securenow 7.6.3 → 7.6.4

package/cli/apiKey.js

@@ -45,7 +45,7 @@ async function clear(args, flags) {
 async function show() {
   const key = config.getApiKey();
   if (!key) {
-    ui.info('No API key stored in credentials. Run `npx securenow login` or `npx securenow api-key set snk_live_...`.');
+    ui.info('Runtime firewall enforcement key is missing. Run `npx securenow login` or `npx securenow api-key set snk_live_...` to refresh .securenow/credentials.json.');
     return;
   }
   console.log(maskKey(key));

package/cli/credentials.js

@@ -66,7 +66,7 @@ async function runtime(_args, flags) {
     warn('No app key found. Run `npx securenow login` first so telemetry routes to the selected app.');
   }
   if (!creds.apiKey) {
-    warn('No firewall API key found. Run `npx securenow login` or `npx securenow api-key set snk_live_...` first.');
+    warn('Runtime firewall enforcement key is missing. Run `npx securenow login` or `npx securenow api-key set snk_live_...` before generating production runtime credentials.');
   }
 
   if (flags.stdout) {

package/cli/diagnostics.js

@@ -353,8 +353,10 @@ async function doctor(_args, flags) {
   if (cfg.instance === 'https://freetrial.securenow.ai:4318') {
     warnings.push('Using the free-trial collector. For production, set app.instance in .securenow/credentials.json.');
   }
-  if (!cfg.apiKey) {
-    warnings.push('No snk_live firewall API key is resolvable. Run `npx securenow login` or `npx securenow api-key set`.');
+  if (!cfg.apiKey && token) {
+    warnings.push('CLI/MCP is authenticated with your SecureNow session token. Runtime firewall enforcement key is missing. Run `npx securenow login` or `npx securenow api-key set snk_live_...` to refresh .securenow/credentials.json.');
+  } else if (!cfg.apiKey) {
+    warnings.push('Runtime firewall enforcement key is missing. Run `npx securenow login` or `npx securenow api-key set snk_live_...` to refresh .securenow/credentials.json.');
   }
 
   const ok = checks.every((c) => c.ok);

package/mcp/server.js

@@ -53,10 +53,14 @@ function localAuthStatus() {
   const token = config.getToken();
   const apiKey = config.getApiKey();
   const hasBearer = !!(token || apiKey);
+  const runtimeFirewallWarning = token && !apiKey
+    ? 'MCP is authenticated with your SecureNow session token. Runtime firewall enforcement key is missing. Run `npx securenow login` or `npx securenow api-key set snk_live_...` to refresh .securenow/credentials.json.'
+    : null;
   return {
     authenticated: hasBearer,
     sessionTokenAvailable: !!token,
     apiKeyAvailable: !!apiKey,
+    runtimeFirewallKeyAvailable: !!apiKey,
     authSource: config.getAuthSource(),
     apiUrl: config.getApiUrl(),
     appUrl: config.getAppUrl(),
@@ -70,8 +74,9 @@ function localAuthStatus() {
       defaultApp: cfg.defaultApp,
       output: cfg.output,
     },
+    warnings: runtimeFirewallWarning ? [runtimeFirewallWarning] : [],
     nextStep: token
-      ? null
+      ? runtimeFirewallWarning
       : apiKey
         ? 'Using a scoped API key. Run `npx securenow login` for account-wide MCP tools.'
         : 'Run `npx securenow login` from the project root.',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securenow",
-  "version": "7.6.3",
+  "version": "7.6.4",
   "description": "OpenTelemetry instrumentation for Node.js, Next.js, and Nuxt - Send traces and logs to any OTLP-compatible backend",
   "type": "commonjs",
   "main": "register.js",