feat: auto-refresh Kernel Managed Auth session on login failure — ensureLoggedIn() with retry

lib/session.mjs

@@ -0,0 +1,67 @@
+/**
+ * session.mjs — Kernel Managed Auth session refresh
+ * Call refreshSession() before creating a browser to ensure the profile is fresh
+ */
+import { createRequire } from 'module';
+const require = createRequire(import.meta.url);
+
+const KERNEL_SDK_PATH = '/home/ubuntu/.openclaw/workspace/node_modules/@onkernel/sdk/index.js';
+
+const CONNECTION_IDS = {
+  linkedin:  'REDACTED_CONNECTION_ID_LINKEDIN',
+  wellfound: 'REDACTED_CONNECTION_ID_WELLFOUND',
+};
+
+export async function refreshSession(platform, apiKey) {
+  const connectionId = CONNECTION_IDS[platform];
+  if (!connectionId) throw new Error(`No connection ID for platform: ${platform}`);
+
+  const Kernel = require(KERNEL_SDK_PATH);
+  const kernel = new Kernel({ apiKey });
+
+  console.log(`  🔄 Refreshing ${platform} session...`);
+
+  // Trigger re-auth (uses stored credentials automatically)
+  const loginResp = await kernel.auth.connections.login(connectionId);
+  
+  if (loginResp.status === 'SUCCESS') {
+    console.log(`  ✅ ${platform} session refreshed`);
+    return true;
+  }
+
+  // If not immediately successful, poll for up to 30s
+  const start = Date.now();
+  while (Date.now() - start < 30000) {
+    await new Promise(r => setTimeout(r, 2000));
+    const conn = await kernel.auth.connections.retrieve(connectionId);
+    if (conn.status === 'SUCCESS') {
+      console.log(`  ✅ ${platform} session refreshed`);
+      return true;
+    }
+    if (['FAILED', 'EXPIRED', 'CANCELED'].includes(conn.status)) {
+      console.warn(`  ⚠️  ${platform} session refresh failed: ${conn.status}`);
+      return false;
+    }
+  }
+
+  console.warn(`  ⚠️  ${platform} session refresh timed out`);
+  return false;
+}
+
+/**
+ * Verify login after browser connects — if not logged in, trigger refresh and retry
+ */
+export async function ensureLoggedIn(page, verifyFn, platform, apiKey, maxAttempts = 2) {
+  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    const loggedIn = await verifyFn(page);
+    if (loggedIn) return true;
+
+    if (attempt < maxAttempts) {
+      console.warn(`  ⚠️  ${platform} not logged in (attempt ${attempt}), refreshing session...`);
+      await refreshSession(platform, apiKey);
+      await page.reload({ waitUntil: 'domcontentloaded' });
+      await page.waitForTimeout(3000);
+    }
+  }
+  return false;
+}