@lanonasis/cli 3.7.3 → 3.7.4

package/README.md

@@ -26,9 +26,9 @@ lanonasis --version  # or onasis --version
 onasis guide
 
 # Quick manual setup
-onasis init                                    # Initialize configuration
-onasis login --vendor-key pk_xxx.sk_xxx      # Authenticate with vendor key
-onasis health                                 # Verify system health
+onasis init                                      # Initialize configuration
+onasis login --vendor-key <your-vendor-key>      # Authenticate with vendor key
+onasis health                                   # Verify system health
 
 # Create your first memory
 onasis memory create --title "Welcome" --content "My first memory"
@@ -85,10 +85,10 @@ onasis login --vendor-key pk_xxxxx.sk_xxxxx  // ✅ Automatically hashed
 
 ### 1. Vendor Key Authentication (Recommended)
 
-Best for API integrations and automation:
+Best for API integrations and automation. Copy the vendor key value exactly as shown in your LanOnasis dashboard (keys may vary in format):
 
 ```bash
-onasis login --vendor-key pk_xxxxx.sk_xxxxx
+onasis login --vendor-key <your-vendor-key>
 ```
 
 ### 2. OAuth Browser Authentication
@@ -288,7 +288,7 @@ Location: `~/.maas/config.json`
   "apiUrl": "https://api.lanonasis.com/api/v1",
   "defaultOutputFormat": "table",
   "mcpPreference": "auto",
-  "vendorKey": "pk_xxxxx.sk_xxxxx"
+  "vendorKey": "<your-vendor-key>"
 }
 ```
 
@@ -374,7 +374,7 @@ onasis auth status
 
 # Re-authenticate
 onasis auth logout
-onasis login --vendor-key pk_xxx.sk_xxx
+onasis login --vendor-key <your-vendor-key>
 ```
 
 #### Connection Issues

package/dist/mcp/access-control.js

@@ -64,8 +64,16 @@ export class MemoryAccessControl {
             // Get shared memories based on permissions
             const sharedMemories = await this.getSharedMemories(userId, appId);
             // Combine and deduplicate
-            const allMemories = [...new Set([...ownMemories, ...sharedMemories])];
-            return allMemories;
+            const combined = [...ownMemories, ...sharedMemories];
+            const deduped = [];
+            const seen = new Set();
+            combined.forEach(memoryId => {
+                if (!seen.has(memoryId)) {
+                    seen.add(memoryId);
+                    deduped.push(memoryId);
+                }
+            });
+            return deduped;
         }
         catch (error) {
             logger.error('Failed to get accessible memories', { error, userId, appId });

package/dist/mcp/client/enhanced-client.js

@@ -45,11 +45,11 @@ export class EnhancedMCPClient extends EventEmitter {
         }));
         await Promise.allSettled(connectionPromises);
         // Start health monitoring for connected servers
-        for (const [name, success] of results) {
+        results.forEach((success, name) => {
             if (success) {
                 this.startHealthMonitoring(name);
             }
-        }
+        });
         return results;
     }
     /**
@@ -327,12 +327,12 @@ export class EnhancedMCPClient extends EventEmitter {
      */
     async disconnectAll() {
         // Stop all health monitoring
-        for (const interval of this.healthCheckIntervals.values()) {
+        this.healthCheckIntervals.forEach(interval => {
             clearInterval(interval);
-        }
+        });
         this.healthCheckIntervals.clear();
         // Disconnect all clients
-        for (const [name, client] of this.clients) {
+        await Promise.all(Array.from(this.clients.entries()).map(async ([name, client]) => {
             try {
                 await client.close();
                 console.log(chalk.gray(`Disconnected from ${name}`));
@@ -340,7 +340,7 @@ export class EnhancedMCPClient extends EventEmitter {
             catch {
                 console.log(chalk.yellow(`Warning: Error disconnecting from ${name}`));
             }
-        }
+        }));
         this.clients.clear();
         this.transports.clear();
         this.connectionStatus.clear();

package/dist/mcp/schemas/tool-schemas.d.ts

@@ -202,13 +202,13 @@ export declare const SystemConfigSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     value?: any;
     action?: "get" | "set" | "reset";
-    key?: string;
     scope?: "user" | "global";
+    key?: string;
 }, {
     value?: any;
     action?: "get" | "set" | "reset";
-    key?: string;
     scope?: "user" | "global";
+    key?: string;
 }>;
 export declare const BulkOperationSchema: z.ZodObject<{
     operation: z.ZodEnum<["create", "update", "delete"]>;
@@ -580,13 +580,13 @@ export declare const MCPSchemas: {
         }, "strip", z.ZodTypeAny, {
             value?: any;
             action?: "get" | "set" | "reset";
-            key?: string;
             scope?: "user" | "global";
+            key?: string;
         }, {
             value?: any;
             action?: "get" | "set" | "reset";
-            key?: string;
             scope?: "user" | "global";
+            key?: string;
         }>;
     };
     operations: {

package/dist/mcp/server/lanonasis-server.js

@@ -916,7 +916,7 @@ Please choose an option (1-4):`
             connectionsByTransport: {}
         };
         const fiveMinutesAgo = Date.now() - (5 * 60 * 1000);
-        for (const connection of this.connectionPool.values()) {
+        this.connectionPool.forEach(connection => {
             // Count as active if there was activity in the last 5 minutes
             if (connection.lastActivity.getTime() > fiveMinutesAgo) {
                 stats.activeConnections++;
@@ -926,7 +926,7 @@ Please choose an option (1-4):`
             }
             stats.connectionsByTransport[connection.transport] =
                 (stats.connectionsByTransport[connection.transport] || 0) + 1;
-        }
+        });
         return stats;
     }
     /**
@@ -953,12 +953,13 @@ Please choose an option (1-4):`
     cleanupStaleConnections() {
         const tenMinutesAgo = Date.now() - (10 * 60 * 1000);
         const staleConnections = [];
-        for (const [clientId, connection] of this.connectionPool.entries()) {
+        this.connectionPool.forEach((connection, clientId) => {
             if (connection.lastActivity.getTime() < tenMinutesAgo) {
                 staleConnections.push(clientId);
             }
-        }
-        for (const clientId of staleConnections) {
+        });
+        for (let i = 0; i < staleConnections.length; i++) {
+            const clientId = staleConnections[i];
             this.removeConnection(clientId);
             if (this.options.verbose) {
                 console.log(chalk.yellow(`🧹 Cleaned up stale connection: ${clientId}`));
@@ -1385,12 +1386,12 @@ Please choose an option (1-4):`
      */
     getTransportStatus() {
         const failures = {};
-        for (const [transport, failure] of this.transportFailures.entries()) {
+        this.transportFailures.forEach((failure, transport) => {
             failures[transport] = {
                 count: failure.count,
                 lastFailure: failure.lastFailure.toISOString()
             };
-        }
+        });
         return {
             supportedTransports: this.supportedTransports,
             preferredTransport: this.options.preferredTransport || 'stdio',

package/dist/mcp/transports/transport-manager.js

@@ -411,9 +411,9 @@ export class MCPTransportManager {
      */
     getStatuses() {
         const statuses = {};
-        for (const [name, transport] of this.transports) {
+        this.transports.forEach((transport, name) => {
             statuses[name] = transport.isConnected();
-        }
+        });
         return statuses;
     }
     /**

package/dist/mcp-server.js

@@ -51,10 +51,14 @@ export class CLIMCPServer {
         }
         candidates.add(join(process.cwd(), 'mcp-server/dist/cli-aligned-mcp-server.js'));
         candidates.add(join(__dirname, '../../../mcp-server/dist/cli-aligned-mcp-server.js'));
-        for (const candidate of candidates) {
-            if (candidate && existsSync(candidate)) {
-                return candidate;
+        let resolvedPath = null;
+        candidates.forEach(candidate => {
+            if (!resolvedPath && candidate && existsSync(candidate)) {
+                resolvedPath = candidate;
             }
+        });
+        if (resolvedPath) {
+            return resolvedPath;
         }
         throw new Error('Unable to locate the CLI-aligned MCP server. Set MCP_SERVER_PATH or install @lanonasis/mcp-server.');
     }

package/dist/utils/config.d.ts

@@ -63,6 +63,7 @@ export declare class CLIConfig {
     getApiUrl(): string;
     getApiUrlsWithFallbacks(): string[];
     discoverServices(verbose?: boolean): Promise<void>;
+    private normalizeServiceError;
     private handleServiceDiscoveryFailure;
     private categorizeServiceDiscoveryError;
     private resolveFallbackEndpoints;

package/dist/utils/config.js

@@ -4,6 +4,7 @@ import * as os from 'os';
 import { jwtDecode } from 'jwt-decode';
 import { randomUUID } from 'crypto';
 import { ApiKeyStorage } from '@lanonasis/oauth-client';
+import axios from 'axios';
 export class CLIConfig {
     configDir;
     configPath;
@@ -183,8 +184,9 @@ export class CLIConfig {
     }
     // Enhanced Service Discovery Integration
     async discoverServices(verbose = false) {
-        // Skip service discovery in test environment
-        if (process.env.NODE_ENV === 'test' || process.env.SKIP_SERVICE_DISCOVERY === 'true') {
+        const isTestEnvironment = process.env.NODE_ENV === 'test';
+        const forceDiscovery = process.env.FORCE_SERVICE_DISCOVERY === 'true';
+        if ((isTestEnvironment && !forceDiscovery) || process.env.SKIP_SERVICE_DISCOVERY === 'true') {
             if (!this.config.discoveredServices) {
                 this.config.discoveredServices = {
                     auth_base: 'https://auth.lanonasis.com',
@@ -236,11 +238,8 @@ export class CLIConfig {
             throw lastError || new Error('All service discovery URLs failed');
         }
         try {
-            // Map discovery response to our config format
             const discovered = response.data;
-            // Extract auth base, but filter out localhost URLs
             let authBase = discovered.auth?.base || discovered.auth?.login?.replace('/auth/login', '') || '';
-            // Override localhost with production auth endpoint
             if (authBase.includes('localhost') || authBase.includes('127.0.0.1')) {
                 authBase = 'https://auth.lanonasis.com';
             }
@@ -254,7 +253,6 @@ export class CLIConfig {
                 project_scope: 'lanonasis-maas'
             };
             this.config.apiUrl = memoryBase;
-            // Mark discovery as successful
             this.config.lastServiceDiscovery = new Date().toISOString();
             await this.save();
             if (verbose) {
@@ -265,10 +263,24 @@ export class CLIConfig {
             }
         }
         catch (error) {
-            // Enhanced error handling with user-visible messages
-            await this.handleServiceDiscoveryFailure(error, verbose);
+            const normalizedError = this.normalizeServiceError(error);
+            await this.handleServiceDiscoveryFailure(normalizedError, verbose);
         }
     }
+    normalizeServiceError(error) {
+        if (error && typeof error === 'object') {
+            if (error instanceof Error) {
+                return {
+                    ...error,
+                    message: error.message
+                };
+            }
+            return error;
+        }
+        return {
+            message: typeof error === 'string' ? error : JSON.stringify(error)
+        };
+    }
     async handleServiceDiscoveryFailure(error, verbose) {
         const errorType = this.categorizeServiceDiscoveryError(error);
         if (verbose || process.env.CLI_VERBOSE === 'true') {
@@ -294,7 +306,6 @@ export class CLIConfig {
                     console.log(`   Reason: ${error.message || 'Unknown error'}`);
             }
         }
-        // Use cached endpoints if available and recent (within 24 hours)
         if (this.config.discoveredServices && this.config.lastServiceDiscovery) {
             const lastDiscovery = new Date(this.config.lastServiceDiscovery);
             const hoursSinceDiscovery = (Date.now() - lastDiscovery.getTime()) / (1000 * 60 * 60);
@@ -311,7 +322,6 @@ export class CLIConfig {
             project_scope: 'lanonasis-maas'
         };
         this.config.apiUrl = fallback.endpoints.memory_base;
-        // Mark as fallback (don't set lastServiceDiscovery)
         await this.save();
         this.logFallbackUsage(fallback.source, this.config.discoveredServices);
         if (verbose) {
@@ -331,7 +341,7 @@ export class CLIConfig {
                     return 'timeout';
             }
         }
-        if (error.response?.status >= 500) {
+        if ((error.response?.status ?? 0) >= 500) {
             return 'server_error';
         }
         if (error.response?.status === 404) {
@@ -421,9 +431,17 @@ export class CLIConfig {
             // Initialize with defaults first
             await this.discoverServices();
         }
+        const currentServices = this.config.discoveredServices ?? {
+            auth_base: 'https://auth.lanonasis.com',
+            memory_base: 'https://mcp.lanonasis.com/api/v1',
+            mcp_base: 'https://mcp.lanonasis.com/api/v1',
+            mcp_ws_base: 'wss://mcp.lanonasis.com/ws',
+            mcp_sse_base: 'https://mcp.lanonasis.com/api/v1/events',
+            project_scope: 'lanonasis-maas'
+        };
         // Merge manual overrides with existing endpoints
         this.config.discoveredServices = {
-            ...this.config.discoveredServices,
+            ...currentServices,
             ...endpoints
         };
         // Mark as manually configured
@@ -483,56 +501,26 @@ export class CLIConfig {
         return true;
     }
     async validateVendorKeyWithServer(vendorKey) {
+        if (process.env.SKIP_SERVER_VALIDATION === 'true') {
+            return;
+        }
         try {
             // Import axios dynamically to avoid circular dependency
-            const axios = (await import('axios')).default;
             // Ensure service discovery is done
             await this.discoverServices();
             const authBase = this.config.discoveredServices?.auth_base || 'https://auth.lanonasis.com';
-            const normalizedBase = authBase.replace(/\/$/, '');
-            // Try multiple validation endpoints
-            const validationEndpoints = [
-                `${normalizedBase}/api/v1/auth/validate`,
-                `${normalizedBase}/api/v1/auth/validate-vendor-key`,
-                `${normalizedBase}/v1/auth/validate`
-            ];
-            let lastError;
-            let validated = false;
-            for (const endpoint of validationEndpoints) {
-                try {
-                    const response = await axios.post(endpoint, { key: vendorKey }, {
-                        headers: {
-                            'X-API-Key': vendorKey,
-                            'X-Auth-Method': 'vendor_key',
-                            'X-Project-Scope': 'lanonasis-maas',
-                            'Content-Type': 'application/json'
-                        },
-                        timeout: 10000,
-                        proxy: false
-                    });
-                    // Check if response indicates validation success
-                    if (response.data && (response.data.valid === true || response.data.success === true)) {
-                        validated = true;
-                        break;
-                    }
-                }
-                catch (error) {
-                    lastError = error;
-                    // Continue to next endpoint if this one fails
-                    continue;
-                }
-            }
-            if (!validated && lastError) {
-                throw lastError;
-            }
-            else if (!validated) {
-                throw new Error('Vendor key validation failed: Unable to validate key with server');
-            }
+            // Use pingAuthHealth for validation (simpler and more reliable)
+            await this.pingAuthHealth(axios, authBase, {
+                'X-API-Key': vendorKey,
+                'X-Auth-Method': 'vendor_key',
+                'X-Project-Scope': 'lanonasis-maas'
+            }, { timeout: 10000, proxy: false });
         }
         catch (error) {
+            const normalizedError = this.normalizeServiceError(error);
             // Provide specific error messages based on response
-            if (error.response?.status === 401) {
-                const errorData = error.response.data;
+            if (normalizedError.response?.status === 401) {
+                const errorData = normalizedError.response.data;
                 if (errorData?.error?.includes('expired') || errorData?.message?.includes('expired')) {
                     throw new Error('Vendor key validation failed: Key has expired. Please generate a new key from your dashboard.');
                 }
@@ -546,29 +534,29 @@ export class CLIConfig {
                     throw new Error('Vendor key validation failed: Authentication failed. The key may be invalid, expired, or revoked.');
                 }
             }
-            else if (error.response?.status === 403) {
+            else if (normalizedError.response?.status === 403) {
                 throw new Error('Vendor key access denied. The key may not have sufficient permissions for this operation.');
             }
-            else if (error.response?.status === 429) {
+            else if (normalizedError.response?.status === 429) {
                 throw new Error('Too many validation attempts. Please wait a moment before trying again.');
             }
-            else if (error.response?.status >= 500) {
+            else if ((normalizedError.response?.status ?? 0) >= 500) {
                 throw new Error('Server error during validation. Please try again in a few moments.');
             }
-            else if (error.code === 'ECONNREFUSED') {
+            else if (normalizedError.code === 'ECONNREFUSED') {
                 throw new Error('Cannot connect to authentication server. Please check your internet connection and try again.');
             }
-            else if (error.code === 'ENOTFOUND') {
+            else if (normalizedError.code === 'ENOTFOUND') {
                 throw new Error('Authentication server not found. Please check your internet connection.');
             }
-            else if (error.code === 'ETIMEDOUT') {
+            else if (normalizedError.code === 'ETIMEDOUT') {
                 throw new Error('Validation request timed out. Please check your internet connection and try again.');
             }
-            else if (error.code === 'ECONNRESET') {
+            else if (normalizedError.code === 'ECONNRESET') {
                 throw new Error('Connection was reset during validation. Please try again.');
             }
             else {
-                throw new Error(`Vendor key validation failed: ${error.message || 'Unknown error'}`);
+                throw new Error(`Vendor key validation failed: ${normalizedError.message || 'Unknown error'}`);
             }
         }
     }
@@ -731,7 +719,6 @@ export class CLIConfig {
         // If not locally valid, attempt server verification before failing
         if (!locallyValid) {
             try {
-                const axios = (await import('axios')).default;
                 const endpoints = [
                     'http://localhost:4000/v1/auth/verify-token',
                     'https://auth.lanonasis.com/v1/auth/verify-token'
@@ -768,7 +755,6 @@ export class CLIConfig {
         }
         // Verify with server (security check) for tokens that haven't been validated recently
         try {
-            const axios = (await import('axios')).default;
             // Try auth-gateway first (port 4000), then fall back to Netlify function
             const endpoints = [
                 'http://localhost:4000/v1/auth/verify-token',
@@ -880,7 +866,6 @@ export class CLIConfig {
                 return false;
             }
             // Import axios dynamically to avoid circular dependency
-            const axios = (await import('axios')).default;
             // Ensure service discovery is done
             await this.discoverServices();
             const authBase = this.config.discoveredServices?.auth_base || 'https://auth.lanonasis.com';
@@ -925,7 +910,6 @@ export class CLIConfig {
             // Refresh if token expires within 5 minutes
             if (exp > 0 && (exp - now) < 300) {
                 // Import axios dynamically
-                const axios = (await import('axios')).default;
                 await this.discoverServices();
                 const authBase = this.config.discoveredServices?.auth_base || 'https://auth.lanonasis.com';
                 // Attempt token refresh

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lanonasis/cli",
-  "version": "3.7.3",
+  "version": "3.7.4",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",