@lifeaitools/clauth 1.5.54 → 1.5.56

package/cli/commands/serve.js

@@ -4774,16 +4774,14 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
       }
     }
 
-    // Unknown route — don't count browser/MCP noise as auth failures
-    const isBenign = reqPath.startsWith("/.well-known/") || [
-      "/favicon.ico", "/robots.txt", "/apple-touch-icon.png", "/apple-touch-icon-precomposed.png",
-      "/sse", "/mcp", "/gws", "/clauth", "/message", "/register", "/authorize", "/token", "/shutdown", "/restart",
-    ].includes(reqPath);
-    if (isBenign) {
-      res.writeHead(404, { "Content-Type": "application/json", ...CORS });
-      return res.end(JSON.stringify({ error: "Not found" }));
-    }
-    return strike(res, 404, `Unknown endpoint: ${reqPath}`);
+    // Unknown route — a wrong URL is not an auth failure. Log it, return 404,
+    // but do NOT increment failCount (which locks the vault at MAX_FAILS).
+    // Auth failures (wrong password, wrong token) still strike via /auth and /get/:service.
+    try {
+      fs.appendFileSync(LOG_FILE, `[${new Date().toISOString()}] 404 ${method} ${reqPath}\n`);
+    } catch {}
+    res.writeHead(404, { "Content-Type": "application/json", ...CORS });
+    return res.end(JSON.stringify({ error: `Unknown endpoint: ${reqPath}` }));
   });
 
   // OAuth 2.1 public client — no static credentials to expose

package/cli/index.js

@@ -11,6 +11,7 @@ import { getMachineHash, deriveToken, deriveSeedHash } from "./fingerprint.js";
 import * as api from "./api.js";
 import os from "os";
 import fs from "fs";
+import path from "path";
 
 const config = new Conf(getConfOptions());
 const VERSION = JSON.parse(fs.readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
@@ -636,7 +637,7 @@ tunnelCmd
 // ──────────────────────────────────────────────
 program
   .command("chitchat")
-  .description("Join a chitchat collab session — opens claude interactively")
+  .description("Join a chitchat collab session — auto-starts /rdc:collab via claude -p")
   .requiredOption("--session <id>", "Session ID from claude.ai")
   .action(async (opts) => {
     const id = opts.session;
@@ -651,25 +652,35 @@ program
       console.error(`\n  ✗ Daemon not reachable at http://127.0.0.1:52437 — is clauth running?\n`);
       process.exit(1);
     }
-    console.log(chalk.cyan(`
-  ┌─────────────────────────────────────────────────┐
-  │  rdc:collab session ready                       │
-  │                                                 │
-  │  Session: ${id}  │
-  │                                                 │
-  │  Type this in Claude Code:                      │
-  │  /rdc:collab --session ${id.slice(0,8)}...              │
-  └─────────────────────────────────────────────────┘
-`));
-    console.log(chalk.yellow(`  /rdc:collab --session ${id}\n`));
-    // Launch claude interactively in this terminal
-    const { spawn } = await import("child_process");
-    const proc = spawn("claude", [], {
-      stdio: "inherit",
-      cwd: "C:/Dev/regen-root",
+    console.log(chalk.cyan(`\n  [collab] session ${id} — starting /rdc:collab...\n`));
+
+    // Find claude binary (same candidates as daemon)
+    const { execSync: es, spawn } = await import("child_process");
+    let claudeBin = null;
+    for (const c of [
+      process.env.CLAUDE_BIN,
+      path.join(process.env.APPDATA || '', 'npm', 'claude.cmd'),
+      path.join(process.env.APPDATA || '', 'npm', 'claude'),
+      'claude',
+    ].filter(Boolean)) {
+      try { es(`"${c}" --version`, { stdio: 'ignore', timeout: 3000 }); claudeBin = c; break; } catch {}
+    }
+    if (!claudeBin) {
+      console.error('  ✗ claude CLI not found — is @anthropic-ai/claude-code installed globally?');
+      process.exit(1);
+    }
+
+    // Auto-invoke /rdc:collab skill with streaming output to this terminal
+    const proc = spawn(claudeBin, [
+      '-p', `/rdc:collab --session ${id}`,
+      '--dangerously-skip-permissions',
+    ], {
+      stdio: 'inherit',
+      cwd: 'C:/Dev/regen-root',
       shell: true,
     });
-    proc.on("exit", (code) => process.exit(code ?? 0));
+    proc.on('error', e => { console.error(`  ✗ spawn error: ${e.message}`); process.exit(1); });
+    proc.on('exit', code => process.exit(code ?? 0));
   });
 
 // ──────────────────────────────────────────────

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/clauth",
-  "version": "1.5.54",
+  "version": "1.5.56",
   "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
   "type": "module",
   "bin": {