@aiam/ciba 0.9.7 → 0.9.9

package/ciba.mjs

@@ -289,8 +289,11 @@ async function runCodeFlow(serverUrl, code, opts) {
 
   log('→ Exchanging code...');
 
-  // Wait for the default destination token to land via resources map.
-  const defaultResource = `urn:sap:destination:${process.env.CIBA_DEFAULT_DESTINATION || 'WEBAGENTS_BACKEND'}`;
+  // Wait for the default destination token — resolve from server options.
+  const optionsMap2 = deviceDoc.getMap('options');
+  const srvRes2 = optionsMap2.get('resources') ?? {};
+  const defaultResource = Object.keys(srvRes2).find(n => srvRes2[n]?.default)
+    ?? process.env.CIBA_DEFAULT_RESOURCE ?? 'webagents';
   const resourcesMap = deviceDoc.getMap('resources');
 
   const tokenMapName = await firstInYMap(resourcesMap, () => true, TIMEOUT)
@@ -438,7 +441,10 @@ function startDaemon(provider, deviceDoc, privateKey, serverUrl) {
           dlog(`${req.command} cmd attrs=${JSON.stringify(req.attrs)}`);
           const requests = deviceDoc.getMap('requests');
           const resourcesMap = deviceDoc.getMap('resources');
-          const defaultResource = `urn:sap:destination:${process.env.CIBA_DEFAULT_DESTINATION || 'WEBAGENTS_BACKEND'}`;
+          const optionsMap = deviceDoc.getMap('options');
+          const serverResources = optionsMap.get('resources') ?? {};
+          const defaultResource = Object.keys(serverResources).find(n => serverResources[n]?.default)
+            ?? process.env.CIBA_DEFAULT_RESOURCE ?? 'webagents';
           const attrs = { ...(req.attrs || {}) };
           const requestedResource = attrs.resource ?? defaultResource;
 
@@ -652,7 +658,7 @@ const loginCmd = defineCommand({
 const tokenCmd = defineCommand({
   meta: { description: 'Return token (cache-first, no daemon needed)' },
   args: {
-    resource: { type: 'string', description: 'Resource URN (default: urn:sap:destination:WEBAGENTS_BACKEND)' },
+    resource: { type: 'string', description: 'Resource name (default: webagents)' },
     ...outputArgs,
   },
   async run({ args }) {
@@ -671,7 +677,7 @@ const tokenCmd = defineCommand({
 const refreshCmd = defineCommand({
   meta: { description: 'Force a fresh token exchange (no re-approval needed)' },
   args: {
-    resource: { type: 'string', description: 'Resource URN to refresh (default: WEBAGENTS_BACKEND destination)' },
+    resource: { type: 'string', description: 'Resource name to refresh (default: webagents)' },
     ...outputArgs,
   },
   async run({ args }) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiam/ciba",
-  "version": "0.9.7",
+  "version": "0.9.9",
   "description": "OAuth 2.0 Device Authorization Grant CLI with cross-device push approval (Yjs sync, ECDH-encrypted token delivery, persistent device id)",
   "type": "module",
   "bin": {

package/token.mjs

@@ -30,7 +30,7 @@ const args = process.argv.slice(2);
 const get = (flag) => { const i = args.indexOf(flag); return i !== -1 ? args[i + 1] : undefined; };
 const has = (flag) => args.includes(flag);
 
-const resource  = get('--resource') ?? `urn:sap:destination:${process.env.CIBA_DEFAULT_DESTINATION || 'WEBAGENTS_BACKEND'}`;
+const resource  = get('--resource') ?? null; // null = resolve from server options after sync
 const jsonOut   = has('--json');
 const envOut    = has('--env');
 const isRefresh = has('--refresh');
@@ -179,25 +179,25 @@ if (meta.get('public_key') !== publicKey) meta.set('public_key', publicKey);
 const resourcesMap = deviceDoc.getMap('resources');
 const optionsMap = deviceDoc.getMap('options');
 
-// Read server options — resolve short name or use as-is.
-// options.resources = { webagents: { default: true, ... }, a2a: { ... }, ... }
+// Read server options — resolve resource name.
+// options.resources = { webagents: { default: true }, a2a: { ... }, ... }
 const serverResources = optionsMap.get('resources') ?? {};
 const resourceNames = Object.keys(serverResources);
 
-// Resolve the requested resource:
-// 1. If resource matches a short name directly → use it
-// 2. If resource is a URN → use it as-is
-// 3. If no resource → use default from options
-let resolvedResource = resource;
-if (!resource.includes(':') && !resourceNames.includes(resource)) {
-  // Try to find a match case-insensitively
-  const match = resourceNames.find(n => n.toLowerCase() === resource.toLowerCase());
-  if (match) resolvedResource = match;
-}
-if (!resource) {
-  // Use default
+// Resolve:
+// 1. --resource passed and matches a known short name → use it
+// 2. --resource passed as URN → use as-is
+// 3. No --resource → use server default (options.resources[name].default === true)
+// 4. Fallback: first resource name, or 'webagents'
+let resolvedResource;
+if (resource) {
+  // Exact match or case-insensitive short name
+  const match = resourceNames.find(n => n === resource || n.toLowerCase() === resource.toLowerCase());
+  resolvedResource = match ?? resource; // fall back to as-is (URN or unknown)
+} else {
+  // Use server default
   const def = resourceNames.find(n => serverResources[n]?.default);
-  resolvedResource = def ?? resource;
+  resolvedResource = def ?? resourceNames[0] ?? 'webagents';
 }
 
 log(`→ options:   ${JSON.stringify(serverResources)}`);