fix: improve error message for revoked API tokens with --reach

[Martin Torp (mtorp)]

Summary

• When socket scan create --reach is used with a revoked/invalid API token, the CLI now shows "Authentication failed: Your API token appears to be invalid, expired, or revoked" instead of the misleading "Unable to verify plan permissions" error.
• Splits 401 (Unauthorized) and 403 (Forbidden) handling in getErrorMessageForHttpStatusCode so each gets a distinct, actionable message across all API calls.
• Bumps @coana-tech/cli from 14.12.200 to 14.12.201 and Socket CLI to v1.1.77.

Test plan

• Run socket scan create --reach with a revoked API token and verify the error message says "Authentication failed" with token guidance
• Run socket scan create --reach with a valid token but no enterprise plan and verify the existing "requires an enterprise plan" message still appears
• Run socket scan create --reach with a valid enterprise token and verify reachability analysis proceeds normally
• Verify pnpm check (lint + typecheck) passes
• Verify pnpm test:unit src/commands/scan/cmd-scan-create.test.mts passes (25 tests)

---

Note

Low Risk
Low risk: changes are limited to error handling/messages for HTTP 401/403 and a minor dependency/version bump, with no behavioral changes to scanning beyond clearer failures.

Overview
Improves CLI error handling when running socket scan create --reach with invalid/revoked tokens by detecting 401 Unauthorized from the organization lookup and returning an explicit Authentication failed message instead of the generic plan-permissions error.

Splits 401 vs 403 messaging in getErrorMessageForHttpStatusCode so token-invalid and permission-denied cases get distinct guidance across API calls, and adds a failure log in fetchOrganization when the org list request fails.

Bumps the CLI version to 1.1.77 and updates @coana-tech/cli to 14.12.201 (lockfile updated accordingly).

^{Written by Cursor Bugbot for commit 5eac4be. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​coana-tech/​cli@​14.12.200 ⏵ 14.12.201	+1		+1

View full report

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is ON. A cloud agent has been kicked off to fix the reported issue.}

Comment @cursor review or bugbot run to trigger another review on this PR

[socket-security-staging]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​coana-tech/​cli@​14.12.200 ⏵ 14.12.201	+1		+1

View full report