md4ai 0.9.8 → 0.9.10

package/dist/index.bundled.js

@@ -1,12 +1,6 @@
 #!/usr/bin/env node
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
@@ -893,20 +887,26 @@ var init_tooling_detector = __esm({
 import { readFile as readFile5 } from "node:fs/promises";
 import { join as join7 } from "node:path";
 import { homedir as homedir5 } from "node:os";
-async function resolveVercelToken() {
+async function resolveVercelTokenWithSource() {
   const creds = await loadCredentials();
-  if (creds?.vercelToken)
-    return creds.vercelToken;
+  if (creds?.vercelToken) {
+    return {
+      token: creds.vercelToken,
+      source: "md4ai-credentials",
+      sourcePath: join7(homedir5(), ".md4ai", "credentials.json")
+    };
+  }
   const possiblePaths = [
-    join7(homedir5(), ".config", "com.vercel.cli", "auth.json"),
-    join7(homedir5(), ".local", "share", "com.vercel.cli", "auth.json")
+    { path: join7(homedir5(), ".config", "com.vercel.cli", "auth.json"), source: "vercel-cli-config" },
+    { path: join7(homedir5(), ".local", "share", "com.vercel.cli", "auth.json"), source: "vercel-cli-local-share" }
   ];
-  for (const authPath of possiblePaths) {
+  for (const { path: authPath, source } of possiblePaths) {
     try {
       const data = await readFile5(authPath, "utf-8");
       const parsed = JSON.parse(data);
-      if (parsed.token)
-        return parsed.token;
+      if (parsed.token) {
+        return { token: parsed.token, source, sourcePath: authPath };
+      }
     } catch {
     }
   }
@@ -962,7 +962,21 @@ async function fetchVercelEnvVars(projectId, orgId, token) {
   });
   if (!res.ok) {
     const body = await res.text().catch(() => "");
-    throw new Error(`Vercel API ${res.status}: ${body.slice(0, 200)}`);
+    let errorCode = null;
+    let invalidToken = false;
+    try {
+      const parsed = JSON.parse(body);
+      errorCode = parsed.error?.code ?? null;
+      invalidToken = parsed.error?.invalidToken === true;
+    } catch {
+    }
+    if (invalidToken || res.status === 401) {
+      throw new VercelApiError("Token is invalid or expired", res.status, errorCode, true);
+    }
+    if (res.status === 403) {
+      throw new VercelApiError("Token lacks permission for this project/team", res.status, errorCode, false);
+    }
+    throw new VercelApiError(`Vercel API ${res.status}: ${body.slice(0, 200)}`, res.status, errorCode, false);
   }
   const data = await res.json();
   const envs = data.envs ?? [];
@@ -974,9 +988,22 @@ async function fetchVercelEnvVars(projectId, orgId, token) {
     // populated later by the scanner
   }));
 }
+var VercelApiError;
 var init_fetch_env_vars = __esm({
   "dist/vercel/fetch-env-vars.js"() {
     "use strict";
+    VercelApiError = class extends Error {
+      statusCode;
+      errorCode;
+      isInvalidToken;
+      constructor(message, statusCode, errorCode, isInvalidToken) {
+        super(message);
+        this.statusCode = statusCode;
+        this.errorCode = errorCode;
+        this.isInvalidToken = isInvalidToken;
+        this.name = "VercelApiError";
+      }
+    };
   }
 });
 
@@ -1018,18 +1045,48 @@ async function scanEnvManifest(projectRoot) {
     checkedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
+function tokenSourceLabel(source) {
+  switch (source) {
+    case "md4ai-credentials":
+      return "md4ai credentials (~/.md4ai/credentials.json)";
+    case "vercel-cli-config":
+      return "Vercel CLI (~/.config/com.vercel.cli/auth.json)";
+    case "vercel-cli-local-share":
+      return "Vercel CLI (~/.local/share/com.vercel.cli/auth.json)";
+  }
+}
+function tokenFixInstructions(source) {
+  switch (source) {
+    case "md4ai-credentials":
+      return [
+        "Generate a new token at https://vercel.com/account/tokens",
+        "Then run: md4ai config set vercel-token <new-token>"
+      ];
+    case "vercel-cli-config":
+    case "vercel-cli-local-share":
+      return [
+        "Re-authenticate the Vercel CLI: npx vercel login",
+        "Ensure you log into the correct team account",
+        "Or set a dedicated token: md4ai config set vercel-token <token>"
+      ];
+  }
+}
 async function checkVercelEnvVars(projectRoot, variables) {
-  const token = await resolveVercelToken();
-  if (!token) {
+  const tokenResult = await resolveVercelTokenWithSource();
+  if (!tokenResult) {
     console.log(chalk8.dim("  Vercel checks skipped (no token configured)"));
+    console.log(chalk8.dim("    To enable: md4ai config set vercel-token <token>"));
+    console.log(chalk8.dim("    Generate a token at https://vercel.com/account/tokens"));
     return null;
   }
+  const { token, source } = tokenResult;
   const projects = await discoverVercelProjects(projectRoot);
   if (projects.length === 0)
     return null;
   console.log(chalk8.dim(`  Checking ${projects.length} Vercel project(s)...`));
   const discovered = [];
   const manifestVarNames = new Set(variables.map((v) => v.name));
+  let tokenErrorShown = false;
   for (const proj of projects) {
     try {
       const vars = await fetchVercelEnvVars(proj.projectId, proj.orgId, token);
@@ -1050,7 +1107,22 @@ async function checkVercelEnvVars(projectRoot, variables) {
       }
       console.log(chalk8.dim(`    ${proj.projectName}: ${vars.length} var(s)`));
     } catch (err) {
-      console.log(chalk8.yellow(`    ${proj.projectName}: ${err instanceof Error ? err.message : "API error"}`));
+      if (err instanceof VercelApiError && err.isInvalidToken && !tokenErrorShown) {
+        tokenErrorShown = true;
+        console.log(chalk8.red(`    ${proj.projectName}: Token is invalid or expired`));
+        console.log(chalk8.yellow(`      Token source: ${tokenSourceLabel(source)}`));
+        console.log(chalk8.yellow("      To fix:"));
+        for (const step of tokenFixInstructions(source)) {
+          console.log(chalk8.yellow(`        \u2192 ${step}`));
+        }
+      } else if (err instanceof VercelApiError && err.statusCode === 403) {
+        console.log(chalk8.yellow(`    ${proj.projectName}: ${err.message}`));
+        console.log(chalk8.dim(`      Token source: ${tokenSourceLabel(source)}`));
+        console.log(chalk8.dim("      Ensure the token has access to this team/project"));
+        console.log(chalk8.dim("      Check: https://vercel.com/account/tokens"));
+      } else {
+        console.log(chalk8.yellow(`    ${proj.projectName}: ${err instanceof Error ? err.message : "API error"}`));
+      }
     }
   }
   return discovered.length > 0 ? discovered : null;
@@ -1651,7 +1723,7 @@ var CURRENT_VERSION;
 var init_check_update = __esm({
   "dist/check-update.js"() {
     "use strict";
-    CURRENT_VERSION = true ? "0.9.8" : "0.0.0-dev";
+    CURRENT_VERSION = true ? "0.9.10" : "0.0.0-dev";
   }
 });
 
@@ -2261,6 +2333,7 @@ var init_read_configs = __esm({
 
 // dist/mcp/scan-processes.js
 import { execFileSync as execFileSync4 } from "node:child_process";
+import { readlinkSync } from "node:fs";
 function parsePsOutput(output) {
   const lines = output.trim().split("\n").slice(1);
   const entries = [];
@@ -2350,7 +2423,6 @@ function getProcessTable() {
   }
 }
 function detectSessionCwds(processes) {
-  const { readlinkSync } = __require("node:fs");
   const cwdByTty = /* @__PURE__ */ new Map();
   const claudeProcs = processes.filter((p) => {
     const lower = p.args.toLowerCase();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "md4ai",
-  "version": "0.9.8",
+  "version": "0.9.10",
   "description": "CLI for MD4AI — scan Claude projects and sync to your dashboard",
   "type": "module",
   "bin": {