@lanonasis/cli 3.8.0 → 3.8.1

package/dist/commands/auth.js

@@ -707,7 +707,7 @@ async function handleOAuthFlow(config) {
         await config.setToken(tokens.access_token);
         await config.set('refresh_token', tokens.refresh_token);
         await config.set('token_expires_at', Date.now() + (tokens.expires_in * 1000));
-        await config.set('authMethod', 'oauth2');
+        await config.set('authMethod', 'oauth');
         // The OAuth access token from auth-gateway works as the API token for all services
         // Store it as the vendor key equivalent for MCP and API access
         spinner.text = 'Configuring unified access...';

package/dist/commands/config.js

@@ -391,8 +391,9 @@ export function configCommands(program) {
         else {
             console.log(chalk.green('   ✓ Authentication credentials found'));
             // Validate auth method consistency
-            if (vendorKey && authMethod !== 'vendor_key') {
-                console.log(chalk.yellow('   ⚠ Auth method mismatch (has vendor key but method is not vendor_key)'));
+            // Note: OAuth users can have vendorKey stored (for MCP access) while authMethod is 'oauth'
+            if (vendorKey && authMethod !== 'vendor_key' && authMethod !== 'oauth') {
+                console.log(chalk.yellow('   ⚠ Auth method mismatch (has vendor key but method is not vendor_key or oauth)'));
                 validation.issues.push('Auth method mismatch');
                 if (options.repair) {
                     config.set('authMethod', 'vendor_key');

package/dist/commands/mcp.js

@@ -169,6 +169,7 @@ export function mcpCommands(program) {
         const client = getMCPClient();
         await client.disconnect();
         console.log(chalk.green('✓ Disconnected from MCP server'));
+        process.exit(0);
     });
     // Status command
     mcp.command('status')
@@ -183,6 +184,7 @@ export function mcpCommands(program) {
         await config.init();
         let healthLabel = chalk.gray('Unknown');
         let healthDetails;
+        let isServiceReachable = false;
         try {
             const axios = (await import('axios')).default;
             // Derive MCP health URL from discovered REST base (e.g. https://mcp.lanonasis.com/api/v1 -> https://mcp.lanonasis.com/health)
@@ -207,14 +209,17 @@ export function mcpCommands(program) {
             const overallStatus = String(response.data?.status ?? '').toLowerCase();
             const ok = response.status === 200 && (!overallStatus || overallStatus === 'healthy');
             if (ok) {
-                healthLabel = chalk.green('Reachable');
+                healthLabel = chalk.green('Healthy');
+                isServiceReachable = true;
             }
             else {
                 healthLabel = chalk.yellow('Degraded');
+                isServiceReachable = true; // Service is reachable but degraded
             }
         }
         catch (error) {
             healthLabel = chalk.red('Unreachable');
+            isServiceReachable = false;
             if (error instanceof Error) {
                 healthDetails = error.message;
             }
@@ -224,7 +229,14 @@ export function mcpCommands(program) {
         }
         console.log(chalk.cyan('\n📊 MCP Connection Status'));
         console.log(chalk.cyan('========================'));
-        console.log(`Status: ${status.connected ? chalk.green('Connected') : chalk.red('Disconnected')}`);
+        // Show status based on service reachability, not in-memory connection state
+        // The CLI isn't a persistent daemon - "connected" means the service is available
+        if (isServiceReachable) {
+            console.log(`Status: ${chalk.green('Ready')} (service reachable)`);
+        }
+        else {
+            console.log(`Status: ${chalk.red('Unavailable')} (service unreachable)`);
+        }
         // Display mode with proper labels
         let modeDisplay;
         switch (status.mode) {
@@ -246,7 +258,8 @@ export function mcpCommands(program) {
         if (healthDetails && process.env.CLI_VERBOSE === 'true') {
             console.log(chalk.gray(`Health details: ${healthDetails}`));
         }
-        if (status.connected) {
+        // Show features when service is reachable
+        if (isServiceReachable) {
             if (status.mode === 'remote') {
                 console.log(`\n${chalk.cyan('Features:')}`);
                 console.log('• Real-time updates via SSE');
@@ -259,7 +272,12 @@ export function mcpCommands(program) {
                 console.log('• Authenticated WebSocket connection');
                 console.log('• Production-ready MCP server');
             }
+            console.log(chalk.green('\n✓ MCP tools are available. Run "lanonasis mcp tools" to see them.'));
+        }
+        else {
+            console.log(chalk.yellow('\n⚠ MCP service is not reachable. Run "lanonasis mcp diagnose" for troubleshooting.'));
         }
+        process.exit(0);
     });
     // List tools command
     mcp.command('tools')
@@ -456,6 +474,7 @@ export function mcpCommands(program) {
             console.log('  --prefer-local     : Use local stdio mode (development only)');
             console.log('  --auto             : Auto-detect based on configuration (default)');
         }
+        process.exit(0);
     });
     // Start MCP server for external clients
     mcp.command('start')
@@ -790,5 +809,6 @@ export function mcpCommands(program) {
             console.log(chalk.gray('   • Verify your network allows outbound HTTPS connections'));
             console.log(chalk.gray('   • Contact support if issues persist'));
         }
+        process.exit(0);
     });
 }

package/dist/commands/memory.js

@@ -31,9 +31,9 @@ export function memoryCommands(program) {
                         validate: (input) => input.length > 0 || 'Title is required'
                     },
                     {
-                        type: 'editor',
+                        type: 'input',
                         name: 'content',
-                        message: 'Memory content:',
+                        message: 'Memory content (or use -c flag for multi-line):',
                         default: content,
                         validate: (input) => input.length > 0 || 'Content is required'
                     },

package/dist/mcp/access-control.js

@@ -192,7 +192,7 @@ export class MemoryAccessControl {
             const apiUrl = this.config.get('apiUrl') || 'https://api.lanonasis.com';
             const token = this.config.get('token');
             const axios = (await import('axios')).default;
-            const response = await axios.get(`${apiUrl}/api/v1/memory/${memoryId}`, {
+            const response = await axios.get(`${apiUrl}/api/v1/memories/${memoryId}`, {
                 headers: {
                     'Authorization': `Bearer ${token}`,
                     'Content-Type': 'application/json'
@@ -210,7 +210,7 @@ export class MemoryAccessControl {
             const apiUrl = this.config.get('apiUrl') || 'https://api.lanonasis.com';
             const token = this.config.get('token');
             const axios = (await import('axios')).default;
-            const response = await axios.get(`${apiUrl}/api/v1/memory?user_id=${userId}`, {
+            const response = await axios.get(`${apiUrl}/api/v1/memories?user_id=${userId}`, {
                 headers: {
                     'Authorization': `Bearer ${token}`,
                     'Content-Type': 'application/json'

package/dist/mcp/server/lanonasis-server.js

@@ -407,7 +407,15 @@ export class LanonasisMCPServer {
                             text: `Authentication Error: ${error instanceof Error ? error.message : 'Authentication failed'}`
                         }
                     ],
-                    isError: true
+                    isError: true,
+                    task: {
+                        taskId: `${clientId}-${Date.now()}`,
+                        status: 'failed',
+                        ttl: null,
+                        createdAt: new Date().toISOString(),
+                        lastUpdatedAt: new Date().toISOString(),
+                        statusMessage: 'Authentication failed'
+                    }
                 };
             }
             this.updateConnectionActivity(clientId);
@@ -419,7 +427,14 @@ export class LanonasisMCPServer {
                             type: 'text',
                             text: JSON.stringify(result, null, 2)
                         }
-                    ]
+                    ],
+                    task: {
+                        taskId: `${clientId}-${Date.now()}`,
+                        status: 'completed',
+                        ttl: null,
+                        createdAt: new Date().toISOString(),
+                        lastUpdatedAt: new Date().toISOString()
+                    }
                 };
             }
             catch (error) {
@@ -430,7 +445,15 @@ export class LanonasisMCPServer {
                             text: `Error: ${error instanceof Error ? error.message : 'Unknown error'}`
                         }
                     ],
-                    isError: true
+                    isError: true,
+                    task: {
+                        taskId: `${clientId}-${Date.now()}`,
+                        status: 'failed',
+                        ttl: null,
+                        createdAt: new Date().toISOString(),
+                        lastUpdatedAt: new Date().toISOString(),
+                        statusMessage: error instanceof Error ? error.message : 'Unknown error'
+                    }
                 };
             }
         });

package/dist/utils/api.js

@@ -99,40 +99,40 @@ export class APIClient {
         });
         return response.data;
     }
-    // Memory operations - aligned with existing schema
-    // All memory endpoints use /api/v1/memory path
+    // Memory operations - aligned with REST API canonical endpoints
+    // All memory endpoints use /api/v1/memories path (plural, per REST conventions)
     async createMemory(data) {
-        const response = await this.client.post('/api/v1/memory', data);
+        const response = await this.client.post('/api/v1/memories', data);
         return response.data;
     }
     async getMemories(params = {}) {
-        const response = await this.client.get('/api/v1/memory', { params });
+        const response = await this.client.get('/api/v1/memories', { params });
         return response.data;
     }
     async getMemory(id) {
-        const response = await this.client.get(`/api/v1/memory/${id}`);
+        const response = await this.client.get(`/api/v1/memories/${id}`);
         return response.data;
     }
     async updateMemory(id, data) {
-        const response = await this.client.put(`/api/v1/memory/${id}`, data);
+        const response = await this.client.put(`/api/v1/memories/${id}`, data);
         return response.data;
     }
     async deleteMemory(id) {
-        await this.client.delete(`/api/v1/memory/${id}`);
+        await this.client.delete(`/api/v1/memories/${id}`);
     }
     async searchMemories(query, options = {}) {
-        const response = await this.client.post('/api/v1/memory/search', {
+        const response = await this.client.post('/api/v1/memories/search', {
             query,
             ...options
         });
         return response.data;
     }
     async getMemoryStats() {
-        const response = await this.client.get('/api/v1/memory/stats');
+        const response = await this.client.get('/api/v1/memories/stats');
         return response.data;
     }
     async bulkDeleteMemories(memoryIds) {
-        const response = await this.client.post('/api/v1/memory/bulk/delete', {
+        const response = await this.client.post('/api/v1/memories/bulk/delete', {
             memory_ids: memoryIds
         });
         return response.data;

package/dist/utils/config.js

@@ -499,7 +499,11 @@ export class CLIConfig {
         }
         // Store a reference marker in config (not the actual key)
         this.config.vendorKey = 'stored_in_api_key_storage';
-        this.config.authMethod = 'vendor_key';
+        // Only set authMethod to 'vendor_key' if not already set to OAuth
+        // This prevents overwriting OAuth auth method when storing the token for MCP access
+        if (!this.config.authMethod || !['oauth', 'oauth2', 'jwt'].includes(this.config.authMethod)) {
+            this.config.authMethod = 'vendor_key';
+        }
         this.config.lastValidated = new Date().toISOString();
         await this.resetFailureCount(); // Reset failure count on successful auth
         await this.save();
@@ -692,11 +696,41 @@ export class CLIConfig {
                 this.authCheckCache = { isValid: true, timestamp: Date.now() };
                 return true;
             }
-            // For vendor keys, we trust that they were validated during setVendorKey()
-            // and rely on the lastValidated timestamp. For additional security,
-            // the server should revoke keys that are invalid.
-            this.authCheckCache = { isValid: true, timestamp: Date.now() };
-            return true;
+            // Vendor key not recently validated - verify with server
+            try {
+                await this.discoverServices();
+                const authBase = this.config.discoveredServices?.auth_base || 'https://auth.lanonasis.com';
+                // Ping auth health with vendor key to verify it's still valid
+                await this.pingAuthHealth(axios, authBase, {
+                    'X-API-Key': vendorKey,
+                    'X-Auth-Method': 'vendor_key',
+                    'X-Project-Scope': 'lanonasis-maas'
+                }, { timeout: 5000, proxy: false });
+                // Update last validated timestamp on success
+                this.config.lastValidated = new Date().toISOString();
+                await this.save().catch(() => { }); // Don't fail auth check if save fails
+                this.authCheckCache = { isValid: true, timestamp: Date.now() };
+                return true;
+            }
+            catch (error) {
+                // Server validation failed - check for grace period (7 days offline)
+                const gracePeriod = 7 * 24 * 60 * 60 * 1000;
+                const withinGracePeriod = lastValidated &&
+                    (Date.now() - new Date(lastValidated).getTime()) < gracePeriod;
+                if (withinGracePeriod) {
+                    if (process.env.CLI_VERBOSE === 'true') {
+                        console.warn('⚠️  Unable to validate vendor key with server, using cached validation');
+                    }
+                    this.authCheckCache = { isValid: true, timestamp: Date.now() };
+                    return true;
+                }
+                // Grace period expired - require server validation
+                if (process.env.CLI_VERBOSE === 'true') {
+                    console.warn('⚠️  Vendor key validation failed and grace period expired');
+                }
+                this.authCheckCache = { isValid: false, timestamp: Date.now() };
+                return false;
+            }
         }
         // Handle token-based authentication
         const token = this.getToken();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lanonasis/cli",
-  "version": "3.8.0",
+  "version": "3.8.1",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",