vigthoria-cli 1.11.45 → 1.11.47

package/dist/commands/auth.js

@@ -4,6 +4,7 @@ import { homedir } from 'os';
 import path from 'path';
 import readline from 'readline';
 import { Config } from '../utils/config.js';
+import { clearGatewayPreflightCache } from '../utils/cli-state.js';
 const DEFAULT_API_URL = 'https://coder.vigthoria.io';
 const CONFIG_DIR = path.join(homedir(), '.vigthoria');
 const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
@@ -62,9 +63,11 @@ function syncSharedConfig(config) {
         if (config.user?.email) {
             shared.set('email', String(config.user.email));
         }
-        if (config.v3ServiceKey) {
-            shared.set('v3ServiceKey', config.v3ServiceKey);
-        }
+        // Always overwrite (never conditionally skip) so a fresh login can never
+        // leave a stale/rotated key behind from a prior session — a falsy value
+        // here explicitly clears the cache, forcing ensureV3ServiceKey() to fetch
+        // a real one on next use instead of silently trusting stale state.
+        shared.set('v3ServiceKey', config.v3ServiceKey || null);
     }
     catch {
         // Keep legacy auth flow working even if shared config write fails.
@@ -148,12 +151,16 @@ export function saveAuthConfig(config) {
         // Best-effort on non-POSIX filesystems.
     }
     syncSharedConfig(config);
+    // A fresh login must never be blocked by a stale cached gateway-preflight
+    // failure from a prior (invalid) session.
+    clearGatewayPreflightCache();
 }
 export function clearAuthConfig() {
     if (existsSync(CONFIG_FILE)) {
         rmSync(CONFIG_FILE, { force: true });
     }
     clearSharedConfigAuth();
+    clearGatewayPreflightCache();
 }
 export function getAuthToken() {
     return process.env.VIGTHORIA_TOKEN || loadAuthConfig().token;

package/dist/utils/cli-state.d.ts

@@ -51,4 +51,11 @@ export declare function readCachedLatestVersion(maxAgeMs?: number): string | nul
 export declare function writeCachedLatestVersion(latestVersion: string, notifiedFor?: string): void;
 export declare function readGatewayPreflightCache(maxAgeMs?: number): boolean | null;
 export declare function writeGatewayPreflightCache(valid: boolean): void;
+/**
+ * Invalidate any cached gateway-preflight result.  Must be called on
+ * every login/logout/token change so a stale cached `false` from a
+ * prior (invalid) session can never block the very next auth-protected
+ * command run right after a fresh, successful login.
+ */
+export declare function clearGatewayPreflightCache(): void;
 export declare function isSafeNpmPackageSpec(spec: string): boolean;

package/dist/utils/cli-state.js

@@ -163,6 +163,24 @@ export function writeGatewayPreflightCache(valid) {
         // Best-effort.
     }
 }
+/**
+ * Invalidate any cached gateway-preflight result.  Must be called on
+ * every login/logout/token change so a stale cached `false` from a
+ * prior (invalid) session can never block the very next auth-protected
+ * command run right after a fresh, successful login.
+ */
+export function clearGatewayPreflightCache() {
+    try {
+        const state = readStateUnchecked();
+        if (state.gatewayPreflight) {
+            delete state.gatewayPreflight;
+            saveCliState(state);
+        }
+    }
+    catch {
+        // Best-effort.
+    }
+}
 /**
  * Validate an npm package spec used by `vigthoria update --from <spec>`.
  * Returns `true` when the spec is acceptable.  Rejects whitespace and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigthoria-cli",
-  "version": "1.11.45",
+  "version": "1.11.47",
   "description": "Vigthoria Coder CLI - AI-powered terminal coding assistant",
   "type": "module",
   "main": "dist/index.js",