@indigoai-us/hq-cli 5.322.0 → 5.324.0

package/dist/utils/run-bundled-script.js

@@ -8,10 +8,11 @@
  *
  * Deliberate choices:
  *
- *   - `stdio: "inherit"`. Not piped. Piping would buffer output that callers
- *     stream, reorder stdout against stderr, and require re-emitting bytes we
- *     have no reason to touch. Inheriting also means a script that reads stdin
- *     (the hook payload pattern) gets the real fd, unbuffered and unconsumed.
+ *   - stdio inherits by default. Captured runs pipe only stdout/stderr, and
+ *     inherit stdin unless the caller supplies an explicit payload. Piping
+ *     output would buffer streams, reorder stdout against stderr, and require
+ *     re-emitting bytes, so capture remains an explicit opt-in for native
+ *     parity fallbacks that need the shell's exact output bytes.
  *
  *   - an explicit interpreter (`bash` or `node`) rather than executing the file
  *     directly. The executable bit does survive `npm publish` for files that
@@ -30,6 +31,7 @@
  */
 import { spawnSync } from "child_process";
 import * as fs from "node:fs";
+import * as os from "node:os";
 import * as path from "path";
 import { resolveBundledAsset } from "./hq-roots.js";
 /**
@@ -152,12 +154,41 @@ export function runBundledScript(opts) {
     if (windowsBash && !windowsBash.executable) {
         throw bashNotFoundError(opts.asset, windowsBash.cause);
     }
-    const result = spawnSync(executable, [script, ...(opts.args ?? [])], {
-        cwd: opts.cwd,
-        env,
-        stdio: opts.captureOutput ? ["inherit", "pipe", "pipe"] : "inherit",
-        ...(opts.captureOutput ? { maxBuffer: Number.MAX_SAFE_INTEGER } : {}),
-    });
+    let inputDirectory;
+    let inputDescriptor;
+    let result;
+    try {
+        if (opts.stdin !== undefined) {
+            // Some scaffold scripts reopen /dev/stdin by pathname. Node's spawnSync
+            // input pipe cannot be reopened through /dev/stdin on Linux, so capture
+            // mode supplies a private regular file descriptor to preserve that ABI.
+            const sharedMemory = process.platform === "linux" && fs.existsSync("/dev/shm")
+                ? "/dev/shm"
+                : os.tmpdir();
+            inputDirectory = fs.mkdtempSync(path.join(sharedMemory, "hq-bundled-stdin-"));
+            const inputPath = path.join(inputDirectory, "stdin");
+            fs.writeFileSync(inputPath, opts.stdin, { mode: 0o600 });
+            inputDescriptor = fs.openSync(inputPath, "r");
+        }
+        const stdinStdio = inputDescriptor ?? "inherit";
+        const stdio = opts.captureOutput
+            ? [stdinStdio, "pipe", "pipe"]
+            : inputDescriptor !== undefined
+                ? [stdinStdio, "inherit", "inherit"]
+                : "inherit";
+        result = spawnSync(executable, [script, ...(opts.args ?? [])], {
+            cwd: opts.cwd,
+            env,
+            stdio,
+            ...(opts.captureOutput ? { maxBuffer: Number.MAX_SAFE_INTEGER } : {}),
+        });
+    }
+    finally {
+        if (inputDescriptor !== undefined)
+            fs.closeSync(inputDescriptor);
+        if (inputDirectory)
+            fs.rmSync(inputDirectory, { recursive: true, force: true });
+    }
     if (result.error) {
         const spawnError = result.error;
         if (process.platform === "win32" &&
@@ -185,8 +216,12 @@ export function runBundledScript(opts) {
     return {
         code,
         ...(opts.captureOutput ? {
-            stdout: result.stdout ?? Buffer.alloc(0),
-            stderr: result.stderr ?? Buffer.alloc(0),
+            stdout: Buffer.isBuffer(result.stdout)
+                ? result.stdout
+                : Buffer.from(result.stdout ?? ""),
+            stderr: Buffer.isBuffer(result.stderr)
+                ? result.stderr
+                : Buffer.from(result.stderr ?? ""),
         } : {}),
     };
 }

package/dist/utils/version-check.d.ts

@@ -1,5 +1,7 @@
 export declare const CLI_VERSION_NUDGE_FLAG = "cli.version-update-nudge";
 declare function isKnownNoninteractiveStatusProbe(argv?: readonly string[]): boolean;
+/** Return the fresh npm `latest` already cached by the startup update check. */
+export declare function cachedLatestVersion(now?: number): string | null;
 /**
  * The cached npm `latest` when it is newer than the running version, else null.
  *

package/dist/utils/version-check.js

@@ -111,6 +111,13 @@ function acquireRefreshLock(now = Date.now()) {
         return null;
     }
 }
+/** Return the fresh npm `latest` already cached by the startup update check. */
+export function cachedLatestVersion(now = Date.now()) {
+    const entry = readCache();
+    if (!entry || now - entry.fetchedAt > CACHE_TTL_MS)
+        return null;
+    return semver.valid(entry.latest) ? entry.latest : null;
+}
 /**
  * The cached npm `latest` when it is newer than the running version, else null.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.322.0",
+  "version": "5.324.0",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {
@@ -44,7 +44,7 @@
   "dependencies": {
     "@aws-sdk/client-iot-data-plane": "^3.1096.0",
     "@aws-sdk/client-s3": "^3.1049.0",
-    "@indigoai-us/hq-cloud": "~6.18.17",
+    "@indigoai-us/hq-cloud": "~6.18.33",
     "@indigoai-us/hq-flags-client": "^0.1.2",
     "@sentry/node": "^10.49.0",
     "@tobilu/qmd": "2.5.3",