@snapcommit/cli 3.8.0 → 3.8.2

package/dist/lib/auth.js

@@ -19,6 +19,9 @@ const CONFIG_DIR = path_1.default.join(os_1.default.homedir(), '.snapcommit');
 const AUTH_FILE = path_1.default.join(CONFIG_DIR, 'auth.json');
 // API URL - defaults to production, can be overridden for development
 const API_BASE_URL = process.env.SNAPCOMMIT_API_URL || 'https://snapcommit.dev';
+// Token validation cache
+let lastValidationTime = 0;
+const VALIDATION_INTERVAL = 60 * 60 * 1000; // 1 hour in milliseconds
 /**
  * Ensure config directory exists
  */
@@ -163,11 +166,51 @@ async function promptAuth() {
  * Ensure user is authenticated (prompt if not)
  */
 async function ensureAuth() {
+    // Check if we have a locally stored token
     if (isAuthenticated()) {
-        return getAuthConfig();
+        const config = getAuthConfig();
+        if (config) {
+            const now = Date.now();
+            const timeSinceLastValidation = now - lastValidationTime;
+            // Only validate if more than 1 hour has passed since last validation
+            if (timeSinceLastValidation > VALIDATION_INTERVAL) {
+                // CRITICAL: Verify token with server every hour
+                try {
+                    const result = await verifyToken(config.token);
+                    if (result.valid) {
+                        // Token is still valid!
+                        lastValidationTime = now; // Update last validation time
+                        return config;
+                    }
+                    else {
+                        // Token is invalid (user deleted, subscription expired, etc.)
+                        console.log(chalk_1.default.yellow('\n⚠️  Your authentication token is no longer valid.'));
+                        console.log(chalk_1.default.gray('This could mean:'));
+                        console.log(chalk_1.default.gray('  • Your subscription has expired'));
+                        console.log(chalk_1.default.gray('  • Your account was deleted'));
+                        console.log(chalk_1.default.gray('  • The token was revoked\n'));
+                        clearAuth();
+                        lastValidationTime = 0; // Reset validation timer
+                        // Fall through to re-prompt
+                    }
+                }
+                catch (error) {
+                    // Network error - allow offline usage with cached token
+                    console.log(chalk_1.default.yellow('\n⚠️  Could not verify token (offline mode)'));
+                    console.log(chalk_1.default.gray('Using cached credentials. Some features may be limited.\n'));
+                    return config;
+                }
+            }
+            else {
+                // Token was validated recently (within the last hour) - skip validation
+                return config;
+            }
+        }
     }
+    // No valid token - prompt for authentication
     const success = await promptAuth();
     if (success) {
+        lastValidationTime = Date.now(); // Set validation time after successful auth
         return getAuthConfig();
     }
     return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snapcommit/cli",
-  "version": "3.8.0",
+  "version": "3.8.2",
   "description": "Instant AI commits. Beautiful progress tracking. Never write commit messages again.",
   "main": "dist/index.js",
   "bin": {