drafted 1.22.4 → 1.22.6

package/cli/drafted.mjs

@@ -483,7 +483,7 @@ program
         server: serverUrl,
         updatedAt: new Date().toISOString(),
       });
-      jsonOut(true, 'login', { sessionId: data.sessionId, userId: data.userId || null });
+      jsonOut(true, 'login', { userId: data.userId || null });
       console.log('✅ This computer is linked to your Drafted account.');
       return;
     }
@@ -498,7 +498,7 @@ program
         });
         if (meRes.ok) {
           const me = await meRes.json();
-          jsonOut(true, 'login', { sessionId: existing.sessionId, userId: me.userId || existing.userId || null });
+          jsonOut(true, 'login', { userId: me.userId || existing.userId || null });
           console.log('✅ Already logged in.');
           console.log(`   User: ${me.userEmail || me.userId || 'unknown'}`);
           console.log('   Run `drafted logout` to sign out.');
@@ -578,7 +578,7 @@ program
             server: serverUrl,
             updatedAt: new Date().toISOString(),
           });
-          jsonOut(true, 'login', { sessionId: data.sessionId, userId: data.userId || null });
+          jsonOut(true, 'login', { userId: data.userId || null });
           console.log('');
           console.log('✅ Logged in successfully!');
           if (data.userId) {

package/mcp/server.mjs

@@ -2499,7 +2499,8 @@ if (!isRemote) tool('auth', 'Sign in to Drafted.\n\n`action=get_link` ALWAYS ret
           await cloneSession();
           connectAgentWs();
 
-          return ok({ status: 'logged_in', sessionId: data.sessionId, userId: data.userId });
+          // Never echo data.sessionId: it is the credential, and tool results land in transcripts.
+          return ok({ status: 'logged_in', userId: data.userId });
         }
 
         if (data.status === 'expired') throw new Error('Device code expired. Try again.');
@@ -2517,7 +2518,9 @@ if (!isRemote) tool('auth', 'Sign in to Drafted.\n\n`action=get_link` ALWAYS ret
 // Shared by `whoami` AND surfaced in `get_org`'s response so an agent learns its name
 // from the tool it already calls — it must not have to "think to" ask.
 async function sessionSurfaceBlock() {
-  const sessionId = agentSurface?.sessionId || getState().sessionId || null;
+  // The surface's row id (identity). Never fall back to the state session value: that is the
+  // CREDENTIAL, and this block is returned to the agent's transcript.
+  const sessionId = agentSurface?.sessionId || null;
   if (agentSurface) {
     return {
       sessionId,
@@ -2793,7 +2796,7 @@ tool('session', 'Manage THIS agent session. `action="name"` sets/renames it —
       agentSurface.nameRequired = false;
       agentSurface.capital = ((result?.name || String(name).trim())[0] || '').toUpperCase();
     }
-    return ok({ sessionId: getState().sessionId, name: result?.name || String(name).trim(), named: true });
+    return ok({ sessionId: agentSurface?.sessionId || null, name: result?.name || String(name).trim(), named: true });
   } catch (error) { return err(error); }
 });
 

package/package.json

@@ -1,8 +1,12 @@
 {
   "name": "drafted",
-  "version": "1.22.4",
+  "version": "1.22.6",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
+  "bin": {
+    "drafted": "./cli/drafted.mjs",
+    "drafted-mcp": "./mcp/server.mjs"
+  },
   "files": [
     "cli/",
     "mcp/",
@@ -13,100 +17,28 @@
     "plugin/commands/",
     "install-mcp.sh"
   ],
-  "bin": {
-    "drafted": "./cli/drafted.mjs",
-    "drafted-mcp": "./mcp/server.mjs"
-  },
-  "scripts": {
-    "dev": "./dev.sh",
-    "dev:server": "tsx watch --import ./server/instrument.mjs server/server.mjs",
-    "dev:local": "node server/server-local.mjs",
-    "install-global": "npm install -g .",
-    "db:migrate": "psql $DATABASE_URL -f drizzle/migrate.sql",
-    "db:push": "drizzle-kit push",
-    "db:studio": "drizzle-kit studio",
-    "migrate-fs": "tsx server/migrate-fs.ts",
-    "db:clean-sessions": "tsx src/auth/cleanup.ts",
-    "import:legacy": "tsx scripts/import-legacy.mts",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "version": "node scripts/sync-versions.mjs && git add plugin/.claude-plugin/plugin.json .claude-plugin/marketplace.json web-plugin/plugin/.claude-plugin/plugin.json web-plugin/.claude-plugin/marketplace.json",
-    "version:check": "node scripts/sync-versions.mjs",
-    "postpublish": "bash scripts/sync-plugin.sh \"chore: sync plugin to v$npm_package_version\" && bash scripts/sync-web-plugin.sh \"chore: sync web-plugin to v$npm_package_version\"",
-    "deploy:check:google": "node scripts/check-google-drive-deploy.mjs",
-    "build:excalidraw": "node scripts/build-excalidraw-editor.mjs",
-    "build:office-viewer": "node scripts/build-office-viewer.mjs",
-    "prepublishOnly": "node scripts/check-npm-package.mjs",
-    "test:marketing": "node server/lib/marketing/test-marketing.mjs"
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ddfourtwo/drafted.git"
   },
+  "keywords": [
+    "design",
+    "canvas",
+    "preview",
+    "html",
+    "claude"
+  ],
   "dependencies": {
-    "@aws-sdk/client-s3": "^3.1007.0",
-    "@aws-sdk/s3-request-presigner": "^3.1008.0",
-    "@clerk/backend": "^3.2.12",
-    "@clerk/express": "^2.1.4",
-    "@clerk/mcp-tools": "^0.3.1",
-    "@excalidraw/excalidraw": "^0.18.1",
     "@modelcontextprotocol/ext-apps": "^1.6.0",
     "@modelcontextprotocol/sdk": "^1.27.1",
-    "@sentry/browser": "^10.53.1",
-    "@sentry/node": "^10.53.1",
-    "@xmldom/xmldom": "^0.9.10",
     "commander": "^11.1.0",
-    "dagre": "^0.8.5",
-    "docx": "^9.7.1",
-    "dotenv": "^17.3.1",
-    "drizzle-orm": "^0.45.1",
-    "esbuild": "^0.28.0",
-    "exceljs": "^4.4.0",
-    "express": "^4.18.2",
-    "jszip": "^3.10.1",
-    "lucide": "^1.16.0",
-    "mdast-util-from-markdown": "^2.0.3",
-    "multer": "^2.1.1",
-    "nodemailer": "^10.0.13",
-    "parse5": "^8.0.1",
-    "pg": "^8.20.0",
-    "playwright": "^1.58.2",
-    "puppeteer": "^25.12.0",
     "qrcode-terminal": "^0.12.0",
-    "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "sharp": "^0.35.5",
     "ws": "^8.21.3",
     "yaml": "^2.8.3",
     "zod": "^4.3.6"
   },
-  "overrides": {
-    "@excalidraw/excalidraw": {
-      "nanoid": "^3.3.19"
-    },
-    "@excalidraw/mermaid-to-excalidraw": {
-      "nanoid": "^5.1.16"
-    },
-    "immutable": "^4.3.9",
-    "lodash-es": "^4.18.1"
-  },
-  "keywords": [
-    "design",
-    "canvas",
-    "preview",
-    "html",
-    "claude"
-  ],
-  "author": "ddfourtwo",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/ddfourtwo/drafted.git"
-  },
-  "license": "MIT",
-  "devDependencies": {
-    "@types/express": "^5.0.6",
-    "@types/nodemailer": "^7.0.11",
-    "@types/pg": "^8.18.0",
-    "docx-preview": "^0.3.7",
-    "drizzle-kit": "^0.31.9",
-    "tsx": "^4.19.0",
-    "typescript": "^5.9.3",
-    "vitest": "^3.2.4"
+  "scripts": {
+    "postpublish": "bash ../scripts/sync-plugin.sh \"chore: sync plugin to v$npm_package_version\" && bash ../scripts/sync-web-plugin.sh \"chore: sync web-plugin to v$npm_package_version\""
   }
 }