vercel 52.0.0 → 52.2.0

package/dist/chunks/{add-32PTAGQE.js → add-TH62Y34V.js}

@@ -9,35 +9,35 @@ import {
   handleRulesApiError,
   parseRulesFlagsAndScope,
   rulesCollectionPath
-} from "./chunk-FOWUL5QD.js";
-import "./chunk-3Q7JX627.js";
+} from "./chunk-EVDPX5BO.js";
+import "./chunk-FPTKAORS.js";
 import "./chunk-HTOH3MSD.js";
-import "./chunk-V67XYW74.js";
+import "./chunk-O7R67TAG.js";
 import {
   validateJsonOutput
 } from "./chunk-XPKWKPWA.js";
 import {
   rulesAddSubcommand
-} from "./chunk-DVQ4SIWF.js";
+} from "./chunk-P3H4MP5H.js";
 import {
   AGENT_REASON
 } from "./chunk-E3NE4SKN.js";
-import "./chunk-VPI2ZRPP.js";
+import "./chunk-ZI2C6YH2.js";
 import "./chunk-U3WLEFHU.js";
 import {
   buildCommandWithGlobalFlags,
   outputAgentError
-} from "./chunk-XKHLPA6V.js";
+} from "./chunk-IABMY4Q3.js";
 import "./chunk-CO5D46AG.js";
 import {
   getFlagsSpecification,
   parseArguments,
   printError
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   isAPIError,
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-TAOVG4PS.js → chunk-4Q5VS23S.js}

@@ -6,14 +6,14 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   rulesAggregateCommand
-} from "./chunk-DVQ4SIWF.js";
+} from "./chunk-P3H4MP5H.js";
 import {
   formatOption,
   limitOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/commands/alerts/command.ts
 var listSubcommand = {

package/dist/chunks/{chunk-VGWGLBUC.js → chunk-5EDL2IVB.js}

@@ -10,10 +10,10 @@ import {
   formatOption,
   nextOption,
   yesOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/commands/list/command.ts
 var listCommand = {

package/dist/chunks/{chunk-LY3PUG7C.js → chunk-5EZVRZOJ.js}

@@ -9,13 +9,13 @@ import {
 } from "./chunk-V5P25P7F.js";
 import {
   ua_default
-} from "./chunk-4PQA6H63.js";
+} from "./chunk-JCLLQ23G.js";
 import {
   getLocalPathConfig
-} from "./chunk-FVWOH3F3.js";
+} from "./chunk-FUYNVB23.js";
 import {
   autoInstallVercelPlugin
-} from "./chunk-K7R6WOLC.js";
+} from "./chunk-OHOYN7R2.js";
 import {
   DEFAULT_VERCEL_CONFIG_FILENAME,
   VERCEL_CONFIG_EXTENSIONS,
@@ -41,7 +41,7 @@ import {
   useKeypress,
   usePrefix,
   useState
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-ZI2C6YH2.js";
 import {
   require_load_json_file,
   require_write_json_file
@@ -49,12 +49,12 @@ import {
 import {
   printError,
   require_strip_ansi
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   APIError,
   NowError,
   getCommandName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   emoji,
   link_default,
@@ -719,18 +719,41 @@ var require_open = __commonJS({
   }
 });
 
+// src/util/config/get-default.ts
+var defaultGlobalConfig = {
+  "// Note": "This is your Vercel config file. For more information see the global configuration documentation.",
+  "// Docs": "https://vercel.com/docs/projects/project-configuration/global-configuration#config.json"
+};
+function getDefaultAuthConfig(tokenStoredInSystemKeychain = false) {
+  return {
+    "// Note": tokenStoredInSystemKeychain ? "Your auth token is stored in your system keychain." : "This is your Vercel credentials file. DO NOT SHARE!",
+    "// Docs": "https://vercel.com/docs/projects/project-configuration/global-configuration#auth.json"
+  };
+}
+var defaultAuthConfig = getDefaultAuthConfig();
+
 // src/util/config/files.ts
 var import_load_json_file = __toESM(require_load_json_file(), 1);
 var import_write_json_file = __toESM(require_write_json_file(), 1);
 var import_client = __toESM(require_dist2(), 1);
 import { join, basename, dirname } from "path";
 import { accessSync, constants } from "fs";
+import {
+  clearAllCredentialsStrict,
+  hasCredentials,
+  readCredentials,
+  resolveAuthTokenStorage,
+  writeCredentials
+} from "@vercel/cli-auth/credentials-store.js";
 var import_error_utils = __toESM(require_dist(), 1);
 var VERCEL_DIR2 = global_path_default();
 var CONFIG_FILE_PATH = join(VERCEL_DIR2, "config.json");
 var AUTH_CONFIG_FILE_PATH = join(VERCEL_DIR2, "auth.json");
 var readConfigFile = () => {
   const config = import_load_json_file.default.sync(CONFIG_FILE_PATH);
+  if ("authTokenStorage" in config) {
+    config.authTokenStorage = resolveAuthTokenStorage(config.authTokenStorage);
+  }
   return config;
 };
 var writeToConfigFile = (stuff) => {
@@ -757,38 +780,44 @@ var writeToConfigFile = (stuff) => {
     throw err;
   }
 };
-var readAuthConfigFile = () => {
-  const config = import_load_json_file.default.sync(AUTH_CONFIG_FILE_PATH);
-  return config;
+function getAuthStoreConfig(config) {
+  return {
+    authTokenStorage: resolveAuthTokenStorage(config.authTokenStorage)
+  };
+}
+function toPersistedAuthConfig(authConfig) {
+  const { skipWrite, tokenSource, ...persistedAuthConfig } = authConfig;
+  return persistedAuthConfig;
+}
+var readAuthConfigFile = (config) => {
+  return {
+    ...getDefaultAuthConfig(),
+    ...readCredentials(VERCEL_DIR2, getAuthStoreConfig(config))
+  };
 };
-var writeToAuthConfigFile = (authConfig) => {
+var persistAuthConfig = (authConfig, config) => {
   if (authConfig.skipWrite) {
     return;
   }
+  const persistedAuthConfig = toPersistedAuthConfig(authConfig);
   try {
-    return import_write_json_file.default.sync(AUTH_CONFIG_FILE_PATH, authConfig, {
-      indent: 2,
-      mode: 384
-    });
-  } catch (err) {
-    if ((0, import_error_utils.isErrnoException)(err)) {
-      if (err.code === "EPERM") {
-        output_manager_default.error(
-          `Not able to create ${highlight(
-            AUTH_CONFIG_FILE_PATH
-          )} (operation not permitted).`
-        );
-        process.exit(1);
-      } else if (err.code === "EBADF") {
-        output_manager_default.error(
-          `Not able to create ${highlight(
-            AUTH_CONFIG_FILE_PATH
-          )} (bad file descriptor).`
-        );
-        process.exit(1);
-      }
+    if (!hasCredentials(persistedAuthConfig)) {
+      clearAllCredentialsStrict(VERCEL_DIR2);
+      return;
     }
-    throw err;
+    return writeCredentials(
+      VERCEL_DIR2,
+      persistedAuthConfig,
+      getAuthStoreConfig(config)
+    );
+  } catch (err) {
+    const wrappedError = new Error(
+      `An unexpected error occurred while trying to write the auth config to "${humanizePath(
+        AUTH_CONFIG_FILE_PATH
+      )}" ${(0, import_error_utils.errorToString)(err)}`
+    );
+    wrappedError.cause = err;
+    throw wrappedError;
   }
 };
 function getConfigFilePath() {
@@ -2247,7 +2276,7 @@ async function login(client, telemetry) {
   if (isInitialLogin) {
     await updateCurrentTeamAfterLogin(client);
   }
-  client.writeToAuthConfigFile();
+  client.persistAuthConfig();
   client.writeToConfigFile();
   output_manager_default.debug(`Saved credentials in "${humanizePath(global_path_default())}"`);
   output_manager_default.print(`
@@ -2268,6 +2297,23 @@ async function wait(intervalMs) {
 
 // src/util/login/reauthenticate.ts
 async function reauthenticate(client, error) {
+  const { tokenSource } = client.authConfig;
+  const reauthAction = error.enforced ? "SAML re-authentication is required" : "Re-authentication is required";
+  if (tokenSource === "flag") {
+    throw new Error(
+      `${reauthAction} for ${(0, import_chalk4.bold)(error.scope)} scope, but the token provided via \`--token\` does not have access. Provide a token that is authorized for that scope.`
+    );
+  }
+  if (tokenSource === "env") {
+    throw new Error(
+      `${reauthAction} for ${(0, import_chalk4.bold)(error.scope)} scope, but the token provided via the VERCEL_TOKEN environment variable does not have access. Set VERCEL_TOKEN to a token that is authorized for that scope.`
+    );
+  }
+  if (!client.stdin.isTTY) {
+    throw new Error(
+      `${reauthAction} for ${(0, import_chalk4.bold)(error.scope)} scope, but the current environment is non-interactive so the device-code flow cannot be completed. Run \`vercel login\` in an interactive shell, or set VERCEL_TOKEN / pass \`--token\` with a token that is authorized for that scope.`
+    );
+  }
   if (error.teamId && error.enforced) {
     output_manager_default.log(
       `You must re-authenticate with SAML to use ${(0, import_chalk4.bold)(error.scope)} scope.`
@@ -2287,7 +2333,7 @@ async function reauthenticate(client, error) {
     expiresAt: Math.floor(Date.now() / 1e3) + tokens.expires_in,
     refreshToken: tokens.refresh_token
   });
-  client.writeToAuthConfigFile();
+  client.persistAuthConfig();
   output_manager_default.success(`Authentication complete for ${(0, import_chalk4.bold)(error.scope)} scope.`);
   return { token: tokens.access_token, email: "" };
 }
@@ -2436,7 +2482,7 @@ ${error.stack}`);
     if (!hasRefreshToken(authConfig)) {
       output_manager_default.debug("No refresh token found, emptying auth config.");
       this.emptyAuthConfig();
-      this.writeToAuthConfigFile();
+      this.persistAuthConfig();
       return;
     }
     const tokenResponse = await refreshTokenRequest({
@@ -2446,7 +2492,7 @@ ${error.stack}`);
     if (tokensError) {
       output_manager_default.debug("Error refreshing token, emptying auth config.");
       this.emptyAuthConfig();
-      this.writeToAuthConfigFile();
+      this.persistAuthConfig();
       return;
     }
     this.updateAuthConfig({
@@ -2456,7 +2502,7 @@ ${error.stack}`);
     if (tokens.refresh_token) {
       this.updateAuthConfig({ refreshToken: tokens.refresh_token });
     }
-    this.writeToAuthConfigFile();
+    this.persistAuthConfig();
     this.writeToConfigFile();
     output_manager_default.debug("Tokens refreshed successfully.");
   }
@@ -2472,8 +2518,8 @@ ${error.stack}`);
   emptyAuthConfig() {
     this.authConfig = this.authConfig.skipWrite ? { skipWrite: true } : {};
   }
-  writeToAuthConfigFile() {
-    writeToAuthConfigFile(this.authConfig);
+  persistAuthConfig() {
+    persistAuthConfig(this.authConfig, this.config);
   }
   /**
    * Confirms DELETE operations with the user.
@@ -2643,10 +2689,12 @@ export {
   revocationRequest,
   processRevocationResponse,
   login,
+  defaultGlobalConfig,
+  getDefaultAuthConfig,
   readConfigFile,
   writeToConfigFile,
   readAuthConfigFile,
-  writeToAuthConfigFile,
+  persistAuthConfig,
   getConfigFilePath,
   getAuthConfigFilePath,
   readLocalConfig,

package/dist/chunks/{chunk-BHDZCUTT.js → chunk-77JGNI4Z.js}

@@ -6,10 +6,10 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   formatOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/commands/metrics/command.ts
 var schemaSubcommand = {

package/dist/chunks/{chunk-YLGCZTHB.js → chunk-7L7NSLYK.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-IB5L4LKZ.js";
 import {
   require_execa
-} from "./chunk-EG4NYQUS.js";
+} from "./chunk-WCMV6TSF.js";
 import {
   VERCEL_DIR,
   readJSONFile,
@@ -18,12 +18,12 @@ import {
   require_lib,
   require_minimatch,
   require_pluralize
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-ZI2C6YH2.js";
 import {
   CantParseJSONFile,
   cmd,
   code
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default,
   require_dist

package/dist/chunks/{chunk-GE6G37P4.js → chunk-ABDTA3V2.js}

@@ -6,7 +6,7 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   require_string_width
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   __commonJS,
   __require,

package/dist/chunks/{chunk-2OPPBD5D.js → chunk-BUPMO37Q.js}

@@ -6,29 +6,29 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   routesCommand
-} from "./chunk-CRZM5WM2.js";
+} from "./chunk-HMM7V4AU.js";
 import {
   metricsCommand
-} from "./chunk-BHDZCUTT.js";
+} from "./chunk-77JGNI4Z.js";
 import {
   devCommand
-} from "./chunk-BJQTGP42.js";
+} from "./chunk-NCUOSZ6X.js";
 import {
   activityCommand
-} from "./chunk-UWKTUK3W.js";
+} from "./chunk-LN5ZMLBU.js";
 import {
   alertsCommand
-} from "./chunk-TAOVG4PS.js";
+} from "./chunk-4Q5VS23S.js";
 import {
   listCommand
-} from "./chunk-VGWGLBUC.js";
+} from "./chunk-5EDL2IVB.js";
 import {
   buildCommand,
   pullCommand
-} from "./chunk-K7R6WOLC.js";
+} from "./chunk-OHOYN7R2.js";
 import {
   envCommand
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-ZI2C6YH2.js";
 import {
   confirmOption,
   forceOption,
@@ -37,10 +37,10 @@ import {
   limitOption,
   nextOption,
   yesOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";
@@ -2172,9 +2172,9 @@ var tokensSubcommand = {
       name: "remove",
       shorthand: null,
       type: [String],
-      argument: "TOKEN",
+      argument: "ID_OR_TOKEN",
       deprecated: false,
-      description: "Revoke one or more token strings (repeatable). Requires `--yes` in non-interactive mode"
+      description: "Revoke one or more tokens by id or plaintext token (repeatable). Requires `--yes` in non-interactive mode"
     }
   ],
   examples: []

package/dist/chunks/{chunk-G6RXZLQ2.js → chunk-DFUTSURK.js}

@@ -6,10 +6,10 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   table
-} from "./chunk-GE6G37P4.js";
+} from "./chunk-ABDTA3V2.js";
 import {
   require_strip_ansi
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   require_source
 } from "./chunk-S7KYDPEM.js";

package/dist/chunks/{chunk-FOWUL5QD.js → chunk-EVDPX5BO.js}

@@ -6,7 +6,7 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   resolveAlertsScope
-} from "./chunk-3Q7JX627.js";
+} from "./chunk-FPTKAORS.js";
 import {
   handleValidationError,
   outputError,
@@ -18,7 +18,7 @@ import {
 import {
   buildCommandWithGlobalFlags,
   outputAgentError
-} from "./chunk-XKHLPA6V.js";
+} from "./chunk-IABMY4Q3.js";
 
 // src/commands/alerts/rules/parse-scope.ts
 async function parseRulesFlagsAndScope(client, flags, jsonOutput) {

package/dist/chunks/{chunk-3Q7JX627.js → chunk-FPTKAORS.js}

@@ -9,22 +9,22 @@ import {
 } from "./chunk-HTOH3MSD.js";
 import {
   getScope
-} from "./chunk-V67XYW74.js";
+} from "./chunk-O7R67TAG.js";
 import {
   AGENT_REASON
 } from "./chunk-E3NE4SKN.js";
 import {
   getLinkedProject,
   getProjectByNameOrId
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-ZI2C6YH2.js";
 import {
   buildCommandWithGlobalFlags,
   outputAgentError
-} from "./chunk-XKHLPA6V.js";
+} from "./chunk-IABMY4Q3.js";
 import {
   ProjectNotFound,
   isAPIError
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/commands/alerts/resolve-alerts-scope.ts
 function emitAlertsScopeError(client, jsonOutput, code, message, agent) {

package/dist/chunks/{chunk-UC4NDDAU.js → chunk-FUUQ2WSC.js}

@@ -6,24 +6,24 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   writeProjectSettings
-} from "./chunk-OP4YIHHX.js";
+} from "./chunk-NJYOE4D7.js";
 import {
   ensureLink
-} from "./chunk-I5IBRE7Q.js";
+} from "./chunk-QTX36APP.js";
 import {
   autoInstallVercelPlugin,
   pullCommand
-} from "./chunk-K7R6WOLC.js";
+} from "./chunk-OHOYN7R2.js";
 import {
   help
-} from "./chunk-LDXYSGPZ.js";
+} from "./chunk-QPPVRYOB.js";
 import {
   VERCEL_DIR,
   VERCEL_DIR_PROJECT,
   envPullCommandLogic,
   humanizePath,
   parseTarget
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-ZI2C6YH2.js";
 import {
   TelemetryClient
 } from "./chunk-U3WLEFHU.js";
@@ -34,7 +34,7 @@ import {
   getFlagsSpecification,
   parseArguments,
   printError
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   emoji,
   output_manager_default,

package/dist/chunks/{chunk-FVWOH3F3.js → chunk-FUYNVB23.js}

@@ -7,14 +7,14 @@ const __dirname = __dirname_(__filename);
 import {
   VERCEL_DIR,
   isVercelTomlEnabled
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-ZI2C6YH2.js";
 import {
   getArgs
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   ConflictingConfigFiles,
   InvalidLocalConfig
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/util/config/local-path.ts
 import path from "path";

package/dist/chunks/{chunk-PEB65MJA.js → chunk-H2O3DQDC.js}

@@ -6,10 +6,10 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   getLocalPathConfig
-} from "./chunk-FVWOH3F3.js";
+} from "./chunk-FUYNVB23.js";
 import {
   table
-} from "./chunk-GE6G37P4.js";
+} from "./chunk-ABDTA3V2.js";
 import {
   VERCEL_DIR_PROJECT,
   VERCEL_DIR_README,
@@ -37,15 +37,15 @@ import {
   selectAndParseRemoteUrl,
   selectOrg,
   writeServicesConfig
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-ZI2C6YH2.js";
 import {
   printError
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   CantParseJSONFile,
   ProjectNotFound,
   isAPIError
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-CRZM5WM2.js → chunk-HMM7V4AU.js}

@@ -6,10 +6,10 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   yesOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/commands/routes/command.ts
 var listSubcommand = {

package/dist/chunks/{chunk-BNSXPMDP.js → chunk-I5OH27IT.js}

@@ -10,21 +10,21 @@ import {
 } from "./chunk-E3NE4SKN.js";
 import {
   getLinkedProject
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-ZI2C6YH2.js";
 import {
   buildCommandWithYes,
   outputAgentError
-} from "./chunk-XKHLPA6V.js";
+} from "./chunk-IABMY4Q3.js";
 import {
   getFlagsSpecification,
   getGlobalFlagsOnlyFromArgs,
   parseArguments,
   printError
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   getCommandName,
   getCommandNamePlain
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";