lody 0.50.0 → 0.50.1

package/dist/index.js

@@ -36821,7 +36821,7 @@ Mongoose Error Code: ${error2.code}` : ""}`
     return client;
   }
   const name = "lody";
-  const version$4 = "0.50.0";
+  const version$4 = "0.50.1";
   const description$1 = "Lody Agent CLI tool for managing remote command execution";
   const type$2 = "module";
   const main$3 = "dist/index.js";
@@ -127644,9 +127644,11 @@ $mem | ConvertTo-Json -Compress
         return;
       }
       const requesterUserId = nextUserTurn.userId ?? freshMeta.userId;
+      const localProjectId = freshMeta.project?.kind === "local" ? freshMeta.project.localProjectId : void 0;
       const access = await this.deps.canUseMachine({
         sessionId,
-        requesterUserId
+        requesterUserId,
+        localProjectId
       });
       if (!access.allowed) {
         await this.markDispatchAccessDenied(sessionId, sessionDoc, nextUserTurn.id, access.reason);
@@ -127668,6 +127670,8 @@ $mem | ConvertTo-Json -Compress
           return "This machine is not registered for workspace access.";
         case "not_visible":
           return "This machine is private to its owner.";
+        case "project_not_shared":
+          return "This local project is not shared with the team.";
         case "access_unavailable":
           return "Machine access could not be verified.";
         case "cli_token_invalid":
@@ -128499,7 +128503,8 @@ $mem | ConvertTo-Json -Compress
       reason: _enum$1([
         "requester_not_member",
         "machine_not_registered",
-        "not_visible"
+        "not_visible",
+        "project_not_shared"
       ])
     })
   ]);
@@ -128551,15 +128556,30 @@ $mem | ConvertTo-Json -Compress
     });
     return RegisterMachineAccessResultSchema.parse(raw);
   }
+  const LEGACY_LOCAL_PROJECT_ID_VALIDATOR_ERROR = /ArgumentValidationError[\s\S]*extra field `localProjectId`/;
   async function canUseMachineForCliToken(input2) {
     const client = createAuthConvexClient();
-    const raw = await client.query(api.machines.canUseMachineFromCliToken, {
+    const baseArgs = {
       cliToken: input2.token,
       workspaceId: input2.workspaceId,
       machineId: input2.machineId,
       requesterUserId: input2.requesterUserId
-    });
-    return MachineAccessCheckResultSchema.parse(raw);
+    };
+    try {
+      const raw = await client.query(api.machines.canUseMachineFromCliToken, {
+        ...baseArgs,
+        ...input2.localProjectId !== void 0 ? {
+          localProjectId: input2.localProjectId
+        } : {}
+      });
+      return MachineAccessCheckResultSchema.parse(raw);
+    } catch (error2) {
+      if (input2.localProjectId !== void 0 && error2 instanceof Error && LEGACY_LOCAL_PROJECT_ID_VALIDATOR_ERROR.test(error2.message)) {
+        const raw = await client.query(api.machines.canUseMachineFromCliToken, baseArgs);
+        return MachineAccessCheckResultSchema.parse(raw);
+      }
+      throw error2;
+    }
   }
   const HTTP_HOP_BY_HOP_HEADERS = /* @__PURE__ */ new Set([
     "connection",
@@ -130705,13 +130725,14 @@ ${escapeHtmlScriptContent(VISUAL_ANNOTATION_INSPECTOR_BROWSER_SCRIPT)}
         workspaceId: this.workspaceId,
         workspaceDocument: this.workspaceDocument,
         executionService: this.executionService,
-        canUseMachine: async ({ requesterUserId, sessionId }) => {
+        canUseMachine: async ({ requesterUserId, sessionId, localProjectId }) => {
           try {
             return await canUseMachineForCliToken({
               token: this.token,
               workspaceId: this.workspaceId,
               machineId: this.machineId,
-              requesterUserId
+              requesterUserId,
+              localProjectId
             });
           } catch (error2) {
             const message = formatErrorMessage(error2);
@@ -143674,6 +143695,7 @@ Received ${signal}, shutting down gracefully...` : "\nShutting down gracefully..
   }
   const ELECTRON_BOOTSTRAP_ENV = "LODY_ELECTRON_BOOTSTRAP";
   const ELECTRON_SESSION_TOKEN_ENV = "LODY_ELECTRON_SESSION_TOKEN";
+  const ELECTRON_SESSION_USER_ID_ENV = "LODY_ELECTRON_SESSION_USER_ID";
   const EXIT_CODE_ALREADY_RUNNING = 3;
   function logCliDetectionResults(logger2, availability) {
     logger2.debug("Local agent auth detection results:");
@@ -143715,6 +143737,7 @@ Received ${signal}, shutting down gracefully...` : "\nShutting down gracefully..
     runtimeStateReporter.setStartupStage("bootstrap");
     const electronBootstrapEnabled = process.env[ELECTRON_BOOTSTRAP_ENV] === "1";
     const electronSessionToken = process.env[ELECTRON_SESSION_TOKEN_ENV]?.trim();
+    const electronSessionUserId = process.env[ELECTRON_SESSION_USER_ID_ENV]?.trim() || null;
     const providedAuth = options.auth?.trim();
     const cliAvailability = {
       claude: checkClaude(),
@@ -143783,13 +143806,19 @@ Received ${signal}, shutting down gracefully...` : "\nShutting down gracefully..
     } else if (existingAuth) {
       logger2.debug("Found existing authentication, checking validity...");
       const validation2 = await authClient.validateToken(existingAuth.token);
-      if (validation2.valid) {
+      const existingUserId = validation2.valid ? validation2.userId ?? existingAuth.user.id : null;
+      const electronUserMismatch = !!electronSessionToken && electronSessionUserId !== null && existingUserId !== null && existingUserId !== electronSessionUserId;
+      if (validation2.valid && existingUserId && !electronUserMismatch) {
         token2 = existingAuth.token;
-        userId = validation2.userId ?? existingAuth.user.id;
+        userId = existingUserId;
         machineId = existingAuth.machine.machineId;
         machineName = defaultMachineName;
       } else {
-        logger2.warn("Existing authentication is invalid.");
+        if (electronUserMismatch) {
+          logger2.warn("Existing CLI credentials belong to a different account than the desktop session \u2014 re-authenticating.");
+        } else {
+          logger2.warn("Existing authentication is invalid.");
+        }
         const bootstrap = await completeBootstrapLogin();
         if (bootstrap) {
           token2 = bootstrap.token;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lody",
-  "version": "0.50.0",
+  "version": "0.50.1",
   "description": "Lody Agent CLI tool for managing remote command execution",
   "type": "module",
   "main": "dist/index.js",
@@ -74,10 +74,10 @@
     "ws": "^8.18.3",
     "zod": "^4.1.5",
     "@lody/cli-supervisor": "0.0.1",
+    "@lody/convex": "0.0.1",
     "@lody/loro-streams-rpc": "0.0.1",
     "@lody/shared": "0.0.1",
-    "loro-code": "0.0.1",
-    "@lody/convex": "0.0.1"
+    "loro-code": "0.0.1"
   },
   "files": [
     "dist",