@lifeaitools/clauth 1.4.9 → 1.5.1

package/cli/commands/serve.js

@@ -2362,6 +2362,22 @@ async function updateBuildStatus() {
 }
 setInterval(updateBuildStatus, 10000);
 
+// Detect daemon restart (PID change) and reload so boot() runs fresh.
+// Without this, an old tab stays in main-view after restart, sees tunnel
+// as not_started (vault locked), and gets stuck showing "checking tunnel".
+let _watchedPid = null;
+setInterval(async () => {
+  try {
+    const p = await fetch(BASE + "/ping").then(r => r.json());
+    if (_watchedPid && p.pid !== _watchedPid) { window.location.reload(); return; }
+    _watchedPid = p.pid;
+    // Also recover if vault became locked on us (e.g. user locked from another tab)
+    if (p.locked && document.getElementById("main-view").style.display !== "none") {
+      window.location.reload();
+    }
+  } catch {}
+}, 5000);
+
 boot();
 </script>
 </body>
@@ -2465,7 +2481,11 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
   }
 
   async function startTunnel() {
-    if (tunnelProc) return; // already running
+    if (tunnelProc) {
+      // Already running — ensure status reflects reality (caller may have reset it to "starting")
+      tunnelStatus = "live";
+      return;
+    }
     tunnelUrl = null;
     tunnelError = null;
 
@@ -3433,7 +3453,10 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
             try {
               const pwEscaped = pw.replace(/'/g, "''");
               const psExpr = `[Convert]::ToBase64String([Security.Cryptography.ProtectedData]::Protect([Text.Encoding]::UTF8.GetBytes('${pwEscaped}'),$null,'CurrentUser'))`;
-              const encrypted = execSyncTop(`powershell -NoProfile -Command "${psExpr}"`, { encoding: "utf8", timeout: 5000 }).trim();
+              const psExe = process.env.SystemRoot
+                ? `${process.env.SystemRoot}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`
+                : "powershell.exe";
+              const encrypted = execSyncTop(`"${psExe}" -NoProfile -Command "${psExpr}"`, { encoding: "utf8", timeout: 5000 }).trim();
               fs.writeFileSync(bootKeyPath, encrypted, "utf8");
               const sealLog = `[${new Date().toISOString()}] Auto-sealed boot.key via DPAPI (crash recovery enabled)\n`;
               try { fs.appendFileSync(LOG_FILE, sealLog); } catch {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/clauth",
-  "version": "1.4.9",
+  "version": "1.5.1",
   "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
   "type": "module",
   "bin": {