tsoft-cli 3.14.0 → 3.14.2

package/CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to T-Soft CLI will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.14.2] - 2026-10-15
+
+### Fixed
+- `tsoft login` now says plainly when the port it needs for sign-in is taken, and no longer sends you to the browser first. The browser opened and waited for you to sign in before the CLI noticed it could not receive the answer, and what came back was `listen EADDRINUSE: address already in use :::8046` followed by a pointer to log files the CLI does not write — so you signed in for nothing and were left with a line that said nothing about what to do. The local connection is now opened before the browser, and when the port is in use the message names it, suggests stopping a `tsoft login` left running in another terminal, and gives the command to see which application holds the port (`lsof` on macOS and Linux, `netstat` on Windows). Other reasons the connection cannot be opened get their own message, the raw error is still available under `--verbose`, and the misleading log-file line is gone from every login error.
+
+## [3.14.1] - 2026-09-22
+
+### Fixed
+- An expired session now says so and points at `tsoft login --org`, instead of printing a raw status line. When the store refused a session renewal the CLI wrote out `Token refresh hatası: 401 - Token refresh failed` and stopped there — a line that names an internal step, is not in the language the rest of the output uses, and says nothing about what to do next; the session was simply over and signing in again was all that was needed, but nothing on screen said that. The refusal is now recognised where it happens and reported as an expired session with the sign-in command to run. A store that is genuinely failing is still reported as a failure, so a broken store is not mistaken for an expired session and nobody is sent to sign in again over an outage. The renewal details are still available under `--verbose` for anyone diagnosing one.
+
 ## [3.14.0] - 2026-09-15
 
 ### Added

package/locales/en.json

@@ -54,7 +54,11 @@
   "login.tip": "💡 Tip: Use \"tsoft whoami\" to check your status.",
   "login.json_error.message": "Login command requires interactive mode.",
   "login.json_error.hint": "For CI/CD, authenticate with tsoft login first to store the token, then use it.",
-  "login.error_log": "Check log files for details.",
+  "login.port_in_use.message": "Port {{port}}, which sign-in needs, is already in use by another application.",
+  "login.port_in_use.close_hint": "If \"tsoft login\" is still running in another terminal, stop it there with Ctrl+C and try again.",
+  "login.port_in_use.find_hint": "To see which application is using the port, run: {{command}}",
+  "login.server_start_failed.message": "Sign-in could not start: the local connection it needs could not be opened on this computer.",
+  "login.server_start_failed.hint": "For details: tsoft login --verbose",
   "login.security_error": "State parameter mismatch! This may indicate a security issue.",
   "logout.starting": "🚪 Logging out...",
   "logout.not_logged_in": "▲ You are not logged in.",

package/locales/tr.json

@@ -54,7 +54,11 @@
   "login.tip": "💡 İpucu: Durum kontrolü için \"tsoft whoami\" komutunu kullanın.",
   "login.json_error.message": "Login komutu interaktif mod gerektiriyor.",
   "login.json_error.hint": "CI/CD için önceden tsoft login ile kimlik doğrulayıp token'i sakladıktan sonra kullanın.",
-  "login.error_log": "Detaylar için log dosyalarını kontrol edin.",
+  "login.port_in_use.message": "Giriş için gereken {{port}} numaralı port şu anda başka bir uygulama tarafından kullanılıyor.",
+  "login.port_in_use.close_hint": "Başka bir terminalde açık kalmış bir \"tsoft login\" varsa o pencerede Ctrl+C ile durdurup tekrar deneyin.",
+  "login.port_in_use.find_hint": "Portu hangi uygulamanın kullandığını görmek için şunu çalıştırın: {{command}}",
+  "login.server_start_failed.message": "Giriş başlatılamadı: giriş için gereken yerel bağlantı bu bilgisayarda açılamadı.",
+  "login.server_start_failed.hint": "Detaylar için: tsoft login --verbose",
   "login.security_error": "State parametresi eşleşmiyor! Güvenlik hatası olabilir.",
   "logout.starting": "🚪 Çıkış yapılıyor...",
   "logout.not_logged_in": "▲ Zaten giriş yapmamışsınız.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tsoft-cli",
-  "version": "3.14.0",
+  "version": "3.14.2",
   "description": "Command-line tool for tsoft360 theme development and management",
   "type": "module",
   "main": "src/index.js",

package/src/commands/login.js

@@ -4,7 +4,7 @@ import {generateCodeVerifier, generateCodeChallenge} from '../pkce.js';
 import {startCallbackServer} from '../server.js';
 import {exchangeToken, saveTokens, setActiveStore} from '../storage.js';
 import * as config from '../config.js';
-import { isJsonMode, jsonOut } from '../output-mode.js';
+import { isJsonMode, jsonOut, verboseLog } from '../output-mode.js';
 import { t } from '../i18n.js';
 
 /**
@@ -43,7 +43,8 @@ export async function loginCommand() {
         authUrl.searchParams.set('prompt', 'select_org_store');
 
         // 3. Callback server'ı başlat
-        const serverPromise = startCallbackServer(config.CALLBACK_PORT);
+        const callbackServer = await startCallbackServer(config.CALLBACK_PORT)
+            .catch((error) => exitOnListenFailure(error, config.CALLBACK_PORT));
 
         // 4. Browser'ı aç
         console.log(chalk.cyan(t('login.browser_opening')));
@@ -56,7 +57,7 @@ export async function loginCommand() {
         console.log(chalk.gray('   ' + t('login.waiting_detail') + '\n'));
 
         // 5. Callback'i bekle
-        const {code, state: returnedState, store} = await serverPromise;
+        const {code, state: returnedState, store} = await callbackServer.result;
 
         // 6. State doğrula (CSRF koruması)
         if (state !== returnedState) {
@@ -89,7 +90,25 @@ export async function loginCommand() {
 
     } catch (error) {
         console.error(chalk.red('\n❌ Hata: ') + error.message);
-        console.error(chalk.gray('\n' + t('login.error_log')));
         process.exit(1);
     }
 }
+
+function exitOnListenFailure(error, port) {
+    verboseLog(error.message);
+
+    if (error.code === 'EADDRINUSE') {
+        console.error(chalk.red('\n❌ ' + t('login.port_in_use.message', { port })));
+        console.error(chalk.gray('   ' + t('login.port_in_use.close_hint')));
+        console.error(chalk.gray('   ' + t('login.port_in_use.find_hint', { command: findPortOwnerCommand(port) })));
+    } else {
+        console.error(chalk.red('\n❌ ' + t('login.server_start_failed.message')));
+        console.error(chalk.gray('   ' + t('login.server_start_failed.hint')));
+    }
+
+    process.exit(1);
+}
+
+function findPortOwnerCommand(port) {
+    return process.platform === 'win32' ? `netstat -ano | findstr :${port}` : `lsof -i :${port}`;
+}

package/src/commands/whoami.js

@@ -1,5 +1,5 @@
 import chalk from 'chalk';
-import { loadTokens, ensureValidToken, getTokenExpiry, isTokenValid, isRefreshTokenValid } from '../storage.js';
+import { loadTokens, ensureValidToken, getTokenExpiry, isTokenValid, isRefreshTokenValid, isReloginRequired } from '../storage.js';
 import { loginCommand } from './login.js';
 import { isJsonMode, jsonOut } from '../output-mode.js';
 import { mapError } from '../errors/error-mapper.js';
@@ -30,7 +30,7 @@ export async function whoamiCommand() {
         console.log(chalk.yellow(t('whoami.token_refreshed') + '\n'));
       }
     } catch (error) {
-      if (error.message === 'RELOGIN_REQUIRED') {
+      if (isReloginRequired(error)) {
         console.log(chalk.yellow(t('whoami.session_expired') + '\n'));
         await loginCommand();
         tokens = await loadTokens();

package/src/errors/error-mapper.js

@@ -2,6 +2,7 @@
  * Push error code -> locale key mapper
  */
 import { t } from '../i18n.js';
+import { isReloginRequired } from '../storage.js';
 
 const ERROR_MAP = {
     'PUSH-PENDING-REVIEW': {
@@ -120,6 +121,14 @@ export function mapError(error, { command = 'unknown', verbose = false } = {}) {
     const responseData = error.response?.data;
     const statusCode = error.response?.status;
 
+    if (isReloginRequired(error)) {
+        return {
+            message: t('error.auth_required.message'),
+            hint: t('error.auth_required.hint'),
+            raw: verbose ? responseData : null,
+        };
+    }
+
     // 1. HTTP status code — mevcut HTTP_STATUS_MAP kullan
     if (statusCode && HTTP_STATUS_MAP[statusCode]) {
         const mapped = HTTP_STATUS_MAP[statusCode];

package/src/server.js

@@ -7,7 +7,15 @@ import { URL } from 'url';
  * @returns {Promise<{code: string, state: string, store: string}>}
  */
 export function startCallbackServer(port) {
-  return new Promise((resolve, reject) => {
+  let resolve;
+  let reject;
+  const result = new Promise((resolveResult, rejectResult) => {
+    resolve = resolveResult;
+    reject = rejectResult;
+  });
+
+  return new Promise((resolveListening, rejectListening) => {
+    let listening = false;
     const server = http.createServer((req, res) => {
       const url = new URL(req.url, `http://localhost:${port}`);
 
@@ -45,15 +53,29 @@ export function startCallbackServer(port) {
     });
 
     server.on('error', (err) => {
-      reject(new Error(`Server başlatılamadı: ${err.message}`));
+      if (listening) {
+        reject(err);
+        return;
+      }
+      server.close();
+      rejectListening(listenFailure(err, port));
     });
 
     server.listen(port, () => {
+      listening = true;
       console.log(`✓ Callback sunucusu başlatıldı (http://localhost:${port}/callback)`);
+      resolveListening({ result });
     });
   });
 }
 
+function listenFailure(err, port) {
+  const failure = new Error(err.message, { cause: err });
+  failure.code = err.code;
+  failure.port = port;
+  return failure;
+}
+
 function successHtml() {
   return `
 <!DOCTYPE html>

package/src/storage.js

@@ -3,6 +3,8 @@ import path from 'path';
 import os from 'os';
 import axios from 'axios';
 import * as config from './config.js';
+import { t } from './i18n.js';
+import { verboseLog } from './output-mode.js';
 
 /**
  * Global config dizini (~/.tsoft-cli/)
@@ -16,6 +18,23 @@ const ACTIVE_THEME_FILE = 'active-theme';
 
 const LEGACY_ACTIVE_THEME_FILE = 'active-theme.txt';
 
+export const RELOGIN_REQUIRED = 'RELOGIN_REQUIRED';
+
+export function createReloginRequiredError(response = null) {
+    const error = new Error(t('error.auth_required.message'));
+    error.code = RELOGIN_REQUIRED;
+
+    if (response) {
+        error.response = response;
+    }
+
+    return error;
+}
+
+export function isReloginRequired(error) {
+    return error?.code === RELOGIN_REQUIRED || error?.message === RELOGIN_REQUIRED;
+}
+
 /**
  * Store domain'i dizin adına uygun formata çevirir
  * @param {string} domain - Store domain (örn: birtan.1isim.com)
@@ -347,16 +366,24 @@ export async function refreshAccessToken(refreshToken, store) {
         };
     } catch (error) {
         if (error.response?.data) {
-            console.error('Token refresh hatası:', error.response.data);
+            verboseLog('Token refresh hatası:', error.response.data);
         }
         if (error.response) {
-            throw new Error(
+            if (error.response.status === 401) {
+                throw createReloginRequiredError(error.response);
+            }
+
+            const refreshError = new Error(
                 `Token refresh hatası: ${error.response.status} - ${
                     error.response.data.error_description ||
                     error.response.data.message ||
                     'Bilinmeyen hata'
                 }`
             );
+
+            refreshError.response = error.response;
+
+            throw refreshError;
         }
         throw new Error(`Token refresh hatası: ${error.message}`);
     }
@@ -519,7 +546,7 @@ export function isRefreshTokenValid(tokens) {
  */
 export async function ensureValidToken(tokens) {
     if (!tokens) {
-        throw new Error('RELOGIN_REQUIRED');
+        throw createReloginRequiredError();
     }
 
     // Access token geçerliyse direkt dön
@@ -535,7 +562,7 @@ export async function ensureValidToken(tokens) {
     }
 
     // Her ikisi de geçersizse, otomatik re-login gerekiyor
-    throw new Error('RELOGIN_REQUIRED');
+    throw createReloginRequiredError();
 }
 
 /**