@indigoai-us/hq-cli 5.59.0 → 5.61.0

package/dist/commands/meetings.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f2fc6ee0-c7c4-5012-85ce-aea36030aa92")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6bb33e65-134a-5b0a-917b-ca084d4c8366")}catch(e){}}();
 import chalk from "chalk";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
@@ -13,6 +13,17 @@ function formatDuration(seconds) {
         return `${m}m ${s}s`;
     return `${s}s`;
 }
+function safeFormatDuration(seconds) {
+    return typeof seconds === "number" && Number.isFinite(seconds) ? formatDuration(seconds) : "-";
+}
+function safeFormatDate(iso, options) {
+    if (typeof iso !== "string" || iso.length === 0)
+        return "-";
+    const date = new Date(iso);
+    if (Number.isNaN(date.getTime()))
+        return "-";
+    return options ? date.toLocaleString("en-US", options) : date.toLocaleString();
+}
 function formatTimestamp(ts) {
     const m = Math.floor(ts / 60);
     const s = Math.floor(ts % 60);
@@ -32,6 +43,38 @@ function statusBadge(status) {
             return chalk.dim(status);
     }
 }
+function isMarkdownShape(x) {
+    if (!x || typeof x !== "object")
+        return false;
+    const candidate = x;
+    return candidate.sourceShape === "markdown" || Boolean(candidate.source?.frontmatter);
+}
+function hasSignals(signals) {
+    return Boolean(signals &&
+        typeof signals === "object" &&
+        !Array.isArray(signals) &&
+        Object.keys(signals).length > 0);
+}
+function renderSignals(signals) {
+    console.log(chalk.bold("Signals"));
+    for (const [key, value] of Object.entries(signals)) {
+        if (value === null || value === undefined) {
+            console.log(`  ${key}: -`);
+        }
+        else if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+            console.log(`  ${key}: ${String(value)}`);
+        }
+        else {
+            const rendered = JSON.stringify(value, null, 2)
+                .split("\n")
+                .map((line) => `    ${line}`)
+                .join("\n");
+            console.log(`  ${key}:`);
+            console.log(rendered);
+        }
+    }
+    console.log();
+}
 async function resolveShortId(token, prefix, query) {
     if (prefix.includes("-") && prefix.length > 8)
         return prefix;
@@ -99,25 +142,28 @@ function printMeetingTable(meetings) {
         const id = m.meetingId.slice(0, 8);
         const fullTitle = displayTitle(m);
         const title = fullTitle.length > TITLE_W ? fullTitle.slice(0, TITLE_W - 1) + "…" : fullTitle;
-        const date = new Date(m.startTime).toLocaleDateString("en-US", {
+        const date = safeFormatDate(m.startTime, {
             month: "short",
             day: "numeric",
             hour: "2-digit",
             minute: "2-digit",
         });
-        const dur = formatDuration(m.duration);
+        const dur = safeFormatDuration(m.duration);
+        const status = m.status ? statusBadge(m.status) : chalk.dim("-");
+        const parts = typeof m.participantCount === "number" ? String(m.participantCount) : "-";
         const flags = [
             m.hasTranscript ? "T" : "",
             m.hasNotes ? "N" : "",
+            m.hasSignals ? "S" : "",
         ].filter(Boolean).join("") || "-";
         console.log([
             chalk.cyan(id.padEnd(ID_W)),
             title.padEnd(TITLE_W),
             chalk.dim(date.padEnd(DATE_W)),
             dur.padEnd(DUR_W),
-            statusBadge(m.status).padEnd(STATUS_W + 10), // chalk adds escape chars
-            String(m.participantCount).padEnd(PARTS_W),
-            flags,
+            status.padEnd(STATUS_W + 10), // chalk adds escape chars
+            parts.padEnd(PARTS_W),
+            flags.padEnd(FLAGS_W),
         ].join("  "));
     }
 }
@@ -188,16 +234,34 @@ export function registerMeetingsCommand(program) {
                 console.log(JSON.stringify(detail, null, 2));
                 return;
             }
-            console.log(chalk.bold(`\n${detail.title}\n`));
+            if (isMarkdownShape(detail)) {
+                const fm = detail.source.frontmatter ?? {};
+                console.log(chalk.bold(`\n${fm.title || "(untitled)"}\n`));
+                console.log(`  ID:          ${chalk.cyan(detail.meetingId)}`);
+                console.log(`  Status:      ${fm.bot_status || "-"}`);
+                console.log(`  Date:        ${safeFormatDate(fm.scheduled_start_time || fm.created_at)}`);
+                console.log(`  Platform:    ${fm.meeting_platform || "-"}`);
+                console.log(`  Origin:      ${fm.origin || "-"}`);
+                console.log(`  Company:     ${fm.company_id || "-"}`);
+                if (fm.meeting_url)
+                    console.log(`  Meeting URL: ${fm.meeting_url}`);
+                if (hasSignals(detail.signals)) {
+                    console.log(`  Signals:     ${Object.keys(detail.signals).length}`);
+                }
+                console.log(chalk.dim(`\n  This meeting is stored as a markdown document. Use \`hq meetings transcript ${detail.meetingId.slice(0, 8)}\` to view the full document.`));
+                console.log();
+                return;
+            }
+            console.log(chalk.bold(`\n${detail.title ?? "(untitled)"}\n`));
             console.log(`  ID:       ${chalk.cyan(detail.meetingId)}`);
-            console.log(`  Status:   ${statusBadge(detail.status)}`);
-            console.log(`  Date:     ${new Date(detail.startTime).toLocaleString()}`);
-            console.log(`  Duration: ${formatDuration(detail.duration)}`);
-            console.log(`  Source:   ${detail.sourceApp} (${detail.botProvider})`);
+            console.log(`  Status:   ${detail.status ? statusBadge(detail.status) : chalk.dim("-")}`);
+            console.log(`  Date:     ${safeFormatDate(detail.startTime)}`);
+            console.log(`  Duration: ${safeFormatDuration(detail.duration)}`);
+            console.log(`  Source:   ${detail.sourceApp ?? "-"} (${detail.botProvider ?? "-"})`);
             console.log(`  Shared:   ${detail.isShared ? "yes" : "no"}`);
-            if (detail.participants.length > 0) {
+            if ((detail.participants?.length ?? 0) > 0) {
                 console.log(chalk.bold("\n  Participants:"));
-                for (const p of detail.participants) {
+                for (const p of detail.participants ?? []) {
                     const name = p.name ?? p.email;
                     const role = p.role === "organizer" ? chalk.yellow(" (organizer)") : "";
                     console.log(`    - ${name}${role}`);
@@ -325,6 +389,26 @@ export function registerMeetingsCommand(program) {
             if (!res.ok)
                 await handleApiError(res);
             const detail = (await res.json());
+            if (isMarkdownShape(detail)) {
+                const documentUrl = detail.source.presigned_url;
+                if (!documentUrl) {
+                    console.error(chalk.red("No document available for this meeting."));
+                    process.exit(1);
+                }
+                const docRes = await fetch(documentUrl);
+                if (!docRes.ok) {
+                    console.error(chalk.red(`Failed to download meeting document (${docRes.status})`));
+                    process.exit(1);
+                }
+                const markdown = await docRes.text();
+                if (meetings.opts().json) {
+                    console.log(JSON.stringify({ meetingId: detail.meetingId, sourceShape: "markdown", markdown }, null, 2));
+                    return;
+                }
+                console.log(chalk.bold(`\nTranscript: ${detail.source.frontmatter?.title || "(untitled)"}\n`));
+                console.log(markdown);
+                return;
+            }
             if (!detail.documentUrl) {
                 console.error(chalk.red("No document URL available for this meeting."));
                 process.exit(1);
@@ -375,6 +459,35 @@ export function registerMeetingsCommand(program) {
             if (!res.ok)
                 await handleApiError(res);
             const detail = (await res.json());
+            if (isMarkdownShape(detail)) {
+                if (hasSignals(detail.signals)) {
+                    if (meetings.opts().json) {
+                        console.log(JSON.stringify(detail.signals, null, 2));
+                        return;
+                    }
+                    console.log(chalk.bold(`\nMeeting Notes: ${detail.source.frontmatter?.title || "(untitled)"}\n`));
+                    renderSignals(detail.signals);
+                    return;
+                }
+                const documentUrl = detail.source.presigned_url;
+                if (!documentUrl) {
+                    console.log(chalk.yellow("No notes available for this meeting."));
+                    return;
+                }
+                const docRes = await fetch(documentUrl);
+                if (!docRes.ok) {
+                    console.error(chalk.red(`Failed to download meeting document (${docRes.status})`));
+                    process.exit(1);
+                }
+                const markdown = await docRes.text();
+                if (meetings.opts().json) {
+                    console.log(JSON.stringify({ meetingId: detail.meetingId, sourceShape: "markdown", markdown }, null, 2));
+                    return;
+                }
+                console.log(chalk.bold(`\nMeeting Notes: ${detail.source.frontmatter?.title || "(untitled)"}\n`));
+                console.log(markdown);
+                return;
+            }
             if (!detail.documentUrl) {
                 console.error(chalk.red("No document URL available for this meeting."));
                 process.exit(1);
@@ -437,4 +550,4 @@ export function registerMeetingsCommand(program) {
     });
 }
 //# sourceMappingURL=meetings.js.map
-//# debugId=f2fc6ee0-c7c4-5012-85ce-aea36030aa92
+//# debugId=6bb33e65-134a-5b0a-917b-ca084d4c8366

package/dist/commands/pack-install.d.ts

@@ -36,6 +36,12 @@
 import { type KeyObject } from 'node:crypto';
 import { type SecretResolver } from './mcp-registration.js';
 import type { PackManifest } from '../types.js';
+export interface ResolveLatestOptions {
+    forceRefresh?: boolean;
+    now?: number;
+    cacheTtlMs?: number;
+    fetchImpl?: typeof fetch;
+}
 export type Transport = 'npm' | 'git' | 'local' | 'marketplace';
 /** Prefix that routes a source through the HQ marketplace transport (US-006). */
 export declare const MARKETPLACE_PREFIX = "marketplace:";
@@ -181,7 +187,7 @@ export interface LatestResult {
  * @param source         the stamped `source:` from the installed package.yaml
  * @param installedVersion the installed pack's manifest `version` (npm compare)
  */
-export declare function resolveLatest(source: string, installedVersion?: string): LatestResult;
+export declare function resolveLatest(source: string, installedVersion?: string, opts?: ResolveLatestOptions): Promise<LatestResult>;
 /**
  * Async marketplace update probe (US-006): resolve the slug's latest approved
  * listing version and compare it to the installed version. Reuses the same

package/dist/commands/pack-install.js

@@ -34,7 +34,7 @@
  * from each pack's package.yaml; rationale lives in the layout-fix PR.)
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0ec07d3a-ee86-51fd-adbd-2608c620ae99")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a90272ca-94a1-5905-85f8-af12a01cb58a")}catch(e){}}();
 import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
@@ -54,6 +54,58 @@ import { safeExtractTarball } from './safe-extract.js';
 import { vaultApiFetchPublic } from '../utils/vault-api.js';
 import { redactSecrets, SECRET_REDACTION, registerMcpServers, McpManifestError, } from './mcp-registration.js';
 import { readCache, listSecretCacheScopes } from '../utils/secrets-cache.js';
+const PACK_UPDATE_CACHE_TTL_MS = 12 * 60 * 60 * 1000;
+const PACK_UPDATE_FETCH_TIMEOUT_MS = 3_000;
+const gitLsRemoteMemo = new Map();
+function packUpdateCachePath() {
+    return path.join(os.homedir(), '.hq', 'pack-update-cache.json');
+}
+function readPackUpdateCache() {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(packUpdateCachePath(), 'utf-8'));
+        if (!parsed || typeof parsed !== 'object' || !parsed.entries || typeof parsed.entries !== 'object') {
+            return { entries: {} };
+        }
+        return { entries: parsed.entries };
+    }
+    catch {
+        return { entries: {} };
+    }
+}
+function writePackUpdateCache(cache) {
+    try {
+        const file = packUpdateCachePath();
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, JSON.stringify(cache));
+    }
+    catch {
+        // best-effort; update checks must never fail because the cache is unwritable
+    }
+}
+function cachedLatest(cacheKey, opts) {
+    if (opts.forceRefresh)
+        return undefined;
+    const entry = readPackUpdateCache().entries[cacheKey];
+    if (!entry || typeof entry.latest !== 'string' || typeof entry.fetchedAt !== 'number')
+        return undefined;
+    const now = opts.now ?? Date.now();
+    const ttl = opts.cacheTtlMs ?? PACK_UPDATE_CACHE_TTL_MS;
+    return now - entry.fetchedAt <= ttl ? entry.latest : undefined;
+}
+function storeCachedLatest(cacheKey, latest, opts) {
+    const cache = readPackUpdateCache();
+    cache.entries[cacheKey] = { latest, fetchedAt: opts.now ?? Date.now() };
+    writePackUpdateCache(cache);
+}
+async function latestWithDiskCache(cacheKey, opts, refresh) {
+    const cached = cachedLatest(cacheKey, opts);
+    if (cached)
+        return cached;
+    const latest = await refresh();
+    if (latest)
+        storeCachedLatest(cacheKey, latest, opts);
+    return latest;
+}
 /** Prefix that routes a source through the HQ marketplace transport (US-006). */
 export const MARKETPLACE_PREFIX = 'marketplace:';
 export function classify(source) {
@@ -489,13 +541,33 @@ function rsyncDir(src, dest) {
  */
 function isNamedRef(url, ref) {
     try {
-        const out = execFileSync('git', ['ls-remote', '--heads', '--tags', url, ref], { encoding: 'utf-8', stdio: ['ignore', 'pipe', 'ignore'] });
+        const out = gitLsRemote(['--heads', '--tags', url, ref]);
         return out.trim().length > 0;
     }
     catch {
         return false;
     }
 }
+function gitLsRemote(args) {
+    const key = args.join('\0');
+    const cached = gitLsRemoteMemo.get(key);
+    if (cached !== undefined)
+        return cached;
+    const out = execFileSync('git', ['ls-remote', ...args], { encoding: 'utf-8', stdio: ['ignore', 'pipe', 'ignore'] });
+    gitLsRemoteMemo.set(key, out);
+    return out;
+}
+async function fetchLatestNpmVersion(pkg, opts) {
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const res = await fetchImpl(`https://registry.npmjs.org/${encodeURIComponent(pkg)}/latest`, {
+        headers: { Accept: 'application/json' },
+        signal: AbortSignal.timeout(PACK_UPDATE_FETCH_TIMEOUT_MS),
+    });
+    if (!res.ok)
+        throw new Error(`registry returned ${res.status}`);
+    const body = (await res.json());
+    return typeof body.version === 'string' ? body.version : undefined;
+}
 /** Extract the ref (sha or named ref) recorded in a stamped git source. */
 function gitRefFromSource(source) {
     const { subpath, ref } = parseGitFragment(source);
@@ -504,6 +576,9 @@ function gitRefFromSource(source) {
     void subpath;
     return ref;
 }
+function isFullGitSha(ref) {
+    return /^[0-9a-f]{40}$/i.test(ref);
+}
 /**
  * Probe whether a newer version of an already-installed pack is available,
  * WITHOUT fetching or installing. Reuses the same git/npm primitives as the
@@ -513,7 +588,7 @@ function gitRefFromSource(source) {
  * @param source         the stamped `source:` from the installed package.yaml
  * @param installedVersion the installed pack's manifest `version` (npm compare)
  */
-export function resolveLatest(source, installedVersion) {
+export async function resolveLatest(source, installedVersion, opts = {}) {
     let transport;
     try {
         transport = classify(source);
@@ -542,15 +617,12 @@ export function resolveLatest(source, installedVersion) {
         const pkg = stripVersion(source);
         const current = installedVersion ?? (source.lastIndexOf('@') > 0 ? source.slice(source.lastIndexOf('@') + 1) : undefined);
         try {
-            const latest = execFileSync('npm', ['view', pkg, 'version'], {
-                encoding: 'utf-8',
-                stdio: ['ignore', 'pipe', 'ignore'],
-            }).trim();
+            const latest = await latestWithDiskCache(`npm:${pkg}`, opts, () => fetchLatestNpmVersion(pkg, opts));
             const updateAvailable = current && latest ? semverGt(latest, current) : null;
             return { transport, current, latest, updateAvailable };
         }
         catch (e) {
-            return { transport, current, updateAvailable: null, error: `npm view failed: ${e.message}` };
+            return { transport, current, updateAvailable: null, error: `npm registry check failed: ${e.message}` };
         }
     }
     // git
@@ -565,13 +637,12 @@ export function resolveLatest(source, installedVersion) {
     const current = gitRefFromSource(source);
     // If install followed a named ref (branch/tag), compare that ref's tip;
     // otherwise (default SHA-pin) compare the default branch HEAD.
-    const refArg = current && isNamedRef(url, current) ? current : 'HEAD';
+    const refArg = current && !isFullGitSha(current) && isNamedRef(url, current) ? current : 'HEAD';
     try {
-        const out = execFileSync('git', ['ls-remote', url, refArg], {
-            encoding: 'utf-8',
-            stdio: ['ignore', 'pipe', 'ignore'],
-        }).trim();
-        const latest = out.split(/\s+/)[0] || undefined;
+        const latest = await latestWithDiskCache(`git:${url}#${refArg}`, opts, () => {
+            const out = gitLsRemote([url, refArg]).trim();
+            return out.split(/\s+/)[0] || undefined;
+        });
         const updateAvailable = current && latest ? !latest.startsWith(current) && !current.startsWith(latest) : null;
         return { transport, current, latest, updateAvailable };
     }
@@ -1629,4 +1700,4 @@ export async function installPack(source, opts = {}) {
     }
 }
 //# sourceMappingURL=pack-install.js.map
-//# debugId=0ec07d3a-ee86-51fd-adbd-2608c620ae99
+//# debugId=a90272ca-94a1-5905-85f8-af12a01cb58a

package/dist/commands/packs.d.ts

@@ -18,6 +18,7 @@
  * Spec: knowledge/public/hq-core/package-yaml-spec.md.
  */
 import { Command } from 'commander';
+import { type LatestResult } from './pack-install.js';
 import { type InstalledPack, type LinkStatus } from '../utils/pack-contributions.js';
 import type { PackContributeKey } from '../types.js';
 interface InstalledPackView {
@@ -48,7 +49,7 @@ interface InstalledPackView {
     };
     error?: string;
 }
-export declare function buildInstalledView(hqRoot: string, hqVersion: string | null, pack: InstalledPack, installedSources: Set<string>, checkUpdates: boolean): InstalledPackView;
+export declare function buildInstalledView(hqRoot: string, hqVersion: string | null, pack: InstalledPack, installedSources: Set<string>, checkUpdates: boolean, latestProbe?: LatestResult): InstalledPackView;
 export declare function registerPacksCommand(parent: Command): void;
 export {};
 //# sourceMappingURL=packs.d.ts.map

package/dist/commands/packs.js

@@ -18,7 +18,7 @@
  * Spec: knowledge/public/hq-core/package-yaml-spec.md.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="69746edd-f9d8-528e-8902-de799c58bd8a")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f8ee3de6-a097-5e0f-8afa-63381f29032d")}catch(e){}}();
 import * as fs from 'fs';
 import * as path from 'path';
 import * as readline from 'readline';
@@ -61,7 +61,7 @@ async function confirm(question) {
     });
     return /^(y|yes)$/i.test(answer.trim());
 }
-export function buildInstalledView(hqRoot, hqVersion, pack, installedSources, checkUpdates) {
+export function buildInstalledView(hqRoot, hqVersion, pack, installedSources, checkUpdates, latestProbe) {
     if (!pack.manifest) {
         return {
             name: pack.name,
@@ -95,7 +95,7 @@ export function buildInstalledView(hqRoot, hqVersion, pack, installedSources, ch
     const hqCoreSatisfied = hqVersion && requiresHqCore ? semverSatisfies(hqVersion, requiresHqCore) : null;
     let updateAvailable = null;
     if (checkUpdates && m.source) {
-        updateAvailable = resolveLatest(m.source, m.version).updateAvailable;
+        updateAvailable = latestProbe?.updateAvailable ?? null;
     }
     // US-005 — surface the pack's `initialization` block so the HQ Sync
     // "Installed" panel can render its get-started affordance. `readPackManifest`
@@ -129,13 +129,16 @@ export function buildInstalledView(hqRoot, hqVersion, pack, installedSources, ch
         ...(initialization ? { initialization } : {}),
     };
 }
-function buildListView(hqRoot, checkUpdates, evalConditionals) {
+async function buildListView(hqRoot, checkUpdates, evalConditionals, refreshUpdates) {
     const hqVersion = readHqVersion(hqRoot);
     const packs = listInstalledPacks(hqRoot);
     const catalog = readRecommendedPackages(hqRoot);
     const catalogSources = new Set(catalog.map((c) => c.source));
     const warnings = [];
-    const installed = packs.map((p) => buildInstalledView(hqRoot, hqVersion, p, catalogSources, checkUpdates));
+    const latestProbes = await Promise.all(packs.map((p) => checkUpdates && p.manifest?.source
+        ? resolveLatest(p.manifest.source, p.manifest.version, { forceRefresh: refreshUpdates })
+        : Promise.resolve(undefined)));
+    const installed = packs.map((p, i) => buildInstalledView(hqRoot, hqVersion, p, catalogSources, checkUpdates, latestProbes[i]));
     for (const p of installed) {
         if (p.error)
             warnings.push(`${p.name}: ${p.error}`);
@@ -217,7 +220,7 @@ async function runUpdate(name, opts) {
         // other transport keeps the existing synchronous probe unchanged.
         const probe = safeClassify(source) === 'marketplace'
             ? await resolveLatestMarketplace(source, m.version)
-            : resolveLatest(source, m.version);
+            : await resolveLatest(source, m.version, { forceRefresh: true });
         const base = {
             name: pname,
             transport: probe.transport,
@@ -374,10 +377,11 @@ export function registerPacksCommand(parent) {
         .option('--json', 'Machine-readable JSON output')
         .option('--hq-root <path>', 'HQ root (default: auto-detect)')
         .option('--check-updates', 'Probe each pack for available updates (network I/O)')
+        .option('--refresh', 'Bypass cached update probes')
         .option('--eval-conditionals', 'Evaluate catalog conditional predicates (runs bash)')
         .action(async (opts) => {
         try {
-            const view = buildListView(resolveRoot(opts), !!opts.checkUpdates, !!opts.evalConditionals);
+            const view = await buildListView(resolveRoot(opts), !!opts.checkUpdates, !!opts.evalConditionals, !!opts.refresh);
             if (wantsJson(opts))
                 emitJson(view);
             else
@@ -394,6 +398,7 @@ export function registerPacksCommand(parent) {
         .option('--json', 'Machine-readable JSON output')
         .option('--hq-root <path>', 'HQ root (default: auto-detect)')
         .option('--check-only', 'Report availability without installing')
+        .option('--refresh', 'Bypass cached update probes (update refreshes by default)')
         .option('-y, --yes', 'Non-interactive (implies --allow-hooks and --allow-mcp)')
         .option('--allow-hooks', 'Install pack hooks without prompting')
         .option('--allow-mcp', 'Register pack MCP servers without prompting')
@@ -463,4 +468,4 @@ export function registerPacksCommand(parent) {
     });
 }
 //# sourceMappingURL=packs.js.map
-//# debugId=69746edd-f9d8-528e-8902-de799c58bd8a
+//# debugId=f8ee3de6-a097-5e0f-8afa-63381f29032d

package/dist/commands/secrets.d.ts

@@ -36,6 +36,11 @@ export interface SecretLoadResponse {
         message?: string;
     }>;
 }
+export interface SecretInjectionRecipe {
+    header: string;
+    scheme: "raw" | "bearer";
+    extraHeaders?: Record<string, string>;
+}
 export declare function scrubSandboxOutput(text: string, secretNames?: string[]): string;
 export declare function loadRevealedSecrets(token: string, companyUid: string, keys: string[], usage?: SecretUsage): Promise<Map<string, string>>;
 export declare function registerSecretsCommand(program: Command): void;