niahere 0.5.9 → 0.5.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "niahere",
-  "version": "0.5.9",
+  "version": "0.5.11",
   "description": "A personal AI assistant daemon — chat, scheduled jobs, persona system, extensible via skills.",
   "type": "module",
   "scripts": {

package/src/agent/auth.ts

@@ -144,7 +144,10 @@ export function codexAuthStatus(now: number = Date.now(), reader: AuthReader = d
   }
 
   const tokens = (auth.tokens ?? {}) as Record<string, unknown>;
-  const exp = jwtExpiry(typeof tokens.id_token === "string" ? tokens.id_token : undefined);
+  // access_token is what authenticates. id_token is a short-lived OIDC identity
+  // token that lapses about an hour after every refresh, so reading it reports
+  // "lapsed" for any healthy install — a permanent false alarm.
+  const exp = jwtExpiry(typeof tokens.access_token === "string" ? tokens.access_token : undefined);
   const mode = typeof auth.auth_mode === "string" ? auth.auth_mode : "oauth";
   if (exp === undefined) return { ...base, state: "unknown", detail: `${mode} sign-in, no readable expiry` };
   if (exp <= now) return { ...base, state: "stale", detail: `${mode} token lapsed ${ago(now - exp)} ago, renewable` };

package/src/core/health.ts

@@ -272,8 +272,12 @@ export async function runHealthChecks(): Promise<Check[]> {
   // Replies written but never confirmed sent. 25 code paths write this column
   // and, until now, nothing read it.
   try {
+    // withDb, not a bare getSql(): the CLI must be able to exit afterwards, and
+    // a lazily-opened connection nobody closes keeps the event loop alive.
+    const { withDb } = await import("../db/with-db");
     const { Message } = await import("../db/models");
-    checks.push(auditDelivery(await Message.listPendingDeliveries()));
+    const pending = await withDb(() => Message.listPendingDeliveries());
+    checks.push(auditDelivery(pending));
   } catch (err) {
     checks.push({ name: "delivery", status: "warn", detail: errMsg(err) });
   }