@woodsportal/hubspot-kit 1.0.42-dev.0 → 1.0.42-dev.2

package/CHANGELOG.md

@@ -3,7 +3,9 @@
 ## Unreleased
 
 ### Portal auth scaffold
-- **`wp init --auth`** — tiered portal login scaffold: `none` \| `starter` (email/password) \| `sso` \| `full` (SSO + MFA)
+- **`wp init --auth full`** — fix `starter-login` importing `MFA_REQUIRED_SCAFFOLD_MESSAGE` after full-tier `login-session-bridge` merge; add full-tier `starter-login` layer
+- **SSO callback** — export `clearLegacySsoCallbackInFlight` in auth scaffold (`mount-portal` boot)
+- **`wp init` hint** — Getting started uses `npm install` (not `yarn install`); template READMEs aligned
 - **Interactive `wp init` wizard** — sequential prompts: type → name → router → auth → CDN → confirm
 - **`templates/scaffold/auth/`** — layered `_shared`, `_sso`, `_full` files merged at init; `woodscli.json` records `scaffold.auth`
 - **Greenfield examples** — `examples/greenfield/module-hybrid-cdn-auth-{starter,sso,full}`
@@ -30,9 +32,13 @@
 - **`wp doctor`** — CSS pipeline checks (prefix, `.temp` @source, `skipRuntimeCss`, `module.css` dw utilities, CDN `require_css` warning)
 
 ### Windows / fresh init
+- **`wp init` crash** — load unbundled `scripts/ensure-wphs-workspace.mjs` at runtime (fixes tsup double-shebang `Invalid or unexpected token` in published `wp`)
 - **`wp doctor`** — scaffold `.wphs/` in-process (no swallowed subprocess); surface `wphs-scaffold` errors; re-run ensure before layout checks
 - **CLI exit** — deferred `process.exit` after @clack spinners (fixes libuv `UV_HANDLE_CLOSING` crash on Windows)
 - **`wp doctor` severity** — HubSpot CLI missing and placeholder `portal.cdn.json` github slug are warnings (local `wp dev` still works); hard errors remain for real CDN misconfigurations
+- **HubSpot CLI spawn** — resolve `hs.cmd` / shell fallback on Windows (`wp auth`, `upload`, `watch`, `portal use`, doctor checks)
+- **CDN build** — `build-cdn.mjs` / `run-vite-build.mjs` use cross-platform Vite spawn (no hardcoded `yarn`)
+- **CI** — `windows-latest` verify job + packed `dist/cli.js` doctor smoke
 - **Docs** — Windows notes in [TROUBLESHOOTING.md](./docs/TROUBLESHOOTING.md)
 
 ## 1.0.39 — 2026-06-08

package/dist/{chunk-WHYTQEZX.js → chunk-4UFWXPQG.js}

@@ -3,7 +3,7 @@ import {
   ExitCode,
   WpHsError,
   runCommand
-} from "./chunk-4GOJPOW3.js";
+} from "./chunk-GXYUGXF5.js";
 
 // src/schema/woodsportal-hs.ts
 import { z } from "zod";
@@ -551,4 +551,4 @@ export {
   normalizePagePath,
   scaffoldPage
 };
-//# sourceMappingURL=chunk-WHYTQEZX.js.map
+//# sourceMappingURL=chunk-4UFWXPQG.js.map

package/dist/{chunk-4GOJPOW3.js → chunk-GXYUGXF5.js}

@@ -83,6 +83,52 @@ function isWpHsError(error) {
   return error instanceof WpHsError;
 }
 
+// src/lib/resolve-external-cli.ts
+import { existsSync } from "fs";
+import { platform } from "os";
+import { resolve } from "path";
+function resolveBin(name, projectRoot) {
+  const roots = projectRoot ? [projectRoot] : [];
+  if (!roots.includes(process.cwd())) {
+    roots.push(process.cwd());
+  }
+  for (const root of roots) {
+    const binDir = resolve(root, "node_modules", ".bin");
+    if (platform() === "win32") {
+      const cmd = resolve(binDir, `${name}.cmd`);
+      if (existsSync(cmd)) {
+        return { command: cmd, prefixArgs: [] };
+      }
+    }
+    const shim = resolve(binDir, name);
+    if (existsSync(shim)) {
+      return { command: shim, prefixArgs: [] };
+    }
+  }
+  return null;
+}
+function resolveHubSpotCliSpawn(projectRoot) {
+  const local = resolveBin("hs", projectRoot);
+  if (local) {
+    return local;
+  }
+  if (platform() === "win32") {
+    return { command: "hs", prefixArgs: [], shell: true };
+  }
+  return { command: "hs", prefixArgs: [] };
+}
+function applyExternalCliSpawn(command, args, options) {
+  if (command === "hs") {
+    const spawn2 = resolveHubSpotCliSpawn(options.projectRoot ?? options.cwd);
+    return {
+      command: spawn2.command,
+      args: [...spawn2.prefixArgs, ...args],
+      shell: spawn2.shell
+    };
+  }
+  return { command, args };
+}
+
 // src/lib/exec.ts
 var SECRET_PATTERN = /(token|secret|password|pat|key)=/i;
 function logExec(logger, command, args, options) {
@@ -98,29 +144,35 @@ function runCommand(command, args, options) {
     logger?.info(`[dry-run] ${formatExecDebugLine(command, args, cwd, env, options.projectRoot)}`);
     return { status: 0, stdout: "", stderr: "" };
   }
-  logExec(logger, command, args, options);
+  const resolved = applyExternalCliSpawn(command, args, {
+    projectRoot: options.projectRoot,
+    cwd
+  });
+  logExec(logger, resolved.command, resolved.args, options);
   if (streamOutput) {
-    const result2 = spawnSync(command, args, {
+    const result2 = spawnSync(resolved.command, resolved.args, {
       cwd,
       env,
       encoding: "utf8",
-      stdio: "inherit"
+      stdio: "inherit",
+      shell: resolved.shell
     });
     const status2 = result2.status ?? 1;
-    throwOnBadExit(command, args, status2, "", "", okCodes);
+    throwOnBadExit(resolved.command, resolved.args, status2, "", "", okCodes);
     return { status: status2, stdout: "", stderr: "" };
   }
   const spawnOpts = {
     cwd,
     env,
     encoding: "utf8",
-    stdio: ["inherit", "pipe", "pipe"]
+    stdio: ["inherit", "pipe", "pipe"],
+    shell: resolved.shell
   };
-  const result = spawnSync(command, args, spawnOpts);
+  const result = spawnSync(resolved.command, resolved.args, spawnOpts);
   const status = result.status ?? 1;
   const stdout = typeof result.stdout === "string" ? result.stdout : "";
   const stderr = typeof result.stderr === "string" ? result.stderr : "";
-  throwOnBadExit(command, args, status, stdout, stderr, okCodes);
+  throwOnBadExit(resolved.command, resolved.args, status, stdout, stderr, okCodes);
   return { status, stdout, stderr };
 }
 function runNodeScript(scriptPath, args, options) {
@@ -148,13 +200,18 @@ function runCommandAsync(command, args, options) {
     logger?.info(`[dry-run] ${formatExecDebugLine(command, args, cwd, env, options.projectRoot)}`);
     return Promise.resolve({ status: 0, stdout: "", stderr: "" });
   }
-  logExec(logger, command, args, options);
+  const resolved = applyExternalCliSpawn(command, args, {
+    projectRoot: options.projectRoot,
+    cwd
+  });
+  logExec(logger, resolved.command, resolved.args, options);
   if (streamOutput) {
-    return new Promise((resolve, reject) => {
-      const child = spawn(command, args, {
+    return new Promise((resolve2, reject) => {
+      const child = spawn(resolved.command, resolved.args, {
         cwd,
         env,
-        stdio: "inherit"
+        stdio: "inherit",
+        shell: resolved.shell
       });
       child.on("error", (error) => {
         reject(error);
@@ -162,19 +219,20 @@ function runCommandAsync(command, args, options) {
       child.on("close", (code) => {
         const status = code ?? 1;
         try {
-          throwOnBadExit(command, args, status, "", "", okCodes);
-          resolve({ status, stdout: "", stderr: "" });
+          throwOnBadExit(resolved.command, resolved.args, status, "", "", okCodes);
+          resolve2({ status, stdout: "", stderr: "" });
         } catch (error) {
           reject(error);
         }
       });
     });
   }
-  return new Promise((resolve, reject) => {
-    const child = spawn(command, args, {
+  return new Promise((resolve2, reject) => {
+    const child = spawn(resolved.command, resolved.args, {
       cwd,
       env,
-      stdio: ["inherit", "pipe", "pipe"]
+      stdio: ["inherit", "pipe", "pipe"],
+      shell: resolved.shell
     });
     let stdout = "";
     let stderr = "";
@@ -192,8 +250,8 @@ function runCommandAsync(command, args, options) {
     child.on("close", (code) => {
       const status = code ?? 1;
       try {
-        throwOnBadExit(command, args, status, stdout, stderr, okCodes);
-        resolve({ status, stdout, stderr });
+        throwOnBadExit(resolved.command, resolved.args, status, stdout, stderr, okCodes);
+        resolve2({ status, stdout, stderr });
       } catch (error) {
         reject(error);
       }
@@ -211,7 +269,7 @@ function runNodeScriptLongRunning(scriptPath, args, options) {
     );
     return Promise.resolve(0);
   }
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const child = spawn(process.execPath, [scriptPath, ...args], {
       cwd,
       env,
@@ -233,14 +291,14 @@ function runNodeScriptLongRunning(scriptPath, args, options) {
       process.off("SIGINT", forwardSignal);
       process.off("SIGTERM", forwardSignal);
       if (signal === "SIGINT") {
-        resolve(130);
+        resolve2(130);
         return;
       }
       if (signal === "SIGTERM") {
-        resolve(143);
+        resolve2(143);
         return;
       }
-      resolve(code ?? 1);
+      resolve2(code ?? 1);
     });
   });
 }
@@ -249,10 +307,11 @@ export {
   ExitCode,
   WpHsError,
   isWpHsError,
+  resolveHubSpotCliSpawn,
   runCommand,
   runNodeScript,
   runCommandAsync,
   runNodeScriptAsync,
   runNodeScriptLongRunning
 };
-//# sourceMappingURL=chunk-4GOJPOW3.js.map
+//# sourceMappingURL=chunk-GXYUGXF5.js.map

package/dist/chunk-GXYUGXF5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/exec.ts","../src/lib/exec-debug.ts","../src/lib/errors.ts","../src/lib/resolve-external-cli.ts"],"sourcesContent":["import { spawn, spawnSync, type SpawnSyncOptions } from 'node:child_process'\n\nimport { formatExecDebugLine } from './exec-debug.js'\nimport { WpHsError, ExitCode } from './errors.js'\nimport { applyExternalCliSpawn } from './resolve-external-cli.js'\nimport type { Logger } from './logger.js'\n\nconst SECRET_PATTERN = /(token|secret|password|pat|key)=/i\n\nexport type RunOptions = {\n  cwd: string\n  env?: NodeJS.ProcessEnv\n  logger?: Logger\n  dryRun?: boolean\n  timeoutMs?: number\n  /** Expected exit code on success (default 0) */\n  okCodes?: number[]\n  /** Stream child stdout/stderr to the terminal (verbose mode). */\n  streamOutput?: boolean\n  /** Shorten cwd paths in debug logs. */\n  projectRoot?: string\n}\n\nfunction logExec(logger: Logger | undefined, command: string, args: string[], options: RunOptions): void {\n  if (!logger) return\n  const env = options.env ?? process.env\n  logger.debug(\n    formatExecDebugLine(command, args, options.cwd, env, options.projectRoot),\n  )\n}\n\nexport function runCommand(\n  command: string,\n  args: string[],\n  options: RunOptions,\n): { status: number; stdout: string; stderr: string } {\n  const { cwd, env = process.env, logger, dryRun = false, okCodes = [0], streamOutput = false } =\n    options\n\n  if (dryRun) {\n    logger?.info(`[dry-run] ${formatExecDebugLine(command, args, cwd, env, options.projectRoot)}`)\n    return { status: 0, stdout: '', stderr: '' }\n  }\n\n  const resolved = applyExternalCliSpawn(command, args, {\n    projectRoot: options.projectRoot,\n    cwd,\n  })\n\n  logExec(logger, resolved.command, resolved.args, options)\n\n  if (streamOutput) {\n    const result = spawnSync(resolved.command, resolved.args, {\n      cwd,\n      env,\n      encoding: 'utf8',\n      stdio: 'inherit',\n      shell: resolved.shell,\n    })\n    const status = result.status ?? 1\n    throwOnBadExit(resolved.command, resolved.args, status, '', '', okCodes)\n    return { status, stdout: '', stderr: '' }\n  }\n\n  const spawnOpts: SpawnSyncOptions = {\n    cwd,\n    env,\n    encoding: 'utf8',\n    stdio: ['inherit', 'pipe', 'pipe'],\n    shell: resolved.shell,\n  }\n\n  const result = spawnSync(resolved.command, resolved.args, spawnOpts)\n  const status = result.status ?? 1\n  const stdout = typeof result.stdout === 'string' ? result.stdout : ''\n  const stderr = typeof result.stderr === 'string' ? result.stderr : ''\n\n  throwOnBadExit(resolved.command, resolved.args, status, stdout, stderr, okCodes)\n\n  return { status, stdout, stderr }\n}\n\nexport function runNodeScript(\n  scriptPath: string,\n  args: string[],\n  options: RunOptions,\n): void {\n  runCommand(process.execPath, [scriptPath, ...args], options)\n}\n\nfunction throwOnBadExit(\n  command: string,\n  args: string[],\n  status: number,\n  stdout: string,\n  stderr: string,\n  okCodes: number[],\n): void {\n  if (okCodes.includes(status)) {\n    return\n  }\n  const detail = stderr.trim() || stdout.trim() || `exit ${status}`\n  if (SECRET_PATTERN.test(detail)) {\n    throw new WpHsError(`Command failed: ${command}`, {\n      exitCode: ExitCode.USER_ERROR,\n      remediation: 'Re-run with --verbose for details (secrets are never logged).',\n    })\n  }\n  throw new WpHsError(`Command failed: ${command} ${args.join(' ')}\\n${detail}`, {\n    exitCode: ExitCode.USER_ERROR,\n  })\n}\n\n/**\n * Non-blocking spawn — keeps the Node event loop alive so @clack spinners animate.\n */\nexport function runCommandAsync(\n  command: string,\n  args: string[],\n  options: RunOptions,\n): Promise<{ status: number; stdout: string; stderr: string }> {\n  const { cwd, env = process.env, logger, dryRun = false, okCodes = [0], streamOutput = false } =\n    options\n\n  if (dryRun) {\n    logger?.info(`[dry-run] ${formatExecDebugLine(command, args, cwd, env, options.projectRoot)}`)\n    return Promise.resolve({ status: 0, stdout: '', stderr: '' })\n  }\n\n  const resolved = applyExternalCliSpawn(command, args, {\n    projectRoot: options.projectRoot,\n    cwd,\n  })\n\n  logExec(logger, resolved.command, resolved.args, options)\n\n  if (streamOutput) {\n    return new Promise((resolve, reject) => {\n      const child = spawn(resolved.command, resolved.args, {\n        cwd,\n        env,\n        stdio: 'inherit',\n        shell: resolved.shell,\n      })\n\n      child.on('error', (error) => {\n        reject(error)\n      })\n\n      child.on('close', (code) => {\n        const status = code ?? 1\n        try {\n          throwOnBadExit(resolved.command, resolved.args, status, '', '', okCodes)\n          resolve({ status, stdout: '', stderr: '' })\n        } catch (error) {\n          reject(error)\n        }\n      })\n    })\n  }\n\n  return new Promise((resolve, reject) => {\n    const child = spawn(resolved.command, resolved.args, {\n      cwd,\n      env,\n      stdio: ['inherit', 'pipe', 'pipe'],\n      shell: resolved.shell,\n    })\n\n    let stdout = ''\n    let stderr = ''\n\n    child.stdout?.setEncoding('utf8')\n    child.stderr?.setEncoding('utf8')\n    child.stdout?.on('data', (chunk: string) => {\n      stdout += chunk\n    })\n    child.stderr?.on('data', (chunk: string) => {\n      stderr += chunk\n    })\n\n    child.on('error', (error) => {\n      reject(error)\n    })\n\n    child.on('close', (code) => {\n      const status = code ?? 1\n      try {\n        throwOnBadExit(resolved.command, resolved.args, status, stdout, stderr, okCodes)\n        resolve({ status, stdout, stderr })\n      } catch (error) {\n        reject(error)\n      }\n    })\n  })\n}\n\nexport function runNodeScriptAsync(\n  scriptPath: string,\n  args: string[],\n  options: RunOptions,\n): Promise<void> {\n  return runCommandAsync(process.execPath, [scriptPath, ...args], options).then(() => undefined)\n}\n\n/**\n * Spawn a Node script with inherited stdio and forward SIGINT/SIGTERM (wp watch, long-running tools).\n * Unlike spawnSync, the parent event loop stays alive so Ctrl+C works while the child runs.\n */\nexport function runNodeScriptLongRunning(\n  scriptPath: string,\n  args: string[],\n  options: RunOptions,\n): Promise<number> {\n  const { cwd, env = process.env, logger, dryRun = false } = options\n\n  if (dryRun) {\n    logger?.info(\n      `[dry-run] ${formatExecDebugLine(process.execPath, [scriptPath, ...args], cwd, env, options.projectRoot)}`,\n    )\n    return Promise.resolve(0)\n  }\n\n  return new Promise((resolve, reject) => {\n    const child = spawn(process.execPath, [scriptPath, ...args], {\n      cwd,\n      env,\n      stdio: 'inherit',\n    })\n\n    const forwardSignal = (signal: NodeJS.Signals) => {\n      if (!child.killed) {\n        child.kill(signal)\n      }\n    }\n\n    process.on('SIGINT', forwardSignal)\n    process.on('SIGTERM', forwardSignal)\n\n    child.on('error', (error) => {\n      process.off('SIGINT', forwardSignal)\n      process.off('SIGTERM', forwardSignal)\n      reject(error)\n    })\n\n    child.on('exit', (code, signal) => {\n      process.off('SIGINT', forwardSignal)\n      process.off('SIGTERM', forwardSignal)\n\n      if (signal === 'SIGINT') {\n        resolve(130)\n        return\n      }\n      if (signal === 'SIGTERM') {\n        resolve(143)\n        return\n      }\n\n      resolve(code ?? 1)\n    })\n  })\n}\n","import { basename, relative } from 'node:path'\n\nconst SECRET_ENV_KEY =\n  /(_KEY|_TOKEN|_SECRET|_PASSWORD|_PAT|AUTH|CREDENTIAL|GITHUB|NPM_|ERASER|LINEAR|AWS_|SSH_)/i\n\nconst RELEVANT_ENV_PREFIX = /^WP_HS_|^WP_/\n\nexport function isSecretEnvKey(key: string): boolean {\n  return SECRET_ENV_KEY.test(key)\n}\n\nexport function maskEnvForLog(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {\n  const masked: NodeJS.ProcessEnv = {}\n  for (const [key, value] of Object.entries(env)) {\n    if (value === undefined) continue\n    masked[key] = isSecretEnvKey(key) ? '[redacted]' : value\n  }\n  return masked\n}\n\nexport function formatRelevantEnv(env: NodeJS.ProcessEnv): string | undefined {\n  const pairs = Object.entries(env)\n    .filter(([key, value]) => value !== undefined && RELEVANT_ENV_PREFIX.test(key))\n    .sort(([a], [b]) => a.localeCompare(b))\n    .map(([key, value]) => {\n      const shown = isSecretEnvKey(key) ? '[redacted]' : value\n      return `${key}=${shown}`\n    })\n\n  return pairs.length > 0 ? pairs.join(' ') : undefined\n}\n\nfunction shortenScriptPath(scriptPath: string): string {\n  const marker = '/scripts/'\n  const idx = scriptPath.lastIndexOf(marker)\n  if (idx >= 0) {\n    return `scripts/${scriptPath.slice(idx + marker.length)}`\n  }\n  return basename(scriptPath)\n}\n\nexport function formatExecCommand(command: string, args: string[]): string {\n  if (command === process.execPath && args.length > 0) {\n    const rest = args.slice(1).join(' ')\n    return `node ${shortenScriptPath(args[0])}${rest ? ` ${rest}` : ''}`\n  }\n  return [command, ...args].join(' ')\n}\n\nexport function formatExecCwd(cwd: string, projectRoot?: string): string {\n  if (projectRoot) {\n    try {\n      const rel = relative(projectRoot, cwd)\n      if (!rel.startsWith('..')) {\n        return rel === '' ? '.' : rel\n      }\n    } catch {\n      // fall through\n    }\n  }\n  const parts = cwd.split('/')\n  if (parts.length > 3) {\n    return `…/${parts.slice(-2).join('/')}`\n  }\n  return cwd\n}\n\n/** One-line verbose exec label for developers (no full env dump). */\nexport function formatExecDebugLine(\n  command: string,\n  args: string[],\n  cwd: string,\n  env: NodeJS.ProcessEnv,\n  projectRoot?: string,\n): string {\n  const cmd = formatExecCommand(command, args)\n  const cwdLabel = formatExecCwd(cwd, projectRoot)\n  const envLabel = formatRelevantEnv(env)\n  const parts = [cmd, `cwd=${cwdLabel}`]\n  if (envLabel) {\n    parts.push(envLabel)\n  }\n  return parts.join('  ')\n}\n","export const ExitCode = {\n  SUCCESS: 0,\n  USER_ERROR: 1,\n  PREREQUISITE: 2,\n  BUILD_FAILED: 3,\n  PUBLISH_FAILED: 4,\n  AUDIT_FAILED: 5,\n  INTERNAL: 10,\n} as const\n\nexport type ExitCodeValue = (typeof ExitCode)[keyof typeof ExitCode]\n\nexport class WpHsError extends Error {\n  readonly exitCode: ExitCodeValue\n  readonly remediation?: string\n\n  constructor(\n    message: string,\n    options: { exitCode?: ExitCodeValue; remediation?: string; cause?: unknown } = {},\n  ) {\n    super(message, { cause: options.cause })\n    this.name = 'WpHsError'\n    this.exitCode = options.exitCode ?? ExitCode.USER_ERROR\n    this.remediation = options.remediation\n  }\n}\n\nexport function isWpHsError(error: unknown): error is WpHsError {\n  return error instanceof WpHsError\n}\n","import { existsSync } from 'node:fs'\nimport { platform } from 'node:os'\nimport { resolve } from 'node:path'\n\nexport type ExternalCliSpawn = {\n  command: string\n  prefixArgs: string[]\n  shell?: boolean\n}\n\nfunction resolveBin(name: string, projectRoot?: string): ExternalCliSpawn | null {\n  const roots = projectRoot ? [projectRoot] : []\n  if (!roots.includes(process.cwd())) {\n    roots.push(process.cwd())\n  }\n\n  for (const root of roots) {\n    const binDir = resolve(root, 'node_modules', '.bin')\n    if (platform() === 'win32') {\n      const cmd = resolve(binDir, `${name}.cmd`)\n      if (existsSync(cmd)) {\n        return { command: cmd, prefixArgs: [] }\n      }\n    }\n    const shim = resolve(binDir, name)\n    if (existsSync(shim)) {\n      return { command: shim, prefixArgs: [] }\n    }\n  }\n\n  return null\n}\n\n/** Resolve HubSpot CLI (`hs`) for cross-platform spawn (Windows `.cmd` shims). */\nexport function resolveHubSpotCliSpawn(projectRoot?: string): ExternalCliSpawn {\n  const local = resolveBin('hs', projectRoot)\n  if (local) {\n    return local\n  }\n\n  if (platform() === 'win32') {\n    return { command: 'hs', prefixArgs: [], shell: true }\n  }\n\n  return { command: 'hs', prefixArgs: [] }\n}\n\n/** Resolve consumer `wp` binary for watch rebuild subprocesses. */\nexport function resolveWpBinSpawn(projectRoot: string, kitCliPath?: string): ExternalCliSpawn {\n  if (kitCliPath && existsSync(kitCliPath)) {\n    return { command: process.execPath, prefixArgs: [kitCliPath] }\n  }\n\n  const local = resolveBin('wp', projectRoot)\n  if (local) {\n    return local\n  }\n\n  if (platform() === 'win32') {\n    return { command: 'wp', prefixArgs: [], shell: true }\n  }\n\n  return { command: 'wp', prefixArgs: [] }\n}\n\nexport function applyExternalCliSpawn(\n  command: string,\n  args: string[],\n  options: { projectRoot?: string; cwd?: string },\n): { command: string; args: string[]; shell?: boolean } {\n  if (command === 'hs') {\n    const spawn = resolveHubSpotCliSpawn(options.projectRoot ?? options.cwd)\n    return {\n      command: spawn.command,\n      args: [...spawn.prefixArgs, ...args],\n      shell: spawn.shell,\n    }\n  }\n\n  return { command, args }\n}\n"],"mappings":";;;AAAA,SAAS,OAAO,iBAAwC;;;ACAxD,SAAS,UAAU,gBAAgB;AAEnC,IAAM,iBACJ;AAEF,IAAM,sBAAsB;AAErB,SAAS,eAAe,KAAsB;AACnD,SAAO,eAAe,KAAK,GAAG;AAChC;AAWO,SAAS,kBAAkB,KAA4C;AAC5E,QAAM,QAAQ,OAAO,QAAQ,GAAG,EAC7B,OAAO,CAAC,CAAC,KAAK,KAAK,MAAM,UAAU,UAAa,oBAAoB,KAAK,GAAG,CAAC,EAC7E,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EACrC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AACrB,UAAM,QAAQ,eAAe,GAAG,IAAI,eAAe;AACnD,WAAO,GAAG,GAAG,IAAI,KAAK;AAAA,EACxB,CAAC;AAEH,SAAO,MAAM,SAAS,IAAI,MAAM,KAAK,GAAG,IAAI;AAC9C;AAEA,SAAS,kBAAkB,YAA4B;AACrD,QAAM,SAAS;AACf,QAAM,MAAM,WAAW,YAAY,MAAM;AACzC,MAAI,OAAO,GAAG;AACZ,WAAO,WAAW,WAAW,MAAM,MAAM,OAAO,MAAM,CAAC;AAAA,EACzD;AACA,SAAO,SAAS,UAAU;AAC5B;AAEO,SAAS,kBAAkB,SAAiB,MAAwB;AACzE,MAAI,YAAY,QAAQ,YAAY,KAAK,SAAS,GAAG;AACnD,UAAM,OAAO,KAAK,MAAM,CAAC,EAAE,KAAK,GAAG;AACnC,WAAO,QAAQ,kBAAkB,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,KAAK,EAAE;AAAA,EACpE;AACA,SAAO,CAAC,SAAS,GAAG,IAAI,EAAE,KAAK,GAAG;AACpC;AAEO,SAAS,cAAc,KAAa,aAA8B;AACvE,MAAI,aAAa;AACf,QAAI;AACF,YAAM,MAAM,SAAS,aAAa,GAAG;AACrC,UAAI,CAAC,IAAI,WAAW,IAAI,GAAG;AACzB,eAAO,QAAQ,KAAK,MAAM;AAAA,MAC5B;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO,UAAK,MAAM,MAAM,EAAE,EAAE,KAAK,GAAG,CAAC;AAAA,EACvC;AACA,SAAO;AACT;AAGO,SAAS,oBACd,SACA,MACA,KACA,KACA,aACQ;AACR,QAAM,MAAM,kBAAkB,SAAS,IAAI;AAC3C,QAAM,WAAW,cAAc,KAAK,WAAW;AAC/C,QAAM,WAAW,kBAAkB,GAAG;AACtC,QAAM,QAAQ,CAAC,KAAK,OAAO,QAAQ,EAAE;AACrC,MAAI,UAAU;AACZ,UAAM,KAAK,QAAQ;AAAA,EACrB;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;;;ACnFO,IAAM,WAAW;AAAA,EACtB,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,UAAU;AACZ;AAIO,IAAM,YAAN,cAAwB,MAAM;AAAA,EAC1B;AAAA,EACA;AAAA,EAET,YACE,SACA,UAA+E,CAAC,GAChF;AACA,UAAM,SAAS,EAAE,OAAO,QAAQ,MAAM,CAAC;AACvC,SAAK,OAAO;AACZ,SAAK,WAAW,QAAQ,YAAY,SAAS;AAC7C,SAAK,cAAc,QAAQ;AAAA,EAC7B;AACF;AAEO,SAAS,YAAY,OAAoC;AAC9D,SAAO,iBAAiB;AAC1B;;;AC7BA,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,eAAe;AAQxB,SAAS,WAAW,MAAc,aAA+C;AAC/E,QAAM,QAAQ,cAAc,CAAC,WAAW,IAAI,CAAC;AAC7C,MAAI,CAAC,MAAM,SAAS,QAAQ,IAAI,CAAC,GAAG;AAClC,UAAM,KAAK,QAAQ,IAAI,CAAC;AAAA,EAC1B;AAEA,aAAW,QAAQ,OAAO;AACxB,UAAM,SAAS,QAAQ,MAAM,gBAAgB,MAAM;AACnD,QAAI,SAAS,MAAM,SAAS;AAC1B,YAAM,MAAM,QAAQ,QAAQ,GAAG,IAAI,MAAM;AACzC,UAAI,WAAW,GAAG,GAAG;AACnB,eAAO,EAAE,SAAS,KAAK,YAAY,CAAC,EAAE;AAAA,MACxC;AAAA,IACF;AACA,UAAM,OAAO,QAAQ,QAAQ,IAAI;AACjC,QAAI,WAAW,IAAI,GAAG;AACpB,aAAO,EAAE,SAAS,MAAM,YAAY,CAAC,EAAE;AAAA,IACzC;AAAA,EACF;AAEA,SAAO;AACT;AAGO,SAAS,uBAAuB,aAAwC;AAC7E,QAAM,QAAQ,WAAW,MAAM,WAAW;AAC1C,MAAI,OAAO;AACT,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,MAAM,SAAS;AAC1B,WAAO,EAAE,SAAS,MAAM,YAAY,CAAC,GAAG,OAAO,KAAK;AAAA,EACtD;AAEA,SAAO,EAAE,SAAS,MAAM,YAAY,CAAC,EAAE;AACzC;AAoBO,SAAS,sBACd,SACA,MACA,SACsD;AACtD,MAAI,YAAY,MAAM;AACpB,UAAMA,SAAQ,uBAAuB,QAAQ,eAAe,QAAQ,GAAG;AACvE,WAAO;AAAA,MACL,SAASA,OAAM;AAAA,MACf,MAAM,CAAC,GAAGA,OAAM,YAAY,GAAG,IAAI;AAAA,MACnC,OAAOA,OAAM;AAAA,IACf;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,KAAK;AACzB;;;AHzEA,IAAM,iBAAiB;AAgBvB,SAAS,QAAQ,QAA4B,SAAiB,MAAgB,SAA2B;AACvG,MAAI,CAAC,OAAQ;AACb,QAAM,MAAM,QAAQ,OAAO,QAAQ;AACnC,SAAO;AAAA,IACL,oBAAoB,SAAS,MAAM,QAAQ,KAAK,KAAK,QAAQ,WAAW;AAAA,EAC1E;AACF;AAEO,SAAS,WACd,SACA,MACA,SACoD;AACpD,QAAM,EAAE,KAAK,MAAM,QAAQ,KAAK,QAAQ,SAAS,OAAO,UAAU,CAAC,CAAC,GAAG,eAAe,MAAM,IAC1F;AAEF,MAAI,QAAQ;AACV,YAAQ,KAAK,aAAa,oBAAoB,SAAS,MAAM,KAAK,KAAK,QAAQ,WAAW,CAAC,EAAE;AAC7F,WAAO,EAAE,QAAQ,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAAA,EAC7C;AAEA,QAAM,WAAW,sBAAsB,SAAS,MAAM;AAAA,IACpD,aAAa,QAAQ;AAAA,IACrB;AAAA,EACF,CAAC;AAED,UAAQ,QAAQ,SAAS,SAAS,SAAS,MAAM,OAAO;AAExD,MAAI,cAAc;AAChB,UAAMC,UAAS,UAAU,SAAS,SAAS,SAAS,MAAM;AAAA,MACxD;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV,OAAO;AAAA,MACP,OAAO,SAAS;AAAA,IAClB,CAAC;AACD,UAAMC,UAASD,QAAO,UAAU;AAChC,mBAAe,SAAS,SAAS,SAAS,MAAMC,SAAQ,IAAI,IAAI,OAAO;AACvE,WAAO,EAAE,QAAAA,SAAQ,QAAQ,IAAI,QAAQ,GAAG;AAAA,EAC1C;AAEA,QAAM,YAA8B;AAAA,IAClC;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,OAAO,CAAC,WAAW,QAAQ,MAAM;AAAA,IACjC,OAAO,SAAS;AAAA,EAClB;AAEA,QAAM,SAAS,UAAU,SAAS,SAAS,SAAS,MAAM,SAAS;AACnE,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AACnE,QAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AAEnE,iBAAe,SAAS,SAAS,SAAS,MAAM,QAAQ,QAAQ,QAAQ,OAAO;AAE/E,SAAO,EAAE,QAAQ,QAAQ,OAAO;AAClC;AAEO,SAAS,cACd,YACA,MACA,SACM;AACN,aAAW,QAAQ,UAAU,CAAC,YAAY,GAAG,IAAI,GAAG,OAAO;AAC7D;AAEA,SAAS,eACP,SACA,MACA,QACA,QACA,QACA,SACM;AACN,MAAI,QAAQ,SAAS,MAAM,GAAG;AAC5B;AAAA,EACF;AACA,QAAM,SAAS,OAAO,KAAK,KAAK,OAAO,KAAK,KAAK,QAAQ,MAAM;AAC/D,MAAI,eAAe,KAAK,MAAM,GAAG;AAC/B,UAAM,IAAI,UAAU,mBAAmB,OAAO,IAAI;AAAA,MAChD,UAAU,SAAS;AAAA,MACnB,aAAa;AAAA,IACf,CAAC;AAAA,EACH;AACA,QAAM,IAAI,UAAU,mBAAmB,OAAO,IAAI,KAAK,KAAK,GAAG,CAAC;AAAA,EAAK,MAAM,IAAI;AAAA,IAC7E,UAAU,SAAS;AAAA,EACrB,CAAC;AACH;AAKO,SAAS,gBACd,SACA,MACA,SAC6D;AAC7D,QAAM,EAAE,KAAK,MAAM,QAAQ,KAAK,QAAQ,SAAS,OAAO,UAAU,CAAC,CAAC,GAAG,eAAe,MAAM,IAC1F;AAEF,MAAI,QAAQ;AACV,YAAQ,KAAK,aAAa,oBAAoB,SAAS,MAAM,KAAK,KAAK,QAAQ,WAAW,CAAC,EAAE;AAC7F,WAAO,QAAQ,QAAQ,EAAE,QAAQ,GAAG,QAAQ,IAAI,QAAQ,GAAG,CAAC;AAAA,EAC9D;AAEA,QAAM,WAAW,sBAAsB,SAAS,MAAM;AAAA,IACpD,aAAa,QAAQ;AAAA,IACrB;AAAA,EACF,CAAC;AAED,UAAQ,QAAQ,SAAS,SAAS,SAAS,MAAM,OAAO;AAExD,MAAI,cAAc;AAChB,WAAO,IAAI,QAAQ,CAACC,UAAS,WAAW;AACtC,YAAM,QAAQ,MAAM,SAAS,SAAS,SAAS,MAAM;AAAA,QACnD;AAAA,QACA;AAAA,QACA,OAAO;AAAA,QACP,OAAO,SAAS;AAAA,MAClB,CAAC;AAED,YAAM,GAAG,SAAS,CAAC,UAAU;AAC3B,eAAO,KAAK;AAAA,MACd,CAAC;AAED,YAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,cAAM,SAAS,QAAQ;AACvB,YAAI;AACF,yBAAe,SAAS,SAAS,SAAS,MAAM,QAAQ,IAAI,IAAI,OAAO;AACvE,UAAAA,SAAQ,EAAE,QAAQ,QAAQ,IAAI,QAAQ,GAAG,CAAC;AAAA,QAC5C,SAAS,OAAO;AACd,iBAAO,KAAK;AAAA,QACd;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAEA,SAAO,IAAI,QAAQ,CAACA,UAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,SAAS,SAAS,SAAS,MAAM;AAAA,MACnD;AAAA,MACA;AAAA,MACA,OAAO,CAAC,WAAW,QAAQ,MAAM;AAAA,MACjC,OAAO,SAAS;AAAA,IAClB,CAAC;AAED,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,UAAM,QAAQ,YAAY,MAAM;AAChC,UAAM,QAAQ,YAAY,MAAM;AAChC,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,gBAAU;AAAA,IACZ,CAAC;AACD,UAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,gBAAU;AAAA,IACZ,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,UAAU;AAC3B,aAAO,KAAK;AAAA,IACd,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,YAAM,SAAS,QAAQ;AACvB,UAAI;AACF,uBAAe,SAAS,SAAS,SAAS,MAAM,QAAQ,QAAQ,QAAQ,OAAO;AAC/E,QAAAA,SAAQ,EAAE,QAAQ,QAAQ,OAAO,CAAC;AAAA,MACpC,SAAS,OAAO;AACd,eAAO,KAAK;AAAA,MACd;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;AAEO,SAAS,mBACd,YACA,MACA,SACe;AACf,SAAO,gBAAgB,QAAQ,UAAU,CAAC,YAAY,GAAG,IAAI,GAAG,OAAO,EAAE,KAAK,MAAM,MAAS;AAC/F;AAMO,SAAS,yBACd,YACA,MACA,SACiB;AACjB,QAAM,EAAE,KAAK,MAAM,QAAQ,KAAK,QAAQ,SAAS,MAAM,IAAI;AAE3D,MAAI,QAAQ;AACV,YAAQ;AAAA,MACN,aAAa,oBAAoB,QAAQ,UAAU,CAAC,YAAY,GAAG,IAAI,GAAG,KAAK,KAAK,QAAQ,WAAW,CAAC;AAAA,IAC1G;AACA,WAAO,QAAQ,QAAQ,CAAC;AAAA,EAC1B;AAEA,SAAO,IAAI,QAAQ,CAACA,UAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,QAAQ,UAAU,CAAC,YAAY,GAAG,IAAI,GAAG;AAAA,MAC3D;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AAED,UAAM,gBAAgB,CAAC,WAA2B;AAChD,UAAI,CAAC,MAAM,QAAQ;AACjB,cAAM,KAAK,MAAM;AAAA,MACnB;AAAA,IACF;AAEA,YAAQ,GAAG,UAAU,aAAa;AAClC,YAAQ,GAAG,WAAW,aAAa;AAEnC,UAAM,GAAG,SAAS,CAAC,UAAU;AAC3B,cAAQ,IAAI,UAAU,aAAa;AACnC,cAAQ,IAAI,WAAW,aAAa;AACpC,aAAO,KAAK;AAAA,IACd,CAAC;AAED,UAAM,GAAG,QAAQ,CAAC,MAAM,WAAW;AACjC,cAAQ,IAAI,UAAU,aAAa;AACnC,cAAQ,IAAI,WAAW,aAAa;AAEpC,UAAI,WAAW,UAAU;AACvB,QAAAA,SAAQ,GAAG;AACX;AAAA,MACF;AACA,UAAI,WAAW,WAAW;AACxB,QAAAA,SAAQ,GAAG;AACX;AAAA,MACF;AAEA,MAAAA,SAAQ,QAAQ,CAAC;AAAA,IACnB,CAAC;AAAA,EACH,CAAC;AACH;","names":["spawn","result","status","resolve"]}

package/dist/cli.js

@@ -19,16 +19,17 @@ import {
   scaffoldPage,
   titleFromSlug,
   usesCdnPipeline
-} from "./chunk-WHYTQEZX.js";
+} from "./chunk-4UFWXPQG.js";
 import {
   ExitCode,
   WpHsError,
   isWpHsError,
+  resolveHubSpotCliSpawn,
   runCommand,
   runCommandAsync,
   runNodeScriptAsync,
   runNodeScriptLongRunning
-} from "./chunk-4GOJPOW3.js";
+} from "./chunk-GXYUGXF5.js";
 
 // src/cli/program.ts
 import { Command } from "commander";
@@ -391,12 +392,14 @@ var PLACEHOLDER_PATTERNS = [
   /portalId:\s*12345678\b/
 ];
 function spawnHs(args, options = {}) {
-  return spawnSync("hs", args, {
+  const spawn = resolveHubSpotCliSpawn(options.cwd);
+  return spawnSync(spawn.command, [...spawn.prefixArgs, ...args], {
     cwd: options.cwd,
     encoding: "utf8",
     timeout: options.timeoutMs ?? HS_ACCOUNTS_TIMEOUT_MS,
     // Keep HubSpot CLI off the interactive TTY (avoids hangs under @clack spinners)
-    stdio: ["ignore", "pipe", "pipe"]
+    stdio: ["ignore", "pipe", "pipe"],
+    shell: spawn.shell
   });
 }
 function hsTimedOut(result) {
@@ -749,13 +752,20 @@ function formatCdnSetupNote(_projectRoot) {
 }
 
 // src/lib/wphs-workspace.ts
+import { pathToFileURL } from "url";
 var ensureModulePromise;
+function ensureScriptUrl() {
+  return pathToFileURL(kitPath("scripts", "ensure-wphs-workspace.mjs")).href;
+}
 function loadEnsureModule() {
   if (!ensureModulePromise) {
-    ensureModulePromise = Promise.resolve().then(async () => {
-      const mod = await import("./ensure-wphs-workspace-5S3GTO6K.js");
-      return mod;
-    });
+    const scriptUrl = ensureScriptUrl();
+    ensureModulePromise = import(
+      /* webpackIgnore: true */
+      scriptUrl
+    ).then(
+      (mod) => mod
+    );
   }
   return ensureModulePromise;
 }
@@ -2677,7 +2687,7 @@ async function runAuditSecrets(ctx) {
 
 // src/cli/commands/init.ts
 import { cpSync as cpSync3, existsSync as existsSync13, mkdirSync as mkdirSync5, readdirSync as readdirSync2, readFileSync as readFileSync12, writeFileSync as writeFileSync8 } from "fs";
-import { basename as basename2, resolve as resolve17 } from "path";
+import { basename as basename3, resolve as resolve17 } from "path";
 import * as p5 from "@clack/prompts";
 
 // src/lib/init-router-scaffold.ts
@@ -2948,6 +2958,7 @@ function patchStarterOnlyBlocks(targetDir, mode) {
     let content = readFileSync11(filePath, "utf8");
     content = stripMarkedBlock(content, "WPHS_AUTH_SSO", hasSso);
     content = stripMarkedBlock(content, "WPHS_AUTH_FULL", hasFull);
+    content = stripMarkedBlock(content, "WPHS_AUTH_NOT_FULL", !hasFull);
     if (!hasFull && relative === "src/integrations/configure-woodsportal-sdk.ts") {
       content = content.replace(
         /^import \{ isMfaPendingSession \} from '@\/features\/auth\/auth-session'\n/m,
@@ -3033,6 +3044,21 @@ function assertFullTierAuthScaffold(targetDir) {
       exitCode: ExitCode.INTERNAL
     });
   }
+  const starterLoginPath = resolve15(targetDir, "src/features/auth/components/starter-login.tsx");
+  if (existsSync11(starterLoginPath)) {
+    const starterLogin = readFileSync11(starterLoginPath, "utf8");
+    if (starterLogin.includes("WPHS_AUTH_")) {
+      throw new WpHsError('Auth scaffold tier "full" left WPHS_AUTH_* markers in starter-login.tsx', {
+        exitCode: ExitCode.INTERNAL
+      });
+    }
+    if (starterLogin.includes("MFA_REQUIRED_SCAFFOLD_MESSAGE")) {
+      throw new WpHsError(
+        'Auth scaffold tier "full" starter-login.tsx must not import MFA_REQUIRED_SCAFFOLD_MESSAGE',
+        { exitCode: ExitCode.INTERNAL }
+      );
+    }
+  }
 }
 function patchPackageJson(targetDir) {
   const pkgPath = resolve15(targetDir, "package.json");
@@ -3215,6 +3241,7 @@ function readProjectAuthTier(targetDir) {
 
 // src/lib/init-wizard.ts
 import * as p4 from "@clack/prompts";
+import { basename } from "path";
 
 // src/lib/project-name.ts
 var PROJECT_NAME_PATTERN = /^[a-z][a-z0-9-]*$/;
@@ -3280,7 +3307,7 @@ async function runInitWizard(options) {
     projectName = normalizeProjectName(nameAnswer);
   }
   if (!projectName && options.directory) {
-    projectName = normalizeProjectName(options.directory.split("/").pop() ?? "my-portal");
+    projectName = normalizeProjectName(basename(options.directory) || "my-portal");
   }
   if (!projectName) {
     throw new WpHsError("Project name is required", {
@@ -3387,7 +3414,10 @@ async function runInitWizard(options) {
       `Auth:      ${auth}`,
       ...auth !== "none" ? [`Nav:       ${nav}`] : []
     ] : [],
-    ...template === "module-hybrid-cdn" ? [`CDN repo:  ${cdnSetup?.github ?? "(skipped \u2014 configure later)"}`] : []
+    ...template === "module-hybrid-cdn" ? [
+      `CDN repo:  ${cdnSetup?.github ?? "(skipped \u2014 configure later)"}`,
+      ...cdnSetup?.github && /your-org|your-portal-cdn-mirror/i.test(cdnSetup.github) ? ["           (placeholder \u2014 run wp setup before wp deploy)"] : []
+    ] : []
   ].join("\n");
   p4.note(summary, "Scaffold summary");
   const confirmed = cancelIfNeeded(
@@ -3412,7 +3442,7 @@ async function runInitWizard(options) {
 
 // src/lib/project-setup.ts
 import { copyFileSync, existsSync as existsSync12, writeFileSync as writeFileSync7 } from "fs";
-import { basename, resolve as resolve16 } from "path";
+import { basename as basename2, resolve as resolve16 } from "path";
 function envFileForTier2(tier) {
   return tier === "dev" ? ".env.dev" : tier === "stg" ? ".env.stg" : ".env.prod";
 }
@@ -3442,7 +3472,7 @@ function copyMissingFile(projectRoot, targetName, sourceCandidates, dryRun) {
   if (!dryRun) {
     copyFileSync(source, target);
   }
-  const from = basename(source);
+  const from = basename2(source);
   return {
     action: "copied",
     path: targetName,
@@ -3723,7 +3753,7 @@ async function runInit(ctx, options) {
     });
   }
   const targetDir = resolveInitTargetDir(options, projectName);
-  const slug = projectName ?? basename2(targetDir);
+  const slug = projectName ?? basename3(targetDir);
   assertTargetDirIsScaffoldable(targetDir);
   const templateDir = kitPath("templates", template);
   if (!existsSync13(templateDir)) {
@@ -3793,7 +3823,7 @@ ${toAppend}
   }
   if (!nonInteractive) {
     p5.log.success(`Scaffolded ${template} in ${targetDir}`);
-    p5.note(`cd ${slug} && yarn install && wp setup && wp doctor && wp dev`, "Getting started");
+    p5.note(`cd ${slug} && npm install && wp setup && wp doctor && wp dev`, "Getting started");
   } else {
     ctx.logger.success(`Scaffolded ${template} in ${targetDir}`);
   }
@@ -3951,7 +3981,7 @@ async function runExamplesSmoke(ctx, options = {}) {
   const tier = options.tier ?? "static";
   const args = ["--tier", tier];
   if (options.scenario) args.push("--scenario", options.scenario);
-  const { runNodeScript } = await import("./exec-VY6BGWF3.js");
+  const { runNodeScript } = await import("./exec-NS4GKXZS.js");
   runNodeScript(kitPath("examples", "smoke", "run-matrix.mjs"), args, {
     cwd: ctx.projectRoot,
     logger: ctx.logger,
@@ -4281,7 +4311,8 @@ async function runPortalUse(ctx, options = {}) {
   runCommand("hs", ["accounts", "use", portal.name], {
     cwd: ctx.projectRoot,
     logger: ctx.logger,
-    dryRun: false
+    dryRun: false,
+    projectRoot: ctx.projectRoot
   });
   if (!ctx.global.json && !ctx.global.quiet) {
     printCommandDone(ctx, `Default portal \u2192 ${portal.name}`);
@@ -4466,7 +4497,7 @@ async function runPageAdd(ctx, options) {
   return ExitCode.SUCCESS;
 }
 async function runPageList(ctx) {
-  const { listScaffoldedPages } = await import("./scaffold-page-lifecycle-EHMPWPPE.js");
+  const { listScaffoldedPages } = await import("./scaffold-page-lifecycle-53AWWGFR.js");
   const pages = listScaffoldedPages(ctx.projectRoot, ctx.config);
   if (ctx.global.json) {
     ctx.logger.json({ pages });
@@ -4492,7 +4523,7 @@ async function runPageList(ctx) {
   return ExitCode.SUCCESS;
 }
 async function runPageRemove(ctx, options) {
-  const { removeScaffoldedPage } = await import("./scaffold-page-lifecycle-EHMPWPPE.js");
+  const { removeScaffoldedPage } = await import("./scaffold-page-lifecycle-53AWWGFR.js");
   const result = removeScaffoldedPage({
     projectRoot: ctx.projectRoot,
     config: ctx.config,
@@ -4855,14 +4886,18 @@ function createProgram() {
   });
   program2.command("auth").description("Authenticate HubSpot CLI (hs auth)").action(async () => {
     const global = program2.opts();
-    const ctx = buildContext(global);
-    const { runCommand: runCommand2 } = await import("./exec-VY6BGWF3.js");
-    runCommand2("hs", ["auth"], {
-      cwd: ctx.projectRoot,
-      logger: ctx.logger,
-      dryRun: ctx.global.dryRun
+    await handle(async () => {
+      const ctx = buildContext(global);
+      const { runCommand: runCommand2 } = await import("./exec-NS4GKXZS.js");
+      runCommand2("hs", ["auth"], {
+        cwd: ctx.projectRoot,
+        logger: ctx.logger,
+        dryRun: ctx.global.dryRun,
+        projectRoot: ctx.projectRoot,
+        streamOutput: true
+      });
+      return ExitCode.SUCCESS;
     });
-    process.exit(ExitCode.SUCCESS);
   });
   const portal = program2.command("portal").description("HubSpot default portal selection");
   portal.command("list").alias("ls").description("List portals from hubspot.config.yml").action(async () => {