@hellolynk-ai/trae-work-mcp 0.4.101 → 0.4.102

package/hellolynk-client-pack-manifest.json

@@ -2,7 +2,7 @@
   "contract": "hellolynk-client-npm-pack-manifest-v1",
   "client": "trae-work",
   "packageName": "@hellolynk-ai/trae-work-mcp",
-  "version": "0.4.101",
+  "version": "0.4.102",
   "workbench": {
     "path": "runtime/workbench/hellolynk-workbench-build.json",
     "contract": "hellolynk-shared-workbench-build-v1",
@@ -23,7 +23,7 @@
     {
       "path": "integrations/trae-work/package.json",
       "bytes": 496,
-      "sha256": "2eb6935f4e8faf49d6010c810eac516b5887f8aee4d534a486d486cac60235b2"
+      "sha256": "cffb8384ee280dd92011c0ad57052ccccf2bbf7138ef0bec635ae33e8532e9ed"
     },
     {
       "path": "integrations/trae-work/runtime/neutral-host-bootstrap.mjs",
@@ -103,7 +103,7 @@
     {
       "path": "package.json",
       "bytes": 1851,
-      "sha256": "9d932e4a6de05ea4db57fa083e3c5bc8cc27c170376393fdb05ea8d40fad33a0"
+      "sha256": "01fbaf301446a6a11313101972885ad30ea4cb960cccd7400c0516a36c4d35ac"
     },
     {
       "path": "README.md",
@@ -117,8 +117,8 @@
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-client-core.mjs",
-      "bytes": 36628,
-      "sha256": "5d2190c2354ede169b2053864674c7ae5b80985970dc13609d6818c5a6d16940"
+      "bytes": 37550,
+      "sha256": "186332d5dea8876cf8ca57fef35e9810df5256ed36f704f7bd3840e45c406a4a"
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-client-profile.mjs",
@@ -187,8 +187,8 @@
     },
     {
       "path": "runtime/core/hellolynk-client-core.mjs",
-      "bytes": 36628,
-      "sha256": "5d2190c2354ede169b2053864674c7ae5b80985970dc13609d6818c5a6d16940"
+      "bytes": 37550,
+      "sha256": "186332d5dea8876cf8ca57fef35e9810df5256ed36f704f7bd3840e45c406a4a"
     },
     {
       "path": "runtime/core/hellolynk-client-profile.mjs",
@@ -388,7 +388,7 @@
     {
       "path": "runtime/core/hellolynk-neutral-host-process.mjs",
       "bytes": 234159,
-      "sha256": "0a66fca2b862fde9269722f026fc67e9d1c79435f0d410809aee669be9f9f497"
+      "sha256": "42d29af2f0ac96252d694996864d54b3fddda47d6ad5405020a1354e13372efa"
     },
     {
       "path": "runtime/core/hellolynk-neutral-host-store-adapters.mjs",
@@ -448,12 +448,12 @@
     {
       "path": "runtime/neutral-host-release-manifest.json",
       "bytes": 15630,
-      "sha256": "8561015215e14fe8f8b5f1a18ecccefa717cdff05c40f8eee8d21af328bc3174"
+      "sha256": "d2cff22cd8e4a224bf24c4a57b67d4c7a4adce9721405d81da52c7eb3c3032ab"
     },
     {
       "path": "runtime/neutral-host-release-pin.json",
       "bytes": 146,
-      "sha256": "e68717f720a3f92c3af036dc99556ff188c6b3249f65c55bbbef675d92235176"
+      "sha256": "1a602dba63e67f62d8050cba71fde3a7c468b5acfa8568fe459b540bbfce57ad"
     },
     {
       "path": "runtime/platform/windows/configure-agent.ps1",

package/hellolynk-client-pack-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-client-npm-pack-pin-v1",
-  "manifestSha256": "bec00be31829b1e18fe19ef76fd7b5650ce85c0f9f2c2d45ddf5203559b65037"
+  "manifestSha256": "f1543b1479b699c126c965e05f9f0543c8d4225f54e2211166043d9f9476362f"
 }

package/integrations/trae-work/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hellolynk-ai/trae-work-mcp",
-  "version": "0.4.101",
+  "version": "0.4.102",
   "private": true,
   "type": "module",
   "description": "TRAE Work one-click bridge for local HelloLynk Messaging.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hellolynk-ai/trae-work-mcp",
-  "version": "0.4.101",
+  "version": "0.4.102",
   "description": "HelloLynk Messaging for TRAE Work: open conversations and let your AI message other people's AI assistants.",
   "homepage": "https://hellolynk.com",
   "repository": {

package/runtime/bootstrap/core/hellolynk-client-core.mjs

@@ -387,7 +387,9 @@ export async function issueDeviceRuntimeSession(options) {
       }
       return fresh;
     }
-    throw new HelloLynkClientError(safeDeviceRuntimeErrorCode(result?.error), {
+    const code = response.status === 401 && result?.error === "device_credential_invalid"
+      && result?.reason === "device_credential_revoked" ? result.reason : safeDeviceRuntimeErrorCode(result?.error);
+    throw new HelloLynkClientError(code, {
       httpStatus: response.status,
       retryable: response.status === 408 || response.status === 425 || response.status === 429 || response.status >= 500,
     });
@@ -584,6 +586,7 @@ export function createDeviceRuntimeSessionManager(options = {}) {
   );
   let current = null;
   let rejectedCredential = null;
+  const revokedFingerprints = new Set();
   let localIssueTail = Promise.resolve();
 
   const routeMatches = (session, input) => {
@@ -668,7 +671,15 @@ export function createDeviceRuntimeSessionManager(options = {}) {
       : null;
     // The production caller holds the existing session lock, including across
     // Host processes. An authority denial may drain the current Host.
+    const revocationKey = fingerprint && `revoked-${fingerprint}`;
     if (fingerprint) {
+      // An older process may update or clear its temporary rejection for the
+      // profile. Keep permanent revocation under the credential's own key.
+      if (revokedFingerprints.has(fingerprint)
+        || (await credentialRejections?.load(revocationKey).catch(() => null))?.fingerprint === fingerprint) {
+        revokedFingerprints.add(fingerprint);
+        throw new HelloLynkClientError("device_credential_revoked", { httpStatus: 401 });
+      }
       const isCoolingDown = (rejection) => {
         if (rejection?.fingerprint !== fingerprint) return false;
         const age = now() - rejection.rejectedAtMs;
@@ -685,10 +696,14 @@ export function createDeviceRuntimeSessionManager(options = {}) {
     try {
       session = reusable(await issue(request), input);
     } catch (error) {
-      if (fingerprint && error?.httpStatus === 401 && error.code === "device_credential_invalid") {
-        rejectedCredential = { fingerprint, rejectedAtMs: now() };
-        // Preserve the authority denial even if local storage is unavailable.
-        await credentialRejections?.save(sessionKey, rejectedCredential).catch(() => {});
+      if (fingerprint && error?.httpStatus === 401) {
+        if (error.code === "device_credential_revoked") {
+          revokedFingerprints.add(fingerprint);
+          await credentialRejections?.save(revocationKey, { fingerprint, rejectedAtMs: now() }).catch(() => {});
+        } else if (error.code === "device_credential_invalid") {
+          rejectedCredential = { fingerprint, rejectedAtMs: now() };
+          await credentialRejections?.save(sessionKey, rejectedCredential).catch(() => {});
+        }
       }
       throw error;
     }

package/runtime/core/hellolynk-client-core.mjs

@@ -387,7 +387,9 @@ export async function issueDeviceRuntimeSession(options) {
       }
       return fresh;
     }
-    throw new HelloLynkClientError(safeDeviceRuntimeErrorCode(result?.error), {
+    const code = response.status === 401 && result?.error === "device_credential_invalid"
+      && result?.reason === "device_credential_revoked" ? result.reason : safeDeviceRuntimeErrorCode(result?.error);
+    throw new HelloLynkClientError(code, {
       httpStatus: response.status,
       retryable: response.status === 408 || response.status === 425 || response.status === 429 || response.status >= 500,
     });
@@ -584,6 +586,7 @@ export function createDeviceRuntimeSessionManager(options = {}) {
   );
   let current = null;
   let rejectedCredential = null;
+  const revokedFingerprints = new Set();
   let localIssueTail = Promise.resolve();
 
   const routeMatches = (session, input) => {
@@ -668,7 +671,15 @@ export function createDeviceRuntimeSessionManager(options = {}) {
       : null;
     // The production caller holds the existing session lock, including across
     // Host processes. An authority denial may drain the current Host.
+    const revocationKey = fingerprint && `revoked-${fingerprint}`;
     if (fingerprint) {
+      // An older process may update or clear its temporary rejection for the
+      // profile. Keep permanent revocation under the credential's own key.
+      if (revokedFingerprints.has(fingerprint)
+        || (await credentialRejections?.load(revocationKey).catch(() => null))?.fingerprint === fingerprint) {
+        revokedFingerprints.add(fingerprint);
+        throw new HelloLynkClientError("device_credential_revoked", { httpStatus: 401 });
+      }
       const isCoolingDown = (rejection) => {
         if (rejection?.fingerprint !== fingerprint) return false;
         const age = now() - rejection.rejectedAtMs;
@@ -685,10 +696,14 @@ export function createDeviceRuntimeSessionManager(options = {}) {
     try {
       session = reusable(await issue(request), input);
     } catch (error) {
-      if (fingerprint && error?.httpStatus === 401 && error.code === "device_credential_invalid") {
-        rejectedCredential = { fingerprint, rejectedAtMs: now() };
-        // Preserve the authority denial even if local storage is unavailable.
-        await credentialRejections?.save(sessionKey, rejectedCredential).catch(() => {});
+      if (fingerprint && error?.httpStatus === 401) {
+        if (error.code === "device_credential_revoked") {
+          revokedFingerprints.add(fingerprint);
+          await credentialRejections?.save(revocationKey, { fingerprint, rejectedAtMs: now() }).catch(() => {});
+        } else if (error.code === "device_credential_invalid") {
+          rejectedCredential = { fingerprint, rejectedAtMs: now() };
+          await credentialRejections?.save(sessionKey, rejectedCredential).catch(() => {});
+        }
       }
       throw error;
     }

package/runtime/core/hellolynk-neutral-host-process.mjs

@@ -35,7 +35,7 @@ export const HELLOLYNK_NEUTRAL_HOST_PROCESS_CONTRACT = "hellolynk-neutral-host-p
 export const HELLOLYNK_NEUTRAL_HOST_DISCOVERY_CONTRACT = "hellolynk-neutral-host-discovery-v1";
 // Raised with every release batch, together with the six client versions. A Host reports it
 // in its health; the higher release stays and the lower one makes room.
-export const HELLOLYNK_HOST_RELEASE_ORDINAL = 18;
+export const HELLOLYNK_HOST_RELEASE_ORDINAL = 19;
 
 const INSTALLATION_LOCK_CONTRACT = "hellolynk-neutral-host-installation-lock-v2";
 const INSTALLATION_LOCK_MAX_BYTES = 4 * 1024;

package/runtime/neutral-host-release-manifest.json

@@ -4,7 +4,7 @@
   "files": [
     {
       "path": "release/integrations/trae-work/package.json",
-      "sha256": "2eb6935f4e8faf49d6010c810eac516b5887f8aee4d534a486d486cac60235b2"
+      "sha256": "cffb8384ee280dd92011c0ad57052ccccf2bbf7138ef0bec635ae33e8532e9ed"
     },
     {
       "path": "connect-activate.mjs",
@@ -36,7 +36,7 @@
     },
     {
       "path": "core/hellolynk-client-core.mjs",
-      "sha256": "5d2190c2354ede169b2053864674c7ae5b80985970dc13609d6818c5a6d16940"
+      "sha256": "186332d5dea8876cf8ca57fef35e9810df5256ed36f704f7bd3840e45c406a4a"
     },
     {
       "path": "core/hellolynk-client-profile.mjs",
@@ -200,7 +200,7 @@
     },
     {
       "path": "core/hellolynk-neutral-host-process.mjs",
-      "sha256": "0a66fca2b862fde9269722f026fc67e9d1c79435f0d410809aee669be9f9f497"
+      "sha256": "42d29af2f0ac96252d694996864d54b3fddda47d6ad5405020a1354e13372efa"
     },
     {
       "path": "core/hellolynk-neutral-host-store-adapters.mjs",
@@ -328,7 +328,7 @@
     },
     {
       "path": "bootstrap/core/hellolynk-client-core.mjs",
-      "sha256": "5d2190c2354ede169b2053864674c7ae5b80985970dc13609d6818c5a6d16940"
+      "sha256": "186332d5dea8876cf8ca57fef35e9810df5256ed36f704f7bd3840e45c406a4a"
     },
     {
       "path": "bootstrap/core/hellolynk-client-profile.mjs",

package/runtime/neutral-host-release-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-neutral-host-release-pin-v1",
-  "manifestSha256": "8561015215e14fe8f8b5f1a18ecccefa717cdff05c40f8eee8d21af328bc3174"
+  "manifestSha256": "d2cff22cd8e4a224bf24c4a57b67d4c7a4adce9721405d81da52c7eb3c3032ab"
 }