@indigoai-us/hq-cli 5.77.14 → 5.79.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (309) hide show
  1. package/CHANGELOG.md +31 -0
  2. package/assets/scaffold/core/scripts/archive-old-threads.sh +86 -0
  3. package/assets/scaffold/core/scripts/backfill-company-skill-mirrors.sh +73 -0
  4. package/assets/scaffold/core/scripts/backfill-workspace-mirror.sh +51 -0
  5. package/assets/scaffold/core/scripts/codex-skill-bridge.sh +550 -0
  6. package/assets/scaffold/core/scripts/detect-stale-core-policy-mirror.sh +185 -0
  7. package/assets/scaffold/core/scripts/hq-status-summary.sh +187 -0
  8. package/assets/scaffold/core/scripts/ontology-readme-drift.sh +264 -0
  9. package/assets/scaffold/core/scripts/qmd-reindex-after-sync.sh +93 -0
  10. package/assets/scaffold/core/scripts/rebuild-all-indexes.sh +69 -0
  11. package/assets/scaffold/core/scripts/rebuild-companies-index.sh +206 -0
  12. package/assets/scaffold/core/scripts/rebuild-company-knowledge-index.sh +127 -0
  13. package/assets/scaffold/core/scripts/rebuild-orchestrator-index.sh +86 -0
  14. package/assets/scaffold/core/scripts/rebuild-projects-index.sh +105 -0
  15. package/assets/scaffold/core/scripts/rebuild-public-knowledge-index.sh +83 -0
  16. package/assets/scaffold/core/scripts/rebuild-reports-index.sh +114 -0
  17. package/assets/scaffold/core/scripts/rebuild-social-drafts-index.sh +135 -0
  18. package/assets/scaffold/core/scripts/rebuild-threads-index.sh +82 -0
  19. package/assets/scaffold/core/scripts/rebuild-workers-index.sh +97 -0
  20. package/assets/scaffold/core/scripts/resize-screenshot.sh +47 -0
  21. package/assets/scaffold/core/scripts/token-usage-report.sh +254 -0
  22. package/assets/scaffold/core/scripts/worktree.sh +136 -0
  23. package/dist/commands/agents.js +28 -12
  24. package/dist/commands/api-keys.js +100 -20
  25. package/dist/commands/core.d.ts +90 -0
  26. package/dist/commands/core.js +279 -0
  27. package/dist/commands/files-browse.d.ts +21 -0
  28. package/dist/commands/files-browse.js +145 -24
  29. package/dist/commands/files.js +33 -7
  30. package/dist/commands/meetings.js +16 -9
  31. package/dist/commands/members.js +16 -5
  32. package/dist/commands/pack-install.d.ts +14 -0
  33. package/dist/commands/pack-install.js +42 -2
  34. package/dist/commands/pkg-install.js +39 -2
  35. package/dist/commands/run.js +6 -2
  36. package/dist/commands/secrets.js +120 -65
  37. package/dist/main.js +6 -0
  38. package/dist/utils/api-key-command-gate.d.ts +45 -0
  39. package/dist/utils/api-key-command-gate.js +51 -0
  40. package/dist/utils/hq-roots.d.ts +91 -0
  41. package/dist/utils/hq-roots.js +212 -0
  42. package/dist/utils/resolve-vault-credential.d.ts +63 -3
  43. package/dist/utils/resolve-vault-credential.js +152 -6
  44. package/dist/utils/run-bundled-script.d.ts +66 -0
  45. package/dist/utils/run-bundled-script.js +80 -0
  46. package/dist/utils/vault-api.d.ts +21 -0
  47. package/dist/utils/vault-api.js +74 -3
  48. package/package.json +7 -1
  49. package/.claude/policies/hq-cli-interactive-reads-use-sts-vend.md +0 -49
  50. package/.github/workflows/ci.yml +0 -46
  51. package/.github/workflows/publish.yml +0 -36
  52. package/.github/workflows/scripts/smoke-test-pkg.sh +0 -97
  53. package/e2e/cli.test.ts +0 -128
  54. package/eslint.config.js +0 -37
  55. package/pnpm-workspace.yaml +0 -4
  56. package/scripts/chmod-bins.mjs +0 -49
  57. package/scripts/generate-dsn.mjs +0 -26
  58. package/scripts/generate-scan-packages-table.mjs +0 -113
  59. package/scripts/smoke-sources-signals.sh +0 -103
  60. package/src/bin/hq-auth-refresh.ts +0 -43
  61. package/src/cli-version.ts +0 -13
  62. package/src/commands/__fixtures__/make-tar.ts +0 -126
  63. package/src/commands/_patterns.ts +0 -10
  64. package/src/commands/add.ts +0 -75
  65. package/src/commands/agents.test.ts +0 -527
  66. package/src/commands/agents.ts +0 -923
  67. package/src/commands/api-keys.test.ts +0 -291
  68. package/src/commands/api-keys.ts +0 -382
  69. package/src/commands/artifact-verify.test.ts +0 -177
  70. package/src/commands/auth.test.ts +0 -82
  71. package/src/commands/auth.ts +0 -213
  72. package/src/commands/billing.test.ts +0 -158
  73. package/src/commands/billing.ts +0 -146
  74. package/src/commands/channels.test.ts +0 -74
  75. package/src/commands/channels.ts +0 -91
  76. package/src/commands/cloud-demote.test.ts +0 -401
  77. package/src/commands/cloud-demote.ts +0 -278
  78. package/src/commands/cloud-provision.test.ts +0 -1117
  79. package/src/commands/cloud-provision.ts +0 -942
  80. package/src/commands/cloud.pull-all.test.ts +0 -711
  81. package/src/commands/cloud.pull-per-company.test.ts +0 -188
  82. package/src/commands/cloud.push-all.test.ts +0 -485
  83. package/src/commands/cloud.scope-excluded-warning.test.ts +0 -22
  84. package/src/commands/cloud.selectors.test.ts +0 -208
  85. package/src/commands/cloud.status.test.ts +0 -160
  86. package/src/commands/cloud.test.ts +0 -41
  87. package/src/commands/cloud.ts +0 -2130
  88. package/src/commands/company.test.ts +0 -202
  89. package/src/commands/company.ts +0 -148
  90. package/src/commands/creators.test.ts +0 -60
  91. package/src/commands/creators.ts +0 -117
  92. package/src/commands/crm.test.ts +0 -179
  93. package/src/commands/crm.ts +0 -236
  94. package/src/commands/db-migrate.ts +0 -55
  95. package/src/commands/db-provision.ts +0 -114
  96. package/src/commands/db-sql.ts +0 -124
  97. package/src/commands/db-status.ts +0 -108
  98. package/src/commands/db.ts +0 -26
  99. package/src/commands/dm.test.ts +0 -748
  100. package/src/commands/dm.ts +0 -1226
  101. package/src/commands/feedback.test.ts +0 -413
  102. package/src/commands/feedback.ts +0 -169
  103. package/src/commands/files-browse.test.ts +0 -1249
  104. package/src/commands/files-browse.ts +0 -1506
  105. package/src/commands/files-delete.test.ts +0 -484
  106. package/src/commands/files-recovery.test.ts +0 -370
  107. package/src/commands/files.test.ts +0 -722
  108. package/src/commands/files.ts +0 -1446
  109. package/src/commands/group-grants.test.ts +0 -330
  110. package/src/commands/group-grants.ts +0 -455
  111. package/src/commands/groups.test.ts +0 -44
  112. package/src/commands/groups.ts +0 -368
  113. package/src/commands/integrations.test.ts +0 -633
  114. package/src/commands/integrations.ts +0 -507
  115. package/src/commands/list.ts +0 -85
  116. package/src/commands/login.ts +0 -52
  117. package/src/commands/logout.ts +0 -30
  118. package/src/commands/marketplace-install.test.ts +0 -543
  119. package/src/commands/marketplace-security.test.ts +0 -646
  120. package/src/commands/mcp-registration.test.ts +0 -2787
  121. package/src/commands/mcp-registration.ts +0 -2612
  122. package/src/commands/mcp-status.test.ts +0 -483
  123. package/src/commands/mcp-status.ts +0 -575
  124. package/src/commands/mcp-status.us011.test.ts +0 -243
  125. package/src/commands/meetings.test.ts +0 -522
  126. package/src/commands/meetings.ts +0 -789
  127. package/src/commands/members.test.ts +0 -1474
  128. package/src/commands/members.ts +0 -1181
  129. package/src/commands/onboard-identity-guard.test.ts +0 -99
  130. package/src/commands/onboard-identity-guard.ts +0 -103
  131. package/src/commands/onboard-join.test.ts +0 -96
  132. package/src/commands/onboard-join.ts +0 -101
  133. package/src/commands/onboard-warning.test.ts +0 -26
  134. package/src/commands/onboard-warning.ts +0 -12
  135. package/src/commands/onboard.ts +0 -267
  136. package/src/commands/outposts-heartbeat.test.ts +0 -299
  137. package/src/commands/outposts-heartbeat.ts +0 -310
  138. package/src/commands/outposts-replica-sync.test.ts +0 -272
  139. package/src/commands/outposts-self-deploy.test.ts +0 -243
  140. package/src/commands/outposts.test.ts +0 -1039
  141. package/src/commands/outposts.ts +0 -1935
  142. package/src/commands/pack-install-secret-authorization.test.ts +0 -115
  143. package/src/commands/pack-install.test.ts +0 -1469
  144. package/src/commands/pack-install.ts +0 -2256
  145. package/src/commands/pack-update-cache.test.ts +0 -149
  146. package/src/commands/packs-update-api-key.test.ts +0 -105
  147. package/src/commands/packs.test.ts +0 -88
  148. package/src/commands/packs.ts +0 -622
  149. package/src/commands/people.test.ts +0 -807
  150. package/src/commands/people.ts +0 -422
  151. package/src/commands/pkg-install.dispatch.test.ts +0 -103
  152. package/src/commands/pkg-install.ts +0 -221
  153. package/src/commands/pkg-list.test.ts +0 -79
  154. package/src/commands/pkg-list.ts +0 -13
  155. package/src/commands/pkg-remove.ts +0 -71
  156. package/src/commands/pkg-update.ts +0 -189
  157. package/src/commands/publish.test.ts +0 -650
  158. package/src/commands/publish.ts +0 -580
  159. package/src/commands/reindex.test.ts +0 -259
  160. package/src/commands/reindex.ts +0 -274
  161. package/src/commands/rescue.test.ts +0 -39
  162. package/src/commands/rescue.ts +0 -210
  163. package/src/commands/run.env-local.test.ts +0 -88
  164. package/src/commands/run.test.ts +0 -45
  165. package/src/commands/run.ts +0 -190
  166. package/src/commands/safe-extract.test.ts +0 -459
  167. package/src/commands/safe-extract.ts +0 -444
  168. package/src/commands/secrets-scope.test.ts +0 -56
  169. package/src/commands/secrets-scope.ts +0 -32
  170. package/src/commands/secrets.parse-destination.test.ts +0 -38
  171. package/src/commands/secrets.test.ts +0 -2050
  172. package/src/commands/secrets.ts +0 -2249
  173. package/src/commands/signals.ts +0 -351
  174. package/src/commands/skill.test.ts +0 -770
  175. package/src/commands/skill.ts +0 -796
  176. package/src/commands/sources.ts +0 -362
  177. package/src/commands/sync-mode.test.ts +0 -366
  178. package/src/commands/sync-mode.ts +0 -387
  179. package/src/commands/sync-narrow.test.ts +0 -633
  180. package/src/commands/sync-narrow.ts +0 -555
  181. package/src/commands/sync.ts +0 -165
  182. package/src/commands/team-sync.ts +0 -628
  183. package/src/commands/update.ts +0 -71
  184. package/src/commands/whoami.ts +0 -83
  185. package/src/commands/workers.test.ts +0 -158
  186. package/src/commands/workers.ts +0 -301
  187. package/src/index.test.ts +0 -32
  188. package/src/index.ts +0 -20
  189. package/src/lib/db/control-plane.test.ts +0 -59
  190. package/src/lib/db/control-plane.ts +0 -113
  191. package/src/lib/db/local.test.ts +0 -81
  192. package/src/lib/db/local.ts +0 -148
  193. package/src/lib/db/migrate.test.ts +0 -133
  194. package/src/lib/db/migrate.ts +0 -137
  195. package/src/lib/db/paths.test.ts +0 -112
  196. package/src/lib/db/paths.ts +0 -128
  197. package/src/lib/db/remote-engine.test.ts +0 -44
  198. package/src/lib/db/remote-engine.ts +0 -148
  199. package/src/lib/db/remote-sql.test.ts +0 -32
  200. package/src/lib/db/remote-sql.ts +0 -62
  201. package/src/lib/db/sql.test.ts +0 -106
  202. package/src/lib/db/sql.ts +0 -192
  203. package/src/lib/hq-cloud-dep.smoke.test.ts +0 -75
  204. package/src/lib/local-tree-diff.test.ts +0 -301
  205. package/src/lib/local-tree-diff.ts +0 -362
  206. package/src/lib/narrow-hint-banner.test.ts +0 -235
  207. package/src/lib/narrow-hint-banner.ts +0 -212
  208. package/src/lib/plan-limit-nag.test.ts +0 -317
  209. package/src/lib/plan-limit-nag.ts +0 -264
  210. package/src/main.ts +0 -371
  211. package/src/node-preflight.test.ts +0 -60
  212. package/src/node-preflight.ts +0 -67
  213. package/src/outpost/session-heartbeat-bounds.test.ts +0 -195
  214. package/src/outpost/session-heartbeat-guard.test.ts +0 -105
  215. package/src/outpost/session-heartbeat-publisher.test.ts +0 -178
  216. package/src/outpost/session-heartbeat-publisher.ts +0 -186
  217. package/src/outpost/session-heartbeat-retain-guard.test.ts +0 -126
  218. package/src/outpost/session-heartbeat.test.ts +0 -459
  219. package/src/outpost/session-heartbeat.ts +0 -877
  220. package/src/packaging.test.ts +0 -109
  221. package/src/run/__fixtures__/discover-schemas/example.env.schema +0 -4
  222. package/src/run/discover-schemas.test.ts +0 -153
  223. package/src/run/discover-schemas.ts +0 -79
  224. package/src/run/hq-plugin.test.ts +0 -371
  225. package/src/run/hq-plugin.ts +0 -277
  226. package/src/run/varlock-shape.test.ts +0 -57
  227. package/src/schemas/hq-package.schema.json +0 -155
  228. package/src/sentry-before-send.test.ts +0 -359
  229. package/src/sentry-before-send.ts +0 -221
  230. package/src/sentry-epipe.test.ts +0 -37
  231. package/src/sentry-release.test.ts +0 -54
  232. package/src/sentry.test.ts +0 -24
  233. package/src/sentry.ts +0 -54
  234. package/src/strategies/link.ts +0 -62
  235. package/src/strategies/merge.ts +0 -142
  236. package/src/types.ts +0 -146
  237. package/src/utils/__fixtures__/scan-packages.generated-block.sh +0 -23
  238. package/src/utils/auth-error.test.ts +0 -40
  239. package/src/utils/auth-error.ts +0 -42
  240. package/src/utils/billing-gate.test.ts +0 -95
  241. package/src/utils/billing-gate.ts +0 -228
  242. package/src/utils/breadcrumb-buffer.ts +0 -18
  243. package/src/utils/cli-telemetry.test.ts +0 -153
  244. package/src/utils/cli-telemetry.ts +0 -61
  245. package/src/utils/cognito-session.machine.test.ts +0 -109
  246. package/src/utils/cognito-session.refresh.test.ts +0 -84
  247. package/src/utils/cognito-session.test.ts +0 -328
  248. package/src/utils/cognito-session.ts +0 -448
  249. package/src/utils/company-selection-error.test.ts +0 -42
  250. package/src/utils/company-selection-error.ts +0 -45
  251. package/src/utils/contribution-table.ts +0 -83
  252. package/src/utils/environmental-error.test.ts +0 -45
  253. package/src/utils/environmental-error.ts +0 -39
  254. package/src/utils/epipe.test.ts +0 -28
  255. package/src/utils/epipe.ts +0 -29
  256. package/src/utils/expected-cli-error.test.ts +0 -28
  257. package/src/utils/expected-cli-error.ts +0 -39
  258. package/src/utils/feedback-diagnostics.test.ts +0 -183
  259. package/src/utils/feedback-diagnostics.ts +0 -123
  260. package/src/utils/feedback-screenshots.test.ts +0 -134
  261. package/src/utils/feedback-screenshots.ts +0 -124
  262. package/src/utils/feedback-versions.test.ts +0 -98
  263. package/src/utils/feedback-versions.ts +0 -68
  264. package/src/utils/git.ts +0 -74
  265. package/src/utils/integrity.ts +0 -59
  266. package/src/utils/intercepted-process-exit.test.ts +0 -37
  267. package/src/utils/intercepted-process-exit.ts +0 -36
  268. package/src/utils/login-provider.test.ts +0 -42
  269. package/src/utils/login-provider.ts +0 -30
  270. package/src/utils/manifest.test.ts +0 -167
  271. package/src/utils/manifest.ts +0 -131
  272. package/src/utils/pack-contributions.test.ts +0 -603
  273. package/src/utils/pack-contributions.ts +0 -450
  274. package/src/utils/people.ts +0 -215
  275. package/src/utils/registry-client.ts +0 -204
  276. package/src/utils/registry.ts +0 -90
  277. package/src/utils/resolve-vault-credential.test.ts +0 -69
  278. package/src/utils/resolve-vault-credential.ts +0 -60
  279. package/src/utils/sandbox-runner-client.test.ts +0 -279
  280. package/src/utils/sandbox-runner-client.ts +0 -260
  281. package/src/utils/secrets-cache.ts +0 -183
  282. package/src/utils/sentry-identity.ts +0 -45
  283. package/src/utils/settle-with-timeout.test.ts +0 -21
  284. package/src/utils/settle-with-timeout.ts +0 -22
  285. package/src/utils/user-yaml-error.test.ts +0 -24
  286. package/src/utils/user-yaml-error.ts +0 -30
  287. package/src/utils/vault-api.test.ts +0 -536
  288. package/src/utils/vault-api.ts +0 -382
  289. package/src/utils/version-check.test.ts +0 -176
  290. package/src/utils/version-check.ts +0 -155
  291. package/src/utils/version-gate.test.ts +0 -1024
  292. package/src/utils/version-gate.ts +0 -702
  293. package/test/commands/db-tenant-isolation.test.ts +0 -94
  294. package/test/commands/db.test.ts +0 -85
  295. package/test/commands/signals.test.ts +0 -207
  296. package/test/commands/sources.test.ts +0 -231
  297. package/test/e2e/smoke-install-mcp.sh +0 -113
  298. package/test/fixtures/hq-pack-smoke-mcp/mcp/smoke-http.json +0 -1
  299. package/test/fixtures/hq-pack-smoke-mcp/package.yaml +0 -11
  300. package/test/fixtures/signals/action_item/sample.md +0 -16
  301. package/test/fixtures/signals/summary/sample.md +0 -12
  302. package/test/fixtures/sources/meetings/sample.md +0 -25
  303. package/test/helpers/cli-runner.ts +0 -150
  304. package/test/helpers/s3-list-mock.ts +0 -79
  305. package/test/helpers/vault-service-mock.ts +0 -295
  306. package/test/sources-signals/smoke.test.ts +0 -228
  307. package/tsconfig.json +0 -20
  308. package/vitest.config.ts +0 -11
  309. package/vitest.e2e.config.ts +0 -7
@@ -1,387 +0,0 @@
1
- /**
2
- * `hq sync mode <mode>` (US-006) — flip a membership's syncMode for a company.
3
- *
4
- * Subcommand of the `hq sync` group. Three call shapes:
5
- *
6
- * hq sync mode shared|all|custom [--company <slug>]
7
- * Resolves the target membership for the given company (or the cwd's
8
- * active company from `.hq/config.json` if `--company` is omitted) and
9
- * calls `VaultClient.setMembershipSyncConfig`. Prints membershipId +
10
- * previous mode → new mode as a chat audit trail.
11
- *
12
- * hq sync mode --show
13
- * No positional. Prints a table of every membership the caller has
14
- * with its company slug, current sync-mode, and last-updated stamp.
15
- *
16
- * hq sync mode custom --paths a/,b/ (planned follow-up)
17
- * For the `custom` mode the server requires `customPaths`. This command
18
- * accepts `--paths` as a comma-separated list to forward to the API; if
19
- * omitted on `custom` the server validation will reject.
20
- *
21
- * Auto-detect of `--company` from cwd: best-effort via the active-company
22
- * slug in `<hq-root>/.hq/config.json`. If absent, the caller must pass
23
- * `--company` explicitly — there's no cwd-walk to a `companies/<slug>/`
24
- * folder in this initial implementation (follow-up US could add it).
25
- *
26
- * Cross-package note: this command depends on `VaultClient`
27
- * (`getMembershipSyncConfig` / `setMembershipSyncConfig`) added in
28
- * hq-cloud US-004 (commit 41e5ee1). While that hq-cloud release is
29
- * unpublished, hq-cli pins `@indigoai-us/hq-cloud` to `file:../hq-cloud`
30
- * in package.json — revert that line to `^5.20.0` (or whatever the
31
- * published cut is) once US-004 ships to npm.
32
- */
33
-
34
- import { Command } from "commander";
35
- import chalk from "chalk";
36
- import * as fs from "node:fs";
37
- import * as path from "node:path";
38
-
39
- import {
40
- VaultClient,
41
- type MembershipSyncConfig,
42
- type Membership,
43
- type SyncMode,
44
- } from "@indigoai-us/hq-cloud";
45
-
46
- import {
47
- DEFAULT_HQ_ROOT,
48
- ensureCognitoToken,
49
- buildVaultConfig,
50
- } from "../utils/cognito-session.js";
51
-
52
- // ── Constants ───────────────────────────────────────────────────────────────
53
-
54
- export const LEGAL_SYNC_MODES: readonly SyncMode[] = [
55
- "shared",
56
- "all",
57
- "custom",
58
- ] as const;
59
-
60
- // ── Types ───────────────────────────────────────────────────────────────────
61
-
62
- /** Subset of VaultClient surface this command exercises (test seam). */
63
- export interface SyncModeVaultClient {
64
- listMyMemberships(): Promise<Membership[]>;
65
- getMembershipSyncConfig(membershipId: string): Promise<MembershipSyncConfig>;
66
- setMembershipSyncConfig(
67
- membershipId: string,
68
- partial: { syncMode: SyncMode; customPaths?: string[] },
69
- ): Promise<MembershipSyncConfig>;
70
- entity: {
71
- get(uid: string): Promise<{ uid: string; slug: string; name?: string }>;
72
- };
73
- }
74
-
75
- export interface SetSyncModeOptions {
76
- /** Validated mode — already known to be a legal SyncMode. */
77
- mode: SyncMode;
78
- /** Company slug (caller-provided or resolved from cwd). Required. */
79
- companySlug: string;
80
- /** Required when `mode === "custom"`. Server rejects otherwise. */
81
- customPaths?: string[];
82
- /** Injected vault client (real impl built from access token by default). */
83
- vaultClient: SyncModeVaultClient;
84
- }
85
-
86
- export interface SetSyncModeResult {
87
- membershipId: string;
88
- companySlug: string;
89
- previousMode: SyncMode;
90
- newMode: SyncMode;
91
- previousWasDefault: boolean;
92
- newConfig: MembershipSyncConfig;
93
- }
94
-
95
- export interface ShowSyncModesOptions {
96
- vaultClient: SyncModeVaultClient;
97
- }
98
-
99
- export interface ShowSyncModesRow {
100
- companySlug: string;
101
- companyName?: string;
102
- membershipId: string;
103
- syncMode: SyncMode;
104
- isDefault: boolean;
105
- updatedAt?: string;
106
- }
107
-
108
- // ── Pure helpers ────────────────────────────────────────────────────────────
109
-
110
- /** Throws a helpful Error if `mode` is not a legal SyncMode. */
111
- export function validateMode(mode: string): SyncMode {
112
- if ((LEGAL_SYNC_MODES as readonly string[]).includes(mode)) {
113
- return mode as SyncMode;
114
- }
115
- throw new Error(
116
- `Invalid sync mode '${mode}'. Legal values: ${LEGAL_SYNC_MODES.join(", ")}.`,
117
- );
118
- }
119
-
120
- /**
121
- * Read the active company slug from `<hq-root>/.hq/config.json`. Returns
122
- * undefined when the file is missing or `activeCompany` isn't set. Never
123
- * throws — auto-detect is best-effort.
124
- */
125
- export function readActiveCompanySlug(hqRoot: string): string | undefined {
126
- const configPath = path.join(hqRoot, ".hq", "config.json");
127
- if (!fs.existsSync(configPath)) return undefined;
128
- try {
129
- const cfg = JSON.parse(fs.readFileSync(configPath, "utf-8")) as {
130
- activeCompany?: unknown;
131
- };
132
- const slug = cfg.activeCompany;
133
- return typeof slug === "string" && slug.length > 0 ? slug : undefined;
134
- } catch {
135
- return undefined;
136
- }
137
- }
138
-
139
- /** Parse `--paths a/,b/c/` into trimmed non-empty entries. */
140
- export function parseCustomPaths(raw: string | undefined): string[] | undefined {
141
- if (!raw) return undefined;
142
- const parts = raw
143
- .split(",")
144
- .map((s) => s.trim())
145
- .filter((s) => s.length > 0);
146
- return parts.length > 0 ? parts : undefined;
147
- }
148
-
149
- // ── Orchestrators (pure, injectable — driven by tests) ──────────────────────
150
-
151
- /**
152
- * Resolve a membership by company slug, then PUT the new sync-mode. Returns
153
- * the membershipId, the previous mode (read via GET first), and the server's
154
- * fresh config (which sets `isDefault: false` once a row exists).
155
- */
156
- export async function setSyncMode(
157
- options: SetSyncModeOptions,
158
- ): Promise<SetSyncModeResult> {
159
- const { mode, companySlug, customPaths, vaultClient } = options;
160
-
161
- // 1. Find the caller's membership for this company.
162
- const memberships = await vaultClient.listMyMemberships();
163
- // Resolve slug → uid via entity.get on each membership's companyUid in
164
- // parallel. Cheaper than a per-membership lookup loop and matches the
165
- // pattern AppBar uses to render its company picker.
166
- const enriched = await Promise.all(
167
- memberships.map(async (m) => {
168
- try {
169
- const ent = await vaultClient.entity.get(m.companyUid);
170
- return { membership: m, slug: ent.slug, name: ent.name };
171
- } catch {
172
- return { membership: m, slug: undefined, name: undefined };
173
- }
174
- }),
175
- );
176
-
177
- const match = enriched.find((row) => row.slug === companySlug);
178
- if (!match) {
179
- const known = enriched
180
- .map((r) => r.slug)
181
- .filter((s): s is string => !!s)
182
- .join(", ");
183
- throw new Error(
184
- `No membership found for company '${companySlug}'. Memberships visible to you: ${
185
- known || "(none)"
186
- }.`,
187
- );
188
- }
189
-
190
- const membershipId = match.membership.membershipKey;
191
-
192
- // 2. Read the current config (server defaults to `shared`/isDefault:true
193
- // when no row exists). We surface this in the audit line.
194
- const before = await vaultClient.getMembershipSyncConfig(membershipId);
195
-
196
- // 3. Write the new mode.
197
- const after = await vaultClient.setMembershipSyncConfig(membershipId, {
198
- syncMode: mode,
199
- customPaths,
200
- });
201
-
202
- return {
203
- membershipId,
204
- companySlug,
205
- previousMode: before.syncMode,
206
- previousWasDefault: before.isDefault,
207
- newMode: after.syncMode,
208
- newConfig: after,
209
- };
210
- }
211
-
212
- /**
213
- * Fetch every membership the caller has, resolve company slugs, and look up
214
- * each effective sync-config in parallel. Returns rows sorted by slug for
215
- * stable table output.
216
- */
217
- export async function showSyncModes(
218
- options: ShowSyncModesOptions,
219
- ): Promise<ShowSyncModesRow[]> {
220
- const { vaultClient } = options;
221
- const memberships = await vaultClient.listMyMemberships();
222
- if (memberships.length === 0) return [];
223
-
224
- const rows = await Promise.all(
225
- memberships.map(async (m): Promise<ShowSyncModesRow> => {
226
- const [config, entity] = await Promise.all([
227
- vaultClient.getMembershipSyncConfig(m.membershipKey).catch(
228
- (): MembershipSyncConfig => ({
229
- membershipId: m.membershipKey,
230
- syncMode: "shared",
231
- isDefault: true,
232
- }),
233
- ),
234
- vaultClient.entity
235
- .get(m.companyUid)
236
- .catch(() => ({ uid: m.companyUid, slug: m.companyUid, name: undefined as string | undefined })),
237
- ]);
238
- return {
239
- companySlug: entity.slug,
240
- companyName: entity.name,
241
- membershipId: m.membershipKey,
242
- syncMode: config.syncMode,
243
- isDefault: config.isDefault,
244
- updatedAt: config.updatedAt,
245
- };
246
- }),
247
- );
248
-
249
- rows.sort((a, b) => a.companySlug.localeCompare(b.companySlug));
250
- return rows;
251
- }
252
-
253
- // ── Table rendering (used by CLI action, separable for tests) ──────────────
254
-
255
- /**
256
- * Render the `--show` table as plain text. No external dep — hq-cli doesn't
257
- * use cli-table3, so we hand-format columns to match the existing chalk +
258
- * padEnd pattern used by `hq members list`.
259
- */
260
- export function formatShowTable(rows: ShowSyncModesRow[]): string {
261
- if (rows.length === 0) {
262
- return "No memberships found. Run `hq onboard` or accept an invite first.";
263
- }
264
- const cols = ["COMPANY", "MODE", "UPDATED", "MEMBERSHIP"];
265
- const data = rows.map((r) => [
266
- r.companySlug,
267
- r.isDefault ? `${r.syncMode} (default)` : r.syncMode,
268
- r.updatedAt ?? "—",
269
- r.membershipId,
270
- ]);
271
- const widths = cols.map((c, i) =>
272
- Math.max(c.length, ...data.map((row) => row[i].length)),
273
- );
274
- const renderRow = (row: string[]): string =>
275
- row.map((cell, i) => cell.padEnd(widths[i])).join(" ");
276
- const lines = [
277
- chalk.bold(renderRow(cols)),
278
- chalk.dim(renderRow(widths.map((w) => "─".repeat(w)))),
279
- ...data.map(renderRow),
280
- ];
281
- return lines.join("\n");
282
- }
283
-
284
- // ── CLI registration ────────────────────────────────────────────────────────
285
-
286
- interface SyncModeCliOptions {
287
- company?: string;
288
- show?: boolean;
289
- hqRoot: string;
290
- paths?: string;
291
- }
292
-
293
- /**
294
- * Wire `hq sync mode` onto an existing `sync` Commander group. The caller
295
- * (`src/index.ts`) constructs the `sync` group and calls this after
296
- * `registerCloudCommands` so push/pull/status/mode all coexist.
297
- */
298
- export function registerSyncModeCommand(syncCmd: Command): void {
299
- syncCmd
300
- .command("mode [mode]")
301
- .description(
302
- "Flip a membership's sync-mode (shared|all|custom), or --show every membership's current mode",
303
- )
304
- .option(
305
- "--company <slug>",
306
- "Company slug (defaults to the active company in <hq-root>/.hq/config.json)",
307
- )
308
- .option(
309
- "--show",
310
- "Print the current sync-mode for every membership the caller has",
311
- )
312
- .option(
313
- "--paths <csv>",
314
- "Comma-separated allowed prefixes (required when mode is 'custom')",
315
- )
316
- .option(
317
- "--hq-root <path>",
318
- `Local HQ tree root (default: ${DEFAULT_HQ_ROOT})`,
319
- DEFAULT_HQ_ROOT,
320
- )
321
- .action(async (modeArg: string | undefined, options: SyncModeCliOptions) => {
322
- try {
323
- const accessToken = await ensureCognitoToken();
324
- const vaultConfig = buildVaultConfig(accessToken);
325
- const client = new VaultClient(vaultConfig);
326
-
327
- if (options.show) {
328
- if (modeArg !== undefined) {
329
- throw new Error(
330
- "`--show` is incompatible with a positional <mode>. Pass one or the other.",
331
- );
332
- }
333
- const rows = await showSyncModes({ vaultClient: client });
334
- console.log(formatShowTable(rows));
335
- return;
336
- }
337
-
338
- if (!modeArg) {
339
- throw new Error(
340
- `Missing <mode>. Usage: hq sync mode <${LEGAL_SYNC_MODES.join(
341
- "|",
342
- )}> [--company <slug>] or hq sync mode --show`,
343
- );
344
- }
345
-
346
- const mode = validateMode(modeArg);
347
- const customPaths = parseCustomPaths(options.paths);
348
- const companySlug =
349
- options.company ?? readActiveCompanySlug(options.hqRoot);
350
- if (!companySlug) {
351
- throw new Error(
352
- "No company specified. Pass --company <slug> or set activeCompany in <hq-root>/.hq/config.json.",
353
- );
354
- }
355
-
356
- const result = await setSyncMode({
357
- mode,
358
- companySlug,
359
- customPaths,
360
- vaultClient: client,
361
- });
362
-
363
- const prevLabel = result.previousWasDefault
364
- ? `${result.previousMode} (default)`
365
- : result.previousMode;
366
- console.log(
367
- chalk.green("✓"),
368
- `Set sync-mode for ${chalk.bold(result.companySlug)}: ${chalk.dim(prevLabel)} → ${chalk.bold(result.newMode)}`,
369
- );
370
- console.log(chalk.dim(` membershipId: ${result.membershipId}`));
371
- if (result.newConfig.customPaths && result.newConfig.customPaths.length > 0) {
372
- console.log(
373
- chalk.dim(` customPaths: ${result.newConfig.customPaths.join(", ")}`),
374
- );
375
- }
376
- if (result.newConfig.updatedAt) {
377
- console.log(chalk.dim(` updatedAt: ${result.newConfig.updatedAt}`));
378
- }
379
- } catch (err) {
380
- console.error(
381
- chalk.red("✗ sync mode failed:"),
382
- err instanceof Error ? err.message : String(err),
383
- );
384
- process.exit(1);
385
- }
386
- });
387
- }