[codex] Preserve client connection preparation causes

[juliusmarminge]

Summary

• keep stable presentation messages while retaining the original Cloud token, desktop credential, and mobile identity failures as causes
• preserve invalid pairing and endpoint parsing errors instead of copying their messages into the outer connection error
• cover the pairing boundary with a focused cause assertion

Stack

• based on [codex] Structure client RPC unavailable errors #3260, which includes the connection cause field introduced by [codex] Preserve client connection error causes #3242

Validation

• vp test packages/client-runtime/src/connection/onboarding.test.ts (5 tests)
• vp check (passes; 13 pre-existing warnings on this stack)
• vp run typecheck
• vp run lint:mobile

---

Note

Low Risk
Behavioral change to error message text shown to users; diagnostics improve via cause with no auth or data-model changes.

Overview
Connection preparation failures now expose fixed detail text to users while keeping the underlying failure on cause for logging and diagnostics, instead of copying inner error strings into the outer message.

Onboarding (resolvePairingTarget, bearer URL normalization) always reports generic configuration messages; validation text like “Enter a backend URL.” moves to cause. Mobile and web platform layers apply the same pattern for Clerk token reads, mobile device identity, desktop primary credentials, SSH environment prep/disconnect, and SSH prep still surfaces cancel-related blocked messages in detail when the cause message contains “cancel”.

Tests assert pairing rejects with the new message plus nested cause, and that SSH descriptor failures keep a private endpoint string off the public message but on error.cause.

^{Reviewed by Cursor Bugbot for commit 8a2da4c. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Preserve original error causes in client connection preparation errors

• Replaces detailed error messages (which could leak sensitive info) with generic messages across connection preparation code in both web and mobile, while attaching the original error as cause on ConnectionTransientError and ConnectionBlockedError.
• Affects SSH preparation, Cloud session token reads, desktop primary credential loads, SSH disconnect, device identity loads, and onboarding pairing/URL validation in platform.ts, platform.ts, and onboarding.ts.
• Extends EnvironmentRpcUnavailableError with environmentLabel and optional method fields, and adds an isEnvironmentRpcUnavailableError type guard; the error message is now auto-derived as '<label> is not connected [for RPC method <method>]'.
• Thread outbox delivery retry policy now retries on EnvironmentRpcUnavailableError in addition to existing transient connection errors.

^{Macroscope summarized 8a2da4c.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: bebf9567-ffb6-4f3f-a124-29fe3bfa93bb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/client-platform-error-causes

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[macroscopeapp]

Approvability

Verdict: Approved

This PR improves error handling by preserving original causes for debugging while simplifying user-facing messages. The only behavioral change is adding retry support for a specific disconnection error, which is small, intentional, and well-tested.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate 8a2da4c

[juliusmarminge]

Summary

• keep stable presentation messages while retaining the original Cloud token, desktop credential, and mobile identity failures as causes
• preserve invalid pairing and endpoint parsing errors instead of copying their messages into the outer connection error
• cover the pairing boundary with a focused cause assertion

Stack

• based on [codex] Structure client RPC unavailable errors #3260, which includes the connection cause field introduced by [codex] Preserve client connection error causes #3242

Validation

• vp test packages/client-runtime/src/connection/onboarding.test.ts (5 tests)
• vp check (passes; 13 pre-existing warnings on this stack)
• vp run typecheck
• vp run lint:mobile

---

Note

Low Risk
Behavioral change to error message text shown to users; diagnostics improve via cause with no auth or data-model changes.

Overview
Connection preparation failures now expose fixed detail text to users while keeping the underlying failure on cause for logging and diagnostics, instead of copying inner error strings into the outer message.

Onboarding (resolvePairingTarget, bearer URL normalization) always reports generic configuration messages; validation text like “Enter a backend URL.” moves to cause. Mobile and web platform layers apply the same pattern for Clerk token reads, mobile device identity, desktop primary credentials, SSH environment prep/disconnect, and SSH prep still surfaces cancel-related blocked messages in detail when the cause message contains “cancel”.

Tests assert pairing rejects with the new message plus nested cause, and that SSH descriptor failures keep a private endpoint string off the public message but on error.cause.

^{Reviewed by Cursor Bugbot for commit 8a2da4c. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Preserve original error causes in client connection preparation errors

• Replaces detailed error messages (which could leak sensitive info) with generic messages across connection preparation code in both web and mobile, while attaching the original error as cause on ConnectionTransientError and ConnectionBlockedError.
• Affects SSH preparation, Cloud session token reads, desktop primary credential loads, SSH disconnect, device identity loads, and onboarding pairing/URL validation in platform.ts, platform.ts, and onboarding.ts.
• Extends EnvironmentRpcUnavailableError with environmentLabel and optional method fields, and adds an isEnvironmentRpcUnavailableError type guard; the error message is now auto-derived as '<label> is not connected [for RPC method <method>]'.
• Thread outbox delivery retry policy now retries on EnvironmentRpcUnavailableError in addition to existing transient connection errors.

^{Macroscope summarized 8a2da4c.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: bebf9567-ffb6-4f3f-a124-29fe3bfa93bb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/client-platform-error-causes

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[macroscopeapp]

Approvability

Verdict: Approved

This PR improves error handling by preserving original causes for debugging while simplifying user-facing messages. The only behavioral change is adding retry support for a specific disconnection error, which is small, intentional, and well-tested.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate 8a2da4c

[juliusmarminge]

Summary

• keep stable presentation messages while retaining the original Cloud token, desktop credential, and mobile identity failures as causes
• preserve invalid pairing and endpoint parsing errors instead of copying their messages into the outer connection error
• cover the pairing boundary with a focused cause assertion

Stack

• based on [codex] Structure client RPC unavailable errors #3260, which includes the connection cause field introduced by [codex] Preserve client connection error causes #3242

Validation

• vp test packages/client-runtime/src/connection/onboarding.test.ts (5 tests)
• vp check (passes; 13 pre-existing warnings on this stack)
• vp run typecheck
• vp run lint:mobile

---

Note

Low Risk
Behavioral change to error message text shown to users; diagnostics improve via cause with no auth or data-model changes.

Overview
Connection preparation failures now expose fixed detail text to users while keeping the underlying failure on cause for logging and diagnostics, instead of copying inner error strings into the outer message.

Onboarding (resolvePairingTarget, bearer URL normalization) always reports generic configuration messages; validation text like “Enter a backend URL.” moves to cause. Mobile and web platform layers apply the same pattern for Clerk token reads, mobile device identity, desktop primary credentials, SSH environment prep/disconnect, and SSH prep still surfaces cancel-related blocked messages in detail when the cause message contains “cancel”.

Tests assert pairing rejects with the new message plus nested cause, and that SSH descriptor failures keep a private endpoint string off the public message but on error.cause.

^{Reviewed by Cursor Bugbot for commit 8a2da4c. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Preserve original error causes in client connection preparation errors

• Replaces detailed error messages (which could leak sensitive info) with generic messages across connection preparation code in both web and mobile, while attaching the original error as cause on ConnectionTransientError and ConnectionBlockedError.
• Affects SSH preparation, Cloud session token reads, desktop primary credential loads, SSH disconnect, device identity loads, and onboarding pairing/URL validation in platform.ts, platform.ts, and onboarding.ts.
• Extends EnvironmentRpcUnavailableError with environmentLabel and optional method fields, and adds an isEnvironmentRpcUnavailableError type guard; the error message is now auto-derived as '<label> is not connected [for RPC method <method>]'.
• Thread outbox delivery retry policy now retries on EnvironmentRpcUnavailableError in addition to existing transient connection errors.

^{Macroscope summarized 8a2da4c.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: bebf9567-ffb6-4f3f-a124-29fe3bfa93bb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/client-platform-error-causes

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[macroscopeapp]

Approvability

Verdict: Approved

This PR improves error handling by preserving original causes for debugging while simplifying user-facing messages. The only behavioral change is adding retry support for a specific disconnection error, which is small, intentional, and well-tested.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate 8a2da4c

[juliusmarminge]

Summary

• keep stable presentation messages while retaining the original Cloud token, desktop credential, and mobile identity failures as causes
• preserve invalid pairing and endpoint parsing errors instead of copying their messages into the outer connection error
• cover the pairing boundary with a focused cause assertion

Stack

• based on [codex] Structure client RPC unavailable errors #3260, which includes the connection cause field introduced by [codex] Preserve client connection error causes #3242

Validation

• vp test packages/client-runtime/src/connection/onboarding.test.ts (5 tests)
• vp check (passes; 13 pre-existing warnings on this stack)
• vp run typecheck
• vp run lint:mobile

---

Note

Low Risk
Behavioral change to error message text shown to users; diagnostics improve via cause with no auth or data-model changes.

Overview
Connection preparation failures now expose fixed detail text to users while keeping the underlying failure on cause for logging and diagnostics, instead of copying inner error strings into the outer message.

Onboarding (resolvePairingTarget, bearer URL normalization) always reports generic configuration messages; validation text like “Enter a backend URL.” moves to cause. Mobile and web platform layers apply the same pattern for Clerk token reads, mobile device identity, desktop primary credentials, SSH environment prep/disconnect, and SSH prep still surfaces cancel-related blocked messages in detail when the cause message contains “cancel”.

Tests assert pairing rejects with the new message plus nested cause, and that SSH descriptor failures keep a private endpoint string off the public message but on error.cause.

^{Reviewed by Cursor Bugbot for commit 8a2da4c. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Preserve original error causes in client connection preparation errors

• Replaces detailed error messages (which could leak sensitive info) with generic messages across connection preparation code in both web and mobile, while attaching the original error as cause on ConnectionTransientError and ConnectionBlockedError.
• Affects SSH preparation, Cloud session token reads, desktop primary credential loads, SSH disconnect, device identity loads, and onboarding pairing/URL validation in platform.ts, platform.ts, and onboarding.ts.
• Extends EnvironmentRpcUnavailableError with environmentLabel and optional method fields, and adds an isEnvironmentRpcUnavailableError type guard; the error message is now auto-derived as '<label> is not connected [for RPC method <method>]'.
• Thread outbox delivery retry policy now retries on EnvironmentRpcUnavailableError in addition to existing transient connection errors.

^{Macroscope summarized 8a2da4c.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: bebf9567-ffb6-4f3f-a124-29fe3bfa93bb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/client-platform-error-causes

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[macroscopeapp]

Approvability

Verdict: Approved

This PR improves error handling by preserving original causes for debugging while simplifying user-facing messages. The only behavioral change is adding retry support for a specific disconnection error, which is small, intentional, and well-tested.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate 8a2da4c

[juliusmarminge]

Summary

• keep stable presentation messages while retaining the original Cloud token, desktop credential, and mobile identity failures as causes
• preserve invalid pairing and endpoint parsing errors instead of copying their messages into the outer connection error
• cover the pairing boundary with a focused cause assertion

Stack

• based on [codex] Structure client RPC unavailable errors #3260, which includes the connection cause field introduced by [codex] Preserve client connection error causes #3242

Validation

• vp test packages/client-runtime/src/connection/onboarding.test.ts (5 tests)
• vp check (passes; 13 pre-existing warnings on this stack)
• vp run typecheck
• vp run lint:mobile

---

Note

Low Risk
Behavioral change to error message text shown to users; diagnostics improve via cause with no auth or data-model changes.

Overview
Connection preparation failures now expose fixed detail text to users while keeping the underlying failure on cause for logging and diagnostics, instead of copying inner error strings into the outer message.

Onboarding (resolvePairingTarget, bearer URL normalization) always reports generic configuration messages; validation text like “Enter a backend URL.” moves to cause. Mobile and web platform layers apply the same pattern for Clerk token reads, mobile device identity, desktop primary credentials, SSH environment prep/disconnect, and SSH prep still surfaces cancel-related blocked messages in detail when the cause message contains “cancel”.

Tests assert pairing rejects with the new message plus nested cause, and that SSH descriptor failures keep a private endpoint string off the public message but on error.cause.

^{Reviewed by Cursor Bugbot for commit 8a2da4c. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Preserve original error causes in client connection preparation errors

• Replaces detailed error messages (which could leak sensitive info) with generic messages across connection preparation code in both web and mobile, while attaching the original error as cause on ConnectionTransientError and ConnectionBlockedError.
• Affects SSH preparation, Cloud session token reads, desktop primary credential loads, SSH disconnect, device identity loads, and onboarding pairing/URL validation in platform.ts, platform.ts, and onboarding.ts.
• Extends EnvironmentRpcUnavailableError with environmentLabel and optional method fields, and adds an isEnvironmentRpcUnavailableError type guard; the error message is now auto-derived as '<label> is not connected [for RPC method <method>]'.
• Thread outbox delivery retry policy now retries on EnvironmentRpcUnavailableError in addition to existing transient connection errors.

^{Macroscope summarized 8a2da4c.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: bebf9567-ffb6-4f3f-a124-29fe3bfa93bb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/client-platform-error-causes

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[macroscopeapp]

Approvability

Verdict: Approved

This PR improves error handling by preserving original causes for debugging while simplifying user-facing messages. The only behavioral change is adding retry support for a specific disconnection error, which is small, intentional, and well-tested.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate 8a2da4c

[juliusmarminge]

Summary

• keep stable presentation messages while retaining the original Cloud token, desktop credential, and mobile identity failures as causes
• preserve invalid pairing and endpoint parsing errors instead of copying their messages into the outer connection error
• cover the pairing boundary with a focused cause assertion

Stack

• based on [codex] Structure client RPC unavailable errors #3260, which includes the connection cause field introduced by [codex] Preserve client connection error causes #3242

Validation

• vp test packages/client-runtime/src/connection/onboarding.test.ts (5 tests)
• vp check (passes; 13 pre-existing warnings on this stack)
• vp run typecheck
• vp run lint:mobile

---

Note

Low Risk
Behavioral change to error message text shown to users; diagnostics improve via cause with no auth or data-model changes.

Overview
Connection preparation failures now expose fixed detail text to users while keeping the underlying failure on cause for logging and diagnostics, instead of copying inner error strings into the outer message.

Onboarding (resolvePairingTarget, bearer URL normalization) always reports generic configuration messages; validation text like “Enter a backend URL.” moves to cause. Mobile and web platform layers apply the same pattern for Clerk token reads, mobile device identity, desktop primary credentials, SSH environment prep/disconnect, and SSH prep still surfaces cancel-related blocked messages in detail when the cause message contains “cancel”.

Tests assert pairing rejects with the new message plus nested cause, and that SSH descriptor failures keep a private endpoint string off the public message but on error.cause.

^{Reviewed by Cursor Bugbot for commit 8a2da4c. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Preserve original error causes in client connection preparation errors

• Replaces detailed error messages (which could leak sensitive info) with generic messages across connection preparation code in both web and mobile, while attaching the original error as cause on ConnectionTransientError and ConnectionBlockedError.
• Affects SSH preparation, Cloud session token reads, desktop primary credential loads, SSH disconnect, device identity loads, and onboarding pairing/URL validation in platform.ts, platform.ts, and onboarding.ts.
• Extends EnvironmentRpcUnavailableError with environmentLabel and optional method fields, and adds an isEnvironmentRpcUnavailableError type guard; the error message is now auto-derived as '<label> is not connected [for RPC method <method>]'.
• Thread outbox delivery retry policy now retries on EnvironmentRpcUnavailableError in addition to existing transient connection errors.

^{Macroscope summarized 8a2da4c.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: bebf9567-ffb6-4f3f-a124-29fe3bfa93bb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/client-platform-error-causes

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[macroscopeapp]

Approvability

Verdict: Approved

This PR improves error handling by preserving original causes for debugging while simplifying user-facing messages. The only behavioral change is adding retry support for a specific disconnection error, which is small, intentional, and well-tested.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate 8a2da4c

[juliusmarminge]

Summary

• keep stable presentation messages while retaining the original Cloud token, desktop credential, and mobile identity failures as causes
• preserve invalid pairing and endpoint parsing errors instead of copying their messages into the outer connection error
• cover the pairing boundary with a focused cause assertion

Stack

• based on [codex] Structure client RPC unavailable errors #3260, which includes the connection cause field introduced by [codex] Preserve client connection error causes #3242

Validation

• vp test packages/client-runtime/src/connection/onboarding.test.ts (5 tests)
• vp check (passes; 13 pre-existing warnings on this stack)
• vp run typecheck
• vp run lint:mobile

---

Note

Low Risk
Behavioral change to error message text shown to users; diagnostics improve via cause with no auth or data-model changes.

Overview
Connection preparation failures now expose fixed detail text to users while keeping the underlying failure on cause for logging and diagnostics, instead of copying inner error strings into the outer message.

Onboarding (resolvePairingTarget, bearer URL normalization) always reports generic configuration messages; validation text like “Enter a backend URL.” moves to cause. Mobile and web platform layers apply the same pattern for Clerk token reads, mobile device identity, desktop primary credentials, SSH environment prep/disconnect, and SSH prep still surfaces cancel-related blocked messages in detail when the cause message contains “cancel”.

Tests assert pairing rejects with the new message plus nested cause, and that SSH descriptor failures keep a private endpoint string off the public message but on error.cause.

^{Reviewed by Cursor Bugbot for commit 8a2da4c. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Preserve original error causes in client connection preparation errors

• Replaces detailed error messages (which could leak sensitive info) with generic messages across connection preparation code in both web and mobile, while attaching the original error as cause on ConnectionTransientError and ConnectionBlockedError.
• Affects SSH preparation, Cloud session token reads, desktop primary credential loads, SSH disconnect, device identity loads, and onboarding pairing/URL validation in platform.ts, platform.ts, and onboarding.ts.
• Extends EnvironmentRpcUnavailableError with environmentLabel and optional method fields, and adds an isEnvironmentRpcUnavailableError type guard; the error message is now auto-derived as '<label> is not connected [for RPC method <method>]'.
• Thread outbox delivery retry policy now retries on EnvironmentRpcUnavailableError in addition to existing transient connection errors.

^{Macroscope summarized 8a2da4c.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: bebf9567-ffb6-4f3f-a124-29fe3bfa93bb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/client-platform-error-causes

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[macroscopeapp]

Approvability

Verdict: Approved

This PR improves error handling by preserving original causes for debugging while simplifying user-facing messages. The only behavioral change is adding retry support for a specific disconnection error, which is small, intentional, and well-tested.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate 8a2da4c

[juliusmarminge]

Summary

• keep stable presentation messages while retaining the original Cloud token, desktop credential, and mobile identity failures as causes
• preserve invalid pairing and endpoint parsing errors instead of copying their messages into the outer connection error
• cover the pairing boundary with a focused cause assertion

Stack

• based on [codex] Structure client RPC unavailable errors #3260, which includes the connection cause field introduced by [codex] Preserve client connection error causes #3242

Validation

• vp test packages/client-runtime/src/connection/onboarding.test.ts (5 tests)
• vp check (passes; 13 pre-existing warnings on this stack)
• vp run typecheck
• vp run lint:mobile

---

Note

Low Risk
Behavioral change to error message text shown to users; diagnostics improve via cause with no auth or data-model changes.

Overview
Connection preparation failures now expose fixed detail text to users while keeping the underlying failure on cause for logging and diagnostics, instead of copying inner error strings into the outer message.

Onboarding (resolvePairingTarget, bearer URL normalization) always reports generic configuration messages; validation text like “Enter a backend URL.” moves to cause. Mobile and web platform layers apply the same pattern for Clerk token reads, mobile device identity, desktop primary credentials, SSH environment prep/disconnect, and SSH prep still surfaces cancel-related blocked messages in detail when the cause message contains “cancel”.

Tests assert pairing rejects with the new message plus nested cause, and that SSH descriptor failures keep a private endpoint string off the public message but on error.cause.

^{Reviewed by Cursor Bugbot for commit 8a2da4c. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Preserve original error causes in client connection preparation errors

• Replaces detailed error messages (which could leak sensitive info) with generic messages across connection preparation code in both web and mobile, while attaching the original error as cause on ConnectionTransientError and ConnectionBlockedError.
• Affects SSH preparation, Cloud session token reads, desktop primary credential loads, SSH disconnect, device identity loads, and onboarding pairing/URL validation in platform.ts, platform.ts, and onboarding.ts.
• Extends EnvironmentRpcUnavailableError with environmentLabel and optional method fields, and adds an isEnvironmentRpcUnavailableError type guard; the error message is now auto-derived as '<label> is not connected [for RPC method <method>]'.
• Thread outbox delivery retry policy now retries on EnvironmentRpcUnavailableError in addition to existing transient connection errors.

^{Macroscope summarized 8a2da4c.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: bebf9567-ffb6-4f3f-a124-29fe3bfa93bb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/client-platform-error-causes

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[macroscopeapp]

Approvability

Verdict: Approved

This PR improves error handling by preserving original causes for debugging while simplifying user-facing messages. The only behavioral change is adding retry support for a specific disconnection error, which is small, intentional, and well-tested.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate 8a2da4c