@topolo/cli 0.12.9 → 0.12.10

package/dist/index.js

@@ -9,7 +9,7 @@ import { platform as platform2 } from "os";
 import { createInterface } from "readline/promises";
 import { stdin as input } from "process";
 
-// node_modules/@topolo/sdk/dist/index.js
+// node_modules/.pnpm/@topolo+sdk@0.21.2/node_modules/@topolo/sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
   if (credential.kind === "api_key") {
     headers.set("X-Api-Key", credential.apiKey);
@@ -3342,7 +3342,7 @@ function createTopolo(options) {
   };
 }
 
-// node_modules/@topolo/sdk/dist/node/credential-store.js
+// node_modules/.pnpm/@topolo+sdk@0.21.2/node_modules/@topolo/sdk/dist/node/credential-store.js
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2, chmod as chmod2, rm as rm2, stat } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir2, platform } from "os";
@@ -4662,7 +4662,8 @@ function sleep(ms) {
 // src/client.ts
 async function buildClient(options) {
   const environment = options?.environment ?? selectedEnvironment();
-  const credential = options?.context ? await refreshContextCredentialIfNeeded(environment, options.context) : await refreshCredentialIfNeeded(environment);
+  const context = options?.context ?? process.env.TOPOLO_CONTEXT?.trim();
+  const credential = context ? await refreshContextCredentialIfNeeded(environment, context) : await refreshCredentialIfNeeded(environment);
   if (!credential) return null;
   const config = await readConfig();
   const profile = resolvedProfileConfig(config, environment);
@@ -4678,7 +4679,7 @@ async function buildClient(options) {
     serviceUrls: profile.serviceUrls,
     requireConfirmForWrites: options?.requireConfirmForWrites,
     ...credential.kind === "access_token" && credential.refreshToken ? {
-      refreshCredential: () => options?.context ? refreshContextCredentialIfNeeded(environment, options.context, { force: true }) : refreshCredentialIfNeeded(environment, { force: true })
+      refreshCredential: () => context ? refreshContextCredentialIfNeeded(environment, context, { force: true }) : refreshCredentialIfNeeded(environment, { force: true })
     } : {},
     ...isDebugEnabled() ? { debug: stderrDebugLogger } : {}
   });
@@ -5078,7 +5079,7 @@ async function actionExecutionContext(topolo) {
   const source = credentialSourceFromConfig(config, environment);
   return createTopoloAgentExecutionContext({
     environment,
-    contextKey: source.startsWith("env:") ? null : profile.activeContext ?? null,
+    contextKey: source.startsWith("env:") ? null : process.env.TOPOLO_CONTEXT?.trim() || profile.activeContext || null,
     identity: await topolo.identity.whoami(),
     serviceUrls: resolvedProfileConfig(config, environment).serviceUrls
   });

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@topolo/cli",
   "packageManager": "pnpm@10.17.1",
-  "version": "0.12.9",
-  "topoloPublishedVersion": "0.12.9",
+  "version": "0.12.10",
+  "topoloPublishedVersion": "0.12.10",
   "description": "Public command-line interface for Topolo customer organizations, developers, and agents.",
   "license": "UNLICENSED",
   "author": "Topolo",

package/skills/topolo/SKILL.md

@@ -60,6 +60,16 @@ topolo context use <organization-name|personal> --json
 topolo whoami --json
 ```
 
+For CLI automation, pin each process to an exact key returned by context discovery:
+
+```bash
+TOPOLO_CONTEXT=org:org_acme topolo --env production whoami --json
+TOPOLO_CONTEXT=org:org_acme topolo --env production actions --service brand --json
+```
+
+The CLI keeps this pin through credential refresh and never changes the shared
+active context. A missing pinned credential does not select another context.
+
 For concurrent agents or multiple MCP connections, never coordinate by changing
 one shared active context. Register each pinned context through the CLI so it
 uses the exact bundled MCP instead of a global binary: