@melaya/runner 1.0.91 → 1.0.92

package/dist/connection.js

@@ -874,6 +874,14 @@ export async function connect(opts) {
             mkdirSync(workDir, { recursive: true });
             const stagedHost = join(workDir, "assistantHost.py");
             copyFileSync(hostScript, stagedHost);
+            // If Luma is enabled for this chat, make sure the browser bridge is up so
+            // luma_register_event can route /event/register through Playwright and clear
+            // Cloudflare's write-bot rule. Without it the tool falls back to aiohttp,
+            // which 403s ("cloudflare_mitigation" / "velocity_throttled") on every RSVP.
+            // Idempotent + best-effort; only paid when luma is actually selected.
+            if (Array.isArray(payload.connectors) && payload.connectors.includes("luma")) {
+                await _ensureLumaBridge();
+            }
             const sharedDir = getSharedDir();
             const certBundle = (await import("./pythonEnv.js")).getCertBundlePath();
             const sslEnv = certBundle ? { SSL_CERT_FILE: certBundle, REQUESTS_CA_BUNDLE: certBundle } : {};
@@ -899,6 +907,13 @@ export async function connect(opts) {
                 MEL_ASSISTANT_CONNECTORS: Array.isArray(payload.connectors) ? payload.connectors.join(",") : "",
                 // Gate write connector-tools behind the in-chat approval card (fail-safe).
                 MEL_ASSISTANT_CONNECTOR_HITL: Array.isArray(payload.connectors) && payload.connectors.length ? "1" : "",
+                // Luma browser bridge (same injection as pipeline runs, line ~431): lets
+                // shared/tools/luma.py route /event/register through Playwright and bypass
+                // Cloudflare's write rule. Reads keep using aiohttp. Empty when no signed-in
+                // Luma session exists (bridge not started) — reads still work, writes 403.
+                ...(lumaBridge
+                    ? { MEL_LUMA_BROWSER_URL: lumaBridge.url, MEL_LUMA_BROWSER_TOKEN: lumaBridge.token }
+                    : {}),
                 // Per-user creds (incl. MELAYA_API_KEY + the selected connectors' env).
                 ...(payload.credentials || {}),
             };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@melaya/runner",
-  "version": "1.0.91",
+  "version": "1.0.92",
   "description": "Run Melaya AI pipelines locally with your own LM Studio or Ollama models",
   "license": "UNLICENSED",
   "private": false,