@topolo/cli 0.8.8 → 0.9.0

package/dist/index.js

@@ -9,7 +9,7 @@ import { platform as platform2 } from "os";
 import { createInterface } from "readline/promises";
 import { stdin as input } from "process";
 
-// node_modules/@topolo/sdk/dist/index.js
+// ../../node_modules/.pnpm/@topolo+sdk@0.11.7/node_modules/@topolo/sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
   if (credential.kind === "api_key") {
     headers.set("X-Api-Key", credential.apiKey);
@@ -329,7 +329,7 @@ function originMatchesEnvironment(url, environment) {
   }
   if (url.protocol !== "https:") return false;
   if (environment === "production") {
-    return hostnameHasSuffix(hostname, "topolo.app") || hostnameHasSuffix(hostname, "topolo.io") || workersDevAccountMatches(hostname, "topolo");
+    return hostnameHasSuffix(hostname, "topolo.app") || hostnameHasSuffix(hostname, "topolo.io") || hostname === "api.ol0.me" || workersDevAccountMatches(hostname, "topolo");
   }
   if (environment === "staging") {
     return hostnameHasSuffix(hostname, "stg.topolo.us") || workersDevAccountMatches(hostname, "topolo-staging");
@@ -2371,7 +2371,7 @@ function createTopolo(options) {
   };
 }
 
-// node_modules/@topolo/sdk/dist/node/credential-store.js
+// ../../node_modules/.pnpm/@topolo+sdk@0.11.7/node_modules/@topolo/sdk/dist/node/credential-store.js
 import { mkdir, readFile, writeFile, chmod, rm, stat } from "fs/promises";
 import { existsSync } from "fs";
 import { homedir, platform } from "os";
@@ -2687,6 +2687,7 @@ var TopoloOAuth2 = class {
     return parsed;
   }
 };
+var TOPOLO_RUNTIME_ENVIRONMENTS = ["production", "staging", "development", "local"];
 var TOPOLO_ENVIRONMENT_SERVICE_URLS = {
   production: {
     auth: "https://auth.topolo.app",
@@ -2717,7 +2718,7 @@ function originMatchesEnvironment2(url, environment) {
   }
   if (url.protocol !== "https:") return false;
   if (environment === "production") {
-    return hostnameHasSuffix2(hostname, "topolo.app") || hostnameHasSuffix2(hostname, "topolo.io") || workersDevAccountMatches2(hostname, "topolo");
+    return hostnameHasSuffix2(hostname, "topolo.app") || hostnameHasSuffix2(hostname, "topolo.io") || hostname === "api.ol0.me" || workersDevAccountMatches2(hostname, "topolo");
   }
   if (environment === "staging") {
     return hostnameHasSuffix2(hostname, "stg.topolo.us") || workersDevAccountMatches2(hostname, "topolo-staging");
@@ -2747,6 +2748,7 @@ function topoloServiceOrigins2(serviceUrls, environment) {
     ])
   );
 }
+var TOPOLO_ENVIRONMENTS = TOPOLO_RUNTIME_ENVIRONMENTS;
 function contextKey(contextType, organizationId) {
   return contextType === "organization" && organizationId ? `org:${organizationId}` : "personal";
 }
@@ -3041,6 +3043,19 @@ function resolvedProfileConfig(config, environment = selectedEnvironment()) {
 }
 
 // src/config.ts
+async function authenticatedEnvironments(configOrPromise = readConfig()) {
+  const config = await configOrPromise;
+  const found = /* @__PURE__ */ new Set();
+  if (config.credential) found.add("production");
+  for (const environment of TOPOLO_ENVIRONMENTS) {
+    const profile = config.profiles?.[environment];
+    if (!profile) continue;
+    if (profile.credential || Object.keys(profile.contexts ?? {}).length > 0) {
+      found.add(environment);
+    }
+  }
+  return TOPOLO_ENVIRONMENTS.filter((environment) => found.has(environment));
+}
 function environmentLabel(environment = selectedEnvironment()) {
   return environment;
 }
@@ -5261,6 +5276,8 @@ Workspace: ${workspace.name} (${workspace.id})${workspace.isDefault ? "\nDefault
 // src/index.ts
 installOutputErrorHandlers();
 var program = new Command();
+var environmentArgSeen = false;
+var inheritedEnvironment = process.env.TOPOLO_ENV?.trim();
 var argv;
 try {
   argv = consumeEnvironmentArg(process.argv);
@@ -5269,13 +5286,31 @@ try {
 `);
   process.exit(1);
 }
+var environmentWasStated = Boolean(inheritedEnvironment) || environmentArgSeen;
 program.name("topolo").description(
   "Public Topolo CLI for customer identity, organization context, applications, resources, and actions."
 ).version(CLI_VERSION).option("--env <environment>", "Topolo environment: production, staging, development, or local");
-program.hook("preAction", (thisCommand) => {
+program.hook("preAction", async (thisCommand, actionCommand) => {
   const opts = thisCommand.opts();
-  if (!opts.env) return;
-  process.env.TOPOLO_ENV = normalizeEnvironment(opts.env);
+  if (opts.env) process.env.TOPOLO_ENV = normalizeEnvironment(opts.env);
+  if (opts.env || environmentWasStated) return;
+  const authenticated = await authenticatedEnvironments();
+  if (authenticated.length < 2) return;
+  const path = [];
+  for (let node = actionCommand; node && node !== program; node = node.parent) {
+    path.unshift(node.name());
+  }
+  process.stderr.write(
+    `This machine is signed in to ${authenticated.length} Topolo environments (${authenticated.join(", ")}), so the environment is no longer safe to assume.
+
+State it explicitly:
+  topolo --env <${authenticated.join("|")}> ${path.join(" ")} ...
+
+Or set it once for the whole session:
+  export TOPOLO_ENV=<${authenticated.join("|")}>
+`
+  );
+  process.exit(2);
 });
 registerAuthCommands(program);
 registerWhoamiCommand(program);
@@ -5307,11 +5342,13 @@ function consumeEnvironmentArg(argv2) {
         throw new Error("--env requires production, staging, development, or local.");
       }
       process.env.TOPOLO_ENV = normalizeEnvironment(value);
+      environmentArgSeen = true;
       i += 1;
       continue;
     }
     if (arg.startsWith("--env=")) {
       process.env.TOPOLO_ENV = normalizeEnvironment(arg.slice("--env=".length));
+      environmentArgSeen = true;
       continue;
     }
     next.push(arg);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@topolo/cli",
-  "version": "0.8.8",
-  "topoloPublishedVersion": "0.8.8",
+  "version": "0.9.0",
+  "topoloPublishedVersion": "0.9.0",
   "description": "Public command-line interface for Topolo customer organizations, developers, and agents.",
   "license": "UNLICENSED",
   "author": "Topolo",
@@ -25,8 +25,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@topolo/mcp": "0.11.6",
-    "@topolo/sdk": "0.11.6",
+    "@topolo/mcp": "0.11.7",
+    "@topolo/sdk": "0.11.7",
     "commander": "^12.1.0"
   },
   "devDependencies": {