@lifeaitools/clauth 1.30.23 → 1.30.25

package/cli/api.classify.test.js

@@ -1,75 +1,75 @@
-// cli/api.classify.test.js
-// Regression tests for backend/external-resource error classification.
-//
-// WHY THIS EXISTS: on 2026-06-19 a saturated Postgres database made every
-// auth-vault verify call time out. clauth counted each timeout as an
-// authentication failure ([AUTH FAIL n/10]), hit the strike ceiling, and
-// hard-locked the vault — turning a transient DB blip into a full lockout that
-// blocked Claude/Codex from starting. A database timeout, a 5xx, a network
-// drop, or a rate-limit is NOT a wrong password and must never take a strike.
-// These tests pin that classification so the regression can't return.
-
-import { test } from "node:test";
-import assert from "node:assert/strict";
-import {
-  VaultBackendError,
-  classifyBackendError,
-  classifyServerReason,
-} from "./api.js";
-
-test("VaultBackendError marks failures as non-strike + retriable", () => {
-  const e = new VaultBackendError("timeout", "no response", { status: 504, detail: "abort" });
-  assert.equal(e.kind, "timeout");
-  assert.equal(e.isBackend, true);
-  assert.equal(e.retriable, true);
-  assert.equal(e.status, 504);
-  assert.ok(e instanceof Error);
-});
-
-test("classifyBackendError: AbortSignal.timeout shapes => 'timeout'", () => {
-  // This is the exact error that slipped through the old substring check.
-  assert.equal(classifyBackendError({ name: "TimeoutError", message: "The operation was aborted due to timeout" }), "timeout");
-  assert.equal(classifyBackendError({ name: "AbortError", message: "This operation was aborted" }), "timeout");
-  assert.equal(classifyBackendError(new Error("request timed out")), "timeout");
-});
-
-test("classifyBackendError: network/transport shapes => 'network'", () => {
-  assert.equal(classifyBackendError(new Error("fetch failed")), "network");
-  assert.equal(classifyBackendError(new Error("connect ECONNREFUSED 127.0.0.1:443")), "network");
-  assert.equal(classifyBackendError(new Error("getaddrinfo ENOTFOUND db.supabase.co")), "network");
-  assert.equal(classifyBackendError(new Error("read ECONNRESET")), "network");
-});
-
-test("classifyBackendError: a typed VaultBackendError passes its kind through", () => {
-  assert.equal(classifyBackendError(new VaultBackendError("rate_limited", "slow down")), "rate_limited");
-  assert.equal(classifyBackendError(new VaultBackendError("db_error", "pool exhausted")), "db_error");
-});
-
-test("classifyBackendError: a genuine credential error is NOT a backend error", () => {
-  assert.equal(classifyBackendError(new Error("Wrong password")), null);
-  assert.equal(classifyBackendError(new Error("invalid_token")), null);
-  assert.equal(classifyBackendError(null), null);
-  assert.equal(classifyBackendError(undefined), null);
-});
-
-test("classifyServerReason: rate-limit reasons => 'rate_limited'", () => {
-  assert.equal(classifyServerReason("rate_limited"), "rate_limited");
-  assert.equal(classifyServerReason("Rate limit: 38/30 per 60s"), "rate_limited");
-});
-
-test("classifyServerReason: database/backend reasons => 'db_error'", () => {
-  assert.equal(classifyServerReason("canceling statement due to statement timeout"), "db_error");
-  assert.equal(classifyServerReason("database connection pool exhausted"), "db_error");
-  assert.equal(classifyServerReason("internal server error"), "db_error");
-  assert.equal(classifyServerReason("service unavailable"), "db_error");
-});
-
-test("classifyServerReason: genuine auth verdicts are NOT backend errors (they strike)", () => {
-  assert.equal(classifyServerReason("invalid_token (3/5)"), null);
-  assert.equal(classifyServerReason("machine_locked"), null);
-  assert.equal(classifyServerReason("machine_disabled"), null);
-  assert.equal(classifyServerReason("machine_not_found"), null);
-  assert.equal(classifyServerReason("wrong_password"), null);
-  assert.equal(classifyServerReason(null), null);
-  assert.equal(classifyServerReason(""), null);
-});
+// cli/api.classify.test.js
+// Regression tests for backend/external-resource error classification.
+//
+// WHY THIS EXISTS: on 2026-06-19 a saturated Postgres database made every
+// auth-vault verify call time out. clauth counted each timeout as an
+// authentication failure ([AUTH FAIL n/10]), hit the strike ceiling, and
+// hard-locked the vault — turning a transient DB blip into a full lockout that
+// blocked Claude/Codex from starting. A database timeout, a 5xx, a network
+// drop, or a rate-limit is NOT a wrong password and must never take a strike.
+// These tests pin that classification so the regression can't return.
+
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import {
+  VaultBackendError,
+  classifyBackendError,
+  classifyServerReason,
+} from "./api.js";
+
+test("VaultBackendError marks failures as non-strike + retriable", () => {
+  const e = new VaultBackendError("timeout", "no response", { status: 504, detail: "abort" });
+  assert.equal(e.kind, "timeout");
+  assert.equal(e.isBackend, true);
+  assert.equal(e.retriable, true);
+  assert.equal(e.status, 504);
+  assert.ok(e instanceof Error);
+});
+
+test("classifyBackendError: AbortSignal.timeout shapes => 'timeout'", () => {
+  // This is the exact error that slipped through the old substring check.
+  assert.equal(classifyBackendError({ name: "TimeoutError", message: "The operation was aborted due to timeout" }), "timeout");
+  assert.equal(classifyBackendError({ name: "AbortError", message: "This operation was aborted" }), "timeout");
+  assert.equal(classifyBackendError(new Error("request timed out")), "timeout");
+});
+
+test("classifyBackendError: network/transport shapes => 'network'", () => {
+  assert.equal(classifyBackendError(new Error("fetch failed")), "network");
+  assert.equal(classifyBackendError(new Error("connect ECONNREFUSED 127.0.0.1:443")), "network");
+  assert.equal(classifyBackendError(new Error("getaddrinfo ENOTFOUND db.supabase.co")), "network");
+  assert.equal(classifyBackendError(new Error("read ECONNRESET")), "network");
+});
+
+test("classifyBackendError: a typed VaultBackendError passes its kind through", () => {
+  assert.equal(classifyBackendError(new VaultBackendError("rate_limited", "slow down")), "rate_limited");
+  assert.equal(classifyBackendError(new VaultBackendError("db_error", "pool exhausted")), "db_error");
+});
+
+test("classifyBackendError: a genuine credential error is NOT a backend error", () => {
+  assert.equal(classifyBackendError(new Error("Wrong password")), null);
+  assert.equal(classifyBackendError(new Error("invalid_token")), null);
+  assert.equal(classifyBackendError(null), null);
+  assert.equal(classifyBackendError(undefined), null);
+});
+
+test("classifyServerReason: rate-limit reasons => 'rate_limited'", () => {
+  assert.equal(classifyServerReason("rate_limited"), "rate_limited");
+  assert.equal(classifyServerReason("Rate limit: 38/30 per 60s"), "rate_limited");
+});
+
+test("classifyServerReason: database/backend reasons => 'db_error'", () => {
+  assert.equal(classifyServerReason("canceling statement due to statement timeout"), "db_error");
+  assert.equal(classifyServerReason("database connection pool exhausted"), "db_error");
+  assert.equal(classifyServerReason("internal server error"), "db_error");
+  assert.equal(classifyServerReason("service unavailable"), "db_error");
+});
+
+test("classifyServerReason: genuine auth verdicts are NOT backend errors (they strike)", () => {
+  assert.equal(classifyServerReason("invalid_token (3/5)"), null);
+  assert.equal(classifyServerReason("machine_locked"), null);
+  assert.equal(classifyServerReason("machine_disabled"), null);
+  assert.equal(classifyServerReason("machine_not_found"), null);
+  assert.equal(classifyServerReason("wrong_password"), null);
+  assert.equal(classifyServerReason(null), null);
+  assert.equal(classifyServerReason(""), null);
+});

package/cli/assets/codevelop/launcher-active.cmd.template

@@ -1,20 +1,20 @@
-@echo off
-setlocal
-set "CODEVELOP_SESSION=${SESSION_ID}"
-set "CODEVELOP_PEER=${PEER}"
-set "CODEVELOP_TARGET=${TARGET_PEER}"
-set "CODEVELOP_BASE_URL=${BASE_URL}"
-set "CODEVELOP_MANIFEST=${MANIFEST}"
-set "CODEVELOP_CONTEXT=${CONTEXT_FILE}"
-set "CELL_ROLE=codevelop-${PEER}"
-cd /d "${CWD}"
-if /i "%~1"=="--print-only" (
-  echo command: ${PRINT_COMMAND}
-  exit /b 0
-)
-echo Co-develop ${PEER} ready. Session ${SESSION_ID}. Listening for collaboration.
-echo Context: ${CONTEXT_FILE}
-node "${CLAUTH_CLI}" codevelop check-partner --repo "${REPO}" --peer ${PEER}
-${COMMAND}
-set EXITCODE=%ERRORLEVEL%
-endlocal & exit /b %EXITCODE%
+@echo off
+setlocal
+set "CODEVELOP_SESSION=${SESSION_ID}"
+set "CODEVELOP_PEER=${PEER}"
+set "CODEVELOP_TARGET=${TARGET_PEER}"
+set "CODEVELOP_BASE_URL=${BASE_URL}"
+set "CODEVELOP_MANIFEST=${MANIFEST}"
+set "CODEVELOP_CONTEXT=${CONTEXT_FILE}"
+set "CELL_ROLE=codevelop-${PEER}"
+cd /d "${CWD}"
+if /i "%~1"=="--print-only" (
+  echo command: ${PRINT_COMMAND}
+  exit /b 0
+)
+echo Co-develop ${PEER} ready. Session ${SESSION_ID}. Listening for collaboration.
+echo Context: ${CONTEXT_FILE}
+node "${CLAUTH_CLI}" codevelop check-partner --repo "${REPO}" --peer ${PEER}
+${COMMAND}
+set EXITCODE=%ERRORLEVEL%
+endlocal & exit /b %EXITCODE%

package/cli/assets/codevelop/launcher-static.cmd.template

@@ -1,7 +1,7 @@
-@echo off
-if not exist "${ACTIVE_LAUNCHER}" (
-  echo No active co-develop launcher has been written.
-  echo Run: clauth codevelop start --repo "${REPO}" --port ${PORT} --start-isolated-clauth
-  exit /b 1
-)
-call "${ACTIVE_LAUNCHER}" %*
+@echo off
+if not exist "${ACTIVE_LAUNCHER}" (
+  echo No active co-develop launcher has been written.
+  echo Run: clauth codevelop start --repo "${REPO}" --port ${PORT} --start-isolated-clauth
+  exit /b 1
+)
+call "${ACTIVE_LAUNCHER}" %*

package/cli/assets/codevelop/windows-terminal.profiles.json

@@ -1,48 +1,48 @@
-{
-  "profiles": [
-    {
-      "name": "Co Develop Claude",
-      "guid": "{a2f8548f-82e6-44b4-bdbb-d934e8881f01}",
-      "commandline": "cmd.exe /k \"${CLAUTH_APPDATA}\\codevelop-claude.cmd\"",
-      "startingDirectory": "${REPO}",
-      "environment": {
-        "CELL_ROLE": "codevelop-claude"
-      },
-      "icon": "🔴",
-      "tabColor": "#B91C1C",
-      "colorScheme": "Dimidium"
-    },
-    {
-      "name": "Co Develop Codex",
-      "guid": "{31a52b07-6efd-4b3d-96dd-ded73488140a}",
-      "commandline": "cmd.exe /k \"${CLAUTH_APPDATA}\\codevelop-codex.cmd\"",
-      "startingDirectory": "${REPO}",
-      "environment": {
-        "CELL_ROLE": "codevelop-codex"
-      },
-      "icon": "🧬",
-      "tabColor": "#0F766E",
-      "colorScheme": "Dimidium"
-    }
-  ],
-  "layout": {
-    "wtArgs": [
-      "-w",
-      "new",
-      "new-tab",
-      "--profile",
-      "Co Develop Claude",
-      "--title",
-      "Co Develop Claude",
-      ";",
-      "split-pane",
-      "-V",
-      "--size",
-      "0.50",
-      "--profile",
-      "Co Develop Codex",
-      "--title",
-      "Co Develop Codex"
-    ]
-  }
-}
+{
+  "profiles": [
+    {
+      "name": "Co Develop Claude",
+      "guid": "{a2f8548f-82e6-44b4-bdbb-d934e8881f01}",
+      "commandline": "cmd.exe /k \"${CLAUTH_APPDATA}\\codevelop-claude.cmd\"",
+      "startingDirectory": "${REPO}",
+      "environment": {
+        "CELL_ROLE": "codevelop-claude"
+      },
+      "icon": "🔴",
+      "tabColor": "#B91C1C",
+      "colorScheme": "Dimidium"
+    },
+    {
+      "name": "Co Develop Codex",
+      "guid": "{31a52b07-6efd-4b3d-96dd-ded73488140a}",
+      "commandline": "cmd.exe /k \"${CLAUTH_APPDATA}\\codevelop-codex.cmd\"",
+      "startingDirectory": "${REPO}",
+      "environment": {
+        "CELL_ROLE": "codevelop-codex"
+      },
+      "icon": "🧬",
+      "tabColor": "#0F766E",
+      "colorScheme": "Dimidium"
+    }
+  ],
+  "layout": {
+    "wtArgs": [
+      "-w",
+      "new",
+      "new-tab",
+      "--profile",
+      "Co Develop Claude",
+      "--title",
+      "Co Develop Claude",
+      ";",
+      "split-pane",
+      "-V",
+      "--size",
+      "0.50",
+      "--profile",
+      "Co Develop Codex",
+      "--title",
+      "Co Develop Codex"
+    ]
+  }
+}

package/cli/assets/watchdog.ps1

@@ -1,42 +1,42 @@
-# clauth-watchdog.ps1
-# Monitors clauth daemon on port 52437. Restarts it if not responding.
-# Installed by: npm install -g @lifeaitools/clauth
-# Managed by:   clauth watchdog [install|uninstall|status]
-
-$clauth   = "$env:APPDATA\npm\clauth.cmd"
-$logFile  = "$env:APPDATA\clauth\watchdog.log"
-$pingUrl  = "http://127.0.0.1:52437/ping"
-$interval = 15
-
-function Write-Log($msg) {
-    $ts   = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ssZ")
-    $line = "[$ts] $msg"
-    Add-Content -Path $logFile -Value $line -ErrorAction SilentlyContinue
-}
-
-Write-Log "Watchdog started (PID $PID, clauth=$clauth)"
-
-while ($true) {
-    $alive = $false
-    try {
-        $r = Invoke-WebRequest -Uri $pingUrl -TimeoutSec 3 -UseBasicParsing -ErrorAction Stop
-        if ($r.StatusCode -eq 200) { $alive = $true }
-    } catch { }
-
-    if (-not $alive) {
-        Write-Log "Daemon not responding — restarting..."
-        Start-Process -FilePath "cmd.exe" `
-            -ArgumentList "/c `"$clauth`" serve start" `
-            -WindowStyle Hidden
-        Start-Sleep -Seconds 5
-        try {
-            $r = Invoke-WebRequest -Uri $pingUrl -TimeoutSec 5 -UseBasicParsing -ErrorAction Stop
-            if ($r.StatusCode -eq 200) { Write-Log "Daemon restarted OK." }
-            else { Write-Log "WARNING: Daemon still not responding." }
-        } catch {
-            Write-Log "WARNING: Daemon still not responding after restart."
-        }
-    }
-
-    Start-Sleep -Seconds $interval
-}
+# clauth-watchdog.ps1
+# Monitors clauth daemon on port 52437. Restarts it if not responding.
+# Installed by: npm install -g @lifeaitools/clauth
+# Managed by:   clauth watchdog [install|uninstall|status]
+
+$clauth   = "$env:APPDATA\npm\clauth.cmd"
+$logFile  = "$env:APPDATA\clauth\watchdog.log"
+$pingUrl  = "http://127.0.0.1:52437/ping"
+$interval = 15
+
+function Write-Log($msg) {
+    $ts   = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ssZ")
+    $line = "[$ts] $msg"
+    Add-Content -Path $logFile -Value $line -ErrorAction SilentlyContinue
+}
+
+Write-Log "Watchdog started (PID $PID, clauth=$clauth)"
+
+while ($true) {
+    $alive = $false
+    try {
+        $r = Invoke-WebRequest -Uri $pingUrl -TimeoutSec 3 -UseBasicParsing -ErrorAction Stop
+        if ($r.StatusCode -eq 200) { $alive = $true }
+    } catch { }
+
+    if (-not $alive) {
+        Write-Log "Daemon not responding — restarting..."
+        Start-Process -FilePath "cmd.exe" `
+            -ArgumentList "/c `"$clauth`" serve start" `
+            -WindowStyle Hidden
+        Start-Sleep -Seconds 5
+        try {
+            $r = Invoke-WebRequest -Uri $pingUrl -TimeoutSec 5 -UseBasicParsing -ErrorAction Stop
+            if ($r.StatusCode -eq 200) { Write-Log "Daemon restarted OK." }
+            else { Write-Log "WARNING: Daemon still not responding." }
+        } catch {
+            Write-Log "WARNING: Daemon still not responding after restart."
+        }
+    }
+
+    Start-Sleep -Seconds $interval
+}