md4ai 0.9.9 → 0.9.10

package/dist/index.bundled.js

@@ -887,20 +887,26 @@ var init_tooling_detector = __esm({
 import { readFile as readFile5 } from "node:fs/promises";
 import { join as join7 } from "node:path";
 import { homedir as homedir5 } from "node:os";
-async function resolveVercelToken() {
+async function resolveVercelTokenWithSource() {
   const creds = await loadCredentials();
-  if (creds?.vercelToken)
-    return creds.vercelToken;
+  if (creds?.vercelToken) {
+    return {
+      token: creds.vercelToken,
+      source: "md4ai-credentials",
+      sourcePath: join7(homedir5(), ".md4ai", "credentials.json")
+    };
+  }
   const possiblePaths = [
-    join7(homedir5(), ".config", "com.vercel.cli", "auth.json"),
-    join7(homedir5(), ".local", "share", "com.vercel.cli", "auth.json")
+    { path: join7(homedir5(), ".config", "com.vercel.cli", "auth.json"), source: "vercel-cli-config" },
+    { path: join7(homedir5(), ".local", "share", "com.vercel.cli", "auth.json"), source: "vercel-cli-local-share" }
   ];
-  for (const authPath of possiblePaths) {
+  for (const { path: authPath, source } of possiblePaths) {
     try {
       const data = await readFile5(authPath, "utf-8");
       const parsed = JSON.parse(data);
-      if (parsed.token)
-        return parsed.token;
+      if (parsed.token) {
+        return { token: parsed.token, source, sourcePath: authPath };
+      }
     } catch {
     }
   }
@@ -956,7 +962,21 @@ async function fetchVercelEnvVars(projectId, orgId, token) {
   });
   if (!res.ok) {
     const body = await res.text().catch(() => "");
-    throw new Error(`Vercel API ${res.status}: ${body.slice(0, 200)}`);
+    let errorCode = null;
+    let invalidToken = false;
+    try {
+      const parsed = JSON.parse(body);
+      errorCode = parsed.error?.code ?? null;
+      invalidToken = parsed.error?.invalidToken === true;
+    } catch {
+    }
+    if (invalidToken || res.status === 401) {
+      throw new VercelApiError("Token is invalid or expired", res.status, errorCode, true);
+    }
+    if (res.status === 403) {
+      throw new VercelApiError("Token lacks permission for this project/team", res.status, errorCode, false);
+    }
+    throw new VercelApiError(`Vercel API ${res.status}: ${body.slice(0, 200)}`, res.status, errorCode, false);
   }
   const data = await res.json();
   const envs = data.envs ?? [];
@@ -968,9 +988,22 @@ async function fetchVercelEnvVars(projectId, orgId, token) {
     // populated later by the scanner
   }));
 }
+var VercelApiError;
 var init_fetch_env_vars = __esm({
   "dist/vercel/fetch-env-vars.js"() {
     "use strict";
+    VercelApiError = class extends Error {
+      statusCode;
+      errorCode;
+      isInvalidToken;
+      constructor(message, statusCode, errorCode, isInvalidToken) {
+        super(message);
+        this.statusCode = statusCode;
+        this.errorCode = errorCode;
+        this.isInvalidToken = isInvalidToken;
+        this.name = "VercelApiError";
+      }
+    };
   }
 });
 
@@ -1012,18 +1045,48 @@ async function scanEnvManifest(projectRoot) {
     checkedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
+function tokenSourceLabel(source) {
+  switch (source) {
+    case "md4ai-credentials":
+      return "md4ai credentials (~/.md4ai/credentials.json)";
+    case "vercel-cli-config":
+      return "Vercel CLI (~/.config/com.vercel.cli/auth.json)";
+    case "vercel-cli-local-share":
+      return "Vercel CLI (~/.local/share/com.vercel.cli/auth.json)";
+  }
+}
+function tokenFixInstructions(source) {
+  switch (source) {
+    case "md4ai-credentials":
+      return [
+        "Generate a new token at https://vercel.com/account/tokens",
+        "Then run: md4ai config set vercel-token <new-token>"
+      ];
+    case "vercel-cli-config":
+    case "vercel-cli-local-share":
+      return [
+        "Re-authenticate the Vercel CLI: npx vercel login",
+        "Ensure you log into the correct team account",
+        "Or set a dedicated token: md4ai config set vercel-token <token>"
+      ];
+  }
+}
 async function checkVercelEnvVars(projectRoot, variables) {
-  const token = await resolveVercelToken();
-  if (!token) {
+  const tokenResult = await resolveVercelTokenWithSource();
+  if (!tokenResult) {
     console.log(chalk8.dim("  Vercel checks skipped (no token configured)"));
+    console.log(chalk8.dim("    To enable: md4ai config set vercel-token <token>"));
+    console.log(chalk8.dim("    Generate a token at https://vercel.com/account/tokens"));
     return null;
   }
+  const { token, source } = tokenResult;
   const projects = await discoverVercelProjects(projectRoot);
   if (projects.length === 0)
     return null;
   console.log(chalk8.dim(`  Checking ${projects.length} Vercel project(s)...`));
   const discovered = [];
   const manifestVarNames = new Set(variables.map((v) => v.name));
+  let tokenErrorShown = false;
   for (const proj of projects) {
     try {
       const vars = await fetchVercelEnvVars(proj.projectId, proj.orgId, token);
@@ -1044,7 +1107,22 @@ async function checkVercelEnvVars(projectRoot, variables) {
       }
       console.log(chalk8.dim(`    ${proj.projectName}: ${vars.length} var(s)`));
     } catch (err) {
-      console.log(chalk8.yellow(`    ${proj.projectName}: ${err instanceof Error ? err.message : "API error"}`));
+      if (err instanceof VercelApiError && err.isInvalidToken && !tokenErrorShown) {
+        tokenErrorShown = true;
+        console.log(chalk8.red(`    ${proj.projectName}: Token is invalid or expired`));
+        console.log(chalk8.yellow(`      Token source: ${tokenSourceLabel(source)}`));
+        console.log(chalk8.yellow("      To fix:"));
+        for (const step of tokenFixInstructions(source)) {
+          console.log(chalk8.yellow(`        \u2192 ${step}`));
+        }
+      } else if (err instanceof VercelApiError && err.statusCode === 403) {
+        console.log(chalk8.yellow(`    ${proj.projectName}: ${err.message}`));
+        console.log(chalk8.dim(`      Token source: ${tokenSourceLabel(source)}`));
+        console.log(chalk8.dim("      Ensure the token has access to this team/project"));
+        console.log(chalk8.dim("      Check: https://vercel.com/account/tokens"));
+      } else {
+        console.log(chalk8.yellow(`    ${proj.projectName}: ${err instanceof Error ? err.message : "API error"}`));
+      }
     }
   }
   return discovered.length > 0 ? discovered : null;
@@ -1645,7 +1723,7 @@ var CURRENT_VERSION;
 var init_check_update = __esm({
   "dist/check-update.js"() {
     "use strict";
-    CURRENT_VERSION = true ? "0.9.9" : "0.0.0-dev";
+    CURRENT_VERSION = true ? "0.9.10" : "0.0.0-dev";
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "md4ai",
-  "version": "0.9.9",
+  "version": "0.9.10",
   "description": "CLI for MD4AI — scan Claude projects and sync to your dashboard",
   "type": "module",
   "bin": {