@tokenoftrust/cli 1.4.0-rc.6 → 1.4.0-rc.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/cli",
-  "version": "1.4.0-rc.6",
+  "version": "1.4.0-rc.7",
   "description": "Token of Trust developer CLI — check out a tenant store, run it locally with save→reload, and submit it for preview. Installs the `tot` command.",
   "license": "Apache-2.0",
   "author": "Token of Trust",

package/src/commands/link.mjs

@@ -83,9 +83,17 @@ export function linkPollStatus(res) {
     (typeof c.status === "string" && c.status) || (typeof c.state === "string" && c.state) || "";
   const s = raw.toLowerCase();
   if (!s) return "pending";
-  if (/^(linked|complete|completed|done|ok|success|active)$/.test(s)) return "linked";
-  if (/^(pending|waiting|in_?progress|processing|started)$/.test(s)) return "pending";
-  return s; // an unknown/error status — surfaced to the caller
+  // The broker namespaces its poll status with a `link_` prefix (e.g. `link_pending`,
+  // `link_approved`, `link_denied`) — strip it before matching so a normal "still
+  // waiting" state isn't misread as an unknown/error status and doesn't abort the poll.
+  // (Regression: `link_pending` fell through to the error branch and killed `tot link`
+  // the instant the developer hadn't yet finished the browser step.)
+  const bare = s.replace(/^link[_-]/, "");
+  if (/^(linked|link|complete|completed|done|ok|success|succeeded|active|approved|granted)$/.test(bare))
+    return "linked";
+  if (/^(pending|waiting|in_?progress|processing|started|created|authorizing|polling)$/.test(bare))
+    return "pending";
+  return s; // a terminal error status (link_denied, link_expired, …) — surfaced to the caller
 }
 
 /** @param {string[]} argv @param {any} _ctx */