@indigoai-us/hq-cloud 6.15.95 → 6.15.97

package/dist/cli/share.test.js

@@ -64,7 +64,7 @@ vi.mock("readline", () => ({
 import * as readline from "readline";
 import { share, ServerOwnedPushPathsError, UnreachablePushPathsError, UnregisteredCompanySkillError, currentUploadBytes, parseRegisteredCompanySkillUid, _testing as shareTesting, } from "./share.js";
 import { deleteRemoteFile, downloadFile, headRemoteFile, primeObjectTransport, primeUploads, uploadFile, uploadSymlink, WindowsSymlinkPrivilegeError, } from "../s3.js";
-import { VaultAuthError, } from "../vault-client.js";
+import { VaultAuthError, VaultPermissionDeniedError } from "../vault-client.js";
 import { AreaLedgerMigration, closeCachedAreaJournalMigration, hashFile, openJournalStateStoreForMigration, readJournal, readJournalScoped, setAreaLedgerMigrationTestHooksForTest, writeJournal, } from "../journal.js";
 import { ReconcileCursorStore } from "../sync/reconcile-cursor.js";
 import { AreaResolver } from "../sync/area-resolver.js";
@@ -219,14 +219,59 @@ describe("company skill identity preflight", () => {
         expect(uploadFile).not.toHaveBeenCalled();
         expect(parseRegisteredCompanySkillUid(fs.readFileSync(file, "utf8"))).toBeUndefined();
     });
+    it("skips unstamped skills when registration is denied and uploads other files", async () => {
+        const skill = createSkill("outpost-only", "---\nname: Outpost Only\ndescription: Missing id\n---\n");
+        const other = path.join(hqRoot, "companies", "acme", "policies", "keep.md");
+        fs.mkdirSync(path.dirname(other), { recursive: true });
+        fs.writeFileSync(other, "keep syncing");
+        const events = [];
+        const registrar = vi.fn(async () => {
+            throw new VaultPermissionDeniedError("Outpost machine principals cannot register skills");
+        });
+        const result = await share({
+            paths: [skill, other],
+            hqRoot,
+            entityContext: makeEntityContext(),
+            registerCompanySkill: registrar,
+            onEvent: (event) => events.push(event),
+        });
+        expect(result.filesUploaded).toBe(1);
+        expect(registrar).toHaveBeenCalledOnce();
+        expect(uploadFile).toHaveBeenCalledWith(expect.anything(), other, "policies/keep.md", undefined, expect.anything());
+        expect(uploadFile).not.toHaveBeenCalledWith(expect.anything(), skill, "skills/outpost-only/SKILL.md", undefined, expect.anything());
+        expect(events).toContainEqual({
+            type: "not-shipped",
+            reason: "skill-registration-denied",
+            count: 1,
+            samplePaths: ["skills/outpost-only/SKILL.md"],
+        });
+    });
+    it.each([
+        ["a registration failure", new Error("registry unavailable")],
+        ["an authentication failure", new VaultAuthError("session expired")],
+    ])("propagates %s during company-skill registration", async (_description, error) => {
+        const skill = createSkill("must-register", "---\nname: Must Register\ndescription: Missing id\n---\n");
+        const registrar = vi.fn(async () => {
+            throw error;
+        });
+        await expect(share({
+            paths: [skill],
+            hqRoot,
+            entityContext: makeEntityContext(),
+            registerCompanySkill: registrar,
+        })).rejects.toBe(error);
+        expect(uploadFile).not.toHaveBeenCalled();
+    });
     it("reconciles an already stamped canonical skill after upload", async () => {
         const file = createSkill("existing", "---\nname: Existing\ndescription: Ready\nskill_uid: skl_EXISTING1\n---\n");
         const registrar = vi.fn(async (input) => registered(input, "skl_EXISTING1"));
+        const events = [];
         const result = await share({
             paths: [file],
             hqRoot,
             entityContext: makeEntityContext(),
             registerCompanySkill: registrar,
+            onEvent: (event) => events.push(event),
         });
         expect(registrar).toHaveBeenCalledOnce();
         expect(registrar).toHaveBeenCalledWith({
@@ -236,6 +281,7 @@ describe("company skill identity preflight", () => {
             landed: true,
         });
         expect(result.filesUploaded).toBe(1);
+        expect(events.some((event) => event.type === "not-shipped")).toBe(false);
     });
     it("does not reconcile bytes edited while the upload is in flight", async () => {
         const original = "---\nname: Existing\ndescription: Ready\nskill_uid: skl_EXISTING1\ntags: [sales]\n---\n";