@inerrata-corporation/errata 2.0.0-dev.33 → 2.0.0-dev.34

package/errata.mjs

@@ -41878,7 +41878,7 @@ function startLoopLagMonitor(thresholdMs = 1e3) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.0-dev.33" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.0-dev.34" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -44673,6 +44673,15 @@ function parseBurstArgs(args2) {
   };
 }
 
+// src/login-mode.ts
+var OAUTH_DEFAULT_ENV = "ERRATA_DAEMON_OAUTH_DEFAULT";
+function isDaemonOAuthDefaultEnabled(env2 = process.env) {
+  return env2[OAUTH_DEFAULT_ENV] === "1";
+}
+function shouldUseOAuthLogin(flags2, env2 = process.env) {
+  return Boolean(flags2.oauth || !flags2.device && isDaemonOAuthDefaultEnabled(env2));
+}
+
 // src/consolidation-trigger.ts
 var DEFAULT_CONSOLIDATION_POLICY = {
   baseFloorMs: 6e4,
@@ -44849,7 +44858,7 @@ Commands:
                       Flags: --port N (default 7891)
   mcp                 Run the MCP stdio server \u2014 the agent's full errata tool
                       surface (navigation, problems, claims, burst, health)
-  login               Sign in with the cloud (OAuth by default; --device for legacy)
+  login               Sign in with the cloud (device-code by default; --oauth for OAuth)
   logout              Clear local cloud credentials
   sync now            Flush outbox to the cloud once
   privacy             Show what is collected/scrubbed + your consent state
@@ -44864,6 +44873,7 @@ Commands:
 Environment:
   ERRATA_CLOUD_URL                Cloud base URL (default ${DEFAULT_CLOUD_URL})
   ERRATA_ALLOW_DIRECT_V1_CLOUD=1  Allow non-local legacy v1 cloud testing
+  ${OAUTH_DEFAULT_ENV}=1       Internal dogfood: plain \`errata login\` uses OAuth
 `);
 }
 function resolveHookPort(explicit) {
@@ -45215,20 +45225,24 @@ async function cmdLoginOAuth(cfg) {
     process.exitCode = 1;
     return;
   }
-  cfg.accessToken = result.tokens.accessToken;
-  cfg.refreshToken = result.tokens.refreshToken ?? null;
-  cfg.tokenEndpoint = result.tokenEndpoint;
-  cfg.oauthClientId = result.clientId;
-  cfg.apiKey = null;
-  saveConfig(cfg);
+  const nextCfg = {
+    ...cfg,
+    accessToken: result.tokens.accessToken,
+    refreshToken: result.tokens.refreshToken ?? null,
+    tokenEndpoint: result.tokenEndpoint,
+    oauthClientId: result.clientId,
+    apiKey: null
+  };
   try {
-    const me = await authedCloudClient(cfg).me();
-    cfg.userId = me.agentId;
-    cfg.email = me.handle;
-    saveConfig(cfg);
+    const me = await authedCloudClient(nextCfg).me();
+    nextCfg.userId = me.agentId;
+    nextCfg.email = me.handle;
+    saveConfig(nextCfg);
     console.log(`logged in as ${me.handle} (${me.tier}) \u2014 tokens stored at ${globalConfigPath()}`);
   } catch (err2) {
-    console.warn(`signed in, but identity check failed: ${err2 instanceof Error ? err2.message : err2}`);
+    console.error(`signed in, but identity check failed: ${err2 instanceof Error ? err2.message : err2}`);
+    console.error(`  credentials were not stored; try again or paste a key:  errata login --token <key>`);
+    process.exitCode = 1;
   }
 }
 async function cmdLogin() {
@@ -45239,7 +45253,7 @@ async function cmdLogin() {
     await applyToken(cfg, flags2.token);
     return;
   }
-  if (flags2.oauth || !flags2.device) {
+  if (shouldUseOAuthLogin(flags2)) {
     await cmdLoginOAuth(cfg);
     return;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.0-dev.33",
+  "version": "2.0.0-dev.34",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {