@melaya/runner 1.0.100 → 1.0.102

package/dist/connection.js

@@ -889,8 +889,12 @@ export async function connect(opts) {
         // watermark so the server doesn't needlessly re-offer a rehydrate (a bare
         // ready would read as watermark 0). No second spawn.
         const live = activeAssistants.get(sid);
+        // Report the live host's ACTUAL boot generation (not just its watermark) so a
+        // server that restarted (its in-memory session map wiped) can DETECT a host
+        // that booted under an older generation and reboot it instead of serving the
+        // next turn from stale memory/config. A bare ready hid this.
         if (live) {
-            emitEv({ kind: "ready", memoryWatermark: live.memoryWatermark || 0 });
+            emitEv({ kind: "ready", memoryWatermark: live.memoryWatermark || 0, generation: live.generation });
             return;
         }
         // A boot is already in flight for this sid (concurrent start / server restart
@@ -1030,7 +1034,12 @@ export async function connect(opts) {
                 }
             });
             proc.on("exit", (code) => {
-                activeAssistants.delete(sid);
+                // Only evict if WE are still the registered host. A config-drift reboot
+                // (e.g. the user added a connector) kills this host and spawns a REPLACEMENT
+                // under the same sid; if this late exit deleted the map entry blindly it
+                // would orphan the newcomer and make the next turn "session_not_found".
+                if (activeAssistants.get(sid) === session)
+                    activeAssistants.delete(sid);
                 const detail = code !== 0 && stderrTail.length ? stderrTail.slice(-12).join("\n") : "";
                 socket.emit("runner:assistant_event", { sessionId: sid, turnId: "", kind: "session_closed", code, detail });
                 console.log(chalk.gray(`  ■ Assistant session ${sid.slice(0, 10)}… closed (exit ${code})`));
@@ -1080,6 +1089,15 @@ export async function connect(opts) {
             socket.emit("runner:assistant_event", { sessionId: payload.sessionId, turnId: payload.turnId, kind: "error", message: "session_not_found" });
             return;
         }
+        // Generation gate (defense-in-depth): refuse to serve a turn stamped with a
+        // generation that doesn't match this host's boot generation — the server has
+        // moved on (restart / takeover) and this host is stale. session_not_found
+        // triggers the server's clean re-boot path. Backward-compatible: a turn with
+        // no generation (older server) is served as before.
+        if (payload.generation != null && Number(payload.generation) !== s.generation) {
+            socket.emit("runner:assistant_event", { sessionId: payload.sessionId, turnId: payload.turnId, kind: "error", message: "session_not_found" });
+            return;
+        }
         s.lastActivity = Date.now();
         // Per-turn hitl_mode: the host applies it to os.environ["MEL_ASSISTANT_HITL_MODE"]
         // (mirrored to MEL_HITL_MODE) BEFORE running the turn, so a mid-session flip

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@melaya/runner",
-  "version": "1.0.100",
+  "version": "1.0.102",
   "description": "Run Melaya AI pipelines locally with your own LM Studio or Ollama models",
   "license": "UNLICENSED",
   "private": false,