kaigler 1e19971679 fix(windows): complete Windows credential fixes with path normalization (#1585)
* fix(windows): add Windows file-based credential fallback (PR #1561)

This includes all changes from PR #1561:

- Add shared file credential helpers (getCredentialsFromFile, getFullCredentialsFromFile)
- Add Windows file-based credential storage functions:
  - getWindowsCredentialsPath() - path to .credentials.json
  - getCredentialsFromWindowsFile() - read basic credentials from file
  - getCredentialsFromWindows() - tries Credential Manager first, falls back to file
  - getFullCredentialsFromWindowsFile() - read full credentials from file
  - getFullCredentialsFromWindows() - tries Credential Manager first, falls back to file
  - updateWindowsFileCredentials() - write credentials to file
  - updateWindowsCredentials() - updates both Credential Manager and file
- Fix PtrToStructure failure in Windows Credential Manager PowerShell script by
  defining proper CREDENTIAL struct with IntPtr fields
- Update index.ts to check migrated profiles for valid credentials via file fallback
  before showing re-auth modal
- Update claude-code-handlers.ts to check Windows .credentials.json file
- Refactor Linux credential code to use shared helpers
- Add/update tests for Windows file fallback scenarios

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(windows): add path normalization and smart credential source comparison

Additional fixes on top of PR #1561:

1. Path normalization in claude-profile-manager.ts:
   - Normalize forward slashes to backslashes on Windows in getActiveProfileEnv()
     and getProfileEnv()
   - This ensures CLAUDE_CONFIG_DIR hash matches what Claude CLI computes
   - Fixes credential lookup failures when paths have mixed separators

2. Smart credential source comparison in credential-utils.ts:
   - getCredentialsFromWindows() now checks both file and Credential Manager
   - When both have tokens, prefers file (Claude CLI primary storage)
   - getFullCredentialsFromWindows() compares expiry times when both have tokens
   - Returns the token with later expiry (more recently refreshed)
   - Fixes stale token issue when Credential Manager has old tokens

3. Updated tests:
   - Fixed test to properly mock file not existing when testing Credential Manager
   - Added test for preferring file when both sources have tokens

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: address PR #1585 review findings

- Extract normalizeWindowsPath() shared helper to eliminate duplicated
  path normalization logic across 3 locations (credential-utils.ts,
  claude-profile-manager.ts x2)
- Use isWindows() from platform module instead of process.platform
- Remove redundant new Date() wrapper on numeric expiresAt values
- Update getCredentialsFromKeychain() JSDoc to reflect actual behavior
  (Linux tries Secret Service first; Windows checks both file and
  Credential Manager)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(windows): address PR review findings for credential handling

1. Fix dual-write order in updateWindowsCredentials() (NEW-002-final):
   - Write to file FIRST (primary storage), then Credential Manager
   - Prevents inconsistent state where CM has new tokens but file has stale
   - Claude CLI reads from file, so file must always have latest tokens

2. Add Windows file permission restrictions (NEW-006-v2):
   - Use icacls to restrict credentials file to current user only
   - Mimics Unix 0600 permissions (owner read/write only)
   - Best-effort: logs warning if icacls fails but doesn't block operation

3. Add Windows Credential Manager fallback to checkProfileAuthentication (NEW-005-v2-final):
   - Check Windows Credential Manager when file-based checks fail
   - Handles edge case where credentials stored only in Credential Manager

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(windows): address follow-up PR review findings

1. Fix UNC path regex in normalizeWindowsPath (NEW-001):
   - Updated regex to handle UNC paths starting with forward slashes
   - Paths like //server/share now correctly get normalized to \\server\share

2. Add directory permission restrictions (NEW-004):
   - Call restrictWindowsFilePermissions on directory after mkdirSync
   - Defense-in-depth: both directory and file now have user-only access

3. Align credential selection logic (NEW-005):
   - Changed getFullCredentialsFromWindows to always prefer file credentials
   - Now consistent with getCredentialsFromWindows behavior
   - Ensures same token returned from both basic and full APIs

4. Add test coverage for Windows credential selection (NEW-006):
   - Added 4 new tests for getFullCredentialsFromKeychain on Windows
   - Tests cover: file-only, CM-only, both sources, and neither source
   - Verifies file preference when both sources have tokens

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(windows): document struct differences and use atomic file write

1. Document CREDENTIAL struct differences (NEW-001-NEW):
   - Added comments explaining why CredRead uses IntPtr (blittable struct for
     receiving data from Windows) while CredWrite uses string types (auto-
     marshaled when calling Windows APIs)
   - This is intentional and correct, not a bug

2. Implement atomic file write for credentials (NEW-003-NEW):
   - Write to temp file first, apply restrictive permissions, then rename
   - Eliminates race condition where file briefly exists with default permissions
   - Clean up temp file on error

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: Andy <119136210+AndyMik90@users.noreply.github.com>
Co-authored-by: AndyMik90 <andre@mikalsenutvikling.no>
2026-01-30 11:39:21 +01:00
2025-12-22 14:17:08 +01:00
2026-01-02 11:56:36 +01:00
2025-12-10 09:10:55 +01:00
2026-01-21 11:35:44 +01:00
2026-01-02 11:56:36 +01:00
2026-01-27 09:21:43 +01:00
2026-01-27 09:21:43 +01:00
2026-01-02 11:56:36 +01:00
2026-01-02 11:56:36 +01:00
2025-12-15 21:10:27 +01:00

Auto Claude

Autonomous multi-agent coding framework that plans, builds, and validates software for you.

Auto Claude Kanban Board

License Discord YouTube CI


Download

Stable Release

Stable

Platform Download
Windows Auto-Claude-2.7.5-win32-x64.exe
macOS (Apple Silicon) Auto-Claude-2.7.5-darwin-arm64.dmg
macOS (Intel) Auto-Claude-2.7.5-darwin-x64.dmg
Linux Auto-Claude-2.7.5-linux-x86_64.AppImage
Linux (Debian) Auto-Claude-2.7.5-linux-amd64.deb
Linux (Flatpak) Auto-Claude-2.7.5-linux-x86_64.flatpak

Beta Release

⚠️ Beta releases may contain bugs and breaking changes. View all releases

Beta

Platform Download
Windows Auto-Claude-2.7.2-beta.10-win32-x64.exe
macOS (Apple Silicon) Auto-Claude-2.7.2-beta.10-darwin-arm64.dmg
macOS (Intel) Auto-Claude-2.7.2-beta.10-darwin-x64.dmg
Linux Auto-Claude-2.7.2-beta.10-linux-x86_64.AppImage
Linux (Debian) Auto-Claude-2.7.2-beta.10-linux-amd64.deb
Linux (Flatpak) Auto-Claude-2.7.2-beta.10-linux-x86_64.flatpak

All releases include SHA256 checksums and VirusTotal scan results for security verification.


Requirements

  • Claude Pro/Max subscription - Get one here
  • Claude Code CLI - npm install -g @anthropic-ai/claude-code
  • Git repository - Your project must be initialized as a git repo

Quick Start

  1. Download and install the app for your platform
  2. Open your project - Select a git repository folder
  3. Connect Claude - The app will guide you through OAuth setup
  4. Create a task - Describe what you want to build
  5. Watch it work - Agents plan, code, and validate autonomously

Features

Feature Description
Autonomous Tasks Describe your goal; agents handle planning, implementation, and validation
Parallel Execution Run multiple builds simultaneously with up to 12 agent terminals
Isolated Workspaces All changes happen in git worktrees - your main branch stays safe
Self-Validating QA Built-in quality assurance loop catches issues before you review
AI-Powered Merge Automatic conflict resolution when integrating back to main
Memory Layer Agents retain insights across sessions for smarter builds
GitHub/GitLab Integration Import issues, investigate with AI, create merge requests
Linear Integration Sync tasks with Linear for team progress tracking
Cross-Platform Native desktop apps for Windows, macOS, and Linux
Auto-Updates App updates automatically when new versions are released

Interface

Kanban Board

Visual task management from planning through completion. Create tasks and monitor agent progress in real-time.

Agent Terminals

AI-powered terminals with one-click task context injection. Spawn multiple agents for parallel work.

Agent Terminals

Roadmap

AI-assisted feature planning with competitor analysis and audience targeting.

Roadmap

Additional Features

  • Insights - Chat interface for exploring your codebase
  • Ideation - Discover improvements, performance issues, and vulnerabilities
  • Changelog - Generate release notes from completed tasks

Project Structure

Auto-Claude/
├── apps/
│   ├── backend/     # Python agents, specs, QA pipeline
│   └── frontend/    # Electron desktop application
├── guides/          # Additional documentation
├── tests/           # Test suite
└── scripts/         # Build utilities

CLI Usage

For headless operation, CI/CD integration, or terminal-only workflows:

cd apps/backend

# Create a spec interactively
python spec_runner.py --interactive

# Run autonomous build
python run.py --spec 001

# Review and merge
python run.py --spec 001 --review
python run.py --spec 001 --merge

See guides/CLI-USAGE.md for complete CLI documentation.


Development

Want to build from source or contribute? See CONTRIBUTING.md for complete development setup instructions.

For Linux-specific builds (Flatpak, AppImage), see guides/linux.md.


Security

Auto Claude uses a three-layer security model:

  1. OS Sandbox - Bash commands run in isolation
  2. Filesystem Restrictions - Operations limited to project directory
  3. Dynamic Command Allowlist - Only approved commands based on detected project stack

All releases are:

  • Scanned with VirusTotal before publishing
  • Include SHA256 checksums for verification
  • Code-signed where applicable (macOS)

Available Scripts

Command Description
npm run install:all Install backend and frontend dependencies
npm start Build and run the desktop app
npm run dev Run in development mode with hot reload
npm run package Package for current platform
npm run package:mac Package for macOS
npm run package:win Package for Windows
npm run package:linux Package for Linux
npm run package:flatpak Package as Flatpak (see guides/linux.md)
npm run lint Run linter
npm test Run frontend tests
npm run test:backend Run backend tests

Contributing

We welcome contributions! Please read CONTRIBUTING.md for:

  • Development setup instructions
  • Code style guidelines
  • Testing requirements
  • Pull request process

Community


License

AGPL-3.0 - GNU Affero General Public License v3.0

Auto Claude is free to use. If you modify and distribute it, or run it as a service, your code must also be open source under AGPL-3.0.

Commercial licensing available for closed-source use cases.


Star History

GitHub Repo stars

Star History Chart

S
Description
Autonomous multi-session AI coding
Readme AGPL-3.0 59 MiB
Languages
TypeScript 98.7%
JavaScript 0.6%
CSS 0.5%
Shell 0.2%