channel-worker 2.5.70 → 2.5.71

package/lib/daemon.js

@@ -14,6 +14,12 @@ class Daemon {
     // Nstbrowser agent of THIS Windows session. On a multi-user box the second
     // session's agent binds 8849+ because 8848 is taken machine-wide.
     if (config.nst_api_address) process.env.NST_API_ADDRESS = config.nst_api_address;
+    // Tell every NstManager we are pinned to one Windows user's agent, so an
+    // unresolved address REFUSES commands instead of defaulting to 8848
+    // (= the other session's agent on a multi-user box).
+    if (config.nst_agent_user && !config.nst_api_address) {
+      process.env.NST_AGENT_PINNED_USER = config.nst_agent_user;
+    }
     this.api = new ApiClient(config.api_url, config.worker_token);
     this.heartbeat = new Heartbeat(this.api, config.worker_id, 30000, config);
     this.poller = new JobPoller(this.api, config);
@@ -46,9 +52,16 @@ class Daemon {
       return;
     }
     if (!found) {
-      if (!quiet) {
+      // The pinned user's agent is GONE. Drop a previously resolved address —
+      // after a relog the same port can belong to the other session's agent,
+      // and driving it opens blank profiles. Fail-closed until it re-appears.
+      if (process.env.NST_API_ADDRESS) {
+        console.warn(`[daemon] NST agent for "${user}" disappeared `
+          + `(was ${process.env.NST_API_ADDRESS}) — refusing NST commands until it is back.`);
+        delete process.env.NST_API_ADDRESS;
+      } else if (!quiet) {
         console.warn(`[daemon] No Nstbrowser agent for Windows user "${user}" — `
-          + 'NST commands will fail until that user is logged in.');
+          + 'NST commands are refused (fail-closed) until that user is logged in.');
       }
       return;
     }
@@ -73,7 +86,10 @@ class Daemon {
 ╚══════════════════════════════════════╝
 `);
     console.log(`[daemon] cache server port: ${this.config.cache_port || 8849}`);
-    console.log(`[daemon] NST agent: ${process.env.NST_API_ADDRESS || 'http://localhost:8848/api/v2 (default)'}`);
+    console.log(`[daemon] NST agent: ${process.env.NST_API_ADDRESS
+      || (this.config.nst_agent_user
+        ? `UNRESOLVED — refusing NST commands until agent of "${this.config.nst_agent_user}" is found`
+        : 'http://localhost:8848/api/v2 (default)')}`);
 
     // Start local cache server (extension shares this across all profiles)
     try {

package/lib/nst-manager.js

@@ -24,10 +24,31 @@ function nstLaunchError(response, { profileId = '', runningCount = 0 } = {}) {
 class NstManager {
   constructor(apiKey, options = {}) {
     this.apiKey = apiKey;
-    // Multi-user Windows: each logged-in session runs its OWN Nstbrowser agent,
-    // and the second one lands on 8849+ because 8848 is already taken machine-wide.
-    // NST_API_ADDRESS lets a daemon target its own session's agent.
-    this.baseUrl = options.apiAddress || process.env.NST_API_ADDRESS || 'http://localhost:8848/api/v2';
+    this._apiAddress = options.apiAddress || null;
+  }
+
+  // Multi-user Windows: each logged-in session runs its OWN Nstbrowser agent,
+  // and the second one lands on 8849+ because 8848 is already taken machine-wide.
+  // Resolved at CALL time, not construct time: the daemon's agent watcher
+  // rewrites NST_API_ADDRESS whenever ports move, and an instance built before
+  // the first resolution must not keep a stale target forever.
+  //
+  // Fail-closed: when the daemon is pinned to a Windows user
+  // (NST_AGENT_PINNED_USER) and that user's agent hasn't been located, REFUSE
+  // instead of falling back to 8848 — on a two-session box 8848 is the OTHER
+  // user's agent, and opening a profile there starts a blank Chrome: FB shows
+  // a login form and fb-guard wrongly flags the account as logged out
+  // (35 channels hit 2026-08-31…09-02).
+  get baseUrl() {
+    if (this._apiAddress) return this._apiAddress;
+    if (process.env.NST_API_ADDRESS) return process.env.NST_API_ADDRESS;
+    const pinned = process.env.NST_AGENT_PINNED_USER;
+    if (pinned) {
+      throw new Error(`NST_AGENT_UNRESOLVED: chưa thấy Nstbrowser agent của Windows user "${pinned}" `
+        + '— không fallback :8848 (agent của session khác → profile trắng → báo logout oan). '
+        + 'Lệnh CHƯA chạm nền tảng; sẽ tự chạy lại khi agent của user đó lên.');
+    }
+    return 'http://localhost:8848/api/v2';
   }
 
   async api(path, options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "channel-worker",
-  "version": "2.5.70",
+  "version": "2.5.71",
   "description": "Channel Manager worker daemon — runs on remote machines to execute video pipeline jobs",
   "main": "lib/daemon.js",
   "bin": {