@indigoai-us/hq-cli 5.77.14 → 5.79.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (309) hide show
  1. package/CHANGELOG.md +31 -0
  2. package/assets/scaffold/core/scripts/archive-old-threads.sh +86 -0
  3. package/assets/scaffold/core/scripts/backfill-company-skill-mirrors.sh +73 -0
  4. package/assets/scaffold/core/scripts/backfill-workspace-mirror.sh +51 -0
  5. package/assets/scaffold/core/scripts/codex-skill-bridge.sh +550 -0
  6. package/assets/scaffold/core/scripts/detect-stale-core-policy-mirror.sh +185 -0
  7. package/assets/scaffold/core/scripts/hq-status-summary.sh +187 -0
  8. package/assets/scaffold/core/scripts/ontology-readme-drift.sh +264 -0
  9. package/assets/scaffold/core/scripts/qmd-reindex-after-sync.sh +93 -0
  10. package/assets/scaffold/core/scripts/rebuild-all-indexes.sh +69 -0
  11. package/assets/scaffold/core/scripts/rebuild-companies-index.sh +206 -0
  12. package/assets/scaffold/core/scripts/rebuild-company-knowledge-index.sh +127 -0
  13. package/assets/scaffold/core/scripts/rebuild-orchestrator-index.sh +86 -0
  14. package/assets/scaffold/core/scripts/rebuild-projects-index.sh +105 -0
  15. package/assets/scaffold/core/scripts/rebuild-public-knowledge-index.sh +83 -0
  16. package/assets/scaffold/core/scripts/rebuild-reports-index.sh +114 -0
  17. package/assets/scaffold/core/scripts/rebuild-social-drafts-index.sh +135 -0
  18. package/assets/scaffold/core/scripts/rebuild-threads-index.sh +82 -0
  19. package/assets/scaffold/core/scripts/rebuild-workers-index.sh +97 -0
  20. package/assets/scaffold/core/scripts/resize-screenshot.sh +47 -0
  21. package/assets/scaffold/core/scripts/token-usage-report.sh +254 -0
  22. package/assets/scaffold/core/scripts/worktree.sh +136 -0
  23. package/dist/commands/agents.js +28 -12
  24. package/dist/commands/api-keys.js +100 -20
  25. package/dist/commands/core.d.ts +90 -0
  26. package/dist/commands/core.js +279 -0
  27. package/dist/commands/files-browse.d.ts +21 -0
  28. package/dist/commands/files-browse.js +145 -24
  29. package/dist/commands/files.js +33 -7
  30. package/dist/commands/meetings.js +16 -9
  31. package/dist/commands/members.js +16 -5
  32. package/dist/commands/pack-install.d.ts +14 -0
  33. package/dist/commands/pack-install.js +42 -2
  34. package/dist/commands/pkg-install.js +39 -2
  35. package/dist/commands/run.js +6 -2
  36. package/dist/commands/secrets.js +120 -65
  37. package/dist/main.js +6 -0
  38. package/dist/utils/api-key-command-gate.d.ts +45 -0
  39. package/dist/utils/api-key-command-gate.js +51 -0
  40. package/dist/utils/hq-roots.d.ts +91 -0
  41. package/dist/utils/hq-roots.js +212 -0
  42. package/dist/utils/resolve-vault-credential.d.ts +63 -3
  43. package/dist/utils/resolve-vault-credential.js +152 -6
  44. package/dist/utils/run-bundled-script.d.ts +66 -0
  45. package/dist/utils/run-bundled-script.js +80 -0
  46. package/dist/utils/vault-api.d.ts +21 -0
  47. package/dist/utils/vault-api.js +74 -3
  48. package/package.json +7 -1
  49. package/.claude/policies/hq-cli-interactive-reads-use-sts-vend.md +0 -49
  50. package/.github/workflows/ci.yml +0 -46
  51. package/.github/workflows/publish.yml +0 -36
  52. package/.github/workflows/scripts/smoke-test-pkg.sh +0 -97
  53. package/e2e/cli.test.ts +0 -128
  54. package/eslint.config.js +0 -37
  55. package/pnpm-workspace.yaml +0 -4
  56. package/scripts/chmod-bins.mjs +0 -49
  57. package/scripts/generate-dsn.mjs +0 -26
  58. package/scripts/generate-scan-packages-table.mjs +0 -113
  59. package/scripts/smoke-sources-signals.sh +0 -103
  60. package/src/bin/hq-auth-refresh.ts +0 -43
  61. package/src/cli-version.ts +0 -13
  62. package/src/commands/__fixtures__/make-tar.ts +0 -126
  63. package/src/commands/_patterns.ts +0 -10
  64. package/src/commands/add.ts +0 -75
  65. package/src/commands/agents.test.ts +0 -527
  66. package/src/commands/agents.ts +0 -923
  67. package/src/commands/api-keys.test.ts +0 -291
  68. package/src/commands/api-keys.ts +0 -382
  69. package/src/commands/artifact-verify.test.ts +0 -177
  70. package/src/commands/auth.test.ts +0 -82
  71. package/src/commands/auth.ts +0 -213
  72. package/src/commands/billing.test.ts +0 -158
  73. package/src/commands/billing.ts +0 -146
  74. package/src/commands/channels.test.ts +0 -74
  75. package/src/commands/channels.ts +0 -91
  76. package/src/commands/cloud-demote.test.ts +0 -401
  77. package/src/commands/cloud-demote.ts +0 -278
  78. package/src/commands/cloud-provision.test.ts +0 -1117
  79. package/src/commands/cloud-provision.ts +0 -942
  80. package/src/commands/cloud.pull-all.test.ts +0 -711
  81. package/src/commands/cloud.pull-per-company.test.ts +0 -188
  82. package/src/commands/cloud.push-all.test.ts +0 -485
  83. package/src/commands/cloud.scope-excluded-warning.test.ts +0 -22
  84. package/src/commands/cloud.selectors.test.ts +0 -208
  85. package/src/commands/cloud.status.test.ts +0 -160
  86. package/src/commands/cloud.test.ts +0 -41
  87. package/src/commands/cloud.ts +0 -2130
  88. package/src/commands/company.test.ts +0 -202
  89. package/src/commands/company.ts +0 -148
  90. package/src/commands/creators.test.ts +0 -60
  91. package/src/commands/creators.ts +0 -117
  92. package/src/commands/crm.test.ts +0 -179
  93. package/src/commands/crm.ts +0 -236
  94. package/src/commands/db-migrate.ts +0 -55
  95. package/src/commands/db-provision.ts +0 -114
  96. package/src/commands/db-sql.ts +0 -124
  97. package/src/commands/db-status.ts +0 -108
  98. package/src/commands/db.ts +0 -26
  99. package/src/commands/dm.test.ts +0 -748
  100. package/src/commands/dm.ts +0 -1226
  101. package/src/commands/feedback.test.ts +0 -413
  102. package/src/commands/feedback.ts +0 -169
  103. package/src/commands/files-browse.test.ts +0 -1249
  104. package/src/commands/files-browse.ts +0 -1506
  105. package/src/commands/files-delete.test.ts +0 -484
  106. package/src/commands/files-recovery.test.ts +0 -370
  107. package/src/commands/files.test.ts +0 -722
  108. package/src/commands/files.ts +0 -1446
  109. package/src/commands/group-grants.test.ts +0 -330
  110. package/src/commands/group-grants.ts +0 -455
  111. package/src/commands/groups.test.ts +0 -44
  112. package/src/commands/groups.ts +0 -368
  113. package/src/commands/integrations.test.ts +0 -633
  114. package/src/commands/integrations.ts +0 -507
  115. package/src/commands/list.ts +0 -85
  116. package/src/commands/login.ts +0 -52
  117. package/src/commands/logout.ts +0 -30
  118. package/src/commands/marketplace-install.test.ts +0 -543
  119. package/src/commands/marketplace-security.test.ts +0 -646
  120. package/src/commands/mcp-registration.test.ts +0 -2787
  121. package/src/commands/mcp-registration.ts +0 -2612
  122. package/src/commands/mcp-status.test.ts +0 -483
  123. package/src/commands/mcp-status.ts +0 -575
  124. package/src/commands/mcp-status.us011.test.ts +0 -243
  125. package/src/commands/meetings.test.ts +0 -522
  126. package/src/commands/meetings.ts +0 -789
  127. package/src/commands/members.test.ts +0 -1474
  128. package/src/commands/members.ts +0 -1181
  129. package/src/commands/onboard-identity-guard.test.ts +0 -99
  130. package/src/commands/onboard-identity-guard.ts +0 -103
  131. package/src/commands/onboard-join.test.ts +0 -96
  132. package/src/commands/onboard-join.ts +0 -101
  133. package/src/commands/onboard-warning.test.ts +0 -26
  134. package/src/commands/onboard-warning.ts +0 -12
  135. package/src/commands/onboard.ts +0 -267
  136. package/src/commands/outposts-heartbeat.test.ts +0 -299
  137. package/src/commands/outposts-heartbeat.ts +0 -310
  138. package/src/commands/outposts-replica-sync.test.ts +0 -272
  139. package/src/commands/outposts-self-deploy.test.ts +0 -243
  140. package/src/commands/outposts.test.ts +0 -1039
  141. package/src/commands/outposts.ts +0 -1935
  142. package/src/commands/pack-install-secret-authorization.test.ts +0 -115
  143. package/src/commands/pack-install.test.ts +0 -1469
  144. package/src/commands/pack-install.ts +0 -2256
  145. package/src/commands/pack-update-cache.test.ts +0 -149
  146. package/src/commands/packs-update-api-key.test.ts +0 -105
  147. package/src/commands/packs.test.ts +0 -88
  148. package/src/commands/packs.ts +0 -622
  149. package/src/commands/people.test.ts +0 -807
  150. package/src/commands/people.ts +0 -422
  151. package/src/commands/pkg-install.dispatch.test.ts +0 -103
  152. package/src/commands/pkg-install.ts +0 -221
  153. package/src/commands/pkg-list.test.ts +0 -79
  154. package/src/commands/pkg-list.ts +0 -13
  155. package/src/commands/pkg-remove.ts +0 -71
  156. package/src/commands/pkg-update.ts +0 -189
  157. package/src/commands/publish.test.ts +0 -650
  158. package/src/commands/publish.ts +0 -580
  159. package/src/commands/reindex.test.ts +0 -259
  160. package/src/commands/reindex.ts +0 -274
  161. package/src/commands/rescue.test.ts +0 -39
  162. package/src/commands/rescue.ts +0 -210
  163. package/src/commands/run.env-local.test.ts +0 -88
  164. package/src/commands/run.test.ts +0 -45
  165. package/src/commands/run.ts +0 -190
  166. package/src/commands/safe-extract.test.ts +0 -459
  167. package/src/commands/safe-extract.ts +0 -444
  168. package/src/commands/secrets-scope.test.ts +0 -56
  169. package/src/commands/secrets-scope.ts +0 -32
  170. package/src/commands/secrets.parse-destination.test.ts +0 -38
  171. package/src/commands/secrets.test.ts +0 -2050
  172. package/src/commands/secrets.ts +0 -2249
  173. package/src/commands/signals.ts +0 -351
  174. package/src/commands/skill.test.ts +0 -770
  175. package/src/commands/skill.ts +0 -796
  176. package/src/commands/sources.ts +0 -362
  177. package/src/commands/sync-mode.test.ts +0 -366
  178. package/src/commands/sync-mode.ts +0 -387
  179. package/src/commands/sync-narrow.test.ts +0 -633
  180. package/src/commands/sync-narrow.ts +0 -555
  181. package/src/commands/sync.ts +0 -165
  182. package/src/commands/team-sync.ts +0 -628
  183. package/src/commands/update.ts +0 -71
  184. package/src/commands/whoami.ts +0 -83
  185. package/src/commands/workers.test.ts +0 -158
  186. package/src/commands/workers.ts +0 -301
  187. package/src/index.test.ts +0 -32
  188. package/src/index.ts +0 -20
  189. package/src/lib/db/control-plane.test.ts +0 -59
  190. package/src/lib/db/control-plane.ts +0 -113
  191. package/src/lib/db/local.test.ts +0 -81
  192. package/src/lib/db/local.ts +0 -148
  193. package/src/lib/db/migrate.test.ts +0 -133
  194. package/src/lib/db/migrate.ts +0 -137
  195. package/src/lib/db/paths.test.ts +0 -112
  196. package/src/lib/db/paths.ts +0 -128
  197. package/src/lib/db/remote-engine.test.ts +0 -44
  198. package/src/lib/db/remote-engine.ts +0 -148
  199. package/src/lib/db/remote-sql.test.ts +0 -32
  200. package/src/lib/db/remote-sql.ts +0 -62
  201. package/src/lib/db/sql.test.ts +0 -106
  202. package/src/lib/db/sql.ts +0 -192
  203. package/src/lib/hq-cloud-dep.smoke.test.ts +0 -75
  204. package/src/lib/local-tree-diff.test.ts +0 -301
  205. package/src/lib/local-tree-diff.ts +0 -362
  206. package/src/lib/narrow-hint-banner.test.ts +0 -235
  207. package/src/lib/narrow-hint-banner.ts +0 -212
  208. package/src/lib/plan-limit-nag.test.ts +0 -317
  209. package/src/lib/plan-limit-nag.ts +0 -264
  210. package/src/main.ts +0 -371
  211. package/src/node-preflight.test.ts +0 -60
  212. package/src/node-preflight.ts +0 -67
  213. package/src/outpost/session-heartbeat-bounds.test.ts +0 -195
  214. package/src/outpost/session-heartbeat-guard.test.ts +0 -105
  215. package/src/outpost/session-heartbeat-publisher.test.ts +0 -178
  216. package/src/outpost/session-heartbeat-publisher.ts +0 -186
  217. package/src/outpost/session-heartbeat-retain-guard.test.ts +0 -126
  218. package/src/outpost/session-heartbeat.test.ts +0 -459
  219. package/src/outpost/session-heartbeat.ts +0 -877
  220. package/src/packaging.test.ts +0 -109
  221. package/src/run/__fixtures__/discover-schemas/example.env.schema +0 -4
  222. package/src/run/discover-schemas.test.ts +0 -153
  223. package/src/run/discover-schemas.ts +0 -79
  224. package/src/run/hq-plugin.test.ts +0 -371
  225. package/src/run/hq-plugin.ts +0 -277
  226. package/src/run/varlock-shape.test.ts +0 -57
  227. package/src/schemas/hq-package.schema.json +0 -155
  228. package/src/sentry-before-send.test.ts +0 -359
  229. package/src/sentry-before-send.ts +0 -221
  230. package/src/sentry-epipe.test.ts +0 -37
  231. package/src/sentry-release.test.ts +0 -54
  232. package/src/sentry.test.ts +0 -24
  233. package/src/sentry.ts +0 -54
  234. package/src/strategies/link.ts +0 -62
  235. package/src/strategies/merge.ts +0 -142
  236. package/src/types.ts +0 -146
  237. package/src/utils/__fixtures__/scan-packages.generated-block.sh +0 -23
  238. package/src/utils/auth-error.test.ts +0 -40
  239. package/src/utils/auth-error.ts +0 -42
  240. package/src/utils/billing-gate.test.ts +0 -95
  241. package/src/utils/billing-gate.ts +0 -228
  242. package/src/utils/breadcrumb-buffer.ts +0 -18
  243. package/src/utils/cli-telemetry.test.ts +0 -153
  244. package/src/utils/cli-telemetry.ts +0 -61
  245. package/src/utils/cognito-session.machine.test.ts +0 -109
  246. package/src/utils/cognito-session.refresh.test.ts +0 -84
  247. package/src/utils/cognito-session.test.ts +0 -328
  248. package/src/utils/cognito-session.ts +0 -448
  249. package/src/utils/company-selection-error.test.ts +0 -42
  250. package/src/utils/company-selection-error.ts +0 -45
  251. package/src/utils/contribution-table.ts +0 -83
  252. package/src/utils/environmental-error.test.ts +0 -45
  253. package/src/utils/environmental-error.ts +0 -39
  254. package/src/utils/epipe.test.ts +0 -28
  255. package/src/utils/epipe.ts +0 -29
  256. package/src/utils/expected-cli-error.test.ts +0 -28
  257. package/src/utils/expected-cli-error.ts +0 -39
  258. package/src/utils/feedback-diagnostics.test.ts +0 -183
  259. package/src/utils/feedback-diagnostics.ts +0 -123
  260. package/src/utils/feedback-screenshots.test.ts +0 -134
  261. package/src/utils/feedback-screenshots.ts +0 -124
  262. package/src/utils/feedback-versions.test.ts +0 -98
  263. package/src/utils/feedback-versions.ts +0 -68
  264. package/src/utils/git.ts +0 -74
  265. package/src/utils/integrity.ts +0 -59
  266. package/src/utils/intercepted-process-exit.test.ts +0 -37
  267. package/src/utils/intercepted-process-exit.ts +0 -36
  268. package/src/utils/login-provider.test.ts +0 -42
  269. package/src/utils/login-provider.ts +0 -30
  270. package/src/utils/manifest.test.ts +0 -167
  271. package/src/utils/manifest.ts +0 -131
  272. package/src/utils/pack-contributions.test.ts +0 -603
  273. package/src/utils/pack-contributions.ts +0 -450
  274. package/src/utils/people.ts +0 -215
  275. package/src/utils/registry-client.ts +0 -204
  276. package/src/utils/registry.ts +0 -90
  277. package/src/utils/resolve-vault-credential.test.ts +0 -69
  278. package/src/utils/resolve-vault-credential.ts +0 -60
  279. package/src/utils/sandbox-runner-client.test.ts +0 -279
  280. package/src/utils/sandbox-runner-client.ts +0 -260
  281. package/src/utils/secrets-cache.ts +0 -183
  282. package/src/utils/sentry-identity.ts +0 -45
  283. package/src/utils/settle-with-timeout.test.ts +0 -21
  284. package/src/utils/settle-with-timeout.ts +0 -22
  285. package/src/utils/user-yaml-error.test.ts +0 -24
  286. package/src/utils/user-yaml-error.ts +0 -30
  287. package/src/utils/vault-api.test.ts +0 -536
  288. package/src/utils/vault-api.ts +0 -382
  289. package/src/utils/version-check.test.ts +0 -176
  290. package/src/utils/version-check.ts +0 -155
  291. package/src/utils/version-gate.test.ts +0 -1024
  292. package/src/utils/version-gate.ts +0 -702
  293. package/test/commands/db-tenant-isolation.test.ts +0 -94
  294. package/test/commands/db.test.ts +0 -85
  295. package/test/commands/signals.test.ts +0 -207
  296. package/test/commands/sources.test.ts +0 -231
  297. package/test/e2e/smoke-install-mcp.sh +0 -113
  298. package/test/fixtures/hq-pack-smoke-mcp/mcp/smoke-http.json +0 -1
  299. package/test/fixtures/hq-pack-smoke-mcp/package.yaml +0 -11
  300. package/test/fixtures/signals/action_item/sample.md +0 -16
  301. package/test/fixtures/signals/summary/sample.md +0 -12
  302. package/test/fixtures/sources/meetings/sample.md +0 -25
  303. package/test/helpers/cli-runner.ts +0 -150
  304. package/test/helpers/s3-list-mock.ts +0 -79
  305. package/test/helpers/vault-service-mock.ts +0 -295
  306. package/test/sources-signals/smoke.test.ts +0 -228
  307. package/tsconfig.json +0 -20
  308. package/vitest.config.ts +0 -11
  309. package/vitest.e2e.config.ts +0 -7
@@ -1,259 +0,0 @@
1
- import {
2
- afterEach,
3
- beforeEach,
4
- describe,
5
- expect,
6
- it,
7
- vi,
8
- type MockInstance,
9
- } from "vitest";
10
- import * as fs from "node:fs";
11
- import * as os from "node:os";
12
- import * as path from "node:path";
13
-
14
- // Mock the hq-cloud commands so the command only touches its temporary HQ roots.
15
- vi.mock("@indigoai-us/hq-cloud", () => ({
16
- reindex: vi.fn(() => ({ status: 0 })),
17
- rescue: vi.fn(() => ({ status: 0 })),
18
- }));
19
-
20
- import { Command } from "commander";
21
- import { reindex, rescue } from "@indigoai-us/hq-cloud";
22
- import { registerReindexCommand } from "./reindex.js";
23
-
24
- const reindexMock = reindex as unknown as MockInstance<typeof reindex>;
25
- const rescueMock = rescue as unknown as MockInstance<typeof rescue>;
26
-
27
- const HEALTHY_SETTINGS = {
28
- hooks: Object.fromEntries(
29
- ["SessionStart", "UserPromptSubmit", "PreToolUse"].map((event) => [
30
- event,
31
- [{ matcher: "", hooks: [{ type: "command", command: `echo ${event}` }] }],
32
- ])
33
- ),
34
- };
35
-
36
- let tempRoots: string[] = [];
37
- let defaultRoot: string;
38
-
39
- function writeSettings(root: string, settings: unknown): void {
40
- fs.mkdirSync(path.join(root, ".claude"), { recursive: true });
41
- fs.writeFileSync(path.join(root, ".claude", "settings.json"), JSON.stringify(settings, null, 2));
42
- }
43
-
44
- function makeHqRoot(settings: unknown = HEALTHY_SETTINGS): string {
45
- const root = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), "hq-reindex-")));
46
- tempRoots.push(root);
47
- fs.mkdirSync(path.join(root, ".claude"), { recursive: true });
48
- fs.mkdirSync(path.join(root, "companies"), { recursive: true });
49
- fs.mkdirSync(path.join(root, "personal"), { recursive: true });
50
- fs.mkdirSync(path.join(root, "core"), { recursive: true });
51
- fs.writeFileSync(path.join(root, "core", "core.yaml"), 'version: 1\nhqVersion: "15.0.56"\n');
52
- if (settings !== undefined) writeSettings(root, settings);
53
- return root;
54
- }
55
-
56
- function restoreShippedHookConfig(options: { hqRoot?: string }): { status: number } {
57
- const root = options.hqRoot;
58
- if (!root) throw new Error("rescue requires hqRoot");
59
- const settings = path.join(root, ".claude", "settings.json");
60
- if (fs.existsSync(settings)) {
61
- fs.copyFileSync(settings, path.join(root, "personal", "settings.json"));
62
- }
63
- writeSettings(root, HEALTHY_SETTINGS);
64
- return { status: 0 };
65
- }
66
-
67
- function buildProgram(): Command {
68
- const program = new Command();
69
- program.exitOverride();
70
- program.configureOutput({
71
- writeOut: () => undefined,
72
- writeErr: () => undefined,
73
- });
74
- registerReindexCommand(program);
75
- return program;
76
- }
77
-
78
- async function run(...args: string[]): Promise<void> {
79
- const commandArgs = args.includes("--repo-root") ? args : ["--repo-root", defaultRoot, ...args];
80
- // process.exit is spied to throw; swallow that so parseAsync resolves.
81
- try {
82
- await buildProgram().parseAsync(["node", "hq", "reindex", ...commandArgs]);
83
- } catch (err) {
84
- if (!(err instanceof Error) || !err.message.startsWith("__EXIT__:")) throw err;
85
- }
86
- }
87
-
88
- let exitSpy: MockInstance<typeof process.exit>;
89
- let savedLockTimeout: string | undefined;
90
- let logSpy: MockInstance<typeof console.log>;
91
- let warnSpy: MockInstance<typeof console.warn>;
92
-
93
- beforeEach(() => {
94
- vi.clearAllMocks();
95
- savedLockTimeout = process.env.HQ_OP_LOCK_TIMEOUT;
96
- delete process.env.HQ_OP_LOCK_TIMEOUT;
97
- tempRoots = [];
98
- defaultRoot = makeHqRoot();
99
- rescueMock.mockImplementation(restoreShippedHookConfig as never);
100
- exitSpy = vi.spyOn(process, "exit").mockImplementation(((code?: number) => {
101
- throw new Error(`__EXIT__:${code ?? 0}`);
102
- }) as never);
103
- logSpy = vi.spyOn(console, "log").mockImplementation(() => undefined);
104
- warnSpy = vi.spyOn(console, "warn").mockImplementation(() => undefined);
105
- });
106
-
107
- afterEach(() => {
108
- vi.restoreAllMocks();
109
- for (const root of tempRoots) fs.rmSync(root, { recursive: true, force: true });
110
- if (savedLockTimeout === undefined) delete process.env.HQ_OP_LOCK_TIMEOUT;
111
- else process.env.HQ_OP_LOCK_TIMEOUT = savedLockTimeout;
112
- });
113
-
114
- describe("hq reindex lock-wait policy", () => {
115
- it("--from-hook forces a no-wait lock acquisition (HQ_OP_LOCK_TIMEOUT=0)", async () => {
116
- await run("--from-hook");
117
- expect(process.env.HQ_OP_LOCK_TIMEOUT).toBe("0");
118
- expect(reindexMock).toHaveBeenCalledTimes(1);
119
- expect(exitSpy).toHaveBeenCalledWith(0);
120
- });
121
-
122
- it("--lock-timeout <sec> sets an explicit bounded wait", async () => {
123
- await run("--lock-timeout", "5");
124
- expect(process.env.HQ_OP_LOCK_TIMEOUT).toBe("5");
125
- });
126
-
127
- it("an explicit --lock-timeout wins over --from-hook", async () => {
128
- await run("--from-hook", "--lock-timeout", "10");
129
- expect(process.env.HQ_OP_LOCK_TIMEOUT).toBe("10");
130
- });
131
-
132
- it("a plain interactive reindex leaves the wait unbounded (env unset)", async () => {
133
- await run();
134
- expect(process.env.HQ_OP_LOCK_TIMEOUT).toBeUndefined();
135
- expect(reindexMock).toHaveBeenCalledTimes(1);
136
- });
137
-
138
- it("never clobbers an HQ_OP_LOCK_TIMEOUT the caller already set", async () => {
139
- process.env.HQ_OP_LOCK_TIMEOUT = "42";
140
- await run("--from-hook");
141
- expect(process.env.HQ_OP_LOCK_TIMEOUT).toBe("42");
142
- });
143
-
144
- it("ignores an invalid --lock-timeout (negative / non-numeric)", async () => {
145
- await run("--lock-timeout", "nope");
146
- expect(process.env.HQ_OP_LOCK_TIMEOUT).toBeUndefined();
147
- });
148
- });
149
-
150
- describe("hq reindex hook health", () => {
151
- it("does not warn when all lifecycle hooks are declared", async () => {
152
- await run();
153
-
154
- expect(rescueMock).not.toHaveBeenCalled();
155
- expect(warnSpy).not.toHaveBeenCalled();
156
- });
157
-
158
- it("leaves a healthy root alone across repeated reindexes", async () => {
159
- const root = makeHqRoot();
160
-
161
- await run("--repo-root", root);
162
- await run("--repo-root", root);
163
-
164
- expect(rescueMock).not.toHaveBeenCalled();
165
- expect(warnSpy).not.toHaveBeenCalled();
166
- expect(logSpy).not.toHaveBeenCalledWith("reindex: repaired HQ hook config");
167
- expect(reindexMock).toHaveBeenCalledTimes(2);
168
- });
169
-
170
- it("warns and repairs missing settings.json non-interactively", async () => {
171
- const root = makeHqRoot();
172
- fs.rmSync(path.join(root, ".claude", "settings.json"));
173
-
174
- await run("--repo-root", root);
175
-
176
- expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining(".claude/settings.json is missing"));
177
- expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining("hq rescue -y --paths .claude"));
178
- expect(rescueMock).toHaveBeenCalledWith(
179
- expect.objectContaining({
180
- hqRoot: root,
181
- source: "indigoai-us/hq-core",
182
- ref: "v15.0.56",
183
- paths: [".claude"],
184
- assumeYes: true,
185
- })
186
- );
187
- expect(JSON.parse(fs.readFileSync(path.join(root, ".claude", "settings.json"), "utf8"))).toEqual(
188
- HEALTHY_SETTINGS
189
- );
190
- expect(logSpy).toHaveBeenCalledWith("reindex: repaired HQ hook config");
191
- expect(exitSpy).toHaveBeenCalledWith(0);
192
- });
193
-
194
- it("warns and repairs settings.json when it declares none of the lifecycle hooks", async () => {
195
- const root = makeHqRoot({ hooks: { Stop: [{ hooks: [{ type: "command", command: "echo stop" }] }] } });
196
-
197
- await run("--repo-root", root);
198
-
199
- expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining("no SessionStart, UserPromptSubmit, or PreToolUse command hook"));
200
- expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining("hq rescue -y --paths .claude"));
201
- expect(rescueMock).toHaveBeenCalledTimes(1);
202
- });
203
-
204
- it("preserves settings.local.json and personal drift while restoring hook wiring", async () => {
205
- const root = makeHqRoot({ customSetting: true, hooks: {} });
206
- const localSettings = '{"localOnly":true}\n';
207
- const personalEdit = "keep this user policy\n";
208
- fs.writeFileSync(path.join(root, ".claude", "settings.local.json"), localSettings);
209
- fs.writeFileSync(path.join(root, "personal", "policy.md"), personalEdit);
210
-
211
- await run("--repo-root", root);
212
-
213
- expect(fs.readFileSync(path.join(root, ".claude", "settings.local.json"), "utf8")).toBe(localSettings);
214
- expect(fs.readFileSync(path.join(root, "personal", "policy.md"), "utf8")).toBe(personalEdit);
215
- expect(JSON.parse(fs.readFileSync(path.join(root, "personal", "settings.json"), "utf8"))).toEqual({
216
- customSetting: true,
217
- hooks: {},
218
- });
219
- expect(logSpy).toHaveBeenCalledWith("reindex: repaired HQ hook config");
220
- });
221
-
222
- it("warns without changing partial hook wiring", async () => {
223
- const root = makeHqRoot({
224
- hooks: {
225
- SessionStart: [{ hooks: [{ type: "command", command: "echo start" }] }],
226
- },
227
- });
228
-
229
- await run("--repo-root", root);
230
-
231
- expect(rescueMock).not.toHaveBeenCalled();
232
- expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining("missing command hook wiring"));
233
- expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining("settingSources"));
234
- });
235
-
236
- it("uses the shipped hook checker when the resolved HQ root contains it", async () => {
237
- const root = makeHqRoot();
238
- const checker = path.join(root, "core", "scripts", "check-hq-hooks.sh");
239
- fs.mkdirSync(path.dirname(checker), { recursive: true });
240
- fs.writeFileSync(checker, 'printf checked > "$2/.claude/checker-ran"\n');
241
-
242
- await run("--repo-root", root);
243
-
244
- expect(fs.readFileSync(path.join(root, ".claude", "checker-ran"), "utf8")).toBe("checked");
245
- expect(warnSpy).not.toHaveBeenCalled();
246
- });
247
-
248
- it("surfaces diagnostics when the shipped hook checker fails", async () => {
249
- const root = makeHqRoot();
250
- const checker = path.join(root, "core", "scripts", "check-hq-hooks.sh");
251
- fs.mkdirSync(path.dirname(checker), { recursive: true });
252
- fs.writeFileSync(checker, 'echo "scaffold detected drift" >&2\nexit 2\n');
253
-
254
- await run("--repo-root", root);
255
-
256
- expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining("scaffold detected drift"));
257
- expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining("hq rescue -y --paths .claude"));
258
- });
259
- });
@@ -1,274 +0,0 @@
1
- /**
2
- * hq reindex — surface namespaced skills, mirror the personal overlay into
3
- * core/, and regenerate the workers registry.
4
- *
5
- * Thin wrapper over @indigoai-us/hq-cloud's reindex(), which execs the bundled
6
- * scripts/reindex.sh against the HQ root. This command is what the hq-core
7
- * reindex hook shim calls on Stop / PostToolUse, and what sync()/rescue() call
8
- * after they change on-disk sources.
9
- *
10
- * Keeps a hidden `master-sync` alias for one release so an updated CLI still
11
- * answers a not-yet-updated hook shim (and vice-versa) during rollout.
12
- *
13
- * Lock-wait policy: reindex shares one per-root operation lock with `sync` and
14
- * `rescue`. By default acquisition waits UNBOUNDED for a live holder, which is
15
- * what a human running `hq reindex` interactively wants. But when invoked from a
16
- * Claude/Codex lifecycle hook (SessionStart / UserPromptSubmit / Stop /
17
- * PostToolUse), waiting is exactly wrong: if a sync/rescue is mid-flight, the
18
- * hook blocks the agent up to the host's per-hook timeout (the multi-minute
19
- * "Claude won't load in the HQ folder" spinner). `--from-hook` makes the hook
20
- * path refuse-fast (never wait); `--lock-timeout <sec>` bounds it explicitly.
21
- * The bound is applied via the HQ_OP_LOCK_TIMEOUT env var that the hq-cloud
22
- * operation lock honors, so it works even against an installed hq-cloud build
23
- * that predates a typed lock-timeout option.
24
- */
25
- import { spawnSync } from 'node:child_process';
26
- import * as fs from 'node:fs';
27
- import * as path from 'node:path';
28
- import { Command } from 'commander';
29
- import * as yaml from 'js-yaml';
30
- import { reindex, rescue } from '@indigoai-us/hq-cloud';
31
- import { findHqRoot } from '../utils/manifest.js';
32
-
33
- const HOOK_EVENTS = ['SessionStart', 'UserPromptSubmit', 'PreToolUse'] as const;
34
- const HOOK_CHECK_RELATIVE_PATH = path.join('core', 'scripts', 'check-hq-hooks.sh');
35
-
36
- type HookHealth =
37
- | { state: 'healthy' }
38
- | { state: 'extreme'; reason: string }
39
- | { state: 'minor'; reason: string };
40
-
41
- type HookCheckResult = { status: number; output: string };
42
-
43
- /** Resolve the same root the repair/check commands must operate on. */
44
- function resolveHqRoot(repoRoot?: string): string {
45
- const root = repoRoot ?? findHqRoot();
46
- try {
47
- return fs.realpathSync(root);
48
- } catch {
49
- return path.resolve(root);
50
- }
51
- }
52
-
53
- function isHqRoot(hqRoot: string): boolean {
54
- return (
55
- fs.existsSync(path.join(hqRoot, 'companies')) &&
56
- (fs.existsSync(path.join(hqRoot, '.claude')) ||
57
- fs.existsSync(path.join(hqRoot, 'core')) ||
58
- fs.existsSync(path.join(hqRoot, 'personal')))
59
- );
60
- }
61
-
62
- function hasCommandHook(value: unknown): boolean {
63
- if (!Array.isArray(value)) return false;
64
- return value.some((entry) => {
65
- if (!entry || typeof entry !== 'object') return false;
66
- const hooks = (entry as { hooks?: unknown }).hooks;
67
- if (!Array.isArray(hooks)) return false;
68
- return hooks.some(
69
- (hook) =>
70
- !!hook &&
71
- typeof hook === 'object' &&
72
- (hook as { type?: unknown }).type === 'command' &&
73
- typeof (hook as { command?: unknown }).command === 'string' &&
74
- (hook as { command: string }).command.trim().length > 0
75
- );
76
- });
77
- }
78
-
79
- /**
80
- * Run the release health checker when it is available. Its diagnostics cover
81
- * runtime/configuration issues outside the safe repair scope; the JSON check
82
- * below additionally recognizes UserPromptSubmit, which older checkers omit.
83
- */
84
- function runShippedHookCheck(hqRoot: string): HookCheckResult | undefined {
85
- const checker = path.join(hqRoot, HOOK_CHECK_RELATIVE_PATH);
86
- if (!fs.existsSync(checker)) return undefined;
87
-
88
- try {
89
- const result = spawnSync('bash', [checker, '--root', hqRoot], {
90
- encoding: 'utf8',
91
- stdio: 'pipe',
92
- });
93
- if (result.error) return undefined;
94
- return {
95
- status: result.status ?? 1,
96
- output: `${result.stderr ?? ''}${result.stdout ?? ''}`.trim(),
97
- };
98
- } catch {
99
- return undefined;
100
- }
101
- }
102
-
103
- function inspectHookHealth(hqRoot: string): HookHealth {
104
- const checkerResult = runShippedHookCheck(hqRoot);
105
- const settingsPath = path.join(hqRoot, '.claude', 'settings.json');
106
- if (!fs.existsSync(settingsPath)) {
107
- return { state: 'extreme', reason: '.claude/settings.json is missing' };
108
- }
109
-
110
- let settings: unknown;
111
- try {
112
- settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
113
- } catch {
114
- return { state: 'minor', reason: '.claude/settings.json is not valid JSON' };
115
- }
116
- if (!settings || typeof settings !== 'object') {
117
- return { state: 'minor', reason: '.claude/settings.json is not an object' };
118
- }
119
-
120
- const hooks = (settings as { hooks?: unknown }).hooks;
121
- if (!hooks || typeof hooks !== 'object') {
122
- return { state: 'extreme', reason: 'no command hooks are declared' };
123
- }
124
-
125
- const commandEvents = HOOK_EVENTS.filter((event) =>
126
- hasCommandHook((hooks as Record<string, unknown>)[event])
127
- );
128
- if (commandEvents.length === 0) {
129
- return { state: 'extreme', reason: 'no SessionStart, UserPromptSubmit, or PreToolUse command hook is declared' };
130
- }
131
- if (commandEvents.length !== HOOK_EVENTS.length) {
132
- return {
133
- state: 'minor',
134
- reason: `missing command hook wiring for ${HOOK_EVENTS.filter((event) => !commandEvents.includes(event)).join(', ')}`,
135
- };
136
- }
137
-
138
- if (checkerResult !== undefined && checkerResult.status !== 0) {
139
- return {
140
- state: 'minor',
141
- reason: checkerResult.output || 'the shipped core/scripts/check-hq-hooks.sh check failed',
142
- };
143
- }
144
- return { state: 'healthy' };
145
- }
146
-
147
- function printHookHealthWarning(hqRoot: string, reason: string): void {
148
- console.warn(`
149
- HQ hook health warning: lifecycle hooks may not fire in ${hqRoot}.
150
- - ${reason}
151
-
152
- Repair the project settings with:
153
- hq rescue -y --paths .claude
154
-
155
- If the repair is unavailable, update HQ and re-run \`hq reindex\`.
156
- For Claude Desktop, open the HQ root itself as the project (not a parent or child folder).
157
- For an SDK launch, set both \`cwd\` to the HQ root and \`settingSources: ["project"]\`.
158
- See core/docs/hq/HOOKS-NOT-FIRING.md for the recovery procedure.`);
159
- }
160
-
161
- function installedCoreRef(hqRoot: string): string | undefined {
162
- for (const relativePath of [path.join('core', 'core.yaml'), 'core.yaml']) {
163
- try {
164
- const core = yaml.load(fs.readFileSync(path.join(hqRoot, relativePath), 'utf8')) as
165
- | { hqVersion?: unknown }
166
- | undefined;
167
- if (typeof core?.hqVersion === 'string' && core.hqVersion.trim()) {
168
- return core.hqVersion.startsWith('v') ? core.hqVersion : `v${core.hqVersion}`;
169
- }
170
- } catch {
171
- // The installed version is optional; rescue will use the production default.
172
- }
173
- }
174
- return undefined;
175
- }
176
-
177
- /** Rescue writes detailed progress directly to stdio. Reindex only needs a one-line notice. */
178
- function runSilently<T>(operation: () => T): T {
179
- const writeStdout = process.stdout.write;
180
- const writeStderr = process.stderr.write;
181
- const discard = (() => true) as typeof process.stdout.write;
182
- process.stdout.write = discard;
183
- process.stderr.write = discard;
184
- try {
185
- return operation();
186
- } finally {
187
- process.stdout.write = writeStdout;
188
- process.stderr.write = writeStderr;
189
- }
190
- }
191
-
192
- /**
193
- * Check hook health without relying on lifecycle hooks. A fully disabled
194
- * configuration is repaired only after a successful reindex; partial and
195
- * malformed configurations remain untouched and receive recovery guidance.
196
- */
197
- export function repairExtremeHookDrift(hqRoot: string, allowRepair = true): void {
198
- // `hq reindex` can still be invoked from an arbitrary directory. Never turn
199
- // an absent settings file there into a rescue attempt.
200
- if (!isHqRoot(hqRoot)) return;
201
-
202
- const health = inspectHookHealth(hqRoot);
203
- if (health.state === 'healthy') return;
204
-
205
- printHookHealthWarning(hqRoot, health.reason);
206
- if (health.state === 'minor' || !allowRepair) return;
207
-
208
- try {
209
- const result = runSilently(() =>
210
- rescue({
211
- hqRoot,
212
- source: 'indigoai-us/hq-core',
213
- ref: installedCoreRef(hqRoot),
214
- paths: ['.claude'],
215
- assumeYes: true,
216
- })
217
- );
218
- const afterRepair = inspectHookHealth(hqRoot);
219
- if (result.status === 0 && afterRepair.state === 'healthy') {
220
- console.log('reindex: repaired HQ hook config');
221
- return;
222
- }
223
- printHookHealthWarning(
224
- hqRoot,
225
- afterRepair.state === 'healthy' ? `rescue exited ${result.status}` : afterRepair.reason
226
- );
227
- } catch {
228
- // A transient clone/transport failure must not turn reindex into a fatal command.
229
- printHookHealthWarning(hqRoot, 'hook configuration repair could not run');
230
- }
231
- }
232
-
233
- export function registerReindexCommand(program: Command): void {
234
- program
235
- .command('reindex')
236
- .alias('master-sync')
237
- .description(
238
- 'Surface namespaced skills, mirror the personal overlay into core/, and regenerate the workers registry'
239
- )
240
- .option('--repo-root <path>', 'HQ root to operate on (defaults to the current directory)')
241
- .option(
242
- '--from-hook',
243
- 'Invoked from a Claude/Codex lifecycle hook: never wait on the per-root operation lock — if a sync/rescue holds it, skip this reindex instead of blocking the session (equivalent to --lock-timeout 0)'
244
- )
245
- .option(
246
- '--lock-timeout <seconds>',
247
- 'Bound the wait for the per-root operation lock (seconds). 0 = refuse immediately; omitted = wait indefinitely (the interactive default). --from-hook implies 0; an explicit --lock-timeout wins.'
248
- )
249
- .action((opts: { repoRoot?: string; fromHook?: boolean; lockTimeout?: string }) => {
250
- // Resolve the lock-wait bound. An explicit --lock-timeout wins; otherwise
251
- // --from-hook forces 0 (refuse-fast) so a hook fired while a sync/rescue
252
- // holds the shared per-root operation lock can never stall the agent.
253
- let lockTimeoutSec: number | undefined;
254
- if (opts.lockTimeout !== undefined) {
255
- const parsed = Number(opts.lockTimeout);
256
- if (Number.isFinite(parsed) && parsed >= 0) lockTimeoutSec = parsed;
257
- } else if (opts.fromHook) {
258
- lockTimeoutSec = 0;
259
- }
260
-
261
- // Apply via HQ_OP_LOCK_TIMEOUT — the env var the hq-cloud operation lock
262
- // reads (acquireOperationLock → resolveWaitConfig). Going through the env
263
- // (rather than a typed reindex() option) keeps this forward/backward
264
- // compatible with any installed hq-cloud build. Never clobber a value the
265
- // caller already set explicitly.
266
- if (lockTimeoutSec !== undefined && process.env.HQ_OP_LOCK_TIMEOUT === undefined) {
267
- process.env.HQ_OP_LOCK_TIMEOUT = String(lockTimeoutSec);
268
- }
269
-
270
- const { status } = reindex({ repoRoot: opts.repoRoot });
271
- repairExtremeHookDrift(resolveHqRoot(opts.repoRoot), status === 0);
272
- process.exit(status);
273
- });
274
- }
@@ -1,39 +0,0 @@
1
- import { describe, it, expect } from 'vitest';
2
- import { resolveRescueTarget } from './rescue.js';
3
-
4
- describe('resolveRescueTarget', () => {
5
- it('defaults to prod hq-core at the resolved latest tag', () => {
6
- expect(resolveRescueTarget({}, 'v12.3.0')).toEqual({
7
- source: 'indigoai-us/hq-core',
8
- ref: 'v12.3.0',
9
- });
10
- });
11
-
12
- it('lets an explicit --ref override the latest tag', () => {
13
- expect(resolveRescueTarget({ ref: 'v11.0.0' }, 'v12.3.0')).toEqual({
14
- source: 'indigoai-us/hq-core',
15
- ref: 'v11.0.0',
16
- });
17
- });
18
-
19
- it('uses the staging source and leaves ref to the script default', () => {
20
- expect(resolveRescueTarget({ staging: true })).toEqual({
21
- source: 'indigoai-us/hq-core-staging',
22
- ref: undefined,
23
- });
24
- });
25
-
26
- it('honors an explicit --source override', () => {
27
- expect(resolveRescueTarget({ source: 'acme/hq-core-fork' }, 'v1.0.0')).toEqual({
28
- source: 'acme/hq-core-fork',
29
- ref: 'v1.0.0',
30
- });
31
- });
32
-
33
- it('honors --ref on the staging channel', () => {
34
- expect(resolveRescueTarget({ staging: true, ref: 'feature-branch' })).toEqual({
35
- source: 'indigoai-us/hq-core-staging',
36
- ref: 'feature-branch',
37
- });
38
- });
39
- });