@plexor-dev/claude-code-plugin-localhost 0.1.0-beta.11 → 0.1.0-beta.13

package/commands/plexor-enabled.md

@@ -2,9 +2,7 @@
 description: Enable or disable Plexor proxy (routes all traffic through Plexor API) (user)
 ---
 
-# Plexor Enabled
-
-Toggle Plexor proxy on or off.
+**RULE: Execute this workflow EXACTLY ONCE. After completing all steps, STOP. DO NOT restart the workflow. DO NOT re-execute any commands. DO NOT call any other tools.**
 
 ## If argument provided (on/off/true/false)
 
@@ -14,11 +12,11 @@ Run the command directly with the argument:
 node ~/.claude/plugins/plexor/commands/plexor-enabled.js <argument>
 ```
 
-Then display the output and STOP.
+Then present the output to the user and STOP.
 
 ## If NO argument provided
 
-**Step 1**: First get current status by running:
+**Step 1**: Get current status by running:
 
 ```bash
 node ~/.claude/plugins/plexor/commands/plexor-enabled.js
@@ -26,14 +24,14 @@ node ~/.claude/plugins/plexor/commands/plexor-enabled.js
 
 **Step 2**: Based on the output, use AskUserQuestion to present options:
 
-If currently ENABLED (shows "● Enabled" or "● Active"):
+If currently ENABLED (shows "Enabled" or "Active"):
 - Question: "Plexor is currently ON. What would you like to do?"
 - Header: "Plexor"
 - Options:
   1. **Turn OFF** - Disable Plexor routing (connect directly to Anthropic)
   2. **Keep ON** - No change
 
-If currently DISABLED (shows "○ Disabled" or "○ Inactive"):
+If currently DISABLED (shows "Disabled" or "Inactive"):
 - Question: "Plexor is currently OFF. What would you like to do?"
 - Header: "Plexor"
 - Options:
@@ -45,4 +43,4 @@ If currently DISABLED (shows "○ Disabled" or "○ Inactive"):
 - If "Turn ON" selected: Run `node ~/.claude/plugins/plexor/commands/plexor-enabled.js true`
 - If "Keep" selected: Do nothing, just confirm current state
 
-**IMPORTANT**: After completing, STOP. Do not read files, explore codebase, or run additional commands.
+After completing all steps, STOP. DO NOT restart the workflow.

package/commands/plexor-login.js

@@ -76,6 +76,18 @@ function saveConfig(config) {
   }
 }
 
+function isPlexorApiKey(token) {
+  return typeof token === 'string' && token.startsWith('plx_') && token.length >= 20;
+}
+
+function isJwtToken(token) {
+  if (typeof token !== 'string' || !token.startsWith('eyJ')) {
+    return false;
+  }
+  const parts = token.split('.');
+  return parts.length === 3 && parts.every(part => part.length > 0);
+}
+
 function validateApiKey(apiUrl, apiKey) {
   return new Promise((resolve, reject) => {
     const url = new URL(`${apiUrl}/v1/user`);
@@ -119,6 +131,56 @@ function validateApiKey(apiUrl, apiKey) {
   });
 }
 
+function validateJwtToken(apiUrl, jwtToken) {
+  return new Promise((resolve, reject) => {
+    const url = new URL(`${apiUrl}/v1/auth/me`);
+    const isHttps = url.protocol === 'https:';
+    const lib = isHttps ? https : http;
+
+    const options = {
+      hostname: url.hostname,
+      port: url.port || (isHttps ? 443 : 80),
+      path: url.pathname,
+      method: 'GET',
+      headers: {
+        'Authorization': `Bearer ${jwtToken}`
+      }
+    };
+
+    const req = lib.request(options, (res) => {
+      let data = '';
+      res.on('data', chunk => data += chunk);
+      res.on('end', () => {
+        if (res.statusCode === 200) {
+          try {
+            resolve(JSON.parse(data));
+          } catch {
+            reject(new Error('Invalid response from server'));
+          }
+        } else if (res.statusCode === 401) {
+          reject(new Error('Invalid login token'));
+        } else {
+          reject(new Error(`Server error: ${res.statusCode}`));
+        }
+      });
+    });
+
+    req.on('error', (err) => reject(new Error(`Connection failed: ${err.message}`)));
+    req.setTimeout(10000, () => {
+      req.destroy();
+      reject(new Error('Connection timeout'));
+    });
+    req.end();
+  });
+}
+
+function validateCredential(apiUrl, credential) {
+  if (isJwtToken(credential)) {
+    return validateJwtToken(apiUrl, credential);
+  }
+  return validateApiKey(apiUrl, credential);
+}
+
 /**
  * Read API key from stdin (for piped input)
  * @returns {Promise<string>} The API key read from stdin
@@ -220,10 +282,10 @@ async function main() {
     console.log('');
   }
 
-  // Validate key format
-  if (!apiKey.startsWith('plx_') || apiKey.length < 20) {
-    console.error(`Error: Invalid API key format`);
-    console.error(`API keys start with "plx_" and are at least 20 characters`);
+  // Validate credential format (Plexor API key OR login JWT)
+  if (!isPlexorApiKey(apiKey) && !isJwtToken(apiKey)) {
+    console.error(`Error: Invalid credential format`);
+    console.error(`Expected Plexor API key ("plx_...") or login token ("eyJ...")`);
     process.exit(1);
   }
 
@@ -232,7 +294,7 @@ async function main() {
   console.log('Validating API key...');
 
   try {
-    const user = await validateApiKey(apiUrl, apiKey);
+    const user = await validateCredential(apiUrl, apiKey);
 
     config.auth = config.auth || {};
     config.auth.api_key = apiKey;

package/commands/plexor-login.md

@@ -2,26 +2,10 @@
 description: Authenticate with Plexor to enable optimization (user)
 ---
 
-# Plexor Login
+**RULE: Execute the bash command below EXACTLY ONCE. After the Bash tool returns output, your ONLY action is to present that output to the user. DO NOT re-execute the command. DO NOT call any other tools.**
 
-Run this command to authenticate with Plexor:
+Pass the API key as argument (format: `plx_your_api_key_here`).
 
 ```bash
-node ~/.claude/plugins/plexor/commands/plexor-login.js
+node ~/.claude/plugins/plexor/commands/plexor-login.js $ARGUMENTS
 ```
-
-To login with an API key:
-
-```bash
-node ~/.claude/plugins/plexor/commands/plexor-login.js plx_your_api_key_here
-```
-
-Use the Bash tool to execute this command.
-
-**IMPORTANT**: After running this command and displaying the output, STOP. Do not:
-- Read any files
-- Explore the codebase
-- Run additional commands
-- Ask follow-up questions
-
-The command output is the complete response. Simply show the output and wait for the user's next input.

package/commands/plexor-logout.md

@@ -2,26 +2,8 @@
 description: Log out from Plexor and clear credentials (user)
 ---
 
-# Plexor Logout
-
-Run this command to log out and clear credentials:
-
-```bash
-node ~/.claude/plugins/plexor/commands/plexor-logout.js
-```
-
-To also clear the cache:
+**RULE: Execute the bash command below EXACTLY ONCE. After the Bash tool returns output, your ONLY action is to present that output to the user. DO NOT re-execute the command. DO NOT call any other tools.**
 
 ```bash
-node ~/.claude/plugins/plexor/commands/plexor-logout.js --clear-cache
+node ~/.claude/plugins/plexor/commands/plexor-logout.js $ARGUMENTS
 ```
-
-Use the Bash tool to execute this command.
-
-**IMPORTANT**: After running this command and displaying the output, STOP. Do not:
-- Read any files
-- Explore the codebase
-- Run additional commands
-- Ask follow-up questions
-
-The command output is the complete response. Simply show the output and wait for the user's next input.

package/commands/plexor-setup.md

@@ -2,6 +2,8 @@
 description: First-time setup wizard for Plexor with Claude Code (user)
 ---
 
+**RULE: Execute this workflow EXACTLY ONCE. After completing all steps, STOP. DO NOT restart the workflow. DO NOT re-execute any commands. DO NOT call any other tools.**
+
 # Plexor Setup Wizard
 
 Guide users through first-time Plexor setup. **No manual environment variable configuration required!**
@@ -165,8 +167,9 @@ Commands:
 Changes take effect immediately in all Claude Code sessions!
 ```
 
-**IMPORTANT NOTES**:
+**NOTES**:
 - The `~/.claude/settings.json` env block is the KEY mechanism that routes Claude Code through Plexor
 - ANTHROPIC_AUTH_TOKEN takes precedence over ANTHROPIC_API_KEY (use AUTH_TOKEN for the Plexor key)
 - Changes take effect immediately - no shell restart needed
-- After completing setup, STOP. Do not run additional commands.
+
+After completing all steps, STOP. DO NOT restart the workflow. DO NOT re-execute any commands.

package/commands/plexor-status.md

@@ -2,20 +2,8 @@
 description: Show Plexor optimization statistics and savings (user)
 ---
 
-# Plexor Status
-
-Run this command to display Plexor statistics:
+**RULE: Execute the bash command below EXACTLY ONCE. After the Bash tool returns output, your ONLY action is to present that output to the user. DO NOT re-execute the command. DO NOT call any other tools.**
 
 ```bash
 node ~/.claude/plugins/plexor/commands/plexor-status.js
 ```
-
-Use the Bash tool to execute this single command.
-
-**IMPORTANT**: After running this command and displaying the output, STOP. Do not:
-- Read any files
-- Explore the codebase
-- Run additional commands
-- Ask follow-up questions
-
-The command output is the complete response. Simply show the output and wait for the user's next input.

package/hooks/intercept.js

@@ -179,6 +179,17 @@ async function main() {
     input = await readStdin();
     request = JSON.parse(input);
 
+    // Issue #2042: Check for slash commands FIRST, before ANY other processing
+    // Slash commands must pass through completely clean — no metadata injection
+    // Adding _plexor_client or _plexor to slash command requests adds context noise
+    // that causes the model to re-execute commands in a loop
+    // Note: session.recordPassthrough() intentionally omitted — slash commands are
+    // not API requests and should not pollute session analytics
+    if (isSlashCommand(request)) {
+      logger.debug('Slash command detected, clean passthrough (no metadata)');
+      return output(request);  // Completely clean — no metadata added
+    }
+
     // Phase 3 Hypervisor Mode Detection
     // When ANTHROPIC_BASE_URL points to Plexor, all intelligence is server-side
     // The plugin just passes through - server handles optimization, routing, quality
@@ -202,25 +213,6 @@ async function main() {
       });
     }
 
-    // CRITICAL: Check for slash commands FIRST (before agentic check)
-    // Slash commands like /plexor-status should pass through unchanged
-    // Must check before isAgenticRequest since all Claude Code requests have tools
-    if (isSlashCommand(request)) {
-      logger.debug('Slash command detected, passing through unchanged');
-      session.recordPassthrough();
-      return output({
-        ...request,
-        plexor_cwd: process.cwd(),
-        _plexor: {
-          request_id: generateRequestId('slash'),  // Issue #701: Add request_id for tracking
-          source: 'passthrough_slash_command',
-          reason: 'slash_command_detected',
-          cwd: process.cwd(),
-          latency_ms: Date.now() - startTime
-        }
-      });
-    }
-
     // CRITICAL: Skip optimization for CLI commands requiring tool execution
     // Azure CLI, AWS CLI, kubectl, etc. need tools to be preserved
     if (requiresToolExecution(request)) {
@@ -578,12 +570,16 @@ function isSlashCommand(request) {
   }
 
   // Check for system messages with skill instructions
+  // Issue #2042: Updated to match new RULE-based .md format (old H1 headers removed)
   for (const msg of messages) {
     if (msg.role === 'system') {
       const content = typeof msg.content === 'string' ? msg.content : '';
       if (/# Plexor (?:Status|Login|Logout|Mode|Provider|Enabled|Settings)/i.test(content)) {
         return true;
       }
+      if (/plexor\/commands\/plexor-/i.test(content)) {
+        return true;
+      }
     }
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plexor-dev/claude-code-plugin-localhost",
-  "version": "0.1.0-beta.11",
+  "version": "0.1.0-beta.13",
   "description": "LOCALHOST - LLM cost optimization plugin for Claude Code (local dev testing via tunnel)",
   "main": "lib/constants.js",
   "bin": {

package/scripts/uninstall.js

@@ -60,7 +60,19 @@ function main() {
       }
     }
 
-    if (removed.length > 0 || routingDisabled) {
+    // Remove plugin directory (~/.claude/plugins/plexor/)
+    let pluginDirRemoved = false;
+    try {
+      const pluginDir = path.join(os.homedir(), '.claude', 'plugins', 'plexor');
+      if (fs.existsSync(pluginDir)) {
+        fs.rmSync(pluginDir, { recursive: true, force: true });
+        pluginDirRemoved = true;
+      }
+    } catch (e) {
+      console.warn(`  Warning: Could not remove plugin directory: ${e.message}`);
+    }
+
+    if (removed.length > 0 || routingDisabled || pluginDirRemoved) {
       console.log('');
       console.log('  Plexor plugin uninstalled');
       console.log('');
@@ -76,6 +88,11 @@ function main() {
         removed.forEach(cmd => console.log(`    /${cmd}`));
       }
 
+      if (pluginDirRemoved) {
+        console.log('');
+        console.log('  ✓ Removed plugin directory (~/.claude/plugins/plexor/)');
+      }
+
       if (restored.length > 0) {
         console.log('');
         console.log('  Restored from backup:');

package/lib/cache.js

@@ -1,107 +0,0 @@
-/**
- * Plexor Local Cache
- *
- * Stores request/response metadata for cache hit detection.
- */
-
-const fs = require('fs');
-const { CACHE_PATH, PLEXOR_DIR } = require('./constants');
-
-const CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes
-
-class LocalCache {
-  constructor() {
-    this.cachePath = CACHE_PATH;
-    this.cache = this.load();
-  }
-
-  load() {
-    try {
-      const data = fs.readFileSync(this.cachePath, 'utf8');
-      return JSON.parse(data);
-    } catch {
-      return { entries: {}, metadata: {} };
-    }
-  }
-
-  save() {
-    try {
-      if (!fs.existsSync(PLEXOR_DIR)) {
-        fs.mkdirSync(PLEXOR_DIR, { recursive: true });
-      }
-      fs.writeFileSync(this.cachePath, JSON.stringify(this.cache, null, 2));
-      return true;
-    } catch {
-      return false;
-    }
-  }
-
-  generateKey(messages) {
-    const str = JSON.stringify(messages);
-    let hash = 0;
-    for (let i = 0; i < str.length; i++) {
-      hash = ((hash << 5) - hash) + str.charCodeAt(i);
-      hash |= 0;
-    }
-    return `cache_${Math.abs(hash)}`;
-  }
-
-  async get(key) {
-    const entry = this.cache.entries[key];
-    if (!entry) {
-      return null;
-    }
-
-    // Check if expired
-    if (Date.now() - entry.timestamp > CACHE_TTL_MS) {
-      delete this.cache.entries[key];
-      this.save();
-      return null;
-    }
-
-    return entry.value;
-  }
-
-  async set(key, value) {
-    this.cache.entries[key] = {
-      value,
-      timestamp: Date.now()
-    };
-    this.cleanup();
-    this.save();
-  }
-
-  async getMetadata(requestId) {
-    return this.cache.metadata[requestId] || null;
-  }
-
-  async setMetadata(requestId, metadata) {
-    this.cache.metadata[requestId] = {
-      ...metadata,
-      timestamp: Date.now()
-    };
-    this.cleanupMetadata();
-    this.save();
-  }
-
-  cleanup() {
-    const now = Date.now();
-    for (const key of Object.keys(this.cache.entries)) {
-      if (now - this.cache.entries[key].timestamp > CACHE_TTL_MS) {
-        delete this.cache.entries[key];
-      }
-    }
-  }
-
-  cleanupMetadata() {
-    const now = Date.now();
-    const METADATA_TTL_MS = 60 * 60 * 1000; // 1 hour
-    for (const key of Object.keys(this.cache.metadata)) {
-      if (now - this.cache.metadata[key].timestamp > METADATA_TTL_MS) {
-        delete this.cache.metadata[key];
-      }
-    }
-  }
-}
-
-module.exports = LocalCache;

package/lib/config.js

@@ -1,67 +0,0 @@
-/**
- * Plexor Configuration Manager
- */
-
-const fs = require('fs');
-const path = require('path');
-const { CONFIG_PATH, PLEXOR_DIR, DEFAULT_API_URL, DEFAULT_TIMEOUT } = require('./constants');
-
-class ConfigManager {
-  constructor() {
-    this.configPath = CONFIG_PATH;
-  }
-
-  async load() {
-    try {
-      const data = fs.readFileSync(this.configPath, 'utf8');
-      const cfg = JSON.parse(data);
-      return {
-        enabled: cfg.settings?.enabled ?? false,
-        apiKey: cfg.auth?.api_key || '',
-        apiUrl: cfg.settings?.apiUrl || DEFAULT_API_URL,
-        timeout: cfg.settings?.timeout || DEFAULT_TIMEOUT,
-        localCacheEnabled: cfg.settings?.localCacheEnabled ?? false,
-        mode: cfg.settings?.mode || 'balanced',
-        preferredProvider: cfg.settings?.preferred_provider || 'auto'
-      };
-    } catch {
-      return { enabled: false, apiKey: '', apiUrl: DEFAULT_API_URL };
-    }
-  }
-
-  async save(config) {
-    try {
-      if (!fs.existsSync(PLEXOR_DIR)) {
-        fs.mkdirSync(PLEXOR_DIR, { recursive: true });
-      }
-
-      let existing = {};
-      try {
-        const data = fs.readFileSync(this.configPath, 'utf8');
-        existing = JSON.parse(data);
-      } catch {
-        existing = { version: 1, auth: {}, settings: {} };
-      }
-
-      const updated = {
-        ...existing,
-        settings: {
-          ...existing.settings,
-          enabled: config.enabled ?? existing.settings?.enabled,
-          apiUrl: config.apiUrl ?? existing.settings?.apiUrl,
-          timeout: config.timeout ?? existing.settings?.timeout,
-          localCacheEnabled: config.localCacheEnabled ?? existing.settings?.localCacheEnabled,
-          mode: config.mode ?? existing.settings?.mode,
-          preferred_provider: config.preferredProvider ?? existing.settings?.preferred_provider
-        }
-      };
-
-      fs.writeFileSync(this.configPath, JSON.stringify(updated, null, 2), { mode: 0o600 });
-      return true;
-    } catch {
-      return false;
-    }
-  }
-}
-
-module.exports = ConfigManager;

package/lib/constants.js

@@ -1,44 +0,0 @@
-/**
- * Plexor Plugin Constants
- */
-
-const path = require('path');
-
-/**
- * Get the user's home directory with proper validation
- * @returns {string} Home directory path
- * @throws {Error} If HOME is not set or empty
- */
-function getHomeDir() {
-  const home = process.env.HOME || process.env.USERPROFILE;
-  if (!home || home.trim() === '') {
-    console.error('Error: HOME environment variable is not set.');
-    console.error('       Please set HOME to your user directory before running Plexor commands.');
-    process.exit(1);
-  }
-  return home;
-}
-
-const HOME_DIR = getHomeDir();
-const PLEXOR_DIR = path.join(HOME_DIR, '.plexor');
-const CONFIG_PATH = path.join(PLEXOR_DIR, 'config.json');
-const SESSION_PATH = path.join(PLEXOR_DIR, 'session.json');
-const CACHE_PATH = path.join(PLEXOR_DIR, 'cache.json');
-
-const SESSION_TIMEOUT_MS = 30 * 60 * 1000; // 30 minutes
-
-// STAGING PACKAGE - uses staging API
-const DEFAULT_API_URL = 'http://localhost:8000';
-const DEFAULT_TIMEOUT = 5000;
-
-module.exports = {
-  getHomeDir,
-  HOME_DIR,
-  PLEXOR_DIR,
-  CONFIG_PATH,
-  SESSION_PATH,
-  CACHE_PATH,
-  SESSION_TIMEOUT_MS,
-  DEFAULT_API_URL,
-  DEFAULT_TIMEOUT
-};

package/lib/index.js

@@ -1,19 +0,0 @@
-/**
- * Plexor Plugin Library
- */
-
-const ConfigManager = require('./config');
-const SessionManager = require('./session');
-const LocalCache = require('./cache');
-const Logger = require('./logger');
-const PlexorClient = require('./plexor-client');
-const constants = require('./constants');
-
-module.exports = {
-  ConfigManager,
-  SessionManager,
-  LocalCache,
-  Logger,
-  PlexorClient,
-  ...constants
-};

package/lib/logger.js

@@ -1,36 +0,0 @@
-/**
- * Plexor Logger
- *
- * Simple logger that outputs to stderr to avoid interfering with stdout JSON.
- */
-
-class Logger {
-  constructor(component = 'plexor') {
-    this.component = component;
-    this.debug_enabled = process.env.PLEXOR_DEBUG === '1' || process.env.PLEXOR_DEBUG === 'true';
-  }
-
-  debug(msg, data = null) {
-    if (this.debug_enabled) {
-      const output = data ? `[DEBUG][${this.component}] ${msg} ${JSON.stringify(data)}` : `[DEBUG][${this.component}] ${msg}`;
-      console.error(output);
-    }
-  }
-
-  info(msg, data = null) {
-    const output = data ? `${msg} ${JSON.stringify(data)}` : msg;
-    console.error(output);
-  }
-
-  warn(msg, data = null) {
-    const output = data ? `[WARN][${this.component}] ${msg} ${JSON.stringify(data)}` : `[WARN][${this.component}] ${msg}`;
-    console.error(output);
-  }
-
-  error(msg, data = null) {
-    const output = data ? `[ERROR][${this.component}] ${msg} ${JSON.stringify(data)}` : `[ERROR][${this.component}] ${msg}`;
-    console.error(output);
-  }
-}
-
-module.exports = Logger;