nous-token 0.2.0 → 0.2.1

package/PROTOCOL.md

@@ -87,7 +87,7 @@ Users identify themselves with an Ethereum wallet address. The wallet is the per
 
 ### Binding rules
 
-- **First bind wins**: Once a hash is linked to a wallet, it cannot be relinked to a different wallet. This prevents rebinding with expired or leaked API keys.
+- **First bind wins**: Once a hash is linked to a wallet, it cannot be relinked to a different wallet. This prevents rebinding with expired or leaked API keys. Binding is irreversible — verify your wallet address before your first API call through the gateway.
 - **Multiple hashes per wallet**: A user can link multiple API keys (hashes) to the same wallet. The leaderboard aggregates all hashes under one wallet.
 - **Wallet validation**: Must be a valid Ethereum address (`0x` + 40 hex chars). Invalid addresses are silently ignored.
 

package/cli/setup.ts

@@ -202,7 +202,15 @@ let wallet = loadWallet();
 const walletArg = process.argv.find(a => /^0x[a-fA-F0-9]{40}$/.test(a));
 if (walletArg) {
   wallet = walletArg.toLowerCase();
-} else if (!wallet) {
+} else if (wallet) {
+  // Existing wallet — ask user to confirm or change
+  const input = await ask(`  Wallet [${wallet.slice(0, 6)}...${wallet.slice(-4)}] (press Enter to keep, or paste new): `);
+  if (input && /^0x[a-fA-F0-9]{40}$/.test(input)) {
+    wallet = input.toLowerCase();
+  } else if (input) {
+    console.log("  \x1b[33mInvalid address format. Keeping current wallet.\x1b[0m");
+  }
+} else {
   const input = await ask("  Wallet address (0x...): ");
   if (/^0x[a-fA-F0-9]{40}$/.test(input)) {
     wallet = input.toLowerCase();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nous-token",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Open-source AI usage tracker. One command to track all your AI spending.",
   "type": "module",
   "main": "index.ts",