@indigoai-us/hq-cli 5.77.1 → 5.77.3

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## [Unreleased]
 
+## [5.77.2]
+
+### Fixed
+
+- `hq auth login` now recognizes callback-port collisions and provides recovery
+  guidance instead of surfacing a raw bind exception.
+- `hq company settings set --accounting-enabled <true|false>` now forwards the
+  accounting setting to the server, restoring the documented accounting
+  activation path.
+
 ## [5.77.1]
 
 ### Fixed

package/dist/commands/auth.js

@@ -15,7 +15,7 @@
  */
 import chalk from "chalk";
 import { browserLogin, clearCachedTokens, loadCachedTokens, isExpiring, isMachineIdentity, loadMachineCreds, CognitoAuthError, } from "@indigoai-us/hq-cloud";
-import { refreshCachedSession, } from "../utils/cognito-session.js";
+import { DEFAULT_COGNITO, refreshCachedSession, } from "../utils/cognito-session.js";
 import { cognitoConfigForLoginProvider } from "../utils/login-provider.js";
 /**
  * Decode the (unverified) ID token payload for display purposes only.
@@ -46,6 +46,17 @@ function machineIdentityLabel() {
     const creds = loadMachineCreds();
     return creds ? `machine identity ${creds.username}` : "machine identity";
 }
+function isCallbackPortCollision(error) {
+    if (!error || typeof error !== "object")
+        return false;
+    const { code, message } = error;
+    return code === "EADDRINUSE" || message?.includes("EADDRINUSE") === true;
+}
+function callbackPortCollisionGuidance(port) {
+    return (`  The browser-login callback port (127.0.0.1:${port}) is already in use. ` +
+        "Another `hq auth login` may still be waiting for browser sign-in. Finish that login, " +
+        "or stop its terminal/process, then retry.");
+}
 export function registerAuthCommands(program) {
     const authCmd = program
         .command("auth")
@@ -72,13 +83,21 @@ export function registerAuthCommands(program) {
             console.log(chalk.dim(`  Token cached at ~/.hq/cognito-tokens.json (expires ${tokens.expiresAt})`));
         }
         catch (err) {
-            const msg = err instanceof CognitoAuthError
-                ? err.message
-                : err instanceof Error
+            const callbackPortCollision = isCallbackPortCollision(err);
+            const msg = callbackPortCollision
+                ? "Browser-login callback port is already in use."
+                : err instanceof CognitoAuthError
                     ? err.message
-                    : String(err);
+                    : err instanceof Error
+                        ? err.message
+                        : String(err);
             console.error(chalk.red(`Login failed: ${msg}`));
-            console.error(chalk.dim("  If you do not have an account, sign up at https://onboarding.indigo-hq.com"));
+            if (callbackPortCollision) {
+                console.error(chalk.dim(callbackPortCollisionGuidance(DEFAULT_COGNITO.port ?? 8765)));
+            }
+            else {
+                console.error(chalk.dim("  If you do not have an account, sign up at https://onboarding.indigo-hq.com"));
+            }
             process.exit(1);
         }
     });

package/dist/commands/company.js

@@ -25,9 +25,10 @@ export function registerCompanyCommand(program) {
     settings
         .command("set")
         .description("Set per-company settings (PUT /company-settings). Require at least one " +
-        "of --crm-enabled / --ontology-enabled.")
+        "of --crm-enabled / --ontology-enabled / --accounting-enabled.")
         .option("--crm-enabled <true|false>", "Enable/disable the native CRM for this company")
         .option("--ontology-enabled <true|false>", "Enable/disable the ontology gardener for this company")
+        .option("--accounting-enabled <true|false>", "Enable/disable the accounting pack for this company")
         .action(async (opts) => {
         try {
             const companySlug = company.opts().company;
@@ -35,8 +36,10 @@ export function registerCompanyCommand(program) {
                 console.error(chalk.red("Error: --company <slug> is required."));
                 process.exit(1);
             }
-            if (opts.crmEnabled === undefined && opts.ontologyEnabled === undefined) {
-                console.error(chalk.red("Error: provide at least one of --crm-enabled / --ontology-enabled."));
+            if (opts.crmEnabled === undefined &&
+                opts.ontologyEnabled === undefined &&
+                opts.accountingEnabled === undefined) {
+                console.error(chalk.red("Error: provide at least one of --crm-enabled / --ontology-enabled / --accounting-enabled."));
                 process.exit(1);
             }
             const body = {};
@@ -46,6 +49,9 @@ export function registerCompanyCommand(program) {
             if (opts.ontologyEnabled !== undefined) {
                 body.ontologyEnabled = parseBoolFlag(opts.ontologyEnabled, "--ontology-enabled");
             }
+            if (opts.accountingEnabled !== undefined) {
+                body.accountingEnabled = parseBoolFlag(opts.accountingEnabled, "--accounting-enabled");
+            }
             const token = await ensureCognitoToken();
             const companyUid = await getEntityUid(token, { companySlug });
             body.companyUid = companyUid;

package/dist/commands/files.js

@@ -381,7 +381,7 @@ export function registerFilesCommand(program) {
     });
     files
         .command("versions <path>")
-        .description("List prior content versions and delete markers for one exact vault key. Use --personal for your personal vault.")
+        .description("List prior content versions and delete markers for one exact vault key. Restore a listed version with restore --version-id <id>. Use --personal for your personal vault.")
         .option("--personal", "Target your own personal vault instead of a company vault (mutually exclusive with --company)")
         .action(async (path, opts) => {
         try {
@@ -397,9 +397,9 @@ export function registerFilesCommand(program) {
     });
     files
         .command("restore <path>")
-        .description("Restore a prior version or undelete an exact vault key. Prompts before overwriting unless --yes. Use --personal for your personal vault.")
+        .description("Restore a prior version with --version-id or undelete an exact vault key. Prompts before overwriting unless --yes. Use --personal for your personal vault.")
         .option("--personal", "Target your own personal vault instead of a company vault (mutually exclusive with --company)")
-        .option("--version <id>", "Content version ID to restore")
+        .option("--version-id <id>", "Content version ID to restore")
         .option("-y, --yes", "Skip the overwrite confirmation prompt (for scripts)")
         .action(async (path, opts) => {
         try {
@@ -408,7 +408,7 @@ export function registerFilesCommand(program) {
             assertRecoveryScope(personal, companySlug);
             await runFilesRestore({
                 key: path,
-                versionId: opts.version,
+                versionId: opts.versionId,
                 yes: opts.yes === true,
                 personal,
                 companySlug,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.77.1",
+  "version": "5.77.3",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {

package/src/commands/auth.test.ts

@@ -0,0 +1,82 @@
+import { describe, expect, it, vi } from "vitest";
+import { Command } from "commander";
+
+const mocks = vi.hoisted(() => ({
+  browserLogin: vi.fn(),
+  isExpiring: vi.fn(),
+  isMachineIdentity: vi.fn(),
+  loadCachedTokens: vi.fn(),
+  loadMachineCreds: vi.fn(),
+  CognitoAuthError: class TestCognitoAuthError extends Error {},
+}));
+
+vi.mock("@indigoai-us/hq-cloud", () => ({
+  browserLogin: mocks.browserLogin,
+  clearCachedTokens: vi.fn(),
+  isExpiring: mocks.isExpiring,
+  isMachineIdentity: mocks.isMachineIdentity,
+  loadCachedTokens: mocks.loadCachedTokens,
+  loadMachineCreds: mocks.loadMachineCreds,
+  CognitoAuthError: mocks.CognitoAuthError,
+}));
+
+vi.mock("../utils/cognito-session.js", () => ({
+  DEFAULT_COGNITO: {
+    region: "us-east-1",
+    userPoolDomain: "vault-indigo-hq-prod",
+    clientId: "client-123",
+    port: 8765,
+    identityProvider: "Google",
+  },
+  refreshCachedSession: vi.fn(),
+}));
+
+import { registerAuthCommands } from "./auth.js";
+
+class ProcessExitError extends Error {
+  constructor(readonly code: number) {
+    super(`process.exit(${code})`);
+  }
+}
+
+describe("hq auth login", () => {
+  it("REGRESSION: explains how to recover when the callback port is held by another login", async () => {
+    mocks.isMachineIdentity.mockReturnValue(false);
+    mocks.loadCachedTokens.mockReturnValue(undefined);
+    mocks.browserLogin.mockRejectedValue(
+      Object.assign(new Error("listen EADDRINUSE: address already in use 127.0.0.1:8765"), {
+        code: "EADDRINUSE",
+      }),
+    );
+
+    const errors: string[] = [];
+    const errorSpy = vi
+      .spyOn(console, "error")
+      .mockImplementation((...args: unknown[]) => errors.push(args.map(String).join(" ")));
+    const exitSpy = vi
+      .spyOn(process, "exit")
+      .mockImplementation(((code?: number) => {
+        throw new ProcessExitError(code ?? 0);
+      }) as never);
+    const program = new Command();
+    program.exitOverride();
+    registerAuthCommands(program);
+
+    try {
+      await expect(program.parseAsync(["auth", "login"], { from: "user" })).rejects.toMatchObject({
+        code: 1,
+      });
+    } finally {
+      errorSpy.mockRestore();
+      exitSpy.mockRestore();
+    }
+
+    const output = errors.join("\n");
+    expect(output).toContain("Login failed: Browser-login callback port is already in use.");
+    expect(output).not.toContain("EADDRINUSE");
+    expect(output).toContain("callback port (127.0.0.1:8765) is already in use");
+    expect(output).toContain("Another `hq auth login` may still be waiting");
+    expect(output).toContain("stop its terminal/process, then retry");
+    expect(output).not.toContain("sign up at");
+  });
+});

package/src/commands/auth.ts

@@ -66,6 +66,20 @@ function machineIdentityLabel(): string {
   return creds ? `machine identity ${creds.username}` : "machine identity";
 }
 
+function isCallbackPortCollision(error: unknown): boolean {
+  if (!error || typeof error !== "object") return false;
+  const { code, message } = error as NodeJS.ErrnoException;
+  return code === "EADDRINUSE" || message?.includes("EADDRINUSE") === true;
+}
+
+function callbackPortCollisionGuidance(port: number): string {
+  return (
+    `  The browser-login callback port (127.0.0.1:${port}) is already in use. ` +
+    "Another `hq auth login` may still be waiting for browser sign-in. Finish that login, " +
+    "or stop its terminal/process, then retry."
+  );
+}
+
 export function registerAuthCommands(program: Command): void {
   const authCmd = program
     .command("auth")
@@ -105,18 +119,27 @@ export function registerAuthCommands(program: Command): void {
           chalk.dim(`  Token cached at ~/.hq/cognito-tokens.json (expires ${tokens.expiresAt})`),
         );
       } catch (err) {
+        const callbackPortCollision = isCallbackPortCollision(err);
         const msg =
-          err instanceof CognitoAuthError
-            ? err.message
-            : err instanceof Error
+          callbackPortCollision
+            ? "Browser-login callback port is already in use."
+            : err instanceof CognitoAuthError
               ? err.message
-              : String(err);
+              : err instanceof Error
+                ? err.message
+                : String(err);
         console.error(chalk.red(`Login failed: ${msg}`));
-        console.error(
-          chalk.dim(
-            "  If you do not have an account, sign up at https://onboarding.indigo-hq.com",
-          ),
-        );
+        if (callbackPortCollision) {
+          console.error(
+            chalk.dim(callbackPortCollisionGuidance(DEFAULT_COGNITO.port ?? 8765)),
+          );
+        } else {
+          console.error(
+            chalk.dim(
+              "  If you do not have an account, sign up at https://onboarding.indigo-hq.com",
+            ),
+          );
+        }
         process.exit(1);
       }
     });

package/src/commands/company.test.ts

@@ -104,6 +104,31 @@ describe("hq company settings set", () => {
     expect(sent.ontologyEnabled).toBeUndefined();
   });
 
+  it("PUTs accountingEnabled=true with the resolved companyUid", async () => {
+    fetchSpy.mockResolvedValueOnce(
+      jsonResponse(200, { companySettings: { accountingEnabled: true } }),
+    );
+
+    await run([
+      "company",
+      "settings",
+      "set",
+      "--company",
+      "acme",
+      "--accounting-enabled",
+      "true",
+    ]);
+
+    expect(fetchSpy).toHaveBeenCalledTimes(1);
+    const sent = JSON.parse(fetchSpy.mock.calls[0][1]?.body as string);
+    expect(sent).toMatchObject({
+      companyUid: "cmp_acme",
+      accountingEnabled: true,
+    });
+    expect(sent.crmEnabled).toBeUndefined();
+    expect(sent.ontologyEnabled).toBeUndefined();
+  });
+
   it("PUTs both flags when both are supplied", async () => {
     fetchSpy.mockResolvedValueOnce(jsonResponse(200, {}));
 

package/src/commands/company.ts

@@ -7,8 +7,9 @@ import { vaultApiFetch, getEntityUid } from "../utils/vault-api.js";
  * `hq company settings set` — owner-only per-company settings toggles
  * (agency group-grants US-007 / hq-native-crm US-003). Wraps
  * `PUT /company-settings`, setting the runtime-flippable `crmEnabled` /
- * `ontologyEnabled` flags so an owner can enable the native CRM (and the
- * ontology gardener) for a company without a redeploy.
+ * `ontologyEnabled` / `accountingEnabled` flags so an owner can enable the
+ * native CRM, ontology gardener, or accounting pack for a company without a
+ * redeploy.
  *
  * Conventions mirror `secrets.ts`: ensureCognitoToken() → getEntityUid() →
  * vaultApiFetch() → error-check → chalk output.
@@ -17,6 +18,7 @@ import { vaultApiFetch, getEntityUid } from "../utils/vault-api.js";
 interface SettingsSetFlags {
   crmEnabled?: string;
   ontologyEnabled?: string;
+  accountingEnabled?: string;
 }
 
 /**
@@ -45,7 +47,7 @@ export function registerCompanyCommand(program: Command): void {
     .command("set")
     .description(
       "Set per-company settings (PUT /company-settings). Require at least one " +
-        "of --crm-enabled / --ontology-enabled.",
+        "of --crm-enabled / --ontology-enabled / --accounting-enabled.",
     )
     .option(
       "--crm-enabled <true|false>",
@@ -55,6 +57,10 @@ export function registerCompanyCommand(program: Command): void {
       "--ontology-enabled <true|false>",
       "Enable/disable the ontology gardener for this company",
     )
+    .option(
+      "--accounting-enabled <true|false>",
+      "Enable/disable the accounting pack for this company",
+    )
     .action(async (opts: SettingsSetFlags) => {
       try {
         const companySlug = company.opts().company as string | undefined;
@@ -62,10 +68,14 @@ export function registerCompanyCommand(program: Command): void {
           console.error(chalk.red("Error: --company <slug> is required."));
           process.exit(1);
         }
-        if (opts.crmEnabled === undefined && opts.ontologyEnabled === undefined) {
+        if (
+          opts.crmEnabled === undefined &&
+          opts.ontologyEnabled === undefined &&
+          opts.accountingEnabled === undefined
+        ) {
           console.error(
             chalk.red(
-              "Error: provide at least one of --crm-enabled / --ontology-enabled.",
+              "Error: provide at least one of --crm-enabled / --ontology-enabled / --accounting-enabled.",
             ),
           );
           process.exit(1);
@@ -81,6 +91,12 @@ export function registerCompanyCommand(program: Command): void {
             "--ontology-enabled",
           );
         }
+        if (opts.accountingEnabled !== undefined) {
+          body.accountingEnabled = parseBoolFlag(
+            opts.accountingEnabled,
+            "--accounting-enabled",
+          );
+        }
 
         const token = await ensureCognitoToken();
         const companyUid = await getEntityUid(token, { companySlug });

package/src/commands/files-recovery.test.ts

@@ -308,18 +308,20 @@ describe("hq files trash", () => {
 });
 
 describe("hq files recovery command help", () => {
-  it("documents the finalized --version and --prefix option forms", () => {
+  it("documents the finalized --version-id and --prefix option forms", () => {
     const program = buildProgram();
     const files = program.commands.find((command) => command.name() === "files");
     const restore = files?.commands.find((command) => command.name() === "restore");
     const trash = files?.commands.find((command) => command.name() === "trash");
 
     expect(files?.helpInformation()).toContain("versions [options] <path>");
-    expect(restore?.helpInformation()).toContain("--version <id>");
+    expect(files?.helpInformation()).toContain("restore --version-id <id>");
+    expect(restore?.helpInformation()).toContain("--version-id <id>");
+    expect(restore?.helpInformation()).not.toContain("--version <id>");
     expect(trash?.helpInformation()).toContain("--prefix <prefix>");
   });
 
-  it("passes --version to the restore request", async () => {
+  it("passes --version-id to the restore request", async () => {
     fetchSpy.mockResolvedValueOnce(membershipResponse());
     fetchSpy.mockResolvedValueOnce(
       jsonResponse(200, {
@@ -331,7 +333,14 @@ describe("hq files recovery command help", () => {
     );
 
     await buildProgram().parseAsync(
-      ["files", "restore", "notes/a.md", "--version", "old-version", "--yes"],
+      [
+        "files",
+        "restore",
+        "notes/a.md",
+        "--version-id",
+        "old-version",
+        "--yes",
+      ],
       { from: "user" },
     );
 

package/src/commands/files.ts

@@ -515,7 +515,7 @@ export function registerFilesCommand(program: Command): Command {
   files
     .command("versions <path>")
     .description(
-      "List prior content versions and delete markers for one exact vault key. Use --personal for your personal vault.",
+      "List prior content versions and delete markers for one exact vault key. Restore a listed version with restore --version-id <id>. Use --personal for your personal vault.",
     )
     .option(
       "--personal",
@@ -539,18 +539,18 @@ export function registerFilesCommand(program: Command): Command {
   files
     .command("restore <path>")
     .description(
-      "Restore a prior version or undelete an exact vault key. Prompts before overwriting unless --yes. Use --personal for your personal vault.",
+      "Restore a prior version with --version-id or undelete an exact vault key. Prompts before overwriting unless --yes. Use --personal for your personal vault.",
     )
     .option(
       "--personal",
       "Target your own personal vault instead of a company vault (mutually exclusive with --company)",
     )
-    .option("--version <id>", "Content version ID to restore")
+    .option("--version-id <id>", "Content version ID to restore")
     .option("-y, --yes", "Skip the overwrite confirmation prompt (for scripts)")
     .action(
       async (
         path: string,
-        opts: { personal?: boolean; yes?: boolean; version?: string },
+        opts: { personal?: boolean; yes?: boolean; versionId?: string },
       ) => {
         try {
           const companySlug = files.opts().company as string | undefined;
@@ -558,7 +558,7 @@ export function registerFilesCommand(program: Command): Command {
           assertRecoveryScope(personal, companySlug);
           await runFilesRestore({
             key: path,
-            versionId: opts.version,
+            versionId: opts.versionId,
             yes: opts.yes === true,
             personal,
             companySlug,