Fix self-healing of stale auth token on translate and UI improvements in console-crane

[navidshad]

🏷️ PR Title:
Fix self-healing of stale auth token on translate and UI improvements in console-crane

📋 Summary

This PR addresses an issue where translation requests failed due to stale authentication tokens by implementing a self-heal mechanism to refresh the token automatically. Additionally, it includes UI fixes for the console-crane module: aligning the bundle selector height with the Save button and isolating modal styles to prevent CSS leaks from the host page.

🔗 Related Tasks

#33 - Fix self-heal stale auth token on translate to prevent failure
#console-crane-ui-fixes - Align bundle selector height with Save button and isolate modal CSS

📝 Additional Details

• Release versions 1.14.0-dev.2 and 1.14.1-dev.1 included as part of the deployment cycle.
• Merged updates from main branch to keep dev branch up to date.

📜 Commit List

6ef3766 fix: self-heal stale auth token on translate instead of failing
cf057a0 fix(console-crane): align bundle selector height with the Save button
2b89736 fix(console-crane): isolate modal from host-page color/flex CSS leaks
c76121e chore(release): 1.14.0-dev.2 [skip ci]
16a6feb chore(release): 1.14.1-dev.1 [skip ci]
b1c5a13 Merge remote-tracking branch 'origin/main' into dev
98472c1 Merge pull request #33 from codebridger/fix/translate-auth-self-heal

[github-actions]

🎉 This PR is included in version 1.14.1-dev.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

[navidshad]

Automated PR Review

Primary Task: CU-86exw6kme — Console-crane UI fixes (align bundle selector + isolate modal CSS)
Related tasks from commits: Internal PR #33 / fix: self-heal stale auth token (the auth-recovery work)

---

Task alignment

Console-crane UI fixes (86exw6kme)

• ✅ fix(console-crane): align bundle selector height with the Save button — flex stretch chain in SelectPhraseBundleV2.vue + scoped CSS handles both plain and freemium (InputGroup) save layouts.
• ✅ fix(console-crane): isolate modal from host-page color/flex CSS leaks — tailwind.css pins a per-theme base color and resets flex: 0 1 auto on scoped flow elements.
• ✅ E2E regression net added (tests/e2e/host-style-isolation.spec.ts) that reproduces the studio.youtube.com Polymer conditions.

Auth self-heal (stale token)

• ✅ New src/common/helper/auth-recovery.ts — isAuthError / reauthAnonymously / withAuthRetry / setSessionRecovery all implemented and well-documented.
• ✅ TranslateService wraps all three functionProvider.run calls with withAuthRetry.
• ✅ modular-rest.ts refactors the first-session anonymous fallback to the shared reauthAnonymously primitive, and installs recoverSession as the system-wide recovery strategy (logout + reauth for registered users, contained reauth for anonymous).
• ✅ Single-flight coalescing (inflightReauth / inflightRecovery) prevents the "thundering herd of loginAnonymous calls" on a burst of concurrent failures.
• ✅ Tests: tests/auth-recovery.test.ts (new, ~30 cases for isAuthError / reauthAnonymously / withAuthRetry) + recoverSession describe block in tests/auth-anon-flow.test.ts + integration tests in tests/translate.service.test.ts.

---

Commit messages

All three substantive commits are clean:

• ✅ fix: self-heal stale auth token on translate instead of failing — thorough body explaining the mechanism, the server behavior, and the single-flight design.
• ✅ fix(console-crane): align bundle selector height with the Save button — explains the 4-level pilotui wrapper chain and why flex stretch was needed.
• ✅ fix(console-crane): isolate modal from host-page color/flex CSS leaks — names the specific host (studio.youtube.com), both leak types, and the fix approach.
• ✅ Three chore(release): ... commits are semantic-release auto-generated. Type and format are correct.

---

Convention check

✅ .subturtle-scope class present on existing mount roots — unaffected.
✅ New CSS in tailwind.css explicitly carries .subturtle-scope so the PostCSS prefixer's idempotent guard leaves them as-is (CLAUDE.md rule 1).
✅ No rem in new hand-rolled CSS; hardcoded hex colors are used instead of hand-rolled rem (CLAUDE.md rule 2).
✅ No lazy/dynamic imports added (CLAUDE.md bundle convention).
✅ Late-binding via setSessionRecovery correctly avoids a circular import (modular-rest → auth-recovery → modular-rest). Design rationale documented inline.
✅ Extensive multi-line docstrings in auth-recovery.ts are appropriate per CLAUDE.md's override: "Multi-line comments and docstrings are fine — encouraged, even, where the why is non-obvious."

Minor items (non-blocking):

1. PR body uses placeholder task IDs. The body lists #33 (a GitHub PR number, not a ClickUp ID) and #console-crane-ui-fixes (invalid). The real ClickUp task 86exw6kme is referenced in the commit messages but not mentioned by name/URL in the PR description. Worth cleaning up the body for traceability.

2. justify-center on InputGroup is labelled "in-progress" in the commit body. The commit for align bundle selector height notes "Also carries an in-progress justify-center tweak + reformatting in the same component." If this centers the search + Create row in the bundle dropdown header, it's a UI change that doesn't seem obviously incomplete — but calling it "in-progress" in the commit message is ambiguous. Confirm whether this is intentional and finished.

3. CLAUDE.md test-count comment is now stale. The doc records "138 unit / component tests across 19 files; 16 E2E specs across 6 files". This PR adds tests/auth-recovery.test.ts (new file, ~30+ cases), extends auth-anon-flow.test.ts + translate.service.test.ts, and adds tests/e2e/host-style-isolation.spec.ts (new E2E file). A follow-up CLAUDE.md update would keep the docs accurate.

---

Verdict

APPROVE

The implementation is solid: the auth self-heal covers the exact failure paths derived from the server source (not guessed), the single-flight recovery prevents session storms, the CSS isolation fixes are well-scoped and low-risk, and the test coverage is thorough across unit, integration, and E2E layers. The three minor items above are documentation-level and do not affect correctness or maintainability.

---

Generated by Claude Code

[github-actions]

🎉 This PR is included in version 1.14.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀