@eventmodelers/cli 0.0.24 → 0.0.26

package/cli.js

@@ -18,7 +18,7 @@ import { execSync, spawn } from 'child_process';
 import { createInterface, emitKeypressEvents, moveCursor, clearScreenDown } from 'readline';
 import { homedir } from 'os';
 import { randomUUID } from 'crypto';
-import { runFetch } from './lib/fetch.js';
+import { runFetch, FetchAuthError } from './lib/fetch.js';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -1110,10 +1110,11 @@ program
 
 // Commands exempt from the "is a kit installed here?" gate below: init (with or
 // without --modeling) is what installs one in the first place, init-config only
-// ever touches credentials, and stacks/status/config/uninstall are read-only or
+// ever touches credentials, stacks/status/config/uninstall are read-only or
 // cleanup commands that are meant to work — and report something useful — whether
-// or not a kit is present.
-const NO_INIT_REQUIRED = new Set(['init', 'init-config', 'stacks', 'status', 'config', 'uninstall']);
+// or not a kit is present, and fetch only needs credentials plus somewhere to write
+// .slices/ (cwd, absent a kit dir — see lib/fetch.js), no kit-specific files.
+const NO_INIT_REQUIRED = new Set(['init', 'init-config', 'stacks', 'status', 'config', 'uninstall', 'fetch']);
 
 program.hook('preAction', (_thisCommand, actionCommand) => {
   if (NO_INIT_REQUIRED.has(actionCommand.name())) return;
@@ -1467,14 +1468,16 @@ program
     const effective = loadEffectiveConfig(cwd, kitDir, explicitConfig);
     let cfg = effective.config;
 
+    // Same default (project-root .eventmodelers/config.json, or --config) that
+    // installStack uses — kept identical rather than deriving a path from
+    // `effective`, which can point at a kit-dir-scoped config instead.
+    const configPath = explicitConfig ? resolve(cwd, explicitConfig) : join(cwd, '.eventmodelers', 'config.json');
     const requiredFields = ['organizationId', 'boardId', 'token'];
-    if (requiredFields.some((f) => !cfg[f])) {
-      // Same default (project-root .eventmodelers/config.json, or --config) that
-      // installStack uses — kept identical rather than deriving a path from
-      // `effective`, which can point at a kit-dir-scoped config instead.
-      const configPath = explicitConfig ? resolve(cwd, explicitConfig) : join(cwd, '.eventmodelers', 'config.json');
-      // Same prompt (paste/manual/instructions/skip) `install`/`init-config` use —
-      // reusing it here means `fetch` also works as a first-run credential setup.
+
+    // Same prompt (paste/manual/instructions/skip) `install`/`init-config` use —
+    // reusing it here means `fetch` also works as a first-run credential setup.
+    // Also re-entered below if the API rejects whatever we already had.
+    async function promptForCredentials() {
       cfg = await configureCredentials({
         config: cfg,
         configPath,
@@ -1489,7 +1492,22 @@ program
         process.exit(1);
       }
     }
-    await runFetch({ cwd, kitDir, cfg, opts });
+
+    if (requiredFields.some((f) => !cfg[f])) await promptForCredentials();
+
+    try {
+      await runFetch({ cwd, kitDir, cfg, opts });
+    } catch (err) {
+      if (!(err instanceof FetchAuthError)) throw err;
+      // Present but wrong, not missing — the connect skill's Step 4 (Verify) treats
+      // 401/403/404 the same way: clear the field that's implicated and re-prompt,
+      // rather than leaving the caller stuck re-running with the same bad value.
+      console.error(`❌ ${err.message}`);
+      if (err.status === 404) delete cfg.boardId;
+      else delete cfg.token;
+      await promptForCredentials();
+      await runFetch({ cwd, kitDir, cfg, opts });
+    }
   });
 
 program

package/lib/fetch.js

@@ -3,6 +3,18 @@ import { join, relative } from 'path';
 
 const DEFAULT_BASE_URL = 'https://api.eventmodelers.ai';
 
+// Thrown instead of exiting on 401/403/404 — these mean the *credentials* (not the
+// network/server) are the problem, so the caller gets a chance to re-prompt and retry
+// instead of just dying, the same way the connect skill's Step 4 (Verify) reacts to
+// each status. Other statuses (500, etc.) still exit directly — reconfiguring
+// credentials wouldn't fix those.
+export class FetchAuthError extends Error {
+  constructor(status, message) {
+    super(message);
+    this.status = status;
+  }
+}
+
 function readJsonSafe(path) {
   if (!path || !existsSync(path)) return {};
   try {
@@ -50,6 +62,9 @@ export async function runFetch({ cwd, kitDir, cfg, opts = {} }) {
       console.error(`❌ Request failed (${what}): ${err.message}`);
       process.exit(1);
     }
+    if (res.status === 401) throw new FetchAuthError(401, `${what}: invalid or expired token`);
+    if (res.status === 403) throw new FetchAuthError(403, `${what}: token's organization does not match this board`);
+    if (res.status === 404) throw new FetchAuthError(404, `${what}: board not found`);
     if (!res.ok) {
       console.error(`❌ ${what}: HTTP ${res.status}`);
       process.exit(1);
@@ -92,7 +107,9 @@ export async function runFetch({ cwd, kitDir, cfg, opts = {} }) {
     return;
   }
 
-  const SLICES_DIR = join(kitDir, '.slices');
+  // Falls back to cwd when no kit is installed — fetch doesn't need kit-specific
+  // files, just somewhere to write .slices/.
+  const SLICES_DIR = join(kitDir || cwd, '.slices');
   const contextNames = new Set();
 
   for (const slice of allSlices) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eventmodelers/cli",
-  "version": "0.0.24",
+  "version": "0.0.26",
   "description": "Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, Cratis, or modeling-only)",
   "type": "module",
   "bin": {