@lanonasis/cli 3.9.1 → 3.9.2

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog - @lanonasis/cli
 
+## [3.9.2] - 2026-02-02
+
+### 🐛 Bug Fixes
+
+- **Auth Method Override**: Fixed vendor key authentication not overriding previous OAuth `authMethod`
+  - When users explicitly authenticate with vendor key after OAuth, the `authMethod` is now correctly set to `vendor_key`
+  - This fixes "Authenticated: No" status after successful vendor key authentication
+  - Reverted changes from 3.9.1 that incorrectly removed vendor key storage from OAuth flow
+
 ## [3.9.1] - 2026-02-01
 
 ### 🔐 Authentication Fixes

package/dist/commands/auth.js

@@ -606,6 +606,10 @@ async function handleVendorKeyAuth(vendorKey, config) {
     const spinner = ora('Validating vendor key...').start();
     try {
         await config.setVendorKey(vendorKey);
+        // Explicitly set authMethod to vendor_key when user does explicit vendor key auth
+        // This overrides any previous OAuth authMethod
+        await config.set('authMethod', 'vendor_key');
+        await config.save();
         // Test the vendor key with a health check
         await apiClient.get('/health');
         spinner.succeed('Vendor key authentication successful');
@@ -702,22 +706,23 @@ async function handleOAuthFlow(config) {
         }
         const tokens = await exchangeCodeForTokens(code, pkce.verifier, authBase, redirectUri);
         spinner.succeed('Access tokens received');
-        // Store OAuth tokens - these are auth-gateway tokens from /oauth/token
-        // Note: OAuth tokens are valid for MCP services but not for direct API access
+        // Store OAuth tokens - these are already valid auth-gateway tokens from /oauth/token
+        // No need for additional exchange since /oauth/token returns auth-gateway's own tokens
         await config.setToken(tokens.access_token);
         await config.set('refresh_token', tokens.refresh_token);
         await config.set('token_expires_at', Date.now() + (tokens.expires_in * 1000));
         await config.set('authMethod', 'oauth');
-        spinner.succeed('OAuth tokens stored');
+        // The OAuth access token from auth-gateway works as the API token for all services
+        // Store it as the vendor key equivalent for MCP and API access
+        spinner.text = 'Configuring unified access...';
+        spinner.start();
+        // Use the OAuth access token directly - it's already an auth-gateway token
+        await config.setVendorKey(tokens.access_token);
+        spinner.succeed('Unified authentication configured');
         console.log();
         console.log(chalk.green('✓ OAuth2 authentication successful'));
-        console.log(colors.info('You can now use MCP integration features'));
-        console.log();
-        console.log(chalk.yellow('Note: ') + chalk.gray('OAuth login enables MCP integration.'));
-        console.log(chalk.gray('For direct CLI memory commands, use:'));
-        console.log(chalk.cyan('  lanonasis auth login --vendor') + chalk.gray(' (get a vendor key from dashboard)'));
-        console.log(chalk.gray('  OR'));
-        console.log(chalk.cyan('  lanonasis auth login --credentials') + chalk.gray(' (use username/password)'));
+        console.log(colors.info('You can now use all Lanonasis services'));
+        console.log(chalk.gray('✓ MCP, API, and CLI access configured'));
         process.exit(0);
     }
     catch (error) {

package/dist/utils/api.js

@@ -60,17 +60,7 @@ export class APIClient {
                 const { status, data } = error.response;
                 if (status === 401) {
                     console.error(chalk.red('✖ Authentication failed'));
-                    // Check if user is using OAuth - OAuth tokens only work with MCP, not direct API
-                    const authMethod = this.config.get('authMethod');
-                    if (authMethod === 'oauth') {
-                        console.log(chalk.yellow('\nNote: OAuth tokens are for MCP integration only.'));
-                        console.log(chalk.gray('For direct API access, you have two options:'));
-                        console.log(chalk.gray('  1. Get a vendor key from the dashboard: ') + chalk.cyan('lanonasis auth login --vendor'));
-                        console.log(chalk.gray('  2. Login with username/password: ') + chalk.cyan('lanonasis auth login --credentials'));
-                    }
-                    else {
-                        console.log(chalk.yellow('Please run:'), chalk.white('lanonasis auth login'));
-                    }
+                    console.log(chalk.yellow('Please run:'), chalk.white('memory login'));
                     process.exit(1);
                 }
                 if (status === 403) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lanonasis/cli",
-  "version": "3.9.1",
+  "version": "3.9.2",
   "description": "Professional CLI for LanOnasis Memory as a Service (MaaS) with MCP support, seamless inline editing, and enterprise-grade security",
   "keywords": [
     "lanonasis",