drafted 1.14.3 → 1.14.5

package/mcp/server.mjs

@@ -1524,10 +1524,13 @@ async function launchDesktopSignin() {
   if (!bin) return false;
   try {
     const { spawn } = await import('child_process');
-    // If the app is already running (macOS KeepAlive normally guarantees it), the single-instance
-    // handler opens the sign-in window and DRAFTED_OPEN_LOGIN is ignored. If it isn't running,
-    // the fresh primary instance honors DRAFTED_OPEN_LOGIN=1 and opens sign-in on boot.
-    const child = spawn(bin, [], {
+    // If the app isn't running, the fresh primary instance honors DRAFTED_OPEN_LOGIN=1 (env var)
+    // and opens sign-in on boot. If it's already running (the common case — macOS KeepAlive
+    // normally guarantees it), tauri-plugin-single-instance forwards this launch's ARGV to the
+    // running instance but never its env, so the env var alone would be silently dropped and the
+    // already-running instance would just refocus its window without opening sign-in — pass
+    // --open-login as an actual arg so that path honors the request too.
+    const child = spawn(bin, ['--open-login'], {
       detached: true,
       stdio: 'ignore',
       env: { ...process.env, DRAFTED_OPEN_LOGIN: '1' },
@@ -1538,11 +1541,14 @@ async function launchDesktopSignin() {
 }
 
 // Poll auth.json (written by the desktop app's cookie->auth.json bridge on in-app sign-in)
-// until a valid session id lands or the deadline passes.
-async function waitForBootstrapAuth(deadline) {
+// until a NEW session id lands or the deadline passes. `staleSid` is whatever was already in
+// auth.json before sign-in was triggered — an expired bootstrap session from a prior install
+// (e.g. past its 30-day server-side TTL) sits in that file until it's replaced, so returning
+// on ANY sid would hand back the same dead value instead of waiting for a real re-auth.
+async function waitForBootstrapAuth(deadline, staleSid) {
   while (Date.now() < deadline) {
     const sid = getBootstrapSessionId();
-    if (sid) return sid;
+    if (sid && sid !== staleSid) return sid;
     await new Promise(r => setTimeout(r, 1500));
   }
   return null;
@@ -1565,11 +1571,12 @@ if (!isRemote) tool('auth', 'Sign in to Drafted. On a local install the DESKTOP
           }
         } catch { /* stale session — continue to sign-in */ }
       }
+      const staleSid = getBootstrapSessionId();
       if (await launchDesktopSignin()) {
         if (action === 'get_link') {
           return ok('Opening the Drafted app to sign in — approve in the app window, then retry your request.');
         }
-        const sid = await waitForBootstrapAuth(Date.now() + 180000);
+        const sid = await waitForBootstrapAuth(Date.now() + 180000, staleSid);
         if (!sid) throw new Error('Timed out waiting for sign-in. Complete sign-in in the Drafted app window, then retry.');
         getState().sessionId = null;
         // cloneSession() can fail transiently right after the app plants the bootstrap

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafted",
-  "version": "1.14.3",
+  "version": "1.14.5",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [