@rayul/kordis 0.6.5 → 0.6.6

package/dist/index.js

@@ -1204,6 +1204,7 @@ import { join as join2 } from "path";
 var SERVICE = "kordis";
 var plaintextWarningEmitted = false;
 async function loadKeytar() {
+  if (process.env["KORDIS_NO_KEYCHAIN"] === "1") return null;
   try {
     const mod = await import("keytar");
     return mod.default ?? mod;
@@ -1583,29 +1584,53 @@ async function useClient() {
           baseUrl: cfg.apiUrl,
           userAgent: `kordis-cli/${VERSION} node/${process.version}`
         });
+        const debug = process.env["KORDIS_DEBUG"] === "1";
+        let pollResult = null;
         try {
-          const tokens = await bootstrapApi.pollDeviceFlow(pending.device_code);
-          const meClient = new KordisClient({
-            baseUrl: cfg.apiUrl,
-            userAgent: `kordis-cli/${VERSION} node/${process.version}`,
-            getAccessToken: () => tokens.access_token
-          });
-          const me = await meClient.me();
-          username = me.username;
-          currentTokens = {
-            access_token: tokens.access_token,
-            refresh_token: tokens.refresh_token,
-            session_id: tokens.session_id,
-            expires_at_epoch: Math.floor(Date.now() / 1e3) + tokens.expires_in
-          };
-          await keychain.save(username, currentTokens);
-          cfg = { ...cfg, username, sessionId: tokens.session_id };
-          await saveCliConfig(cfg);
-          await clearPending();
+          pollResult = await bootstrapApi.pollDeviceFlow(pending.device_code);
         } catch (err) {
           const code = err.code;
-          if (code && code !== "authorization_pending") {
+          if (code === "authorization_pending") {
+            if (debug) process.stderr.write("[kordis] auto-finalize: authorization_pending (keeping pending)\n");
+          } else {
             await clearPending();
+            if (debug) {
+              const msg = err instanceof Error ? err.message : String(err);
+              process.stderr.write(`[kordis] auto-finalize: poll failed (code=${code ?? "none"}): ${msg}
+`);
+            }
+          }
+        }
+        if (pollResult) {
+          try {
+            const meClient = new KordisClient({
+              baseUrl: cfg.apiUrl,
+              userAgent: `kordis-cli/${VERSION} node/${process.version}`,
+              getAccessToken: () => pollResult.access_token
+            });
+            const me = await meClient.me();
+            username = me.username;
+            currentTokens = {
+              access_token: pollResult.access_token,
+              refresh_token: pollResult.refresh_token,
+              session_id: pollResult.session_id,
+              expires_at_epoch: Math.floor(Date.now() / 1e3) + pollResult.expires_in
+            };
+            await keychain.save(username, currentTokens);
+            cfg = { ...cfg, username, sessionId: pollResult.session_id };
+            await saveCliConfig(cfg);
+            await clearPending();
+            if (debug) process.stderr.write(`[kordis] auto-finalize: persisted tokens for ${username}
+`);
+          } catch (err) {
+            await clearPending();
+            currentTokens = null;
+            username = null;
+            const msg = err instanceof Error ? err.message : String(err);
+            process.stderr.write(
+              `[kordis] auto-finalize: server issued tokens but local persistence failed (${msg}). Run \`kordis login --emit-only\` again to retry.
+`
+            );
           }
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rayul/kordis",
-  "version": "0.6.5",
+  "version": "0.6.6",
   "private": false,
   "description": "Command-line client for the Kordis registry — discover, install, and publish agentic-coding packages.",
   "license": "MIT",