@rosthq/cli 0.7.27 → 0.7.28

package/dist/index.js

@@ -37346,15 +37346,25 @@ ${secret}
   }
 };
 var DarwinTokenStore = class extends KeychainTokenStore {
-  constructor(run2 = runExecFile, filePath) {
+  constructor(run2 = runExecFile, filePath, stderr = process.stderr) {
     super(run2);
     this.filePath = filePath;
+    this.stderr = stderr;
   }
   filePath;
+  stderr;
   backend = null;
+  fileBackendReason = null;
   fileStore = null;
   async read() {
-    return await this.selectBackend() === "file" ? this.file().read() : super.read();
+    if (await this.selectBackend() === "file") {
+      return this.file().read();
+    }
+    const keychainSession = await super.read();
+    if (keychainSession) {
+      return keychainSession;
+    }
+    return this.readFileStoreBestEffort();
   }
   async write(session) {
     if (await this.selectBackend() === "file") {
@@ -37362,20 +37372,49 @@ var DarwinTokenStore = class extends KeychainTokenStore {
       return;
     }
     await super.write(session);
+    if (await this.keychainReadBackFailed(session)) {
+      this.backend = "file";
+      this.fileBackendReason = "unreadable";
+      await this.file().write(session);
+      await super.clear();
+      this.warnKeychainNotReadableBack();
+    }
   }
   async clear() {
-    if (await this.selectBackend() === "file") {
-      await this.file().clear();
-      return;
-    }
     await super.clear();
+    await this.file().clear();
   }
   describe() {
-    return this.backend === "file" ? "owner-only file store (no usable macOS keychain)" : super.describe();
+    if (this.backend !== "file") {
+      return super.describe();
+    }
+    return this.fileBackendReason === "unreadable" ? "owner-only file store (macOS keychain not readable back cross-process)" : "owner-only file store (no usable macOS keychain)";
   }
   file() {
     return this.fileStore ??= new FileTokenStore(this.filePath);
   }
+  async readFileStoreBestEffort() {
+    try {
+      return await this.file().read();
+    } catch {
+      return null;
+    }
+  }
+  async keychainReadBackFailed(session) {
+    try {
+      const readBack = await super.read();
+      return readBack?.accessToken !== session.accessToken;
+    } catch {
+      return true;
+    }
+  }
+  warnKeychainNotReadableBack() {
+    const envKey = brandEnvKey2("CLI_ALLOW_FILE_TOKEN_STORE");
+    this.stderr.write(
+      `NOTICE: the macOS Keychain accepted the session but it was not readable back (cross-process keychain read failed). Wrote the session to the ${this.file().describe()} instead. For headless / non-interactive use, export ${envKey}=1 so later commands read it directly.
+`
+    );
+  }
   async selectBackend() {
     if (this.backend) {
       return this.backend;
@@ -37384,7 +37423,12 @@ var DarwinTokenStore = class extends KeychainTokenStore {
       await this.run("security", ["find-generic-password", "-s", serviceName, "-a", accountName, "-w"]);
       this.backend = "keychain";
     } catch (error51) {
-      this.backend = isKeychainUnusableError(error51) ? "file" : "keychain";
+      if (isKeychainUnusableError(error51)) {
+        this.backend = "file";
+        this.fileBackendReason = "unusable";
+      } else {
+        this.backend = "keychain";
+      }
     }
     return this.backend;
   }
@@ -37513,7 +37557,7 @@ function createTokenStore(options = {}) {
   }
   const platform2 = options.platform ?? process.platform;
   if (platform2 === "darwin") {
-    return new DarwinTokenStore(options.execFile, tokenPath);
+    return new DarwinTokenStore(options.execFile, tokenPath, options.stderr ?? process.stderr);
   }
   if (platform2 === "win32") {
     return new WindowsCredentialTokenStore(options.execFile);
@@ -45005,7 +45049,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-04.18",
+    version: "2026-07-04.19",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -45193,6 +45237,8 @@ Notes:
 
 By default the CLI stores the session in the **macOS Keychain** (on darwin). There is no built-in Windows or Linux keychain integration today \u2014 on any non-macOS host, or any machine without a keychain, the CLI errors with "No OS credential store is available" unless you opt into the file store.
 
+On macOS, the CLI now **verifies the keychain write is readable back** right after \`login\`. On some headless/service hosts the keychain accepts the write but a later command's process cannot read it back (an ACL scoped to the writing binary, a re-locked login keychain, or a launchd/SSH session with no keychain), so \`login\` reports success yet the next command prints "Not logged in". When that readback fails, the CLI **automatically** writes the session to the same owner-only file store (directory \`0700\`, file \`0600\`), prints a one-line stderr notice, and later commands read it back transparently \u2014 so a headless macOS agent "just works" with no flag. For a fully unattended macOS host, export \`{{envPrefix}}_CLI_ALLOW_FILE_TOKEN_STORE=1\` anyway so every command uses the file store directly.
+
 For headless Linux, CI runners, or any no-keychain environment, set \`{{envPrefix}}_CLI_ALLOW_FILE_TOKEN_STORE=1\` to opt into the **development-only plain-file token store**. It is **not encrypted** \u2014 it writes the file with owner-only permissions (directory \`0700\`, file \`0600\`) and prints a stderr warning. It stores **only CLI session tokens** (access + refresh token), never tenant secrets, API keys, or vault refs. Treat that file as a credential: do not bake it into a shared image and do not commit it.
 
 The CLI checks this flag on **every** invocation, not just \`login\`. Export it for the whole shell or CI job (so \`{{cli}} whoami\`, \`{{cli}} onboard status\`, and the rest also find the file store), not only on the login line: