@melaya/runner 1.1.70 → 1.1.72

package/dist/connection.js

@@ -48,7 +48,7 @@ import { VAULT_HOST_CAPABILITY, VaultHostProcess, VaultRegistry, VaultService, a
 // Local REST API); the REST key stays in ~/.melaya-runner/vaults.
 import { ObsidianAppBridge } from "./obsidianApp.js";
 // Desktop app host channel: state changes for the app's tray and web UI (no-op under npx).
-import { hostStatus, isHosted, hostProgress, sendToHost } from "./hostChannel.js";
+import { hostStatus, isHosted, hostProgress, sendToHost, hostAppVersion } from "./hostChannel.js";
 // Desktop app: files this runner wrote are offered to computer control as handles (no-op under npx).
 import { reportHostFile, reportOutputsSince } from "./hostFiles.js";
 // Computer control: computer:command / computer:stop relayed to the desktop app
@@ -614,6 +614,11 @@ export async function connect(opts) {
                 deviceName: hostname(),
                 platform: process.platform,
             },
+            // Hosted by the Melaya desktop app: say so, with the app's version, so
+            // the server keeps that computer's app version current on every start
+            // (the token row is minted once) and knows this runner updates with the
+            // app, never with a restart command.
+            ...(isHosted() ? { host: { kind: "desktop", ...(hostAppVersion() ? { appVersion: hostAppVersion() } : {}) } } : {}),
         });
         // Index statuses produced while disconnected (or before this socket).
         for (const ev of vaultService.latestStatuses())

package/dist/detect.js

@@ -111,6 +111,16 @@ async function detectClaudeCode(force = false) {
             const names = await fetchClaudeFamilies(oauth.accessToken, force);
             return names.map((name) => ({ provider: "claude_code", name }));
         }
+        // The short-lived access token expired but the sign-in is still valid: the
+        // CLI only renews it when `claude` runs, and the runtime renews it through
+        // the CLI on first use (model.py _refresh_claude_oauth_via_cli). Report the
+        // user as signed in (known aliases; no API call with an expired token)
+        // instead of "not signed in". Never consume the refresh token here.
+        const refreshExpiresAt = Number(oauth.refreshTokenExpiresAt ?? 0);
+        if (oauth.accessToken && oauth.refreshToken && (!refreshExpiresAt || Date.now() < refreshExpiresAt)) {
+            const cached = networkCacheGet(`claude:${tokenKey(oauth.accessToken)}`, false);
+            return (cached ?? CLAUDE_ALIASES_FALLBACK).map((name) => ({ provider: "claude_code", name }));
+        }
     }
     catch { /* malformed creds → treat as logged out */ }
     return []; // not logged in / expired → don't advertise models
@@ -209,8 +219,10 @@ async function detectGithubCopilotWith(gh) {
             },
             signal: AbortSignal.timeout(6000),
         });
+        // No Copilot seat / revoked token → don't advertise (cached). Anything else
+        // (429, 5xx) is transient: null so it is not cached as "not signed in".
         if (!ex.ok)
-            return []; // no Copilot seat / revoked → don't advertise
+            return ex.status === 401 || ex.status === 403 || ex.status === 404 ? [] : null;
         const exd = (await ex.json());
         if (!exd.token)
             return [];

package/dist/hostChannel.d.ts

@@ -83,9 +83,12 @@ export type RunnerToHostMessage = {
 /** Mirror of the contract's HostToRunnerMessage (computer messages kept loose). */
 export type HostToRunnerMessage = {
     type: "stop";
-} | {
+}
+/** `appVersion`: the desktop app's own version (additive; reported in runner:hello's `host` block). */
+ | {
     type: "start";
     token: string;
+    appVersion?: string;
 }
 /** Additive: rescan model providers now and publish the list through runner:models. */
  | {
@@ -114,6 +117,9 @@ export declare function redactReason(s: string): string;
 export declare function hostStatus(state: HostedRunnerState, lastError?: string, code?: HostedStatusCode): void;
 /** Background setup progress for the desktop app. No-op outside the app. */
 export declare function hostProgress(state: "running" | "done" | "failed", step?: string, waiting?: boolean): void;
+/** The desktop app's own version, as its start message said; null outside the
+ *  app and with an app older than the field. */
+export declare function hostAppVersion(): string | null;
 /**
  * Wait for the token from the desktop app. Resolves with the token, or rejects
  * when nothing valid arrives within `timeoutMs`.

package/dist/hostChannel.js

@@ -88,6 +88,12 @@ export function hostProgress(state, step, waiting) {
         ...(waiting ? { waiting: true } : {}),
     });
 }
+let _hostAppVersion = null;
+/** The desktop app's own version, as its start message said; null outside the
+ *  app and with an app older than the field. */
+export function hostAppVersion() {
+    return _hostAppVersion;
+}
 /**
  * Wait for the token from the desktop app. Resolves with the token, or rejects
  * when nothing valid arrives within `timeoutMs`.
@@ -102,6 +108,8 @@ export function waitForHostToken(timeoutMs = 30_000) {
             const token = msg.token;
             if (typeof token !== "string" || !token.startsWith("mel_run_"))
                 return;
+            const appVersion = msg.appVersion;
+            _hostAppVersion = typeof appVersion === "string" && /^[0-9A-Za-z.+-]{1,32}$/.test(appVersion) ? appVersion : null;
             clearTimeout(timer);
             off();
             resolve(token);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@melaya/runner",
-  "version": "1.1.70",
+  "version": "1.1.72",
   "description": "Run Melaya AI pipelines locally with your own LM Studio or Ollama models",
   "license": "Apache-2.0",
   "author": "Melaya Labs LLC",