drafted 1.14.3 → 1.14.4

package/mcp/server.mjs

@@ -1538,11 +1538,14 @@ async function launchDesktopSignin() {
 }
 
 // Poll auth.json (written by the desktop app's cookie->auth.json bridge on in-app sign-in)
-// until a valid session id lands or the deadline passes.
-async function waitForBootstrapAuth(deadline) {
+// until a NEW session id lands or the deadline passes. `staleSid` is whatever was already in
+// auth.json before sign-in was triggered — an expired bootstrap session from a prior install
+// (e.g. past its 30-day server-side TTL) sits in that file until it's replaced, so returning
+// on ANY sid would hand back the same dead value instead of waiting for a real re-auth.
+async function waitForBootstrapAuth(deadline, staleSid) {
   while (Date.now() < deadline) {
     const sid = getBootstrapSessionId();
-    if (sid) return sid;
+    if (sid && sid !== staleSid) return sid;
     await new Promise(r => setTimeout(r, 1500));
   }
   return null;
@@ -1565,11 +1568,12 @@ if (!isRemote) tool('auth', 'Sign in to Drafted. On a local install the DESKTOP
           }
         } catch { /* stale session — continue to sign-in */ }
       }
+      const staleSid = getBootstrapSessionId();
       if (await launchDesktopSignin()) {
         if (action === 'get_link') {
           return ok('Opening the Drafted app to sign in — approve in the app window, then retry your request.');
         }
-        const sid = await waitForBootstrapAuth(Date.now() + 180000);
+        const sid = await waitForBootstrapAuth(Date.now() + 180000, staleSid);
         if (!sid) throw new Error('Timed out waiting for sign-in. Complete sign-in in the Drafted app window, then retry.');
         getState().sessionId = null;
         // cloneSession() can fail transiently right after the app plants the bootstrap

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafted",
-  "version": "1.14.3",
+  "version": "1.14.4",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [