts +0 -160
  86. package/src/commands/cloud.test.ts +0 -41
  87. package/src/commands/cloud.ts +0 -2130
  88. package/src/commands/company.test.ts +0 -202
  89. package/src/commands/company.ts +0 -148
  90. package/src/commands/creators.test.ts +0 -60
  91. package/src/commands/creators.ts +0 -117
  92. package/src/commands/crm.test.ts +0 -179
  93. package/src/commands/crm.ts +0 -236
  94. package/src/commands/db-migrate.ts +0 -55
  95. package/src/commands/db-provision.ts +0 -114
  96. package/src/commands/db-sql.ts +0 -124
  97. package/src/commands/db-status.ts +0 -108
  98. package/src/commands/db.ts +0 -26
  99. package/src/commands/dm.test.ts +0 -748
  100. package/src/commands/dm.ts +0 -1226
  101. package/src/commands/feedback.test.ts +0 -413
  102. package/src/commands/feedback.ts +0 -169
  103. package/src/commands/files-browse.test.ts +0 -1249
  104. package/src/commands/files-browse.ts +0 -1506
  105. package/src/commands/files-delete.test.ts +0 -484
  106. package/src/commands/files-recovery.test.ts +0 -370
  107. package/src/commands/files.test.ts +0 -722
  108. package/src/commands/files.ts +0 -1446
  109. package/src/commands/group-grants.test.ts +0 -330
  110. package/src/commands/group-grants.ts +0 -455
  111. package/src/commands/groups.test.ts +0 -44
  112. package/src/commands/groups.ts +0 -368
  113. package/src/commands/integrations.test.ts +0 -633
  114. package/src/commands/integrations.ts +0 -507
  115. package/src/commands/list.ts +0 -85
  116. package/src/commands/login.ts +0 -52
  117. package/src/commands/logout.ts +0 -30
  118. package/src/commands/marketplace-install.test.ts +0 -543
  119. package/src/commands/marketplace-security.test.ts +0 -646
  120. package/src/commands/mcp-registration.test.ts +0 -2787
  121. package/src/commands/mcp-registration.ts +0 -2612
  122. package/src/commands/mcp-status.test.ts +0 -483
  123. package/src/commands/mcp-status.ts +0 -575
  124. package/src/commands/mcp-status.us011.test.ts +0 -243
  125. package/src/commands/meetings.test.ts +0 -522
  126. package/src/commands/meetings.ts +0 -789
  127. package/src/commands/members.test.ts +0 -1474
  128. package/src/commands/members.ts +0 -1181
  129. package/src/commands/onboard-identity-guard.test.ts +0 -99
  130. package/src/commands/onboard-identity-guard.ts +0 -103
  131. package/src/commands/onboard-join.test.ts +0 -96
  132. package/src/commands/onboard-join.ts +0 -101
  133. package/src/commands/onboard-warning.test.ts +0 -26
  134. package/src/commands/onboard-warning.ts +0 -12
  135. package/src/commands/onboard.ts +0 -267
  136. package/src/commands/outposts-heartbeat.test.ts +0 -299
  137. package/src/commands/outposts-heartbeat.ts +0 -310
  138. package/src/commands/outposts-replica-sync.test.ts +0 -272
  139. package/src/commands/outposts-self-deploy.test.ts +0 -243
  140. package/src/commands/outposts.test.ts +0 -1039
  141. package/src/commands/outposts.ts +0 -1935
  142. package/src/commands/pack-install-secret-authorization.test.ts +0 -115
  143. package/src/commands/pack-install.test.ts +0 -1469
  144. package/src/commands/pack-install.ts +0 -2256
  145. package/src/commands/pack-update-cache.test.ts +0 -149
  146. package/src/commands/packs-update-api-key.test.ts +0 -105
  147. package/src/commands/packs.test.ts +0 -88
  148. package/src/commands/packs.ts +0 -622
  149. package/src/commands/people.test.ts +0 -807
  150. package/src/commands/people.ts +0 -422
  151. package/src/commands/pkg-install.dispatch.test.ts +0 -103
  152. package/src/commands/pkg-install.ts +0 -221
  153. package/src/commands/pkg-list.test.ts +0 -79
  154. package/src/commands/pkg-list.ts +0 -13
  155. package/src/commands/pkg-remove.ts +0 -71
  156. package/src/commands/pkg-update.ts +0 -189
  157. package/src/commands/publish.test.ts +0 -650
  158. package/src/commands/publish.ts +0 -580
  159. package/src/commands/reindex.test.ts +0 -259
  160. package/src/commands/reindex.ts +0 -274
  161. package/src/commands/rescue.test.ts +0 -39
  162. package/src/commands/rescue.ts +0 -210
  163. package/src/commands/run.env-local.test.ts +0 -88
  164. package/src/commands/run.test.ts +0 -45
  165. package/src/commands/run.ts +0 -190
  166. package/src/commands/safe-extract.test.ts +0 -459
  167. package/src/commands/safe-extract.ts +0 -444
  168. package/src/commands/secrets-scope.test.ts +0 -56
  169. package/src/commands/secrets-scope.ts +0 -32
  170. package/src/commands/secrets.parse-destination.test.ts +0 -38
  171. package/src/commands/secrets.test.ts +0 -2050
  172. package/src/commands/secrets.ts +0 -2249
  173. package/src/commands/signals.ts +0 -351
  174. package/src/commands/skill.test.ts +0 -770
  175. package/src/commands/skill.ts +0 -796
  176. package/src/commands/sources.ts +0 -362
  177. package/src/commands/sync-mode.test.ts +0 -366
  178. package/src/commands/sync-mode.ts +0 -387
  179. package/src/commands/sync-narrow.test.ts +0 -633
  180. package/src/commands/sync-narrow.ts +0 -555
  181. package/src/commands/sync.ts +0 -165
  182. package/src/commands/team-sync.ts +0 -628
  183. package/src/commands/update.ts +0 -71
  184. package/src/commands/whoami.ts +0 -83
  185. package/src/commands/workers.test.ts +0 -158
  186. package/src/commands/workers.ts +0 -301
  187. package/src/index.test.ts +0 -32
  188. package/src/index.ts +0 -20
  189. package/src/lib/db/control-plane.test.ts +0 -59
  190. package/src/lib/db/control-plane.ts +0 -113
  191. package/src/lib/db/local.test.ts +0 -81
  192. package/src/lib/db/local.ts +0 -148
  193. package/src/lib/db/migrate.test.ts +0 -133
  194. package/src/lib/db/migrate.ts +0 -137
  195. package/src/lib/db/paths.test.ts +0 -112
  196. package/src/lib/db/paths.ts +0 -128
  197. package/src/lib/db/remote-engine.test.ts +0 -44
  198. package/src/lib/db/remote-engine.ts +0 -148
  199. package/src/lib/db/remote-sql.test.ts +0 -32
  200. package/src/lib/db/remote-sql.ts +0 -62
  201. package/src/lib/db/sql.test.ts +0 -106
  202. package/src/lib/db/sql.ts +0 -192
  203. package/src/lib/hq-cloud-dep.smoke.test.ts +0 -75
  204. package/src/lib/local-tree-diff.test.ts +0 -301
  205. package/src/lib/local-tree-diff.ts +0 -362
  206. package/src/lib/narrow-hint-banner.test.ts +0 -235
  207. package/src/lib/narrow-hint-banner.ts +0 -212
  208. package/src/lib/plan-limit-nag.test.ts +0 -317
  209. package/src/lib/plan-limit-nag.ts +0 -264
  210. package/src/main.ts +0 -371
  211. package/src/node-preflight.test.ts +0 -60
  212. package/src/node-preflight.ts +0 -67
  213. package/src/outpost/session-heartbeat-bounds.test.ts +0 -195
  214. package/src/outpost/session-heartbeat-guard.test.ts +0 -105
  215. package/src/outpost/session-heartbeat-publisher.test.ts +0 -178
  216. package/src/outpost/session-heartbeat-publisher.ts +0 -186
  217. package/src/outpost/session-heartbeat-retain-guard.test.ts +0 -126
  218. package/src/outpost/session-heartbeat.test.ts +0 -459
  219. package/src/outpost/session-heartbeat.ts +0 -877
  220. package/src/packaging.test.ts +0 -109
  221. package/src/run/__fixtures__/discover-schemas/example.env.schema +0 -4
  222. package/src/run/discover-schemas.test.ts +0 -153
  223. package/src/run/discover-schemas.ts +0 -79
  224. package/src/run/hq-plugin.test.ts +0 -371
  225. package/src/run/hq-plugin.ts +0 -277
  226. package/src/run/varlock-shape.test.ts +0 -57
  227. package/src/schemas/hq-package.schema.json +0 -155
  228. package/src/sentry-before-send.test.ts +0 -359
  229. package/src/sentry-before-send.ts +0 -221
  230. package/src/sentry-epipe.test.ts +0 -37
  231. package/src/sentry-release.test.ts +0 -54
  232. package/src/sentry.test.ts +0 -24
  233. package/src/sentry.ts +0 -54
  234. package/src/strategies/link.ts +0 -62
  235. package/src/strategies/merge.ts +0 -142
  236. package/src/types.ts +0 -146
  237. package/src/utils/__fixtures__/scan-packages.generated-block.sh +0 -23
  238. package/src/utils/auth-error.test.ts +0 -40
  239. package/src/utils/auth-error.ts +0 -42
  240. package/src/utils/billing-gate.test.ts +0 -95
  241. package/src/utils/billing-gate.ts +0 -228
  242. package/src/utils/breadcrumb-buffer.ts +0 -18
  243. package/src/utils/cli-telemetry.test.ts +0 -153
  244. package/src/utils/cli-telemetry.ts +0 -61
  245. package/src/utils/cognito-session.machine.test.ts +0 -109
  246. package/src/utils/cognito-session.refresh.test.ts +0 -84
  247. package/src/utils/cognito-session.test.ts +0 -328
  248. package/src/utils/cognito-session.ts +0 -448
  249. package/src/utils/company-selection-error.test.ts +0 -42
  250. package/src/utils/company-selection-error.ts +0 -45
  251. package/src/utils/contribution-table.ts +0 -83
  252. package/src/utils/environmental-error.test.ts +0 -45
  253. package/src/utils/environmental-error.ts +0 -39
  254. package/src/utils/epipe.test.ts +0 -28
  255. package/src/utils/epipe.ts +0 -29
  256. package/src/utils/expected-cli-error.test.ts +0 -28
  257. package/src/utils/expected-cli-error.ts +0 -39
  258. package/src/utils/feedback-diagnostics.test.ts +0 -183
  259. package/src/utils/feedback-diagnostics.ts +0 -123
  260. package/src/utils/feedback-screenshots.test.ts +0 -134
  261. package/src/utils/feedback-screenshots.ts +0 -124
  262. package/src/utils/feedback-versions.test.ts +0 -98
  263. package/src/utils/feedback-versions.ts +0 -68
  264. package/src/utils/git.ts +0 -74
  265. package/src/utils/integrity.ts +0 -59
  266. package/src/utils/intercepted-process-exit.test.ts +0 -37
  267. package/src/utils/intercepted-process-exit.ts +0 -36
  268. package/src/utils/login-provider.test.ts +0 -42
  269. package/src/utils/login-provider.ts +0 -30
  270. package/src/utils/manifest.test.ts +0 -167
  271. package/src/utils/manifest.ts +0 -131
  272. package/src/utils/pack-contributions.test.ts +0 -603
  273. package/src/utils/pack-contributions.ts +0 -450
  274. package/src/utils/people.ts +0 -215
  275. package/src/utils/registry-client.ts +0 -204
  276. package/src/utils/registry.ts +0 -90
  277. package/src/utils/resolve-vault-credential.test.ts +0 -69
  278. package/src/utils/resolve-vault-credential.ts +0 -60
  279. package/src/utils/sandbox-runner-client.test.ts +0 -279
  280. package/src/utils/sandbox-runner-client.ts +0 -260
  281. package/src/utils/secrets-cache.ts +0 -183
  282. package/src/utils/sentry-identity.ts +0 -45
  283. package/src/utils/settle-with-timeout.test.ts +0 -21
  284. package/src/utils/settle-with-timeout.ts +0 -22
  285. package/src/utils/user-yaml-error.test.ts +0 -24
  286. package/src/utils/user-yaml-error.ts +0 -30
  287. package/src/utils/vault-api.test.ts +0 -536
  288. package/src/utils/vault-api.ts +0 -382
  289. package/src/utils/version-check.test.ts +0 -176
  290. package/src/utils/version-check.ts +0 -155
  291. package/src/utils/version-gate.test.ts +0 -1024
  292. package/src/utils/version-gate.ts +0 -702
  293. package/test/commands/db-tenant-isolation.test.ts +0 -94
  294. package/test/commands/db.test.ts +0 -85
  295. package/test/commands/signals.test.ts +0 -207
  296. package/test/commands/sources.test.ts +0 -231
  297. package/test/e2e/smoke-install-mcp.sh +0 -113
  298. package/test/fixtures/hq-pack-smoke-mcp/mcp/smoke-http.json +0 -1
  299. package/test/fixtures/hq-pack-smoke-mcp/package.yaml +0 -11
  300. package/test/fixtures/signals/action_item/sample.md +0 -16
  301. package/test/fixtures/signals/summary/sample.md +0 -12
  302. package/test/fixtures/sources/meetings/sample.md +0 -25
  303. package/test/helpers/cli-runner.ts +0 -150
  304. package/test/helpers/s3-list-mock.ts +0 -79
  305. package/test/helpers/vault-service-mock.ts +0 -295
  306. package/test/sources-signals/smoke.test.ts +0 -228
  307. package/tsconfig.json +0 -20
  308. package/vitest.config.ts +0 -11
  309. package/vitest.e2e.config.ts +0 -7
@@ -1,188 +0,0 @@
1
- /**
2
- * Unit tests for `resolvePerCompanyPullPlan` — the helper extracted from the
3
- * `hq sync pull --company <slug>` action handler so the US-011 banner +
4
- * strict-refusal wiring can be exercised without commander / a real
5
- * VaultClient (US-011 fix, 2026-05-21).
6
- *
7
- * The action handler itself stays a thin orchestrator. These tests cover
8
- * the membership-resolution decision tree, which is the part that broke
9
- * on the pre-fix code path (banner silently never fired because the
10
- * handler never looked up the sync-config).
11
- *
12
- * Coverage:
13
- * 1. Undefined targetCompany short-circuits to no-op.
14
- * 2. Direct UID match returns mode + companyUid.
15
- * 3. Direct membershipKey match returns mode + companyUid.
16
- * 4. Slug match via entity.get returns mode + companyUid.
17
- * 5. listMyMemberships error degrades silently to no resolution.
18
- * 6. getMembershipSyncConfig error degrades to undefined mode but keeps companyUid.
19
- * 7. Slug iteration stops at first match (doesn't fan out to all entities).
20
- * 8. No matching membership returns no resolution.
21
- */
22
-
23
- import { describe, expect, it, vi } from "vitest";
24
- import {
25
- resolvePerCompanyPullPlan,
26
- type PerCompanyPullResolveClient,
27
- } from "./cloud.js";
28
-
29
- function makeClient(opts: {
30
- memberships?: Array<{ companyUid: string; membershipKey: string }>;
31
- syncConfigs?: Record<string, { syncMode: "shared" | "all" | "custom" }>;
32
- entities?: Record<string, { slug?: string }>;
33
- failListMemberships?: boolean;
34
- failSyncConfigFor?: Set<string>;
35
- failEntityFor?: Set<string>;
36
- }): PerCompanyPullResolveClient & {
37
- _entityCalls: () => string[];
38
- } {
39
- const entityCalls: string[] = [];
40
- return {
41
- listMyMemberships: vi.fn(async () => {
42
- if (opts.failListMemberships) throw new Error("listMyMemberships boom");
43
- return opts.memberships ?? [];
44
- }),
45
- getMembershipSyncConfig: vi.fn(async (key: string) => {
46
- if (opts.failSyncConfigFor?.has(key))
47
- throw new Error(`getMembershipSyncConfig boom for ${key}`);
48
- const cfg = (opts.syncConfigs ?? {})[key];
49
- if (!cfg) throw new Error(`no fake config for ${key}`);
50
- return cfg;
51
- }),
52
- entity: {
53
- get: vi.fn(async (uid: string) => {
54
- entityCalls.push(uid);
55
- if (opts.failEntityFor?.has(uid))
56
- throw new Error(`entity.get boom for ${uid}`);
57
- return (opts.entities ?? {})[uid] ?? {};
58
- }),
59
- },
60
- _entityCalls: () => entityCalls,
61
- };
62
- }
63
-
64
- describe("resolvePerCompanyPullPlan (US-011 per-company pull fix)", () => {
65
- it("returns undefined+undefined when targetCompany is undefined", async () => {
66
- const client = makeClient({});
67
- const result = await resolvePerCompanyPullPlan(client, undefined);
68
- expect(result.resolvedCompanyUid).toBeUndefined();
69
- expect(result.resolvedMode).toBeUndefined();
70
- // Should not call any API — short-circuit.
71
- expect(client.listMyMemberships).not.toHaveBeenCalled();
72
- });
73
-
74
- it("matches by direct companyUid and returns the live syncMode", async () => {
75
- const client = makeClient({
76
- memberships: [
77
- { companyUid: "cmp_personal", membershipKey: "mbr_personal" },
78
- { companyUid: "cmp_indigo", membershipKey: "mbr_indigo" },
79
- ],
80
- syncConfigs: {
81
- mbr_personal: { syncMode: "all" },
82
- mbr_indigo: { syncMode: "shared" },
83
- },
84
- });
85
- const result = await resolvePerCompanyPullPlan(client, "cmp_indigo");
86
- expect(result.resolvedCompanyUid).toBe("cmp_indigo");
87
- expect(result.resolvedMode).toBe("shared");
88
- // Slug-fallback loop must not fire — no entity calls.
89
- expect(client._entityCalls()).toEqual([]);
90
- });
91
-
92
- it("matches by direct membershipKey", async () => {
93
- const client = makeClient({
94
- memberships: [
95
- { companyUid: "cmp_x", membershipKey: "mbr_special" },
96
- ],
97
- syncConfigs: { mbr_special: { syncMode: "custom" } },
98
- });
99
- const result = await resolvePerCompanyPullPlan(client, "mbr_special");
100
- expect(result.resolvedCompanyUid).toBe("cmp_x");
101
- expect(result.resolvedMode).toBe("custom");
102
- });
103
-
104
- it("matches by slug via entity.get fan-out", async () => {
105
- const client = makeClient({
106
- memberships: [
107
- { companyUid: "cmp_one", membershipKey: "mbr_one" },
108
- { companyUid: "cmp_two", membershipKey: "mbr_two" },
109
- ],
110
- syncConfigs: { mbr_two: { syncMode: "all" } },
111
- entities: {
112
- cmp_one: { slug: "foo" },
113
- cmp_two: { slug: "personal" },
114
- },
115
- });
116
- const result = await resolvePerCompanyPullPlan(client, "personal");
117
- expect(result.resolvedCompanyUid).toBe("cmp_two");
118
- expect(result.resolvedMode).toBe("all");
119
- });
120
-
121
- it("stops slug iteration at the first match — does not fan out", async () => {
122
- const client = makeClient({
123
- memberships: [
124
- { companyUid: "cmp_a", membershipKey: "mbr_a" },
125
- { companyUid: "cmp_b", membershipKey: "mbr_b" },
126
- { companyUid: "cmp_c", membershipKey: "mbr_c" },
127
- ],
128
- syncConfigs: { mbr_b: { syncMode: "shared" } },
129
- entities: {
130
- cmp_a: { slug: "alpha" },
131
- cmp_b: { slug: "beta" },
132
- cmp_c: { slug: "gamma" },
133
- },
134
- });
135
- const result = await resolvePerCompanyPullPlan(client, "beta");
136
- expect(result.resolvedCompanyUid).toBe("cmp_b");
137
- expect(result.resolvedMode).toBe("shared");
138
- // cmp_a was probed, cmp_b matched, cmp_c never touched.
139
- expect(client._entityCalls()).toEqual(["cmp_a", "cmp_b"]);
140
- });
141
-
142
- it("returns undefined for both when no matching membership/slug", async () => {
143
- const client = makeClient({
144
- memberships: [
145
- { companyUid: "cmp_x", membershipKey: "mbr_x" },
146
- ],
147
- entities: { cmp_x: { slug: "foo" } },
148
- });
149
- const result = await resolvePerCompanyPullPlan(client, "doesnotexist");
150
- expect(result.resolvedCompanyUid).toBeUndefined();
151
- expect(result.resolvedMode).toBeUndefined();
152
- });
153
-
154
- it("degrades silently when listMyMemberships fails — no banner, pull continues", async () => {
155
- const client = makeClient({ failListMemberships: true });
156
- const result = await resolvePerCompanyPullPlan(client, "personal");
157
- expect(result.resolvedCompanyUid).toBeUndefined();
158
- expect(result.resolvedMode).toBeUndefined();
159
- // Sync-config never reached.
160
- expect(client.getMembershipSyncConfig).not.toHaveBeenCalled();
161
- });
162
-
163
- it("on direct match, keeps companyUid even when getMembershipSyncConfig throws", async () => {
164
- const client = makeClient({
165
- memberships: [{ companyUid: "cmp_p", membershipKey: "mbr_p" }],
166
- failSyncConfigFor: new Set(["mbr_p"]),
167
- });
168
- const result = await resolvePerCompanyPullPlan(client, "cmp_p");
169
- expect(result.resolvedCompanyUid).toBe("cmp_p");
170
- // Mode unknown — caller will skip banner emit (it only fires when mode='all').
171
- expect(result.resolvedMode).toBeUndefined();
172
- });
173
-
174
- it("on slug-fallback match, skips broken entity rows and keeps looking", async () => {
175
- const client = makeClient({
176
- memberships: [
177
- { companyUid: "cmp_broken", membershipKey: "mbr_broken" },
178
- { companyUid: "cmp_good", membershipKey: "mbr_good" },
179
- ],
180
- syncConfigs: { mbr_good: { syncMode: "all" } },
181
- entities: { cmp_good: { slug: "wanted" } },
182
- failEntityFor: new Set(["cmp_broken"]),
183
- });
184
- const result = await resolvePerCompanyPullPlan(client, "wanted");
185
- expect(result.resolvedCompanyUid).toBe("cmp_good");
186
- expect(result.resolvedMode).toBe("all");
187
- });
188
- });
@@ -1,485 +0,0 @@
1
- /**
2
- * Unit tests for `pushAll` — the orchestrator behind `hq sync push --all`.
3
- *
4
- * Mirrors the DI layout used in `cloud.pull-all.test.ts`: pushAll takes a
5
- * `VaultClient`-shaped adapter and a `share`-shaped function as deps, so
6
- * the tests can exercise the membership + canonical-person fanout without
7
- * touching the network or the real share() implementation.
8
- *
9
- * Personal paths are computed via the real `computePersonalVaultPaths` so
10
- * we verify the hqRoot scope on disk. Each test that exercises personal
11
- * uses an isolated tmpdir with known top-level entries.
12
- */
13
-
14
- import { describe, expect, it, vi, beforeEach, afterEach } from "vitest";
15
- import * as fs from "fs";
16
- import * as os from "os";
17
- import * as path from "path";
18
-
19
- import {
20
- pushAll,
21
- type PushAllDeps,
22
- type PullAllVaultClient,
23
- type ShareCallOptions,
24
- type ShareCallResult,
25
- } from "./cloud.js";
26
-
27
- // ── Helpers ─────────────────────────────────────────────────────────────────
28
-
29
- interface FakeMembership {
30
- companyUid: string;
31
- }
32
-
33
- interface FakeEntity {
34
- uid: string;
35
- type: "person" | "company";
36
- slug: string;
37
- bucketName?: string;
38
- createdAt: string;
39
- }
40
-
41
- function makeVaultClient(opts: {
42
- memberships?: FakeMembership[];
43
- persons?: FakeEntity[];
44
- entitiesBySlug?: Record<string, { slug: string; name?: string }>;
45
- failGetEntityFor?: Set<string>;
46
- }): PullAllVaultClient {
47
- return {
48
- listMyMemberships: vi
49
- .fn<[], Promise<FakeMembership[]>>()
50
- .mockResolvedValue(opts.memberships ?? []),
51
- listPersonEntities: vi
52
- .fn<[], Promise<FakeEntity[]>>()
53
- .mockResolvedValue(opts.persons ?? []),
54
- getEntity: vi
55
- .fn<[string], Promise<{ slug?: string; name?: string } | null>>()
56
- .mockImplementation(async (uid: string) => {
57
- if (opts.failGetEntityFor?.has(uid)) {
58
- throw new Error(`fake getEntity failure for ${uid}`);
59
- }
60
- return opts.entitiesBySlug?.[uid] ?? null;
61
- }),
62
- };
63
- }
64
-
65
- function makeShareSpy(
66
- perCallOverrides: Record<string, Partial<ShareCallResult> | Error> = {},
67
- ): {
68
- fn: PushAllDeps["share"];
69
- calls: ShareCallOptions[];
70
- } {
71
- const calls: ShareCallOptions[] = [];
72
- const fn: PushAllDeps["share"] = vi
73
- .fn<[ShareCallOptions], Promise<ShareCallResult>>()
74
- .mockImplementation(async (options: ShareCallOptions) => {
75
- calls.push(options);
76
- const override = perCallOverrides[options.company];
77
- if (override instanceof Error) {
78
- throw override;
79
- }
80
- return {
81
- filesUploaded: 0,
82
- bytesUploaded: 0,
83
- filesSkipped: 0,
84
- filesDeleted: 0,
85
- filesExcludedByScope: 0,
86
- conflictPaths: [],
87
- aborted: false,
88
- ...override,
89
- };
90
- });
91
- return { fn, calls };
92
- }
93
-
94
- // Create a tmpdir hqRoot with a known set of top-level entries so the
95
- // personal-vault path computation produces a stable expected output.
96
- let tmpHqRoots: string[] = [];
97
-
98
- function makeHqRoot(topLevelEntries: string[]): string {
99
- const root = fs.mkdtempSync(path.join(os.tmpdir(), "hq-pushall-test-"));
100
- for (const name of topLevelEntries) {
101
- fs.mkdirSync(path.join(root, name), { recursive: true });
102
- }
103
- tmpHqRoots.push(root);
104
- return root;
105
- }
106
-
107
- beforeEach(() => {
108
- tmpHqRoots = [];
109
- });
110
-
111
- afterEach(() => {
112
- for (const root of tmpHqRoots) {
113
- try {
114
- fs.rmSync(root, { recursive: true, force: true });
115
- } catch {
116
- // Best-effort cleanup.
117
- }
118
- }
119
- });
120
-
121
- // ── 1. Happy path ───────────────────────────────────────────────────────────
122
-
123
- describe("pushAll", () => {
124
- it("pushes every membership plus the canonical person entity", async () => {
125
- const hqRoot = makeHqRoot([
126
- ".git",
127
- "companies",
128
- "repos",
129
- "workspace",
130
- ".claude",
131
- "knowledge",
132
- "personal",
133
- ]);
134
- const vaultClient = makeVaultClient({
135
- memberships: [
136
- { companyUid: "cmp_acme" },
137
- { companyUid: "cmp_globex" },
138
- ],
139
- persons: [
140
- {
141
- uid: "psn_alice",
142
- type: "person",
143
- slug: "alice",
144
- bucketName: "hq-vault-psn-alice",
145
- createdAt: "2026-01-01T00:00:00Z",
146
- },
147
- ],
148
- entitiesBySlug: {
149
- cmp_acme: { slug: "acme", name: "Acme" },
150
- cmp_globex: { slug: "globex", name: "Globex" },
151
- },
152
- });
153
- const share = makeShareSpy({
154
- cmp_acme: { filesUploaded: 4, bytesUploaded: 400 },
155
- cmp_globex: { filesUploaded: 1, bytesUploaded: 50 },
156
- psn_alice: { filesUploaded: 9, bytesUploaded: 900 },
157
- });
158
-
159
- const result = await pushAll(
160
- { hqRoot, onConflict: "abort" },
161
- { vaultClient, share: share.fn },
162
- );
163
-
164
- expect(share.calls).toHaveLength(3);
165
- expect(share.calls[0]).toMatchObject({
166
- company: "cmp_acme",
167
- hqRoot,
168
- paths: [path.join(hqRoot, "companies", "acme")],
169
- onConflict: "abort",
170
- skipUnchanged: true,
171
- propagateDeletes: true,
172
- });
173
- expect(share.calls[1]).toMatchObject({
174
- company: "cmp_globex",
175
- paths: [path.join(hqRoot, "companies", "globex")],
176
- });
177
- expect(share.calls[2]).toMatchObject({
178
- company: "psn_alice",
179
- personalMode: true,
180
- journalSlug: "__hq_personal_vault__",
181
- skipUnchanged: true,
182
- propagateDeletes: true,
183
- });
184
- // Personal paths excludes .git/companies/repos/workspace, keeps the rest.
185
- expect(new Set(share.calls[2].paths)).toEqual(
186
- new Set([
187
- path.join(hqRoot, ".claude"),
188
- path.join(hqRoot, "knowledge"),
189
- path.join(hqRoot, "personal"),
190
- ]),
191
- );
192
-
193
- expect(result.attempted).toBe(3);
194
- expect(result.filesUploaded).toBe(14);
195
- expect(result.bytesUploaded).toBe(1350);
196
- expect(result.errors).toEqual([]);
197
- expect(result.perCompany.map((row) => row.slug)).toEqual([
198
- "acme",
199
- "globex",
200
- "personal",
201
- ]);
202
- });
203
-
204
- // ── 2. Conflict + message passthrough ─────────────────────────────────────
205
-
206
- it("forwards --on-conflict and --message to every share() call", async () => {
207
- const hqRoot = makeHqRoot(["companies", ".claude"]);
208
- const vaultClient = makeVaultClient({
209
- memberships: [{ companyUid: "cmp_acme" }],
210
- persons: [
211
- {
212
- uid: "psn_alice",
213
- type: "person",
214
- slug: "alice",
215
- createdAt: "2026-01-01T00:00:00Z",
216
- },
217
- ],
218
- });
219
- const share = makeShareSpy();
220
-
221
- await pushAll(
222
- { hqRoot, onConflict: "overwrite", message: "test broadcast" },
223
- { vaultClient, share: share.fn },
224
- );
225
-
226
- for (const call of share.calls) {
227
- expect(call.onConflict).toBe("overwrite");
228
- expect(call.message).toBe("test broadcast");
229
- expect(call.skipUnchanged).toBe(true);
230
- expect(call.propagateDeletes).toBe(true);
231
- }
232
- });
233
-
234
- // ── 3. Per-company error isolation ────────────────────────────────────────
235
-
236
- it("continues past a per-company share failure and reports it in errors[]", async () => {
237
- const hqRoot = makeHqRoot(["companies"]);
238
- const vaultClient = makeVaultClient({
239
- memberships: [
240
- { companyUid: "cmp_acme" },
241
- { companyUid: "cmp_globex" },
242
- ],
243
- persons: [],
244
- entitiesBySlug: {
245
- cmp_acme: { slug: "acme" },
246
- cmp_globex: { slug: "globex" },
247
- },
248
- });
249
- const share = makeShareSpy({
250
- cmp_globex: new Error("STS denied"),
251
- });
252
-
253
- const result = await pushAll(
254
- { hqRoot },
255
- { vaultClient, share: share.fn },
256
- );
257
-
258
- expect(share.calls.map((c) => c.company)).toEqual([
259
- "cmp_acme",
260
- "cmp_globex",
261
- ]);
262
- expect(result.attempted).toBe(2);
263
- expect(result.errors).toEqual([
264
- { company: "globex", message: "STS denied" },
265
- ]);
266
- const globexRow = result.perCompany.find((r) => r.slug === "globex");
267
- expect(globexRow?.error).toBe("STS denied");
268
- expect(globexRow?.result).toBeUndefined();
269
- });
270
-
271
- // ── 4. No person entity ────────────────────────────────────────────────────
272
-
273
- it("omits the personal target when listPersonEntities returns []", async () => {
274
- const hqRoot = makeHqRoot(["companies"]);
275
- const vaultClient = makeVaultClient({
276
- memberships: [{ companyUid: "cmp_acme" }],
277
- persons: [],
278
- entitiesBySlug: { cmp_acme: { slug: "acme" } },
279
- });
280
- const share = makeShareSpy();
281
-
282
- const result = await pushAll(
283
- { hqRoot },
284
- { vaultClient, share: share.fn },
285
- );
286
-
287
- expect(share.calls).toHaveLength(1);
288
- expect(share.calls[0].company).toBe("cmp_acme");
289
- expect(share.calls[0].personalMode).toBeUndefined();
290
- expect(result.perCompany.map((r) => r.slug)).toEqual(["acme"]);
291
- });
292
-
293
- // ── 5. No memberships and no person entity ────────────────────────────────
294
-
295
- it("returns cleanly with zero attempts when there is nothing to push", async () => {
296
- const hqRoot = makeHqRoot([]);
297
- const vaultClient = makeVaultClient({});
298
- const share = makeShareSpy();
299
-
300
- const result = await pushAll(
301
- { hqRoot },
302
- { vaultClient, share: share.fn },
303
- );
304
-
305
- expect(share.calls).toEqual([]);
306
- expect(result).toEqual({
307
- attempted: 0,
308
- filesUploaded: 0,
309
- bytesUploaded: 0,
310
- filesDeleted: 0,
311
- filesExcludedByScope: 0,
312
- errors: [],
313
- perCompany: [],
314
- });
315
- });
316
-
317
- // ── 6. Canonical-person tiebreak ──────────────────────────────────────────
318
-
319
- it("picks the oldest person entity, breaking ties by uid", async () => {
320
- const hqRoot = makeHqRoot(["docs"]);
321
- const vaultClient = makeVaultClient({
322
- memberships: [],
323
- persons: [
324
- {
325
- uid: "psn_zzz",
326
- type: "person",
327
- slug: "alice-zzz",
328
- createdAt: "2026-01-01T00:00:00Z",
329
- },
330
- {
331
- uid: "psn_aaa",
332
- type: "person",
333
- slug: "alice-aaa",
334
- createdAt: "2026-01-01T00:00:00Z",
335
- },
336
- {
337
- uid: "psn_old",
338
- type: "person",
339
- slug: "alice-old",
340
- createdAt: "2025-06-01T00:00:00Z",
341
- },
342
- ],
343
- });
344
- const share = makeShareSpy();
345
-
346
- await pushAll({ hqRoot }, { vaultClient, share: share.fn });
347
-
348
- expect(share.calls).toHaveLength(1);
349
- expect(share.calls[0].company).toBe("psn_old");
350
- expect(share.calls[0].personalMode).toBe(true);
351
- expect(share.calls[0].journalSlug).toBe("__hq_personal_vault__");
352
- });
353
-
354
- // ── 7. Aggregate counts include deletes ───────────────────────────────────
355
-
356
- it("aggregates filesDeleted across every successful target", async () => {
357
- const hqRoot = makeHqRoot(["companies", "docs"]);
358
- const vaultClient = makeVaultClient({
359
- memberships: [{ companyUid: "cmp_acme" }],
360
- persons: [
361
- {
362
- uid: "psn_alice",
363
- type: "person",
364
- slug: "alice",
365
- createdAt: "2026-01-01T00:00:00Z",
366
- },
367
- ],
368
- entitiesBySlug: { cmp_acme: { slug: "acme" } },
369
- });
370
- const share = makeShareSpy({
371
- cmp_acme: { filesUploaded: 2, filesDeleted: 1 },
372
- psn_alice: { filesUploaded: 1, filesDeleted: 3 },
373
- });
374
-
375
- const result = await pushAll(
376
- { hqRoot },
377
- { vaultClient, share: share.fn },
378
- );
379
-
380
- expect(result.filesUploaded).toBe(3);
381
- expect(result.filesDeleted).toBe(4);
382
- });
383
-
384
- it("aggregates filesExcludedByScope across every successful target", async () => {
385
- const hqRoot = makeHqRoot(["companies", "docs"]);
386
- const vaultClient = makeVaultClient({
387
- memberships: [{ companyUid: "cmp_acme" }],
388
- persons: [
389
- {
390
- uid: "psn_alice",
391
- type: "person",
392
- slug: "alice",
393
- createdAt: "2026-01-01T00:00:00Z",
394
- },
395
- ],
396
- entitiesBySlug: { cmp_acme: { slug: "acme" } },
397
- });
398
- const share = makeShareSpy({
399
- cmp_acme: { filesExcludedByScope: 2 },
400
- psn_alice: { filesExcludedByScope: 3 },
401
- });
402
-
403
- const result = await pushAll(
404
- { hqRoot },
405
- { vaultClient, share: share.fn },
406
- );
407
-
408
- expect(result.filesExcludedByScope).toBe(5);
409
- });
410
-
411
- // ── skipPersonal — fanout omits the canonical-person leg ──────────────────
412
- //
413
- // Symmetric with the `pullAll` skipPersonal coverage in
414
- // `cloud.pull-all.test.ts`. Wired through from `hq sync push --all
415
- // --no-personal` (Commander's `--no-personal` is the auto-negation of the
416
- // `--personal` single-target selector). Verifies (a) the personal leg is
417
- // dropped even when a canonical person exists, and (b) the baseline
418
- // behavior — no flag → personal stays in the plan.
419
-
420
- it("skipPersonal=true omits the personal leg even when a person entity exists", async () => {
421
- const hqRoot = makeHqRoot([".git", "companies", "repos", "workspace"]);
422
- const vaultClient = makeVaultClient({
423
- memberships: [
424
- { companyUid: "cmp_acme" },
425
- { companyUid: "cmp_globex" },
426
- ],
427
- persons: [
428
- {
429
- uid: "psn_alice",
430
- type: "person",
431
- slug: "alice",
432
- bucketName: "hq-vault-psn-alice",
433
- createdAt: "2026-01-01T00:00:00Z",
434
- },
435
- ],
436
- entitiesBySlug: {
437
- cmp_acme: { slug: "acme" },
438
- cmp_globex: { slug: "globex" },
439
- },
440
- });
441
- const share = makeShareSpy();
442
-
443
- const result = await pushAll(
444
- { hqRoot, skipPersonal: true },
445
- { vaultClient, share: share.fn },
446
- );
447
-
448
- expect(share.calls.map((c) => c.company)).toEqual([
449
- "cmp_acme",
450
- "cmp_globex",
451
- ]);
452
- for (const call of share.calls) {
453
- expect(call.personalMode).toBeUndefined();
454
- expect(call.journalSlug).toBeUndefined();
455
- }
456
- expect(result.attempted).toBe(2);
457
- expect(result.perCompany.map((r) => r.slug)).toEqual(["acme", "globex"]);
458
- });
459
-
460
- it("skipPersonal omitted keeps the personal leg in the plan (baseline)", async () => {
461
- const hqRoot = makeHqRoot([".git", "companies", "repos", "workspace"]);
462
- const vaultClient = makeVaultClient({
463
- memberships: [{ companyUid: "cmp_acme" }],
464
- persons: [
465
- {
466
- uid: "psn_alice",
467
- type: "person",
468
- slug: "alice",
469
- createdAt: "2026-01-01T00:00:00Z",
470
- },
471
- ],
472
- entitiesBySlug: { cmp_acme: { slug: "acme" } },
473
- });
474
- const share = makeShareSpy();
475
-
476
- await pushAll({ hqRoot }, { vaultClient, share: share.fn });
477
-
478
- expect(share.calls.map((c) => c.company)).toEqual([
479
- "cmp_acme",
480
- "psn_alice",
481
- ]);
482
- expect(share.calls[1].personalMode).toBe(true);
483
- expect(share.calls[1].journalSlug).toBe("__hq_personal_vault__");
484
- });
485
- });
@@ -1,22 +0,0 @@
1
- import { describe, expect, it } from "vitest";
2
-
3
- import { scopeExcludedWarning } from "./cloud.js";
4
-
5
- describe("scopeExcludedWarning", () => {
6
- it("returns null for zero and negative counts", () => {
7
- expect(scopeExcludedWarning(0)).toBeNull();
8
- expect(scopeExcludedWarning(-1)).toBeNull();
9
- });
10
-
11
- it("returns a loud warning for positive counts", () => {
12
- const warning = scopeExcludedWarning(3);
13
-
14
- expect(warning).toBeTruthy();
15
- expect(warning).toContain("3");
16
- // The warning must loudly state the files did NOT reach the vault and
17
- // explain why (outside the caller's write access) — without leaning on
18
- // the jargon word "scope" in user-facing copy.
19
- expect(warning).toContain("NOT uploaded");
20
- expect(warning?.toLowerCase()).toContain("write access");
21
- });
22
- });