@lifeaitools/clauth 1.4.0 → 1.4.1

package/cli/fingerprint.js

@@ -5,31 +5,69 @@
 import { execSync } from "child_process";
 import { createHmac, createHash } from "crypto";
 import os from "os";
+import fs from "fs";
+import path from "path";
 
 // ============================================================
 // Machine ID collection
 // ============================================================
 
+// Cache path — avoids re-querying WMI/CIM on every daemon start.
+// This eliminates the spawnSync cmd.exe ETIMEDOUT crash that occurs
+// when PowerShell/WMI is slow on first call after boot.
+const CACHE_FILE = path.join(os.tmpdir(), "clauth-machine.cache");
+
+function readCache() {
+  try {
+    const raw = fs.readFileSync(CACHE_FILE, "utf8").trim();
+    // Validate: must be two non-empty lines (primary:secondary)
+    const [primary, secondary] = raw.split("\n");
+    if (primary && secondary) return { primary: primary.trim(), secondary: secondary.trim() };
+  } catch { /* cache miss */ }
+  return null;
+}
+
+function writeCache(primary, secondary) {
+  try { fs.writeFileSync(CACHE_FILE, `${primary}\n${secondary}`, "utf8"); } catch { /* best effort */ }
+}
+
 function getMachineId() {
+  // Fast path: use cached IDs if available (avoids WMI/PowerShell on every restart)
+  const cached = readCache();
+  if (cached) return { ...cached, platform: os.platform() };
+
   const platform = os.platform();
 
   try {
     if (platform === "win32") {
-      // Primary: BIOS UUID via PowerShell (wmic removed in Win11 26xxx+)
       const psPath = "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe";
-      const uuid = execSync(
-        `${psPath} -NoProfile -Command "(Get-CimInstance Win32_ComputerSystemProduct).UUID"`,
-        { encoding: "utf8", timeout: 5000, stdio: ["pipe", "pipe", "pipe"] }
-      ).trim();
-
-      // Secondary: Windows MachineGuid from registry (via PowerShell for Win11 compat)
-      const machineGuid = execSync(
-        `${psPath} -NoProfile -Command "(Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Cryptography').MachineGuid"`,
-        { encoding: "utf8", timeout: 5000, stdio: ["pipe", "pipe", "pipe"] }
-      ).trim();
-
-      if (!uuid || !machineGuid) throw new Error("Could not read Windows machine IDs");
-      return { primary: uuid, secondary: machineGuid, platform: "win32" };
+      // Increased timeout to 15s — CimInstance/WMI can be slow after boot or under load.
+      // Each call is wrapped independently so a partial failure still yields a result.
+      let uuid = "";
+      try {
+        uuid = execSync(
+          `${psPath} -NoProfile -Command "(Get-CimInstance Win32_ComputerSystemProduct).UUID"`,
+          { encoding: "utf8", timeout: 15000, stdio: ["pipe", "pipe", "pipe"] }
+        ).trim();
+      } catch { /* fall through to registry-only path */ }
+
+      let machineGuid = "";
+      try {
+        machineGuid = execSync(
+          `${psPath} -NoProfile -Command "(Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Cryptography').MachineGuid"`,
+          { encoding: "utf8", timeout: 15000, stdio: ["pipe", "pipe", "pipe"] }
+        ).trim();
+      } catch { /* fall through */ }
+
+      // Require at least one identifier
+      if (!uuid && !machineGuid) throw new Error("Could not read any Windows machine ID");
+
+      // Use hostname as fallback secondary if registry query failed
+      const primary = uuid || machineGuid;
+      const secondary = machineGuid || os.hostname();
+
+      writeCache(primary, secondary);
+      return { primary, secondary, platform: "win32" };
     }
 
     if (platform === "darwin") {
@@ -37,6 +75,7 @@ function getMachineId() {
         "ioreg -rd1 -c IOPlatformExpertDevice | awk '/IOPlatformUUID/ { print $3 }'",
         { encoding: "utf8", timeout: 5000, stdio: ["pipe", "pipe", "pipe"] }
       ).replace(/['"]/g, "").trim();
+      writeCache(uuid, os.hostname());
       return { primary: uuid, secondary: os.hostname(), platform: "darwin" };
     }
 
@@ -44,6 +83,7 @@ function getMachineId() {
     let uuid = "";
     try { uuid = execSync("cat /etc/machine-id", { encoding: "utf8", timeout: 2000 }).trim(); }
     catch { uuid = execSync("cat /var/lib/dbus/machine-id", { encoding: "utf8", timeout: 2000 }).trim(); }
+    writeCache(uuid, os.hostname());
     return { primary: uuid, secondary: os.hostname(), platform: "linux" };
 
   } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/clauth",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
   "type": "module",
   "bin": {