@indigoai-us/hq-cloud 6.15.2 → 6.15.4

package/dist/cli/share.test.js

@@ -27,6 +27,18 @@ vi.mock("../s3.js", () => ({
     headRemoteFile: vi.fn().mockResolvedValue(null),
     primeObjectTransport: vi.fn().mockResolvedValue(undefined),
     primeUploads: vi.fn().mockResolvedValue(undefined),
+    // Real exports share.ts now imports for the HQ-DESKTOP-54 privilege skip.
+    WINDOWS_SYMLINK_PRIVILEGE_REMEDY: "Enable Windows Developer Mode (Settings > Privacy & security > For developers) or run HQ sync once from an elevated terminal, then sync again.",
+    WindowsSymlinkPrivilegeError: class WindowsSymlinkPrivilegeError extends Error {
+        target;
+        code;
+        constructor(target, code) {
+            super(`symlink skipped: creating a file symlink to ${target} requires a Windows privilege`);
+            this.name = "WindowsSymlinkPrivilegeError";
+            this.target = target;
+            this.code = code;
+        }
+    },
 }));
 // Mock readline so the interactive-conflict serialization test can observe
 // prompt lifecycle (createInterface + close) without ever touching stdin.
@@ -40,7 +52,7 @@ vi.mock("readline", () => ({
 }));
 import * as readline from "readline";
 import { share, isForbiddenCompanyVaultKey, UnreachablePushPathsError, _testing as shareTesting } from "./share.js";
-import { deleteRemoteFile, downloadFile, headRemoteFile, uploadFile, uploadSymlink } from "../s3.js";
+import { deleteRemoteFile, downloadFile, headRemoteFile, uploadFile, uploadSymlink, WindowsSymlinkPrivilegeError } from "../s3.js";
 import { VaultAuthError } from "../vault-client.js";
 import { hashFile } from "../journal.js";
 const mockConfig = {
@@ -879,6 +891,47 @@ describe("share", () => {
         expect(result.conflictPaths).toEqual(["v7b-abort.txt"]);
         expect(result.filesUploaded).toBe(0);
     });
+    it("HQ-DESKTOP-54: a privilege refusal while writing the push conflict mirror is a skip, not an error", async () => {
+        // The keep-mirror also materializes the remote object (to a .conflict-*
+        // file). On an unprivileged Windows host that throws the typed privilege
+        // error; it must be downgraded to the deliberate skip so the push stays
+        // complete and the runner exits 0 — never type:error. The conflict itself
+        // is still recorded and the local file is untouched.
+        const companyRoot = path.join(tmpDir, "companies", "acme");
+        fs.mkdirSync(companyRoot, { recursive: true });
+        const testFile = path.join(companyRoot, "v7b-priv.txt");
+        fs.writeFileSync(testFile, "local-collision-content");
+        vi.mocked(headRemoteFile).mockResolvedValueOnce({
+            lastModified: new Date(),
+            etag: '"remote-version-etag"',
+            size: 40,
+        });
+        // On a real unprivileged host BOTH the fresh-collision reconciled probe and
+        // the keep-mirror materialize the remote symlink, so both downloadFile calls
+        // refuse. The probe's catch returns "differs" (conflict) without erroring;
+        // the mirror must downgrade the refusal to the deliberate skip.
+        vi.mocked(downloadFile)
+            .mockRejectedValueOnce(new WindowsSymlinkPrivilegeError("../target.md", "EPERM"))
+            .mockRejectedValueOnce(new WindowsSymlinkPrivilegeError("../target.md", "EPERM"));
+        const events = [];
+        const result = await share({
+            paths: [testFile],
+            company: "acme",
+            vaultConfig: mockConfig,
+            hqRoot: tmpDir,
+            onConflict: "keep",
+            onEvent: (e) => events.push(e),
+        });
+        expect(events).toContainEqual(expect.objectContaining({
+            type: "skip-symlink-privilege",
+            path: "v7b-priv.txt",
+            target: "../target.md",
+        }));
+        expect(events.some((e) => e.type === "error")).toBe(false);
+        // The conflict is still recorded; the local file is preserved.
+        expect(result.conflictPaths).toEqual(["v7b-priv.txt"]);
+        expect(fs.readFileSync(testFile, "utf-8")).toBe("local-collision-content");
+    });
     it("fresh-install SSE-KMS etag: byte-identical remote is reconciled without a conflict", async () => {
         const companyRoot = path.join(tmpDir, "companies", "acme");
         fs.mkdirSync(companyRoot, { recursive: true });