@ductape/mcp 0.1.55 → 0.1.56

package/dist/index.js

@@ -1233,6 +1233,21 @@ function runCli(command) {
     catch (err) {
         const msg = (err.stderr || err.stdout || err.message || String(err)).trim();
         if (/\bHTTP 401\b|unauthori[sz]ed|invalid token|token expired/i.test(msg)) {
+            // Distinguish a genuinely expired login from a command-specific endpoint/auth bug.
+            // A valid workspace read proves the CLI session and selected workspace are authenticated.
+            if (checkLoginState() === 'ok') {
+                return {
+                    success: false,
+                    output: [
+                        'The Ductape CLI session and active workspace are authenticated, but this command endpoint returned HTTP 401.',
+                        'Do not ask the user to log in again and do not retry through ductape_execute.',
+                        'This indicates a CLI command routing or endpoint authorization problem.',
+                        '',
+                        'Update the Ductape CLI to the latest version and retry the same ductape_cli command.',
+                        `Original command: ductape ${command}`,
+                    ].join('\n'),
+                };
+            }
             authState = 'none';
             workspaceSynced = false;
             return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ductape/mcp",
-  "version": "0.1.55",
+  "version": "0.1.56",
   "description": "MCP server that exposes Ductape SDK operations via the backend proxy",
   "type": "module",
   "main": "dist/index.js",

package/scripts/check-frontend-analytics-guidance.mjs

@@ -48,6 +48,7 @@ const safetyChecks = [
   ['execute blocks administrative mutations', /Administrative operation.*is blocked in ductape_execute/],
   ['CLI auth is remotely validated', /ductape workspaces list --json/],
   ['CLI 401 triggers login-required state', /authentication expired or was revoked \(HTTP 401\)[\s\S]*ductape login/],
+  ['CLI distinguishes endpoint 401 from expired login', /session and active workspace are authenticated[\s\S]*Do not ask the user to log in again/],
   ['CLI auth guidance does not request secrets', /Never ask the user to paste their password/],
 ];
 

package/src/index.ts

@@ -1293,6 +1293,21 @@ function runCli(command: string): { success: boolean; output: string } {
   } catch (err: any) {
     const msg = (err.stderr || err.stdout || err.message || String(err)).trim();
     if (/\bHTTP 401\b|unauthori[sz]ed|invalid token|token expired/i.test(msg)) {
+      // Distinguish a genuinely expired login from a command-specific endpoint/auth bug.
+      // A valid workspace read proves the CLI session and selected workspace are authenticated.
+      if (checkLoginState() === 'ok') {
+        return {
+          success: false,
+          output: [
+            'The Ductape CLI session and active workspace are authenticated, but this command endpoint returned HTTP 401.',
+            'Do not ask the user to log in again and do not retry through ductape_execute.',
+            'This indicates a CLI command routing or endpoint authorization problem.',
+            '',
+            'Update the Ductape CLI to the latest version and retry the same ductape_cli command.',
+            `Original command: ductape ${command}`,
+          ].join('\n'),
+        };
+      }
       authState = 'none';
       workspaceSynced = false;
       return {