@topolo/cli 0.13.9 → 0.13.10

package/dist/index.js

@@ -14,7 +14,7 @@ function registerAgentPacksCommand(program2) {
       throw new Error("Exact closed smoke operation, role/case and UUID required.");
     const store = packs.opts().store ?? resolve(homedir(), "AgentPacks");
     if (options.harness === "claude") {
-      const { operateClaudeSmoke } = await import("./claude-pack-backend-4F4VHMI5.js");
+      const { operateClaudeSmoke } = await import("./claude-pack-backend-RMSOPHVQ.js");
       console.log(JSON.stringify(await operateClaudeSmoke({
         store,
         kind: "smoke-" + operation,
@@ -44,7 +44,7 @@ function registerAgentPacksCommand(program2) {
   });
   packs.command("configure").description("Qualify and configure an adopted Claude roster through its live native backend").argument("<pack>").option("--harness <name>", "Host adapter", "claude").requiredOption("--policy <path>", "Reviewed execution policy JSON").requiredOption("--endpoint <url>", "Explicit loopback main-process inspector endpoint, enabled separately with authorization").requiredOption("--pid <pid>", "Expected Claude main-process PID").option("--apply", "Apply native groups, pins, models, effort and permission modes; otherwise preflight only").action(async (pack, options) => {
     if (options.harness !== "claude") throw new Error("Native configure is currently qualified only for Claude Desktop.");
-    const { configureClaudePack } = await import("./claude-pack-backend-4F4VHMI5.js");
+    const { configureClaudePack } = await import("./claude-pack-backend-RMSOPHVQ.js");
     const result = await configureClaudePack({
       store: packs.opts().store ?? resolve(homedir(), "AgentPacks"),
       pack,
@@ -67,8 +67,10 @@ function registerAgentPacksCommand(program2) {
     "list",
     "recover",
     "doctor",
+    "open",
     "policy",
     "permissions",
+    "lane",
     "approvals",
     "remote-recover",
     "connect",
@@ -80,9 +82,40 @@ function registerAgentPacksCommand(program2) {
   for (const name of commands) {
     const command = packs.command(name).description(name === "add" ? "Add an installed or bundled pack, group, or agent" : `Run the pack ${name} operation`);
     if (name === "switch" || name === "recover") command.option("--policy <path>", "Reviewed policy for an adopted Claude roster").option("--endpoint <url>", "Explicit authorized Claude main-process inspector endpoint").option("--pid <pid>", "Expected Claude main-process PID").option("--apply", "Apply a native switch; recovery is always read-only");
-    if (name === "approvals") command.option("--intake <id>", "Exact owning native intake identity").option("--fingerprint <hash>", "Exact pending native request fingerprint").option("--response <path>", "Recorded one-request response JSON").option("--human-decision-recorded", "Assert that the exact human decision is recorded in the intake");
+    if (name === "lane") command.option("--input <path>", "Closed native lifecycle input JSON").option("--pack <name>", "Exact installed pack for Claude native lifecycle").option("--policy <path>", "Current reviewed source execution policy").option("--endpoint <url>", "Explicit authorized current Claude main-process inspector endpoint").option("--pid <pid>", "Expected current Claude native main PID").option("--connection <id>", "Exact explicit owned lane connection");
+    if (name === "approvals") command.option("--connection <id>", "Exact private dynamic lane control connection").option("--intake <id>", "Exact owning native intake identity").option("--fingerprint <hash>", "Exact pending native request fingerprint").option("--response <path>", "Recorded one-request response JSON").option("--human-decision-recorded", "Assert that the exact human decision is recorded in the intake");
     command.option("--harness <name>", "Local host adapter (codex, claude Desktop Code sessions)", "codex").option("--adapter-help", "Show every option supported by the selected adapter").argument("[arguments...]").allowUnknownOption().allowExcessArguments().addHelpText("after", name === "add" ? "\nExamples:\n  topolo agent-packs add founder\n  topolo agent-packs add founder --group specialists\n  topolo agent-packs add founder --agent strategy\n" : "\nRun topolo agent-packs <command> --adapter-help for all adapter options. Cloud commands require explicit --environment and --context-key.\n").action(async (args, options) => {
       if (!["codex", "claude"].includes(options.harness)) throw new Error(`The ${options.harness} pack adapter is not available. Supported adapters: codex, claude.`);
+      if (name === "lane" && options.harness === "claude" && !options.adapterHelp && !["status", "models-template", "models-install"].includes(args[0] ?? "")) {
+        if (options.connection) {
+          if (args.length !== 1 || !["read", "context-start", "context-read", "fixture-start", "fixture-read", "retire", "close"].includes(args[0]))
+            throw new Error("Closed existing Claude lane control operation required.");
+          const input3 = options.input ? JSON.parse(readFileSync(options.input, "utf8")) : {};
+          if (!input3 || typeof input3 !== "object" || Array.isArray(input3) || Object.keys(input3).some((k) => k !== "operationId")) throw new Error("Only an exact bootstrap/fixture operation UUID may be supplied.");
+          const { operateClaudeLaneControl } = await import("./claude-pack-backend-RMSOPHVQ.js");
+          console.log(JSON.stringify(await operateClaudeLaneControl({
+            store: packs.opts().store ?? resolve(homedir(), "AgentPacks"),
+            connection: options.connection,
+            operation: { kind: args[0], ...input3 }
+          }), null, 2));
+          return;
+        }
+        if (args.length !== 1 || !options.input || !options.pack || !options.policy || !options.endpoint || !options.pid)
+          throw new Error("Closed Claude lane operation requires --input, --pack, --policy, --endpoint and --pid.");
+        const input2 = JSON.parse(readFileSync(options.input, "utf8"));
+        if (!input2 || typeof input2 !== "object" || Array.isArray(input2)) throw new Error("Closed native lane input object required.");
+        const { operateClaudeLane } = await import("./claude-pack-backend-RMSOPHVQ.js");
+        console.log(JSON.stringify(await operateClaudeLane({
+          store: packs.opts().store ?? resolve(homedir(), "AgentPacks"),
+          pack: options.pack,
+          policy: options.policy,
+          endpoint: options.endpoint,
+          pid: Number(options.pid),
+          operation: args[0],
+          input: input2
+        }), null, 2));
+        return;
+      }
       if (name === "approvals" && options.harness === "claude" && !options.adapterHelp) {
         if (!["list", "details", "respond"].includes(args[0] ?? "") || args.length > 2)
           throw new Error("Approvals requires list, details KEY, or respond KEY.");
@@ -96,7 +129,20 @@ function registerAgentPacksCommand(program2) {
             throw new Error("Only a one-request once/deny response is supported.");
           decision = response.decision;
         }
-        const { operateClaudeApprovals } = await import("./claude-pack-backend-4F4VHMI5.js");
+        if (options.connection) {
+          const { operateClaudeLaneControl } = await import("./claude-pack-backend-RMSOPHVQ.js");
+          console.log(JSON.stringify(await operateClaudeLaneControl({
+            store: packs.opts().store ?? resolve(homedir(), "AgentPacks"),
+            connection: options.connection,
+            operation: {
+              kind: "approval-" + args[0],
+              ...args[0] !== "list" ? { key: args[1], intake: options.intake, fingerprint: options.fingerprint } : {},
+              ...args[0] === "respond" ? { decision, humanDecisionRecorded: options.humanDecisionRecorded } : {}
+            }
+          }), null, 2));
+          return;
+        }
+        const { operateClaudeApprovals } = await import("./claude-pack-backend-RMSOPHVQ.js");
         console.log(JSON.stringify(await operateClaudeApprovals({
           store: packs.opts().store ?? resolve(homedir(), "AgentPacks"),
           kind: args[0],
@@ -108,10 +154,10 @@ function registerAgentPacksCommand(program2) {
         }), null, 2));
         return;
       }
-      if (options.policy || options.endpoint || options.pid || options.apply) {
+      if (name !== "lane" && (options.policy || options.endpoint || options.pid || options.apply)) {
         if (options.harness !== "claude" || !options.policy || !options.endpoint || !options.pid || args.length !== 1)
           throw new Error("Native switch/recovery requires one Claude pack, --policy, --endpoint and --pid.");
-        const { configureClaudePack } = await import("./claude-pack-backend-4F4VHMI5.js");
+        const { configureClaudePack } = await import("./claude-pack-backend-RMSOPHVQ.js");
         const result2 = await configureClaudePack({
           store: packs.opts().store ?? resolve(homedir(), "AgentPacks"),
           pack: args[0],
@@ -129,7 +175,12 @@ function registerAgentPacksCommand(program2) {
       if (!adapter) throw new Error("This CLI installation is missing its bundled Topolo Agent Pack adapter. Reinstall @topolo/cli.");
       const store = packs.opts().store;
       const forwarded = (options.adapterHelp ? ["--help"] : args).map((value) => value === "--group" ? "--set" : value);
+      if (name === "lane" && !options.adapterHelp) {
+        if (options.input) forwarded.push("--input", options.input);
+        if (options.connection) forwarded.push("--connection", options.connection);
+      }
       if (name === "approvals" && !options.adapterHelp) {
+        if (options.connection) forwarded.push("--connection", options.connection);
         if (options.intake) forwarded.push("--intake", options.intake);
         if (options.fingerprint) forwarded.push("--fingerprint", options.fingerprint);
         if (options.response) forwarded.push("--response", options.response);
@@ -158,7 +209,7 @@ import { platform as platform2 } from "os";
 import { createInterface } from "readline/promises";
 import { stdin as input } from "process";
 
-// node_modules/.pnpm/@topolo+sdk@0.23.20/node_modules/@topolo/sdk/dist/index.js
+// node_modules/.pnpm/@topolo+sdk@0.23.21/node_modules/@topolo/sdk/dist/index.js
 function record(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -523,6 +574,9 @@ function publicTopoloErrorMessage(error) {
   const code = canonicalTopoloServiceErrorCode(
     typeof error === "string" ? error : error.code ?? extractTopoloServiceErrorCode(error.body)
   ) ?? "request_failed";
+  if (code === "organization_policy_admin_permission_required") {
+    return "Organization policy administration permission is required.";
+  }
   if (/(?:organization|org).*(?:enroll|membership|member|admission)/.test(code)) {
     return "Organization or application enrollment is required.";
   }
@@ -550,6 +604,9 @@ function topoloErrorHint(error) {
   if (code === "enrollment_required" || code === "membership_required" || /(?:organization|org).*(?:enroll|membership|member|admission)|(?:enroll|membership).*(?:organization|org)/.test(code)) {
     return "The current identity is not enrolled for this organization or application. Use an enrolled identity or ask an organization administrator to complete enrollment.";
   }
+  if (code === "organization_policy_admin_permission_required") {
+    return "This action requires explicit organization policy administration permission. Ask an authorized organization administrator to review the exact grant and the published principal and workspace authorization contract.";
+  }
   if (/(?:organization|org).*(?:context|required|missing|invalid|unknown|not_found)/.test(code)) {
     return "Select a signed-in organization context, then verify the effective identity and organization before retrying.";
   }
@@ -3768,7 +3825,7 @@ async function pollUntilApproved(params) {
   throw new Error("Device code expired. Run `topolo auth login` again.");
 }
 
-// node_modules/.pnpm/@topolo+sdk@0.23.20/node_modules/@topolo/sdk/dist/node/credential-store.js
+// node_modules/.pnpm/@topolo+sdk@0.23.21/node_modules/@topolo/sdk/dist/node/credential-store.js
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2, chmod as chmod2, lstat, readdir as readdir2 } from "fs/promises";
 import { existsSync as existsSync2, mkdirSync, lstatSync, readdirSync, readFileSync as readFileSync2, openSync, writeFileSync, fsyncSync, closeSync, renameSync, unlinkSync, rmdirSync, linkSync } from "fs";
 import { createHash as createHash2, randomUUID as randomUUID2 } from "crypto";

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@topolo/cli",
   "packageManager": "pnpm@10.17.1",
-  "version": "0.13.9",
-  "topoloPublishedVersion": "0.13.9",
+  "version": "0.13.10",
+  "topoloPublishedVersion": "0.13.10",
   "description": "Public command-line interface for Topolo customer organizations, developers, and agents.",
   "license": "UNLICENSED",
   "author": "Topolo",
@@ -27,12 +27,12 @@
     "test:watch": "vitest",
     "coverage": "pnpm run coverage:node && pnpm run coverage:adapter",
     "coverage:node": "vitest run --coverage",
-    "coverage:adapter": "python3 -m venv node_modules/.cache/agent-pack-test && node_modules/.cache/agent-pack-test/bin/python -m pip install --disable-pip-version-check --quiet --timeout 15 --retries 0 -r agent-packs/requirements-test.txt && PYTHONPATH=agent-packs/src:agent-packs COVERAGE_FILE=node_modules/.cache/agent-pack-test/.coverage node_modules/.cache/agent-pack-test/bin/python -m coverage run --branch --source=topolo_agent_pack.topolo,topolo_agent_pack.claude,topolo_agent_pack.policy,topolo_agent_pack.permissions,topolo_agent_pack.approvals,topolo_agent_pack.execution,topolo_agent_pack.live,topolo_agent_pack.cli,coverage_changed -m unittest discover -s agent-packs/tests && COVERAGE_FILE=node_modules/.cache/agent-pack-test/.coverage node_modules/.cache/agent-pack-test/bin/python -m coverage report && COVERAGE_FILE=node_modules/.cache/agent-pack-test/.coverage node_modules/.cache/agent-pack-test/bin/python -m coverage report --include='*/topolo_agent_pack/topolo.py,*/topolo_agent_pack/claude.py,*/topolo_agent_pack/policy.py,*/topolo_agent_pack/permissions.py,*/topolo_agent_pack/approvals.py,*/topolo_agent_pack/execution.py,*/agent-packs/coverage_changed.py' --fail-under=100 && COVERAGE_FILE=node_modules/.cache/agent-pack-test/.coverage node_modules/.cache/agent-pack-test/bin/python -m coverage json -o node_modules/.cache/agent-pack-test/coverage.json && node_modules/.cache/agent-pack-test/bin/python agent-packs/coverage_changed.py"
+    "coverage:adapter": "python3 -m venv node_modules/.cache/agent-pack-test && node_modules/.cache/agent-pack-test/bin/python -m pip install --disable-pip-version-check --quiet --timeout 15 --retries 0 -r agent-packs/requirements-test.txt && PYTHONPATH=agent-packs/src:agent-packs COVERAGE_FILE=node_modules/.cache/agent-pack-test/.coverage node_modules/.cache/agent-pack-test/bin/python -m coverage run --branch --source=topolo_agent_pack.topolo,topolo_agent_pack.claude,topolo_agent_pack.policy,topolo_agent_pack.permissions,topolo_agent_pack.approvals,topolo_agent_pack.execution,topolo_agent_pack.live,topolo_agent_pack.cli,topolo_agent_pack.lanes,topolo_agent_pack.task_models,coverage_changed -m unittest discover -s agent-packs/tests && COVERAGE_FILE=node_modules/.cache/agent-pack-test/.coverage node_modules/.cache/agent-pack-test/bin/python -m coverage report && COVERAGE_FILE=node_modules/.cache/agent-pack-test/.coverage node_modules/.cache/agent-pack-test/bin/python -m coverage report --include='*/topolo_agent_pack/topolo.py,*/topolo_agent_pack/claude.py,*/topolo_agent_pack/policy.py,*/topolo_agent_pack/permissions.py,*/topolo_agent_pack/approvals.py,*/topolo_agent_pack/execution.py,*/topolo_agent_pack/lanes.py,*/topolo_agent_pack/task_models.py,*/agent-packs/coverage_changed.py' --fail-under=100 && COVERAGE_FILE=node_modules/.cache/agent-pack-test/.coverage node_modules/.cache/agent-pack-test/bin/python -m coverage json -o node_modules/.cache/agent-pack-test/coverage.json && node_modules/.cache/agent-pack-test/bin/python agent-packs/coverage_changed.py"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@topolo/mcp": "0.14.25",
-    "@topolo/sdk": "0.23.20",
+    "@topolo/mcp": "0.14.26",
+    "@topolo/sdk": "0.23.21",
     "commander": "^12.1.0",
     "undici": "6.29.0"
   },