@maka/maka-cli 5.199.0 → 5.200.0

package/bundle/typescript/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maka/maka-cli",
-  "version": "5.199.0",
+  "version": "5.200.0",
   "type": "module",
   "summary": "A command line tool for scaffolding Meteor 3.x applications using either React.",
   "description": "A command line tool for scaffolding Meteor 3.x applications using React.",

package/bundle/typescript/src/commands/game/sideQuest/game.js

@@ -24,7 +24,7 @@ import { SAVE_VERSION } from './types/save-file.js';
 import { hubSeedRefOf } from './utilities/hub-seed.js';
 import { serializePlayer, restorePlayer, captureHubOverlay, applyHubOverlay, applyHomeBlock, writeSaveAtomic, deleteSave, restoreItem, readSave, serializeItem, saveSlug, spillPathFor, } from './utilities/persistence.js';
 import { heartbeatPresence, heartbeatPresenceNow } from './utilities/social.js';
-import { presenceBeatAllowed } from './utilities/presence-gate.js';
+import { presenceBeatAllowed, presenceProcessOnTheStreet } from './utilities/presence-gate.js';
 import { pushSave, burnCloudSaveFor, enqueueBoundPush, flushPushQueue, writeSpill, takeLastMemorial, authToken, clearSpill, hasPendingPush, } from './utilities/cloud-saves.js';
 import { DOCWAGON_TIERS, RESUSC_FEE, DEATH_COMP } from './utilities/docwagon.js';
 import { isFence, LIFESTYLE_TIERS, LIFESTYLE_OPTIONS, canonicalLifestyleTier, canonicalLifestyleOption, lifestyleOptionAllowed, lifestyleTierFor } from './utilities/commerce.js';
@@ -823,6 +823,17 @@ export default class Game {
     holdsLiveSeat() {
         return this.ridingWith.length > 0 || this.crew.some(m => m.ghost?.liveOnly);
     }
+    /** Everything the presence gate judges on, in one place -- so no
+     *  caller can answer half of it for itself (TLKZKLQ4rJBCnDjrw). */
+    presenceFacts() {
+        return {
+            anonymous: this._anonymous,
+            bench: this._bench,
+            hostedHub: this._hostedHub,
+            atHub: this.scene === this._hubScene,
+            holdsLiveSeat: this.holdsLiveSeat(),
+        };
+    }
     beatPresence() {
         if (!this.hasHub)
             return;
@@ -841,8 +852,11 @@ export default class Game {
         // reports, both sides of one table, twice in ten minutes.
         //
         // The rule itself lives in utilities/presence-gate.ts so it can be
-        // tested without a Game, a hub, or a socket.
-        if (!presenceBeatAllowed(this.scene === this._hubScene, this.holdsLiveSeat()))
+        // tested without a Game, a hub, or a socket -- and it is the WHOLE
+        // rule, account half included. `returnToHub` calls this method
+        // directly at every homecoming, so a gate that only guarded the
+        // timer-arming path was no gate at all (TLKZKLQ4rJBCnDjrw).
+        if (!presenceBeatAllowed(this.presenceFacts()))
             return;
         void heartbeatPresence(this.presencePayload());
         // The hub link rides the same pulse: a failed connect at boot must
@@ -861,14 +875,18 @@ export default class Game {
      */
     async pushPresenceNow() {
         // A hosted hub never dials the site from inside the site: the box's
-        // own `maka login`, if any, is not this player's.
-        if (this._anonymous || this._bench || this._hostedHub)
+        // own `maka login`, if any, is not this player's. Same predicate the
+        // heartbeat uses -- one account rule, one place.
+        if (!presenceProcessOnTheStreet(this.presenceFacts()))
             return 'offline';
         return heartbeatPresenceNow(this.presencePayload());
     }
     startPresenceHeartbeat() {
-        if (this._anonymous || this._bench || this._hostedHub)
-            return; // account-less, a bench, or hosted on the site: never on the street
+        // Account-less, a bench, or hosted on the site: never on the street,
+        // so don't even arm the timer. beatPresence checks this again -- it
+        // has to, because returnToHub beats without ever coming through here.
+        if (!presenceProcessOnTheStreet(this.presenceFacts()))
+            return;
         if (this._presenceTimer)
             return;
         this.beatPresence();

package/bundle/typescript/src/commands/game/sideQuest/utilities/presence-gate.js

@@ -17,12 +17,37 @@
  * Game, a hub, or a socket. It is deliberately the WHOLE gate: a caller
  * that reimplements part of it inline is the bug this file exists to
  * prevent coming back.
+ *
+ * THE ACCOUNT HALF MOVED IN HERE (TLKZKLQ4rJBCnDjrw, 2026-09-15). It was
+ * living in Game.startPresenceHeartbeat, guarding only the process that
+ * ARMS the timer -- and `returnToHub` beats once directly at every
+ * homecoming, past that guard. So a hosted hub, a repro bench and the
+ * jest suite alike all dialed www.maka-cli.com on the way home with
+ * whatever token the BOX happened to be logged in as. In the suite that
+ * is the developer's own account: `loose-ends.test.ts` boots a fixture
+ * runner named Vex over the "Legacy Hub Fixture" seed, goes home, and
+ * overwrote the developer's real presence row -- so their web sheet read
+ * "You are on the street as Vex", a runner belonging to somebody else's
+ * account entirely. Two halves of one rule, in two places, is how that
+ * happened; both halves live here now.
+ */
+/**
+ * IS THIS PROCESS ON THE STREET AT ALL? The account half of the gate --
+ * the half that asks whether the credentials on this box belong to the
+ * runner in memory. A `false` here means no beat ever, from any caller,
+ * at any moment; nothing downstream can re-enable it.
  */
-export function presenceBeatAllowed(atHub, holdsLiveSeat) {
+export function presenceProcessOnTheStreet(f) {
+    return !f.anonymous && !f.bench && !f.hostedHub;
+}
+/** The WHOLE gate: the account half, then the position half. */
+export function presenceBeatAllowed(f) {
+    if (!presenceProcessOnTheStreet(f))
+        return false;
     // A solo run stays private, exactly as before. Only a LIVE SEAT keeps
     // the beat alive off-hub -- the narrowest change that fixes the cut,
     // and at that point other real players are sitting at the table, so
     // "the run is nobody's business" no longer describes the situation.
-    return atHub || holdsLiveSeat;
+    return f.atHub || f.holdsLiveSeat;
 }
 //# sourceMappingURL=presence-gate.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maka/maka-cli",
-  "version": "5.199.0",
+  "version": "5.200.0",
   "type": "module",
   "summary": "A command line tool for scaffolding Meteor 3.x applications using either React.",
   "description": "A command line tool for scaffolding Meteor 3.x applications using React.",