@clawchatsai/connector 0.0.19 → 0.0.20

package/dist/index.d.ts

@@ -10,7 +10,7 @@
  * Spec: specs/multitenant-p2p.md sections 6.1-6.2
  */
 export declare const PLUGIN_ID = "connector";
-export declare const PLUGIN_VERSION = "0.0.19";
+export declare const PLUGIN_VERSION = "0.0.20";
 interface PluginServiceContext {
     stateDir: string;
     logger: {

package/dist/index.js

@@ -22,7 +22,7 @@ import { generateSessionSecret } from './session-token.js';
 // Inline from shared/api-version.ts to avoid rootDir conflict
 const CURRENT_API_VERSION = 1;
 export const PLUGIN_ID = 'connector';
-export const PLUGIN_VERSION = '0.0.19';
+export const PLUGIN_VERSION = '0.0.20';
 /** Max DataChannel message size (~256KB, leave room for envelope) */
 const MAX_DC_MESSAGE_SIZE = 256 * 1024;
 /** Active DataChannel connections: connectionId → send function */
@@ -327,7 +327,15 @@ function setupDataChannelHandler(dc, connectionId, ctx) {
                     // Pre-auth non-auth message — drop silently
                     return;
                 case 'pass':
-                    // Already authenticated — process message normally
+                    // Already authenticated — but verify this connection is actually
+                    // in connectedClients. If auth_timeout deleted the session but the
+                    // DC is still open, we'd get 'pass' for an un-authed connection.
+                    // Re-initiate auth instead of processing the message.
+                    if (!connectedClients.has(connectionId)) {
+                        ctx.logger.warn(`Stale connection ${connectionId} — re-initiating auth`);
+                        initAuth(dc, connectionId);
+                        return;
+                    }
                     break;
             }
             // Authenticated message processing

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawchatsai/connector",
-  "version": "0.0.19",
+  "version": "0.0.20",
   "type": "module",
   "description": "ClawChats OpenClaw plugin — P2P tunnel + local API bridge",
   "main": "dist/index.js",