@lifeaitools/clauth 1.30.2 → 1.30.4

package/package.json

@@ -1,68 +1,68 @@
-{
-  "name": "@lifeaitools/clauth",
-  "version": "1.30.2",
-  "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
-  "type": "module",
-  "bin": {
-    "clauth": "./cli/index.js"
-  },
-  "scripts": {
-    "build": "bash scripts/build.sh",
-    "test": "node --test cli/commands/scrub.test.js cli/api.classify.test.js test/studio-debug.test.mjs && node test-auth-verdict.mjs",
-    "test:studio-debug": "node --test test/studio-debug.test.mjs",
-    "test:agent-pool": "node test/agent-pool.test.mjs",
-    "test:call-agent-10": "node test/call-agent-10-skills.test.mjs",
-    "test:call-agent-guard": "node test/call-agent-guard.test.mjs",
-    "test:tintin-settings": "node test/tintin-settings.test.mjs",
-    "postinstall": "node scripts/postinstall.js",
-    "worker:start": "node cli/index.js serve",
-    "worker:stop": "curl -s http://127.0.0.1:52437/shutdown 2>nul || taskkill /F /IM cloudflared.exe 2>nul & exit 0",
-    "worker:restart": "npm run worker:stop && timeout /t 3 /nobreak >nul && npm run worker:start"
-  },
-  "dependencies": {
-    "@vscode/ripgrep": "^1.15.9",
-    "chalk": "^5.3.0",
-    "commander": "^12.1.0",
-    "conf": "^13.0.0",
-    "fast-glob": "^3.3.2",
-    "inquirer": "^10.1.0",
-    "node-fetch": "^3.3.2",
-    "ora": "^8.1.0",
-    "typescript": "^5.9.3"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "keywords": [
-    "lifeai",
-    "credentials",
-    "vault",
-    "cli",
-    "prt"
-  ],
-  "author": "Dave Ladouceur <dave@life.ai>",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/LIFEAI/clauth.git"
-  },
-  "devDependencies": {
-    "javascript-obfuscator": "^5.3.0"
-  },
-  "files": [
-    "cli/",
-    "scripts/bin/",
-    "scripts/bootstrap.cjs",
-    "scripts/build.sh",
-    "scripts/postinstall.js",
-    "supabase/",
-    ".clauth-skill/",
-    "install.sh",
-    "install.ps1",
-    "README.md"
-  ],
-  "publishConfig": {
-    "access": "public"
-  },
-  "homepage": "https://github.com/LIFEAI/clauth"
-}
+{
+  "name": "@lifeaitools/clauth",
+  "version": "1.30.4",
+  "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
+  "type": "module",
+  "bin": {
+    "clauth": "./cli/index.js"
+  },
+  "scripts": {
+    "build": "bash scripts/build.sh",
+    "test": "node --test cli/commands/scrub.test.js cli/api.classify.test.js test/studio-debug.test.mjs && node test-auth-verdict.mjs",
+    "test:studio-debug": "node --test test/studio-debug.test.mjs",
+    "test:agent-pool": "node test/agent-pool.test.mjs",
+    "test:call-agent-10": "node test/call-agent-10-skills.test.mjs",
+    "test:call-agent-guard": "node test/call-agent-guard.test.mjs",
+    "test:tintin-settings": "node test/tintin-settings.test.mjs",
+    "postinstall": "node scripts/postinstall.js",
+    "worker:start": "node cli/index.js serve",
+    "worker:stop": "curl -s http://127.0.0.1:52437/shutdown 2>nul || taskkill /F /IM cloudflared.exe 2>nul & exit 0",
+    "worker:restart": "npm run worker:stop && timeout /t 3 /nobreak >nul && npm run worker:start"
+  },
+  "dependencies": {
+    "@vscode/ripgrep": "^1.15.9",
+    "chalk": "^5.3.0",
+    "commander": "^12.1.0",
+    "conf": "^13.0.0",
+    "fast-glob": "^3.3.2",
+    "inquirer": "^10.1.0",
+    "node-fetch": "^3.3.2",
+    "ora": "^8.1.0",
+    "typescript": "^5.9.3"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "keywords": [
+    "lifeai",
+    "credentials",
+    "vault",
+    "cli",
+    "prt"
+  ],
+  "author": "Dave Ladouceur <dave@life.ai>",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/LIFEAI/clauth.git"
+  },
+  "devDependencies": {
+    "javascript-obfuscator": "^5.3.0"
+  },
+  "files": [
+    "cli/",
+    "scripts/bin/",
+    "scripts/bootstrap.cjs",
+    "scripts/build.sh",
+    "scripts/postinstall.js",
+    "supabase/",
+    ".clauth-skill/",
+    "install.sh",
+    "install.ps1",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "homepage": "https://github.com/LIFEAI/clauth"
+}

package/supabase/migrations/001_clauth_schema.sql

@@ -27,18 +27,18 @@ create table if not exists public.clauth_services (
 -- ============================================================
 -- Machine Registry (hardware fingerprints — hashed only)
 -- ============================================================
-create table if not exists public.clauth_machines (
-  id              uuid primary key default gen_random_uuid(),
-  install_id      text not null default 'default', -- logical vault install / owner group
-  machine_hash    text not null unique,          -- SHA256(machine_id + os_install_id)
-  label           text,                          -- e.g. 'Dave-Desktop-Win11'
-  hmac_seed_hash  text not null,                 -- SHA256 of the HMAC seed stored in vault
-  enabled         boolean not null default true,
-  fail_count      integer not null default 0,
-  locked          boolean not null default false,
-  created_at      timestamptz not null default now(),
-  last_seen       timestamptz
-);
+create table if not exists public.clauth_machines (
+  id              uuid primary key default gen_random_uuid(),
+  install_id      text not null default 'default', -- logical vault install / owner group
+  machine_hash    text not null unique,          -- SHA256(machine_id + os_install_id)
+  label           text,                          -- e.g. 'Dave-Desktop-Win11'
+  hmac_seed_hash  text not null,                 -- SHA256 of the HMAC seed stored in vault
+  enabled         boolean not null default true,
+  fail_count      integer not null default 0,
+  locked          boolean not null default false,
+  created_at      timestamptz not null default now(),
+  last_seen       timestamptz
+);
 
 -- ============================================================
 -- Audit Log

package/supabase/migrations/003_clauth_config.sql

@@ -1,13 +1,13 @@
--- clauth_config: key/value store for daemon configuration
--- Used to persist tunnel hostname and other daemon settings
-CREATE TABLE IF NOT EXISTS clauth_config (
-  key        text PRIMARY KEY,
-  value      jsonb NOT NULL,
-  updated_at timestamptz DEFAULT now()
-);
-
--- RLS: only service role can access (same pattern as other clauth tables)
-ALTER TABLE clauth_config ENABLE ROW LEVEL SECURITY;
-
--- Seed: no tunnel by default (user must run clauth tunnel setup)
--- INSERT INTO clauth_config (key, value) VALUES ('tunnel_hostname', 'null');
+-- clauth_config: key/value store for daemon configuration
+-- Used to persist tunnel hostname and other daemon settings
+CREATE TABLE IF NOT EXISTS clauth_config (
+  key        text PRIMARY KEY,
+  value      jsonb NOT NULL,
+  updated_at timestamptz DEFAULT now()
+);
+
+-- RLS: only service role can access (same pattern as other clauth tables)
+ALTER TABLE clauth_config ENABLE ROW LEVEL SECURITY;
+
+-- Seed: no tunnel by default (user must run clauth tunnel setup)
+-- INSERT INTO clauth_config (key, value) VALUES ('tunnel_hostname', 'null');

package/supabase/migrations/003_machine_enrollments.sql

@@ -1,39 +1,39 @@
--- ============================================================
--- clauth machine enrollment
--- Migration: 003_machine_enrollments.sql
--- ============================================================
-
-alter table public.clauth_machines
-  add column if not exists install_id text not null default 'default';
-
-create index if not exists clauth_machines_install_id_idx
-  on public.clauth_machines (install_id);
-
-create table if not exists public.clauth_machine_enrollments (
-  id uuid primary key default gen_random_uuid(),
-  install_id text not null default 'default',
-  token_hash text not null unique,
-  label text,
-  created_by_machine_hash text not null references public.clauth_machines(machine_hash) on delete cascade,
-  redeemed_by_machine_hash text references public.clauth_machines(machine_hash) on delete set null,
-  expires_at timestamptz not null,
-  consumed_at timestamptz,
-  created_at timestamptz not null default now()
-);
-
-create index if not exists clauth_machine_enrollments_install_idx
-  on public.clauth_machine_enrollments (install_id, expires_at);
-
-alter table public.clauth_machine_enrollments enable row level security;
-
-do $$ begin
-  if not exists (
-    select 1
-    from pg_policies
-    where policyname = 'no_anon_machine_enrollments'
-      and tablename = 'clauth_machine_enrollments'
-  ) then
-    create policy "no_anon_machine_enrollments"
-      on public.clauth_machine_enrollments for all using (false);
-  end if;
-end $$;
+-- ============================================================
+-- clauth machine enrollment
+-- Migration: 003_machine_enrollments.sql
+-- ============================================================
+
+alter table public.clauth_machines
+  add column if not exists install_id text not null default 'default';
+
+create index if not exists clauth_machines_install_id_idx
+  on public.clauth_machines (install_id);
+
+create table if not exists public.clauth_machine_enrollments (
+  id uuid primary key default gen_random_uuid(),
+  install_id text not null default 'default',
+  token_hash text not null unique,
+  label text,
+  created_by_machine_hash text not null references public.clauth_machines(machine_hash) on delete cascade,
+  redeemed_by_machine_hash text references public.clauth_machines(machine_hash) on delete set null,
+  expires_at timestamptz not null,
+  consumed_at timestamptz,
+  created_at timestamptz not null default now()
+);
+
+create index if not exists clauth_machine_enrollments_install_idx
+  on public.clauth_machine_enrollments (install_id, expires_at);
+
+alter table public.clauth_machine_enrollments enable row level security;
+
+do $$ begin
+  if not exists (
+    select 1
+    from pg_policies
+    where policyname = 'no_anon_machine_enrollments'
+      and tablename = 'clauth_machine_enrollments'
+  ) then
+    create policy "no_anon_machine_enrollments"
+      on public.clauth_machine_enrollments for all using (false);
+  end if;
+end $$;