@tokenoftrust/cli 1.4.0-rc.5 → 1.4.0-rc.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/cli",
-  "version": "1.4.0-rc.5",
+  "version": "1.4.0-rc.7",
   "description": "Token of Trust developer CLI — check out a tenant store, run it locally with save→reload, and submit it for preview. Installs the `tot` command.",
   "license": "Apache-2.0",
   "author": "Token of Trust",

package/src/commands/grants.mjs

@@ -26,7 +26,7 @@
 import { defaultCredentialsPath, readCredentials } from "../token-store.mjs";
 import { establishSession, AuthUnavailableError } from "../auth.mjs";
 import { createMcpClient } from "../mcp.mjs";
-import { storeListError } from "./checkout.mjs";
+import { storeListError, noStoresGuidance } from "./checkout.mjs";
 import { offerSignIn } from "./login.mjs";
 import { recordServerPolicy } from "../update-check.mjs";
 
@@ -238,8 +238,13 @@ export async function run(argv, _ctx) {
     return 1;
   }
   if (rows.length === 0) {
-    console.log("\nNo stores you can act on yet for this identity.");
-    console.log("If you were just invited, it may still be propagating — try again in a minute.");
+    // Status-aware, like whoami/checkout (card c2): an UNLINKED identity is told to
+    // link, not given the "may still be propagating" copy — that's only the genuine
+    // linked-but-zero-grants case.
+    const g = noStoresGuidance(resp);
+    const line = g.headline.charAt(0).toUpperCase() + g.headline.slice(1);
+    console.log(`\n${line}.`);
+    console.log(`Next: ${g.next}`);
     return 0;
   }
 

package/src/commands/link.mjs

@@ -83,9 +83,17 @@ export function linkPollStatus(res) {
     (typeof c.status === "string" && c.status) || (typeof c.state === "string" && c.state) || "";
   const s = raw.toLowerCase();
   if (!s) return "pending";
-  if (/^(linked|complete|completed|done|ok|success|active)$/.test(s)) return "linked";
-  if (/^(pending|waiting|in_?progress|processing|started)$/.test(s)) return "pending";
-  return s; // an unknown/error status — surfaced to the caller
+  // The broker namespaces its poll status with a `link_` prefix (e.g. `link_pending`,
+  // `link_approved`, `link_denied`) — strip it before matching so a normal "still
+  // waiting" state isn't misread as an unknown/error status and doesn't abort the poll.
+  // (Regression: `link_pending` fell through to the error branch and killed `tot link`
+  // the instant the developer hadn't yet finished the browser step.)
+  const bare = s.replace(/^link[_-]/, "");
+  if (/^(linked|link|complete|completed|done|ok|success|succeeded|active|approved|granted)$/.test(bare))
+    return "linked";
+  if (/^(pending|waiting|in_?progress|processing|started|created|authorizing|polling)$/.test(bare))
+    return "pending";
+  return s; // a terminal error status (link_denied, link_expired, …) — surfaced to the caller
 }
 
 /** @param {string[]} argv @param {any} _ctx */