@melaya/runner 1.0.100 → 1.0.101

package/dist/connection.js

@@ -889,8 +889,12 @@ export async function connect(opts) {
         // watermark so the server doesn't needlessly re-offer a rehydrate (a bare
         // ready would read as watermark 0). No second spawn.
         const live = activeAssistants.get(sid);
+        // Report the live host's ACTUAL boot generation (not just its watermark) so a
+        // server that restarted (its in-memory session map wiped) can DETECT a host
+        // that booted under an older generation and reboot it instead of serving the
+        // next turn from stale memory/config. A bare ready hid this.
         if (live) {
-            emitEv({ kind: "ready", memoryWatermark: live.memoryWatermark || 0 });
+            emitEv({ kind: "ready", memoryWatermark: live.memoryWatermark || 0, generation: live.generation });
             return;
         }
         // A boot is already in flight for this sid (concurrent start / server restart
@@ -1080,6 +1084,15 @@ export async function connect(opts) {
             socket.emit("runner:assistant_event", { sessionId: payload.sessionId, turnId: payload.turnId, kind: "error", message: "session_not_found" });
             return;
         }
+        // Generation gate (defense-in-depth): refuse to serve a turn stamped with a
+        // generation that doesn't match this host's boot generation — the server has
+        // moved on (restart / takeover) and this host is stale. session_not_found
+        // triggers the server's clean re-boot path. Backward-compatible: a turn with
+        // no generation (older server) is served as before.
+        if (payload.generation != null && Number(payload.generation) !== s.generation) {
+            socket.emit("runner:assistant_event", { sessionId: payload.sessionId, turnId: payload.turnId, kind: "error", message: "session_not_found" });
+            return;
+        }
         s.lastActivity = Date.now();
         // Per-turn hitl_mode: the host applies it to os.environ["MEL_ASSISTANT_HITL_MODE"]
         // (mirrored to MEL_HITL_MODE) BEFORE running the turn, so a mid-session flip

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@melaya/runner",
-  "version": "1.0.100",
+  "version": "1.0.101",
   "description": "Run Melaya AI pipelines locally with your own LM Studio or Ollama models",
   "license": "UNLICENSED",
   "private": false,