@clickraft/cli 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -1,3 +1,9 @@
+## [0.1.1](https://github.com/clickraft/cli/compare/v0.1.0...v0.1.1) (2026-05-22)
+
+### Bug Fixes
+
+* **auth:** allow mixed-case user_code in OAuth device flow ([#6](https://github.com/clickraft/cli/issues/6)) ([7e94403](https://github.com/clickraft/cli/commit/7e94403d66b598db6966fd2fd24f326e386cbcd3))
+
 # Changelog
 
 All notable changes to the Clickraft CLI are documented here.

package/dist/cli.js

@@ -923,7 +923,7 @@ var DeviceAuthorizationRequestSchema = z4.object({
 });
 var DeviceAuthorizationResponseSchema = z4.object({
   device_code: z4.string(),
-  user_code: z4.string().regex(/^[A-Z0-9]{4}-[A-Z0-9]{4}$/),
+  user_code: z4.string().min(1),
   verification_uri: z4.string().url(),
   verification_uri_complete: z4.string().url().optional(),
   expires_in: z4.number().int().positive(),
@@ -1740,9 +1740,14 @@ async function requestDeviceAuthorization(opts) {
   const parsed = parseJson(text, "authorization");
   const validated = DeviceAuthorizationResponseSchema.safeParse(parsed);
   if (!validated.success) {
-    throw new AuthError(
-      "AUTH_TOKEN_INVALID",
-      "Authorization endpoint response failed schema validation.",
+    throw new ApiError(
+      "SCHEMA_MISMATCH",
+      "Authorization endpoint response did not match the expected schema.",
+      {
+        status: resp.statusCode,
+        retryable: false,
+        redactedBody: redactTokenLikeFields(truncate(text))
+      },
       validated.error
     );
   }