@aiam/ciba 0.9.6 → 0.9.8

package/ciba.mjs

@@ -290,7 +290,7 @@ async function runCodeFlow(serverUrl, code, opts) {
   log('→ Exchanging code...');
 
   // Wait for the default destination token to land via resources map.
-  const defaultResource = `urn:sap:destination:${process.env.CIBA_DEFAULT_DESTINATION || 'WEBAGENTS_BACKEND'}`;
+  const defaultResource = process.env.CIBA_DEFAULT_RESOURCE || 'webagents';
   const resourcesMap = deviceDoc.getMap('resources');
 
   const tokenMapName = await firstInYMap(resourcesMap, () => true, TIMEOUT)
@@ -438,7 +438,7 @@ function startDaemon(provider, deviceDoc, privateKey, serverUrl) {
           dlog(`${req.command} cmd attrs=${JSON.stringify(req.attrs)}`);
           const requests = deviceDoc.getMap('requests');
           const resourcesMap = deviceDoc.getMap('resources');
-          const defaultResource = `urn:sap:destination:${process.env.CIBA_DEFAULT_DESTINATION || 'WEBAGENTS_BACKEND'}`;
+          const defaultResource = process.env.CIBA_DEFAULT_RESOURCE || 'webagents';
           const attrs = { ...(req.attrs || {}) };
           const requestedResource = attrs.resource ?? defaultResource;
 
@@ -652,7 +652,7 @@ const loginCmd = defineCommand({
 const tokenCmd = defineCommand({
   meta: { description: 'Return token (cache-first, no daemon needed)' },
   args: {
-    resource: { type: 'string', description: 'Resource URN (default: urn:sap:destination:WEBAGENTS_BACKEND)' },
+    resource: { type: 'string', description: 'Resource name (default: webagents)' },
     ...outputArgs,
   },
   async run({ args }) {
@@ -671,7 +671,7 @@ const tokenCmd = defineCommand({
 const refreshCmd = defineCommand({
   meta: { description: 'Force a fresh token exchange (no re-approval needed)' },
   args: {
-    resource: { type: 'string', description: 'Resource URN to refresh (default: WEBAGENTS_BACKEND destination)' },
+    resource: { type: 'string', description: 'Resource name to refresh (default: webagents)' },
     ...outputArgs,
   },
   async run({ args }) {
@@ -689,35 +689,6 @@ const refreshCmd = defineCommand({
   },
 });
 
-const inspectCmd = defineCommand({
-  meta: { description: 'Open live device doc inspector in browser' },
-  args: {
-    url: { ...serverArg },
-  },
-  async run({ args }) {
-    const serverUrl = args.url || process.env.CIBA_URL || loadConfig().url || DEFAULT_SERVER_URL;
-    const keys = loadOrGenerateEcdhKeys();
-    const { jwt: deviceJwt } = signDeviceJwt(keys.privateKey, keys.publicKey);
-
-    // POST /inspect with device JWT to get a one-time inspect code.
-    const res = await fetch(`${serverUrl}/inspect`, {
-      method: 'POST',
-      headers: { Authorization: `Bearer ${deviceJwt}` },
-    });
-    if (!res.ok) {
-      const err = await res.json().catch(() => ({}));
-      process.stderr.write(`Error: ${err.error || res.status}\n`);
-      process.exit(1);
-    }
-    const { code, url } = await res.json();
-    process.stderr.write(`→ inspect code: ${code}\n`);
-    process.stderr.write(`→ opening:      ${url}\n`);
-    const cmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start ""' : 'xdg-open';
-    exec(`${cmd} "${url}"`);
-    process.exit(0);
-  },
-});
-
 const logoutCmd = defineCommand({
   meta: { description: 'Clear device keys, session and config (next login generates a new device identity)' },
   args: {},
@@ -793,7 +764,6 @@ const main = defineCommand({
     login:   loginCmd,
     token:   tokenCmd,
     refresh: refreshCmd,
-    inspect: inspectCmd,
     stop:    stopCmd,
     status:  statusCmd,
     logout:  logoutCmd,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiam/ciba",
-  "version": "0.9.6",
+  "version": "0.9.8",
   "description": "OAuth 2.0 Device Authorization Grant CLI with cross-device push approval (Yjs sync, ECDH-encrypted token delivery, persistent device id)",
   "type": "module",
   "bin": {

package/token.mjs

@@ -30,7 +30,7 @@ const args = process.argv.slice(2);
 const get = (flag) => { const i = args.indexOf(flag); return i !== -1 ? args[i + 1] : undefined; };
 const has = (flag) => args.includes(flag);
 
-const resource  = get('--resource') ?? `urn:sap:destination:${process.env.CIBA_DEFAULT_DESTINATION || 'WEBAGENTS_BACKEND'}`;
+const resource  = get('--resource') ?? process.env.CIBA_DEFAULT_RESOURCE ?? 'webagents';
 const jsonOut   = has('--json');
 const envOut    = has('--env');
 const isRefresh = has('--refresh');
@@ -130,17 +130,7 @@ function tryGet(resourcesMap, deviceDoc, res) {
 
 // ─── Output ───────────────────────────────────────────────────────────────────
 
-// Log entries go to Yjs `log` map on device doc (visible in ciba inspect).
-// Before doc is synced, fall back to stderr.
-let _logMap = null;
-let _logIdx = 0;
-function log(msg) {
-  if (_logMap) {
-    _logMap.set(`${Date.now()}-${_logIdx++}`, { ts: new Date().toISOString(), msg });
-  } else {
-    process.stderr.write(msg + '\n');
-  }
-}
+function log(msg) { process.stderr.write(msg + '\n'); }
 
 function output(token) {
   if (jsonOut) {
@@ -180,8 +170,6 @@ await new Promise((resolve, reject) => {
   provider.on('authenticationFailed', ({ reason }) => { clearTimeout(t); reject(new Error(reason)); });
 });
 
-// Switch logging to Yjs after sync — ciba inspect can now see entries.
-_logMap = deviceDoc.getMap('log');
 log('→ synced');
 
 // Write public key