solrouter 0.4.0 → 0.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "solrouter",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "Local privacy router for coding tools: pseudonymises every request before it leaves your machine, and sends work a frontier model would refuse to an uncensored open-weight model you control.",
   "type": "module",
   "bin": {

package/src/auth.js

@@ -27,7 +27,7 @@ function openBrowser(url) {
 
 /** Loopback browser login. Resolves once the callback delivers a token.
  *  `open` is injectable for testing (defaults to launching the real browser). */
-export function browserLogin({ timeoutMs = 180000, open = openBrowser } = {}) {
+export function browserLogin({ timeoutMs = 180000, open = openBrowser, save = saveAuth } = {}) {
   return new Promise((resolve, reject) => {
     const state = randomBytes(16).toString("hex");
     const server = createServer((req, res) => {
@@ -45,7 +45,7 @@ export function browserLogin({ timeoutMs = 180000, open = openBrowser } = {}) {
       res.end("<h2>SolRouter proxy connected.</h2><p>You can close this tab and return to the terminal.</p>");
       server.close();
       if (!token.access_token) return reject(new Error("no token in callback"));
-      saveAuth(token);
+      save(token);
       resolve(token);
     });
     server.listen(0, "127.0.0.1", () => {

package/src/index.js

@@ -120,11 +120,11 @@ export async function handleStream(body, ctx = {}, cfg) {
     kind, mode, maskedPrompt: extractText(masked, kind) };
 }
 
-/** Call the private leg for a (masked) prompt. Returns { reply, ok }. */
+/** Call the private leg for a (masked) prompt. Returns { reply, ok, status }. */
 export async function privateReply(cfg, maskedPrompt) {
   const { callSolrouterAgent } = await import("./providers.js");
   const r = await callSolrouterAgent(cfg.private, maskedPrompt);
-  return { reply: r.reply || "", ok: r.ok };
+  return { reply: r.reply || "", ok: r.ok, status: r.status };
 }
 
 export { createMasker } from "./mask.js";

package/src/server.js

@@ -102,7 +102,7 @@ export function startServer(cfg) {
         // stream live. If the whole short response is a refusal and mode is auto,
         // we discard it and reroute to the private/uncensored leg.
         const COMMIT_AT = 380;               // chars of answer text that means "real answer"
-        let committed = false, held = "", acc = "";
+        let committed = false, held = "", acc = "", refusalLikely = false;
         for (;;) {
           const { done, value } = await reader.read();
           if (done) break;
@@ -110,11 +110,14 @@ export function startServer(cfg) {
           acc += extractSseText(chunk);
           if (committed) { emit(chunk); continue; }
           held += chunk;
-          if (acc.replace(/\s/g, "").length >= COMMIT_AT) { committed = true; emit(held); held = ""; }
+          // Lock onto a refusal as soon as its opening matches — then never commit,
+          // so even a long, multi-paragraph refusal gets fully buffered and rerouted.
+          if (!refusalLikely && isRefusal(acc)) refusalLikely = true;
+          if (!refusalLikely && acc.replace(/\s/g, "").length >= COMMIT_AT) { committed = true; emit(held); held = ""; }
         }
 
         let leg = s.leg, refused = false, model = s.model;
-        if (!committed && s.mode === "auto" && isRefusal(acc)) {
+        if (!committed && s.mode === "auto" && refusalLikely) {
           // Streamed refusal → reroute to the uncensored private leg.
           const pr = await privateReply(cfg, s.maskedPrompt);
           if (pr.ok && pr.reply) {
@@ -126,7 +129,18 @@ export function startServer(cfg) {
               leg, reason: "reactive-refusal", model, entities: s.masker.entities(), refused: true, sentToProvider: s.sent });
             return;
           }
-          // private leg unavailable → fall through and just relay the refusal
+          // Reroute was needed but the uncensored leg failed — say so LOUDLY instead
+          // of silently relaying Claude's refusal (this is almost always "not logged
+          // in" / an invalid SolRouter key).
+          res.write(synthAnthropicSse(
+            `⚠️ [solrouter] Claude refused this, and the uncensored leg couldn't be reached (${pr.status || "error"}). ` +
+            `Run \`solrouter login --token sk_solrouter_…\` with a valid key from solrouter.com/sdk, then retry.`,
+            cfg.private.model));
+          res.end();
+          if (cfg.receipt?.enabled) writeReceipt(cfg.receipt.path, {
+            leg: "private", reason: "reroute-failed", model: cfg.private.model,
+            entities: s.masker.entities(), refused: true, sentToProvider: s.sent });
+          return;
         }
         if (!committed) emit(held);          // short non-refusal: flush the buffer
         if (restorer) res.write(restorer.flush());