@heylemon/lemonade 0.6.7 → 0.6.8

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.6.7",
-  "commit": "2965fd60321e809102f7cf3b40bb4a8bb6e009cb",
-  "builtAt": "2026-02-28T10:36:45.544Z"
+  "version": "0.6.8",
+  "commit": "5a980408e79cc336ae458564f5a0b54a7567804b",
+  "builtAt": "2026-02-28T11:10:23.426Z"
 }

package/dist/web/auto-reply/monitor.js

@@ -16,7 +16,7 @@ import { resolveWhatsAppAccount } from "../accounts.js";
 import { setActiveWebListener } from "../active-listener.js";
 import { monitorWebInbox } from "../inbound.js";
 import { computeBackoff, newConnectionId, resolveHeartbeatSeconds, resolveReconnectPolicy, sleepWithAbort, } from "../reconnect.js";
-import { formatError, getStatusCode, getWebAuthAgeMs, readWebSelfId } from "../session.js";
+import { formatError, getStatusCode, getWebAuthAgeMs, logoutWeb, readWebSelfId, } from "../session.js";
 import { DEFAULT_WEB_MEDIA_BYTES } from "./constants.js";
 import { whatsappHeartbeatLog, whatsappLog } from "./loggers.js";
 import { buildMentionConfig } from "./mentions.js";
@@ -210,7 +210,15 @@ export async function monitorWebChannel(verbose, listenerFactory = monitorWebInb
                     reconnectAttempts,
                     maxAttempts: reconnectPolicy.maxAttempts,
                 }, "web reconnect: max attempts reached after connection failure");
-                runtime.error(`WhatsApp Web reconnect: max attempts reached (${reconnectAttempts}/${reconnectPolicy.maxAttempts}). Stopping web monitoring.`);
+                // If 515 was seen, credentials are stale — clear them so the next
+                // gateway restart or manual re-link starts fresh.
+                if (has515Retried) {
+                    await logoutWeb({ authDir: account.authDir, runtime });
+                    runtime.error("WhatsApp session invalidated (repeated 515). Cleared credentials — re-link via QR to restore.");
+                }
+                else {
+                    runtime.error(`WhatsApp Web reconnect: max attempts reached (${reconnectAttempts}/${reconnectPolicy.maxAttempts}). Stopping web monitoring.`);
+                }
                 break;
             }
             const delay = computeBackoff(reconnectPolicy, reconnectAttempts);

package/dist/web/login-qr.js

@@ -210,6 +210,18 @@ export async function waitForWebLogin(opts = {}) {
                 if (restarted && isLoginFresh(login)) {
                     continue;
                 }
+                // 515 retry failed — credentials are stale. Clear them so the next
+                // pairing attempt starts completely fresh instead of reusing a
+                // broken session that WhatsApp's server has already invalidated.
+                await logoutWeb({
+                    authDir: login.authDir,
+                    isLegacyAuthDir: login.isLegacyAuthDir,
+                    runtime,
+                });
+                const message = "WhatsApp pairing failed (code 515). Cleared session — please scan the QR code again.";
+                await resetActiveLogin(account.accountId, message);
+                runtime.log(danger(message));
+                return { connected: false, message };
             }
             const message = `WhatsApp login failed: ${login.error}`;
             await resetActiveLogin(account.accountId, message);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heylemon/lemonade",
-  "version": "0.6.7",
+  "version": "0.6.8",
   "description": "AI gateway CLI for Lemon - local AI assistant with integrations",
   "publishConfig": {
     "access": "restricted"