@todoforai/tfa-surface 0.1.1 → 0.1.2

package/dist/cli.js

@@ -37,9 +37,13 @@ function writeSecure(data) {
 }
 function readStoredAuth(apiUrl) {
   const c = read();
-  const apiToken = c[apiUrl] || c.apiToken || c.apiKey || "";
   const host = c.backendHost || "";
   const storedApiUrl = typeof c.apiUrl === "string" && c.apiUrl ? c.apiUrl : host ? `${host === "localhost" || host === "127.0.0.1" ? "http" : "https"}://${host}` : undefined;
+  const dstIsForThisUrl = !storedApiUrl || normalizeApiUrl(storedApiUrl) === normalizeApiUrl(apiUrl);
+  const isDst = typeof c.apiToken === "string" && c.apiToken.startsWith("dst_");
+  const dst = dstIsForThisUrl && isDst ? c.apiToken : "";
+  const fallbackApiToken = isDst && !dstIsForThisUrl ? "" : c.apiToken;
+  const apiToken = dst || c[apiUrl] || fallbackApiToken || c.apiKey || "";
   return {
     apiToken: typeof apiToken === "string" ? apiToken : "",
     apiUrl: storedApiUrl,
@@ -63,6 +67,8 @@ async function refreshDeviceToken(opts = {}) {
   const apiUrl = normalizeApiUrl(opts.apiUrl || envUrl || stored.apiUrl || DEFAULT_API_URL);
   if (!stored.deviceId || !stored.deviceSecret)
     return "";
+  if (stored.apiUrl && normalizeApiUrl(stored.apiUrl) !== apiUrl)
+    return "";
   try {
     const res = await fetch(`${apiUrl}/api/v1/cli/device/token`, {
       method: "POST",
@@ -89,7 +95,7 @@ async function fetchWithRenew(url, init, opts) {
     return fetch(url, { ...init, headers });
   };
   const res = await send(opts.token);
-  if (renewOn.includes(res.status) && opts.token.startsWith("dst_")) {
+  if (renewOn.includes(res.status)) {
     const fresh = await refreshDeviceToken({ apiUrl: opts.apiUrl });
     if (fresh && fresh !== opts.token)
       return { res: await send(fresh), token: fresh };
@@ -110,7 +116,7 @@ function resolveToken(opts = {}) {
 // package.json
 var package_default = {
   name: "@todoforai/tfa-surface",
-  version: "0.1.1",
+  version: "0.1.2",
   description: "TODOforAI surface CLI — see and drive what is shown in the user's live UI (describe, todo/panel views, renderer cards, surface render, controls). Replaces tfa-frontend. Reuses bridge credentials.",
   type: "module",
   bin: {
@@ -164,7 +170,7 @@ Todos (views):
 
 Panels (surfaces inside a todo; --todo defaults to $TODOFORAI_TODO_ID):
   panel open <surface> [--todo <id>] [--url <url>]
-                                        surface: changes|preview|browser|terminal
+                                        surface: changes|agents|preview|browser|terminal
   panel close [--todo <id>]
 
 Renderer cards (data plane — works headless, no frontend needed;
@@ -367,7 +373,7 @@ async function main() {
       const [verb, surface] = args;
       if (verb === "open") {
         if (!surface)
-          die("usage: tfa-surface panel open changes|preview|browser|terminal [--todo <id>] [--url <url>]");
+          die("usage: tfa-surface panel open changes|agents|preview|browser|terminal [--todo <id>] [--url <url>]");
         const result = await uiCall(ctx, "panel.open", { todoId: todoArg(), surface, ...values.url ? { url: values.url } : {} });
         const pending = result?.browserReady === false;
         console.log(ctx.json ? JSON.stringify(result ?? { ok: true }) : pending ? "ok (browser opening — its CDP url appears in `device_list` shortly)" : "ok");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@todoforai/tfa-surface",
-  "version": "0.1.1",
-  "description": "TODOforAI surface CLI \u2014 see and drive what is shown in the user's live UI (describe, todo/panel views, renderer cards, surface render, controls). Replaces tfa-frontend. Reuses bridge credentials.",
+  "version": "0.1.2",
+  "description": "TODOforAI surface CLI — see and drive what is shown in the user's live UI (describe, todo/panel views, renderer cards, surface render, controls). Replaces tfa-frontend. Reuses bridge credentials.",
   "type": "module",
   "bin": {
     "tfa-surface": "dist/cli.js"