@settlemint/dalp-cli 3.1.32-main.42350939226 → 3.1.32-main.42359394065

package/dist/{openapi-surface-zqngh5wn.json → openapi-surface-cn2wqzd6.json}

@@ -17615,8 +17615,8 @@
       "method": "GET",
       "url": "/api/v2/custody/provider-configurations",
       "summary": "List provider configurations available for account creation",
-      "description": "Returns only healthy, enabled provider capabilities, with credential provenance and execution diagnostics excluded. The catalog answers for the active organization. A caller whose session names none reads the inviting organization catalog by naming an open invitation addressed to them.",
-      "help": "Returns only healthy, enabled provider capabilities, with credential provenance and execution diagnostics excluded. The catalog answers for the active organization. A caller whose session names none reads the inviting organization catalog by naming an open invitation addressed to them.",
+      "description": "Returns only healthy, enabled provider capabilities, with credential provenance and execution diagnostics excluded. The catalog lists configurations that serve one network: the Canton network named by `cantonNetwork`, else the EVM chain named by `chainId`, else the request's chain (the `X-Chain-Id` header, or the organization's default chain). An invitation read without `chainId` uses the inviting organization's default chain. The catalog answers for the active organization. A caller whose session names none reads the inviting organization catalog by naming an open invitation addressed to them.",
+      "help": "Returns only healthy, enabled provider capabilities, with credential provenance and execution diagnostics excluded. The catalog lists configurations that serve one network: the Canton network named by `cantonNetwork`, else the EVM chain named by `chainId`, else the request's chain (the `X-Chain-Id` header, or the organization's default chain). An invitation read without `chainId` uses the inviting organization's default chain. The catalog answers for the active organization. A caller whose session names none reads the inviting organization catalog by naming an open invitation addressed to them.",
       "tags": [
         "Custody"
       ],
@@ -17632,6 +17632,28 @@
           "pattern": null,
           "examples": [],
           "fields": []
+        },
+        {
+          "name": "chainId",
+          "in": "query",
+          "required": false,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        },
+        {
+          "name": "cantonNetwork",
+          "in": "query",
+          "required": false,
+          "description": "Canton network the listed configurations must serve. Takes precedence over `chainId`.",
+          "type": "string",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
         }
       ],
       "headerParams": [],
@@ -17646,8 +17668,8 @@
       "method": "GET",
       "url": "/api/v2/custody/investor-provider",
       "summary": "Read the custody options offered to investors",
-      "description": "Returns how this organization lets its investors hold assets, and which option is the default, so you can show the investor's choice after KYC. `options` lists each healthy provider configuration that is enabled for new accounts, serves the request's chain (the `X-Chain-Id` header, or the organization's default chain), and is either the investor default or offered to investors. `data` is the default: the configuration the organization designated for investors. `data` is `null` when the organization designated none, or when that configuration is not listed in `options` (this deployment does not enable its provider kind, or it does not serve the chain); in that case show `options` with nothing preselected. When `data` is set, it is also `options[0]`. `custody` says how the investor holds: `managed-account` means the platform creates an account and signs for it, `browser-wallet` means the investor links their own browser wallet, and `embedded-wallet` means the provider's embedded SDK creates the wallet. To list every provider the organization enabled for new accounts, use `GET /api/v2/custody/provider-configurations`.",
-      "help": "Returns how this organization lets its investors hold assets, and which option is the default, so you can show the investor's choice after KYC. `options` lists each healthy provider configuration that is enabled for new accounts, serves the request's chain (the `X-Chain-Id` header, or the organization's default chain), and is either the investor default or offered to investors. `data` is the default: the configuration the organization designated for investors. `data` is `null` when the organization designated none, or when that configuration is not listed in `options` (this deployment does not enable its provider kind, or it does not serve the chain); in that case show `options` with nothing preselected. When `data` is set, it is also `options[0]`. `custody` says how the investor holds: `managed-account` means the platform creates an account and signs for it, `browser-wallet` means the investor links their own browser wallet, and `embedded-wallet` means the provider's embedded SDK creates the wallet. To list every provider the organization enabled for new accounts, use `GET /api/v2/custody/provider-configurations`.",
+      "description": "Returns how this organization lets its investors hold assets, and which option is the default, so you can show the investor's choice after KYC. `options` lists each healthy provider configuration that is enabled for new accounts, serves the request's chain (the `X-Chain-Id` header, or the organization's default chain), and is either the investor default or offered to investors. `data` is the default: the configuration the organization designated for investors. `data` is `null` when the organization designated none, or when that configuration is not listed in `options` (this deployment does not enable its provider kind, or it does not serve the chain); in that case show `options` with nothing preselected. When `data` is set, it is also `options[0]`. `custody` says how the investor holds: `managed-account` means the platform creates an account and signs for it, `browser-wallet` means the investor links their own browser wallet, and `embedded-wallet` means the provider's embedded SDK creates the wallet. To list the providers the organization enabled for new accounts on a network, use `GET /api/v2/custody/provider-configurations`.",
+      "help": "Returns how this organization lets its investors hold assets, and which option is the default, so you can show the investor's choice after KYC. `options` lists each healthy provider configuration that is enabled for new accounts, serves the request's chain (the `X-Chain-Id` header, or the organization's default chain), and is either the investor default or offered to investors. `data` is the default: the configuration the organization designated for investors. `data` is `null` when the organization designated none, or when that configuration is not listed in `options` (this deployment does not enable its provider kind, or it does not serve the chain); in that case show `options` with nothing preselected. When `data` is set, it is also `options[0]`. `custody` says how the investor holds: `managed-account` means the platform creates an account and signs for it, `browser-wallet` means the investor links their own browser wallet, and `embedded-wallet` means the provider's embedded SDK creates the wallet. To list the providers the organization enabled for new accounts on a network, use `GET /api/v2/custody/provider-configurations`.",
       "tags": [
         "Custody"
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@settlemint/dalp-cli",
-  "version": "3.1.32-main.42350939226",
+  "version": "3.1.32-main.42359394065",
   "private": false,
   "description": "CLI for the Digital Asset Lifecycle Platform — manage tokens, identities, compliance, and more from the command line.",
   "homepage": "https://settlemint.com",
@@ -50,14 +50,14 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.0.0-alpha.4",
-    "@settlemint/dalp-sdk": "3.1.32-main.42350939226",
+    "@settlemint/dalp-sdk": "3.1.32-main.42359394065",
     "incur": "0.7.1",
     "zod": "4.6.7"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "0.18.5",
-    "@testkit/effect-bun-test": "3.1.32-main.42350939226",
-    "@tools/typescript-config": "3.1.32-main.42350939226",
+    "@testkit/effect-bun-test": "3.1.32-main.42359394065",
+    "@tools/typescript-config": "3.1.32-main.42359394065",
     "@types/bun": "1.4.4",
     "publint": "0.3.25"
   },

package/src/commands/login.ts

@@ -174,12 +174,23 @@ export async function pollForToken(
 
   while (now() < deadline) {
     await sleep(pollInterval);
+    if (now() >= deadline) {
+      break;
+    }
     const response = await postJson(`${baseUrl}/api/auth/device/token`, {
       grant_type: "urn:ietf:params:oauth:grant-type:device_code",
       device_code: deviceCode,
       client_id: DEVICE_CLIENT_ID,
     });
 
+    if (now() >= deadline) {
+      throw makeCliError({
+        code: "kit.cli.DEVICE_AUTHORIZATION_TIMEOUT",
+        message: "Device code expired. Run 'dalp login' again.",
+        retryable: true,
+      });
+    }
+
     if (response.ok) {
       return readBoundedJson(response, tokenResponseSchema);
     }

package/src/generated/openapi-surface.json

@@ -17615,8 +17615,8 @@
       "method": "GET",
       "url": "/api/v2/custody/provider-configurations",
       "summary": "List provider configurations available for account creation",
-      "description": "Returns only healthy, enabled provider capabilities, with credential provenance and execution diagnostics excluded. The catalog answers for the active organization. A caller whose session names none reads the inviting organization catalog by naming an open invitation addressed to them.",
-      "help": "Returns only healthy, enabled provider capabilities, with credential provenance and execution diagnostics excluded. The catalog answers for the active organization. A caller whose session names none reads the inviting organization catalog by naming an open invitation addressed to them.",
+      "description": "Returns only healthy, enabled provider capabilities, with credential provenance and execution diagnostics excluded. The catalog lists configurations that serve one network: the Canton network named by `cantonNetwork`, else the EVM chain named by `chainId`, else the request's chain (the `X-Chain-Id` header, or the organization's default chain). An invitation read without `chainId` uses the inviting organization's default chain. The catalog answers for the active organization. A caller whose session names none reads the inviting organization catalog by naming an open invitation addressed to them.",
+      "help": "Returns only healthy, enabled provider capabilities, with credential provenance and execution diagnostics excluded. The catalog lists configurations that serve one network: the Canton network named by `cantonNetwork`, else the EVM chain named by `chainId`, else the request's chain (the `X-Chain-Id` header, or the organization's default chain). An invitation read without `chainId` uses the inviting organization's default chain. The catalog answers for the active organization. A caller whose session names none reads the inviting organization catalog by naming an open invitation addressed to them.",
       "tags": [
         "Custody"
       ],
@@ -17632,6 +17632,28 @@
           "pattern": null,
           "examples": [],
           "fields": []
+        },
+        {
+          "name": "chainId",
+          "in": "query",
+          "required": false,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        },
+        {
+          "name": "cantonNetwork",
+          "in": "query",
+          "required": false,
+          "description": "Canton network the listed configurations must serve. Takes precedence over `chainId`.",
+          "type": "string",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
         }
       ],
       "headerParams": [],
@@ -17646,8 +17668,8 @@
       "method": "GET",
       "url": "/api/v2/custody/investor-provider",
       "summary": "Read the custody options offered to investors",
-      "description": "Returns how this organization lets its investors hold assets, and which option is the default, so you can show the investor's choice after KYC. `options` lists each healthy provider configuration that is enabled for new accounts, serves the request's chain (the `X-Chain-Id` header, or the organization's default chain), and is either the investor default or offered to investors. `data` is the default: the configuration the organization designated for investors. `data` is `null` when the organization designated none, or when that configuration is not listed in `options` (this deployment does not enable its provider kind, or it does not serve the chain); in that case show `options` with nothing preselected. When `data` is set, it is also `options[0]`. `custody` says how the investor holds: `managed-account` means the platform creates an account and signs for it, `browser-wallet` means the investor links their own browser wallet, and `embedded-wallet` means the provider's embedded SDK creates the wallet. To list every provider the organization enabled for new accounts, use `GET /api/v2/custody/provider-configurations`.",
-      "help": "Returns how this organization lets its investors hold assets, and which option is the default, so you can show the investor's choice after KYC. `options` lists each healthy provider configuration that is enabled for new accounts, serves the request's chain (the `X-Chain-Id` header, or the organization's default chain), and is either the investor default or offered to investors. `data` is the default: the configuration the organization designated for investors. `data` is `null` when the organization designated none, or when that configuration is not listed in `options` (this deployment does not enable its provider kind, or it does not serve the chain); in that case show `options` with nothing preselected. When `data` is set, it is also `options[0]`. `custody` says how the investor holds: `managed-account` means the platform creates an account and signs for it, `browser-wallet` means the investor links their own browser wallet, and `embedded-wallet` means the provider's embedded SDK creates the wallet. To list every provider the organization enabled for new accounts, use `GET /api/v2/custody/provider-configurations`.",
+      "description": "Returns how this organization lets its investors hold assets, and which option is the default, so you can show the investor's choice after KYC. `options` lists each healthy provider configuration that is enabled for new accounts, serves the request's chain (the `X-Chain-Id` header, or the organization's default chain), and is either the investor default or offered to investors. `data` is the default: the configuration the organization designated for investors. `data` is `null` when the organization designated none, or when that configuration is not listed in `options` (this deployment does not enable its provider kind, or it does not serve the chain); in that case show `options` with nothing preselected. When `data` is set, it is also `options[0]`. `custody` says how the investor holds: `managed-account` means the platform creates an account and signs for it, `browser-wallet` means the investor links their own browser wallet, and `embedded-wallet` means the provider's embedded SDK creates the wallet. To list the providers the organization enabled for new accounts on a network, use `GET /api/v2/custody/provider-configurations`.",
+      "help": "Returns how this organization lets its investors hold assets, and which option is the default, so you can show the investor's choice after KYC. `options` lists each healthy provider configuration that is enabled for new accounts, serves the request's chain (the `X-Chain-Id` header, or the organization's default chain), and is either the investor default or offered to investors. `data` is the default: the configuration the organization designated for investors. `data` is `null` when the organization designated none, or when that configuration is not listed in `options` (this deployment does not enable its provider kind, or it does not serve the chain); in that case show `options` with nothing preselected. When `data` is set, it is also `options[0]`. `custody` says how the investor holds: `managed-account` means the platform creates an account and signs for it, `browser-wallet` means the investor links their own browser wallet, and `embedded-wallet` means the provider's embedded SDK creates the wallet. To list the providers the organization enabled for new accounts on a network, use `GET /api/v2/custody/provider-configurations`.",
       "tags": [
         "Custody"
       ],