@vibelord/lanes 1.3.0 → 1.5.0

package/payload/lanes/libexec/economy_poll.py

@@ -26,7 +26,9 @@ Trace keys: `cc-session/<id>` and `codex-session/<id>` (first two segments of th
 
 The poller (plan Task 11, opt-in `lanes-economy.service`; enabling it is an operator gate because it reads the
 production daemon's loopback control port): every `--interval` seconds it GETs `/status` and `/sessions` (3 s
-timeout, optional bearer from `LANES_THROTTLE_TOKEN_FILE`), folds today's log through `day_totals`, and writes
+timeout, bearer from `LANES_THROTTLE_TOKEN_FILE`: both routes are guarded control reads, and the daemon's ControlAuth
+answers 401 to a request without the bearer whatever the bind — there is no loopback exemption on the control port,
+DEF-1930), folds today's log through `day_totals`, and writes
 `STATE/economy.json` (schema `v: 1`, additive) only when the payload changed apart from `at` — or when the file's
 `at` is HEARTBEAT seconds old, so `at` is a liveness heartbeat the sidebar ages with its own clock (DEF-1528); the
 cursor lives in `STATE/economy.cursor.json`. `LANES_THROTTLE_CONTROL=none` disables every daemon request (the log fold still runs);
@@ -442,7 +444,9 @@ def control_url(env):
 
 
 def read_token(env):
-    """The optional bearer (loopback without `remote_key` needs none). Never logged, never written anywhere."""
+    """The bearer, or None when no file is named. `/status` and `/sessions` are guarded control routes: the daemon's
+    ControlAuth (its `remote_key` or the claude pool's managed local client token) answers 401 without one, loopback
+    or not (DEF-1930), so a poll without it degrades to `HTTP 401`. Never logged, never written anywhere."""
     path = env.get('LANES_THROTTLE_TOKEN_FILE')
     if not path:
         return None