securewithtrace 0.20.1 → 0.20.2

package/dist/index.js

@@ -26173,6 +26173,7 @@ function colorAccentUnderline(text, colorizer = source_default) {
 var readTokenSafe = readToken;
 var PRODUCTION_API_URL = "https://api.securewithtrace.com";
 var UNAUTHORIZED_STATUS = 401;
+var REFRESH_AUTH_FAILURE_STATUS_CODES = /* @__PURE__ */ new Set([400, 401]);
 function getApiBaseUrl() {
   const raw = process.env["TRACE_API_URL"];
   if (!raw) {
@@ -26217,9 +26218,24 @@ function getWorkosClientId() {
   }
   return clientId;
 }
+function parseRefreshFailureStatus(error48) {
+  if (!(error48 instanceof Error)) {
+    return null;
+  }
+  const statusMatch = error48.message.match(/\b([1-5]\d{2})\b/);
+  if (!statusMatch?.[1]) {
+    return null;
+  }
+  return Number.parseInt(statusMatch[1], 10);
+}
+function isRefreshAuthFailure(error48) {
+  const status = parseRefreshFailureStatus(error48);
+  return status !== null && REFRESH_AUTH_FAILURE_STATUS_CODES.has(status);
+}
 async function refreshStoredAccessToken() {
   const clientId = getWorkosClientId();
   const refreshToken = readRefreshToken();
+  const tokenOrganizationId = extractOrganizationIdFromToken(readToken());
   if (!clientId || !refreshToken) {
     return null;
   }
@@ -26229,7 +26245,20 @@ async function refreshStoredAccessToken() {
     writeTokens(tokenResponse.access_token, nextRefreshToken);
     return tokenResponse.access_token;
   } catch (error48) {
-    if (error48 instanceof Error && (error48.message.includes(" 400 ") || error48.message.includes(" 401 "))) {
+    if (tokenOrganizationId && isRefreshAuthFailure(error48)) {
+      try {
+        const tokenResponse = await refreshAccessToken(clientId, refreshToken, tokenOrganizationId);
+        const nextRefreshToken = tokenResponse.refresh_token ?? refreshToken;
+        writeTokens(tokenResponse.access_token, nextRefreshToken);
+        return tokenResponse.access_token;
+      } catch (orgRefreshError) {
+        if (isRefreshAuthFailure(orgRefreshError)) {
+          removeToken();
+        }
+        return null;
+      }
+    }
+    if (isRefreshAuthFailure(error48)) {
       removeToken();
     }
     return null;
@@ -26247,7 +26276,7 @@ async function refreshStoredAccessTokenForOrganization(workosOrganizationId) {
     writeTokens(tokenResponse.access_token, nextRefreshToken);
     return true;
   } catch (error48) {
-    if (error48 instanceof Error && (error48.message.includes(" 400 ") || error48.message.includes(" 401 "))) {
+    if (isRefreshAuthFailure(error48)) {
       removeToken();
     }
     return false;
@@ -27984,7 +28013,9 @@ function printRepositoriesTable(repositories) {
       repo.status === "CONNECTED" ? "connected" : "disconnected"
     ]
   );
-  const colWidths = headers.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const colWidths = headers.map(
+    (h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length))
+  );
   const pad = (s, w3) => s.padEnd(w3);
   console.log(headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  "));
   for (const row of rows) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securewithtrace",
-  "version": "0.20.1",
+  "version": "0.20.2",
   "description": "Official Trace CLI for vulnerability intelligence in your terminal",
   "type": "module",
   "bin": {