@hs-x/cli 0.4.6 → 0.4.8

package/dist/commands/dev.js

@@ -2873,7 +2873,7 @@ function discoverManageSchemaMode(definition) {
 }
 function discoverSourceDefinitions(source) {
     const definitions = new Map();
-    for (const match of source.matchAll(/(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*defineSource(\.push)?\s*\(\s*\{([\s\S]*?)\}\s*\)/g)) {
+    for (const match of source.matchAll(/(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*defineSource(\.push)?\s*(?:<[\s\S]*?>)?\s*\(\s*\{([\s\S]*?)\}\s*\)/g)) {
         const variableName = match[1];
         const body = match[3] ?? '';
         if (!variableName) {
@@ -3231,7 +3231,7 @@ export const devCmd = Command.make('dev', {
  */
 async function devInvokeRemote(args) {
     const { argv, root, capabilityId, json, payloadOverrides, fail } = args;
-    const { manifestWorkerFor, resolveDeployedWorkerUrl, invokeCapabilityRemotely, DevInvokeError, loadDevVars, } = await import('../dev/invoke.js');
+    const { manifestWorkerFor, resolveDeployedWorkerUrl, invokeCapabilityRemotely, DevInvokeError, loadDevVars, resolveDevInvokeSignatureSecret, } = await import('../dev/invoke.js');
     const explicitUrl = resolveFlag(argv, '--url');
     const mapping = await manifestWorkerFor(root, capabilityId);
     if (!mapping && !explicitUrl) {
@@ -3270,14 +3270,12 @@ async function devInvokeRemote(args) {
             : {}),
         ...(payloadOverrides.install !== undefined ? { install: payloadOverrides.install } : {}),
     };
-    // Deployed invokes require a configured secret and valid v3 signature. If
-    // .dev.vars has no secret, the remote bootstrap worker fails closed with 503;
-    // only the separate in-process local adapter opts into unsigned execution.
+    // Deployed invokes require a configured secret and valid v3 signature. Use
+    // the real environment first (ADR-025 env-only mode), then `.dev.vars` as
+    // the project-local fallback. Only the separate in-process local adapter
+    // opts into unsigned execution.
     const devVars = await loadDevVars(root);
-    const signatureSecret = typeof devVars.HSX_HUBSPOT_CLIENT_SECRET === 'string' &&
-        devVars.HSX_HUBSPOT_CLIENT_SECRET.length > 0
-        ? devVars.HSX_HUBSPOT_CLIENT_SECRET
-        : undefined;
+    const signatureSecret = resolveDevInvokeSignatureSecret(devVars);
     const startedAt = Date.now();
     const outcome = await invokeCapabilityRemotely({
         url,