log-llm-config 1.3.53 → 1.3.55

package/dist/log_config_files/runtime/compliance_check.js

@@ -19,7 +19,7 @@ import { loadEndpointBase } from '../sender/endpoint_config.js';
 import { resolveHardwareUuid, tryResolveHardwareUuid } from './hardware_uuid.js';
 import { buildDeferredCursorRestartCommand, enforceRemediation, fetchSync, isTrustedRestartCommandForAutofix, remediationFixSpec, reportAutofixApplied, syncRemediations, } from './remediation_sync.js';
 import { sendConfigFile } from '../sender/batch_sender.js';
-import { readStoredAuthKey } from '../auth/auth_key_store.js';
+import { ensureAuthentication } from '../auth/auth_flow.js';
 /** Normalize manifest/env/CLI agent tokens to a known Agent, or '' if unrecognized. */
 export function normalizeAgentToken(raw) {
     if (typeof raw !== 'string')
@@ -187,19 +187,18 @@ function loadRemediationConfigJson(configFilePath, checkSettingPaths = []) {
 export function runLocalRemediationComplianceCheck(agent = 'cursor') {
     try {
         const { remediations: rawEntries } = readRemediationInstructionsFile();
-        const entries = rawEntries;
-        const scoped = entries.filter((e) => targetsCurrentAgent(e, agent));
-        if (scoped.length === 0) {
+        const entries = rawEntries.filter((e) => targetsCurrentAgent(e, agent));
+        if (entries.length === 0) {
             hookRunLog('compliance_check: no remediation instructions present');
             return { status: 'ok', checked_at: new Date().toISOString(), manifest_uuids: [], violations: [] };
         }
-        const uuids = scoped.map((e) => e.uuid);
+        const uuids = entries.map((e) => e.uuid);
         const violations = [];
         let skippedNoCompliance = 0;
         let skippedNonJson = 0;
         let skippedNoChecks = 0;
         let skippedUnreadable = 0;
-        for (const entry of scoped) {
+        for (const entry of entries) {
             const compliance = entry.fix ?? entry.compliance;
             if (!compliance) {
                 skippedNoCompliance++;
@@ -387,55 +386,55 @@ export function applyAutofixViolations(violations, agent = 'cursor') {
         appliedViolations.push(violation);
         hookRunLog(`autofix: applied uuid=${inst.uuid} path=${configPathForDisk}`);
         reportPromises.push(reportAutofixApplied(inst.uuid, 'success'));
-        const authKey = readStoredAuthKey();
-        if (authKey) {
-            if (er.deferredSqlite && configPathForDisk.includes('#')) {
-                hookRunLog(`autofix: skip immediate vscdb upload (deferred until after restart) uuid=${inst.uuid}`);
+        if (er.deferredSqlite && configPathForDisk.includes('#')) {
+            hookRunLog(`autofix: skip immediate vscdb upload (deferred until after restart) uuid=${inst.uuid}`);
+        }
+        else {
+            let updatedContent;
+            if (configPathForDisk.includes('#')) {
+                const hi = configPathForDisk.indexOf('#');
+                const dbPath = configPathForDisk.slice(0, hi);
+                const itemKey = configPathForDisk.slice(hi + 1).trim();
+                updatedContent = itemKey ? (readVscdbItemTableJson(dbPath, itemKey) ?? undefined) : undefined;
             }
             else {
-                let updatedContent;
-                if (configPathForDisk.includes('#')) {
-                    const hi = configPathForDisk.indexOf('#');
-                    const dbPath = configPathForDisk.slice(0, hi);
-                    const itemKey = configPathForDisk.slice(hi + 1).trim();
-                    updatedContent =
-                        itemKey ? (readVscdbItemTableJson(dbPath, itemKey) ?? undefined) : undefined;
+                try {
+                    updatedContent = JSON.parse(readFileSync(configPathForDisk, 'utf8'));
                 }
-                else {
-                    try {
-                        updatedContent = JSON.parse(readFileSync(configPathForDisk, 'utf8'));
-                    }
-                    catch {
-                        updatedContent = undefined;
-                    }
+                catch {
+                    updatedContent = undefined;
                 }
-                if (updatedContent !== undefined) {
-                    const fileType = (inst.file_type ?? '').trim();
-                    if (fileType) {
-                        const hw = tryResolveHardwareUuid();
-                        if (hw) {
-                            reportPromises.push(sendConfigFile({ file_type: fileType, file_path: configPathForDisk, raw_content: updatedContent }, hw, authKey).then((sentOk) => {
-                                hookRunLog(`autofix: uploaded remediated file uuid=${inst.uuid} path=${configPathForDisk} ok=${sentOk}`);
-                            }));
-                        }
-                        else {
-                            hookRunLog(`autofix: skip upload uuid=${inst.uuid} (hardware UUID unavailable)`);
-                        }
+            }
+            if (updatedContent !== undefined) {
+                const fileType = (inst.file_type ?? '').trim();
+                if (fileType) {
+                    const hw = tryResolveHardwareUuid();
+                    if (hw) {
+                        // Do not rely on the bulk uploader (start-every-prompt throttles at 1800s).
+                        // Always attempt to upload the single remediated file immediately.
+                        reportPromises.push(ensureAuthentication(hw)
+                            .then((authKey) => sendConfigFile({ file_type: fileType, file_path: configPathForDisk, raw_content: updatedContent }, hw, authKey))
+                            .then((sentOk) => {
+                            hookRunLog(`autofix: uploaded remediated file uuid=${inst.uuid} path=${configPathForDisk} ok=${sentOk}`);
+                        })
+                            .catch((err) => {
+                            hookRunLog(`autofix: upload failed uuid=${inst.uuid} path=${configPathForDisk} err=${err instanceof Error ? err.message : String(err)}`);
+                        }));
                     }
                     else {
-                        hookRunLog(`autofix: skip upload uuid=${inst.uuid} — remediation_instructions.json missing file_type (re-sync manifest)`);
-                        logRemediationApplyFailure('autofix_post_apply_upload_skipped', {
-                            uuid: inst.uuid,
-                            config_file_path: inst.config_file_path,
-                            reason: 'file_type missing on instruction — server sync/manifest will not see applied file',
-                        });
+                        hookRunLog(`autofix: skip upload uuid=${inst.uuid} (hardware UUID unavailable)`);
                     }
                 }
+                else {
+                    hookRunLog(`autofix: skip upload uuid=${inst.uuid} — remediation_instructions.json missing file_type (re-sync manifest)`);
+                    logRemediationApplyFailure('autofix_post_apply_upload_skipped', {
+                        uuid: inst.uuid,
+                        config_file_path: inst.config_file_path,
+                        reason: 'file_type missing on instruction — server sync/manifest will not see applied file',
+                    });
+                }
             }
         }
-        else {
-            hookRunLog(`autofix: skip re-upload uuid=${inst.uuid} (no stored auth key)`);
-        }
         const spec = remediationFixSpec(inst);
         if (spec?.restart_required && spec.restart_command) {
             if (!er.deferredSqlite) {
@@ -565,13 +564,13 @@ export function pruneSatisfiedOneTimeRemediations(agent = 'cursor') {
  * a fresh manifest so the gate has up-to-date data when it runs.
  */
 export async function runComplianceCheck() {
+    const agent = currentAgentFromEnv();
     try {
         await syncRemediations(loadEndpointBase(), resolveHardwareUuid());
     }
     catch (err) {
         hookRunLog(`compliance_check: remediation_sync unexpected error: ${err instanceof Error ? err.message : String(err)}`);
     }
-    const agent = currentAgentFromEnv();
     const status = runLocalRemediationComplianceCheck(agent);
     if (status.status === 'ok' || status.violations.length === 0) {
         const pruned = pruneSatisfiedOneTimeRemediations(agent);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "log-llm-config",
-  "version": "1.3.53",
+  "version": "1.3.55",
   "description": "CLI helpers for logging hardware UUIDs and posting startup payloads to Optimus Security.",
   "type": "module",
   "bin": {