@intercom/cli 0.6.0 → 0.7.0

package/dist/{chunk-Y4JK5AHH.js → chunk-3V2ONMAU.js}

@@ -26,8 +26,8 @@ var NotFoundError = class extends CLIError {
   }
 };
 var PermissionError = class extends CLIError {
-  constructor(message) {
-    super(message, 5);
+  constructor(message, error) {
+    super(message, 5, error);
   }
 };
 var TimeoutError = class extends CLIError {
@@ -106,4 +106,4 @@ export {
   formatJson,
   applyJq
 };
-//# sourceMappingURL=chunk-Y4JK5AHH.js.map
+//# sourceMappingURL=chunk-3V2ONMAU.js.map

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   applyJq,
   detectAuthType,
   formatJson
-} from "./chunk-Y4JK5AHH.js";
+} from "./chunk-3V2ONMAU.js";
 
 // src/index.ts
 import { Command } from "commander";
@@ -65,7 +65,7 @@ var _dryRun = false;
 function setDryRun(enabled) {
   _dryRun = enabled;
 }
-var IntercomClient = class {
+var IntercomClient = class _IntercomClient {
   token;
   authType;
   appId;
@@ -88,7 +88,49 @@ var IntercomClient = class {
     }
     return `Bearer ${this.token}`;
   }
-  async request(method, path, body, responseType = "json", extraHeaders) {
+  // Dedicated error code the API returns when the `fin-sdk` feature flag gates
+  // a fin subcommand. It's specific to that self-fixable gate (not the generic
+  // plan-restriction code), so seeing it is a safe signal to auto-enable.
+  static FIN_SDK_GATE_CODE = "fin_sdk_not_enabled";
+  // Thin wrapper over requestOnce that transparently recovers from the fin-sdk
+  // gate: if a call is blocked because the flag isn't enabled, opt the
+  // workspace in via POST /fin-sdk/enable and retry the original request once.
+  // If enabling fails, the original gate error is surfaced unchanged.
+  async request(method, path, body, responseType = "json", extraHeaders, isFinSdkRetry = false) {
+    try {
+      return await this.requestOnce(
+        method,
+        path,
+        body,
+        responseType,
+        extraHeaders
+      );
+    } catch (err) {
+      if (!isFinSdkRetry && !_dryRun && err instanceof PermissionError && err.error?.code === _IntercomClient.FIN_SDK_GATE_CODE) {
+        try {
+          await this.enableFinSdk();
+        } catch {
+          throw err;
+        }
+        return this.request(
+          method,
+          path,
+          body,
+          responseType,
+          extraHeaders,
+          true
+        );
+      }
+      throw err;
+    }
+  }
+  // Opt the current workspace into the fin-sdk feature flag. The notice goes to
+  // stderr so it never contaminates --json / piped stdout output.
+  async enableFinSdk() {
+    console.error("Fin SDK not enabled for this workspace \u2014 enabling it now...");
+    await this.requestOnce("POST", "/fin-sdk/enable", {}, "json");
+  }
+  async requestOnce(method, path, body, responseType = "json", extraHeaders) {
     const url = `${this.baseUrl}${path}`;
     if (_dryRun) {
       console.error(`> ${method} ${url}`);
@@ -149,13 +191,18 @@ var IntercomClient = class {
       }
       const errorBody = await response.json().catch(() => ({}));
       const errorMsg = errorBody?.errors?.[0]?.message ?? `HTTP ${response.status}`;
+      const errorCode = errorBody?.errors?.[0]?.code ?? "";
       if (response.status === 401) {
         throw new AuthError(
           `Authentication expired or invalid: ${errorMsg}. Run "intercom auth login" to re-authenticate.`
         );
       }
       if (response.status === 403) {
-        throw new PermissionError(`Permission denied: ${errorMsg}`);
+        throw new PermissionError(`Permission denied: ${errorMsg}`, {
+          code: errorCode,
+          message: errorMsg,
+          status: 403
+        });
       }
       if (response.status === 404) {
         throw new NotFoundError(errorMsg);
@@ -905,13 +952,18 @@ async function deviseSignIn(baseUrl, email, password, timeoutMs = API_TIMEOUT_MS
   }
   const location = signInResponse.headers.get("location") ?? "";
   if (location.includes("/admins/sign_in")) {
-    throw new Error("Invalid credentials");
+    throw new AuthError("Invalid credentials");
   }
   if (location.includes("two_factor")) {
-    throw new Error(
+    throw new AuthError(
       "Two-factor authentication is required. Please use an API key instead."
     );
   }
+  if (location.includes("/login_verification")) {
+    throw new AuthError(
+      "Login email verification is required.\n  Please sign in to the Intercom web app to complete verification, then retry this command."
+    );
+  }
   cookies = mergeCookies(cookies, extractCookies(signInResponse));
   return cookies;
 }
@@ -3973,7 +4025,7 @@ function registerPricingCommand(program) {
     }
     const markdown = await response.text();
     if (opts.json) {
-      const { formatJson: formatJson2 } = await import("./json-MMBOB7YU.js");
+      const { formatJson: formatJson2 } = await import("./json-OEUXXCTX.js");
       console.log(formatJson2({ url: PRICING_URL, content: markdown }));
     } else {
       console.log(markdown);

package/dist/{json-MMBOB7YU.js → json-OEUXXCTX.js}

@@ -2,9 +2,9 @@
 import {
   applyJq,
   formatJson
-} from "./chunk-Y4JK5AHH.js";
+} from "./chunk-3V2ONMAU.js";
 export {
   applyJq,
   formatJson
 };
-//# sourceMappingURL=json-MMBOB7YU.js.map
+//# sourceMappingURL=json-OEUXXCTX.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intercom/cli",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "CLI tool for managing Intercom workspaces",
   "type": "module",
   "bin": {
@@ -38,6 +38,6 @@
     "msw": "^2.12.13",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
-    "vitest": "^3.2.4"
+    "vitest": "^4.1.0"
   }
 }