@indigoai-us/hq-cloud 5.11.3 → 5.13.0

package/dist/s3.test.js

@@ -12,6 +12,10 @@ import * as path from "path";
 // Capture every command sent to the S3Client across the test suite. Cleared
 // in beforeEach so per-test assertions don't leak from neighbours.
 const sentCommands = [];
+// Per-test override for the ListObjectsV2Command response. Tests of
+// `listRemoteFiles` push the Contents shape they want returned; the default
+// is an empty bucket. Reset in beforeEach so cross-test leakage is impossible.
+let nextListObjectsResponse = { Contents: [] };
 vi.mock("@aws-sdk/client-s3", () => {
     class FakeS3Client {
         async send(command) {
@@ -24,6 +28,9 @@ vi.mock("@aws-sdk/client-s3", () => {
             if (command.constructor.name === "PutObjectCommand") {
                 return { ETag: '"fake-etag"' };
             }
+            if (command.constructor.name === "ListObjectsV2Command") {
+                return nextListObjectsResponse;
+            }
             return {};
         }
     }
@@ -69,7 +76,7 @@ vi.mock("@aws-sdk/client-s3", () => {
         DeleteObjectCommand,
     };
 });
-import { uploadFile } from "./s3.js";
+import { uploadFile, listRemoteFiles } from "./s3.js";
 function makeCtx() {
     return {
         uid: "cmp_TEST",
@@ -161,4 +168,41 @@ describe("uploadFile", () => {
         expect(meta["created-by-sub"]).toBeUndefined();
     });
 });
+describe("listRemoteFiles", () => {
+    beforeEach(() => {
+        sentCommands.length = 0;
+        nextListObjectsResponse = { Contents: [] };
+    });
+    // Regression: pre-fix, `if (!obj.Key || !obj.Size) continue;` skipped every
+    // 0-byte object on the listing. The user's personal vault stored
+    // `projects/.gitkeep` (a 0-byte placeholder) and the sync pull plan never
+    // saw it — the file existed on S3 but was invisible to the runner, so the
+    // box never created `projects/` on first pull. The fix narrows the guard
+    // to `if (!obj.Key) continue;` so Size === 0 passes through with its real
+    // value (handled `?? 0` to keep TS Size?: number happy).
+    it("includes 0-byte objects in the result (no implicit skip-on-empty)", async () => {
+        nextListObjectsResponse = {
+            Contents: [
+                { Key: "projects/.gitkeep", Size: 0, LastModified: new Date(), ETag: '"d41d8cd98f00b204e9800998ecf8427e"' },
+                { Key: "AGENTS.md", Size: 100, LastModified: new Date(), ETag: '"e1"' },
+            ],
+        };
+        const files = await listRemoteFiles(makeCtx());
+        expect(files).toHaveLength(2);
+        const gitkeep = files.find((f) => f.key === "projects/.gitkeep");
+        expect(gitkeep).toBeDefined();
+        expect(gitkeep.size).toBe(0);
+    });
+    it("still skips Contents entries with no Key (defensive against malformed responses)", async () => {
+        nextListObjectsResponse = {
+            Contents: [
+                { Size: 100, LastModified: new Date(), ETag: '"e1"' }, // no Key
+                { Key: "real.md", Size: 100, LastModified: new Date(), ETag: '"e2"' },
+            ],
+        };
+        const files = await listRemoteFiles(makeCtx());
+        expect(files).toHaveLength(1);
+        expect(files[0].key).toBe("real.md");
+    });
+});
 //# sourceMappingURL=s3.test.js.map

package/dist/s3.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"s3.test.js","sourceRoot":"","sources":["../src/s3.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,4EAA4E;AAC5E,mEAAmE;AACnE,MAAM,YAAY,GAA4D,EAAE,CAAC;AAEjF,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACjC,MAAM,YAAY;QAChB,KAAK,CAAC,IAAI,CAAC,OAA0E;YACnF,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5E,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACrD,oEAAoE;gBACpE,qEAAqE;gBACrE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACpD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YACjC,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;KACF;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,gBAAgB;QACD;QAAnB,YAAmB,KAA8B;YAA9B,UAAK,GAAL,KAAK,CAAyB;QAAG,CAAC;KACtD;IACD,MAAM,gBAAgB;QACD;QAAnB,YAAmB,KAA8B;YAA9B,UAAK,GAAL,KAAK,CAAyB;QAAG,CAAC;KACtD;IACD,MAAM,iBAAiB;QACF;QAAnB,YAAmB,KAA8B;YAA9B,UAAK,GAAL,KAAK,CAAyB;QAAG,CAAC;KACtD;IACD,MAAM,oBAAoB;QACL;QAAnB,YAAmB,KAA8B;YAA9B,UAAK,GAAL,KAAK,CAAyB;QAAG,CAAC;KACtD;IACD,MAAM,mBAAmB;QACJ;QAAnB,YAAmB,KAA8B;YAA9B,UAAK,GAAL,KAAK,CAAyB;QAAG,CAAC;KACtD;IACD,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,gBAAgB;QAChB,gBAAgB;QAChB,iBAAiB;QACjB,oBAAoB;QACpB,mBAAmB;KACpB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,SAAS,OAAO;IACd,OAAO;QACL,GAAG,EAAE,UAAU;QACf,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,mBAAmB;QAC/B,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE;YACX,WAAW,EAAE,WAAW;YACxB,eAAe,EAAE,QAAQ;YACzB,YAAY,EAAE,SAAS;SACxB;QACD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACrF,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAE5D,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE;YAC1D,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,mBAAmB;SAC3B,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAI,CAAC,KAAK,CAAC,QAAkC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,4BAA4B;QAC5B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAElF,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACjE,MAAM,YAAY,GAAI,iBAAsD,CAAC,SAAS,CAAC;QACvF,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,6CAA6C;QAC7C,KAAK,YAAY,CAAC;QAElB,uEAAuE;QACvE,qEAAqE;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;YAC/C,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,mBAAmB;SAC3B,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAI,CAAC,KAAK,CAAC,QAAkC,CAAC;QAC3D,sEAAsE;QACtE,gEAAgE;QAChE,gEAAgE;QAChE,sEAAsE;QACtE,iBAAiB;QACjB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,uEAAuE;QACvE,wEAAwE;QACxE,wBAAwB;QACxB,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;YACjD,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,kBAAkB;SAC1B,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,GAAI,CAAC,KAAK,CAAC,QAAkC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"s3.test.js","sourceRoot":"","sources":["../src/s3.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,4EAA4E;AAC5E,mEAAmE;AACnE,MAAM,YAAY,GAA4D,EAAE,CAAC;AAEjF,oEAAoE;AACpE,4EAA4E;AAC5E,+EAA+E;AAC/E,IAAI,uBAAuB,GAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAExE,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACjC,MAAM,YAAY;QAChB,KAAK,CAAC,IAAI,CAAC,OAA0E;YACnF,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5E,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACrD,oEAAoE;gBACpE,qEAAqE;gBACrE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACpD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YACjC,CAAC;YACD,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBACxD,OAAO,uBAAuB,CAAC;YACjC,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;KACF;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,gBAAgB;QACD;QAAnB,YAAmB,KAA8B;YAA9B,UAAK,GAAL,KAAK,CAAyB;QAAG,CAAC;KACtD;IACD,MAAM,gBAAgB;QACD;QAAnB,YAAmB,KAA8B;YAA9B,UAAK,GAAL,KAAK,CAAyB;QAAG,CAAC;KACtD;IACD,MAAM,iBAAiB;QACF;QAAnB,YAAmB,KAA8B;YAA9B,UAAK,GAAL,KAAK,CAAyB;QAAG,CAAC;KACtD;IACD,MAAM,oBAAoB;QACL;QAAnB,YAAmB,KAA8B;YAA9B,UAAK,GAAL,KAAK,CAAyB;QAAG,CAAC;KACtD;IACD,MAAM,mBAAmB;QACJ;QAAnB,YAAmB,KAA8B;YAA9B,UAAK,GAAL,KAAK,CAAyB;QAAG,CAAC;KACtD;IACD,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,gBAAgB;QAChB,gBAAgB;QAChB,iBAAiB;QACjB,oBAAoB;QACpB,mBAAmB;KACpB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAGtD,SAAS,OAAO;IACd,OAAO;QACL,GAAG,EAAE,UAAU;QACf,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,mBAAmB;QAC/B,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE;YACX,WAAW,EAAE,WAAW;YACxB,eAAe,EAAE,QAAQ;YACzB,YAAY,EAAE,SAAS;SACxB;QACD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACrF,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAE5D,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE;YAC1D,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,mBAAmB;SAC3B,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAI,CAAC,KAAK,CAAC,QAAkC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,4BAA4B;QAC5B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAElF,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACjE,MAAM,YAAY,GAAI,iBAAsD,CAAC,SAAS,CAAC;QACvF,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,6CAA6C;QAC7C,KAAK,YAAY,CAAC;QAElB,uEAAuE;QACvE,qEAAqE;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;YAC/C,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,mBAAmB;SAC3B,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAI,CAAC,KAAK,CAAC,QAAkC,CAAC;QAC3D,sEAAsE;QACtE,gEAAgE;QAChE,gEAAgE;QAChE,sEAAsE;QACtE,iBAAiB;QACjB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,uEAAuE;QACvE,wEAAwE;QACxE,wBAAwB;QACxB,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;YACjD,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,kBAAkB;SAC1B,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,GAAI,CAAC,KAAK,CAAC,QAAkC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,UAAU,CAAC,GAAG,EAAE;QACd,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,uBAAuB,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,iEAAiE;IACjE,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,yDAAyD;IACzD,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,uBAAuB,GAAG;YACxB,QAAQ,EAAE;gBACR,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,oCAAoC,EAAE;gBAC3G,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aACxE;SACF,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,uBAAuB,GAAG;YACxB,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS;gBAChE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aACtE;SACF,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cloud",
-  "version": "5.11.3",
+  "version": "5.13.0",
   "description": "HQ by Indigo cloud sync engine — bidirectional S3 sync for mobile access",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/bin/sync-runner.test.ts

@@ -8,6 +8,9 @@
  */
 
 import { describe, it, expect, vi, beforeEach } from "vitest";
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
 import { runRunner } from "./sync-runner.js";
 import type {
   RunnerEvent,
@@ -1417,6 +1420,161 @@ describe("personal slot fanout", () => {
       expect(keys).not.toContain("journalSlug");
     }
   });
+
+  // ── Push-side personal-vault contract (Slice 2 / personal-vault scope) ────
+  //
+  // Symmetric to the pull-side tests (A/B/C) above. The personal-vault scope
+  // on push is an EXCLUSION list mirroring the Rust hq-sync first-push in
+  // src-tauri/src/commands/personal.rs::PERSONAL_VAULT_EXCLUDED_TOP_LEVEL:
+  // .git/, companies/, core/, data/, personal/, repos/, workspace/ are
+  // skipped; every other top-level entry under hq_root is shared. The
+  // runner enforces this by passing pre-filtered top-level paths to share()
+  // along with personalMode: true + journalSlug: "personal" so share()
+  // keys files hq-root-relative and writes the personal journal.
+
+  it("D: shareFn invoked with personalMode: true + journalSlug: 'personal' for personal slot (push side)", async () => {
+    const shareSpy = vi.fn().mockResolvedValue(defaultShareResult());
+    const tmpHqRoot = fs.mkdtempSync(path.join(os.tmpdir(), "hq-runner-test-"));
+    try {
+      // Realistic personal-vault content so the exclusion-filter has something
+      // to keep and something to drop. (Other tests pin exact contents — this
+      // one only cares that personalMode/journalSlug are passed.)
+      fs.mkdirSync(path.join(tmpHqRoot, "knowledge"), { recursive: true });
+      fs.writeFileSync(path.join(tmpHqRoot, "knowledge", "notes.md"), "note");
+
+      const deps = makeDeps({
+        createVaultClient: () =>
+          makeVaultStub({
+            memberships: [{ companyUid: "cmp_a" }],
+            entityGet: (uid: string) =>
+              Promise.resolve({ uid, slug: "acme" } as unknown as EntityInfo),
+            listPersons: () => Promise.resolve([olderPerson]),
+          }),
+        share: shareSpy,
+      });
+
+      const code = await runRunner(
+        ["--companies", "--direction", "both", "--hq-root", tmpHqRoot],
+        deps,
+      );
+      expect(code).toBe(0);
+
+      const personalCall = (shareSpy.mock.calls as Array<[ShareOptions]>).find(
+        (c) => c[0].company?.startsWith("prs_"),
+      );
+      expect(personalCall).toBeDefined();
+      const personalArgs = personalCall![0] as ShareOptions & {
+        personalMode?: boolean;
+        journalSlug?: string;
+      };
+      expect(personalArgs.personalMode).toBe(true);
+      expect(personalArgs.journalSlug).toBe("personal");
+    } finally {
+      fs.rmSync(tmpHqRoot, { recursive: true, force: true });
+    }
+  });
+
+  it("E: shareFn paths for personal slot = top-level entries under hq_root minus PERSONAL_VAULT_EXCLUDED_TOP_LEVEL", async () => {
+    const shareSpy = vi.fn().mockResolvedValue(defaultShareResult());
+    const tmpHqRoot = fs.mkdtempSync(path.join(os.tmpdir(), "hq-runner-test-"));
+    try {
+      // Included top-level entries — must appear in shareFn paths.
+      fs.mkdirSync(path.join(tmpHqRoot, ".claude"));
+      fs.mkdirSync(path.join(tmpHqRoot, "knowledge"));
+      fs.mkdirSync(path.join(tmpHqRoot, "modules"));
+      fs.mkdirSync(path.join(tmpHqRoot, ".agents"));
+      fs.writeFileSync(path.join(tmpHqRoot, "README.md"), "readme");
+      // Excluded top-level entries — must be filtered out.
+      fs.mkdirSync(path.join(tmpHqRoot, ".git"));
+      fs.mkdirSync(path.join(tmpHqRoot, "companies"));
+      fs.mkdirSync(path.join(tmpHqRoot, "core"));
+      fs.mkdirSync(path.join(tmpHqRoot, "data"));
+      fs.mkdirSync(path.join(tmpHqRoot, "personal"));
+      fs.mkdirSync(path.join(tmpHqRoot, "repos"));
+      fs.mkdirSync(path.join(tmpHqRoot, "workspace"));
+
+      const deps = makeDeps({
+        createVaultClient: () =>
+          makeVaultStub({
+            memberships: [{ companyUid: "cmp_a" }],
+            entityGet: (uid: string) =>
+              Promise.resolve({ uid, slug: "acme" } as unknown as EntityInfo),
+            listPersons: () => Promise.resolve([olderPerson]),
+          }),
+        share: shareSpy,
+      });
+
+      const code = await runRunner(
+        ["--companies", "--direction", "push", "--hq-root", tmpHqRoot],
+        deps,
+      );
+      expect(code).toBe(0);
+
+      const personalCall = (shareSpy.mock.calls as Array<[ShareOptions]>).find(
+        (c) => c[0].company?.startsWith("prs_"),
+      );
+      expect(personalCall).toBeDefined();
+      const personalArgs = personalCall![0];
+
+      // Paths must be absolute, rooted at tmpHqRoot, and contain exactly the
+      // included entries — no order guarantee from fs.readdirSync, so compare
+      // as a set of basenames. NOTE: `core/` is now INCLUDED in the personal
+      // vault (user directive 2026-05-13) — it ships real project content
+      // (policies/, settings/, skills/, workers/, the hq-core scaffold), so
+      // dropping it on first-push was leaving the box without the rules and
+      // hooks the user expected. The hq-root `core.yaml` identity marker is
+      // filtered separately by the anchored `/core.yaml` DEFAULT_IGNORES
+      // rule, NOT by exclusion at the path level.
+      const basenames = personalArgs.paths.map((p) => path.basename(p)).sort();
+      expect(basenames).toEqual([".agents", ".claude", "README.md", "core", "knowledge", "modules"]);
+      for (const p of personalArgs.paths) {
+        expect(path.isAbsolute(p)).toBe(true);
+        expect(p.startsWith(tmpHqRoot)).toBe(true);
+      }
+      // Excluded entries must NOT appear.
+      for (const forbidden of [".git", "companies", "data", "personal", "repos", "workspace"]) {
+        expect(basenames).not.toContain(forbidden);
+      }
+    } finally {
+      fs.rmSync(tmpHqRoot, { recursive: true, force: true });
+    }
+  });
+
+  it("F: shareFn paths for company slots stay [hqRoot/companies/{slug}] with no personalMode/journalSlug keys", async () => {
+    const shareSpy = vi.fn().mockResolvedValue(defaultShareResult());
+    const tmpHqRoot = fs.mkdtempSync(path.join(os.tmpdir(), "hq-runner-test-"));
+    try {
+      const deps = makeDeps({
+        createVaultClient: () =>
+          makeVaultStub({
+            memberships: [{ companyUid: "cmp_a" }],
+            entityGet: (uid: string) =>
+              Promise.resolve({ uid, slug: "acme" } as unknown as EntityInfo),
+            listPersons: () => Promise.resolve([olderPerson]),
+          }),
+        share: shareSpy,
+      });
+
+      const code = await runRunner(
+        ["--companies", "--direction", "push", "--hq-root", tmpHqRoot],
+        deps,
+      );
+      expect(code).toBe(0);
+
+      const companyCalls = (shareSpy.mock.calls as Array<[ShareOptions]>).filter(
+        (c) => c[0].company?.startsWith("cmp_"),
+      );
+      expect(companyCalls.length).toBeGreaterThan(0);
+      for (const [args] of companyCalls) {
+        expect(args.paths).toEqual([path.join(tmpHqRoot, "companies", "acme")]);
+        const keys = Object.keys(args);
+        expect(keys).not.toContain("personalMode");
+        expect(keys).not.toContain("journalSlug");
+      }
+    } finally {
+      fs.rmSync(tmpHqRoot, { recursive: true, force: true });
+    }
+  });
 });
 
 // ---------------------------------------------------------------------------

package/src/bin/sync-runner.ts

@@ -115,6 +115,64 @@ const DEFAULT_VAULT_API_URL =
 
 const DEFAULT_HQ_ROOT = path.join(os.homedir(), "hq");
 
+// ---------------------------------------------------------------------------
+// Personal-vault scope (exclusion list)
+// ---------------------------------------------------------------------------
+//
+// Top-level directories under `hq_root/` that the personal-vault push MUST
+// NOT upload. Mirrors the Rust constant of the same name in
+// `hq-sync/src-tauri/src/commands/personal.rs` so the Tauri menubar's
+// first-push and this Node runner's steady-state push enforce identical
+// scope. Every other top-level entry under hq_root (e.g. `.claude/`,
+// `knowledge/`, `modules/`, `README.md`, `.codex/`) is included, subject
+// to the gitignore/hqignore filter that share() applies per-file.
+//
+// Rationale per entry:
+//   - `.git`: a repo's internal state is large, opaque, and useless after
+//     sync; .gitignore alone doesn't cover `.git/` because it's the repo
+//     itself, not a tracked path.
+//   - `companies/`: synced separately by the runner's per-membership fanout;
+//     do not double-write into the personal vault.
+//   - `data/`, `personal/`, `repos/`, `workspace/`: per user directive —
+//     heavy local-only content (machine-state, datasets, cloned remotes,
+//     session threads) that has no business in the personal vault.
+//
+// Note: `core/` was previously excluded but is now INCLUDED (user directive
+// 2026-05-13). It ships the hq-core scaffold — policies/, settings/,
+// skills/, workers/, plus the rules manifest at core/core.yaml — all real
+// project content that the box needs. The hq-root identity marker
+// `core.yaml` (at hq_root, distinct from `core/core.yaml`) is filtered
+// separately by the root-anchored `/core.yaml` DEFAULT_IGNORES rule.
+export const PERSONAL_VAULT_EXCLUDED_TOP_LEVEL: readonly string[] = [
+  ".git",
+  "companies",
+  "data",
+  "personal",
+  "repos",
+  "workspace",
+];
+
+/**
+ * Compute absolute paths to share for the personal vault: every top-level
+ * entry under `hqRoot` whose basename is NOT in `PERSONAL_VAULT_EXCLUDED_TOP_LEVEL`.
+ * Mirrors the Rust `is_personal_vault_path` predicate (just hoisted to the
+ * top-level step). Order is whatever `fs.readdirSync` returns — share()
+ * doesn't care, and the per-file walk inside share() handles recursion
+ * uniformly. Missing hqRoot returns []; callers treat that as "no personal
+ * content to push" rather than a hard error.
+ */
+export function computePersonalVaultPaths(hqRoot: string): string[] {
+  let entries: string[];
+  try {
+    entries = fs.readdirSync(hqRoot);
+  } catch {
+    return [];
+  }
+  return entries
+    .filter((name) => !PERSONAL_VAULT_EXCLUDED_TOP_LEVEL.includes(name))
+    .map((name) => path.join(hqRoot, name));
+}
+
 // ---------------------------------------------------------------------------
 // Event protocol
 // ---------------------------------------------------------------------------
@@ -736,13 +794,17 @@ export async function runRunner(
       };
 
       // Push first so a subsequent pull doesn't overwrite files we were about
-      // to broadcast. Uses the walk-everything-under-companies/{slug}/ entry
-      // point with `skipUnchanged` so we don't re-upload files that haven't
-      // changed since the last sync.
+      // to broadcast. Company targets walk `companies/{slug}/`; the personal
+      // target walks every top-level entry under hqRoot minus the exclusion
+      // list (see PERSONAL_VAULT_EXCLUDED_TOP_LEVEL). `skipUnchanged: true`
+      // keeps both cases efficient on re-runs.
       if (doPush) {
         activePhase = "push";
+        const pushPaths = target.personalMode === true
+          ? computePersonalVaultPaths(parsed.hqRoot)
+          : [path.join(parsed.hqRoot, "companies", target.slug)];
         pushResult = await shareFn({
-          paths: [path.join(parsed.hqRoot, "companies", target.slug)],
+          paths: pushPaths,
           company: target.uid,
           vaultConfig,
           hqRoot: parsed.hqRoot,
@@ -755,6 +817,12 @@ export async function runRunner(
           propagateDeletes: true,
           onEvent: tagAndEmit,
           ...(uploadAuthor ? { author: uploadAuthor } : {}),
+          // Mirror the pull-side seam: only spread these for the personal
+          // slot so company-target args stay identical to the pre-Slice-2
+          // shape (the "no personalMode/journalSlug keys" regression test
+          // in sync-runner.test.ts pins that contract).
+          ...(target.personalMode !== undefined ? { personalMode: target.personalMode } : {}),
+          ...(target.journalSlug !== undefined ? { journalSlug: target.journalSlug } : {}),
         });
       }
 

package/src/cli/share.test.ts

@@ -1082,4 +1082,150 @@ describe("share", () => {
     const journal = JSON.parse(fs.readFileSync(journalPath, "utf-8"));
     expect(journal.files["flaky.md"]).toBeDefined();
   });
+
+  // ── personalMode ───────────────────────────────────────────────────────────
+  //
+  // The personal vault (slug "personal" in the runner's fanout plan) shares
+  // files from hqRoot DIRECTLY — not from hqRoot/companies/<slug>/. Mirrors
+  // the Rust hq-sync first-push contract in src-tauri/src/commands/personal.rs:
+  // syncRoot = hqRoot, journal slug = "personal", remote keys are hq-root-
+  // relative (e.g. ".claude/skills/foo.md", "knowledge/notes.md"). The
+  // exclusion list itself is enforced by the runner (sync-runner.ts) by only
+  // passing in the allowed top-level directories — share() trusts its
+  // `paths` input.
+  describe("personalMode", () => {
+    it("personalMode=true keys files hq-root-relative, not companies/{slug}/-relative", async () => {
+      fs.mkdirSync(path.join(tmpDir, ".claude", "skills"), { recursive: true });
+      fs.mkdirSync(path.join(tmpDir, "knowledge"), { recursive: true });
+      fs.writeFileSync(path.join(tmpDir, ".claude", "skills", "foo.md"), "skill");
+      fs.writeFileSync(path.join(tmpDir, "knowledge", "notes.md"), "note");
+
+      const result = await share({
+        paths: [
+          path.join(tmpDir, ".claude"),
+          path.join(tmpDir, "knowledge"),
+        ],
+        company: "acme",
+        vaultConfig: mockConfig,
+        hqRoot: tmpDir,
+        personalMode: true,
+        journalSlug: "personal",
+      });
+
+      expect(result.filesUploaded).toBe(2);
+      // Remote keys must be hq-root-relative, NOT prefixed with companies/personal/
+      const keys = vi.mocked(uploadFile).mock.calls.map((c) => c[2]);
+      expect(keys.sort()).toEqual([".claude/skills/foo.md", "knowledge/notes.md"]);
+    });
+
+    it("personalMode=true writes journal under the personal journalSlug", async () => {
+      fs.mkdirSync(path.join(tmpDir, "knowledge"), { recursive: true });
+      fs.writeFileSync(path.join(tmpDir, "knowledge", "notes.md"), "note");
+
+      await share({
+        paths: [path.join(tmpDir, "knowledge")],
+        company: "acme",
+        vaultConfig: mockConfig,
+        hqRoot: tmpDir,
+        personalMode: true,
+        journalSlug: "personal",
+      });
+
+      // Personal journal is keyed "personal", NOT the company's ctx.slug ("acme")
+      const personalJournalPath = path.join(stateDir, "sync-journal.personal.json");
+      const acmeJournalPath = path.join(stateDir, "sync-journal.acme.json");
+      expect(fs.existsSync(personalJournalPath)).toBe(true);
+      expect(fs.existsSync(acmeJournalPath)).toBe(false);
+
+      const journal = JSON.parse(fs.readFileSync(personalJournalPath, "utf-8"));
+      expect(journal.files["knowledge/notes.md"]).toBeDefined();
+    });
+
+    it("personalMode=true accepts files outside companies/<slug>/ (companion to the company-folder rejection)", async () => {
+      // Same fixture as the "skips files outside the company folder" test
+      // above — file at hqRoot root, NOT under companies/acme/. Without
+      // personalMode this is rejected with a "outside company folder" warning;
+      // with personalMode=true the file IS uploaded because syncRoot=hqRoot.
+      const outsideFile = path.join(tmpDir, "stray.md");
+      fs.writeFileSync(outsideFile, "stray");
+
+      const result = await share({
+        paths: [outsideFile],
+        company: "acme",
+        vaultConfig: mockConfig,
+        hqRoot: tmpDir,
+        personalMode: true,
+        journalSlug: "personal",
+      });
+
+      expect(result.filesUploaded).toBe(1);
+      expect(uploadFile).toHaveBeenCalledWith(expect.anything(), outsideFile, "stray.md");
+    });
+
+    it("uploads 0-byte files (e.g. .gitkeep placeholders)", async () => {
+      // Regression for the bug where `projects/.gitkeep` (0 bytes) was
+      // present locally + on the listing target but `listRemoteFiles`
+      // silently skipped 0-byte objects via `!obj.Size`. Same class of bug
+      // can also bite uploads if any size guard treats 0 as falsy. Pin the
+      // push side here: a 0-byte file MUST upload like any other.
+      fs.mkdirSync(path.join(tmpDir, "projects"), { recursive: true });
+      const gitkeep = path.join(tmpDir, "projects", ".gitkeep");
+      fs.writeFileSync(gitkeep, "");
+      expect(fs.statSync(gitkeep).size).toBe(0);
+
+      const result = await share({
+        paths: [path.join(tmpDir, "projects")],
+        company: "acme",
+        vaultConfig: mockConfig,
+        hqRoot: tmpDir,
+        personalMode: true,
+        journalSlug: "personal",
+      });
+
+      expect(result.filesUploaded).toBe(1);
+      expect(uploadFile).toHaveBeenCalledWith(expect.anything(), gitkeep, "projects/.gitkeep");
+    });
+
+    it("personalMode=true + skipUnchanged honors the personal-journal hash", async () => {
+      fs.mkdirSync(path.join(tmpDir, "knowledge"), { recursive: true });
+      const testFile = path.join(tmpDir, "knowledge", "stable.md");
+      fs.writeFileSync(testFile, "stable content");
+
+      const { hashFile } = await import("../journal.js");
+      const hash = hashFile(testFile);
+
+      // Pre-seed the PERSONAL journal (not the per-company one) so the
+      // skipUnchanged short-circuit fires for the right slug.
+      const personalJournalPath = path.join(stateDir, "sync-journal.personal.json");
+      fs.writeFileSync(
+        personalJournalPath,
+        JSON.stringify({
+          version: "1",
+          lastSync: new Date().toISOString(),
+          files: {
+            "knowledge/stable.md": {
+              hash,
+              size: 15,
+              syncedAt: new Date().toISOString(),
+              direction: "up",
+            },
+          },
+        }),
+      );
+
+      const result = await share({
+        paths: [path.join(tmpDir, "knowledge")],
+        company: "acme",
+        vaultConfig: mockConfig,
+        hqRoot: tmpDir,
+        personalMode: true,
+        journalSlug: "personal",
+        skipUnchanged: true,
+      });
+
+      expect(result.filesUploaded).toBe(0);
+      expect(result.filesSkipped).toBe(1);
+      expect(uploadFile).not.toHaveBeenCalled();
+    });
+  });
 });

package/src/cli/share.ts

@@ -193,6 +193,23 @@ export interface ShareOptions {
    * this engine. The runner pipes Cognito idToken claims through here.
    */
   author?: UploadAuthor;
+  /**
+   * When true, share() targets the caller's person-entity bucket: syncRoot
+   * is `hqRoot` itself (NOT `hqRoot/companies/<slug>/`), so remote keys are
+   * hq-root-relative (e.g. ".claude/skills/foo.md", "knowledge/notes.md") to
+   * match the Rust hq-sync first-push contract in
+   * `src-tauri/src/commands/personal.rs`. The exclusion of top-level dirs
+   * (.git, companies, core, data, personal, repos, workspace) is enforced
+   * by the runner — share() trusts its `paths` input.
+   */
+  personalMode?: boolean;
+  /**
+   * Override for the per-slug journal file name. Defaults to `ctx.slug`. The
+   * runner passes `journalSlug: "personal"` for the personal slot so the TS
+   * push and the Rust personal first-push share idempotency state under one
+   * `sync-journal.personal.json` file.
+   */
+  journalSlug?: string;
 }
 
 export interface ShareResult {
@@ -263,9 +280,17 @@ export async function share(options: ShareOptions): Promise<ShareResult> {
   // Remote keys are company-relative; the on-disk scoping prefix is
   // companies/{slug}/. Anything outside this folder gets skipped to avoid
   // leaking cross-company state into the vault.
-  const syncRoot = path.join(hqRoot, "companies", ctx.slug);
+  //
+  // In personalMode the syncRoot is `hqRoot` itself — remote keys are
+  // hq-root-relative to match the Rust personal first-push (which uploads
+  // every non-excluded top-level dir under ~/HQ). The exclusion list is
+  // enforced upstream by the runner; share() just trusts `paths`.
+  const syncRoot = options.personalMode === true
+    ? hqRoot
+    : path.join(hqRoot, "companies", ctx.slug);
   const shouldSync = createIgnoreFilter(hqRoot);
-  const journal = readJournal(ctx.slug);
+  const journalSlug = options.journalSlug ?? ctx.slug;
+  const journal = readJournal(journalSlug);
 
   let filesUploaded = 0;
   let bytesUploaded = 0;
@@ -457,7 +482,7 @@ export async function share(options: ShareOptions): Promise<ShareResult> {
   // See cli/sync.ts: stamp lastSync on completion so a no-op share still
   // ticks the "Last sync" indicator.
   journal.lastSync = new Date().toISOString();
-  writeJournal(ctx.slug, journal);
+  writeJournal(journalSlug, journal);
 
   return {
     filesUploaded,

package/src/ignore.test.ts

@@ -38,12 +38,17 @@ describe("createIgnoreFilter", () => {
     expect(shouldSync(path.join(hqRoot, "companies/indigo/notes.md"))).toBe(true);
   });
 
-  it("permissive mode: HQ-root core.yaml marker is ignored", () => {
-    // core.yaml is the local hq-root identity marker. It must never
+  it("permissive mode: HQ-root core.yaml marker is ignored, but nested core/core.yaml syncs", () => {
+    // The hq-root `core.yaml` is the local identity marker. It must never
     // round-trip through the bucket — pulling another machine's marker
-    // would corrupt root discovery.
+    // would corrupt root discovery. But `core/core.yaml` (the hq-core
+    // scaffold definition) is a real project file that DOES need to sync.
+    // Before the rule was anchored, the unanchored `core.yaml` pattern
+    // matched at any depth and silently blocked `core/core.yaml` from
+    // syncing along with the rest of `core/`.
     const shouldSync = createIgnoreFilter(hqRoot);
     expect(shouldSync(path.join(hqRoot, "core.yaml"))).toBe(false);
+    expect(shouldSync(path.join(hqRoot, "core/core.yaml"))).toBe(true);
   });
 
   it("permissive mode: modules/modules.yaml manifest is ignored", () => {

package/src/ignore.ts

@@ -76,7 +76,11 @@ export const DEFAULT_IGNORES = [
   ".hq-*",
   "modules.lock",
   // hq-root identity marker — discovered locally per-machine, never synced.
-  "core.yaml",
+  // Root-anchored: only the literal `core.yaml` at hq-root matches. Without
+  // the leading slash, gitignore semantics match `core.yaml` at any depth,
+  // which previously silently filtered out `core/core.yaml` (the hq-core
+  // scaffold rules manifest — a real project file that DOES sync).
+  "/core.yaml",
   // hq modules manifest — local module-resolution state, never synced.
   "modules/modules.yaml",
   // per-company identity file — written locally on first sync, never round-tripped.