@vendian/cli 0.0.40 → 0.0.41

package/cli-wrapper.mjs

@@ -43,7 +43,9 @@ __export(auth_exports, {
   buildWindowsOpenCommand: () => buildWindowsOpenCommand,
   cloudAuthStatus: () => cloudAuthStatus,
   cloudConfigPath: () => cloudConfigPath,
+  defaultOAuthRedirectUri: () => defaultOAuthRedirectUri,
   fetchPackageCredentials: () => fetchPackageCredentials,
+  formatOAuthError: () => formatOAuthError,
   loadCloudConfig: () => loadCloudConfig,
   loginWithVendianOAuth: () => loginWithVendianOAuth,
   resolveApiUrl: () => resolveApiUrl,
@@ -91,6 +93,11 @@ async function loginWithVendianOAuth({ backend, apiUrl, noBrowser = false, env =
       clerkToken
     });
     return { apiUrl: resolvedApiUrl, ...exchange };
+  } catch (error) {
+    throw new Error(formatOAuthError(error, {
+      apiUrl: resolvedApiUrl,
+      redirectUri: callback.redirectUri
+    }), { cause: error });
   } finally {
     await callback.close();
   }
@@ -175,6 +182,16 @@ function activateCloudProfile({ backend, apiUrl, env = process.env, platform = p
     profiles
   };
 }
+function defaultOAuthRedirectUri(env = process.env) {
+  const port = Number(env.VENDIAN_CLI_OAUTH_REDIRECT_PORT || DEFAULT_OAUTH_REDIRECT_PORT);
+  return `http://127.0.0.1:${port}/callback`;
+}
+function formatOAuthError(error, { apiUrl, redirectUri } = {}) {
+  const message = error && typeof error.message === "string" ? error.message : String(error || "OAuth login failed");
+  const hint = oauthRedirectHint(message, { apiUrl, redirectUri });
+  return hint ? `${message}
+${hint}` : message;
+}
 async function getOAuthConfig(apiUrl, redirectUri) {
   const url = new URL(`${apiUrl}/api/v1/cli/auth/oauth/config`);
   url.searchParams.set("redirectUri", redirectUri);
@@ -256,6 +273,7 @@ async function createCallbackServer(env) {
       const code = url.searchParams.get("code");
       const state = url.searchParams.get("state");
       const error = url.searchParams.get("error");
+      const errorDescription = url.searchParams.get("error_description");
       const body = code ? "Vendian CLI authentication complete. You can close this window." : "Vendian CLI authentication failed. Return to the terminal.";
       res.writeHead(code ? 200 : 400, {
         "Content-Type": "text/plain; charset=utf-8",
@@ -268,7 +286,8 @@ async function createCallbackServer(env) {
       }
       settled = true;
       if (error) {
-        reject(new Error(`OAuth login failed: ${error}`));
+        const details = errorDescription ? `${error} (${errorDescription})` : error;
+        reject(new Error(`OAuth login failed: ${details}`));
         return;
       }
       if (!code) {
@@ -290,6 +309,18 @@ async function createCallbackServer(env) {
     close: () => new Promise((resolve) => server.close(resolve))
   };
 }
+function oauthRedirectHint(message, { apiUrl, redirectUri } = {}) {
+  if (!redirectUri) {
+    return "";
+  }
+  const lower = String(message || "").toLowerCase();
+  const looksLikeRedirectMismatch = lower.includes("redirect_uri") || lower.includes("pre-registered redirect") || lower.includes("oauth login timed out before callback completed") || lower.includes("oauth callback did not include an authorization code");
+  if (!looksLikeRedirectMismatch) {
+    return "";
+  }
+  const target = apiUrl || "this backend";
+  return `If Clerk rejected the CLI callback for ${target}, add this redirect URL in Clerk: ${redirectUri}`;
+}
 function openBrowser(url) {
   const platform = process.platform;
   if (platform === "win32") {
@@ -2404,7 +2435,7 @@ function buildLocalServeEventStreamArgs({ agentsDir: agentsDir2 = "./agents", co
 }
 
 // src/version.js
-var CLI_VERSION = true ? "0.0.40" : process.env.npm_package_version || "0.0.0-dev";
+var CLI_VERSION = true ? "0.0.41" : process.env.npm_package_version || "0.0.0-dev";
 
 // src/dev-server.js
 var __dirname = path8.dirname(fileURLToPath(import.meta.url));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vendian/cli",
-  "version": "0.0.40",
+  "version": "0.0.41",
   "description": "Public Vendian CLI bootstrapper and launcher",
   "license": "UNLICENSED",
   "private": false,