@secondlayer/cli 22.0.0 → 22.0.1

package/dist/cli.js

@@ -2567,12 +2567,27 @@ function nextStepHint(status) {
     return "Server error — retry shortly, or check `secondlayer status`.";
   return;
 }
+function authFailureMessage(code, status, ossMode) {
+  if (code === "KEY_REVOKED") {
+    return {
+      message: "Your saved login was revoked.",
+      hint: "Run `secondlayer login` to sign in again. If you set SECONDLAYER_API_KEY, replace it with a key from /account/keys."
+    };
+  }
+  if (code === "SESSION_EXPIRED" || status === 401) {
+    return {
+      message: "Authentication required.",
+      hint: ossMode ? "Set INSTANCE_TOKEN from `secondlayer init`." : "Run `secondlayer login` to re-authenticate."
+    };
+  }
+  return null;
+}
 function handleApiError(err, action) {
   const status = err instanceof ApiError || err instanceof CliHttpError ? err.status : undefined;
-  if (err instanceof CliHttpError && err.code === "SESSION_EXPIRED" || status === 401) {
-    printError("Authentication required.", {
-      hint: isOssMode() ? "Set INSTANCE_TOKEN from `secondlayer init`." : "Run `secondlayer login` to re-authenticate."
-    });
+  const code = err instanceof ApiError || err instanceof CliHttpError ? err.code : undefined;
+  const auth = authFailureMessage(code, status, isOssMode());
+  if (auth) {
+    printError(auth.message, { hint: auth.hint });
     process.exit(1);
   }
   const detail = err instanceof Error ? err.message : String(err);
@@ -16181,7 +16196,11 @@ class StacksApiClient {
       return response.body;
     } catch (error) {
       const statusCode = typeof error === "object" && error !== null && "response" in error && typeof error.response === "object" && error.response !== null && "statusCode" in error.response ? error.response.statusCode : undefined;
+      const responseBody = typeof error === "object" && error !== null && "response" in error && typeof error.response === "object" && error.response !== null && "body" in error.response ? error.response.body : undefined;
       const message = error instanceof Error ? error.message : String(error);
+      if (statusCode === 401 && typeof responseBody === "object" && responseBody !== null && "code" in responseBody && responseBody.code === "KEY_REVOKED") {
+        throw new Error("Your saved login was revoked. Run `secondlayer login` to sign in again.");
+      }
       if (statusCode === 401) {
         throw new Error(isOssMode() ? "Authentication required. Set INSTANCE_TOKEN from `secondlayer init`." : "Authentication required. Run: secondlayer login");
       }
@@ -202692,7 +202711,7 @@ var {
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "22.0.0",
+  version: "22.0.1",
   description: "Run a Stacks index on your own hardware — set it up, restore verified history, and keep it current.",
   repository: {
     type: "git",
@@ -207861,12 +207880,24 @@ async function runTokenLogin() {
   }, target);
   success(`Logged in as ${account.email} (${target})`);
 }
-async function shouldContinueLogin(target, options) {
+var defaultLoginCheckDeps = {
+  readSession,
+  verify: (target, token) => httpAt(target, "/api/accounts/me", { bearer: token })
+};
+async function shouldContinueLogin(target, options, deps = defaultLoginCheckDeps) {
   if (options.force)
     return true;
-  const existing = await readSession(target);
+  const existing = await deps.readSession(target);
   if (!existing)
     return true;
+  try {
+    await deps.verify(target, existing.token);
+  } catch (err) {
+    if (err instanceof CliHttpError && (err.status === 401 || err.status === 403)) {
+      info(`Your saved login for ${existing.email} stopped working (revoked or expired). Signing in again.`);
+      return true;
+    }
+  }
   info(`Already logged in as ${existing.email} (${target}).`);
   const hint = "Run 'secondlayer logout' first, or re-run with --force to switch accounts.";
   if (!process.stdin.isTTY) {
@@ -207936,10 +207967,10 @@ async function runDeviceLogin(options = {}) {
     error(err instanceof Error ? err.message : String(err));
     process.exit(1);
   }
-  info(`First copy your one-time code: ${start.userCode}`);
+  info(`Your one-time code: ${start.userCode}`);
   const readline = process.stdin.isTTY ? createInterface({ input: process.stdin }) : null;
   if (readline) {
-    info("Press Enter to open secondlayer.tools in your browser...");
+    info("Press Enter to open the sign-in page, then check the code matches.");
     readline.once("line", () => openBrowser(start.verificationUrl));
   }
   info(dim(`Or open ${start.verificationUrl}`));
@@ -208659,5 +208690,5 @@ registerCreditsCommand(program);
 registerArchiveCommand(program);
 program.parse();
 
-//# debugId=32DC3B7BA2B6602D64756E2164756E21
+//# debugId=77FBD5CCBD0906B064756E2164756E21
 //# sourceMappingURL=cli.js.map