@alfe.ai/gateway 0.10.7 → 0.10.9

package/dist/health.js

@@ -4718,6 +4718,14 @@ NotificationType.PaymentSucceeded, NotificationCategory.Billing, RecipientStrate
 * Platform-agnostic: works in React Native and browser environments.
 * Uses standard fetch() API — no Node.js dependencies.
 */
+/** A sane 429 window hint: a positive whole number of seconds (≤ 1 day). */
+function isRetryAfterSeconds(value) {
+	return typeof value === "number" && Number.isInteger(value) && value > 0 && value <= 86400;
+}
+/** Narrow allowlist: a non-empty list of `{ profile: string, message: string }`. */
+function isProfileErrorList(value) {
+	return Array.isArray(value) && value.length > 0 && value.every((entry) => typeof entry === "object" && entry !== null && typeof entry.profile === "string" && typeof entry.message === "string");
+}
 var AlfeApiClient = class {
 	apiBaseUrl;
 	getToken;
@@ -4790,7 +4798,12 @@ var AlfeApiClient = class {
 						error: errorMessage ?? (typeof body === "string" ? body : `API error: ${String(res.status)}`),
 						status: res.status,
 						...typeof errBody?.code === "string" ? { code: errBody.code } : {},
-						...Array.isArray(errBody?.ineligibleUserIds) && errBody.ineligibleUserIds.every((id) => typeof id === "string") ? { ineligibleUserIds: [...errBody.ineligibleUserIds] } : {}
+						...Array.isArray(errBody?.ineligibleUserIds) && errBody.ineligibleUserIds.every((id) => typeof id === "string") ? { ineligibleUserIds: [...errBody.ineligibleUserIds] } : {},
+						...isProfileErrorList(errBody?.errors) ? { profileErrors: errBody.errors.map(({ profile, message }) => ({
+							profile,
+							message
+						})) } : {},
+						...isRetryAfterSeconds(errBody?.retryAfterSeconds) ? { retryAfterSeconds: errBody.retryAfterSeconds } : {}
 					}
 				};
 			}
@@ -5931,6 +5944,13 @@ const log$6 = logger.child({ component: "RuntimeGate" });
 var RuntimeGate = class {
 	depth = 0;
 	wasRunning = false;
+	/**
+	* True once the OUTERMOST `enter()` has finished stopping the runtime child
+	* (its `stopWhenIdle()` resolved, i.e. the process exited), until the gate
+	* fully reopens. `depth > 0` alone is not enough: depth is bumped before the
+	* stop is awaited, so it is already set while the old child is draining.
+	*/
+	stopSettled = false;
 	exclusive = false;
 	/** Brackets parked behind an exclusive hold (or an exclusive request parked behind open brackets). */
 	waiters = [];
@@ -5945,6 +5965,14 @@ var RuntimeGate = class {
 	get isSuspended() {
 		return this.depth > 0;
 	}
+	/**
+	* Whether the runtime child is PROVABLY down right now: a bracket is open and
+	* its stop has completed. The OpenClaw applier's one direct openclaw.json
+	* write (the dangling channel-ref repair) is allow-listed on this.
+	*/
+	get isRuntimeStopped() {
+		return this.depth > 0 && this.stopSettled;
+	}
 	/** True while an exclusive bracket is open. */
 	get isExclusive() {
 		return this.exclusive;
@@ -5997,12 +6025,14 @@ var RuntimeGate = class {
 	}
 	async enter() {
 		if (this.depth++ > 0) return;
+		this.stopSettled = false;
 		const rp = this.getRuntime();
 		this.wasRunning = rp?.isActive ?? false;
 		if (rp && this.wasRunning) {
 			log$6.info("Suspending runtime for mutating reconcile (avoid concurrent SQLite writers)");
 			await rp.stopWhenIdle();
 		}
+		if (this.depth > 0) this.stopSettled = true;
 	}
 	/**
 	* Resume the runtime child. Only the outermost call (depth 1 → 0) actually
@@ -6019,6 +6049,7 @@ var RuntimeGate = class {
 			rp.resume();
 		}
 		this.wasRunning = false;
+		this.stopSettled = false;
 		if (this.exclusive) this.exclusive = false;
 		this.wakeWaiters();
 		return Promise.resolve();
@@ -7465,7 +7496,8 @@ function generateLaunchdPlist() {
 * ~13,570 restarts over 2 days).
 *
 * The guard:
-*   - checks the CLI is intact: the symlink target (`dist/index.js`) exists AND
+*   - checks the CLI is intact: the symlink target (the package's `bin.alfe`,
+*     `dist/bin.js` today) exists AND
 *     `alfe --version` exits 0;
 *   - if broken, reinstalls `@alfe.ai/cli@$ALFE_CLI_VERSION` (the exact version
 *     baked into the unit's `Environment=`; falls back to `@latest` when
@@ -7489,7 +7521,7 @@ set -u
 TARGET='${exactVersion ? `@alfe.ai/cli@${exactVersion}` : "@alfe.ai/cli@latest"}'
 log() { echo "[alfe-cli-guard] $*" >&2; }
 
-# Resolve the alfe bin and its real target (dist/index.js). readlink -f follows
+# Resolve the alfe bin and its real target (dist/bin.js). readlink -f follows
 # the whole symlink chain; fall back to the bin path itself if unavailable.
 BIN="$(command -v alfe 2>/dev/null || true)"
 if [ -n "$BIN" ]; then
@@ -10147,7 +10179,8 @@ async function startDaemon() {
 		runtimeAppliers.set(name, new OpenClawApplier({
 			home: runtimeCfg.workspace,
 			agentWorkspace: runtimeCfg.agentWorkspace,
-			cliLock: openclawCliLock
+			cliLock: openclawCliLock,
+			isRuntimeStopped: () => name === config.runtime && runtimeGateRef instanceof RuntimeGate && runtimeGateRef.isRuntimeStopped && runtimeProcess !== null && !runtimeProcess.isActive
 		}));
 		logger.info({
 			runtime: name,

package/dist/upgrade.js

@@ -21,8 +21,8 @@ import { promisify } from "node:util";
 *      broken) `alfe` binary. Keep the two in lockstep.
 *
 * The two checks:
-*   - the resolved CLI entry (`.../dist/index.js`, the symlink target of the
-*     `alfe` bin) exists on disk; and
+*   - the resolved CLI entry (the package's `bin.alfe`, `.../dist/bin.js`
+*     today, i.e. the symlink target of the `alfe` bin) exists on disk; and
 *   - running it (`node <entry> --version`, or `alfe --version`) exits 0 and
 *     prints the expected version.
 *
@@ -61,7 +61,7 @@ function decideCliInstallOk(probe, expectedVersion) {
 /**
 * Resolve the CLI entry file this daemon is running from. When the gateway is
 * loaded as a dependency of the globally-installed CLI the layout is
-* `.../@alfe.ai/cli/dist/index.js` with `.../@alfe.ai/gateway/dist/...`
+* `.../@alfe.ai/cli/dist/bin.js` with `.../@alfe.ai/gateway/dist/...`
 * alongside — walk up to the sibling `@alfe.ai/cli/package.json` and derive its
 * `bin.alfe` / main entry. Returns undefined when it can't be resolved (e.g.
 * `alfe gateway daemon` run from a dev checkout); the caller then skips the
@@ -106,7 +106,7 @@ async function tryVersion(cmd, args) {
 * Probe + decide whether the on-disk global CLI install is intact.
 *
 * @param expectedVersion  when set, the reported version must match exactly.
-* @param entryPath        the resolved `.../dist/index.js` (from
+* @param entryPath        the resolved `bin.alfe` entry, `.../dist/bin.js` (from
 *                         `resolveCliEntryPath`). When provided and missing,
 *                         the check fails fast. Also used to run the CLI
 *                         directly via `node <entry> --version`, which is more
@@ -174,7 +174,7 @@ function findOrphanReifyTempDirs(siblings, packageBasename) {
 * Detection order (robust — never hardcode `/usr/lib`):
 *   1. `npm root -g` → the global `node_modules` root. Authoritative on the box.
 *   2. Derive from the resolved CLI entry path (`.../node_modules/@alfe.ai/cli/
-*      dist/index.js`) by walking up to the `node_modules` segment.
+*      dist/bin.js`) by walking up to the `node_modules` segment.
 *
 * Returns undefined when neither resolves (dev checkout / non-global run); the
 * caller then skips the sweep (there is no global install to clean).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/gateway",
-  "version": "0.10.7",
+  "version": "0.10.9",
   "description": "Alfe local gateway daemon — persistent control plane for agent integrations",
   "type": "module",
   "bin": {
@@ -23,12 +23,12 @@
     "pino-roll": "^1.2.0",
     "smol-toml": ">=1.6.1",
     "ws": "^8.18.0",
-    "@alfe.ai/agent-api-client": "^0.19.2",
+    "@alfe.ai/agent-api-client": "^0.20.0",
+    "@alfe.ai/ai-proxy-local": "^0.0.17",
     "@alfe.ai/config": "^0.4.1",
-    "@alfe.ai/integration-manifest": "^0.4.2",
-    "@alfe.ai/integrations": "^0.6.13",
-    "@alfe.ai/mcp-bundler": "^0.4.2",
-    "@alfe.ai/ai-proxy-local": "^0.0.17"
+    "@alfe.ai/integration-manifest": "^0.5.0",
+    "@alfe.ai/integrations": "^0.6.16",
+    "@alfe.ai/mcp-bundler": "^0.4.3"
   },
   "license": "UNLICENSED",
   "homepage": "https://alfe.ai",