ravensight-playtest 0.2.5 → 0.2.6

package/README.md

@@ -395,7 +395,7 @@ CI can treat 2 as a success with a warning.
 
 | Variable | Effect |
 |---|---|
-| `RAVENSIGHT_TOKEN` | Use this token instead of the keychain. The CI path. |
+| `RAVENSIGHT_TOKEN` | Use this token instead of the keychain. The CI path. It must be a `gt_cli_` token, the kind `login` stores. A `gt_mcp_` token is an MCP personal access token and a `gt_live_` token is a game's ingest key; `check` refuses both and says which one it saw. |
 | `RAVENSIGHT_API_URL` | The API base URL. Defaults to `https://api.ravensight.io`. |
 | `RAVENSIGHT_DASHBOARD_URL` | Where the dashboard is, if it is not derivable from the API URL. |
 | `RAVENSIGHT_GAME_ID` | The game, when there is no linked repo. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ravensight-playtest",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "AI personas play your game and file reports to Ravensight.",
   "license": "MIT",
   "homepage": "https://ravensight.io/docs/#playtest",

package/src/auth/session.js

@@ -68,6 +68,10 @@ export function looksLikeIngestKey(token) {
   return typeof token === 'string' && token.startsWith('gt_live_');
 }
 
+export function looksLikeMcpToken(token) {
+  return typeof token === 'string' && token.startsWith('gt_mcp_');
+}
+
 /**
  * What to do when the server refuses the credential.
  *

package/src/commands/check.js

@@ -1,7 +1,7 @@
 import { createClient } from '../api/client.js';
 import { ApiError } from '../api/errors.js';
 import { resolveApiUrl, paths } from '../paths.js';
-import { resolveToken, looksLikeIngestKey } from '../auth/session.js';
+import { resolveToken, looksLikeIngestKey, looksLikeMcpToken } from '../auth/session.js';
 import { backendName } from '../auth/keychain.js';
 import { loadConfig } from '../config.js';
 import { packs } from '../packs/index.js';
@@ -183,12 +183,19 @@ export async function runChecks(flags = {}, deps = {}) {
       'that is an ingest key, not a CLI token',
       'run login, or set RAVENSIGHT_TOKEN to a gt_cli_ token'
     ));
+  } else if (looksLikeMcpToken(token)) {
+    rows.push(row(
+      'token valid',
+      'fail',
+      'This is an MCP personal access token (gt_mcp_). The CLI needs its own token (gt_cli_): run `ravensight-playtest login`, or set RAVENSIGHT_TOKEN to a gt_cli_ token in CI.',
+      'ravensight-playtest login'
+    ));
   } else if (!token) {
     rows.push(row('token valid', 'fail', `not logged in to ${host}`, 'ravensight-playtest login'));
   }
 
   let whoami = null;
-  if (token && !looksLikeIngestKey(token)) {
+  if (token && !looksLikeIngestKey(token) && !looksLikeMcpToken(token)) {
     const authed = deps.authedApi || createClient({ apiUrl, token });
     try {
       whoami = await authed.cli.whoami();