@mu-cabin/muc-cli 0.5.4 → 0.5.5

package/REFERENCE.md

@@ -353,7 +353,9 @@ as the personal `~/.muc` account and is mutually exclusive with
   separate iPad slot, so desktop and phone coexist; a real iPad may conflict.
 - **REST `tokenPwd`.** A fresh `muc login` rotates the account's refresh
   token; other devices on that account get logged out when their token
-  next refreshes.
+  next refreshes. Remembered-password daemon recovery is different: it uses
+  `createTokenPwd=false`, refreshing only accessToken and preserving the
+  phone's auto-login credential.
 
 The fix is to give the daemon its **own account**, stored under
 `~/.muc/assistant/` (next to its pid / socket / logs) and completely

package/dist/muc.mjs

@@ -22296,8 +22296,8 @@ async function doRefreshViaRememberedPwd() {
     deviceName: cred.deviceName || getDeviceName(),
     passwordType: 0,
     // plaintext password (DES-encoded), not tokenPwd
-    createTokenPwd: true,
-    // mint a fresh refresh token while we're here
+    createTokenPwd: false,
+    // accessToken only; do not rotate phone auto-login
     encrypt: true
   };
   form.sign = signRest(form, cfg.signSecretRest);
@@ -24052,13 +24052,15 @@ async function tryRefreshViaEmpGet2(cred, cfg) {
   }
 }
 async function refreshAccessTokenViaTokenPwd(cred, cfg) {
+  const platform3 = DEFAULT_REST_PLATFORM;
+  const appVersion = platform3 === PLATFORM_IOS ? APP_VERSION_IOS : APP_VERSION;
   const form = {
     account: cred.uid,
     password: encryptPassword(cred.tokenPwd, pwdDesKeyOf(cfg)),
     appName: APP_NAME,
     appKey: cfg.appKey,
-    appVersion: APP_VERSION,
-    platform: PLATFORM_MAC,
+    appVersion,
+    platform: platform3,
     osVersion: release3(),
     deviceId: cred.deviceId,
     deviceName: cred.deviceName,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mu-cabin/muc-cli",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Terminal client for MUC IM (com.meicloud.im.dh).",
   "license": "MIT",
   "type": "module",