tsoft-cli 3.14.0 → 3.14.1

package/CHANGELOG.md

@@ -5,6 +5,11 @@ All notable changes to T-Soft CLI will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.14.1] - 2026-09-22
+
+### Fixed
+- An expired session now says so and points at `tsoft login --org`, instead of printing a raw status line. When the store refused a session renewal the CLI wrote out `Token refresh hatası: 401 - Token refresh failed` and stopped there — a line that names an internal step, is not in the language the rest of the output uses, and says nothing about what to do next; the session was simply over and signing in again was all that was needed, but nothing on screen said that. The refusal is now recognised where it happens and reported as an expired session with the sign-in command to run. A store that is genuinely failing is still reported as a failure, so a broken store is not mistaken for an expired session and nobody is sent to sign in again over an outage. The renewal details are still available under `--verbose` for anyone diagnosing one.
+
 ## [3.14.0] - 2026-09-15
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tsoft-cli",
-  "version": "3.14.0",
+  "version": "3.14.1",
   "description": "Command-line tool for tsoft360 theme development and management",
   "type": "module",
   "main": "src/index.js",

package/src/commands/whoami.js

@@ -1,5 +1,5 @@
 import chalk from 'chalk';
-import { loadTokens, ensureValidToken, getTokenExpiry, isTokenValid, isRefreshTokenValid } from '../storage.js';
+import { loadTokens, ensureValidToken, getTokenExpiry, isTokenValid, isRefreshTokenValid, isReloginRequired } from '../storage.js';
 import { loginCommand } from './login.js';
 import { isJsonMode, jsonOut } from '../output-mode.js';
 import { mapError } from '../errors/error-mapper.js';
@@ -30,7 +30,7 @@ export async function whoamiCommand() {
         console.log(chalk.yellow(t('whoami.token_refreshed') + '\n'));
       }
     } catch (error) {
-      if (error.message === 'RELOGIN_REQUIRED') {
+      if (isReloginRequired(error)) {
         console.log(chalk.yellow(t('whoami.session_expired') + '\n'));
         await loginCommand();
         tokens = await loadTokens();

package/src/errors/error-mapper.js

@@ -2,6 +2,7 @@
  * Push error code -> locale key mapper
  */
 import { t } from '../i18n.js';
+import { isReloginRequired } from '../storage.js';
 
 const ERROR_MAP = {
     'PUSH-PENDING-REVIEW': {
@@ -120,6 +121,14 @@ export function mapError(error, { command = 'unknown', verbose = false } = {}) {
     const responseData = error.response?.data;
     const statusCode = error.response?.status;
 
+    if (isReloginRequired(error)) {
+        return {
+            message: t('error.auth_required.message'),
+            hint: t('error.auth_required.hint'),
+            raw: verbose ? responseData : null,
+        };
+    }
+
     // 1. HTTP status code — mevcut HTTP_STATUS_MAP kullan
     if (statusCode && HTTP_STATUS_MAP[statusCode]) {
         const mapped = HTTP_STATUS_MAP[statusCode];

package/src/storage.js

@@ -3,6 +3,8 @@ import path from 'path';
 import os from 'os';
 import axios from 'axios';
 import * as config from './config.js';
+import { t } from './i18n.js';
+import { verboseLog } from './output-mode.js';
 
 /**
  * Global config dizini (~/.tsoft-cli/)
@@ -16,6 +18,23 @@ const ACTIVE_THEME_FILE = 'active-theme';
 
 const LEGACY_ACTIVE_THEME_FILE = 'active-theme.txt';
 
+export const RELOGIN_REQUIRED = 'RELOGIN_REQUIRED';
+
+export function createReloginRequiredError(response = null) {
+    const error = new Error(t('error.auth_required.message'));
+    error.code = RELOGIN_REQUIRED;
+
+    if (response) {
+        error.response = response;
+    }
+
+    return error;
+}
+
+export function isReloginRequired(error) {
+    return error?.code === RELOGIN_REQUIRED || error?.message === RELOGIN_REQUIRED;
+}
+
 /**
  * Store domain'i dizin adına uygun formata çevirir
  * @param {string} domain - Store domain (örn: birtan.1isim.com)
@@ -347,16 +366,24 @@ export async function refreshAccessToken(refreshToken, store) {
         };
     } catch (error) {
         if (error.response?.data) {
-            console.error('Token refresh hatası:', error.response.data);
+            verboseLog('Token refresh hatası:', error.response.data);
         }
         if (error.response) {
-            throw new Error(
+            if (error.response.status === 401) {
+                throw createReloginRequiredError(error.response);
+            }
+
+            const refreshError = new Error(
                 `Token refresh hatası: ${error.response.status} - ${
                     error.response.data.error_description ||
                     error.response.data.message ||
                     'Bilinmeyen hata'
                 }`
             );
+
+            refreshError.response = error.response;
+
+            throw refreshError;
         }
         throw new Error(`Token refresh hatası: ${error.message}`);
     }
@@ -519,7 +546,7 @@ export function isRefreshTokenValid(tokens) {
  */
 export async function ensureValidToken(tokens) {
     if (!tokens) {
-        throw new Error('RELOGIN_REQUIRED');
+        throw createReloginRequiredError();
     }
 
     // Access token geçerliyse direkt dön
@@ -535,7 +562,7 @@ export async function ensureValidToken(tokens) {
     }
 
     // Her ikisi de geçersizse, otomatik re-login gerekiyor
-    throw new Error('RELOGIN_REQUIRED');
+    throw createReloginRequiredError();
 }
 
 /**