@indigoai-us/hq-cli 5.276.0 → 5.278.0

package/dist/secrets-env-fast-route.js

@@ -0,0 +1,54 @@
+/** Default-off hq-flags gate for the `secrets env` entry fast path. */
+import { localOverrideEnvVar, readLocalOverride } from "@indigoai-us/hq-flags-client";
+export const CLI_SECRETS_ENV_FAST_PATH_FLAG = "cli.secrets-env-fast-path";
+/** Keep the existing command graph in control when the gate is off or declines. */
+export async function dispatchSecretsEnvFastRequest(_request, deps) {
+    if (!(await deps.isEnabled())) {
+        await deps.runCurrent();
+        return;
+    }
+    if ((await deps.runFast()) === "fallback") {
+        await deps.runCurrent();
+    }
+}
+/**
+ * Fast routes only use an explicit local override or the latest company flag
+ * snapshot. A missing company, stale snapshot, or unreadable cache leaves the
+ * current CLI path in control; it never performs a registry network request.
+ */
+export async function secretsEnvFastRouteEnabled(request, env = process.env) {
+    const override = readLocalOverride(CLI_SECRETS_ENV_FAST_PATH_FLAG, env);
+    if (override !== null)
+        return override;
+    const rawOverride = env[localOverrideEnvVar(CLI_SECRETS_ENV_FAST_PATH_FLAG)];
+    if (rawOverride === "1")
+        return true;
+    if (rawOverride === "0")
+        return false;
+    if (request.scope.personal)
+        return false;
+    try {
+        const scopedEnv = { ...env };
+        if (request.scope.company) {
+            // An explicit --company scope must override any ambient binding for the
+            // fast-path flag lookup, just as it overrides the secrets command scope.
+            delete scopedEnv.HQ_COMPANY_UID;
+            scopedEnv.HQ_COMPANY_SLUG = request.scope.company;
+        }
+        const [{ resolveProcessFlagCompanyContext }, { readFlagSnapshotFile }] = await Promise.all([
+            import("./lib/process-flag-company-context.js"),
+            import("./lib/flag-snapshot-file.js"),
+        ]);
+        const { companyUid } = resolveProcessFlagCompanyContext(scopedEnv);
+        if (!companyUid)
+            return false;
+        return readFlagSnapshotFile(companyUid, { env: scopedEnv })?.flags[CLI_SECRETS_ENV_FAST_PATH_FLAG] === true;
+    }
+    catch (error) {
+        // This is a performance rollout gate. Failure to read it preserves the
+        // existing full CLI behavior.
+        console.warn("[hq] secrets env fast-path flag lookup failed; using the full CLI path", error instanceof Error ? error.name : typeof error);
+        return false;
+    }
+}
+//# sourceMappingURL=secrets-env-fast-route.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.276.0",
+  "version": "5.278.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {
@@ -44,7 +44,7 @@
   "dependencies": {
     "@aws-sdk/client-iot-data-plane": "^3.1096.0",
     "@aws-sdk/client-s3": "^3.1049.0",
-    "@indigoai-us/hq-cloud": "~6.18.10",
+    "@indigoai-us/hq-cloud": "~6.18.13",
     "@indigoai-us/hq-flags-client": "^0.1.2",
     "@sentry/node": "^10.49.0",
     "@tobilu/qmd": "2.5.3",