@lanonasis/cli 3.3.15 → 3.4.15

package/dist/index-simple.js

@@ -65,7 +65,11 @@ program
     }
     process.env.CLI_OUTPUT_FORMAT = opts.output;
     // Auto-initialize MCP unless disabled
-    if (opts.mcp !== false && !['init', 'auth', 'login', 'mcp', 'health', 'status'].includes(actionCommand.name())) {
+    const isMcpFlow = actionCommand.name() === 'mcp' ||
+        actionCommand.parent?.name?.() === 'mcp' ||
+        actionCommand.name() === 'mcp-server' ||
+        actionCommand.parent?.name?.() === 'mcp-server';
+    if (opts.mcp !== false && !isMcpFlow && !['init', 'auth', 'login', 'health', 'status'].includes(actionCommand.name())) {
         try {
             const client = getMCPClient();
             if (!client.isConnectedToServer()) {

package/dist/index.js

@@ -52,7 +52,11 @@ program
     }
     process.env.CLI_OUTPUT_FORMAT = opts.output;
     // Auto-initialize MCP unless disabled
-    if (opts.mcp !== false && !['init', 'auth', 'login', 'mcp', 'health', 'status'].includes(actionCommand.name())) {
+    const isMcpFlow = actionCommand.name() === 'mcp' ||
+        actionCommand.parent?.name?.() === 'mcp' ||
+        actionCommand.name() === 'mcp-server' ||
+        actionCommand.parent?.name?.() === 'mcp-server';
+    if (opts.mcp !== false && !isMcpFlow && !['init', 'auth', 'login', 'health', 'status'].includes(actionCommand.name())) {
         try {
             const client = getMCPClient();
             if (!client.isConnectedToServer()) {

package/dist/mcp/access-control.d.ts

@@ -50,7 +50,7 @@ export declare class MemoryAccessControl {
     /**
      * Revoke access to a memory or app
      */
-    revokeAccess(userId: string, appId: string, memoryId?: string): Promise<void>;
+    revokeAccess(_userId: string, _appId: string, memoryId?: string): Promise<void>;
     /**
      * Get access logs for audit purposes
      */

package/dist/mcp/access-control.js

@@ -123,8 +123,8 @@ export class MemoryAccessControl {
     /**
      * Revoke access to a memory or app
      */
-    async revokeAccess(userId, appId, memoryId) {
-        const key = `${userId}:${appId}`;
+    async revokeAccess(_userId, _appId, memoryId) {
+        const key = `${_userId}:${_appId}`;
         const existingRules = this.accessRules.get(key) || [];
         const updatedRules = existingRules.map(rule => {
             if (!memoryId || rule.memory_id === memoryId) {
@@ -133,7 +133,7 @@ export class MemoryAccessControl {
             return rule;
         });
         this.accessRules.set(key, updatedRules);
-        logger.info('Access revoked', { userId, appId, memoryId });
+        logger.info('Access revoked', { userId: _userId, appId: _appId, memoryId });
     }
     /**
      * Get access logs for audit purposes
@@ -215,7 +215,7 @@ export class MemoryAccessControl {
             return [];
         }
     }
-    async getSharedMemories(userId, appId) {
+    async getSharedMemories(_userId, _appId) {
         // This would implement logic to find memories shared with the user
         // through explicit permissions or app-level sharing
         return [];

package/dist/mcp/client/enhanced-client.js

@@ -115,7 +115,6 @@ export class EnhancedMCPClient extends EventEmitter {
                 // HTTP transport is not directly supported by MCP SDK
                 // Use stdio or websocket instead
                 throw new Error('HTTP transport not directly supported. Use websocket or stdio transport.');
-                break;
             case 'websocket':
                 if (!config.url) {
                     throw new Error('URL required for websocket transport');
@@ -225,7 +224,7 @@ export class EnhancedMCPClient extends EventEmitter {
     /**
      * Select the best server for a tool based on availability and latency
      */
-    async selectBestServer(toolName) {
+    async selectBestServer(_toolName) {
         const availableServers = Array.from(this.clients.keys()).filter(name => {
             const status = this.connectionStatus.get(name);
             return status?.status === 'connected';
@@ -240,7 +239,7 @@ export class EnhancedMCPClient extends EventEmitter {
     /**
      * Select a failover server
      */
-    async selectFailoverServer(excludeServer, toolName) {
+    async selectFailoverServer(excludeServer, _toolName) {
         const availableServers = Array.from(this.clients.keys()).filter(name => {
             const status = this.connectionStatus.get(name);
             return name !== excludeServer && status?.status === 'connected';
@@ -318,7 +317,7 @@ export class EnhancedMCPClient extends EventEmitter {
     /**
      * Get server configuration (placeholder - should be stored during connect)
      */
-    getServerConfig(serverName) {
+    getServerConfig(_serverName) {
         // TODO: Store and retrieve server configs
         return null;
     }
@@ -343,7 +342,7 @@ export class EnhancedMCPClient extends EventEmitter {
                 await client.close();
                 console.log(chalk.gray(`Disconnected from ${name}`));
             }
-            catch (error) {
+            catch {
                 console.log(chalk.yellow(`Warning: Error disconnecting from ${name}`));
             }
         }

package/dist/mcp/schemas/tool-schemas.d.ts

@@ -371,7 +371,7 @@ export declare class SchemaValidator {
     /**
      * Get schema as JSON Schema for documentation
      */
-    static toJsonSchema(schema: z.ZodSchema<any>): any;
+    static toJsonSchema(_schema: z.ZodSchema<any>): any;
 }
 export declare const MCPSchemas: {
     memory: {

package/dist/mcp/schemas/tool-schemas.js

@@ -333,7 +333,7 @@ export class SchemaValidator {
     /**
      * Get schema as JSON Schema for documentation
      */
-    static toJsonSchema(schema) {
+    static toJsonSchema(_schema) {
         // This would require zodToJsonSchema package
         // For now, return a simplified version
         return {

package/dist/mcp/server/lanonasis-server.d.ts

@@ -59,7 +59,8 @@ export declare class LanonasisMCPServer {
      */
     private registerPrompts; /**
     
-   * Handle tool calls
+    /**
+     * Handle tool calls
      */
     private handleToolCall;
     /**

package/dist/mcp/server/lanonasis-server.js

@@ -600,9 +600,10 @@ Please choose an option (1-4):`
         });
     } /**
     
-   * Handle tool calls
+    /**
+     * Handle tool calls
      */
-    async handleToolCall(name, args, clientId) {
+    async handleToolCall(name, args, _clientId) {
         // Ensure we're initialized
         if (!this.apiClient) {
             await this.initialize();
@@ -666,7 +667,7 @@ Please choose an option (1-4):`
             // Transport management operations
             case 'transport_status':
                 return this.getTransportStatus();
-            case 'transport_test':
+            case 'transport_test': {
                 if (!args.transport) {
                     throw new Error('transport is required');
                 }
@@ -676,6 +677,7 @@ Please choose an option (1-4):`
                     available: isAvailable,
                     tested_at: new Date().toISOString()
                 };
+            }
             case 'transport_reset_failures':
                 if (args.transport) {
                     this.transportFailures.delete(args.transport);
@@ -1178,7 +1180,7 @@ Please choose an option (1-4):`
             }
             return true;
         }
-        catch (error) {
+        catch {
             return false;
         }
     }
@@ -1199,7 +1201,7 @@ Please choose an option (1-4):`
             }
             return true;
         }
-        catch (error) {
+        catch {
             return false;
         }
     }

package/dist/mcp/transports/transport-manager.js

@@ -162,7 +162,7 @@ class WebSocketTransport extends EventEmitter {
                         const message = JSON.parse(data.toString());
                         this.emit('message', message);
                     }
-                    catch (error) {
+                    catch {
                         this.emit('error', new Error('Failed to parse WebSocket message'));
                     }
                 });
@@ -270,7 +270,7 @@ class SSETransport extends EventEmitter {
                     const data = JSON.parse(event.data);
                     this.emit('message', data);
                 }
-                catch (error) {
+                catch {
                     this.emit('error', new Error('Failed to parse SSE message'));
                 }
             };
@@ -282,7 +282,7 @@ class SSETransport extends EventEmitter {
             };
         });
     }
-    async send(data) {
+    async send(_data) {
         // SSE is receive-only, but we can send data via HTTP POST
         throw new Error('SSE transport is read-only. Use HTTP for sending data.');
     }

package/dist/mcp-server.js

@@ -20,7 +20,7 @@ export class CLIMCPServer {
      */
     async start(options = {}) {
         await this.config.init();
-        const { mode = 'stdio', port = 3001, verbose = false, useRemote = this.config.shouldUseRemoteMCP() } = options;
+        const { useRemote = this.config.shouldUseRemoteMCP() } = options;
         if (useRemote) {
             await this.startRemoteMCP(options);
         }
@@ -33,8 +33,8 @@ export class CLIMCPServer {
      */
     async startLocalMCP(options) {
         const { mode, port, verbose } = options;
-        // Path to CLI-aligned MCP server in submodule
-        const mcpServerPath = join(__dirname, '../../../mcp-server/dist/cli-aligned-mcp-server.js');
+        // Path to production MCP server (uses CommonJS, no build needed)
+        const mcpServerPath = join(__dirname, '../../../mcp-server/src/production-mcp-server.cjs');
         const args = mode === 'http' ? ['--http'] : ['--stdio'];
         if (verbose) {
             console.error('🚀 Starting CLI-aligned MCP Server...');

package/dist/utils/config.js

@@ -446,6 +446,8 @@ export class CLIConfig {
         catch {
             // Invalid token, don't store user info or expiry
             this.config.tokenExpiry = undefined;
+            // Mark as non-JWT (e.g., OAuth/CLI token)
+            this.config.authMethod = this.config.authMethod || 'oauth';
         }
         await this.save();
     }
@@ -493,8 +495,32 @@ export class CLIConfig {
                 locallyValid = false;
             }
         }
-        // If expired locally, no need to check server
+        // If not locally valid, attempt server verification before failing
         if (!locallyValid) {
+            try {
+                const axios = (await import('axios')).default;
+                const endpoints = [
+                    'http://localhost:4000/v1/auth/verify-token',
+                    'https://auth.lanonasis.com/v1/auth/verify-token',
+                    'https://api.lanonasis.com/auth/verify'
+                ];
+                for (const endpoint of endpoints) {
+                    try {
+                        const resp = await axios.post(endpoint, { token }, { timeout: 3000 });
+                        if (resp.data?.valid === true) {
+                            this.authCheckCache = { isValid: true, timestamp: Date.now() };
+                            return true;
+                        }
+                    }
+                    catch {
+                        // try next endpoint
+                        continue;
+                    }
+                }
+            }
+            catch {
+                // ignore, will fall back to failure below
+            }
             this.authCheckCache = { isValid: false, timestamp: Date.now() };
             return false;
         }
@@ -515,7 +541,7 @@ export class CLIConfig {
                         break;
                     }
                 }
-                catch (err) {
+                catch {
                     // Try next endpoint
                     continue;
                 }
@@ -527,7 +553,7 @@ export class CLIConfig {
             this.authCheckCache = { isValid: true, timestamp: Date.now() };
             return true;
         }
-        catch (error) {
+        catch {
             // If all server checks fail, fall back to local validation
             // This allows offline usage but is less secure
             console.warn('⚠️  Unable to verify token with server, using local validation');
@@ -591,7 +617,7 @@ export class CLIConfig {
             await this.save();
             return true;
         }
-        catch (error) {
+        catch {
             // Increment failure count
             await this.incrementFailureCount();
             return false;
@@ -630,7 +656,7 @@ export class CLIConfig {
                 }
             }
         }
-        catch (error) {
+        catch {
             // If refresh fails, mark credentials as potentially invalid
             await this.incrementFailureCount();
         }
@@ -697,7 +723,9 @@ export class CLIConfig {
     }
     // MCP-specific helpers
     getMCPServerPath() {
-        return this.config.mcpServerPath || path.join(process.cwd(), 'onasis-gateway/mcp-server/server.js');
+        // Only return an explicitly configured path. No implicit bundled defaults.
+        // Returning an empty string if unset helps callers decide how to proceed safely.
+        return this.config.mcpServerPath || '';
     }
     getMCPServerUrl() {
         return this.config.discoveredServices?.mcp_ws_base ||

package/dist/utils/mcp-client.d.ts

@@ -4,6 +4,7 @@ interface MCPConnectionOptions {
     useRemote?: boolean;
     useWebSocket?: boolean;
     connectionMode?: 'local' | 'remote' | 'websocket';
+    localArgs?: string[];
 }
 /**
  * Interface for MCP tool arguments
@@ -24,10 +25,10 @@ export interface MCPToolResponse {
     title?: string;
     memory_type?: string;
     length?: number;
-    forEach?: (callback: (item: any, index: number) => void) => void;
+    forEach?: (callback: (item: unknown, index: number) => void) => void;
     code?: number;
     message?: string;
-    response?: any;
+    response?: unknown;
 }
 /**
  * Interface for MCP WebSocket messages
@@ -54,6 +55,7 @@ export declare class MCPClient {
     private healthCheckInterval;
     private connectionStartTime;
     private lastHealthCheck;
+    private activeConnectionMode;
     constructor();
     /**
      * Initialize the MCP client configuration