@indigoai-us/hq-cli 5.311.1 → 5.311.3

package/dist/node-network-compat.js

@@ -1,40 +1,5 @@
-/**
- * Node network defaults for HQ CLI entry points.
- *
- * The compatibility timeout remains the default for HQ CLI entry points.
- *
- * Keep this module safe to import immediately after the Node version preflight.
- */
-import * as nodeNet from "node:net";
-export const HQ_NETWORK_FAMILY_ATTEMPT_TIMEOUT_MS = 1000;
-const ATTEMPT_TIMEOUT_OPTION = "--network-family-autoselection-attempt-timeout";
-function hasExplicitAttemptTimeout(nodeOptions, execArgv) {
-    const optionPattern = new RegExp("(?:^|\\s)" + ATTEMPT_TIMEOUT_OPTION + "(?:=|\\s|$)");
-    return (optionPattern.test(nodeOptions) ||
-        execArgv.some((argument) => argument === ATTEMPT_TIMEOUT_OPTION ||
-            argument.startsWith(ATTEMPT_TIMEOUT_OPTION + "=")));
-}
-function resolveSetAttemptTimeout(override) {
-    if (override === null)
-        return undefined;
-    if (override)
-        return override;
-    const fn = nodeNet.setDefaultAutoSelectFamilyAttemptTimeout;
-    return typeof fn === "function" ? fn.bind(nodeNet) : undefined;
-}
-export function configureNodeNetworkCompatibility(options = {}) {
-    const nodeOptions = options.nodeOptions ?? process.env.NODE_OPTIONS ?? "";
-    const execArgv = options.execArgv ?? process.execArgv;
-    if (hasExplicitAttemptTimeout(nodeOptions, execArgv)) {
-        return false;
-    }
-    const setAttemptTimeout = resolveSetAttemptTimeout(options.setAttemptTimeout);
-    if (!setAttemptTimeout) {
-        // Runtime lacks the API; the Node preflight should already have exited.
-        return false;
-    }
-    setAttemptTimeout(HQ_NETWORK_FAMILY_ATTEMPT_TIMEOUT_MS);
-    return true;
-}
-configureNodeNetworkCompatibility();
+/** Unconditional compatibility setup for the full CLI command graph. */
+import { configureNodeNetworkCompatibilityOnce } from "./node-network-compat-core.js";
+export { configureNodeNetworkCompatibility, HQ_NETWORK_FAMILY_ATTEMPT_TIMEOUT_MS, } from "./node-network-compat-core.js";
+configureNodeNetworkCompatibilityOnce();
 //# sourceMappingURL=node-network-compat.js.map

package/dist/node-preflight.d.ts

@@ -23,6 +23,12 @@ export interface NodeVersionCheck {
     major: number;
     message?: string;
 }
+export interface NodePreflightOptions {
+    versionString?: string;
+    skip?: string;
+    stderr?: Pick<NodeJS.WriteStream, "write">;
+    exit?: (code: number) => void;
+}
 /**
  * Pure check: is the given Node version string (e.g. "18.19.0") supported?
  * Defaults to the running runtime's version. An unparseable version is treated
@@ -35,5 +41,5 @@ export declare function checkNodeVersion(versionString?: string): NodeVersionChe
  * `HQ_SKIP_NODE_PREFLIGHT=1` to bypass (used by the test runner, which already
  * runs on a supported Node).
  */
-export declare function enforceNodeVersion(): void;
+export declare function enforceNodeVersion(options?: NodePreflightOptions): void;
 //# sourceMappingURL=node-preflight.d.ts.map

package/dist/node-preflight.js

@@ -39,13 +39,13 @@ export function checkNodeVersion(versionString = process.versions.node) {
  * `HQ_SKIP_NODE_PREFLIGHT=1` to bypass (used by the test runner, which already
  * runs on a supported Node).
  */
-export function enforceNodeVersion() {
-    if (process.env.HQ_SKIP_NODE_PREFLIGHT)
+export function enforceNodeVersion(options = {}) {
+    if (options.skip ?? process.env.HQ_SKIP_NODE_PREFLIGHT)
         return;
-    const result = checkNodeVersion();
+    const result = checkNodeVersion(options.versionString ?? process.versions.node);
     if (!result.ok && result.message) {
-        process.stderr.write(`${result.message}\n`);
-        process.exit(1);
+        (options.stderr ?? process.stderr).write(`${result.message}\n`);
+        (options.exit ?? process.exit)(1);
     }
 }
 enforceNodeVersion();

package/dist/utils/files-browse-acl.d.ts

@@ -0,0 +1,5 @@
+/** ACL source values and their stable labels in the hq files browse table. */
+export type AclSource = "shared-with-you" | "creator" | "role-bypass" | "personal-vault" | "private-folder";
+export declare const ACL_SOURCE_DISPLAY_LABELS: Readonly<Record<AclSource, string>>;
+export declare function displayAclSource(source: AclSource): string;
+//# sourceMappingURL=files-browse-acl.d.ts.map

package/dist/utils/files-browse-acl.js

@@ -0,0 +1,11 @@
+export const ACL_SOURCE_DISPLAY_LABELS = {
+    "shared-with-you": "shared-with-you",
+    creator: "creator access — creator-only",
+    "role-bypass": "role-bypass",
+    "personal-vault": "personal-vault",
+    "private-folder": "private folder — children are creator-only",
+};
+export function displayAclSource(source) {
+    return ACL_SOURCE_DISPLAY_LABELS[source];
+}
+//# sourceMappingURL=files-browse-acl.js.map

package/dist/utils/hq-core-yaml.d.ts

@@ -0,0 +1,10 @@
+export declare function readHqVersion(hqRoot: string): string | null;
+export interface CatalogEntry {
+    source: string;
+    description?: string;
+    conditional?: string;
+    auto_install?: boolean;
+}
+/** Read recommended_packages from core.yaml (the curated content-pack catalog). */
+export declare function readRecommendedPackages(hqRoot: string): CatalogEntry[];
+//# sourceMappingURL=hq-core-yaml.d.ts.map

package/dist/utils/hq-core-yaml.js

@@ -0,0 +1,40 @@
+import * as fs from "fs";
+import * as path from "path";
+import * as yaml from "js-yaml";
+/** Locate core.yaml: v14+ nests it under core/, older layouts at the root. */
+function coreYamlPath(hqRoot) {
+    const nested = path.join(hqRoot, "core", "core.yaml");
+    if (fs.existsSync(nested))
+        return nested;
+    const flat = path.join(hqRoot, "core.yaml");
+    if (fs.existsSync(flat))
+        return flat;
+    return null;
+}
+export function readHqVersion(hqRoot) {
+    const filePath = coreYamlPath(hqRoot);
+    if (!filePath)
+        return null;
+    try {
+        const config = yaml.load(fs.readFileSync(filePath, "utf-8"));
+        return config?.hqVersion ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Read recommended_packages from core.yaml (the curated content-pack catalog). */
+export function readRecommendedPackages(hqRoot) {
+    const filePath = coreYamlPath(hqRoot);
+    if (!filePath)
+        return [];
+    try {
+        const config = yaml.load(fs.readFileSync(filePath, "utf-8"));
+        const list = config?.recommended_packages;
+        return Array.isArray(list) ? list : [];
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=hq-core-yaml.js.map

package/dist/utils/pack-contributions.d.ts

@@ -39,6 +39,8 @@
 import type { PackManifest, PackContributeKey } from '../types.js';
 import { CONTRIBUTION_TABLE, type WireMode } from './contribution-table.js';
 import { type UnregisterServerResult, type SafeWriteEnv, type AcquireLockOptions } from '../commands/mcp-registration.js';
+export { readHqVersion, readRecommendedPackages } from './hq-core-yaml.js';
+export type { CatalogEntry } from './hq-core-yaml.js';
 export { CONTRIBUTION_TABLE };
 export type { WireMode };
 /**
@@ -163,13 +165,4 @@ export interface UnwirePackMcpOptions {
  * @param contributes the pack's `contributes` block (its `mcp` list drives removal)
  */
 export declare function unwirePackMcp(packName: string, contributes: Partial<Record<PackContributeKey, string[]>>, options?: UnwirePackMcpOptions): UnwireMcpResult;
-export declare function readHqVersion(hqRoot: string): string | null;
-export interface CatalogEntry {
-    source: string;
-    description?: string;
-    conditional?: string;
-    auto_install?: boolean;
-}
-/** Read `recommended_packages` from core.yaml (the curated content-pack catalog). */
-export declare function readRecommendedPackages(hqRoot: string): CatalogEntry[];
 //# sourceMappingURL=pack-contributions.d.ts.map

package/dist/utils/pack-contributions.js

@@ -41,6 +41,7 @@ import * as path from 'path';
 import * as yaml from 'js-yaml';
 import { CONTRIBUTION_TABLE, payloadFor } from './contribution-table.js';
 import { unregisterMcpServers, } from '../commands/mcp-registration.js';
+export { readHqVersion, readRecommendedPackages } from './hq-core-yaml.js';
 // NOTE on dependency direction: this module imports from ../commands/mcp-registration.js
 // to un-register `wire:merge` (mcp) servers on uninstall. mcp-registration.ts imports
 // ONLY fs/os/path/smol-toml (it does NOT import from pack-contributions.ts), so there
@@ -343,43 +344,4 @@ export function unwirePackMcp(packName, contributes, options) {
     }
     return { servers };
 }
-// ---------------------------------------------------------------------------
-// Host introspection: hqVersion + recommended_packages catalog
-// ---------------------------------------------------------------------------
-/** Locate core.yaml -- v14+ nests it under `core/`, older layouts at the root. */
-function coreYamlPath(hqRoot) {
-    const nested = path.join(hqRoot, 'core', 'core.yaml');
-    if (fs.existsSync(nested))
-        return nested;
-    const flat = path.join(hqRoot, 'core.yaml');
-    if (fs.existsSync(flat))
-        return flat;
-    return null;
-}
-export function readHqVersion(hqRoot) {
-    const p = coreYamlPath(hqRoot);
-    if (!p)
-        return null;
-    try {
-        const c = yaml.load(fs.readFileSync(p, 'utf-8'));
-        return c?.hqVersion ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-/** Read `recommended_packages` from core.yaml (the curated content-pack catalog). */
-export function readRecommendedPackages(hqRoot) {
-    const p = coreYamlPath(hqRoot);
-    if (!p)
-        return [];
-    try {
-        const c = yaml.load(fs.readFileSync(p, 'utf-8'));
-        const list = c?.recommended_packages;
-        return Array.isArray(list) ? list : [];
-    }
-    catch {
-        return [];
-    }
-}
 //# sourceMappingURL=pack-contributions.js.map

package/dist/utils/scaffold-fast-import-guard.js

@@ -6,6 +6,8 @@ function forbiddenFastPathModules(loadedModules, distDirectory, allowedCommandMo
     const commands = `${path.join(dist, "commands")}${path.sep}`;
     const flagRegistry = path.join(dist, "lib", "flag-registry.js");
     const coreCommand = path.join(dist, "commands", "core.js");
+    const fullNetworkCompat = path.join(dist, "node-network-compat.js");
+    const sentryEntrypoint = path.join(dist, "sentry.js");
     const allowedCommands = new Set(allowedCommandModules.map((module) => path.resolve(module)));
     return [...new Set(loadedModules.map((loaded) => {
             if (loaded.startsWith("file:")) {
@@ -22,7 +24,9 @@ function forbiddenFastPathModules(loadedModules, distDirectory, allowedCommandMo
         path.resolve(loaded).startsWith(commands) ||
         path.resolve(loaded) === flagRegistry ||
         path.resolve(loaded) === coreCommand ||
-        path.resolve(loaded).includes(`${path.sep}node_modules${path.sep}@sentry${path.sep}node${path.sep}`))
+        path.resolve(loaded) === fullNetworkCompat ||
+        path.resolve(loaded) === sentryEntrypoint ||
+        path.resolve(loaded).includes(`${path.sep}node_modules${path.sep}@sentry${path.sep}`))
         .filter((loaded) => !allowedCommands.has(path.resolve(loaded)) ||
         path.resolve(loaded) === main || path.resolve(loaded) === coreCommand)
         .sort();

package/dist/utils/version-report.js

@@ -12,7 +12,7 @@ import semver from "semver";
 import { CLI_VERSION } from "../cli-version.js";
 import { wantsJson } from "../version-request.js";
 import { findHqRoot } from "./manifest.js";
-import { readHqVersion } from "./pack-contributions.js";
+import { readHqVersion } from "./hq-core-yaml.js";
 export const HQ_CORE_LATEST_URL = "https://api.github.com/repos/indigoai-us/hq-core/releases/latest";
 export const LATEST_FETCH_TIMEOUT_MS = 3_000;
 export function normalizeHqCoreTag(tag) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.311.1",
+  "version": "5.311.3",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {