@topolo/cli 0.12.21 → 0.12.23

package/README.md

@@ -49,6 +49,11 @@ is decided by their permissions. `--client-id doac_...` (or
 `TOPOLO_CLI_CLIENT_ID` / `TOPOLO_<ENV>_CLI_CLIENT_ID`) is only for advanced /
 self-hosted setups. Headless installs use `--api-key`.
 
+While approval is pending, the CLI retains the same device request across temporary
+transport failures and doubles the polling interval after each failure. It honors
+the server polling interval and `slow_down` responses, stops on denial or other
+OAuth errors, and never extends the original device-code expiry.
+
 ### Contexts
 
 A user can act in their personal space or any organization they belong to. Each

package/dist/index.js

@@ -9,7 +9,7 @@ import { platform as platform2 } from "os";
 import { createInterface } from "readline/promises";
 import { stdin as input } from "process";
 
-// node_modules/@topolo/sdk/dist/index.js
+// node_modules/.pnpm/@topolo+sdk@0.23.10/node_modules/@topolo/sdk/dist/index.js
 function record(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -484,6 +484,7 @@ async function protectActionResult(value, store, options = {}) {
   const secrets = /* @__PURE__ */ new Map();
   function documentation(item, key) {
     if (options.preserveActionSchemas === true && ["inputSchema", "outputSchema", "input_schema", "output_schema"].includes(key) && isRecord(item)) return true;
+    if (options.preserveActionContracts === true && ["agentContract", "agent_contract"].includes(key) && isRecord(item)) return true;
     return options.preserveAgentGuidance === true && key === "agentGuidance" && isRecord(item) && item.schemaVersion === 1 && typeof item.kind === "string" && ["action-guide", "product-guide", "concept"].includes(item.kind);
   }
   async function protect(item, key = "") {
@@ -2242,7 +2243,8 @@ var TopoloClient = class _TopoloClient {
     }
     return preserveSensitiveResult ? result : await protectActionResult(result, this.actionSecretStore, {
       preserveAgentGuidance: entry.appId === "app_topolo_docs",
-      preserveActionSchemas: entry.appId === "app_topolo_developers" && entry.name === "apps.actions.list"
+      preserveActionSchemas: entry.appId === "app_topolo_developers" && entry.name === "apps.actions.list",
+      preserveActionContracts: entry.appId === "app_topolo_developers" && entry.name === "apps.actions.list"
     });
   }
   async releaseActionSecret(reference) {
@@ -3569,7 +3571,39 @@ function createTopolo(options) {
   };
 }
 
-// node_modules/@topolo/sdk/dist/node/credential-store.js
+// src/commands/device-login-poll.ts
+async function pollUntilApproved(params) {
+  let interval = Math.max(params.intervalSeconds ?? 5, 1);
+  while (Date.now() < params.expiresAtMs) {
+    await new Promise((resolve3) => setTimeout(resolve3, Math.min(interval * 1e3, params.expiresAtMs - Date.now())));
+    if (Date.now() >= params.expiresAtMs) break;
+    try {
+      return await params.oauth.pollDeviceToken({
+        clientId: params.clientId,
+        deviceCode: params.deviceCode
+      });
+    } catch (err) {
+      if (err instanceof TopoloAuthError) {
+        if (err.code === "authorization_pending") continue;
+        if (err.code === "slow_down") {
+          interval += 5;
+          continue;
+        }
+        if (err.code === "access_denied") throw new Error("Authorization was denied.");
+        if (err.code === "expired_token") throw new Error("Device code expired. Run `topolo auth login` again.");
+        throw err;
+      }
+      if (err instanceof TopoloSdkError && err.code === "network_error" || err instanceof TypeError && err.message === "fetch failed") {
+        interval *= 2;
+        continue;
+      }
+      throw err;
+    }
+  }
+  throw new Error("Device code expired. Run `topolo auth login` again.");
+}
+
+// node_modules/.pnpm/@topolo+sdk@0.23.10/node_modules/@topolo/sdk/dist/node/credential-store.js
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2, chmod as chmod2, rm as rm2, stat } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir2, platform } from "os";
@@ -4971,38 +5005,6 @@ function startSpinner() {
     }
   };
 }
-async function pollUntilApproved(params) {
-  let interval = Math.max(params.intervalSeconds, 1);
-  while (Date.now() < params.expiresAtMs) {
-    await sleep(interval * 1e3);
-    try {
-      const token = await params.oauth.pollDeviceToken({
-        clientId: params.clientId,
-        deviceCode: params.deviceCode
-      });
-      return token;
-    } catch (err) {
-      if (err instanceof TopoloAuthError) {
-        if (err.code === "authorization_pending") continue;
-        if (err.code === "slow_down") {
-          interval += 2;
-          continue;
-        }
-        if (err.code === "access_denied") {
-          throw new Error("Authorization was denied.");
-        }
-        if (err.code === "expired_token") {
-          throw new Error("Device code expired. Run `topolo auth login` again.");
-        }
-      }
-      throw err;
-    }
-  }
-  throw new Error("Device code expired. Run `topolo auth login` again.");
-}
-function sleep(ms) {
-  return new Promise((resolve3) => setTimeout(resolve3, ms));
-}
 
 // src/client.ts
 async function buildClient(options) {

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@topolo/cli",
   "packageManager": "pnpm@10.17.1",
-  "version": "0.12.21",
-  "topoloPublishedVersion": "0.12.21",
+  "version": "0.12.23",
+  "topoloPublishedVersion": "0.12.23",
   "description": "Public command-line interface for Topolo customer organizations, developers, and agents.",
   "license": "UNLICENSED",
   "author": "Topolo",
@@ -28,8 +28,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@topolo/mcp": "0.14.13",
-    "@topolo/sdk": "0.23.9",
+    "@topolo/mcp": "0.14.14",
+    "@topolo/sdk": "0.23.10",
     "commander": "^12.1.0"
   },
   "devDependencies": {