drafted 1.19.25 → 1.19.27

package/mcp/server.mjs

@@ -633,6 +633,11 @@ registerAppResource(
 
 const AUTH_FILE = process.env.DRAFTED_AUTH_FILE || join(homedir(), '.drafted', 'auth.json');
 const PENDING_AUTH_FILE = process.env.DRAFTED_PENDING_AUTH_FILE || `${AUTH_FILE}.pending`;
+// The DESKTOP app's own browser session (desktop/src-tauri/src/main.rs writes it beside
+// auth.json). Never read for a credential here — only to answer "is the app signed in?",
+// which is a different question from "is this MCP signed in?" and the one that decides
+// whether an agent can reach the human at all.
+const DESKTOP_SESSION_FILE = join(dirname(AUTH_FILE), 'desktop.json');
 
 // Active-project persistence (stdio only): see mcp/active-project-store.mjs.
 // Persisted so a `system restart mode=mcp` / skill-edit pass that re-spawns the
@@ -2101,6 +2106,51 @@ function desktopAppBinary() {
   return null; // e.g. Linux — no desktop app → device-code fallback
 }
 
+/**
+ * The answer to "am I signed in?", which is a question about the MACHINE, not this
+ * process. Two things went wrong before this existed, and they are the same mistake:
+ *
+ *  - ~/.drafted/auth.json could be missing while the in-process session was fine. The
+ *    desktop's credential burn deletes it on purpose, so `login` answered
+ *    already_authenticated — truthfully, and uselessly — while every other reader on the
+ *    machine stayed signed out. Restore it from the live session.
+ *  - The DESKTOP app could be signed out, which is what actually decides whether an agent
+ *    asking for a human reaches anybody: its focus listener needs desktop.json. An agent
+ *    must never MINT that credential (origin='browser' is the class that may approve
+ *    actions), but opening the app's sign-in window is this tool's documented job — and it
+ *    usually completes with NO interaction, because the shared cookie store still holds a
+ *    valid login.
+ */
+async function alreadyAuthenticated(me, sessionId) {
+  const out = { status: 'already_authenticated', userId: me.userId, email: me.userEmail, org: me.currentOrg?.name };
+  if (!getBootstrapSessionId()) {
+    try {
+      persistAuthSession({ sessionId, userId: me.userId, orgId: me.currentOrg?.id });
+      out.restoredAuthFile = true;
+      out.note = 'This session was signed in but ~/.drafted/auth.json was missing, so other readers on this machine (the desktop app, the CLI) were not. Rewrote it from the live session.';
+    } catch { /* read-only home: report the truth rather than throwing */ }
+  }
+  const bin = desktopAppBinary();
+  if (!bin) return out;                       // no app here: saying anything about it is noise
+  if (!existsSync(DESKTOP_SESSION_FILE)) {
+    if (await launchDesktopSignin()) {
+      out.openedDesktopSignin = true;
+      // Wait for the result rather than reporting an optimistic one — answering before it
+      // lands is the same class of lie this whole helper exists to stop.
+      for (let i = 0; i < 20 && !existsSync(DESKTOP_SESSION_FILE); i++) {
+        await new Promise((r) => setTimeout(r, 500));
+      }
+    }
+  }
+  out.desktopSignedIn = existsSync(DESKTOP_SESSION_FILE);
+  if (out.openedDesktopSignin) {
+    out.desktopNote = out.desktopSignedIn
+      ? 'The desktop app was signed out; opened its sign-in window and it completed on its own from the existing browser session.'
+      : 'The desktop app is signed out and its sign-in window is open — it needs one approval there. Until then it holds no session, so an agent asking for attention cannot reach this machine.';
+  }
+  return out;
+}
+
 async function launchDesktopSignin() {
   const bin = desktopAppBinary();
   if (!bin) return false;
@@ -2181,7 +2231,7 @@ if (!isRemote) tool('auth', 'Sign in to Drafted.\n\n`action=get_link` ALWAYS ret
               await cloneSession();
               connectAgentWs();
             }
-            return ok({ status: 'already_authenticated', userId: me.userId, email: me.userEmail, org: me.currentOrg?.name });
+            return ok(await alreadyAuthenticated(me, existing));
           }
         } catch { /* stale session — continue to sign-in */ }
       }
@@ -2227,23 +2277,7 @@ if (!isRemote) tool('auth', 'Sign in to Drafted.\n\n`action=get_link` ALWAYS ret
             // The desktop's focus listener is one of those readers, so an agent asking
             // for a human reached nobody and the tool that exists to fix it reported
             // success.
-            let restoredAuthFile = false;
-            if (!getBootstrapSessionId()) {
-              try {
-                persistAuthSession({ sessionId: existing, userId: me.userId, orgId: me.currentOrg?.id });
-                restoredAuthFile = true;
-              } catch { /* read-only home: report the truth below rather than throwing */ }
-            }
-            return ok({
-              status: 'already_authenticated',
-              userId: me.userId,
-              email: me.userEmail,
-              org: me.currentOrg?.name,
-              ...(restoredAuthFile ? {
-                restoredAuthFile: true,
-                note: 'This session was signed in but ~/.drafted/auth.json was missing, so other readers on this machine (the desktop app, the CLI) were not. Rewrote it from the live session.',
-              } : {}),
-            });
+            return ok(await alreadyAuthenticated(me, existing));
           }
         } catch { /* session invalid, proceed with login */ }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafted",
-  "version": "1.19.25",
+  "version": "1.19.27",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [