@lifeaitools/clauth 1.4.1 → 1.4.2

package/cli/assets/watchdog.ps1

@@ -0,0 +1,42 @@
+# clauth-watchdog.ps1
+# Monitors clauth daemon on port 52437. Restarts it if not responding.
+# Installed by: npm install -g @lifeaitools/clauth
+# Managed by:   clauth watchdog [install|uninstall|status]
+
+$clauth   = "$env:APPDATA\npm\clauth.cmd"
+$logFile  = "$env:APPDATA\clauth\watchdog.log"
+$pingUrl  = "http://127.0.0.1:52437/ping"
+$interval = 15
+
+function Write-Log($msg) {
+    $ts   = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ssZ")
+    $line = "[$ts] $msg"
+    Add-Content -Path $logFile -Value $line -ErrorAction SilentlyContinue
+}
+
+Write-Log "Watchdog started (PID $PID, clauth=$clauth)"
+
+while ($true) {
+    $alive = $false
+    try {
+        $r = Invoke-WebRequest -Uri $pingUrl -TimeoutSec 3 -UseBasicParsing -ErrorAction Stop
+        if ($r.StatusCode -eq 200) { $alive = $true }
+    } catch { }
+
+    if (-not $alive) {
+        Write-Log "Daemon not responding — restarting..."
+        Start-Process -FilePath "cmd.exe" `
+            -ArgumentList "/c `"$clauth`" serve start" `
+            -WindowStyle Hidden
+        Start-Sleep -Seconds 5
+        try {
+            $r = Invoke-WebRequest -Uri $pingUrl -TimeoutSec 5 -UseBasicParsing -ErrorAction Stop
+            if ($r.StatusCode -eq 200) { Write-Log "Daemon restarted OK." }
+            else { Write-Log "WARNING: Daemon still not responding." }
+        } catch {
+            Write-Log "WARNING: Daemon still not responding after restart."
+        }
+    }
+
+    Start-Sleep -Seconds $interval
+}

package/cli/commands/watchdog.js

@@ -0,0 +1,144 @@
+// cli/commands/watchdog.js
+// Manages the clauth watchdog Task Scheduler job on Windows.
+// clauth watchdog install   — register job (UAC elevation)
+// clauth watchdog uninstall — remove job (UAC elevation)
+// clauth watchdog status    — check if job is registered and running
+// clauth watchdog start     — start the job now without waiting for login
+
+import { execSync, spawnSync } from "child_process";
+import fs from "fs";
+import path from "path";
+import os from "os";
+import { fileURLToPath } from "url";
+
+const __dirname  = path.dirname(fileURLToPath(import.meta.url));
+const TASK_NAME  = "ClautWatchdog";
+const APPDATA    = process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming");
+const CLAUTH_DIR = path.join(APPDATA, "clauth");
+const DEST_PS1   = path.join(CLAUTH_DIR, "watchdog.ps1");
+const SOURCE_PS1 = path.join(__dirname, "..", "assets", "watchdog.ps1");
+const PS_EXE     = "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe";
+
+function ensureWatchdogScript() {
+  fs.mkdirSync(CLAUTH_DIR, { recursive: true });
+  fs.copyFileSync(SOURCE_PS1, DEST_PS1);
+}
+
+function isElevated() {
+  try {
+    execSync(`${PS_EXE} -NoProfile -Command "[Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)"`,
+      { stdio: "pipe", encoding: "utf8" });
+    return true;
+  } catch { return false; }
+}
+
+// Build the PowerShell registration command as a single string
+function buildRegisterCmd(ps1Path) {
+  const escaped = ps1Path.replace(/'/g, "''");
+  return [
+    `$action  = New-ScheduledTaskAction -Execute 'powershell.exe'`,
+    `  -Argument '-NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File \\"${escaped}\\"';`,
+    `$trigger  = New-ScheduledTaskTrigger -AtLogOn;`,
+    `$settings = New-ScheduledTaskSettingsSet -ExecutionTimeLimit 0 -RestartCount 3`,
+    `  -RestartInterval (New-TimeSpan -Minutes 1) -MultipleInstances IgnoreNew;`,
+    `Unregister-ScheduledTask -TaskName '${TASK_NAME}' -Confirm:$false -ErrorAction SilentlyContinue;`,
+    `Register-ScheduledTask -TaskName '${TASK_NAME}' -Action $action -Trigger $trigger`,
+    `  -Settings $settings -RunLevel Highest`,
+    `  -Description 'clauth daemon watchdog — restarts on port 52437 if not responding.';`,
+    `Write-Host 'Watchdog registered.'`,
+  ].join(" ");
+}
+
+function buildUnregisterCmd() {
+  return `Unregister-ScheduledTask -TaskName '${TASK_NAME}' -Confirm:$false -ErrorAction SilentlyContinue; Write-Host 'Watchdog removed.'`;
+}
+
+function runElevated(psCmd) {
+  // Wrap in Start-Process -Verb RunAs to trigger UAC dialog
+  const inner = psCmd.replace(/"/g, '\\"');
+  const result = spawnSync(PS_EXE, [
+    "-NoProfile", "-Command",
+    `Start-Process '${PS_EXE}' -Verb RunAs -Wait -ArgumentList '-NoProfile -ExecutionPolicy Bypass -Command "${inner}"'`,
+  ], { stdio: "inherit", encoding: "utf8" });
+  return result.status === 0;
+}
+
+function runDirect(psCmd) {
+  const result = spawnSync(PS_EXE, [
+    "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", psCmd,
+  ], { stdio: "inherit", encoding: "utf8" });
+  return result.status === 0;
+}
+
+export async function runWatchdog(action) {
+  if (os.platform() !== "win32") {
+    console.log("Watchdog auto-start is Windows-only. On Linux/macOS, use systemd or launchd.");
+    return;
+  }
+
+  if (action === "status" || !action) {
+    try {
+      const out = execSync(
+        `${PS_EXE} -NoProfile -Command "Get-ScheduledTask -TaskName '${TASK_NAME}' -ErrorAction SilentlyContinue | Select-Object -ExpandProperty State"`,
+        { encoding: "utf8", stdio: ["pipe","pipe","pipe"], timeout: 5000 }
+      ).trim();
+      if (out) {
+        console.log(`Watchdog task: ${TASK_NAME} — State: ${out}`);
+        console.log(`Script:        ${DEST_PS1}`);
+        console.log(`Log:           ${path.join(CLAUTH_DIR, "watchdog.log")}`);
+      } else {
+        console.log(`Watchdog task '${TASK_NAME}' is NOT registered.`);
+        console.log("Run: clauth watchdog install");
+      }
+    } catch {
+      console.log(`Watchdog task '${TASK_NAME}' is NOT registered.`);
+      console.log("Run: clauth watchdog install");
+    }
+    return;
+  }
+
+  if (action === "install") {
+    ensureWatchdogScript();
+    console.log(`\n  Installing clauth watchdog...`);
+    console.log(`  Script: ${DEST_PS1}`);
+    console.log(`  Task:   ${TASK_NAME} (runs at login)\n`);
+    console.log("  Windows will ask for administrator approval — please click Yes.\n");
+
+    const cmd = buildRegisterCmd(DEST_PS1);
+    const ok  = runElevated(cmd);
+
+    if (ok) {
+      console.log("\n  Watchdog installed. Starting now...");
+      spawnSync(PS_EXE, [
+        "-NoProfile", "-Command", `Start-ScheduledTask -TaskName '${TASK_NAME}'`,
+      ], { stdio: "pipe" });
+      console.log("  Done. Watchdog is running.\n");
+    } else {
+      console.log("\n  Installation cancelled or failed.");
+      console.log(`  To install manually, run as Administrator:`);
+      console.log(`    clauth watchdog install\n`);
+    }
+    return;
+  }
+
+  if (action === "uninstall") {
+    console.log("\n  Removing clauth watchdog...");
+    console.log("  Windows will ask for administrator approval — please click Yes.\n");
+    const ok = runElevated(buildUnregisterCmd());
+    if (ok) console.log("\n  Watchdog removed.\n");
+    else    console.log("\n  Removal cancelled or failed.\n");
+    return;
+  }
+
+  if (action === "start") {
+    console.log(`  Starting ${TASK_NAME}...`);
+    const r = spawnSync(PS_EXE, [
+      "-NoProfile", "-Command", `Start-ScheduledTask -TaskName '${TASK_NAME}'`,
+    ], { stdio: "inherit", encoding: "utf8" });
+    if (r.status === 0) console.log("  Watchdog started.");
+    else console.log("  Could not start — is it registered? Run: clauth watchdog install");
+    return;
+  }
+
+  console.log("Usage: clauth watchdog [install|uninstall|status|start]");
+}

package/cli/index.js

@@ -462,6 +462,16 @@ Examples:
   });
 
 // ──────────────────────────────────────────────
+// clauth watchdog
+// ──────────────────────────────────────────────
+program
+  .command("watchdog [action]")
+  .description("Manage auto-restart watchdog (install|uninstall|status|start)")
+  .action(async (action) => {
+    const { runWatchdog } = await import("./commands/watchdog.js");
+    await runWatchdog(action);
+  });
+
 // clauth doctor
 // ──────────────────────────────────────────────
 program

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/clauth",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
   "type": "module",
   "bin": {

package/scripts/postinstall.js

@@ -1,17 +1,25 @@
 #!/usr/bin/env node
 // scripts/postinstall.js
 // Runs after npm install -g @lifeaitools/clauth
-// Detects fresh install vs upgrade and acts accordingly
+// On Windows: writes watchdog.ps1 to %APPDATA%\clauth\ and registers
+// the Task Scheduler job via UAC elevation.
 
 import fs from "fs";
 import path from "path";
 import os from "os";
 import { fileURLToPath } from "url";
+import { spawnSync } from "child_process";
 
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const __dirname  = path.dirname(fileURLToPath(import.meta.url));
+const APPDATA    = process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming");
+const CLAUTH_DIR = path.join(APPDATA, "clauth");
+const DEST_PS1   = path.join(CLAUTH_DIR, "watchdog.ps1");
+const SOURCE_PS1 = path.join(__dirname, "..", "cli", "assets", "watchdog.ps1");
+const PS_EXE     = "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe";
+const TASK_NAME  = "ClautWatchdog";
 
 const CONFIG_DIR = os.platform() === "win32"
-  ? path.join(process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming"), "clauth-nodejs", "Config")
+  ? path.join(APPDATA, "clauth-nodejs", "Config")
   : path.join(os.homedir(), ".config", "clauth-nodejs");
 
 let version = "1.0.0";
@@ -20,33 +28,117 @@ try {
   version = pkg.version;
 } catch {}
 
+// ----------------------------------------------------------------
+// Watchdog helpers (Windows only)
+// ----------------------------------------------------------------
+
+function writeWatchdogScript() {
+  try {
+    fs.mkdirSync(CLAUTH_DIR, { recursive: true });
+    fs.copyFileSync(SOURCE_PS1, DEST_PS1);
+    return true;
+  } catch (err) {
+    console.log(`  ! Could not write watchdog script: ${err.message}`);
+    return false;
+  }
+}
+
+function isWatchdogRegistered() {
+  try {
+    const r = spawnSync(PS_EXE, [
+      "-NoProfile", "-Command",
+      `(Get-ScheduledTask -TaskName '${TASK_NAME}' -ErrorAction SilentlyContinue) -ne $null`,
+    ], { encoding: "utf8", stdio: ["pipe","pipe","pipe"], timeout: 5000 });
+    return (r.stdout || "").trim().toLowerCase() === "true";
+  } catch { return false; }
+}
+
+function registerWatchdog() {
+  const escaped = DEST_PS1.replace(/'/g, "''");
+  const psCmd = [
+    `$a = New-ScheduledTaskAction -Execute 'powershell.exe'`,
+    ` -Argument '-NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File \\"${escaped}\\"';`,
+    `$t = New-ScheduledTaskTrigger -AtLogOn;`,
+    `$s = New-ScheduledTaskSettingsSet -ExecutionTimeLimit 0 -RestartCount 3`,
+    ` -RestartInterval (New-TimeSpan -Minutes 1) -MultipleInstances IgnoreNew;`,
+    `Unregister-ScheduledTask -TaskName '${TASK_NAME}' -Confirm:$false -ErrorAction SilentlyContinue;`,
+    `Register-ScheduledTask -TaskName '${TASK_NAME}' -Action $a -Trigger $t`,
+    ` -Settings $s -RunLevel Highest -Description 'clauth daemon watchdog';`,
+  ].join(" ");
+
+  // Try direct first (works if already running as Administrator)
+  const direct = spawnSync(PS_EXE, [
+    "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", psCmd,
+  ], { encoding: "utf8", stdio: ["pipe","pipe","pipe"], timeout: 10000 });
+
+  if (direct.status === 0) return "ok";
+
+  // Trigger UAC elevation — opens the Windows approval dialog
+  const inner = psCmd.replace(/"/g, '\\"');
+  const elevated = spawnSync(PS_EXE, [
+    "-NoProfile", "-Command",
+    `Start-Process '${PS_EXE}' -Verb RunAs -Wait -ArgumentList '-NoProfile -ExecutionPolicy Bypass -Command "${inner}"'`,
+  ], { stdio: "inherit", encoding: "utf8", timeout: 60000 });
+
+  return elevated.status === 0 ? "ok" : "denied";
+}
+
+function startWatchdog() {
+  spawnSync(PS_EXE, [
+    "-NoProfile", "-Command",
+    `Start-ScheduledTask -TaskName '${TASK_NAME}' -ErrorAction SilentlyContinue`,
+  ], { stdio: "pipe", timeout: 5000 });
+}
+
+// ----------------------------------------------------------------
+// Main
+// ----------------------------------------------------------------
+
 async function main() {
   const configPath = path.join(CONFIG_DIR, "config.json");
-  const isUpgrade = fs.existsSync(configPath);
+  const isUpgrade  = fs.existsSync(configPath);
 
   if (isUpgrade) {
     console.log(`\n  \u2713 clauth upgraded to v${version}`);
     console.log(`  \u2713 Config preserved at ${CONFIG_DIR}`);
-
-    // Try to detect running daemon
     try {
       const controller = new AbortController();
-      const timeout = setTimeout(() => controller.abort(), 2000);
+      const to = setTimeout(() => controller.abort(), 2000);
       const res = await fetch("http://127.0.0.1:52437/ping", { signal: controller.signal });
-      clearTimeout(timeout);
-      if (res.ok) {
-        console.log("  \u21BB Daemon is running \u2014 restart it with: clauth serve restart");
-      }
+      clearTimeout(to);
+      if (res.ok) console.log("  \u21BB Daemon running \u2014 restart: clauth serve restart");
     } catch {
       console.log("  \u25CB Daemon not running");
     }
-
-    console.log("  Run 'clauth doctor' to verify installation\n");
   } else {
     console.log(`\n  Welcome to clauth v${version}!`);
     console.log("  Run 'clauth install' to set up your vault");
-    console.log("  Run 'clauth doctor' to check prerequisites\n");
   }
+
+  // Windows: register watchdog on fresh install; refresh script on upgrade
+  if (os.platform() === "win32") {
+    const registered = isWatchdogRegistered();
+    if (!registered) {
+      console.log("\n  Setting up auto-restart watchdog...");
+      console.log("  Windows will ask for administrator approval \u2014 please click Yes.\n");
+      if (writeWatchdogScript()) {
+        const result = registerWatchdog();
+        if (result === "ok") {
+          startWatchdog();
+          console.log("  \u2713 Watchdog registered and started (Task: ClautWatchdog)");
+          console.log(`  \u2713 Script: ${DEST_PS1}`);
+        } else {
+          console.log("  ! Watchdog registration skipped (approval denied).");
+          console.log("    Install later with: clauth watchdog install");
+        }
+      }
+    } else {
+      writeWatchdogScript(); // refresh script on upgrade
+      console.log("  \u2713 Watchdog script updated");
+    }
+  }
+
+  console.log("  Run 'clauth doctor' to verify installation\n");
 }
 
 main().catch(() => {});