Meta-loop: further harden the auth flow + UX beyond PR #47 - #53

Merged

dbarrante merged 27 commits into

mainfrom

loop/auth-ux-meta-2026-07-20

Jul 21, 2026

Commits on Jul 20, 2026

loop(LOOP-01): route vault/vision auth through ApiClient, not raw fetch()

dbarrante
and
claude
committed
loop(LOOP-01,LOOP-06): stop masking device-poll network outages as authorization_pending
dbarrante
committed
loop(LOOP-06): distinguish a rejected session from a network outage in `aether auth status`

dbarrante
and
claude
committed
loop(LOOP-01,LOOP-06): bound ApiClient.request() by default, throw on malformed 2xx bodies

dbarrante
and
claude
committed
loop(LOOP-01): unify injected-token TokenStore selection between client.ts and auth.ts
dbarrante
committed
loop(LOOP-06): unify printError and Renderer.error's terminal formatting
dbarrante
committed
loop(LOOP-06): document intentional 5xx/network hint divergence, dedupe isAbortError
dbarrante
committed
loop(LOOP-01): gate getBinary's bearer on same-origin, bound getBinary/postForm by timeout, dedupe aek_ prefix check

dbarrante
and
claude
committed
loop(LOOP-06): add StreamTimeoutError branch to errorHint — REPL now shows the retry/doctor hint for mid-turn stream timeouts, matching hintFor
dbarrante
committed
loop(LOOP-06): sanitize+cap server-supplied login text before it hits the terminal
dbarrante
committed
loop(LOOP-01): route vault/media command failures through hintFor() — no more hardcoded "are you logged in?"
dbarrante
committed
loop(LOOP-01): stream vault uploads via fs.openAsBlob() instead of readFileSync+Blob double-buffering
dbarrante
committed
loop(LOOP-06): print a loading line before aether auth status's /models call
dbarrante
committed
loop(LOOP-06): distinguish a picker key-handler fault from a deliberate Escape cancel
dbarrante
committed
loop(LOOP-06): style confirmSwitch's tier-lock message, add /tier hint
dbarrante
committed
loop(LOOP-06): reject a stream with no terminal frame — throw StreamIncompleteError
dbarrante
committed
loop(LOOP-01): narrow pollForToken's HttpError guard to the RFC 8628 400 pending shape — a 5xx no longer masquerades as authorization_pending
dbarrante
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Meta-loop: further harden the auth flow + UX beyond PR #47 - #53

Meta-loop: further harden the auth flow + UX beyond PR #47#53
dbarrante merged 27 commits into
mainfrom
loop/auth-ux-meta-2026-07-20

Commits on Jul 20, 2026

loop(LOOP-01): route vault/vision auth through ApiClient, not raw fetch()

loop(LOOP-01,LOOP-06): stop masking device-poll network outages as authorization_pending

loop(LOOP-06): distinguish a rejected session from a network outage in `aether auth status`

loop(LOOP-01,LOOP-06): bound ApiClient.request() by default, throw on malformed 2xx bodies

loop(LOOP-01): unify injected-token TokenStore selection between client.ts and auth.ts

loop(LOOP-06): unify printError and Renderer.error's terminal formatting

loop(LOOP-06): document intentional 5xx/network hint divergence, dedupe isAbortError

loop(LOOP-01): gate getBinary's bearer on same-origin, bound getBinary/postForm by timeout, dedupe aek_ prefix check

loop(LOOP-06): add StreamTimeoutError branch to errorHint — REPL now shows the retry/doctor hint for mid-turn stream timeouts, matching hintFor

loop(LOOP-06): sanitize+cap server-supplied login text before it hits the terminal

loop(LOOP-01): route vault/media command failures through hintFor() — no more hardcoded "are you logged in?"

loop(LOOP-01): stream vault uploads via fs.openAsBlob() instead of readFileSync+Blob double-buffering

loop(LOOP-06): print a loading line before aether auth status's /models call

loop(LOOP-06): distinguish a picker key-handler fault from a deliberate Escape cancel

loop(LOOP-06): style confirmSwitch's tier-lock message, add /tier hint

loop(LOOP-06): reject a stream with no terminal frame — throw StreamIncompleteError

loop(LOOP-01): narrow pollForToken's HttpError guard to the RFC 8628 400 pending shape — a 5xx no longer masquerades as authorization_pending

Commits on Jul 21, 2026

loop(LOOP-01): stop workflow.ts's vault CRUD wrappers from swallowing every failure

loop(LOOP-06): check err.cause.code in hintFor — no more silent null for cause-shaped undici network errors

loop(LOOP-06): route login.ts + auth.ts's authRefresh through formatErrorLine

loop(LOOP-01): route workflow.ts's fail() through hintFor() — no more hardcoded auth hint for 402/403/5xx

loop(LOOP-01): uploadFile() opts into the 120s stream-class timeout — no more flat 30s cap on large vault uploads

loop(LOOP-06): wrap pickModel's empty-state lines in theme.dim — matches the rest of the picker's styling

loop(META): simplify — consolidate duplicated baseUrl-independent error hints

loop(META): close terminal-escape-injection gap in getBinary + media error paths

loop(META): bound LLM-generation calls by the 120s stream timeout, not the new 30s default

loop(META): fix duplicate "kept current session." message on a picker fault