@mindexec/cli 0.2.421 → 0.2.423

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindexec/cli",
-  "version": "0.2.421",
+  "version": "0.2.423",
   "description": "MindExec local runtime and bridge CLI",
   "main": "server.js",
   "type": "module",

package/server.js

@@ -699,6 +699,7 @@ async function writeStableAuthSessionPayload(content) {
     }
 
     await writePrivateTextFile(stablePath, payload);
+    clearRemoteRegistryAuthRefreshBackoff('auth-session-write');
     return stablePath;
 }
 
@@ -3677,6 +3678,15 @@ const REMOTE_REGISTRY_FOLLOWER_FAST_RETRY_MS = Math.max(500, Number(process.env.
 const REMOTE_REGISTRY_FOLLOWER_MISSING_SESSION_FAST_RETRY_COUNT = Math.max(
     1,
     Number(process.env.MINDEXEC_REMOTE_REGISTRY_MISSING_SESSION_FAST_RETRY_COUNT || 5) || 5);
+const REMOTE_REGISTRY_AUTH_REFRESH_BACKOFF_BASE_MS = Math.max(
+    5000,
+    Number(process.env.MINDEXEC_REMOTE_REGISTRY_AUTH_REFRESH_BACKOFF_BASE_MS || 30000) || 30000);
+const REMOTE_REGISTRY_AUTH_REFRESH_BACKOFF_MAX_MS = Math.max(
+    REMOTE_REGISTRY_AUTH_REFRESH_BACKOFF_BASE_MS,
+    Number(process.env.MINDEXEC_REMOTE_REGISTRY_AUTH_REFRESH_BACKOFF_MAX_MS || 300000) || 300000);
+const REMOTE_REGISTRY_AUTH_REFRESH_LOG_REPEAT_MS = Math.max(
+    10000,
+    Number(process.env.MINDEXEC_REMOTE_REGISTRY_AUTH_REFRESH_LOG_REPEAT_MS || 60000) || 60000);
 const REMOTE_REGISTRY_FOLLOWER_INACTIVE_STOP_COUNT = Math.max(2, Number(process.env.MINDEXEC_REMOTE_REGISTRY_INACTIVE_STOP_COUNT || 8) || 8);
 const REMOTE_REGISTRY_FOLLOWER_INACTIVE_GRACE_MS = Math.max(500, Number(process.env.MINDEXEC_REMOTE_REGISTRY_INACTIVE_GRACE_MS || 60000) || 60000);
 const REMOTE_REGISTRY_INACTIVE_TARGET_RECOVERY_MS = Math.max(
@@ -3724,6 +3734,13 @@ let remoteRegistryFollowerConsecutiveMissingSession = 0;
 let remoteRegistryFollowerConsecutiveInactiveTarget = 0;
 let remoteRegistryFollowerInactiveTargetFirstAt = 0;
 let remoteRegistrySessionRefreshPromise = null;
+let remoteRegistryAuthRefreshBackoff = {
+    key: '',
+    until: 0,
+    failureCount: 0,
+    lastError: '',
+    lastLogAt: 0
+};
 let remoteRegistryRealtimeSocket = null;
 let remoteRegistryRealtimeSessionKey = '';
 let remoteRegistryRealtimeTopic = '';
@@ -6270,6 +6287,98 @@ function parseSupabaseSessionForRegistry(content) {
     };
 }
 
+function getRemoteRegistryAuthRefreshKey(session) {
+    const refreshToken = String(session?.refreshToken || '').trim();
+    if (!refreshToken) {
+        return '';
+    }
+
+    const digest = crypto.createHash('sha256').update(refreshToken).digest('hex').slice(0, 24);
+    return `${safeRemoteAgentField(session?.userId || '', 80)}|${digest}|${Number(session?.expiresAtMs || 0)}`;
+}
+
+function clearRemoteRegistryAuthRefreshBackoff(reason = 'cleared') {
+    if (!remoteRegistryAuthRefreshBackoff?.key) {
+        return false;
+    }
+
+    remoteRegistryAuthRefreshBackoff = {
+        key: '',
+        until: 0,
+        failureCount: 0,
+        lastError: '',
+        lastLogAt: 0
+    };
+    if (VERBOSE_REMOTE_AGENT_LOGS) {
+        logEvent('remote', `registry auth refresh backoff cleared ${formatKeyValue('reason', reason)}`, 'remote');
+    }
+    return true;
+}
+
+function getRemoteRegistryAuthRefreshBackoff(session) {
+    const key = getRemoteRegistryAuthRefreshKey(session);
+    if (!key) {
+        return { blocked: false, key: '' };
+    }
+
+    if (remoteRegistryAuthRefreshBackoff.key !== key) {
+        return { blocked: false, key };
+    }
+
+    const now = Date.now();
+    const until = Number(remoteRegistryAuthRefreshBackoff.until || 0);
+    if (until > now) {
+        return {
+            blocked: true,
+            key,
+            retryInMs: Math.max(0, until - now),
+            error: remoteRegistryAuthRefreshBackoff.lastError || 'auth-refresh-backoff',
+            failureCount: Number(remoteRegistryAuthRefreshBackoff.failureCount || 0)
+        };
+    }
+
+    return { blocked: false, key };
+}
+
+function recordRemoteRegistryAuthRefreshFailure(session, error, reason = 'registry') {
+    const key = getRemoteRegistryAuthRefreshKey(session);
+    const now = Date.now();
+    const previousCount = remoteRegistryAuthRefreshBackoff.key === key
+        ? Number(remoteRegistryAuthRefreshBackoff.failureCount || 0)
+        : 0;
+    const failureCount = previousCount + 1;
+    const backoffMs = Math.min(
+        REMOTE_REGISTRY_AUTH_REFRESH_BACKOFF_MAX_MS,
+        REMOTE_REGISTRY_AUTH_REFRESH_BACKOFF_BASE_MS * Math.max(1, Math.pow(2, Math.min(4, failureCount - 1))));
+    const message = error?.message || String(error || 'auth-refresh-failed');
+    const lastLogAt = remoteRegistryAuthRefreshBackoff.key === key
+        ? Number(remoteRegistryAuthRefreshBackoff.lastLogAt || 0)
+        : 0;
+    const shouldLog = lastLogAt <= 0 ||
+        now - lastLogAt >= REMOTE_REGISTRY_AUTH_REFRESH_LOG_REPEAT_MS ||
+        remoteRegistryAuthRefreshBackoff.lastError !== message;
+
+    remoteRegistryAuthRefreshBackoff = {
+        key,
+        until: now + backoffMs,
+        failureCount,
+        lastError: message,
+        lastLogAt: shouldLog ? now : lastLogAt
+    };
+
+    if (shouldLog) {
+        logWarn(
+            'remote',
+            `registry auth refresh failed ${formatKeyValue('reason', reason || 'registry')} ${formatKeyValue('error', message)} ${formatKeyValue('retryInMs', backoffMs)}`);
+    }
+
+    return {
+        retryInMs: backoffMs,
+        failureCount,
+        error: message
+    };
+}
+
 async function refreshSupabaseSessionForRegistry(config, sessionPayload, reason = 'registry') {
     const currentSession = parseSupabaseSessionForRegistry(sessionPayload?.content);
     if (!currentSession?.refreshToken) {
@@ -6283,6 +6392,14 @@ async function refreshSupabaseSessionForRegistry(config, sessionPayload, reason
         return await remoteRegistrySessionRefreshPromise;
     }
 
+    const backoff = getRemoteRegistryAuthRefreshBackoff(currentSession);
+    if (backoff.blocked === true) {
+        return {
+            ok: false,
+            reason: `auth-refresh-backoff:${Math.ceil(Number(backoff.retryInMs || 0) / 1000)}s`
+        };
+    }
+
     remoteRegistrySessionRefreshPromise = (async () => {
         const url = new URL('/auth/v1/token', config.url);
         url.searchParams.set('grant_type', 'refresh_token');
@@ -6321,6 +6438,7 @@ async function refreshSupabaseSessionForRegistry(config, sessionPayload, reason
             `registry auth refreshed ${formatKeyValue('reason', reason || 'registry')} ${formatKeyValue('expiresInMs', Math.max(0, session.expiresAtMs - Date.now()))}`,
             'remote');
 
+        clearRemoteRegistryAuthRefreshBackoff('auth-refresh-success');
         return {
             ok: true,
             reason: 'refreshed',
@@ -6387,16 +6505,14 @@ async function readFreshSupabaseSessionForRegistry(config, reason = 'registry')
             refreshError: refreshed.reason || 'auth-refresh-skipped'
         };
     } catch (error) {
-        logWarn(
-            'remote',
-            `registry auth refresh failed ${formatKeyValue('reason', reason || 'registry')} ${formatKeyValue('error', error?.message || String(error || ''))}`);
+        const failure = recordRemoteRegistryAuthRefreshFailure(session, error, reason);
         return {
             found: true,
             payload: sessionPayload,
             session,
             refreshed: false,
             expired: session.expiresAtMs > 0 && session.expiresAtMs <= Date.now(),
-            refreshError: error?.message || String(error || '')
+            refreshError: failure.error
         };
     }
 }

package/wwwroot/_content/MindExecution.Shared/css/mind-map-overrides.css

@@ -2611,8 +2611,6 @@ html body .css3d-resolution-wrapper.lod-low.node-type-csv-table .csv-table td {
 
 .css3d-resolution-wrapper.node-type-templatelauncher:has(> .map-node-template-card.map-node-remote-fleet) {
     outline: none !important;
-    -webkit-box-shadow: none !important;
-    box-shadow: none !important;
     -webkit-filter: none !important;
     filter: none !important;
 }
@@ -2621,9 +2619,9 @@ html body .css3d-resolution-wrapper.lod-low.node-type-csv-table .csv-table td {
     border: 2px solid var(--node-selection-edge, #2563eb) !important;
 }
 
-/* Template launcher and Multi Desktop Monitor own their visual chrome on the
-   card itself. Keep the CSS3D wrapper neutral so motion CSS3D and the passive
-   DOM overlay do not stack different selection chrome. */
+/* Template launcher cards own their internal border chrome. The Multi Desktop
+   Monitor still keeps the canonical CSS3D wrapper depth shadow so it reads like
+   a normal canvas node while its screen-wall body stays flat. */
 .css3d-resolution-wrapper.node-type-templatelauncher.selected {
     outline: none !important;
     -webkit-box-shadow: none !important;
@@ -2636,6 +2634,19 @@ html body .css3d-resolution-wrapper.lod-low.node-type-csv-table .csv-table td {
     box-shadow: none !important;
 }
 
+html body .css3d-resolution-wrapper.node-type-templatelauncher:not(.lod-low):has(> .map-node-template-card.map-node-remote-fleet) {
+    -webkit-box-shadow:
+        0 0 6px rgba(15, 23, 42, 0.25),
+        0 0 16px rgba(15, 23, 42, 0.18),
+        0 0 30px rgba(15, 23, 42, 0.12),
+        0 0 50px rgba(15, 23, 42, 0.08) !important;
+    box-shadow:
+        0 0 6px rgba(15, 23, 42, 0.25),
+        0 0 16px rgba(15, 23, 42, 0.18),
+        0 0 30px rgba(15, 23, 42, 0.12),
+        0 0 50px rgba(15, 23, 42, 0.08) !important;
+}
+
 .map-node-template-card,
 .map-node-template-card * {
     box-sizing: border-box;

package/wwwroot/_content/MindExecution.Shared/js/mind-map-css3d-manager.js

@@ -418,7 +418,6 @@
             }
             .css3d-resolution-wrapper.node-type-templatelauncher:has(> .map-node-template-card.map-node-remote-fleet) {
                 outline: none !important;
-                box-shadow: none !important;
                 filter: none !important;
             }
             .css3d-resolution-wrapper.node-type-templatelauncher.selected > .map-node-template-card.map-node-remote-fleet {

package/wwwroot/index.html

@@ -8,7 +8,7 @@
     <meta name="description" content="MindExec is an AI business execution OS for solo builders who want to turn notes, research, assets, and repeatable execution Skills into revenue-producing work." />
     <base href="/" />
     <link rel="stylesheet" href="_content/MindExecution.Shared/css/app.css?v=20260628-local-oauth-v838" />
-    <link rel="stylesheet" href="_content/MindExecution.Shared/css/mind-map-overrides.css?v=20260627-local-oauth-relay-v836" />
+    <link rel="stylesheet" href="_content/MindExecution.Shared/css/mind-map-overrides.css?v=20260629-mdm-shadow-v856" />
     <!-- ??좎뜦堉??Font Awesome (local) ??좎뜦堉??-->
     <link rel="stylesheet" href="_content/MindExecution.Shared/lib/font-awesome/css/all.min.css" />
     <!-- ??좎뜦堉??-->
@@ -579,7 +579,7 @@
             }
 
             const base = '_content/MindExecution.Shared/js/';
-            const scriptVersion = '20260629-wheel-zoom-immediate-lite-v855';
+            const scriptVersion = '20260629-mdm-shadow-v856';
             const scriptUrl = (script) => `${base}${script}?v=${scriptVersion}`;
             console.log(`[Script Loader] Shared JS version: ${scriptVersion}`);
             const criticalScripts = [

package/wwwroot/service-worker-assets.js

@@ -1,5 +1,5 @@
 self.assetsManifest = {
-    "version":  "XIia70hb",
+    "version":  "fA2W79ZH",
     "assets":  [
                    {
                        "hash":  "sha256-+CSYMcqLNTsq3VnH11jgYyOCCdxvHzL74CBmo4sCmMU=",
@@ -42,7 +42,7 @@
                        "url":  "_content/MindExecution.Shared/css/app.css"
                    },
                    {
-                       "hash":  "sha256-5H2C1LgV4x6yd6MJWyrR8rOgzngsEF5SfIROGDWenxc=",
+                       "hash":  "sha256-uoZWP9rvAR8US7KYwnM+F7X/1sozQpAiyOlyUr0cWeU=",
                        "url":  "_content/MindExecution.Shared/css/mind-map-overrides.css"
                    },
                    {
@@ -86,7 +86,7 @@
                        "url":  "_content/MindExecution.Shared/js/mind-map-core.js.backup"
                    },
                    {
-                       "hash":  "sha256-xGt9LTobfy8NmStfgnMGnwq4rmbMaDLpp41TSFZcxEA=",
+                       "hash":  "sha256-UFpa7SNYN+/9N9usMa7jWfvlI/mji1W6A27p4c2nQUs=",
                        "url":  "_content/MindExecution.Shared/js/mind-map-css3d-manager.js"
                    },
                    {
@@ -826,7 +826,7 @@
                        "url":  "icon-512.png"
                    },
                    {
-                       "hash":  "sha256-c7bd5qxUiH3yqT95Xt6vckY20uqzasgvEGQnonVsO1M=",
+                       "hash":  "sha256-0Gf0h8/sXPcC9sq1+w9IbEs2NZdf16v+cuObSCOWns8=",
                        "url":  "index.html"
                    },
                    {

package/wwwroot/service-worker.js

@@ -1,4 +1,4 @@
-/* Manifest version: XIia70hb */
+/* Manifest version: fA2W79ZH */
 // Hosted deployments should prefer the network over stale offline caches.
 // This service worker immediately clears old Blazor offline caches and unregisters itself.