@indigoai-us/hq-cli 5.77.14 → 5.79.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (309) hide show
  1. package/CHANGELOG.md +31 -0
  2. package/assets/scaffold/core/scripts/archive-old-threads.sh +86 -0
  3. package/assets/scaffold/core/scripts/backfill-company-skill-mirrors.sh +73 -0
  4. package/assets/scaffold/core/scripts/backfill-workspace-mirror.sh +51 -0
  5. package/assets/scaffold/core/scripts/codex-skill-bridge.sh +550 -0
  6. package/assets/scaffold/core/scripts/detect-stale-core-policy-mirror.sh +185 -0
  7. package/assets/scaffold/core/scripts/hq-status-summary.sh +187 -0
  8. package/assets/scaffold/core/scripts/ontology-readme-drift.sh +264 -0
  9. package/assets/scaffold/core/scripts/qmd-reindex-after-sync.sh +93 -0
  10. package/assets/scaffold/core/scripts/rebuild-all-indexes.sh +69 -0
  11. package/assets/scaffold/core/scripts/rebuild-companies-index.sh +206 -0
  12. package/assets/scaffold/core/scripts/rebuild-company-knowledge-index.sh +127 -0
  13. package/assets/scaffold/core/scripts/rebuild-orchestrator-index.sh +86 -0
  14. package/assets/scaffold/core/scripts/rebuild-projects-index.sh +105 -0
  15. package/assets/scaffold/core/scripts/rebuild-public-knowledge-index.sh +83 -0
  16. package/assets/scaffold/core/scripts/rebuild-reports-index.sh +114 -0
  17. package/assets/scaffold/core/scripts/rebuild-social-drafts-index.sh +135 -0
  18. package/assets/scaffold/core/scripts/rebuild-threads-index.sh +82 -0
  19. package/assets/scaffold/core/scripts/rebuild-workers-index.sh +97 -0
  20. package/assets/scaffold/core/scripts/resize-screenshot.sh +47 -0
  21. package/assets/scaffold/core/scripts/token-usage-report.sh +254 -0
  22. package/assets/scaffold/core/scripts/worktree.sh +136 -0
  23. package/dist/commands/agents.js +28 -12
  24. package/dist/commands/api-keys.js +100 -20
  25. package/dist/commands/core.d.ts +90 -0
  26. package/dist/commands/core.js +279 -0
  27. package/dist/commands/files-browse.d.ts +21 -0
  28. package/dist/commands/files-browse.js +145 -24
  29. package/dist/commands/files.js +33 -7
  30. package/dist/commands/meetings.js +16 -9
  31. package/dist/commands/members.js +16 -5
  32. package/dist/commands/pack-install.d.ts +14 -0
  33. package/dist/commands/pack-install.js +42 -2
  34. package/dist/commands/pkg-install.js +39 -2
  35. package/dist/commands/run.js +6 -2
  36. package/dist/commands/secrets.js +120 -65
  37. package/dist/main.js +6 -0
  38. package/dist/utils/api-key-command-gate.d.ts +45 -0
  39. package/dist/utils/api-key-command-gate.js +51 -0
  40. package/dist/utils/hq-roots.d.ts +91 -0
  41. package/dist/utils/hq-roots.js +212 -0
  42. package/dist/utils/resolve-vault-credential.d.ts +63 -3
  43. package/dist/utils/resolve-vault-credential.js +152 -6
  44. package/dist/utils/run-bundled-script.d.ts +66 -0
  45. package/dist/utils/run-bundled-script.js +80 -0
  46. package/dist/utils/vault-api.d.ts +21 -0
  47. package/dist/utils/vault-api.js +74 -3
  48. package/package.json +7 -1
  49. package/.claude/policies/hq-cli-interactive-reads-use-sts-vend.md +0 -49
  50. package/.github/workflows/ci.yml +0 -46
  51. package/.github/workflows/publish.yml +0 -36
  52. package/.github/workflows/scripts/smoke-test-pkg.sh +0 -97
  53. package/e2e/cli.test.ts +0 -128
  54. package/eslint.config.js +0 -37
  55. package/pnpm-workspace.yaml +0 -4
  56. package/scripts/chmod-bins.mjs +0 -49
  57. package/scripts/generate-dsn.mjs +0 -26
  58. package/scripts/generate-scan-packages-table.mjs +0 -113
  59. package/scripts/smoke-sources-signals.sh +0 -103
  60. package/src/bin/hq-auth-refresh.ts +0 -43
  61. package/src/cli-version.ts +0 -13
  62. package/src/commands/__fixtures__/make-tar.ts +0 -126
  63. package/src/commands/_patterns.ts +0 -10
  64. package/src/commands/add.ts +0 -75
  65. package/src/commands/agents.test.ts +0 -527
  66. package/src/commands/agents.ts +0 -923
  67. package/src/commands/api-keys.test.ts +0 -291
  68. package/src/commands/api-keys.ts +0 -382
  69. package/src/commands/artifact-verify.test.ts +0 -177
  70. package/src/commands/auth.test.ts +0 -82
  71. package/src/commands/auth.ts +0 -213
  72. package/src/commands/billing.test.ts +0 -158
  73. package/src/commands/billing.ts +0 -146
  74. package/src/commands/channels.test.ts +0 -74
  75. package/src/commands/channels.ts +0 -91
  76. package/src/commands/cloud-demote.test.ts +0 -401
  77. package/src/commands/cloud-demote.ts +0 -278
  78. package/src/commands/cloud-provision.test.ts +0 -1117
  79. package/src/commands/cloud-provision.ts +0 -942
  80. package/src/commands/cloud.pull-all.test.ts +0 -711
  81. package/src/commands/cloud.pull-per-company.test.ts +0 -188
  82. package/src/commands/cloud.push-all.test.ts +0 -485
  83. package/src/commands/cloud.scope-excluded-warning.test.ts +0 -22
  84. package/src/commands/cloud.selectors.test.ts +0 -208
  85. package/src/commands/cloud.status.test.ts +0 -160
  86. package/src/commands/cloud.test.ts +0 -41
  87. package/src/commands/cloud.ts +0 -2130
  88. package/src/commands/company.test.ts +0 -202
  89. package/src/commands/company.ts +0 -148
  90. package/src/commands/creators.test.ts +0 -60
  91. package/src/commands/creators.ts +0 -117
  92. package/src/commands/crm.test.ts +0 -179
  93. package/src/commands/crm.ts +0 -236
  94. package/src/commands/db-migrate.ts +0 -55
  95. package/src/commands/db-provision.ts +0 -114
  96. package/src/commands/db-sql.ts +0 -124
  97. package/src/commands/db-status.ts +0 -108
  98. package/src/commands/db.ts +0 -26
  99. package/src/commands/dm.test.ts +0 -748
  100. package/src/commands/dm.ts +0 -1226
  101. package/src/commands/feedback.test.ts +0 -413
  102. package/src/commands/feedback.ts +0 -169
  103. package/src/commands/files-browse.test.ts +0 -1249
  104. package/src/commands/files-browse.ts +0 -1506
  105. package/src/commands/files-delete.test.ts +0 -484
  106. package/src/commands/files-recovery.test.ts +0 -370
  107. package/src/commands/files.test.ts +0 -722
  108. package/src/commands/files.ts +0 -1446
  109. package/src/commands/group-grants.test.ts +0 -330
  110. package/src/commands/group-grants.ts +0 -455
  111. package/src/commands/groups.test.ts +0 -44
  112. package/src/commands/groups.ts +0 -368
  113. package/src/commands/integrations.test.ts +0 -633
  114. package/src/commands/integrations.ts +0 -507
  115. package/src/commands/list.ts +0 -85
  116. package/src/commands/login.ts +0 -52
  117. package/src/commands/logout.ts +0 -30
  118. package/src/commands/marketplace-install.test.ts +0 -543
  119. package/src/commands/marketplace-security.test.ts +0 -646
  120. package/src/commands/mcp-registration.test.ts +0 -2787
  121. package/src/commands/mcp-registration.ts +0 -2612
  122. package/src/commands/mcp-status.test.ts +0 -483
  123. package/src/commands/mcp-status.ts +0 -575
  124. package/src/commands/mcp-status.us011.test.ts +0 -243
  125. package/src/commands/meetings.test.ts +0 -522
  126. package/src/commands/meetings.ts +0 -789
  127. package/src/commands/members.test.ts +0 -1474
  128. package/src/commands/members.ts +0 -1181
  129. package/src/commands/onboard-identity-guard.test.ts +0 -99
  130. package/src/commands/onboard-identity-guard.ts +0 -103
  131. package/src/commands/onboard-join.test.ts +0 -96
  132. package/src/commands/onboard-join.ts +0 -101
  133. package/src/commands/onboard-warning.test.ts +0 -26
  134. package/src/commands/onboard-warning.ts +0 -12
  135. package/src/commands/onboard.ts +0 -267
  136. package/src/commands/outposts-heartbeat.test.ts +0 -299
  137. package/src/commands/outposts-heartbeat.ts +0 -310
  138. package/src/commands/outposts-replica-sync.test.ts +0 -272
  139. package/src/commands/outposts-self-deploy.test.ts +0 -243
  140. package/src/commands/outposts.test.ts +0 -1039
  141. package/src/commands/outposts.ts +0 -1935
  142. package/src/commands/pack-install-secret-authorization.test.ts +0 -115
  143. package/src/commands/pack-install.test.ts +0 -1469
  144. package/src/commands/pack-install.ts +0 -2256
  145. package/src/commands/pack-update-cache.test.ts +0 -149
  146. package/src/commands/packs-update-api-key.test.ts +0 -105
  147. package/src/commands/packs.test.ts +0 -88
  148. package/src/commands/packs.ts +0 -622
  149. package/src/commands/people.test.ts +0 -807
  150. package/src/commands/people.ts +0 -422
  151. package/src/commands/pkg-install.dispatch.test.ts +0 -103
  152. package/src/commands/pkg-install.ts +0 -221
  153. package/src/commands/pkg-list.test.ts +0 -79
  154. package/src/commands/pkg-list.ts +0 -13
  155. package/src/commands/pkg-remove.ts +0 -71
  156. package/src/commands/pkg-update.ts +0 -189
  157. package/src/commands/publish.test.ts +0 -650
  158. package/src/commands/publish.ts +0 -580
  159. package/src/commands/reindex.test.ts +0 -259
  160. package/src/commands/reindex.ts +0 -274
  161. package/src/commands/rescue.test.ts +0 -39
  162. package/src/commands/rescue.ts +0 -210
  163. package/src/commands/run.env-local.test.ts +0 -88
  164. package/src/commands/run.test.ts +0 -45
  165. package/src/commands/run.ts +0 -190
  166. package/src/commands/safe-extract.test.ts +0 -459
  167. package/src/commands/safe-extract.ts +0 -444
  168. package/src/commands/secrets-scope.test.ts +0 -56
  169. package/src/commands/secrets-scope.ts +0 -32
  170. package/src/commands/secrets.parse-destination.test.ts +0 -38
  171. package/src/commands/secrets.test.ts +0 -2050
  172. package/src/commands/secrets.ts +0 -2249
  173. package/src/commands/signals.ts +0 -351
  174. package/src/commands/skill.test.ts +0 -770
  175. package/src/commands/skill.ts +0 -796
  176. package/src/commands/sources.ts +0 -362
  177. package/src/commands/sync-mode.test.ts +0 -366
  178. package/src/commands/sync-mode.ts +0 -387
  179. package/src/commands/sync-narrow.test.ts +0 -633
  180. package/src/commands/sync-narrow.ts +0 -555
  181. package/src/commands/sync.ts +0 -165
  182. package/src/commands/team-sync.ts +0 -628
  183. package/src/commands/update.ts +0 -71
  184. package/src/commands/whoami.ts +0 -83
  185. package/src/commands/workers.test.ts +0 -158
  186. package/src/commands/workers.ts +0 -301
  187. package/src/index.test.ts +0 -32
  188. package/src/index.ts +0 -20
  189. package/src/lib/db/control-plane.test.ts +0 -59
  190. package/src/lib/db/control-plane.ts +0 -113
  191. package/src/lib/db/local.test.ts +0 -81
  192. package/src/lib/db/local.ts +0 -148
  193. package/src/lib/db/migrate.test.ts +0 -133
  194. package/src/lib/db/migrate.ts +0 -137
  195. package/src/lib/db/paths.test.ts +0 -112
  196. package/src/lib/db/paths.ts +0 -128
  197. package/src/lib/db/remote-engine.test.ts +0 -44
  198. package/src/lib/db/remote-engine.ts +0 -148
  199. package/src/lib/db/remote-sql.test.ts +0 -32
  200. package/src/lib/db/remote-sql.ts +0 -62
  201. package/src/lib/db/sql.test.ts +0 -106
  202. package/src/lib/db/sql.ts +0 -192
  203. package/src/lib/hq-cloud-dep.smoke.test.ts +0 -75
  204. package/src/lib/local-tree-diff.test.ts +0 -301
  205. package/src/lib/local-tree-diff.ts +0 -362
  206. package/src/lib/narrow-hint-banner.test.ts +0 -235
  207. package/src/lib/narrow-hint-banner.ts +0 -212
  208. package/src/lib/plan-limit-nag.test.ts +0 -317
  209. package/src/lib/plan-limit-nag.ts +0 -264
  210. package/src/main.ts +0 -371
  211. package/src/node-preflight.test.ts +0 -60
  212. package/src/node-preflight.ts +0 -67
  213. package/src/outpost/session-heartbeat-bounds.test.ts +0 -195
  214. package/src/outpost/session-heartbeat-guard.test.ts +0 -105
  215. package/src/outpost/session-heartbeat-publisher.test.ts +0 -178
  216. package/src/outpost/session-heartbeat-publisher.ts +0 -186
  217. package/src/outpost/session-heartbeat-retain-guard.test.ts +0 -126
  218. package/src/outpost/session-heartbeat.test.ts +0 -459
  219. package/src/outpost/session-heartbeat.ts +0 -877
  220. package/src/packaging.test.ts +0 -109
  221. package/src/run/__fixtures__/discover-schemas/example.env.schema +0 -4
  222. package/src/run/discover-schemas.test.ts +0 -153
  223. package/src/run/discover-schemas.ts +0 -79
  224. package/src/run/hq-plugin.test.ts +0 -371
  225. package/src/run/hq-plugin.ts +0 -277
  226. package/src/run/varlock-shape.test.ts +0 -57
  227. package/src/schemas/hq-package.schema.json +0 -155
  228. package/src/sentry-before-send.test.ts +0 -359
  229. package/src/sentry-before-send.ts +0 -221
  230. package/src/sentry-epipe.test.ts +0 -37
  231. package/src/sentry-release.test.ts +0 -54
  232. package/src/sentry.test.ts +0 -24
  233. package/src/sentry.ts +0 -54
  234. package/src/strategies/link.ts +0 -62
  235. package/src/strategies/merge.ts +0 -142
  236. package/src/types.ts +0 -146
  237. package/src/utils/__fixtures__/scan-packages.generated-block.sh +0 -23
  238. package/src/utils/auth-error.test.ts +0 -40
  239. package/src/utils/auth-error.ts +0 -42
  240. package/src/utils/billing-gate.test.ts +0 -95
  241. package/src/utils/billing-gate.ts +0 -228
  242. package/src/utils/breadcrumb-buffer.ts +0 -18
  243. package/src/utils/cli-telemetry.test.ts +0 -153
  244. package/src/utils/cli-telemetry.ts +0 -61
  245. package/src/utils/cognito-session.machine.test.ts +0 -109
  246. package/src/utils/cognito-session.refresh.test.ts +0 -84
  247. package/src/utils/cognito-session.test.ts +0 -328
  248. package/src/utils/cognito-session.ts +0 -448
  249. package/src/utils/company-selection-error.test.ts +0 -42
  250. package/src/utils/company-selection-error.ts +0 -45
  251. package/src/utils/contribution-table.ts +0 -83
  252. package/src/utils/environmental-error.test.ts +0 -45
  253. package/src/utils/environmental-error.ts +0 -39
  254. package/src/utils/epipe.test.ts +0 -28
  255. package/src/utils/epipe.ts +0 -29
  256. package/src/utils/expected-cli-error.test.ts +0 -28
  257. package/src/utils/expected-cli-error.ts +0 -39
  258. package/src/utils/feedback-diagnostics.test.ts +0 -183
  259. package/src/utils/feedback-diagnostics.ts +0 -123
  260. package/src/utils/feedback-screenshots.test.ts +0 -134
  261. package/src/utils/feedback-screenshots.ts +0 -124
  262. package/src/utils/feedback-versions.test.ts +0 -98
  263. package/src/utils/feedback-versions.ts +0 -68
  264. package/src/utils/git.ts +0 -74
  265. package/src/utils/integrity.ts +0 -59
  266. package/src/utils/intercepted-process-exit.test.ts +0 -37
  267. package/src/utils/intercepted-process-exit.ts +0 -36
  268. package/src/utils/login-provider.test.ts +0 -42
  269. package/src/utils/login-provider.ts +0 -30
  270. package/src/utils/manifest.test.ts +0 -167
  271. package/src/utils/manifest.ts +0 -131
  272. package/src/utils/pack-contributions.test.ts +0 -603
  273. package/src/utils/pack-contributions.ts +0 -450
  274. package/src/utils/people.ts +0 -215
  275. package/src/utils/registry-client.ts +0 -204
  276. package/src/utils/registry.ts +0 -90
  277. package/src/utils/resolve-vault-credential.test.ts +0 -69
  278. package/src/utils/resolve-vault-credential.ts +0 -60
  279. package/src/utils/sandbox-runner-client.test.ts +0 -279
  280. package/src/utils/sandbox-runner-client.ts +0 -260
  281. package/src/utils/secrets-cache.ts +0 -183
  282. package/src/utils/sentry-identity.ts +0 -45
  283. package/src/utils/settle-with-timeout.test.ts +0 -21
  284. package/src/utils/settle-with-timeout.ts +0 -22
  285. package/src/utils/user-yaml-error.test.ts +0 -24
  286. package/src/utils/user-yaml-error.ts +0 -30
  287. package/src/utils/vault-api.test.ts +0 -536
  288. package/src/utils/vault-api.ts +0 -382
  289. package/src/utils/version-check.test.ts +0 -176
  290. package/src/utils/version-check.ts +0 -155
  291. package/src/utils/version-gate.test.ts +0 -1024
  292. package/src/utils/version-gate.ts +0 -702
  293. package/test/commands/db-tenant-isolation.test.ts +0 -94
  294. package/test/commands/db.test.ts +0 -85
  295. package/test/commands/signals.test.ts +0 -207
  296. package/test/commands/sources.test.ts +0 -231
  297. package/test/e2e/smoke-install-mcp.sh +0 -113
  298. package/test/fixtures/hq-pack-smoke-mcp/mcp/smoke-http.json +0 -1
  299. package/test/fixtures/hq-pack-smoke-mcp/package.yaml +0 -11
  300. package/test/fixtures/signals/action_item/sample.md +0 -16
  301. package/test/fixtures/signals/summary/sample.md +0 -12
  302. package/test/fixtures/sources/meetings/sample.md +0 -25
  303. package/test/helpers/cli-runner.ts +0 -150
  304. package/test/helpers/s3-list-mock.ts +0 -79
  305. package/test/helpers/vault-service-mock.ts +0 -295
  306. package/test/sources-signals/smoke.test.ts +0 -228
  307. package/tsconfig.json +0 -20
  308. package/vitest.config.ts +0 -11
  309. package/vitest.e2e.config.ts +0 -7
@@ -1,212 +0,0 @@
1
- /**
2
- * `narrow-hint-banner` (US-011) — one-time-per-session hint nudging
3
- * existing all-mode owners to switch to shared-mode sync.
4
- *
5
- * Emitted from `hq sync pull --all` and `hq sync now` after the per-target
6
- * fanout resolves each membership's sync config. Suppressed when:
7
- *
8
- * - the membership is NOT on `syncMode: 'all'` (shared / custom users
9
- * have already opted in to narrowing, so there is nothing to nudge),
10
- * - the env var `HQ_SYNC_NARROW_HINT=off` is set,
11
- * - the per-hqRoot CLI config (`<hqRoot>/.hq/config.json`) has
12
- * `syncNarrowHint: 'off'`,
13
- * - or the same `{companyUid, level}` pair has already been shown this
14
- * process (module-singleton dedupe; the runner imports the same module
15
- * once per `hq` invocation so a single invocation prints at most one
16
- * banner per company per level).
17
- *
18
- * Three escalating levels — `'hint' | 'warning' | 'strict'`. Today's
19
- * default level is `'hint'`; this release ships the plumbing so a future
20
- * hq-core-staging release can flip the default to `'warning'` and then
21
- * `'strict'` without re-touching the call sites.
22
- *
23
- * - hint → dim suggestion to stderr, never blocks.
24
- * - warning → yellow note to stderr, never blocks.
25
- * - strict → red error to stderr; callers are expected to refuse to
26
- * proceed unless the operator passes `--mode-all`. The
27
- * helper itself never throws or exits — the decision lives at
28
- * the call site so tests don't have to stub `process.exit`.
29
- *
30
- * The level is selected by the caller (typically from the
31
- * `HQ_SYNC_NARROW_HINT_LEVEL` env var). See `resolveBannerLevel` for the
32
- * default-and-override ladder.
33
- *
34
- * TODO(hq-core-staging release N+2): bump default level to 'warning'.
35
- * TODO(hq-core-staging release N+3): bump default level to 'strict' and
36
- * wire `--mode-all` as the only opt-out.
37
- */
38
-
39
- import chalk from "chalk";
40
- import * as fs from "node:fs";
41
- import * as path from "node:path";
42
-
43
- export type BannerLevel = "hint" | "warning" | "strict";
44
-
45
- export interface BannerInput {
46
- /** Company UID — used to dedupe per-process so each company emits once. */
47
- companyUid: string;
48
- /** Effective sync mode resolved from `getMembershipSyncConfig`. */
49
- syncMode: "shared" | "all" | "custom";
50
- /** Escalation level — see file header. */
51
- level: BannerLevel;
52
- }
53
-
54
- export interface ShouldShowBannerOpts {
55
- /**
56
- * Optional hqRoot — when provided, the helper checks
57
- * `<hqRoot>/.hq/config.json` for a `syncNarrowHint: 'off'` key in
58
- * addition to the env override. Falsy paths skip the file check.
59
- */
60
- hqRoot?: string;
61
- /**
62
- * Test seam: override `process.env` lookup. Defaults to
63
- * `process.env.HQ_SYNC_NARROW_HINT`.
64
- */
65
- envValue?: string | undefined;
66
- /**
67
- * Test seam: override `fs.readFileSync`. Defaults to `node:fs`.
68
- */
69
- readFile?: (p: string) => string;
70
- /** Test seam: override `fs.existsSync`. */
71
- existsFile?: (p: string) => boolean;
72
- }
73
-
74
- const SHOWN = new Set<string>();
75
-
76
- /**
77
- * Decides whether a banner should be printed AT ALL — independent of
78
- * dedupe and `syncMode` gating. Exposed for tests and for the strict-mode
79
- * call site (which needs to know whether to refuse-to-proceed even if the
80
- * banner itself is suppressed).
81
- */
82
- export function shouldShowBanner(opts: ShouldShowBannerOpts = {}): boolean {
83
- const envValue =
84
- opts.envValue !== undefined
85
- ? opts.envValue
86
- : process.env.HQ_SYNC_NARROW_HINT;
87
- if (typeof envValue === "string" && envValue.toLowerCase() === "off") {
88
- return false;
89
- }
90
-
91
- if (opts.hqRoot) {
92
- const configPath = path.join(opts.hqRoot, ".hq", "config.json");
93
- const exists = opts.existsFile ?? fs.existsSync;
94
- const read = opts.readFile ?? ((p: string) => fs.readFileSync(p, "utf-8"));
95
- if (exists(configPath)) {
96
- try {
97
- const cfg = JSON.parse(read(configPath)) as {
98
- syncNarrowHint?: unknown;
99
- };
100
- if (
101
- typeof cfg.syncNarrowHint === "string" &&
102
- cfg.syncNarrowHint.toLowerCase() === "off"
103
- ) {
104
- return false;
105
- }
106
- } catch {
107
- // Malformed config is best-effort — fall through and assume "on".
108
- }
109
- }
110
- }
111
-
112
- return true;
113
- }
114
-
115
- /**
116
- * Resolve the banner level from environment overrides. Defaults to
117
- * `'hint'`. Recognized values for `HQ_SYNC_NARROW_HINT_LEVEL`:
118
- * `hint`, `warning`, `strict` (case-insensitive). Unknown values fall
119
- * back to the default rather than throwing — the env var is operator-
120
- * facing and a typo shouldn't break a sync.
121
- */
122
- export function resolveBannerLevel(
123
- envValue: string | undefined = process.env.HQ_SYNC_NARROW_HINT_LEVEL,
124
- ): BannerLevel {
125
- if (typeof envValue !== "string") return "hint";
126
- const v = envValue.toLowerCase();
127
- if (v === "warning" || v === "strict" || v === "hint") return v;
128
- return "hint";
129
- }
130
-
131
- /**
132
- * Returns `true` when the strict-mode rollout has been opted into AND
133
- * the membership in question is still on `'all'`. Call sites should
134
- * refuse to proceed (exit non-zero) when this returns true and the
135
- * operator hasn't passed `--mode-all`.
136
- */
137
- export function isStrictRefusal(
138
- syncMode: BannerInput["syncMode"],
139
- level: BannerLevel,
140
- ): boolean {
141
- return level === "strict" && syncMode === "all";
142
- }
143
-
144
- /**
145
- * Emit a one-time-per-{company,level} banner. Writes to `stderr` by
146
- * default; tests inject a sink. Idempotent — repeated calls with the
147
- * same `{companyUid, level}` are no-ops for the lifetime of the
148
- * process.
149
- */
150
- export function emitNarrowHint(
151
- input: BannerInput,
152
- opts: {
153
- hqRoot?: string;
154
- write?: (s: string) => void;
155
- /** Test seam — overrides `shouldShowBanner` env/config lookups. */
156
- showOverride?: boolean;
157
- } = {},
158
- ): void {
159
- // Only nudge 'all'-mode memberships — shared/custom callers already
160
- // opted in to narrowing, so the hint would just be noise.
161
- if (input.syncMode !== "all") return;
162
-
163
- const show =
164
- opts.showOverride !== undefined
165
- ? opts.showOverride
166
- : shouldShowBanner({ ...(opts.hqRoot ? { hqRoot: opts.hqRoot } : {}) });
167
- if (!show) return;
168
-
169
- const key = `${input.companyUid}:${input.level}`;
170
- if (SHOWN.has(key)) return;
171
- SHOWN.add(key);
172
-
173
- const write =
174
- opts.write ?? ((s: string) => process.stderr.write(s + "\n"));
175
-
176
- if (input.level === "hint") {
177
- write(
178
- chalk.dim(
179
- "Tip: switch to shared-mode sync — fewer files, same visibility. " +
180
- "Run `hq sync narrow --dry-run` to preview.",
181
- ),
182
- );
183
- return;
184
- }
185
-
186
- if (input.level === "warning") {
187
- write(
188
- chalk.yellow(
189
- "Warning: shared-mode sync is the new default; this membership " +
190
- "still pulls everything. Run `hq sync narrow --dry-run` to " +
191
- "preview the migration before the next release flips the " +
192
- "default to strict.",
193
- ),
194
- );
195
- return;
196
- }
197
-
198
- // strict — caller is responsible for refusing to proceed unless
199
- // --mode-all was passed. We only emit the message here.
200
- write(
201
- chalk.red(
202
- "Error: shared-mode sync is now strict; pass --mode-all to keep " +
203
- "all-mode behavior for this run, or run `hq sync narrow --apply` " +
204
- "to migrate this membership.",
205
- ),
206
- );
207
- }
208
-
209
- /** Test-only helper — clears the per-process dedupe set. */
210
- export function _resetShownForTests(): void {
211
- SHOWN.clear();
212
- }
@@ -1,317 +0,0 @@
1
- /**
2
- * Unit tests for `plan-limit-nag` (US-016).
3
- *
4
- * Coverage:
5
- * 1. Warning renders when ≥80% metadata present; absent → no output.
6
- * 2. Malformed planLimits ignored (no output, no throw).
7
- * 3. Once-per-session: second emit prints nothing.
8
- * 4. Over-limit boxed notice; same-day state suppresses; >24h re-prints.
9
- * 5. HQ_NO_PLAN_LIMIT_NAG=1 disables all output.
10
- * 6. emit never throws even when statePath unwritable.
11
- * 7. Exit-code neutrality: emit does not touch process.exitCode.
12
- */
13
-
14
- import * as fs from "node:fs";
15
- import * as os from "node:os";
16
- import * as path from "node:path";
17
- import { afterEach, beforeEach, describe, expect, it } from "vitest";
18
-
19
- import {
20
- PLAN_LIMIT_UPGRADE_URL,
21
- _resetForTests,
22
- emitPlanLimitNag,
23
- recordPlanLimitStatus,
24
- } from "./plan-limit-nag.js";
25
-
26
- function makeSink(): { lines: string[]; write: (s: string) => void } {
27
- const lines: string[] = [];
28
- return {
29
- lines,
30
- write: (s: string) => {
31
- lines.push(s);
32
- },
33
- };
34
- }
35
-
36
- function tmpStatePath(): string {
37
- return path.join(
38
- os.tmpdir(),
39
- `hq-plan-limit-nag-test-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}.json`,
40
- );
41
- }
42
-
43
- /**
44
- * Portable unwritable statePath: join under a plain FILE so
45
- * mkdirSync/writeFileSync/readFileSync fail immediately with ENOTDIR
46
- * on every platform (unlike /proc paths, which hang on Linux procfs).
47
- */
48
- function unwritableStatePath(): string {
49
- const dir = fs.mkdtempSync(path.join(os.tmpdir(), "hq-nag-"));
50
- const file = path.join(dir, "not-a-dir");
51
- fs.writeFileSync(file, "x");
52
- return path.join(file, "x", "plan-limit-nag.json");
53
- }
54
-
55
- const ENV_KEY = "HQ_NO_PLAN_LIMIT_NAG";
56
- let prevEnv: string | undefined;
57
-
58
- beforeEach(() => {
59
- _resetForTests();
60
- prevEnv = process.env[ENV_KEY];
61
- delete process.env[ENV_KEY];
62
- });
63
-
64
- afterEach(() => {
65
- if (prevEnv === undefined) {
66
- delete process.env[ENV_KEY];
67
- } else {
68
- process.env[ENV_KEY] = prevEnv;
69
- }
70
- _resetForTests();
71
- });
72
-
73
- describe("recordPlanLimitStatus + emitPlanLimitNag (warning path)", () => {
74
- it("renders a one-line warning when planLimits has a ≥80% entry", () => {
75
- const sink = makeSink();
76
- recordPlanLimitStatus({
77
- ok: true,
78
- planLimits: {
79
- users: { used: 9, limit: 10, over: false },
80
- },
81
- });
82
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
83
- expect(sink.lines).toHaveLength(1);
84
- expect(sink.lines[0]).toMatch(/HQ free plan/i);
85
- expect(sink.lines[0]).toMatch(/users at 9\/10 \(90%\)/);
86
- expect(sink.lines[0]).toContain(PLAN_LIMIT_UPGRADE_URL);
87
- });
88
-
89
- it("produces no output when planLimits metadata is absent", () => {
90
- const sink = makeSink();
91
- recordPlanLimitStatus({ ok: true, items: [] });
92
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
93
- expect(sink.lines).toHaveLength(0);
94
- });
95
-
96
- it("produces no output when recordPlanLimitStatus was never called", () => {
97
- const sink = makeSink();
98
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
99
- expect(sink.lines).toHaveLength(0);
100
- });
101
-
102
- it("lists the worst resource when multiple ≥80% entries exist", () => {
103
- const sink = makeSink();
104
- recordPlanLimitStatus({
105
- planLimits: {
106
- users: { used: 8, limit: 10, over: false },
107
- secrets: { used: 19, limit: 20, over: false },
108
- },
109
- });
110
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
111
- expect(sink.lines).toHaveLength(1);
112
- expect(sink.lines[0]).toMatch(/secrets at 19\/20/);
113
- });
114
- });
115
-
116
- describe("malformed planLimits", () => {
117
- it("ignores wrong types — no output, no throw", () => {
118
- const sink = makeSink();
119
- expect(() =>
120
- recordPlanLimitStatus({
121
- planLimits: {
122
- users: { used: "9", limit: 10, over: false },
123
- secrets: { used: 5, limit: "10", over: true },
124
- agents: null,
125
- integrations: "nope",
126
- },
127
- }),
128
- ).not.toThrow();
129
- expect(() =>
130
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() }),
131
- ).not.toThrow();
132
- expect(sink.lines).toHaveLength(0);
133
- });
134
-
135
- it("ignores non-object planLimits", () => {
136
- const sink = makeSink();
137
- recordPlanLimitStatus({ planLimits: "not-an-object" });
138
- recordPlanLimitStatus({ planLimits: [1, 2, 3] });
139
- recordPlanLimitStatus({ planLimits: null });
140
- recordPlanLimitStatus(null);
141
- recordPlanLimitStatus("string");
142
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
143
- expect(sink.lines).toHaveLength(0);
144
- });
145
-
146
- it("accepts only well-formed entries and still emits when mixed", () => {
147
- const sink = makeSink();
148
- recordPlanLimitStatus({
149
- planLimits: {
150
- bad: { used: "x", limit: 1, over: false },
151
- users: { used: 9, limit: 10, over: false },
152
- },
153
- });
154
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
155
- expect(sink.lines).toHaveLength(1);
156
- expect(sink.lines[0]).toMatch(/users at 9\/10/);
157
- });
158
- });
159
-
160
- describe("once-per-session dedupe", () => {
161
- it("second emit prints nothing for the warning path", () => {
162
- const sink = makeSink();
163
- const statePath = tmpStatePath();
164
- recordPlanLimitStatus({
165
- planLimits: { users: { used: 9, limit: 10, over: false } },
166
- });
167
- emitPlanLimitNag({ write: sink.write, statePath });
168
- emitPlanLimitNag({ write: sink.write, statePath });
169
- expect(sink.lines).toHaveLength(1);
170
- });
171
- });
172
-
173
- describe("over-limit boxed notice", () => {
174
- it("prints a boxed over-limit notice listing over resources", () => {
175
- const sink = makeSink();
176
- const statePath = tmpStatePath();
177
- recordPlanLimitStatus({
178
- planLimits: {
179
- users: { used: 11, limit: 10, over: true },
180
- secrets: { used: 5, limit: 20, over: false },
181
- },
182
- requiredPlan: "agents-500",
183
- });
184
- emitPlanLimitNag({
185
- write: sink.write,
186
- statePath,
187
- now: () => new Date("2026-03-01T12:00:00.000Z"),
188
- });
189
- expect(sink.lines).toHaveLength(1);
190
- const out = sink.lines[0] ?? "";
191
- expect(out).toMatch(/plan limit exceeded/i);
192
- expect(out).toMatch(/users:\s*11\/10/);
193
- expect(out).toContain(PLAN_LIMIT_UPGRADE_URL);
194
- expect(out).toMatch(/[┌└│─]/);
195
- // Non-over resources should not appear in the over box resource list.
196
- expect(out).not.toMatch(/secrets:\s*5\/20/);
197
- });
198
-
199
- it("second emit same day (fresh shownAt in statePath) prints nothing", () => {
200
- const sink = makeSink();
201
- const statePath = tmpStatePath();
202
- const now = new Date("2026-03-01T12:00:00.000Z");
203
- fs.writeFileSync(
204
- statePath,
205
- JSON.stringify({ shownAt: now.getTime() - 60 * 60 * 1000 }),
206
- );
207
- recordPlanLimitStatus({
208
- planLimits: { users: { used: 11, limit: 10, over: true } },
209
- });
210
- emitPlanLimitNag({ write: sink.write, statePath, now: () => now });
211
- expect(sink.lines).toHaveLength(0);
212
- });
213
-
214
- it("shownAt older than 24h prints again", () => {
215
- const sink = makeSink();
216
- const statePath = tmpStatePath();
217
- const now = new Date("2026-03-02T13:00:00.000Z");
218
- fs.writeFileSync(
219
- statePath,
220
- JSON.stringify({
221
- shownAt: now.getTime() - 25 * 60 * 60 * 1000,
222
- }),
223
- );
224
- recordPlanLimitStatus({
225
- planLimits: { users: { used: 11, limit: 10, over: true } },
226
- });
227
- emitPlanLimitNag({ write: sink.write, statePath, now: () => now });
228
- expect(sink.lines).toHaveLength(1);
229
- expect(sink.lines[0]).toMatch(/plan limit exceeded/i);
230
- });
231
-
232
- it("session-dedupes over notice even without state file", () => {
233
- const sink = makeSink();
234
- // Unwritable parent: skip persistence but still session-dedupe.
235
- const statePath = unwritableStatePath();
236
- recordPlanLimitStatus({
237
- planLimits: { users: { used: 11, limit: 10, over: true } },
238
- });
239
- emitPlanLimitNag({
240
- write: sink.write,
241
- statePath,
242
- now: () => new Date("2026-03-01T12:00:00.000Z"),
243
- });
244
- emitPlanLimitNag({
245
- write: sink.write,
246
- statePath,
247
- now: () => new Date("2026-03-01T12:00:00.000Z"),
248
- });
249
- expect(sink.lines).toHaveLength(1);
250
- });
251
- });
252
-
253
- describe("env off-switch", () => {
254
- it("HQ_NO_PLAN_LIMIT_NAG=1 produces no output", () => {
255
- process.env[ENV_KEY] = "1";
256
- const sink = makeSink();
257
- recordPlanLimitStatus({
258
- planLimits: {
259
- users: { used: 11, limit: 10, over: true },
260
- },
261
- });
262
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
263
- expect(sink.lines).toHaveLength(0);
264
- });
265
- });
266
-
267
- describe("resilience + exit-code neutrality", () => {
268
- it("emit never throws even when statePath is unwritable", () => {
269
- const sink = makeSink();
270
- const statePath = unwritableStatePath();
271
- recordPlanLimitStatus({
272
- planLimits: { users: { used: 12, limit: 10, over: true } },
273
- });
274
- expect(() =>
275
- emitPlanLimitNag({
276
- write: sink.write,
277
- statePath,
278
- now: () => new Date("2026-03-01T12:00:00.000Z"),
279
- }),
280
- ).not.toThrow();
281
- // Still attempted to print (write may succeed even if state write fails).
282
- expect(sink.lines.length).toBeGreaterThanOrEqual(0);
283
- });
284
-
285
- it("does not touch process.exitCode", () => {
286
- const prev = process.exitCode;
287
- process.exitCode = 0;
288
- try {
289
- const sink = makeSink();
290
- recordPlanLimitStatus({
291
- planLimits: { users: { used: 9, limit: 10, over: false } },
292
- });
293
- emitPlanLimitNag({ write: sink.write, statePath: tmpStatePath() });
294
- expect(process.exitCode).toBe(0);
295
-
296
- process.exitCode = 1;
297
- _resetForTests();
298
- recordPlanLimitStatus({
299
- planLimits: { users: { used: 11, limit: 10, over: true } },
300
- });
301
- emitPlanLimitNag({
302
- write: sink.write,
303
- statePath: tmpStatePath(),
304
- now: () => new Date("2026-04-01T00:00:00.000Z"),
305
- });
306
- expect(process.exitCode).toBe(1);
307
- } finally {
308
- process.exitCode = prev;
309
- }
310
- });
311
-
312
- it("recordPlanLimitStatus never throws on garbage input", () => {
313
- expect(() => recordPlanLimitStatus(undefined)).not.toThrow();
314
- expect(() => recordPlanLimitStatus(42)).not.toThrow();
315
- expect(() => recordPlanLimitStatus([])).not.toThrow();
316
- });
317
- });