drafted 1.19.25 → 1.19.26

package/mcp/server.mjs

@@ -633,6 +633,11 @@ registerAppResource(
 
 const AUTH_FILE = process.env.DRAFTED_AUTH_FILE || join(homedir(), '.drafted', 'auth.json');
 const PENDING_AUTH_FILE = process.env.DRAFTED_PENDING_AUTH_FILE || `${AUTH_FILE}.pending`;
+// The DESKTOP app's own browser session (desktop/src-tauri/src/main.rs writes it beside
+// auth.json). Never read for a credential here — only to answer "is the app signed in?",
+// which is a different question from "is this MCP signed in?" and the one that decides
+// whether an agent can reach the human at all.
+const DESKTOP_SESSION_FILE = join(dirname(AUTH_FILE), 'desktop.json');
 
 // Active-project persistence (stdio only): see mcp/active-project-store.mjs.
 // Persisted so a `system restart mode=mcp` / skill-edit pass that re-spawns the
@@ -2234,6 +2239,27 @@ if (!isRemote) tool('auth', 'Sign in to Drafted.\n\n`action=get_link` ALWAYS ret
                 restoredAuthFile = true;
               } catch { /* read-only home: report the truth below rather than throwing */ }
             }
+            // The DESKTOP's own browser credential is a separate file, and an agent
+            // cannot mint one — it is the origin='browser' class that may approve
+            // actions, which is exactly what the two-credential split protects. But
+            // "cannot mint it" is not "cannot ask for it": opening the app's sign-in
+            // window is this tool's documented job, and the window usually completes
+            // with no interaction at all because the shared cookie store still holds a
+            // valid login. Short-circuiting on the agent session skipped that entirely,
+            // so `login` reported success while the app stayed signed out and every
+            // agent that pinged the human reached nobody.
+            let openedDesktopSignin = false;
+            if (desktopAppBinary() && !existsSync(DESKTOP_SESSION_FILE)) {
+              openedDesktopSignin = await launchDesktopSignin();
+              if (openedDesktopSignin) {
+                // Give the app a moment to re-capture the cookie so the caller can act
+                // on a true answer rather than an optimistic one.
+                for (let i = 0; i < 20 && !existsSync(DESKTOP_SESSION_FILE); i++) {
+                  await new Promise((r) => setTimeout(r, 500));
+                }
+              }
+            }
+            const desktopSignedIn = !desktopAppBinary() ? null : existsSync(DESKTOP_SESSION_FILE);
             return ok({
               status: 'already_authenticated',
               userId: me.userId,
@@ -2243,6 +2269,13 @@ if (!isRemote) tool('auth', 'Sign in to Drafted.\n\n`action=get_link` ALWAYS ret
                 restoredAuthFile: true,
                 note: 'This session was signed in but ~/.drafted/auth.json was missing, so other readers on this machine (the desktop app, the CLI) were not. Rewrote it from the live session.',
               } : {}),
+              ...(desktopSignedIn === null ? {} : { desktopSignedIn }),
+              ...(openedDesktopSignin ? {
+                openedDesktopSignin: true,
+                desktopNote: desktopSignedIn
+                  ? 'The desktop app was signed out; opened its sign-in window and it completed on its own from the existing browser session.'
+                  : 'The desktop app is signed out and its sign-in window is open — it needs one approval there. Until then it holds no session, so an agent asking for attention cannot reach this machine.',
+              } : {}),
             });
           }
         } catch { /* session invalid, proceed with login */ }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafted",
-  "version": "1.19.25",
+  "version": "1.19.26",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [