Skip to guide
IndigoIndigo · HQ Field Guide
Chapter 07 / 15Contents
Chapter 07shared · 10 min

Share files with your team

Use /hq-share to grant teammates access to a narrow vault prefix through a single-use, expiring link instead of copying files around.

01Share the narrowest vault path that does the job instead of a broad prefix.
02Treat the share-session link as a single-use capability and inspect grants afterward.
$ /hq-share
Fig 07.0 · A scoped grant
The concept

Scoped grant

Sharing grants access to a vault prefix; it does not hand out a copy.

VAULTVAULT/FINANCE/PRIVATE/KEYS/Q3-REPORT/SCOPED PREFIXREST OF VAULT NOT SHAREDSCOPED GRANTCAPABILITYKEYED LINEEXPIRES 15 MINRECIPIENTRECIPIENTREAD-ONLY ACCESSONE PREFIX ONLY
Fig 07.1 · Pick a narrow prefix
Step 01Prefix

Pick a narrow prefix

A share grant targets a vault prefix, such as companies/{co}/knowledge, not your whole HQ.

Confirm the files exist in your synced vault, then identify the narrowest prefix that covers them.

The prefix covers the needed files and nothing unrelated.
/hq-share/hq-files
Step 02Capability

Mint and send the link

/hq-share mints an encrypted, single-use, fifteen-minute share-session link and opens a browser ACL picker for the prefixes and people you choose.

Run /hq-share with the prefix, pick the recipients in the browser picker, and send only the generated link.

The recipient receives a working link before it expires.
/hq-share
Fig 07.2 · Mint and send
Fig 07.3 · Manage access
Step 03Access ledger

Confirm and manage access

Accepting the link adds an ACL grant for the prefix, so the recipient gets access to your files, not a copy of them.

Have the recipient open the link and accept the grants in the browser, then inspect and revoke grants with /hq-files.

You can see the grant and remove it when it is no longer needed.
/hq-files/hq-share
Commands

Keep the chapter executable.

Share a prefix
$ /hq-share

Mints a single-use, expiring share-session link and opens the browser picker to grant access to chosen vault prefixes.

Manage grants
$ /hq-files

Inspects and revokes ACL grants on vault prefixes after a share.

Common mistakes

What goes wrong, and the fix.

Mistake

Sharing too broad a prefix so the recipient sees more than the task needs.

Fix

Share the narrowest path that does the job, then widen only if required.

Mistake

Pasting the share-session URL into chat, notes, or commits to use later.

Fix

Treat the link as a single-use capability that expires in fifteen minutes and re-mint a fresh one when needed.

Mistake

Confusing share with sync and expecting /hq-share to move files.

Fix

Use /hq-share to grant access and /hq-sync to move your own copies.

References

What to keep in mind.

Share vs sync

Sharing grants access to your files; sync moves your own copies. Use /hq-share to grant access and /hq-sync to move what you own.

Link is a capability

The share-session link is single-use and expires in fifteen minutes, so never paste it into notes, chat, or commits; re-mint instead.

Next
Next move

Once you can share files safely, learn how to use secrets without ever pasting them into chat.

Continue to secrets
Part 07 · Share files with your teamIndigo · HQ Field Guide