@topolo/cli 0.1.21 → 0.1.22

package/README.md

@@ -10,7 +10,7 @@ via `stdin`/`stdout`.
 - Access-token authentication via OAuth device flow when a CLI OAuth client id is configured.
 - Stored access-token refresh when the config includes a refresh token and OAuth client id.
 - First-class `production` and `staging` CLI environments with separate stored credentials, OAuth client ids, and service URL overrides.
-- Commands: `auth login/logout/status`, `whoami`, `apps`, `apps scaffold`, `services`, `crm contacts:list`, `crm contacts:get`, and generic `api` passthrough for SDK-registered services.
+- Commands: `auth login/logout/status`, `whoami`, `apps`, `apps scaffold`, `oauth clients`, `integrations prompt/check`, `services`, `crm contacts:list`, `crm contacts:get`, and generic `api` passthrough for SDK-registered services.
 
 ## Install
 
@@ -158,11 +158,42 @@ current CLI from source, then runs the local conformance audit with
 
 For third-party developers, use `--target developer` or `--developer`. Developer
 scaffolds are standalone starter projects with `topolo.app.json`, `.env.example`,
-an OAuth authorization-code + PKCE browser starter, and no internal TopoloDocs,
+an `@topolo/login` authorization-code + PKCE browser starter, and no internal TopoloDocs,
 CloudControl, or private first-party package dependencies. Developer scaffolds
 are browser-only by default; add `--with-api` to include a protected Worker
 baseline that validates bearer tokens through Topolo Auth over HTTP.
 
+### `topolo oauth clients`
+
+Manage OAuth clients for Login with Topolo.
+
+```bash
+topolo oauth clients list --json
+topolo oauth clients create \
+  --name "Acme App" \
+  --developer-id dev_... \
+  --redirect-uri https://acme.example.com/auth/topolo/callback \
+  --scope openid profile email organization:read entitlements:read \
+  --json
+topolo oauth clients rotate-secret oac_... --json
+topolo oauth clients revoke oac_... --json
+```
+
+Client revoke disables the developer OAuth client for everyone. User disconnect
+is separate and uses `DELETE /api/developer-oauth/connected-apps/:clientId`.
+
+### `topolo integrations`
+
+Generate and validate agent handoffs for third-party integrations.
+
+```bash
+topolo integrations prompt login-with-topolo --framework auto
+topolo integrations check login-with-topolo --repo-root . --json
+```
+
+The Login with Topolo check looks for `@topolo/login`, callback handling,
+required env vars, account-linking fields, and refresh handling.
+
 ### `topolo api <service> <method> <path>`
 
 Escape hatch for endpoints without typed modules yet.