@analitikisler/ai-tag-debugger 0.8.0 → 0.8.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.8.1 (2026-10-15)
+
+- A run with no AI provider key set now stops at once with a message naming the keys to set and the `--scripted --no-ai` option, instead of starting the browser and failing at the first step with the SDK's "Could not resolve authentication method".
+- Over MCP, `run_audit` with `scripted: false` and no key returns an error that tells the chat app what to do next: call it again with `scripted: true`, or browse with `start_audit`. It doesn't mention CLI flags.
+- The README points to `ai-tag-debugger --help` for the full list of commands and options.
+- `npm run demo` replays the demo shop with no AI model (`--no-ai`), so it works without an API key.
+
 ## 0.8.0 (2026-10-14)
 
 - The browser installs itself the first time an audit starts, so connecting the MCP server no longer needs a separate `playwright install` step. Progress goes to stderr.

package/README.md

@@ -112,6 +112,8 @@ ai-tag-debugger run --site https://staging.yourshop.com --journey add_to_cart --
 
 Or run it without installing: `npx -y @analitikisler/ai-tag-debugger run --site … --journey add_to_cart`.
 
+Run `ai-tag-debugger --help` to see every command and option, such as `--providers`, `--scripted` and `--no-ai`.
+
 ### Try the demo shop (from source)
 
 The repository includes a demo shop with three deliberate tracking bugs:

package/README.tr.md

@@ -112,6 +112,8 @@ ai-tag-debugger run --site https://staging.yourshop.com --journey add_to_cart --
 
 Ya da kurmadan çalıştırın: `npx -y @analitikisler/ai-tag-debugger run --site … --journey add_to_cart`.
 
+Tüm komutları ve seçenekleri (`--providers`, `--scripted`, `--no-ai` gibi) görmek için `ai-tag-debugger --help` çalıştırın.
+
 ### Demo mağazayı deneyin (kaynak koddan)
 
 Depoda, bilerek bırakılmış üç ölçümleme hatası olan bir demo mağaza var:

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@analitikisler/ai-tag-debugger",
   "mcpName": "io.github.analitikisler/ai-tag-debugger",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Open-source AI agent that QA-tests your website's analytics, ad and consent tracking (GA4, GTM, Google Ads, Meta, TikTok). Bring your own model (Claude, OpenAI, Gemini) or use it from your chat app over MCP.",
   "type": "module",
   "bin": {
@@ -16,7 +16,7 @@
   "scripts": {
     "test": "node --test test/*.test.js",
     "demo:serve": "node examples/serve.js",
-    "demo": "node src/cli.js run --config examples/demo.config.json --scripted --out reports/demo"
+    "demo": "node src/cli.js run --config examples/demo.config.json --scripted --no-ai --out reports/demo"
   },
   "engines": {
     "node": ">=20"

package/src/mcp.js

@@ -293,7 +293,16 @@ export function buildServer(opts) {
       async ({ config: configFile, scripted, language, branding, providers }) => {
         const loaded = await loadConfig(configFile);
         const replay = scripted !== false;
-        const result = await runAudit({ ...loaded, scripted: replay, ai: !replay, lang: language, branding, providers, outDir: path.join(opts.reportsDir, new Date().toISOString().replace(/[:.]/g, "-")) });
+        let result;
+        try {
+          result = await runAudit({ ...loaded, scripted: replay, ai: !replay, lang: language, branding, providers, outDir: path.join(opts.reportsDir, new Date().toISOString().replace(/[:.]/g, "-")) });
+        } catch (err) {
+          // The CLI wording (--scripted --no-ai) means nothing to a chat app, so say it in this tool's terms.
+          if (err.code !== "NO_API_KEY") throw err;
+          return fail(
+            "No AI provider key (ANTHROPIC_API_KEY, OPENAI_API_KEY or GEMINI_API_KEY) is set on the computer running this server, so scripted false can't browse with a model. Call run_audit again with scripted true (or leave it out) to replay the journeys' fixed steps, or browse the site yourself with start_audit, browser_action and finish_audit. Neither needs a key.",
+          );
+        }
         const m = messages(result.lang);
         const grouped = groupFindings(result.findings).filter((f) => f.severity !== "ok");
         return text(

package/src/providers.js

@@ -28,6 +28,12 @@ export function resolveProviderName(name, env = process.env) {
   return "anthropic";
 }
 
+const NO_API_KEY = `No AI provider key found. Set one of ANTHROPIC_API_KEY, OPENAI_API_KEY or GEMINI_API_KEY (or OPENAI_COMPATIBLE_BASE_URL for an OpenAI-compatible API), or pick one with --provider. To run without any AI model, replay the fixed steps with --scripted --no-ai.`;
+
+function hasApiKey(env) {
+  return Boolean(env.OPENAI_COMPATIBLE_BASE_URL || env.ANTHROPIC_API_KEY || env.ANTHROPIC_AUTH_TOKEN || env.OPENAI_API_KEY || env.GEMINI_API_KEY || env.GOOGLE_API_KEY);
+}
+
 /**
  * @param {{ name?: string, model?: string, baseUrl?: string, client?: any }} opts
  *   baseUrl: for openai-compatible, e.g. https://api.deepseek.com or http://localhost:11434/v1.
@@ -36,6 +42,10 @@ export function resolveProviderName(name, env = process.env) {
 export async function createProvider(opts = {}, env = process.env) {
   // A bare client (tests, embedding) is an Anthropic client unless named otherwise.
   const name = opts.client && !opts.name ? "anthropic" : opts.baseUrl && !opts.name ? "openai-compatible" : resolveProviderName(opts.name, env);
+  // With no provider named and no key set, the SDK would only fail at the first step with an
+  // unclear auth error, after the browser has started. A named provider skips this check, since
+  // its SDK may find credentials elsewhere (an Anthropic profile, Google Cloud credentials).
+  if (!opts.client && !opts.name && !opts.baseUrl && !hasApiKey(env)) throw Object.assign(new Error(NO_API_KEY), { code: "NO_API_KEY" });
   if (name === "openai-compatible") {
     const baseURL = opts.baseUrl ?? env.OPENAI_COMPATIBLE_BASE_URL;
     const model = opts.model ?? env.OPENAI_COMPATIBLE_MODEL;