@livedesk/hub 0.1.44 → 0.1.46

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/hub",
-  "version": "0.1.44",
+  "version": "0.1.46",
   "description": "LiveDesk local Hub API and browser frame bridge",
   "type": "module",
   "main": "src/server.js",

package/src/console-relay.js

@@ -107,9 +107,10 @@ export function createHubConsoleRelay(options = {}) {
   let lastError = relayUrl instanceof URL ? '' : relayUrl === '' ? '' : 'invalid-relay-url';
   let droppedBinaryMessages = 0;
 
-  const sendRelay = payload => {
+  const sendRelay = (payload, bypassBackpressure = false) => {
     if (!relaySocket || relaySocket.readyState !== WebSocketImpl.OPEN) return false;
-    if (Number(relaySocket.bufferedAmount || 0) > MAX_RELAY_BUFFERED_BYTES) return false;
+    if (!bypassBackpressure
+      && Number(relaySocket.bufferedAmount || 0) > MAX_RELAY_BUFFERED_BYTES) return false;
     relaySocket.send(typeof payload === 'string' || Buffer.isBuffer(payload) ? payload : JSON.stringify(payload));
     return true;
   };
@@ -232,6 +233,7 @@ export function createHubConsoleRelay(options = {}) {
         if (!relaySocket || relaySocket.readyState !== WebSocketImpl.OPEN
           || Number(relaySocket.bufferedAmount || 0) > MAX_RELAY_BUFFERED_BYTES) {
           droppedBinaryMessages += 1;
+          closeLocalSocket(key, 1013, 'console-relay-backpressure');
           return;
         }
         const header = Buffer.from(`B${consoleId}${channelId}`, 'ascii');
@@ -246,7 +248,14 @@ export function createHubConsoleRelay(options = {}) {
     });
     socket.once('close', (code, reason) => {
       if (localSockets.get(key) === socket) localSockets.delete(key);
-      sendRelay({ type: 'ws-closed', consoleId, channelId, code, reason: String(reason || '').slice(0, 120) });
+      const closeReason = String(reason || '').slice(0, 120);
+      // Do not silently punch a hole in an H.264 GOP. A tiny terminal control
+      // message is allowed behind the already-bounded video backlog so the
+      // browser replaces only this logical lane and starts again on a key.
+      sendRelay(
+        { type: 'ws-closed', consoleId, channelId, code, reason: closeReason },
+        closeReason === 'console-relay-backpressure'
+      );
     });
     socket.once('error', error => {
       sendError(consoleId, channelId, error instanceof Error ? error.message : error, 'ws-error');

package/src/server.js

@@ -513,11 +513,19 @@ async function getRuntimeAccessToken() {
   const accessToken = String(runtimeAccessToken || '').trim();
   const expiresSoon = runtimeAccessTokenExpiresAt > 0
     && runtimeAccessTokenExpiresAt <= Date.now() + HUB_ACCESS_TOKEN_REFRESH_SKEW_MS;
-  if (accessToken && !expiresSoon) {
-    return accessToken;
-  }
-
-  const refreshToken = String(runtimeRefreshToken || '').trim();
+  if (accessToken && !expiresSoon) {
+    return accessToken;
+  }
+
+  // The packaged Electron main process owns the encrypted refresh token and
+  // proactively sends each rotation to this child runtime. A second refresh
+  // owner here could consume the one-time token first and make the desktop
+  // shell appear signed out after sleep.
+  if (desktopMainAuthConfig) {
+    return accessToken;
+  }
+
+  const refreshToken = String(runtimeRefreshToken || '').trim();
   if (!refreshToken) {
     return accessToken;
   }
@@ -621,9 +629,9 @@ async function queryAuthoritativeRuntimeRole() {
     },
     SUPABASE_AUTH_TIMEOUT_MS
   );
-  if (response.status === 401 || response.status === 403) {
-    clearRuntimeSession();
-    throw new Error(`hub-role-query-not-authenticated:${response.status}`);
+  if (response.status === 401 || response.status === 403) {
+    if (!desktopMainAuthConfig) clearRuntimeSession();
+    throw new Error(`hub-role-query-not-authenticated:${response.status}`);
   }
   if (!response.ok) {
     throw new Error(`hub-role-query-failed:${response.status}`);
@@ -4601,9 +4609,9 @@ async function callHubSupabaseRpc(name, payload, accessToken) {
   );
   const data = await response.json().catch(() => null);
   const result = Array.isArray(data) ? data[0] : data;
-  if (response.status === 401 || response.status === 403) {
-    clearRuntimeSession();
-    throw new Error(`${name}-not-authenticated:${response.status}`);
+  if (response.status === 401 || response.status === 403) {
+    if (!desktopMainAuthConfig) clearRuntimeSession();
+    throw new Error(`${name}-not-authenticated:${response.status}`);
   }
   if (!response.ok) {
     throw new Error(`${name}-failed:${response.status}`);