Add Step-up rechallenge implementation#2869

Merged

rinatkhaziev merged 35 commits into

trunkfrom

feat/rechallenge-v2-defensive-mode

Jul 6, 2026

Commits on Jul 1, 2026

feat(rechallenge): add types and error classes

rinatkhaziev
authored and
sjinks
committed
feat(rechallenge): add keychain-backed per-scope elevated-token cache

rinatkhaziev
authored and
sjinks
committed
feat(rechallenge): add REST client for Parker v2 session endpoints

rinatkhaziev
authored and
sjinks
committed
fix(rechallenge): satisfy tsc check-types in test files

authored and
sjinks
committed
feat(rechallenge): orchestrate session create, poll, exchange

rinatkhaziev
authored and
sjinks
committed
feat(rechallenge): add Apollo link that intercepts elevated-permission errors

rinatkhaziev
authored and
sjinks
committed
feat(api): insert rechallenge link into Apollo chain

rinatkhaziev
authored and
sjinks
committed
feat(defensive-mode): add GraphQL helpers for status and config mutations

rinatkhaziev
authored and
sjinks
committed
feat(cli): add vip defensive-mode parent command

rinatkhaziev
authored and
sjinks
committed
feat(cli): add vip defensive-mode enable subcommand

rinatkhaziev
authored and
sjinks
committed
feat(cli): add vip defensive-mode disable subcommand

rinatkhaziev
authored and
sjinks
committed
feat(cli): add vip defensive-mode configure subcommand

rinatkhaziev
authored and
sjinks
committed
feat(cli): register vip defensive-mode top-level command

rinatkhaziev
authored and
sjinks
committed
feat(logout): clear elevated-token cache on logout

rinatkhaziev
authored and
sjinks
committed
fix(api): lint cleanup for lazy rechallenge link import

rinatkhaziev
authored and
sjinks
committed
fix: address final-review findings (diff in configure, non-interactive guards, telemetry order, teardown race)

authored and
sjinks
committed
fix: address PR review feedback (data guards, version constant, payload validation, dedupe commands)

authored and
sjinks
committed
fix: address PR review feedback (output formatting, login hardening, bin loader, sleep, flag parsing)

authored and
sjinks
committed
chore(lint): scope no-await-in-loop disable to rechallenge polling loop

authored and
sjinks
committed
fix(lint): stop importing Response type from node-fetch in rechallenge client

authored and
sjinks
committed
fix: address sjinks PR review feedback (rechallenge + defensive-mode)

authored and
sjinks
committed
test: cover rechallenge poll-interval floor (NaN / tight-loop guard)

authored and
sjinks
committed
fix(test): make rechallenge abort test deterministic on Node current

authored and
sjinks
committed
feat(rechallenge): add --rechallenge-wait opt-in for non-interactive step-up

authored and
sjinks
committed
fix: purge token/cache even if logout fails
sjinks
committed
fix: eslint issues and code smells
sjinks
committed
fix(rechallenge): handle sync downstream errors
sjinks
committed
fix: SonarSource findings
sjinks
committed
test(rechallenge): add api and command coverage
sjinks
committed
docs: document elevated token scope granularity
sjinks
committed
fix: address code review comments
sjinks
committed
fix: address code review comments

sjinks
and
Copilot
authored
fix: address code review comments
sjinks
committed
fix: add `salesforceId` to query for telemetry
sjinks
committed
fix: apply suggestions from code review

sjinks
and
Copilot
authored