@meistrari/tela-cli 1.9.1 → 1.9.3

package/dist/refresh-session.d.ts

@@ -0,0 +1,11 @@
+import type { CredentialAdapter, ResolvedContext, StoredCredential } from '@meistrari/tela-local-config';
+export declare function refreshCliSession(resolved: ResolvedContext, original: StoredCredential, credentials: CredentialAdapter, options?: {
+    platform?: string;
+    requestRefresh?: (contextId: string) => Promise<void>;
+}): Promise<StoredCredential>;
+export declare function renewThroughDock(contextId: string, dependencies?: {
+    available?: () => Promise<boolean>;
+    launch?: () => Promise<void>;
+    refresh?: (contextId: string) => Promise<void>;
+    wait?: () => Promise<void>;
+}): Promise<void>;

package/dist/refresh-session.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refreshCliSession = refreshCliSession;
+exports.renewThroughDock = renewThroughDock;
+const node_child_process_1 = require("node:child_process");
+const promises_1 = require("node:timers/promises");
+const node_util_1 = require("node:util");
+const tela_local_config_1 = require("@meistrari/tela-local-config");
+async function refreshCliSession(resolved, original, credentials, options = {}) {
+    if (!(0, tela_local_config_1.shouldRefreshUserSession)(original))
+        return original;
+    const ref = resolved.context.credentialRef;
+    if ((options.platform ?? process.platform) !== 'darwin' || ref.provider !== 'keychain')
+        return await (0, tela_local_config_1.refreshUserSessionCredential)(resolved.environment, ref, original, credentials);
+    // Never rotate a macOS Keychain session in the CLI. Sandbox writes may fail
+    // AFTER the auth server consumes the old refresh token.
+    await (options.requestRefresh ?? renewThroughDock)(resolved.id);
+    const credential = await credentials.get(ref);
+    if (!credential || credential.kind !== 'user-session' || !credential.accessToken || (0, tela_local_config_1.isExpired)(credential))
+        throw new Error('Tela Dock did not save a valid session. Check the context in Dock and sign in again.');
+    return credential;
+}
+async function renewThroughDock(contextId, dependencies = {}) {
+    const available = dependencies.available ?? tela_local_config_1.isDockSessionBrokerAvailable;
+    if (!await available()) {
+        try {
+            await (dependencies.launch ?? launchDock)();
+        }
+        catch {
+            throw new tela_local_config_1.SessionBrokerUnavailableError();
+        }
+        let ready = false;
+        for (let attempt = 0; attempt < 20; attempt++) {
+            if (await available()) {
+                ready = true;
+                break;
+            }
+            await (dependencies.wait ?? (async () => await (0, promises_1.setTimeout)(250)))();
+        }
+        if (!ready)
+            throw new tela_local_config_1.SessionBrokerUnavailableError();
+    }
+    // Probe/launch retries above are read-only. Never replay a submitted renewal.
+    await (dependencies.refresh ?? tela_local_config_1.requestDockSessionRefresh)(contextId);
+}
+async function launchDock() {
+    await (0, node_util_1.promisify)(node_child_process_1.execFile)('/usr/bin/open', ['-g', '-b', 'com.tela.dock'], { timeout: 5000 });
+}

package/dist/session.js

@@ -4,6 +4,7 @@ exports.loadPantry = loadPantry;
 exports.loadPantryForContext = loadPantryForContext;
 exports.loadSession = loadSession;
 exports.resolvePantryBaseUrl = resolvePantryBaseUrl;
+const refresh_session_1 = require("./refresh-session");
 const tela_local_config_1 = require("@meistrari/tela-local-config");
 const tela_pantry_1 = require("@meistrari/tela-pantry");
 const credentials_1 = require("./credentials");
@@ -41,8 +42,9 @@ async function loadPantryCredential(config, selected) {
         const originalCredential = await credentials.get(candidate.credentialRef);
         if (!originalCredential)
             continue;
+        const sessionContext = { ...candidate.resolved, context: { ...candidate.resolved.context, credentialRef: candidate.credentialRef } };
         const credential = originalCredential.kind === 'user-session'
-            ? await (0, tela_local_config_1.refreshUserSessionCredential)(candidate.resolved.environment, candidate.credentialRef, originalCredential, credentials)
+            ? await (0, refresh_session_1.refreshCliSession)(sessionContext, originalCredential, credentials)
             : originalCredential;
         if (credential.accessToken)
             return credential;
@@ -91,7 +93,7 @@ async function loadSession(contextId, environmentId) {
     if (!originalCredential)
         throw new Error(`Missing credential for Tela context ${resolved.id}`);
     const credential = originalCredential.kind === 'user-session'
-        ? await (0, tela_local_config_1.refreshUserSessionCredential)(resolved.environment, credentialRef, originalCredential, credentials)
+        ? await (0, refresh_session_1.refreshCliSession)(resolved, originalCredential, credentials)
         : originalCredential;
     return {
         resolved,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/tela-cli",
-  "version": "1.9.1",
+  "version": "1.9.3",
   "description": "Tela command line tools for local state and agent workflows.",
   "engines": {
     "node": ">=22"