sima-cli 2.1.8__tar.gz → 2.1.10__tar.gz

sima_cli-2.1.10/PKG-INFO

@@ -0,0 +1,197 @@
+Metadata-Version: 2.4
+Name: sima-cli
+Version: 2.1.10
+Summary: CLI tool for SiMa Developer Portal to download models, firmware, and apps.
+Home-page: https://developer.sima.ai/
+Author: SiMa.ai
+Author-email: "Sima.ai" <support@sima.ai>
+License: MIT
+Project-URL: Homepage, https://developer.sima.ai/
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Topic :: Software Development :: Build Tools
+Classifier: Environment :: Console
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click>=8.0
+Requires-Dist: requests<3.0,>=2.32.4
+Requires-Dist: tqdm>=4.64
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: paramiko>=3.5.1
+Requires-Dist: plotext==5.3.2
+Requires-Dist: rich==14.0.0
+Requires-Dist: InquirerPy==0.3.4
+Requires-Dist: tftpy==0.8.6
+Requires-Dist: psutil==7.0.0
+Requires-Dist: huggingface-hub<1.0,>=0.34.0
+Requires-Dist: tabulate==0.9.0
+Dynamic: author
+Dynamic: license-file
+Dynamic: requires-python
+
+# sima-cli - SiMa Developer Portal CLI Tool
+
+[![Python 3.8](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.8&label=python%203.8)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.9](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.9&label=python%203.9)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.10](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.10&label=python%203.10)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.11](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.11&label=python%203.11)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.12](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.12&label=python%203.12)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.13](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.13&label=python%203.13)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.14](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.14&label=python%203.14)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![E2E macOS](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=E2E%20Install%20(macOS%20CLI%20only)&label=e2e%20macOS&logo=apple&logoColor=white)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![E2E Windows](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=E2E%20Install%20(Windows)&label=e2e%20Windows&logo=windows&logoColor=white)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![E2E Ubuntu x86](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=E2E%20Install%20(Ubuntu%20x86)&label=e2e%20Ubuntu%20x86&logo=ubuntu&logoColor=white)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![E2E Ubuntu ARM64](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=E2E%20Install%20(Ubuntu%20ARM64)&label=e2e%20Ubuntu%20ARM64&logo=ubuntu&logoColor=white)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+
+`sima-cli` is the command-line interface for SiMa developer workflows. It handles authentication, SDK container setup, DevKit updates, package installation, artifact downloads, Model Zoo/App Zoo access, and related development utilities.
+
+## Documentation
+
+The full command reference is generated as Markdown under [docs/sima-cli](docs/sima-cli/index.md).
+
+Use the generated docs for detailed options, arguments, subcommands, and full help text:
+
+- [Complete command reference](docs/sima-cli/index.md)
+- [Top-level command help](docs/sima-cli/commands/sima-cli.md)
+
+## Installation
+
+Install the latest `main` build:
+
+```bash
+curl -fsSL https://artifacts.sima-neat.com/tools/sima-cli-install.py -o sima-cli-install.py
+python3 sima-cli-install.py main latest
+```
+
+Install interactively:
+
+```bash
+python3 sima-cli-install.py
+```
+
+Install a specific branch or release:
+
+```bash
+python3 sima-cli-install.py feature/my-branch latest
+python3 sima-cli-install.py v2.1.6 latest
+```
+
+On Windows PowerShell:
+
+```powershell
+Invoke-WebRequest https://artifacts.sima-neat.com/tools/sima-cli-install.py -OutFile sima-cli-install.py
+python .\sima-cli-install.py main latest
+```
+
+Public PyPI releases can also be installed directly:
+
+```bash
+pip install sima-cli
+```
+
+## Quick Start
+
+```bash
+sima-cli --help
+sima-cli login
+sima-cli version
+```
+
+Use `--internal` or `SIMA_CLI_INTERNAL=1` when internal Artifactory resources are required:
+
+```bash
+sima-cli --internal login
+SIMA_CLI_INTERNAL=1 sima-cli install -v 2.1.1 sdk-extensions/model
+```
+
+## Common Workflows
+
+Set up SDK containers:
+
+```bash
+sima-cli sdk setup
+sima-cli sdk neat
+```
+
+Install a package from metadata:
+
+```bash
+sima-cli install -v 2.1.1 sdk-extensions/model
+```
+
+Download or install Neat artifacts:
+
+```bash
+sima-cli neat download core main
+sima-cli install --neat core main
+```
+
+Update a DevKit:
+
+```bash
+sima-cli update -v 2.1.1 -y
+```
+
+Explore Model Zoo and App Zoo content:
+
+```bash
+sima-cli modelzoo list
+sima-cli appzoo list
+```
+
+## Top-Level Commands
+
+| Command | Description | Docs |
+| --- | --- | --- |
+| `sima-cli appzoo` | Access sample apps from the App Zoo. | [docs](docs/sima-cli/commands/sima-cli-appzoo.md) |
+| `sima-cli bootimg` | Prepare a bootable image for the SiMa DevKit. | [docs](docs/sima-cli/commands/sima-cli-bootimg.md) |
+| `sima-cli device` | Discover nearby SiMa.ai devices on the local network. | [docs](docs/sima-cli/commands/sima-cli-device.md) |
+| `sima-cli download` | Download a file or folder from a URL. | [docs](docs/sima-cli/commands/sima-cli-download.md) |
+| `sima-cli install` | Install SiMa packages from metadata. | [docs](docs/sima-cli/commands/sima-cli-install.md) |
+| `sima-cli login` | Authenticate with the SiMa Developer Portal. | [docs](docs/sima-cli/commands/sima-cli-login.md) |
+| `sima-cli logout` | Remove cached credentials and config files. | [docs](docs/sima-cli/commands/sima-cli-logout.md) |
+| `sima-cli mla` | Machine Learning Accelerator utilities. | [docs](docs/sima-cli/commands/sima-cli-mla.md) |
+| `sima-cli modelzoo` | Access models from the Model Zoo. | [docs](docs/sima-cli/commands/sima-cli-modelzoo.md) |
+| `sima-cli neat` | Discover, download, and install Neat build artifacts. | [docs](docs/sima-cli/commands/sima-cli-neat.md) |
+| `sima-cli network` | Configure DevKit network settings. | [docs](docs/sima-cli/commands/sima-cli-network.md) |
+| `sima-cli nvme` | Perform NVMe operations on the Modalix DevKit. | [docs](docs/sima-cli/commands/sima-cli-nvme.md) |
+| `sima-cli packages` | Manage the local sima-cli package registry. | [docs](docs/sima-cli/commands/sima-cli-packages.md) |
+| `sima-cli playbooks` | Install and manage coding-agent playbooks. | [docs](docs/sima-cli/commands/sima-cli-playbooks.md) |
+| `sima-cli sdcard` | Prepare SD card storage. | [docs](docs/sima-cli/commands/sima-cli-sdcard.md) |
+| `sima-cli sdk` | Manage and launch SDK container environments. | [docs](docs/sima-cli/commands/sima-cli-sdk.md) |
+| `sima-cli selfupdate` | Update sima-cli manually. | [docs](docs/sima-cli/commands/sima-cli-selfupdate.md) |
+| `sima-cli serial` | Connect to the UART serial console of a DevKit. | [docs](docs/sima-cli/commands/sima-cli-serial.md) |
+| `sima-cli update` | Update a SiMa DevKit or remote device. | [docs](docs/sima-cli/commands/sima-cli-update.md) |
+| `sima-cli version` | Show the installed CLI version. | [docs](docs/sima-cli/commands/sima-cli-version.md) |
+
+## Development
+
+Install development dependencies and run tests:
+
+```bash
+pip install -e ".[dev]"
+python -m pytest tests/unit
+```
+
+Regenerate CLI documentation:
+
+```bash
+python scripts/generate_cli_markdown_docs.py
+```
+
+`build.sh` also regenerates the command docs before building the package.
+
+## Requirements
+
+- Python 3.8 or newer
+- Docker for SDK container workflows
+- DevKit connectivity for device update, serial, network, and boot-image workflows
+
+For command-specific prerequisites, see the generated [command reference](docs/sima-cli/index.md).
+
+## Support
+
+For issues and feature requests, use the sima-cli GitHub repository or contact the SiMa.ai development team.

sima_cli-2.1.10/README.md

@@ -0,0 +1,163 @@
+# sima-cli - SiMa Developer Portal CLI Tool
+
+[![Python 3.8](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.8&label=python%203.8)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.9](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.9&label=python%203.9)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.10](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.10&label=python%203.10)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.11](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.11&label=python%203.11)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.12](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.12&label=python%203.12)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.13](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.13&label=python%203.13)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![Python 3.14](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=Compatibility%20Python%203.14&label=python%203.14)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![E2E macOS](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=E2E%20Install%20(macOS%20CLI%20only)&label=e2e%20macOS&logo=apple&logoColor=white)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![E2E Windows](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=E2E%20Install%20(Windows)&label=e2e%20Windows&logo=windows&logoColor=white)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![E2E Ubuntu x86](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=E2E%20Install%20(Ubuntu%20x86)&label=e2e%20Ubuntu%20x86&logo=ubuntu&logoColor=white)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+[![E2E Ubuntu ARM64](https://img.shields.io/github/actions/workflow/status/sima-neat/sima-cli/vulcan-ci.yml?branch=main&job=E2E%20Install%20(Ubuntu%20ARM64)&label=e2e%20Ubuntu%20ARM64&logo=ubuntu&logoColor=white)](https://github.com/sima-neat/sima-cli/actions/workflows/vulcan-ci.yml)
+
+`sima-cli` is the command-line interface for SiMa developer workflows. It handles authentication, SDK container setup, DevKit updates, package installation, artifact downloads, Model Zoo/App Zoo access, and related development utilities.
+
+## Documentation
+
+The full command reference is generated as Markdown under [docs/sima-cli](docs/sima-cli/index.md).
+
+Use the generated docs for detailed options, arguments, subcommands, and full help text:
+
+- [Complete command reference](docs/sima-cli/index.md)
+- [Top-level command help](docs/sima-cli/commands/sima-cli.md)
+
+## Installation
+
+Install the latest `main` build:
+
+```bash
+curl -fsSL https://artifacts.sima-neat.com/tools/sima-cli-install.py -o sima-cli-install.py
+python3 sima-cli-install.py main latest
+```
+
+Install interactively:
+
+```bash
+python3 sima-cli-install.py
+```
+
+Install a specific branch or release:
+
+```bash
+python3 sima-cli-install.py feature/my-branch latest
+python3 sima-cli-install.py v2.1.6 latest
+```
+
+On Windows PowerShell:
+
+```powershell
+Invoke-WebRequest https://artifacts.sima-neat.com/tools/sima-cli-install.py -OutFile sima-cli-install.py
+python .\sima-cli-install.py main latest
+```
+
+Public PyPI releases can also be installed directly:
+
+```bash
+pip install sima-cli
+```
+
+## Quick Start
+
+```bash
+sima-cli --help
+sima-cli login
+sima-cli version
+```
+
+Use `--internal` or `SIMA_CLI_INTERNAL=1` when internal Artifactory resources are required:
+
+```bash
+sima-cli --internal login
+SIMA_CLI_INTERNAL=1 sima-cli install -v 2.1.1 sdk-extensions/model
+```
+
+## Common Workflows
+
+Set up SDK containers:
+
+```bash
+sima-cli sdk setup
+sima-cli sdk neat
+```
+
+Install a package from metadata:
+
+```bash
+sima-cli install -v 2.1.1 sdk-extensions/model
+```
+
+Download or install Neat artifacts:
+
+```bash
+sima-cli neat download core main
+sima-cli install --neat core main
+```
+
+Update a DevKit:
+
+```bash
+sima-cli update -v 2.1.1 -y
+```
+
+Explore Model Zoo and App Zoo content:
+
+```bash
+sima-cli modelzoo list
+sima-cli appzoo list
+```
+
+## Top-Level Commands
+
+| Command | Description | Docs |
+| --- | --- | --- |
+| `sima-cli appzoo` | Access sample apps from the App Zoo. | [docs](docs/sima-cli/commands/sima-cli-appzoo.md) |
+| `sima-cli bootimg` | Prepare a bootable image for the SiMa DevKit. | [docs](docs/sima-cli/commands/sima-cli-bootimg.md) |
+| `sima-cli device` | Discover nearby SiMa.ai devices on the local network. | [docs](docs/sima-cli/commands/sima-cli-device.md) |
+| `sima-cli download` | Download a file or folder from a URL. | [docs](docs/sima-cli/commands/sima-cli-download.md) |
+| `sima-cli install` | Install SiMa packages from metadata. | [docs](docs/sima-cli/commands/sima-cli-install.md) |
+| `sima-cli login` | Authenticate with the SiMa Developer Portal. | [docs](docs/sima-cli/commands/sima-cli-login.md) |
+| `sima-cli logout` | Remove cached credentials and config files. | [docs](docs/sima-cli/commands/sima-cli-logout.md) |
+| `sima-cli mla` | Machine Learning Accelerator utilities. | [docs](docs/sima-cli/commands/sima-cli-mla.md) |
+| `sima-cli modelzoo` | Access models from the Model Zoo. | [docs](docs/sima-cli/commands/sima-cli-modelzoo.md) |
+| `sima-cli neat` | Discover, download, and install Neat build artifacts. | [docs](docs/sima-cli/commands/sima-cli-neat.md) |
+| `sima-cli network` | Configure DevKit network settings. | [docs](docs/sima-cli/commands/sima-cli-network.md) |
+| `sima-cli nvme` | Perform NVMe operations on the Modalix DevKit. | [docs](docs/sima-cli/commands/sima-cli-nvme.md) |
+| `sima-cli packages` | Manage the local sima-cli package registry. | [docs](docs/sima-cli/commands/sima-cli-packages.md) |
+| `sima-cli playbooks` | Install and manage coding-agent playbooks. | [docs](docs/sima-cli/commands/sima-cli-playbooks.md) |
+| `sima-cli sdcard` | Prepare SD card storage. | [docs](docs/sima-cli/commands/sima-cli-sdcard.md) |
+| `sima-cli sdk` | Manage and launch SDK container environments. | [docs](docs/sima-cli/commands/sima-cli-sdk.md) |
+| `sima-cli selfupdate` | Update sima-cli manually. | [docs](docs/sima-cli/commands/sima-cli-selfupdate.md) |
+| `sima-cli serial` | Connect to the UART serial console of a DevKit. | [docs](docs/sima-cli/commands/sima-cli-serial.md) |
+| `sima-cli update` | Update a SiMa DevKit or remote device. | [docs](docs/sima-cli/commands/sima-cli-update.md) |
+| `sima-cli version` | Show the installed CLI version. | [docs](docs/sima-cli/commands/sima-cli-version.md) |
+
+## Development
+
+Install development dependencies and run tests:
+
+```bash
+pip install -e ".[dev]"
+python -m pytest tests/unit
+```
+
+Regenerate CLI documentation:
+
+```bash
+python scripts/generate_cli_markdown_docs.py
+```
+
+`build.sh` also regenerates the command docs before building the package.
+
+## Requirements
+
+- Python 3.8 or newer
+- Docker for SDK container workflows
+- DevKit connectivity for device update, serial, network, and boot-image workflows
+
+For command-specific prerequisites, see the generated [command reference](docs/sima-cli/index.md).
+
+## Support
+
+For issues and feature requests, use the sima-cli GitHub repository or contact the SiMa.ai development team.

{sima_cli-2.1.8 → sima_cli-2.1.10}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "sima-cli"
-version = "2.1.8"
+version = "2.1.10"
 description = "CLI tool for SiMa Developer Portal to download models, firmware, and apps."
 readme = "README.md"
 requires-python = ">=3.8"
@@ -23,7 +23,7 @@ classifiers = [
 
 dependencies = [
     "click>=8.0",
-    "requests>=2.33.0",
+    "requests>=2.32.4,<3.0",
     "tqdm>=4.64",
     "pyyaml>=6.0",
     "paramiko>=3.5.1",

{sima_cli-2.1.8 → sima_cli-2.1.10}/requirements.txt

@@ -1,5 +1,5 @@
 click>=8.0
-requests>=2.33.0
+requests>=2.32.4,<3.0
 tqdm>=4.64
 pyyaml>=6.0
 paramiko>=3.5.1

{sima_cli-2.1.8 → sima_cli-2.1.10}/setup.py

@@ -18,7 +18,7 @@ setup(
     },
     install_requires=[
         "click>=8.0,<9.0",
-        "requests>=2.33.0,<3.0",
+        "requests>=2.32.4,<3.0",
         "tqdm>=4.64,<5.0",
         "InquirerPy>=0.3.4,<0.4",
         "tftpy>=0.8.6,<0.9",

{sima_cli-2.1.8 → sima_cli-2.1.10}/sima_cli/__version__.py

@@ -1,2 +1,2 @@
 # sima_cli/__version__.py
-__version__ = "2.1.8"
+__version__ = "2.1.10"

{sima_cli-2.1.8 → sima_cli-2.1.10}/sima_cli/auth/auth0.py

@@ -15,7 +15,7 @@ import base64
 import requests
 import webbrowser
 import click
-from typing import Dict, Optional
+from typing import Dict, Iterable, Optional, Tuple
 
 from sima_cli.utils.config_loader import load_resource_config
 
@@ -24,6 +24,16 @@ from sima_cli.utils.config_loader import load_resource_config
 # ─────────────────────────────────────────────
 HOME_DIR = os.path.expanduser("~/.sima-cli")
 TOKEN_FILE = os.path.join(HOME_DIR, ".tokens.json")
+COOKIE_FILE = os.path.join(HOME_DIR, ".sima-cli-cookies.txt")
+CSRF_FILE = os.path.join(HOME_DIR, ".sima-cli-csrf.json")
+PROD_USERINFO_AUDIENCE = "https://sima-ai.us.auth0.com/userinfo"
+STAGING_USERINFO_AUDIENCE = "https://dev-d3sxf54xfkcifph2.us.auth0.com/userinfo"
+USERINFO_AUDIENCE = PROD_USERINFO_AUDIENCE
+LATEST_EULA_GRANT = "LatestEULA"
+DOC_ACCESS_GRANT = "DocsAccess"
+DOC_ACCESS_GRANT_ALIASES = (DOC_ACCESS_GRANT, "DocAccess")
+PROD_DISCOURSE_URL = "https://developer.sima.ai/login"
+STAGING_DISCOURSE_URL = "https://discourse-dev.sima.ai/login"
 
 # ─────────────────────────────────────────────
 # Configuration loader
@@ -81,6 +91,16 @@ def load_tokens() -> Optional[Dict]:
         return None
 
 
+def clear_external_login_state():
+    """Remove cached external-auth state so the next login starts cleanly."""
+    for path in (TOKEN_FILE, COOKIE_FILE, CSRF_FILE):
+        if os.path.exists(path):
+            try:
+                os.remove(path)
+            except Exception as e:
+                print(f"⚠️ Failed to delete {path}: {e}")
+
+
 def is_token_valid(tokens: dict) -> bool:
     """Check if access token still valid based on expires_in field."""
     if not tokens:
@@ -131,6 +151,123 @@ def is_browser_available():
     except webbrowser.Error:
         return False
 
+
+def _discourse_sign_in_url() -> str:
+    if os.getenv("USE_STAGING_DEV_PORTAL", "false").lower() in ("1", "true", "yes"):
+        return STAGING_DISCOURSE_URL
+    return PROD_DISCOURSE_URL
+
+
+def _expected_userinfo_audience() -> str:
+    if os.getenv("USE_STAGING_DEV_PORTAL", "false").lower() in ("1", "true", "yes"):
+        return STAGING_USERINFO_AUDIENCE
+    return PROD_USERINFO_AUDIENCE
+
+
+def _as_iterable(value) -> Iterable:
+    if value is None:
+        return []
+    if isinstance(value, (list, tuple, set)):
+        return value
+    return [value]
+
+
+def _access_token_claims(tokens: dict) -> dict:
+    return decode_jwt_payload(tokens.get("access_token", ""))
+
+
+def _access_token_has_userinfo_audience(claims: dict) -> bool:
+    return _expected_userinfo_audience() in _as_iterable(claims.get("aud"))
+
+
+def _access_token_has_grant(claims: dict, grant: str) -> bool:
+    grant_names = DOC_ACCESS_GRANT_ALIASES if grant in DOC_ACCESS_GRANT_ALIASES else (grant,)
+    for claim_name, claim_value in claims.items():
+        if claim_name in ("permissions", "grants", "roles") or claim_name.endswith(("/permissions", "/grants", "/roles")):
+            if any(grant_name in _as_iterable(claim_value) for grant_name in grant_names):
+                return True
+
+    scope = claims.get("scope")
+    if isinstance(scope, str) and any(grant_name in scope.split() for grant_name in grant_names):
+        return True
+
+    return False
+
+
+def access_token_has_doc_access(tokens: dict) -> bool:
+    return _access_token_has_grant(_access_token_claims(tokens), DOC_ACCESS_GRANT)
+
+
+def access_token_has_latest_eula(tokens: dict) -> bool:
+    return _access_token_has_grant(_access_token_claims(tokens), LATEST_EULA_GRANT)
+
+
+def _validate_access_token_requirements(tokens: dict) -> Tuple[bool, Dict[str, bool]]:
+    claims = _access_token_claims(tokens)
+    checks = {
+        "doc_access": _access_token_has_grant(claims, DOC_ACCESS_GRANT),
+        "latest_eula": _access_token_has_grant(claims, LATEST_EULA_GRANT),
+        "userinfo_audience": _access_token_has_userinfo_audience(claims),
+    }
+    return checks["doc_access"] and checks["latest_eula"] and checks["userinfo_audience"], checks
+
+
+def _prompt_for_discourse_sign_in(checks: Dict[str, bool]) -> bool:
+    discourse_url = _discourse_sign_in_url()
+    missing = []
+    if not checks.get("latest_eula"):
+        missing.append("LatestEULA grant")
+    if not checks.get("userinfo_audience"):
+        missing.append(f"{_expected_userinfo_audience()} audience")
+
+    click.echo("")
+    click.secho("Developer Portal sign-in is required before sima-cli can continue.", fg="yellow")
+    if missing:
+        click.echo(f"Missing from the access token: {', '.join(missing)}.")
+    click.echo("Please sign in to Discourse / Developer Portal and accept the EULA if prompted.")
+
+    if is_browser_available():
+        click.echo(f"Opening sign-in page: {click.style(discourse_url, fg='cyan', bold=True)}")
+        try:
+            webbrowser.open(discourse_url)
+        except Exception:
+            click.echo("Browser could not be opened automatically. Open this link manually:")
+            click.secho(discourse_url, fg="cyan", bold=True)
+    else:
+        click.echo("Browser not available. Open this link manually:")
+        click.secho(discourse_url, fg="cyan", bold=True)
+
+    return click.confirm("Have you signed in to Discourse / Developer Portal?", default=True)
+
+
+def _ensure_access_token_requirements(tokens: dict, auth_cfg: dict) -> Optional[dict]:
+    while True:
+        valid, checks = _validate_access_token_requirements(tokens)
+        if valid:
+            return tokens
+        if not checks.get("doc_access"):
+            return tokens
+
+        if not _prompt_for_discourse_sign_in(checks):
+            clear_external_login_state()
+            click.echo("Logged out. Run `sima-cli login` again after signing in to Developer Portal.")
+            return None
+
+        refresh_token = tokens.get("refresh_token")
+        if not refresh_token:
+            click.echo("Unable to refresh your access token after Developer Portal sign-in.")
+            clear_external_login_state()
+            click.echo("Logged out. Run `sima-cli login` again.")
+            return None
+
+        refreshed = refresh_access_token(auth_cfg, refresh_token)
+        if not refreshed:
+            clear_external_login_state()
+            click.echo("Logged out. Run `sima-cli login` again.")
+            return None
+
+        tokens = refreshed
+
 def request_device_code(auth_cfg):
     """Step 1: Request device code from Auth0."""
     data = {
@@ -269,16 +406,25 @@ def get_or_refresh_tokens(force=False):
     tokens = load_tokens()
 
     if tokens and is_token_valid(tokens) and not force:
-        return tokens
+        tokens = _ensure_access_token_requirements(tokens, auth_cfg)
+        if tokens:
+            return tokens
+        return None
 
     if tokens and tokens.get("refresh_token"):
         refreshed = refresh_access_token(auth_cfg, tokens["refresh_token"])
         if refreshed:
-            print_welcome_message(refreshed)
-            return refreshed
+            refreshed = _ensure_access_token_requirements(refreshed, auth_cfg)
+            if refreshed:
+                print_welcome_message(refreshed)
+                return refreshed
+            return None
         print("⚠️ Refresh failed, falling back to new login.")
 
     new_tokens = login_auth0(auth_cfg)
+    new_tokens = _ensure_access_token_requirements(new_tokens, auth_cfg)
+    if not new_tokens:
+        return None
     print_welcome_message(new_tokens)
     return new_tokens