@wayai/cli 0.3.139 → 0.3.140

package/dist/index.js

@@ -8111,8 +8111,9 @@ var init_contracts = __esm({
       seats_scaling: external_exports.enum(["fixed", "per_quantity"]).optional(),
       is_active: external_exports.boolean().optional(),
       // Rekor entitlement allowances (rekor-platform-contracts §2.2). Editable here for the
-      // same reason `messages_per_unit` is: otherwise the only way to change an allowance in
-      // production is a code deploy plus a seed-version bump.
+      // same reason `messages_per_unit` is — and this route is now the only way to change an
+      // allowance on a live plan at all: the seed establishes a plan row and never rewrites
+      // one, so a seed-version bump no longer moves these values (see `seed.ts`).
       rekor_ops_tenths_included: external_exports.number().int().min(0).optional(),
       rekor_max_records: external_exports.number().int().min(0).optional(),
       rekor_import_rows_included: external_exports.number().int().min(0).optional(),
@@ -13554,8 +13555,9 @@ var init_dist = __esm({
       seats_scaling: external_exports.enum(["fixed", "per_quantity"]).optional(),
       is_active: external_exports.boolean().optional(),
       // Rekor entitlement allowances (rekor-platform-contracts §2.2). Editable here for the
-      // same reason `messages_per_unit` is: otherwise the only way to change an allowance in
-      // production is a code deploy plus a seed-version bump.
+      // same reason `messages_per_unit` is — and this route is now the only way to change an
+      // allowance on a live plan at all: the seed establishes a plan row and never rewrites
+      // one, so a seed-version bump no longer moves these values (see `seed.ts`).
       rekor_ops_tenths_included: external_exports.number().int().min(0).optional(),
       rekor_max_records: external_exports.number().int().min(0).optional(),
       rekor_import_rows_included: external_exports.number().int().min(0).optional(),
@@ -15532,8 +15534,11 @@ async function migrateLegacyTokens() {
   }
   return null;
 }
+function envTokenOverride() {
+  return process.env.WAYAI_TOKEN || void 0;
+}
 async function getToken() {
-  const envToken = process.env.WAYAI_TOKEN;
+  const envToken = envTokenOverride();
   if (envToken) {
     if (identifyTokenType(envToken) === "way_token") {
       return { kind: "way", token: envToken };
@@ -16011,6 +16016,7 @@ var init_report_inbox = __esm({
 // src/commands/login.ts
 var login_exports = {};
 __export(login_exports, {
+  envTokenOverrideWarning: () => envTokenOverrideWarning,
   loginCommand: () => loginCommand,
   missingRefreshTokenWarning: () => missingRefreshTokenWarning,
   parseApiUrl: () => parseApiUrl
@@ -16033,6 +16039,10 @@ function parseApiUrl(args2) {
   }
   return DEFAULT_API_URL;
 }
+function envTokenOverrideWarning(override2) {
+  if (!override2) return null;
+  return "Warning: WAYAI_TOKEN is set in this shell and takes precedence over the keyring, so commands will keep authenticating as that token \u2014 not the login you just completed. Run `unset WAYAI_TOKEN` to use it.";
+}
 function missingRefreshTokenWarning(refreshToken) {
   if (refreshToken) return null;
   return "Warning: no refresh token was issued \u2014 this session will expire when the access token does (~1h) and you will need to run `wayai login` again. This usually means the `offline_access` scope was not granted on the AuthKit application.";
@@ -16092,6 +16102,9 @@ Open this URL in your browser to log in:
     const refreshWarning = missingRefreshTokenWarning(tokens.refresh_token);
     if (refreshWarning) console.warn(`
 ${refreshWarning}`);
+    const overrideWarning = envTokenOverrideWarning(envTokenOverride());
+    if (overrideWarning) console.warn(`
+${overrideWarning}`);
     await nudgeReportActions(apiUrl, tokens.access_token);
   } catch (err) {
     console.error(`
@@ -16119,6 +16132,9 @@ async function loginWithToken(apiUrl) {
   await setWayToken(token);
   writeConfig({ api_url: apiUrl });
   console.log("\nLogin successful! Token stored in OS keyring; metadata at ~/.wayai/config.json");
+  const overrideWarning = envTokenOverrideWarning(envTokenOverride());
+  if (overrideWarning) console.warn(`
+${overrideWarning}`);
   await nudgeReportActions(apiUrl, token);
 }
 async function tryOpenBrowser(url) {
@@ -16170,7 +16186,7 @@ async function logoutCommand() {
     console.log("Not logged in.");
     return;
   }
-  const envOverrideActive = !!process.env.WAYAI_TOKEN;
+  const envOverrideActive = !!envTokenOverride();
   await clearTokens();
   if (envOverrideActive) {
     console.log("Tokens cleared from keyring and file. Note: WAYAI_TOKEN env var is still set in this shell \u2014 unset it to fully log out.");