@actionway/cli 0.18.19 → 0.18.21

package/README.md

@@ -105,5 +105,5 @@ pnpm cli -- generate-video --print-schema
 `.github/workflows/release.yml` 负责：勾选 `actionway_cli`（可单独选择，也可与 Worker 组合）并选择版本 bump 后，
 workflow 以 npm 已发布的最高版本为基线生成下一版本，构建当前仓库的
 tarball，验证真实 npm install 后的 `.bin/actionway`、`--help`、`--version`
-和 `logout`，再发布到 `latest`。`@actionway/sandbox-cli` 继续独立于本地 CLI；
-其 iLands rollout 尚未接入 Production Release，保留单独的手动发布 workflow。
+和 `logout`，再发布到 `latest`。同一 Production Release 也提供独立的
+`sandbox_cli` 目标，把受检的 `@actionway/sandbox-cli` artifact 发布到 iLands wrapper 使用的 `prod` dist-tag。

package/dist/index.js

@@ -12610,6 +12610,7 @@ async function startDevicePairing(gateway, codeChallenge, fetchImpl = fetch, con
   }
   return {
     deviceCode: value.device_code,
+    ...typeof value.install_attempt_id === "string" && value.install_attempt_id ? { installAttemptId: value.install_attempt_id } : {},
     userCode: value.user_code,
     verificationUrl: value.verification_url,
     verificationUrlComplete: value.verification_url_complete,
@@ -12640,6 +12641,8 @@ async function pollDevicePairing(gateway, deviceCode, fetchImpl = fetch) {
       return { status: "approved", code: value.code };
     case "denied":
       return { status: "denied" };
+    case "superseded":
+      return { status: "superseded" };
     case "expired":
       return { status: "expired" };
     default:
@@ -12731,6 +12734,9 @@ async function fetchCliSession(gateway, accessToken, fetchImpl = fetch, context
     url.searchParams.set("install_session_id", context.installAttribution.installSessionId);
     url.searchParams.set("install_source", context.installAttribution.installSource);
   }
+  if (context.installAttemptId) {
+    url.searchParams.set("install_attempt_id", context.installAttemptId);
+  }
   const response = await fetchImpl(url, {
     headers: {
       Accept: "application/json",
@@ -12766,11 +12772,15 @@ async function login(options = {}) {
   const sleep = options.sleepImpl ?? defaultSleep;
   const onNotice = options.onNotice ?? ((message) => process.stderr.write(`${message}
 `));
+  let installAttemptId;
   let failureReported = false;
   const reportInstallEvent = async (event) => {
     if (!options.installAttribution || !options.onInstallEvent) return;
     try {
-      await options.onInstallEvent(event);
+      await options.onInstallEvent({
+        ...event,
+        ...installAttemptId ? { installAttemptId } : {}
+      });
     } catch {
     }
   };
@@ -12831,6 +12841,7 @@ async function login(options = {}) {
       ...options.installAttribution ? { installAttribution: options.installAttribution } : {},
       ...options.clientContext ? { clientContext: options.clientContext } : {}
     });
+    installAttemptId = options.installAttribution ? pairing.installAttemptId : void 0;
     onNotice(
       `Sign in to Actionway on any device:
   ${pairing.verificationUrl}
@@ -12856,6 +12867,14 @@ ${pairing.verificationUrlComplete}`);
           "run `actionway login` again and approve the request on the activation page"
         );
       }
+      if (poll.status === "superseded") {
+        await reportInstallFailure("pairing", "pairing_superseded");
+        throw new CliError(
+          "E_BACKEND",
+          "this sign-in request was replaced by a newer install attempt",
+          "use the latest authorization link or one-time code shown in the most recent terminal output"
+        );
+      }
       if (poll.status === "expired") {
         await reportInstallFailure("authorization", "authorization_expired");
         throw new CliError(
@@ -12890,6 +12909,7 @@ ${pairing.verificationUrlComplete}`);
     failureStage = "account_connection";
     const account = await fetchCliSession(gateway, tokens.accessToken, fetchImpl, {
       ...options.installAttribution ? { installAttribution: options.installAttribution } : {},
+      ...installAttemptId ? { installAttemptId } : {},
       ...options.clientContext ? { clientContext: options.clientContext } : {}
     });
     if (!account) {
@@ -13429,6 +13449,7 @@ async function captureInstallAuthEvent(input) {
           event: input.event.event,
           installSessionId: input.installSessionId,
           installSource: input.installSource,
+          ...input.event.installAttemptId ? { installAttemptId: input.event.installAttemptId } : {},
           ...input.event.event === "install_failed" ? {
             failureStage: input.event.failureStage,
             failureReason: input.event.failureReason

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actionway/cli",
-  "version": "0.18.19",
+  "version": "0.18.21",
   "description": "actionway CLI 的本地端壳：Clerk OAuth 鉴权 + cli-core 共享命令面 + init / update / skill 物化 / 版本三链路（终端用户本地 Codex / Claude Code / WorkBuddy 使用）",
   "type": "module",
   "bin": {