log-llm-config-staging 1.3.54 → 1.3.56

package/dist/cli_invocation_match.js

@@ -24,5 +24,7 @@ export function isThisCliModule(argv1, thisImportMetaUrl) {
         return false;
     const entry = normalizedCliScriptBasename(argv1);
     const self = normalizedCliScriptBasename(thisImportMetaUrl);
-    return entry !== '' && entry === self;
+    if (entry === '' || self === '')
+        return false;
+    return entry === self || entry === `${self}_staging`;
 }

package/dist/compliance_prompt_gate.js

@@ -8,10 +8,9 @@
  */
 import { applyAutofixViolations, normalizeAgentToken, pruneSatisfiedOneTimeRemediations, runLocalRemediationComplianceCheck, } from './log_config_files/runtime/compliance_check.js';
 import { existsSync, statSync } from 'node:fs';
-import { fileURLToPath } from 'node:url';
-import { basename } from 'node:path';
 import { getRemediationInstructionsPath } from './log_config_files/runtime/management_storage.js';
 import { hookLogSessionBanner, hookRunLog, logRemediationApplyFailure } from './log_config_files/runtime/hook_logger.js';
+import { isThisCliModule } from './cli_invocation_match.js';
 const MANIFEST_STALE_MS = 7 * 24 * 60 * 60 * 1000;
 function parseIde() {
     const eq = process.argv.find((a) => a.startsWith('--ide='));
@@ -74,14 +73,7 @@ function getManifestStalenessMs() {
     }
 }
 function isRunAsCliModule() {
-    const entry = process.argv[1];
-    if (!entry)
-        return false;
-    // Compare by basename only: npx bins are symlinks (no .js extension) while import.meta.url
-    // is the real resolved path with extension — full-path comparison reliably fails across setups.
-    const entryBase = basename(entry).replace(/\.[cm]?js$/, '');
-    const selfBase = basename(fileURLToPath(import.meta.url)).replace(/\.[cm]?js$/, '');
-    return entryBase !== '' && entryBase === selfBase;
+    return isThisCliModule(process.argv[1], import.meta.url);
 }
 /** Short line for success dialog: finding title/sentence from manifest, not per-check remediation technical text. */
 function autofixDialogLine(v) {

package/dist/log_config_files/runtime/compliance_check.js

@@ -19,7 +19,7 @@ import { loadEndpointBase } from '../sender/endpoint_config.js';
 import { resolveHardwareUuid, tryResolveHardwareUuid } from './hardware_uuid.js';
 import { buildDeferredCursorRestartCommand, enforceRemediation, fetchSync, isTrustedRestartCommandForAutofix, remediationFixSpec, reportAutofixApplied, syncRemediations, } from './remediation_sync.js';
 import { sendConfigFile } from '../sender/batch_sender.js';
-import { readStoredAuthKey } from '../auth/auth_key_store.js';
+import { ensureAuthentication } from '../auth/auth_flow.js';
 /** Normalize manifest/env/CLI agent tokens to a known Agent, or '' if unrecognized. */
 export function normalizeAgentToken(raw) {
     if (typeof raw !== 'string')
@@ -386,55 +386,55 @@ export function applyAutofixViolations(violations, agent = 'cursor') {
         appliedViolations.push(violation);
         hookRunLog(`autofix: applied uuid=${inst.uuid} path=${configPathForDisk}`);
         reportPromises.push(reportAutofixApplied(inst.uuid, 'success'));
-        const authKey = readStoredAuthKey();
-        if (authKey) {
-            if (er.deferredSqlite && configPathForDisk.includes('#')) {
-                hookRunLog(`autofix: skip immediate vscdb upload (deferred until after restart) uuid=${inst.uuid}`);
+        if (er.deferredSqlite && configPathForDisk.includes('#')) {
+            hookRunLog(`autofix: skip immediate vscdb upload (deferred until after restart) uuid=${inst.uuid}`);
+        }
+        else {
+            let updatedContent;
+            if (configPathForDisk.includes('#')) {
+                const hi = configPathForDisk.indexOf('#');
+                const dbPath = configPathForDisk.slice(0, hi);
+                const itemKey = configPathForDisk.slice(hi + 1).trim();
+                updatedContent = itemKey ? (readVscdbItemTableJson(dbPath, itemKey) ?? undefined) : undefined;
             }
             else {
-                let updatedContent;
-                if (configPathForDisk.includes('#')) {
-                    const hi = configPathForDisk.indexOf('#');
-                    const dbPath = configPathForDisk.slice(0, hi);
-                    const itemKey = configPathForDisk.slice(hi + 1).trim();
-                    updatedContent =
-                        itemKey ? (readVscdbItemTableJson(dbPath, itemKey) ?? undefined) : undefined;
+                try {
+                    updatedContent = JSON.parse(readFileSync(configPathForDisk, 'utf8'));
                 }
-                else {
-                    try {
-                        updatedContent = JSON.parse(readFileSync(configPathForDisk, 'utf8'));
-                    }
-                    catch {
-                        updatedContent = undefined;
-                    }
+                catch {
+                    updatedContent = undefined;
                 }
-                if (updatedContent !== undefined) {
-                    const fileType = (inst.file_type ?? '').trim();
-                    if (fileType) {
-                        const hw = tryResolveHardwareUuid();
-                        if (hw) {
-                            reportPromises.push(sendConfigFile({ file_type: fileType, file_path: configPathForDisk, raw_content: updatedContent }, hw, authKey).then((sentOk) => {
-                                hookRunLog(`autofix: uploaded remediated file uuid=${inst.uuid} path=${configPathForDisk} ok=${sentOk}`);
-                            }));
-                        }
-                        else {
-                            hookRunLog(`autofix: skip upload uuid=${inst.uuid} (hardware UUID unavailable)`);
-                        }
+            }
+            if (updatedContent !== undefined) {
+                const fileType = (inst.file_type ?? '').trim();
+                if (fileType) {
+                    const hw = tryResolveHardwareUuid();
+                    if (hw) {
+                        // Do not rely on the bulk uploader (start-every-prompt throttles at 1800s).
+                        // Always attempt to upload the single remediated file immediately.
+                        reportPromises.push(ensureAuthentication(hw)
+                            .then((authKey) => sendConfigFile({ file_type: fileType, file_path: configPathForDisk, raw_content: updatedContent }, hw, authKey))
+                            .then((sentOk) => {
+                            hookRunLog(`autofix: uploaded remediated file uuid=${inst.uuid} path=${configPathForDisk} ok=${sentOk}`);
+                        })
+                            .catch((err) => {
+                            hookRunLog(`autofix: upload failed uuid=${inst.uuid} path=${configPathForDisk} err=${err instanceof Error ? err.message : String(err)}`);
+                        }));
                     }
                     else {
-                        hookRunLog(`autofix: skip upload uuid=${inst.uuid} — remediation_instructions.json missing file_type (re-sync manifest)`);
-                        logRemediationApplyFailure('autofix_post_apply_upload_skipped', {
-                            uuid: inst.uuid,
-                            config_file_path: inst.config_file_path,
-                            reason: 'file_type missing on instruction — server sync/manifest will not see applied file',
-                        });
+                        hookRunLog(`autofix: skip upload uuid=${inst.uuid} (hardware UUID unavailable)`);
                     }
                 }
+                else {
+                    hookRunLog(`autofix: skip upload uuid=${inst.uuid} — remediation_instructions.json missing file_type (re-sync manifest)`);
+                    logRemediationApplyFailure('autofix_post_apply_upload_skipped', {
+                        uuid: inst.uuid,
+                        config_file_path: inst.config_file_path,
+                        reason: 'file_type missing on instruction — server sync/manifest will not see applied file',
+                    });
+                }
             }
         }
-        else {
-            hookRunLog(`autofix: skip re-upload uuid=${inst.uuid} (no stored auth key)`);
-        }
         const spec = remediationFixSpec(inst);
         if (spec?.restart_required && spec.restart_command) {
             if (!er.deferredSqlite) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "log-llm-config-staging",
-  "version": "1.3.54",
+  "version": "1.3.56",
   "description": "CLI helpers for logging hardware UUIDs and posting startup payloads to Optimus Security.",
   "type": "module",
   "bin": {