@rosthq/cli 0.7.119 → 0.7.120

package/dist/implementation-credential-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"implementation-credential-store.d.ts","sourceRoot":"","sources":["../src/implementation-credential-store.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAOL,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAO1B,QAAA,MAAM,uCAAuC;;;;;;;kBAOlC,CAAC;AAEZ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,IAAI,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC;IAC1D,KAAK,CAAC,UAAU,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,IAAI,MAAM,CAAC;CACpB,CAAC;AA8OF,qBAAa,4BAA6B,YAAW,6BAA6B;IACpE,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,SAAqB;IAEpD,IAAI,IAAI,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC;IAezD,KAAK,CAAC,UAAU,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,QAAQ,IAAI,MAAM;YAIJ,cAAc;CAI7B;AAED,MAAM,MAAM,0CAA0C,GAAG;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC5C,CAAC;AAEF,wBAAgB,mCAAmC,CACjD,OAAO,GAAE,0CAA+C,GACvD,6BAA6B,CAmC/B"}
+{"version":3,"file":"implementation-credential-store.d.ts","sourceRoot":"","sources":["../src/implementation-credential-store.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAUL,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAO1B,QAAA,MAAM,uCAAuC;;;;;;;kBAOlC,CAAC;AAEZ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,IAAI,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC;IAC1D,KAAK,CAAC,UAAU,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,IAAI,MAAM,CAAC;CACpB,CAAC;AAoRF,qBAAa,4BAA6B,YAAW,6BAA6B;IACpE,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,SAAqB;IAEpD,IAAI,IAAI,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC;IAezD,KAAK,CAAC,UAAU,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,QAAQ,IAAI,MAAM;YAIJ,cAAc;CAI7B;AAED,MAAM,MAAM,0CAA0C,GAAG;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC5C,CAAC;AAEF,wBAAgB,mCAAmC,CACjD,OAAO,GAAE,0CAA+C,GACvD,6BAA6B,CAmC/B"}

package/dist/index.js

@@ -49404,7 +49404,12 @@ var sessionSchema = external_exports.object({
   expiresAt: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var runExecFile = (file2, args, options) => new Promise((resolve2, reject) => {
-  const child = execFileCallback(file2, [...args], (error51, stdout, stderr) => {
+  const execOptions = {};
+  if (options?.timeoutMs !== void 0) {
+    execOptions.timeout = options.timeoutMs;
+    execOptions.killSignal = "SIGKILL";
+  }
+  const child = execFileCallback(file2, [...args], execOptions, (error51, stdout, stderr) => {
     if (error51) {
       reject(error51);
       return;
@@ -49420,6 +49425,59 @@ var runExecFile = (file2, args, options) => new Promise((resolve2, reject) => {
 });
 var serviceName = `${cliBrand.binName}-cli`;
 var accountName = "session";
+var KEYCHAIN_WRITE_TIMEOUT_MS = 1e4;
+var KEYCHAIN_CLEAR_TIMEOUT_MS = 1e4;
+var MAX_INTERACTIVE_COMMAND_BYTES = 2048;
+function escapeSecurityInteractiveArgument(value) {
+  return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+}
+function buildKeychainInteractiveWriteCommand(service, account, secret) {
+  const command = [
+    "add-generic-password",
+    "-U",
+    "-s",
+    `"${escapeSecurityInteractiveArgument(service)}"`,
+    "-a",
+    `"${escapeSecurityInteractiveArgument(account)}"`,
+    "-w",
+    `"${escapeSecurityInteractiveArgument(secret)}"`
+  ].join(" ");
+  return Buffer.byteLength(command, "utf8") > MAX_INTERACTIVE_COMMAND_BYTES ? null : command;
+}
+var KeychainInteractiveWriteError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "KeychainInteractiveWriteError";
+  }
+};
+function describeExecFailure(error51) {
+  if (error51 && typeof error51 === "object") {
+    const record2 = error51;
+    if (record2.killed === true) {
+      return "timed out";
+    }
+    if (typeof record2.code === "number") {
+      return `exit code ${record2.code}`;
+    }
+  }
+  return "failed";
+}
+async function writeKeychainSecretInteractive(run2, service, account, secret, timeoutMs = KEYCHAIN_WRITE_TIMEOUT_MS) {
+  const command = buildKeychainInteractiveWriteCommand(service, account, secret);
+  if (command === null) {
+    throw new KeychainInteractiveWriteError(
+      "the session is too large to write through the keychain's interactive command interpreter"
+    );
+  }
+  try {
+    await run2("security", ["-i"], { input: `${command}
+`, timeoutMs });
+  } catch (error51) {
+    throw new KeychainInteractiveWriteError(
+      `the macOS Keychain write did not complete (${describeExecFailure(error51)})`
+    );
+  }
+}
 var KeychainTokenStore = class {
   constructor(run2 = runExecFile) {
     this.run = run2;
@@ -49442,18 +49500,15 @@ var KeychainTokenStore = class {
   }
   async write(session) {
     sessionSchema.parse(session);
-    const secret = JSON.stringify(session);
-    await this.run(
-      "security",
-      ["add-generic-password", "-U", "-s", serviceName, "-a", accountName, "-w"],
-      { input: `${secret}
-${secret}
-` }
-    );
+    await writeKeychainSecretInteractive(this.run, serviceName, accountName, JSON.stringify(session));
   }
   async clear() {
     try {
-      await this.run("security", ["delete-generic-password", "-s", serviceName, "-a", accountName]);
+      await this.run(
+        "security",
+        ["delete-generic-password", "-s", serviceName, "-a", accountName],
+        { timeoutMs: KEYCHAIN_CLEAR_TIMEOUT_MS }
+      );
     } catch {
       return;
     }
@@ -49488,7 +49543,19 @@ var DarwinTokenStore = class extends KeychainTokenStore {
       await this.file().write(session);
       return;
     }
-    await super.write(session);
+    try {
+      await super.write(session);
+    } catch (error51) {
+      if (!(error51 instanceof KeychainInteractiveWriteError)) {
+        throw error51;
+      }
+      this.backend = "file";
+      this.fileBackendReason = "write-failed";
+      await this.file().write(session);
+      await super.clear();
+      this.warnKeychainWriteFailed(error51);
+      return;
+    }
     if (await this.keychainReadBackFailed(session)) {
       this.backend = "file";
       this.fileBackendReason = "unreadable";
@@ -49505,7 +49572,14 @@ var DarwinTokenStore = class extends KeychainTokenStore {
     if (this.backend !== "file") {
       return super.describe();
     }
-    return this.fileBackendReason === "unreadable" ? "owner-only file store (macOS keychain not readable back cross-process)" : "owner-only file store (no usable macOS keychain)";
+    switch (this.fileBackendReason) {
+      case "unreadable":
+        return "owner-only file store (macOS keychain not readable back cross-process)";
+      case "write-failed":
+        return "owner-only file store (macOS keychain write did not complete)";
+      default:
+        return "owner-only file store (no usable macOS keychain)";
+    }
   }
   file() {
     return this.fileStore ??= new FileTokenStore(this.filePath);
@@ -49526,9 +49600,15 @@ var DarwinTokenStore = class extends KeychainTokenStore {
     }
   }
   warnKeychainNotReadableBack() {
-    const envKey = brandEnvKey2("CLI_ALLOW_FILE_TOKEN_STORE");
     this.stderr.write(
-      `NOTICE: the macOS Keychain accepted the session but it was not readable back (cross-process keychain read failed). Wrote the session to the ${this.file().describe()} instead. For headless / non-interactive use, export ${envKey}=1 so later commands read it directly.
+      `NOTICE: the macOS Keychain accepted the session but it was not readable back (cross-process keychain read failed). Wrote the session to the ${this.file().describe()} instead \u2014 later commands find it there automatically; no configuration is needed.
+`
+    );
+  }
+  warnKeychainWriteFailed(error51) {
+    const detail = error51 instanceof Error ? error51.message : "the macOS Keychain write failed";
+    this.stderr.write(
+      `NOTICE: ${detail}. Wrote the session to the ${this.file().describe()} instead \u2014 later commands find it there automatically; no configuration is needed.
 `
     );
   }
@@ -49843,18 +49923,15 @@ var ImplementationKeychainTokenStore = class {
   }
   async write(credential) {
     parseCredential(credential);
-    const secret = JSON.stringify(credential);
-    await this.run(
-      "security",
-      ["add-generic-password", "-U", "-s", serviceName2, "-a", accountName2, "-w"],
-      { input: `${secret}
-${secret}
-` }
-    );
+    await writeKeychainSecretInteractive(this.run, serviceName2, accountName2, JSON.stringify(credential));
   }
   async clear() {
     try {
-      await this.run("security", ["delete-generic-password", "-s", serviceName2, "-a", accountName2]);
+      await this.run(
+        "security",
+        ["delete-generic-password", "-s", serviceName2, "-a", accountName2],
+        { timeoutMs: KEYCHAIN_CLEAR_TIMEOUT_MS }
+      );
     } catch {
       return;
     }
@@ -49889,7 +49966,19 @@ var ImplementationDarwinTokenStore = class extends ImplementationKeychainTokenSt
       await this.file().write(credential);
       return;
     }
-    await super.write(credential);
+    try {
+      await super.write(credential);
+    } catch (error51) {
+      if (!(error51 instanceof KeychainInteractiveWriteError)) {
+        throw error51;
+      }
+      this.backend = "file";
+      this.fileBackendReason = "write-failed";
+      await this.file().write(credential);
+      await super.clear();
+      this.warnKeychainWriteFailed(error51);
+      return;
+    }
     if (await this.keychainReadBackFailed(credential)) {
       this.backend = "file";
       this.fileBackendReason = "unreadable";
@@ -49906,7 +49995,14 @@ var ImplementationDarwinTokenStore = class extends ImplementationKeychainTokenSt
     if (this.backend !== "file") {
       return super.describe();
     }
-    return this.fileBackendReason === "unreadable" ? "owner-only file store (macOS keychain not readable back cross-process)" : "owner-only file store (no usable macOS keychain)";
+    switch (this.fileBackendReason) {
+      case "unreadable":
+        return "owner-only file store (macOS keychain not readable back cross-process)";
+      case "write-failed":
+        return "owner-only file store (macOS keychain write did not complete)";
+      default:
+        return "owner-only file store (no usable macOS keychain)";
+    }
   }
   file() {
     return this.fileStore ??= new ImplementationFileTokenStore(this.filePath);
@@ -49927,9 +50023,15 @@ var ImplementationDarwinTokenStore = class extends ImplementationKeychainTokenSt
     }
   }
   warnKeychainNotReadableBack() {
-    const envKey = brandEnvKey3("CLI_ALLOW_FILE_TOKEN_STORE");
     this.stderr.write(
-      `NOTICE: the macOS Keychain accepted the implementation credential but it was not readable back (cross-process keychain read failed). Wrote it to the ${this.file().describe()} instead. For headless / non-interactive use, export ${envKey}=1 so later commands read it directly.
+      `NOTICE: the macOS Keychain accepted the implementation credential but it was not readable back (cross-process keychain read failed). Wrote it to the ${this.file().describe()} instead \u2014 later commands find it there automatically; no configuration is needed.
+`
+    );
+  }
+  warnKeychainWriteFailed(error51) {
+    const detail = error51 instanceof Error ? error51.message : "the macOS Keychain write failed";
+    this.stderr.write(
+      `NOTICE: ${detail}. Wrote it to the ${this.file().describe()} instead \u2014 later commands find it there automatically; no configuration is needed.
 `
     );
   }
@@ -51483,7 +51585,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-27.1",
+    version: "2026-07-27.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -51775,6 +51877,8 @@ By default the CLI stores the session in the **macOS Keychain** (on darwin). The
 
 On macOS, the CLI now **verifies the keychain write is readable back** right after \`login\`. On some headless/service hosts the keychain accepts the write but a later command's process cannot read it back (an ACL scoped to the writing binary, a re-locked login keychain, or a launchd/SSH session with no keychain), so \`login\` reports success yet the next command prints "Not logged in". When that readback fails, the CLI **automatically** writes the session to the same owner-only file store (directory \`0700\`, file \`0600\`), prints a one-line stderr notice, and later commands read it back transparently \u2014 so a headless macOS agent "just works" with no flag. For a fully unattended macOS host, export \`{{envPrefix}}_CLI_ALLOW_FILE_TOKEN_STORE=1\` anyway so every command uses the file store directly.
 
+The keychain write itself is also bounded so it can never hang \`login --device\` after a successful approval: it runs through the keychain tool's own batch command interpreter with the session supplied inline (never on the command line, so it still never appears in \`ps\`) and a fixed timeout. If that write times out or otherwise fails, the CLI kills it and automatically falls over to the same owner-only file store \u2014 again, no flag and no manual retry needed.
+
 For headless Linux, CI runners, or any no-keychain environment, set \`{{envPrefix}}_CLI_ALLOW_FILE_TOKEN_STORE=1\` to opt into the **development-only plain-file token store**. It is **not encrypted** \u2014 it writes the file with owner-only permissions (directory \`0700\`, file \`0600\`) and prints a stderr warning. It stores **only CLI session tokens** (access + refresh token), never tenant secrets, API keys, or vault refs. Treat that file as a credential: do not bake it into a shared image and do not commit it.
 
 The CLI checks this flag on **every** invocation, not just \`login\`. Export it for the whole shell or CI job (so \`{{cli}} whoami\`, \`{{cli}} onboard status\`, and the rest also find the file store), not only on the login line: