@cronicorn/mcp-server 1.5.7 → 1.5.9

package/dist/docs/mcp-server/troubleshooting.md

@@ -0,0 +1,82 @@
+---
+title: Troubleshooting Authentication
+description: How to resolve authentication issues with the Cronicorn MCP Server
+mcp:
+  uri: "cronicorn://troubleshooting/authentication"
+  priority: 10
+tags: [user, assistant]
+---
+
+# Troubleshooting Authentication
+
+## Authentication Failed (401 Unauthorized)
+
+If you see this error:
+```
+Authentication failed. Invalid or expired token. Please restart the MCP server to re-authenticate.
+```
+
+**What happened:**
+- Your authentication token is no longer valid
+- The MCP server has automatically cleared the invalid credentials
+
+**How to fix:**
+
+1. **Restart your editor/IDE:**
+   - **VS Code**: Reload the window (`Cmd+Shift+P` → "Developer: Reload Window")
+   - **Other editors**: Restart the application
+
+2. **Complete the device flow:**
+   - A browser window will automatically open
+   - Sign in with your GitHub account
+   - Approve the device authorization request
+   - The MCP server will save the new credentials
+
+3. **Try your operation again**
+
+## Token Expired
+
+If you see messages about an expired token during startup, don't worry! The MCP server automatically:
+1. Detects the expired token
+2. Deletes the invalid credentials
+3. Starts a new device authorization flow
+
+Just complete the browser-based approval and you're good to go.
+
+## Manual Credential Reset
+
+If you need to manually reset your credentials:
+
+```bash
+# Delete the credentials file
+rm ~/.cronicorn/credentials.json
+
+# Restart your editor/IDE
+```
+
+## Where Are Credentials Stored?
+
+Credentials are stored in: `~/.cronicorn/credentials.json`
+
+This file contains:
+- `access_token`: Your authentication token
+- `refresh_token`: Token for refreshing (currently not used)
+- `expires_at`: Unix timestamp when the token expires
+
+The file has restricted permissions (0600) so only you can read it.
+
+## Common Issues
+
+### Browser Doesn't Open Automatically
+- Manually navigate to the verification URL shown in the server logs
+- Enter the user code displayed
+
+### Device Code Expired
+- You have 30 minutes to approve the device
+- If it expires, just restart the MCP server to get a new code
+
+### Still Having Issues?
+- Check that the Cronicorn API is accessible
+- Verify your internet connection
+- Look for error messages in the MCP server logs (stderr)
+- Report issues on [GitHub Discussions](https://github.com/weskerllc/cronicorn/discussions)

package/dist/index.js

@@ -545,6 +545,17 @@ async function saveCredentials(credentials) {
     throw new Error(`Failed to save credentials: ${message}`);
   }
 }
+async function deleteCredentials() {
+  try {
+    await fs6.unlink(CREDENTIALS_FILE);
+    console.error("\u2705 Credentials deleted");
+  } catch (error) {
+    if (error && typeof error === "object" && "code" in error && error.code !== "ENOENT") {
+      const message = error instanceof Error ? error.message : String(error);
+      throw new Error(`Failed to delete credentials: ${message}`);
+    }
+  }
+}
 function isTokenExpired(credentials) {
   const BUFFER_MS = 5 * 60 * 1e3;
   return Date.now() + BUFFER_MS >= credentials.expires_at;
@@ -4828,6 +4839,14 @@ function createHttpApiClient(config) {
       const response = await fetch(url, { ...options, headers });
       if (!response.ok) {
         const errorText = await response.text();
+        if (response.status === 401) {
+          console.error("\u26A0\uFE0F  Token is invalid (401 Unauthorized). Clearing credentials...");
+          await deleteCredentials();
+          throw new ApiError(
+            401,
+            `Authentication failed. Invalid or expired token. Please restart the MCP server to re-authenticate.`
+          );
+        }
         throw new ApiError(
           response.status,
           `API Error (${response.status}): ${errorText}`
@@ -5696,7 +5715,8 @@ async function main() {
     if (credentials && isTokenExpired(credentials)) {
       const expiresAtDate = new Date(credentials.expires_at);
       console.error(`\u26A0\uFE0F  Token expired at ${expiresAtDate.toISOString()}`);
-      console.error("Starting re-authentication...");
+      console.error("Clearing expired credentials and starting re-authentication...");
+      await deleteCredentials();
     } else {
       console.error("No credentials found. Starting OAuth device authorization...");
     }