fix(release): stabilize beta2 validation gates

Summary:

- Align package and CLI runtime versions with 0.5.9-beta.2.

- Stabilize release-gate checks across CLI, desktop, web, and Cloudflare worker suites.

- Add explicit TypeScript dev dependencies for shared packages used by package-level typechecks.

Related docs:

- spec/releases/0.5.9-beta.2.md

- spec/issues/active/local-github-status.md

Main changes:

- Update the CLI --version source and CLI tests to 0.5.9-beta.2.

- Refresh MCP CLI expectations for the current empty built-in MCP market.

- Stabilize desktop deployment and plugin detail tests for current UI/store state.

- Extend web sync/import-export tests to include plugin and MCP summary counts.

- Normalize Cloudflare folder parentId null updates to root-compatible undefined.

Verification:

- pnpm verify:release:quick

- pnpm --filter @prompthub/cli exec tsx src/index.ts --version

- pnpm --filter @prompthub/cli test

- pnpm --filter @prompthub/web-cloudflare typecheck

- pnpm --filter @prompthub/web-cloudflare test

- git diff --check

Author: legeling

apps/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prompthub/cli",
-  "version": "0.5.9-beta.1",
+  "version": "0.5.9-beta.2",
   "description": "PromptHub CLI - standalone command line product",
   "license": "AGPL-3.0",
   "type": "module",

apps/cli/tests/run.test.ts

@@ -115,7 +115,7 @@ describe("standalone cli wiring", () => {
     const result = await execCli(["--version"]);
 
     expect(result.exitCode).toBe(0);
-    expect(result.joinedStdout.trim()).toBe("0.5.8-beta.3");
+    expect(result.joinedStdout.trim()).toBe("0.5.9-beta.2");
     expect(result.stderr).toEqual([]);
   });
 
@@ -229,25 +229,36 @@ describe("standalone cli wiring", () => {
     expect(copyRes.json.content).toBe("Release Beta");
   });
 
-  it("installs MCP market templates by query", async () => {
+  it("reports empty MCP market templates without installing placeholders", async () => {
     const root = makeTempRoot(tempDirs);
 
+    const marketRes = await execCli([...withDataDir(root), "mcp", "market"]);
+    expect(marketRes.exitCode).toBe(0);
+    expect(marketRes.json).toEqual([]);
+
+    const sourcesRes = await execCli([...withDataDir(root), "mcp", "sources"]);
+    expect(sourcesRes.exitCode).toBe(0);
+    expect(
+      sourcesRes.json.some(
+        (source: { id: string }) => source.id === "prompthub-official",
+      ),
+    ).toBe(true);
+    expect(
+      sourcesRes.json.some(
+        (source: { id: string }) => source.id === "modelcontextprotocol",
+      ),
+    ).toBe(true);
+
     const installRes = await execCli([
       ...withDataDir(root),
       "mcp",
       "install",
       "up-to-date",
     ]);
-    expect(installRes.exitCode).toBe(0);
-    expect(installRes.json.name).toBe("context7");
-
-    const listRes = await execCli([...withDataDir(root), "mcp", "list"]);
-    expect(listRes.exitCode).toBe(0);
-    expect(
-      listRes.json.some(
-        (server: { name: string }) => server.name === "context7",
-      ),
-    ).toBe(true);
+    expect(installRes.exitCode).toBe(3);
+    expect(installRes.errorJson.error).toMatchObject({
+      code: "NOT_FOUND",
+    });
   });
 
   it("supports MCP market, import, env import, and health check in the shared library", async () => {
@@ -275,9 +286,7 @@ describe("standalone cli wiring", () => {
 
     const marketRes = await execCli([...withDataDir(root), "mcp", "market"]);
     expect(marketRes.exitCode).toBe(0);
-    expect(
-      marketRes.json.some((item: { id: string }) => item.id === "context7"),
-    ).toBe(true);
+    expect(marketRes.json).toEqual([]);
 
     const importRes = await execCli([
       ...withDataDir(root),
@@ -2682,7 +2691,7 @@ describe("standalone cli wiring", () => {
     ]);
     expect(readImportedRes.exitCode).toBe(0);
     expect(readImportedRes.json.content).toBe("# Project A Rule");
-  });
+  }, 10_000);
 
   it("requires content for rules save", async () => {
     const root = makeTempRoot(tempDirs);

apps/desktop/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prompthub/desktop",
-  "version": "0.5.9-beta.1",
+  "version": "0.5.9-beta.2",
   "private": true,
   "description": "PromptHub Desktop - Electron application for AI prompt management",
   "main": "out/main/index.js",

apps/desktop/src/renderer/components/plugin/PluginFullDetailPage.tsx

@@ -1930,7 +1930,6 @@ export function PluginFullDetailPage({
 
   useEffect(() => {
     void checkSourceUpdate(false);
-    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [plugin.id]);
 
   useEffect(() => {

apps/desktop/src/renderer/components/skill/SkillManager.tsx

@@ -279,7 +279,7 @@ export function SkillManager() {
   const loadDeployedStatus = useSkillStore((state) => state.loadDeployedStatus);
   const skillFilterTags = useSkillStore((state) => state.filterTags);
   const pendingPluginChildDeploySkillIds = useSkillStore(
-    (state) => state.pendingPluginChildDeploySkillIds,
+    (state) => state.pendingPluginChildDeploySkillIds ?? [],
   );
   const consumePluginChildSkillDeployRequest = useSkillStore(
     (state) => state.consumePluginChildSkillDeployRequest,

apps/desktop/tests/unit/components/skill-batch-deploy-dialog.test.tsx

@@ -204,6 +204,12 @@ describe("SkillBatchDeployDialog install mode", () => {
     const copyButton = screen.getByRole("button", { name: /Copy/ });
     const symlinkButton = screen.getByRole("button", { name: /Symlink/ });
     const platformButton = screen.getByRole("button", { name: /Claude Code/ });
+    const selectAllButton = screen.queryByRole("button", {
+      name: "Select All",
+    });
+    if (selectAllButton) {
+      fireEvent.click(selectAllButton);
+    }
     const toggleAllButton = screen.getByRole("button", {
       name: "Deselect All",
     });

apps/web-cloudflare/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prompthub/web-cloudflare",
-  "version": "0.5.9-beta.1",
+  "version": "0.5.9-beta.2",
   "description": "Cloudflare Workers self-hosted sync backend for PromptHub",
   "license": "AGPL-3.0",
   "private": true,

apps/web-cloudflare/src/web-data.ts

@@ -833,7 +833,7 @@ export async function updateFolder(c: AppContext): Promise<Response> {
   if (nextVisibility !== resourceVisibility(current) && user.role !== "admin") {
     return failure(c, 403, ErrorCode.FORBIDDEN, "Only admin can change shared visibility");
   }
-  const parentId = patch.parentId === undefined ? current.parentId : patch.parentId;
+  const parentId = (patch.parentId === undefined ? current.parentId : patch.parentId) ?? undefined;
   const parentError = assertParentFolderAllowed(c, snapshot.folders.filter((item) => item.id !== folderId), parentId, nextVisibility);
   if (parentError) return parentError;
   if (parentId && collectFolderDescendants(snapshot.folders, folderId).has(parentId)) {

apps/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prompthub/web",
-  "version": "0.5.9-beta.1",
+  "version": "0.5.9-beta.2",
   "description": "PromptHub Web – self-hosted browser-based prompt management app",
   "license": "AGPL-3.0",
   "private": true,

apps/web/src/client/pages/DesktopWorkspace.test.tsx

@@ -34,13 +34,32 @@ vi.mock('../api/auth-session', () => ({
 
 import { DesktopWorkspacePage } from './DesktopWorkspace';
 
+function createMemoryStorage(): Storage {
+  const values = new Map<string, string>();
+
+  return {
+    get length() {
+      return values.size;
+    },
+    clear: () => values.clear(),
+    getItem: (key: string) => values.get(key) ?? null,
+    key: (index: number) => Array.from(values.keys())[index] ?? null,
+    removeItem: (key: string) => values.delete(key),
+    setItem: (key: string, value: string) => values.set(key, value),
+  };
+}
+
 describe('DesktopWorkspacePage', () => {
   beforeEach(() => {
     Reflect.deleteProperty(window, '__PROMPTHUB_WEB__');
     Reflect.deleteProperty(window, '__PROMPTHUB_WEB_CONTEXT__');
     Reflect.deleteProperty(window, '__PROMPTHUB_WEB_LOGOUT__');
     Reflect.deleteProperty(window, 'api');
     Reflect.deleteProperty(window, 'electron');
+    Object.defineProperty(window, 'localStorage', {
+      configurable: true,
+      value: createMemoryStorage(),
+    });
     window.localStorage.clear();
     fetchWithAuthRetryMock.mockReset();
     fetchWithAuthRetryMock.mockResolvedValue(new Response('{}', { status: 200 }));