@uic-coe-connect/cli 0.13.1 → 0.13.2

package/dist/commands/integration.js

@@ -21,8 +21,17 @@ const REQUIRED_ENV = [
         optional: true,
     },
 ];
-/** The legacy fleet-wide credentials, still honoured but worth moving off. */
-const LEGACY_ENV = ["COE_ACCESS_TOKEN", "COE_EVENTS_TOKEN", "COE_NOTIFY_TOKEN"];
+/**
+ * Retired credentials. COEConnect no longer accepts any of them, and nothing
+ * reads them, so one found in an app's environment is a stale secret to delete
+ * rather than a working fallback.
+ */
+const LEGACY_ENV = [
+    "COE_ACCESS_TOKEN",
+    "COE_EVENTS_TOKEN",
+    "COE_NOTIFY_TOKEN",
+    "COE_ROLES_TOKEN",
+];
 export function registerIntegrationCommands() {
     register({
         name: "integration show",
@@ -87,7 +96,7 @@ export function registerIntegrationCommands() {
                     ],
                     ["Env present", REQUIRED_ENV.filter((e) => envKeys.has(e.key)).map((e) => e.key).join(", ") || "(none)"],
                     ["Env missing", missing.map((e) => e.key).join(", ") || "(none)"],
-                    ["Legacy env", legacy.join(", ") || "(none)"],
+                    ["Retired env", legacy.join(", ") || "(none)"],
                     ["Pipelines", `${pipelines.length}${pipelines.length > 0 ? (writesEnv ? ", writes .env" : ", NO env step") : ""}`],
                     ["Login reporting", usage ? (usage.reporting ? `yes — ${usage.distinctUsers} people in 30d` : "no logins reported yet") : "unknown"],
                 ]);
@@ -172,8 +181,9 @@ function nextSteps(f) {
         steps.push(`Set the missing environment variables: ${f.missing.join(", ")}`);
     }
     if (f.legacy.length > 0) {
-        steps.push(`Replace the legacy fleet-wide credentials (${f.legacy.join(", ")}) with COE_APP_TOKEN. ` +
-            "They still work, but they authenticate against every app at once.");
+        steps.push(`Delete the retired credentials (${f.legacy.join(", ")}) — nothing reads them any more. ` +
+            "coe env unset clears COEConnect's copy; the one on the VM has to go from the .env " +
+            "itself, because the env step never removes a key it doesn't know.");
     }
     if (!f.hasPipeline) {
         steps.push("Create a deploy pipeline: coe pipelines create <app> ...");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uic-coe-connect/cli",
-  "version": "0.13.1",
+  "version": "0.13.2",
   "description": "The coe CLI \u2014 manage COEConnect apps (pipelines, deploys, access, env) from a terminal, with browser-approved auth. Designed to be driven by an AI agent.",
   "type": "module",
   "bin": {