@indigoai-us/hq-cli 5.4.0 → 5.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +1 -1
- package/package.json +1 -1
- package/src/index.ts +1 -1
- package/dist/commands/onboard.d.ts +0 -23
- package/dist/commands/onboard.d.ts.map +0 -1
- package/dist/commands/onboard.js +0 -142
- package/dist/commands/onboard.js.map +0 -1
package/dist/index.js
CHANGED
|
@@ -21,7 +21,7 @@ const program = new Command();
|
|
|
21
21
|
program
|
|
22
22
|
.name("hq")
|
|
23
23
|
.description("HQ management CLI — modules, packages, and cloud sync")
|
|
24
|
-
.version("5.
|
|
24
|
+
.version("5.5.0");
|
|
25
25
|
// Module management subcommand group
|
|
26
26
|
const modulesCmd = program
|
|
27
27
|
.command("modules")
|
package/package.json
CHANGED
package/src/index.ts
CHANGED
|
@@ -1,23 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* `hq onboard` — bootstrap an HQ vault: sign in to Cognito + provision
|
|
3
|
-
* the company entity, S3 bucket, KMS key, owner membership, and STS-vended
|
|
4
|
-
* credentials in one flow.
|
|
5
|
-
*
|
|
6
|
-
* This is the "the entire flow" entry point that VLT-9 was building toward:
|
|
7
|
-
* a real user can install hq-cli and run `hq onboard create-company` once
|
|
8
|
-
* to land in a fully provisioned vault, then use `hq sync push|pull` to
|
|
9
|
-
* round-trip files against S3.
|
|
10
|
-
*
|
|
11
|
-
* Subcommands:
|
|
12
|
-
* hq onboard create-company — provision a brand new company
|
|
13
|
-
* hq onboard join — accept an invite from another user
|
|
14
|
-
* hq onboard resume — resume a partially-completed flow from checkpoint
|
|
15
|
-
* hq onboard dry-run — show what create-company would do, without doing it
|
|
16
|
-
*
|
|
17
|
-
* Auth: we cache the Cognito access + refresh tokens at ~/.hq/cognito-tokens.json.
|
|
18
|
-
* If the cached token is missing or expired beyond the refresh window, the
|
|
19
|
-
* browser-OAuth flow opens automatically.
|
|
20
|
-
*/
|
|
21
|
-
import { Command } from "commander";
|
|
22
|
-
export declare function registerOnboardCommand(program: Command): void;
|
|
23
|
-
//# sourceMappingURL=onboard.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"onboard.d.ts","sourceRoot":"","sources":["../../src/commands/onboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6J7D"}
|
package/dist/commands/onboard.js
DELETED
|
@@ -1,142 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* `hq onboard` — bootstrap an HQ vault: sign in to Cognito + provision
|
|
3
|
-
* the company entity, S3 bucket, KMS key, owner membership, and STS-vended
|
|
4
|
-
* credentials in one flow.
|
|
5
|
-
*
|
|
6
|
-
* This is the "the entire flow" entry point that VLT-9 was building toward:
|
|
7
|
-
* a real user can install hq-cli and run `hq onboard create-company` once
|
|
8
|
-
* to land in a fully provisioned vault, then use `hq sync push|pull` to
|
|
9
|
-
* round-trip files against S3.
|
|
10
|
-
*
|
|
11
|
-
* Subcommands:
|
|
12
|
-
* hq onboard create-company — provision a brand new company
|
|
13
|
-
* hq onboard join — accept an invite from another user
|
|
14
|
-
* hq onboard resume — resume a partially-completed flow from checkpoint
|
|
15
|
-
* hq onboard dry-run — show what create-company would do, without doing it
|
|
16
|
-
*
|
|
17
|
-
* Auth: we cache the Cognito access + refresh tokens at ~/.hq/cognito-tokens.json.
|
|
18
|
-
* If the cached token is missing or expired beyond the refresh window, the
|
|
19
|
-
* browser-OAuth flow opens automatically.
|
|
20
|
-
*/
|
|
21
|
-
import chalk from "chalk";
|
|
22
|
-
import { runOnboardCli } from "@indigoai-us/hq-onboarding";
|
|
23
|
-
import { DEFAULT_HQ_ROOT, ensureCognitoToken, buildVaultConfig, } from "../utils/cognito-session.js";
|
|
24
|
-
// ---------------------------------------------------------------------------
|
|
25
|
-
// Command registration
|
|
26
|
-
// ---------------------------------------------------------------------------
|
|
27
|
-
export function registerOnboardCommand(program) {
|
|
28
|
-
const onboard = program
|
|
29
|
-
.command("onboard")
|
|
30
|
-
.description("Provision an HQ vault: sign in, create company, S3 bucket, STS, sync");
|
|
31
|
-
onboard
|
|
32
|
-
.command("create-company")
|
|
33
|
-
.description("Sign in and provision a brand new HQ vault for a company")
|
|
34
|
-
.requiredOption("--slug <slug>", "Company slug (used as bucket name suffix)")
|
|
35
|
-
.requiredOption("--name <name>", "Company display name")
|
|
36
|
-
.requiredOption("--email <email>", "Your email (must match Cognito sign-in)")
|
|
37
|
-
.requiredOption("--person-name <name>", "Your display name")
|
|
38
|
-
.option("--hq-root <path>", `Local HQ tree root (default: ${DEFAULT_HQ_ROOT})`, DEFAULT_HQ_ROOT)
|
|
39
|
-
.action(async (options) => {
|
|
40
|
-
try {
|
|
41
|
-
console.log(chalk.bold(`\nHQ Onboard — Create Company`));
|
|
42
|
-
console.log(` Company: ${options.name} (${options.slug})`);
|
|
43
|
-
console.log(` Person: ${options.personName} <${options.email}>`);
|
|
44
|
-
console.log(` HQ root: ${options.hqRoot}\n`);
|
|
45
|
-
const accessToken = await ensureCognitoToken();
|
|
46
|
-
const result = await runOnboardCli({
|
|
47
|
-
mode: "create-company",
|
|
48
|
-
personName: options.personName,
|
|
49
|
-
personEmail: options.email,
|
|
50
|
-
companyName: options.name,
|
|
51
|
-
companySlug: options.slug,
|
|
52
|
-
vaultConfig: buildVaultConfig(accessToken),
|
|
53
|
-
hqRoot: options.hqRoot,
|
|
54
|
-
});
|
|
55
|
-
if (!result.success) {
|
|
56
|
-
console.error(chalk.red(`\n✗ Onboarding failed: ${result.error}`));
|
|
57
|
-
process.exit(1);
|
|
58
|
-
}
|
|
59
|
-
}
|
|
60
|
-
catch (err) {
|
|
61
|
-
console.error(chalk.red("\n✗ Error:"), err instanceof Error ? err.message : String(err));
|
|
62
|
-
process.exit(1);
|
|
63
|
-
}
|
|
64
|
-
});
|
|
65
|
-
onboard
|
|
66
|
-
.command("join")
|
|
67
|
-
.description("Accept an invite and join an existing company")
|
|
68
|
-
.requiredOption("--invite-token <token>", "Magic link token from your invite email")
|
|
69
|
-
.requiredOption("--email <email>", "Your email (must match Cognito sign-in)")
|
|
70
|
-
.requiredOption("--person-name <name>", "Your display name")
|
|
71
|
-
.option("--hq-root <path>", `Local HQ tree root (default: ${DEFAULT_HQ_ROOT})`, DEFAULT_HQ_ROOT)
|
|
72
|
-
.action(async (options) => {
|
|
73
|
-
try {
|
|
74
|
-
console.log(chalk.bold(`\nHQ Onboard — Join Company`));
|
|
75
|
-
console.log(` Person: ${options.personName} <${options.email}>`);
|
|
76
|
-
console.log(` HQ root: ${options.hqRoot}\n`);
|
|
77
|
-
const accessToken = await ensureCognitoToken();
|
|
78
|
-
const result = await runOnboardCli({
|
|
79
|
-
mode: "join-company",
|
|
80
|
-
personName: options.personName,
|
|
81
|
-
personEmail: options.email,
|
|
82
|
-
inviteToken: options.inviteToken,
|
|
83
|
-
vaultConfig: buildVaultConfig(accessToken),
|
|
84
|
-
hqRoot: options.hqRoot,
|
|
85
|
-
});
|
|
86
|
-
if (!result.success) {
|
|
87
|
-
console.error(chalk.red(`\n✗ Join failed: ${result.error}`));
|
|
88
|
-
process.exit(1);
|
|
89
|
-
}
|
|
90
|
-
}
|
|
91
|
-
catch (err) {
|
|
92
|
-
console.error(chalk.red("\n✗ Error:"), err instanceof Error ? err.message : String(err));
|
|
93
|
-
process.exit(1);
|
|
94
|
-
}
|
|
95
|
-
});
|
|
96
|
-
onboard
|
|
97
|
-
.command("resume")
|
|
98
|
-
.description("Resume a partially-completed onboarding flow from local checkpoint")
|
|
99
|
-
.option("--hq-root <path>", `Local HQ tree root (default: ${DEFAULT_HQ_ROOT})`, DEFAULT_HQ_ROOT)
|
|
100
|
-
.action(async (options) => {
|
|
101
|
-
try {
|
|
102
|
-
const accessToken = await ensureCognitoToken();
|
|
103
|
-
const result = await runOnboardCli({
|
|
104
|
-
mode: "resume",
|
|
105
|
-
vaultConfig: buildVaultConfig(accessToken),
|
|
106
|
-
hqRoot: options.hqRoot,
|
|
107
|
-
});
|
|
108
|
-
if (!result.success) {
|
|
109
|
-
console.error(chalk.red(`\n✗ Resume failed: ${result.error}`));
|
|
110
|
-
process.exit(1);
|
|
111
|
-
}
|
|
112
|
-
}
|
|
113
|
-
catch (err) {
|
|
114
|
-
console.error(chalk.red("\n✗ Error:"), err instanceof Error ? err.message : String(err));
|
|
115
|
-
process.exit(1);
|
|
116
|
-
}
|
|
117
|
-
});
|
|
118
|
-
onboard
|
|
119
|
-
.command("dry-run")
|
|
120
|
-
.description("Show what create-company would do, without provisioning anything")
|
|
121
|
-
.option("--hq-root <path>", `Local HQ tree root (default: ${DEFAULT_HQ_ROOT})`, DEFAULT_HQ_ROOT)
|
|
122
|
-
.action(async (options) => {
|
|
123
|
-
try {
|
|
124
|
-
// No auth needed for dry-run — runOnboardCli handles this branch
|
|
125
|
-
// without touching the vault-service.
|
|
126
|
-
const result = await runOnboardCli({
|
|
127
|
-
mode: "dry-run",
|
|
128
|
-
vaultConfig: buildVaultConfig("dry-run-no-token"),
|
|
129
|
-
hqRoot: options.hqRoot,
|
|
130
|
-
});
|
|
131
|
-
if (!result.success) {
|
|
132
|
-
console.error(chalk.red(`\n✗ Dry-run failed: ${result.error}`));
|
|
133
|
-
process.exit(1);
|
|
134
|
-
}
|
|
135
|
-
}
|
|
136
|
-
catch (err) {
|
|
137
|
-
console.error(chalk.red("\n✗ Error:"), err instanceof Error ? err.message : String(err));
|
|
138
|
-
process.exit(1);
|
|
139
|
-
}
|
|
140
|
-
});
|
|
141
|
-
}
|
|
142
|
-
//# sourceMappingURL=onboard.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"onboard.js","sourceRoot":"","sources":["../../src/commands/onboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AAErC,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,sEAAsE,CAAC,CAAC;IAEvF,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,0DAA0D,CAAC;SACvE,cAAc,CAAC,eAAe,EAAE,2CAA2C,CAAC;SAC5E,cAAc,CAAC,eAAe,EAAE,sBAAsB,CAAC;SACvD,cAAc,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;SAC5E,cAAc,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;SAC3D,MAAM,CACL,kBAAkB,EAClB,gCAAgC,eAAe,GAAG,EAClD,eAAe,CAChB;SACA,MAAM,CAAC,KAAK,EAAE,OAMd,EAAE,EAAE;QACH,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;YAE/C,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,IAAI,EAAE,gBAAgB;gBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,KAAK;gBAC1B,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,WAAW,EAAE,gBAAgB,CAAC,WAAW,CAAC;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EACvB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,+CAA+C,CAAC;SAC5D,cAAc,CAAC,wBAAwB,EAAE,yCAAyC,CAAC;SACnF,cAAc,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;SAC5E,cAAc,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;SAC3D,MAAM,CACL,kBAAkB,EAClB,gCAAgC,eAAe,GAAG,EAClD,eAAe,CAChB;SACA,MAAM,CAAC,KAAK,EAAE,OAKd,EAAE,EAAE;QACH,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;YAE/C,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,IAAI,EAAE,cAAc;gBACpB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,KAAK;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,WAAW,EAAE,gBAAgB,CAAC,WAAW,CAAC;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EACvB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,oEAAoE,CAAC;SACjF,MAAM,CACL,kBAAkB,EAClB,gCAAgC,eAAe,GAAG,EAClD,eAAe,CAChB;SACA,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,gBAAgB,CAAC,WAAW,CAAC;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EACvB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,MAAM,CACL,kBAAkB,EAClB,gCAAgC,eAAe,GAAG,EAClD,eAAe,CAChB;SACA,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,iEAAiE;YACjE,sCAAsC;YACtC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,gBAAgB,CAAC,kBAAkB,CAAC;gBACjD,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EACvB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
|