solrouter 0.4.1 → 0.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "solrouter",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Local privacy router for coding tools: pseudonymises every request before it leaves your machine, and sends work a frontier model would refuse to an uncensored open-weight model you control.",
   "type": "module",
   "bin": {

package/src/auth.js

@@ -27,7 +27,7 @@ function openBrowser(url) {
 
 /** Loopback browser login. Resolves once the callback delivers a token.
  *  `open` is injectable for testing (defaults to launching the real browser). */
-export function browserLogin({ timeoutMs = 180000, open = openBrowser } = {}) {
+export function browserLogin({ timeoutMs = 180000, open = openBrowser, save = saveAuth } = {}) {
   return new Promise((resolve, reject) => {
     const state = randomBytes(16).toString("hex");
     const server = createServer((req, res) => {
@@ -45,7 +45,7 @@ export function browserLogin({ timeoutMs = 180000, open = openBrowser } = {}) {
       res.end("<h2>SolRouter proxy connected.</h2><p>You can close this tab and return to the terminal.</p>");
       server.close();
       if (!token.access_token) return reject(new Error("no token in callback"));
-      saveAuth(token);
+      save(token);
       resolve(token);
     });
     server.listen(0, "127.0.0.1", () => {

package/src/index.js

@@ -120,11 +120,11 @@ export async function handleStream(body, ctx = {}, cfg) {
     kind, mode, maskedPrompt: extractText(masked, kind) };
 }
 
-/** Call the private leg for a (masked) prompt. Returns { reply, ok }. */
+/** Call the private leg for a (masked) prompt. Returns { reply, ok, status }. */
 export async function privateReply(cfg, maskedPrompt) {
   const { callSolrouterAgent } = await import("./providers.js");
   const r = await callSolrouterAgent(cfg.private, maskedPrompt);
-  return { reply: r.reply || "", ok: r.ok };
+  return { reply: r.reply || "", ok: r.ok, status: r.status };
 }
 
 export { createMasker } from "./mask.js";

package/src/server.js

@@ -129,7 +129,18 @@ export function startServer(cfg) {
               leg, reason: "reactive-refusal", model, entities: s.masker.entities(), refused: true, sentToProvider: s.sent });
             return;
           }
-          // private leg unavailable → fall through and just relay the refusal
+          // Reroute was needed but the uncensored leg failed — say so LOUDLY instead
+          // of silently relaying Claude's refusal (this is almost always "not logged
+          // in" / an invalid SolRouter key).
+          res.write(synthAnthropicSse(
+            `⚠️ [solrouter] Claude refused this, and the uncensored leg couldn't be reached (${pr.status || "error"}). ` +
+            `Run \`solrouter login --token sk_solrouter_…\` with a valid key from solrouter.com/sdk, then retry.`,
+            cfg.private.model));
+          res.end();
+          if (cfg.receipt?.enabled) writeReceipt(cfg.receipt.path, {
+            leg: "private", reason: "reroute-failed", model: cfg.private.model,
+            entities: s.masker.entities(), refused: true, sentToProvider: s.sent });
+          return;
         }
         if (!committed) emit(held);          // short non-refusal: flush the buffer
         if (restorer) res.write(restorer.flush());