@theholocron/holocron-plugin-vercel 2.0.0-alpha.1 → 2.0.0-alpha.11

package/dist/index.d.mts

@@ -4,10 +4,13 @@ import { Deployment, DeploymentProject, DeploymentProjectSettings, DeploymentRec
 /**
  * Token resolution for the Vercel plugin.
  *
- * Resolution order:
+ * Resolution order (matches the standard 4-step precedence set by
+ * `.notes/tech-auth-bootstrap.spec.md`):
  *   1. explicit `cliToken` argument (from `--token` flag)
  *   2. HOLOCRON_VERCEL_TOKEN env var (preferred — explicit intent)
  *   3. VERCEL_TOKEN env var (the default the Vercel CLI also reads)
+ *   4. keyring (com.theholocron.cli / "vercel")
+ *   5. AuthError naming all four options + the bootstrap hint
  *
  * No `vercel auth` fallback — Vercel CLI auth is per-account-scoped
  * and the resulting tokens don't always cover team operations.
@@ -20,6 +23,8 @@ interface ResolveTokenInput {
   cliToken?: string;
   /** Env vars; passed in for testability. Defaults to `process.env`. */
   env?: NodeJS.ProcessEnv;
+  /** Keyring lookup fn; passed in for testability. Defaults to `getToken(provider)`. */
+  keyring?: (provider: string) => string | null;
 }
 declare function resolveToken(input?: ResolveTokenInput): string;
 //#endregion
@@ -88,6 +93,27 @@ declare class VercelDeployment implements Deployment {
   private getProjectByName;
 }
 //#endregion
+//#region src/verify-token.d.ts
+/**
+ * `verifyToken` — plugin-level export used by `holocron auth set` +
+ * `holocron auth check`. Hits `GET /v2/user` and translates the
+ * response into the normalized `VerifyTokenResult` shape.
+ */
+interface VerifyTokenSuccess {
+  ok: true;
+  subject: string;
+}
+interface VerifyTokenFailure {
+  ok: false;
+  message: string;
+}
+type VerifyTokenResult = VerifyTokenSuccess | VerifyTokenFailure;
+interface VerifyTokenOptions {
+  baseUrl?: string;
+  fetch?: typeof fetch;
+}
+declare function verifyToken(token: string, opts?: VerifyTokenOptions): Promise<VerifyTokenResult>;
+//#endregion
 //#region src/index.d.ts
 interface VercelPluginOptions extends ResolveTokenInput {
   /** Vercel team id. Set when working with a team-owned project. */
@@ -111,5 +137,12 @@ declare function createPlugin(options?: VercelPluginOptions): {
     deployment: () => Deployment;
   };
 };
+/**
+ * One-line hint printed by `holocron auth set vercel` when no token
+ * is supplied or the supplied token is rejected. Points operators at
+ * https://vercel.com/account/tokens where PATs are minted with
+ * "Full Account" scope for team-level ops.
+ */
+declare const AUTH_HINT: string;
 //#endregion
-export { AuthError, PluginContext, ResolveTokenInput, VercelDeployment, VercelPluginOptions, VercelRestClient, createContext, createPlugin, deployment, resolveToken };
+export { AUTH_HINT, AuthError, PluginContext, ResolveTokenInput, VercelDeployment, VercelPluginOptions, VercelRestClient, type VerifyTokenFailure, type VerifyTokenResult, type VerifyTokenSuccess, createContext, createPlugin, deployment, resolveToken, verifyToken };

package/dist/index.mjs

@@ -1,12 +1,15 @@
-import { ProviderApiError } from "@theholocron/cli";
+import { ProviderApiError, getToken } from "@theholocron/cli";
 //#region src/auth.ts
 /**
 * Token resolution for the Vercel plugin.
 *
-* Resolution order:
+* Resolution order (matches the standard 4-step precedence set by
+* `.notes/tech-auth-bootstrap.spec.md`):
 *   1. explicit `cliToken` argument (from `--token` flag)
 *   2. HOLOCRON_VERCEL_TOKEN env var (preferred — explicit intent)
 *   3. VERCEL_TOKEN env var (the default the Vercel CLI also reads)
+*   4. keyring (com.theholocron.cli / "vercel")
+*   5. AuthError naming all four options + the bootstrap hint
 *
 * No `vercel auth` fallback — Vercel CLI auth is per-account-scoped
 * and the resulting tokens don't always cover team operations.
@@ -16,8 +19,9 @@ var AuthError = class extends Error {
 };
 function resolveToken(input = {}) {
 	const env = input.env ?? process.env;
-	const token = input.cliToken || env.HOLOCRON_VERCEL_TOKEN || env.VERCEL_TOKEN;
-	if (!token) throw new AuthError("no Vercel token found. Pass --token <PAT>, or set HOLOCRON_VERCEL_TOKEN / VERCEL_TOKEN.");
+	const keyring = input.keyring ?? getToken;
+	const token = input.cliToken || env["HOLOCRON_VERCEL_TOKEN"] || env["VERCEL_TOKEN"] || keyring("vercel");
+	if (!token) throw new AuthError("no Vercel token found. Pass --token <PAT>, set HOLOCRON_VERCEL_TOKEN / VERCEL_TOKEN, or run: holocron auth set vercel <PAT>");
 	return token;
 }
 //#endregion
@@ -215,6 +219,31 @@ var VercelRestClient = class {
 	}
 };
 //#endregion
+//#region src/verify-token.ts
+/**
+* `verifyToken` — plugin-level export used by `holocron auth set` +
+* `holocron auth check`. Hits `GET /v2/user` and translates the
+* response into the normalized `VerifyTokenResult` shape.
+*/
+async function verifyToken(token, opts = {}) {
+	const restOpts = { token };
+	if (opts.baseUrl !== void 0) restOpts.baseUrl = opts.baseUrl;
+	if (opts.fetch !== void 0) restOpts.fetch = opts.fetch;
+	const rest = new VercelRestClient(restOpts);
+	try {
+		const res = await rest.request("/v2/user");
+		return {
+			ok: true,
+			subject: `user @ ${res?.user?.email ?? res?.user?.username ?? res?.user?.name ?? res?.user?.id ?? "unknown"}`
+		};
+	} catch (err) {
+		return {
+			ok: false,
+			message: err instanceof Error ? err.message : String(err)
+		};
+	}
+}
+//#endregion
 //#region src/index.ts
 function createContext(options = {}) {
 	const restOpts = { token: resolveToken(options) };
@@ -238,5 +267,12 @@ function createPlugin(options = {}) {
 		capabilities: { deployment: () => deployment(ctx) }
 	};
 }
+/**
+* One-line hint printed by `holocron auth set vercel` when no token
+* is supplied or the supplied token is rejected. Points operators at
+* https://vercel.com/account/tokens where PATs are minted with
+* "Full Account" scope for team-level ops.
+*/
+const AUTH_HINT = "generate a Vercel Personal Access Token at https://vercel.com/account/tokens (scope: Full Account for team ops), then run: holocron auth set vercel <PAT>";
 //#endregion
-export { AuthError, VercelDeployment, VercelRestClient, createContext, createPlugin, deployment, resolveToken };
+export { AUTH_HINT, AuthError, VercelDeployment, VercelRestClient, createContext, createPlugin, deployment, resolveToken, verifyToken };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theholocron/holocron-plugin-vercel",
-  "version": "2.0.0-alpha.1",
+  "version": "2.0.0-alpha.11",
   "description": "Holocron plugin for Vercel. Implements the deployment capability against the Vercel REST API.",
   "homepage": "https://github.com/theholocron/holocron/tree/main/packages/holocron-plugin-vercel#readme",
   "bugs": "https://github.com/theholocron/holocron/issues",
@@ -21,7 +21,7 @@
     }
   },
   "peerDependencies": {
-    "@theholocron/cli": "2.0.0-alpha.1"
+    "@theholocron/cli": "2.0.0-alpha.11"
   },
   "devDependencies": {
     "@theholocron/tsconfig": "^4.1.0",
@@ -32,7 +32,8 @@
     "typescript": "^5.9.3",
     "vitest": "^3.2.6",
     "tsdown": "^0.22.3",
-    "@theholocron/cli": "2.0.0-alpha.1"
+    "tsx": "^4.22.4",
+    "@theholocron/cli": "2.0.0-alpha.11"
   },
   "publishConfig": {
     "access": "public"
@@ -47,7 +48,8 @@
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage"
+    "test:coverage": "vitest run --coverage",
+    "validate": "tsx scripts/validate.mjs"
   },
   "types": "./dist/index.d.mts"
 }