@mindexec/cli 0.2.210 → 0.2.211

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindexec/cli",
-  "version": "0.2.210",
+  "version": "0.2.211",
   "description": "MindExec local runtime and bridge CLI",
   "main": "server.js",
   "type": "module",

package/scripts/auth-session-smoke.mjs

@@ -138,11 +138,25 @@ try {
     const sessionPayload = JSON.stringify({
         access_token: 'access-token-a',
         refresh_token: 'refresh-token-a',
+        expires_at: Math.floor(Date.now() / 1000) + 600,
         user: {
             id: 'user-a',
             email: 'auth-smoke@example.com'
         }
     });
+    let expectedStablePayload = sessionPayload;
+
+    function makeTimedSessionPayload(accessToken, refreshToken, expiresInSeconds) {
+        return JSON.stringify({
+            access_token: accessToken,
+            refresh_token: refreshToken,
+            expires_at: Math.floor(Date.now() / 1000) + expiresInSeconds,
+            user: {
+                id: 'user-a',
+                email: 'auth-smoke@example.com'
+            }
+        });
+    }
 
     await withBridge({ workspacePath: workspaceA, authDataRoot }, async (baseUrl) => {
         const unauthorized = await fetchJson(`${baseUrl}/api/auth/session`);
@@ -170,12 +184,41 @@ try {
         assert.equal(loaded.status, 200);
         assert.equal(loaded.payload?.content, sessionPayload);
         assert.equal(loaded.payload?.source, 'stable');
+
+        const newerPayload = makeTimedSessionPayload('access-token-newer', 'refresh-token-newer', 3600);
+        const newerSaved = await fetchJson(`${baseUrl}/api/auth/session`, {
+            method: 'POST',
+            token: BRIDGE_TOKEN,
+            body: JSON.stringify({ content: newerPayload })
+        });
+        assert.equal(newerSaved.status, 200);
+
+        const staleBrowserPayload = makeTimedSessionPayload('access-token-stale-browser', 'refresh-token-stale-browser', 120);
+        const staleSaved = await fetchJson(`${baseUrl}/api/auth/session`, {
+            method: 'POST',
+            token: BRIDGE_TOKEN,
+            body: JSON.stringify({ content: staleBrowserPayload })
+        });
+        assert.equal(staleSaved.status, 200);
+
+        const afterStale = await fetchJson(`${baseUrl}/api/auth/session`, { token: BRIDGE_TOKEN });
+        assert.equal(afterStale.status, 200);
+        assert.equal(JSON.parse(afterStale.payload?.content || '{}').access_token, 'access-token-newer');
+
+        const newestPayload = makeTimedSessionPayload('access-token-newest', 'refresh-token-newest', 7200);
+        const newestSaved = await fetchJson(`${baseUrl}/api/auth/session`, {
+            method: 'POST',
+            token: BRIDGE_TOKEN,
+            body: JSON.stringify({ content: newestPayload })
+        });
+        assert.equal(newestSaved.status, 200);
+        expectedStablePayload = newestPayload;
     });
 
     await withBridge({ workspacePath: workspaceB, authDataRoot }, async (baseUrl) => {
         const loaded = await fetchJson(`${baseUrl}/api/auth/session`, { token: BRIDGE_TOKEN });
         assert.equal(loaded.status, 200);
-        assert.equal(loaded.payload?.content, sessionPayload);
+        assert.equal(loaded.payload?.content, expectedStablePayload);
         assert.equal(loaded.payload?.source, 'stable');
 
         const deleted = await fetchJson(`${baseUrl}/api/auth/session`, {

package/server.js

@@ -669,10 +669,49 @@ async function readStableAuthSessionPayload() {
 async function writeStableAuthSessionPayload(content) {
     const payload = validateAuthSessionPayload(content);
     const stablePath = getStableSupabaseSessionPath();
+    const existingPayload = await tryReadTextFile(stablePath);
+    if (shouldKeepExistingAuthSessionPayload(existingPayload, payload)) {
+        return stablePath;
+    }
+
     await writePrivateTextFile(stablePath, payload);
     return stablePath;
 }
 
+function shouldKeepExistingAuthSessionPayload(existingContent, incomingContent) {
+    if (!existingContent || !String(existingContent).trim()) {
+        return false;
+    }
+
+    const existing = parseSupabaseSessionForRegistry(existingContent);
+    const incoming = parseSupabaseSessionForRegistry(incomingContent);
+    if (!existing || !incoming) {
+        return false;
+    }
+
+    if (!existing.userId || !incoming.userId || existing.userId !== incoming.userId) {
+        return false;
+    }
+
+    if (!Number.isFinite(existing.expiresAtMs) || !Number.isFinite(incoming.expiresAtMs)) {
+        return false;
+    }
+
+    const now = Date.now();
+    const existingRemainingMs = existing.expiresAtMs - now;
+    const incomingRemainingMs = incoming.expiresAtMs - now;
+    const staleSkewMs = 30_000;
+    if (existingRemainingMs <= staleSkewMs || incoming.expiresAtMs + staleSkewMs >= existing.expiresAtMs) {
+        return false;
+    }
+
+    logEvent(
+        'remote',
+        `auth session write ignored stale payload ${formatKeyValue('existingMs', Math.max(0, existingRemainingMs))} ${formatKeyValue('incomingMs', Math.max(0, incomingRemainingMs))}`,
+        'remote');
+    return true;
+}
+
 async function deleteStableAuthSessionPayload() {
     const paths = [
         getStableSupabaseSessionPath(),

package/wwwroot/_framework/blazor.boot.json

@@ -1,7 +1,7 @@
 {
   "mainAssemblyName": "MindExecution.Web",
   "resources": {
-    "hash": "sha256-Ny3t+3+wMEcLBIrH8PviSLxWnIKH3h8bXWdrXi8ESDY=",
+    "hash": "sha256-iiSeCvB5NpvqIW1+MQgzzc+UStFn80YeJUyFtdiuER8=",
     "fingerprinting": {
       "Google.Protobuf.9h59ukbel7.dll": "Google.Protobuf.dll",
       "Markdig.d1j7v41cl1.dll": "Markdig.dll",
@@ -132,7 +132,7 @@
       "MindExecution.Plugins.PlanMaster.kibqg6rvqh.dll": "MindExecution.Plugins.PlanMaster.dll",
       "MindExecution.Plugins.YouTube.089r64n2hv.dll": "MindExecution.Plugins.YouTube.dll",
       "MindExecution.Shared.p86iw1fhns.dll": "MindExecution.Shared.dll",
-      "MindExecution.Web.aj117i28hy.dll": "MindExecution.Web.dll",
+      "MindExecution.Web.7axuoygrwi.dll": "MindExecution.Web.dll",
       "dotnet.js": "dotnet.js",
       "dotnet.native.qc8g39g30v.js": "dotnet.native.js",
       "dotnet.native.boem75ye5i.wasm": "dotnet.native.wasm",
@@ -284,7 +284,7 @@
       "MindExecution.Plugins.Concept.u9kzsgf64o.dll": "sha256-Yp38m6zHe8EBxtm480N4LfcHRpzFZRhYpr1RsCgnlK8=",
       "MindExecution.Plugins.PlanMaster.kibqg6rvqh.dll": "sha256-NOtEHR8Y0rO8BguFvD1soa8jfB4YVQFydten0SzqBEg=",
       "MindExecution.Shared.p86iw1fhns.dll": "sha256-GeQGsY17FMYu6beNS1RDR7yJ/nNgfiix6rjORzhXnCY=",
-      "MindExecution.Web.aj117i28hy.dll": "sha256-+jKjBygtNF6dsjwsyJ+O2NId2p7HeQk4rYksxd+SqPA="
+      "MindExecution.Web.7axuoygrwi.dll": "sha256-/6NQ8z9E7ixNwgYD71eh6M6YCGzctKodTWcZNJcNF8E="
     },
     "lazyAssembly": {
       "MindExecution.Plugins.Admin.29mytzdaun.dll": "sha256-2mHPbTPcHCi1xPuk3dNMVWxn42xZFUZ3QFhm3xIV/6E=",

package/wwwroot/service-worker-assets.js

@@ -1,5 +1,5 @@
 self.assetsManifest = {
-    "version":  "3ooTJksk",
+    "version":  "YLV1KsFI",
     "assets":  [
                    {
                        "hash":  "sha256-+CSYMcqLNTsq3VnH11jgYyOCCdxvHzL74CBmo4sCmMU=",
@@ -446,8 +446,8 @@
                        "url":  "_framework/MindExecution.Shared.p86iw1fhns.dll"
                    },
                    {
-                       "hash":  "sha256-+jKjBygtNF6dsjwsyJ+O2NId2p7HeQk4rYksxd+SqPA=",
-                       "url":  "_framework/MindExecution.Web.aj117i28hy.dll"
+                       "hash":  "sha256-/6NQ8z9E7ixNwgYD71eh6M6YCGzctKodTWcZNJcNF8E=",
+                       "url":  "_framework/MindExecution.Web.7axuoygrwi.dll"
                    },
                    {
                        "hash":  "sha256-IsZJ91/OW+fHzNqIgEc7Y072ns8z9dGritiSyvR9Wgc=",
@@ -770,7 +770,7 @@
                        "url":  "_framework/Websocket.Client.vapounvmnl.dll"
                    },
                    {
-                       "hash":  "sha256-txW3qdrqdJhTHyMMLK0IDsdhphqslC5BjXEhWNo5jpM=",
+                       "hash":  "sha256-xLiOU/vuEmRFIqaJXh1WMyuEaWcsagGwx5Uq71HsjkY=",
                        "url":  "_framework/blazor.boot.json"
                    },
                    {

package/wwwroot/service-worker.js

@@ -1,4 +1,4 @@
-/* Manifest version: 3ooTJksk */
+/* Manifest version: YLV1KsFI */
 // Hosted deployments should prefer the network over stale offline caches.
 // This service worker immediately clears old Blazor offline caches and unregisters itself.