@indigoai-us/hq-cli 5.47.11 → 5.47.12

package/dist/commands/pkg-install.js

@@ -13,7 +13,7 @@
  * 9. Print next-step message
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c6ab4668-f147-5612-bbfc-e1e80b2f018a")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ac6f26b7-5678-5b4e-b0d8-2f5901adf9fe")}catch(e){}}();
 import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
@@ -25,7 +25,7 @@ import { resolveDefaultHqRoot } from '../utils/cognito-session.js';
 import { getRegistryUrl, RegistryClient, } from '../utils/registry-client.js';
 import { verifySha256, verifyRsaSignature } from '../utils/integrity.js';
 import { addToRegistry } from '../utils/registry.js';
-import { installPack, sourceMatchesPackPattern } from './pack-install.js';
+import { MARKETPLACE_PREFIX, installPack, sourceMatchesPackPattern, } from './pack-install.js';
 export function registerPackageInstallCommand(parent) {
     parent
         .command('install <source>')
@@ -43,7 +43,14 @@ export function registerPackageInstallCommand(parent) {
                 });
             }
             else {
-                await installPackage(source, opts.company);
+                // Bare slugs: the legacy Cognito-gated registry backend
+                // (/packages, /entitlements) was never deployed, so a bare slug
+                // would fail at registry setup. Resolve it through the marketplace
+                // listings transport — the live install path — instead.
+                await installPack(`${MARKETPLACE_PREFIX}${source}`, {
+                    allowHooks: opts.allowHooks,
+                    followBranch: opts.branch,
+                });
             }
         }
         catch (error) {
@@ -156,4 +163,4 @@ async function installPackage(slug, company) {
     }
 }
 //# sourceMappingURL=pkg-install.js.map
-//# debugId=c6ab4668-f147-5612-bbfc-e1e80b2f018a
+//# debugId=ac6f26b7-5678-5b4e-b0d8-2f5901adf9fe

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.47.11",
+  "version": "5.47.12",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {

package/src/commands/pkg-install.dispatch.test.ts

@@ -0,0 +1,71 @@
+// @vitest-environment node
+/**
+ * Regression: `hq install <bare-slug>` must resolve through the marketplace
+ * listings transport (the live install path), not the legacy Cognito-gated
+ * registry flow whose backend (/packages, /entitlements) was never deployed.
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { Command } from 'commander';
+
+// vi.mock is hoisted above imports/consts, so build the mocks via vi.hoisted()
+// to avoid a temporal-dead-zone reference inside the factory.
+const { installPack, sourceMatchesPackPattern } = vi.hoisted(() => ({
+  installPack: vi.fn(async () => {}),
+  // Mirror the real classifier: pack-pattern sources (marketplace:/@scope/git/
+  // path) match; bare slugs do not.
+  sourceMatchesPackPattern: vi.fn(
+    (s: string) =>
+      s.startsWith('marketplace:') ||
+      s.startsWith('@') ||
+      s.startsWith('./') ||
+      s.startsWith('../') ||
+      s.startsWith('/') ||
+      s.endsWith('.git') ||
+      s.startsWith('git@') ||
+      s.startsWith('http://') ||
+      s.startsWith('https://'),
+  ),
+}));
+
+vi.mock('./pack-install.js', () => ({
+  MARKETPLACE_PREFIX: 'marketplace:',
+  installPack,
+  sourceMatchesPackPattern,
+}));
+
+import { registerPackageInstallCommand } from './pkg-install.js';
+
+async function runInstall(...args: string[]): Promise<void> {
+  const program = new Command();
+  program.exitOverride();
+  registerPackageInstallCommand(program);
+  await program.parseAsync(['install', ...args], { from: 'user' });
+}
+
+describe('hq install dispatch — bare slug routes to marketplace', () => {
+  beforeEach(() => {
+    installPack.mockClear();
+    sourceMatchesPackPattern.mockClear();
+  });
+
+  it('routes a bare slug through the marketplace transport', async () => {
+    await runInstall('email-assistant');
+    expect(installPack).toHaveBeenCalledTimes(1);
+    expect(installPack.mock.calls[0][0]).toBe('marketplace:email-assistant');
+  });
+
+  it('preserves a pinned version on a bare slug', async () => {
+    await runInstall('email-assistant@0.1.0');
+    expect(installPack.mock.calls[0][0]).toBe('marketplace:email-assistant@0.1.0');
+  });
+
+  it('passes an explicit marketplace: source through unchanged', async () => {
+    await runInstall('marketplace:tdd');
+    expect(installPack.mock.calls[0][0]).toBe('marketplace:tdd');
+  });
+
+  it('passes a pack-pattern source (npm scope) through unchanged', async () => {
+    await runInstall('@indigoai-us/hq-pack-demo');
+    expect(installPack.mock.calls[0][0]).toBe('@indigoai-us/hq-pack-demo');
+  });
+});

package/src/commands/pkg-install.ts

@@ -28,7 +28,11 @@ import {
 } from '../utils/registry-client.js';
 import { verifySha256, verifyRsaSignature } from '../utils/integrity.js';
 import { addToRegistry } from '../utils/registry.js';
-import { installPack, sourceMatchesPackPattern } from './pack-install.js';
+import {
+  MARKETPLACE_PREFIX,
+  installPack,
+  sourceMatchesPackPattern,
+} from './pack-install.js';
 
 export function registerPackageInstallCommand(parent: Command): void {
   parent
@@ -52,7 +56,14 @@ export function registerPackageInstallCommand(parent: Command): void {
               followBranch: opts.branch,
             });
           } else {
-            await installPackage(source, opts.company);
+            // Bare slugs: the legacy Cognito-gated registry backend
+            // (/packages, /entitlements) was never deployed, so a bare slug
+            // would fail at registry setup. Resolve it through the marketplace
+            // listings transport — the live install path — instead.
+            await installPack(`${MARKETPLACE_PREFIX}${source}`, {
+              allowHooks: opts.allowHooks,
+              followBranch: opts.branch,
+            });
           }
         } catch (error) {
           console.error(