@bivy/bivy 0.1.0 → 0.1.1-staging.21

package/dist/control-plane-tasks.js

@@ -117,6 +117,23 @@ export class ControlPlaneTaskPoller {
     poke() {
         void this.tick();
     }
+    /**
+     * Replace the routing labels this live poller serves.
+     *
+     * Node names are editable while the daemon is running, and targeted queue
+     * labels are derived from that name (`bivy/<name>`). Keeping the startup-time
+     * labels forever leaves work routed to a renamed node pending until the daemon
+     * restarts. Update in place so already-running queue jobs are not disturbed,
+     * then poll immediately for work addressed to the new name.
+     */
+    setLabels(labels) {
+        const next = Array.from(new Set(labels.map((label) => label.trim()).filter(Boolean)));
+        if (!next.length || (next.length === this.cfg.labels.length && next.every((label, i) => label === this.cfg.labels[i])))
+            return;
+        this.cfg.labels = next;
+        console.log(`[control-plane-tasks] now watching hosted queue for labels [${next.join(", ")}]`);
+        this.poke();
+    }
     stop() {
         if (this.timer)
             clearInterval(this.timer);

package/dist/git-auth.js

@@ -88,7 +88,13 @@ function writeIfChanged(file, content, mode) {
 export function ensureCredentialHelper() {
     fs.mkdirSync(credDir(), { recursive: true, mode: 0o700 });
     writeIfChanged(workerPath(), WORKER_SOURCE, 0o700);
-    const shim = `#!/usr/bin/env sh\nexec ${shDq(process.execPath)} ${shDq(workerPath())} "$@"\n`;
+    // Git can invoke a credential helper after its caller's checkout has been
+    // removed (for example while an old daemon drains across an npm update, or
+    // while a broken clone is being rebuilt). Node resolves its cwd before it
+    // evaluates the worker and aborts with uv_cwd when that inherited directory
+    // has been unlinked. Move to a stable directory in the shell first; the worker
+    // resolves endpoint.json from import.meta.url and never relies on cwd.
+    const shim = `#!/usr/bin/env sh\ncd / || exit 0\nexec ${shDq(process.execPath)} ${shDq(workerPath())} "$@"\n`;
     writeIfChanged(shimPath(), shim, 0o700);
     return shimPath();
 }

package/dist/repo-workspace.js

@@ -32,7 +32,7 @@ export function parseGitHubRemote(input) {
 /** Infer owner/repo from a workspace's origin remote, if it is a GitHub checkout. */
 export async function inferGitHubRepoFromWorkspace(workspace) {
     try {
-        const { stdout } = await exec("git", ["-C", workspace, "remote", "get-url", "origin"]);
+        const { stdout } = await exec("git", ["-C", workspace, "remote", "get-url", "origin"], { cwd: workspace });
         return parseGitHubRemote(stdout);
     }
     catch {
@@ -65,7 +65,7 @@ export async function resolveGitHubToken(env = process.env) {
  */
 export async function fetchOrigin(repoDir) {
     try {
-        await exec("git", ["-C", repoDir, "fetch", "origin", "--prune"], { timeout: 120_000 });
+        await exec("git", ["-C", repoDir, "fetch", "origin", "--prune"], { cwd: repoDir, timeout: 120_000 });
     }
     catch {
         // offline / no origin / no rights — branch off the refs we already have.
@@ -80,7 +80,7 @@ export async function fetchOrigin(repoDir) {
 export async function resolveDefaultBaseRef(repoDir) {
     // origin/HEAD points at the remote's default branch when it's been recorded.
     try {
-        const { stdout } = await exec("git", ["-C", repoDir, "symbolic-ref", "--short", "refs/remotes/origin/HEAD"]);
+        const { stdout } = await exec("git", ["-C", repoDir, "symbolic-ref", "--short", "refs/remotes/origin/HEAD"], { cwd: repoDir });
         const ref = stdout.trim();
         if (ref)
             return ref; // e.g. "origin/main"
@@ -89,8 +89,8 @@ export async function resolveDefaultBaseRef(repoDir) {
         // origin/HEAD is often unset on a fresh clone — record it, then retry.
     }
     try {
-        await exec("git", ["-C", repoDir, "remote", "set-head", "origin", "--auto"]);
-        const { stdout } = await exec("git", ["-C", repoDir, "symbolic-ref", "--short", "refs/remotes/origin/HEAD"]);
+        await exec("git", ["-C", repoDir, "remote", "set-head", "origin", "--auto"], { cwd: repoDir });
+        const { stdout } = await exec("git", ["-C", repoDir, "symbolic-ref", "--short", "refs/remotes/origin/HEAD"], { cwd: repoDir });
         const ref = stdout.trim();
         if (ref)
             return ref;
@@ -112,7 +112,7 @@ export async function resolveDefaultBaseRef(repoDir) {
 export async function resolveBranchBaseRef(repoDir, branch) {
     const ref = `origin/${branch}`;
     try {
-        await exec("git", ["-C", repoDir, "rev-parse", "--verify", "--quiet", ref]);
+        await exec("git", ["-C", repoDir, "rev-parse", "--verify", "--quiet", ref], { cwd: repoDir });
         return ref;
     }
     catch {
@@ -131,7 +131,7 @@ export async function isReusableCheckout(dest) {
     if (!fs.existsSync(path.join(dest, ".git")))
         return false;
     try {
-        await exec("git", ["-C", dest, "rev-parse", "--show-toplevel"]);
+        await exec("git", ["-C", dest, "rev-parse", "--show-toplevel"], { cwd: dest });
         return true;
     }
     catch {
@@ -177,15 +177,15 @@ export async function cloneOrUpdateRepo(opts) {
         try {
             // Rewrite origin to the clean URL. This also MIGRATES any pre-existing
             // clone whose remote still carries an embedded token from before this fix.
-            await exec("git", ["-C", dest, "remote", "set-url", "origin", url]);
-            await configureRepoCredentialHelper((a) => exec("git", a), dest);
-            await exec("git", ["-C", dest, ...cc, "fetch", "--all", "--prune"], { timeout: 120_000, env });
+            await exec("git", ["-C", dest, "remote", "set-url", "origin", url], { cwd: dest });
+            await configureRepoCredentialHelper((a) => exec("git", a, { cwd: dest }), dest);
+            await exec("git", ["-C", dest, ...cc, "fetch", "--all", "--prune"], { cwd: dest, timeout: 120_000, env });
             // Re-point origin/HEAD at the remote's CURRENT default branch. Without
             // this a cached checkout keeps whatever default it recorded at first
             // clone, so if the repo's default later changed (e.g. main → master) a new
             // session would branch off the stale remote default. --auto is best-effort
             // and only rewrites the local origin/HEAD pointer, never a branch.
-            await exec("git", ["-C", dest, "remote", "set-head", "origin", "--auto"]);
+            await exec("git", ["-C", dest, "remote", "set-head", "origin", "--auto"], { cwd: dest });
         }
         catch {
             // offline / fetch failed — reuse the existing checkout as-is
@@ -200,9 +200,15 @@ export async function cloneOrUpdateRepo(opts) {
     // session" fail with "destination exists" or "Not a git repository".
     if (fs.existsSync(dest))
         fs.rmSync(dest, { recursive: true, force: true });
-    await exec("git", [...cc, "clone", url, dest], { timeout: 600_000, env });
+    // Always give child_process a real cwd. The daemon may still be serving while
+    // an npm-global update atomically replaces its install directory; inheriting
+    // that now-unlinked cwd makes git abort before it can even process `clone`
+    // ("Unable to read current working directory"). The repos root is durable
+    // across package updates and was created immediately above.
+    await exec("git", [...cc, "clone", url, dest], { cwd: opts.root, timeout: 600_000, env });
     // Persist the helper config so agent-run git in this clone authenticates too.
-    await configureRepoCredentialHelper((a) => exec("git", a), dest);
+    // These follow-up processes need an explicit cwd for the same reason.
+    await configureRepoCredentialHelper((a) => exec("git", a, { cwd: dest }), dest);
     hardenGitConfigPerms(dest);
     return dest;
 }

package/dist/server.js

@@ -86,7 +86,7 @@ const repoRoot = path.resolve(__dirname, "..");
 // running from source. Packaged/release builds may override them (BIVY_ASSET_ROOT,
 // BIVY_DATA_DIR) so it can write outside the read-only app bundle.
 const assetRoot = process.env.BIVY_ASSET_ROOT ?? repoRoot;
-const appDir = process.env.BIVY_DATA_DIR ?? path.join(repoRoot, ".bivy");
+const appDir = path.resolve(process.env.BIVY_DATA_DIR ?? path.join(repoRoot, ".bivy"));
 // Load persisted env from cli.json into process.env so config written there —
 // e.g. connecting a GitHub App (BIVY_GITHUB_APP_ID / BIVY_GITHUB_HOSTED_TASKS /
 // BIVY_NODE_LABEL) — takes effect on the NEXT restart even if the service
@@ -115,6 +115,13 @@ initSharedDepCache(appDir);
 // Materialize the git credential helper under the data dir so repo clones can
 // authenticate without ever writing a token into their remote URL / .git/config.
 configureGitAuth(appDir);
+// Never leave the daemon parked in its installed package directory. A global
+// npm update atomically replaces that directory while the old process drains;
+// any later child process (notably git's remote/credential helpers) then aborts
+// before running with "Unable to read current working directory". appDir is the
+// durable state root and every workspace/asset path below is already absolute.
+// Anchoring the process itself fixes all subprocess paths, not just `git clone`.
+process.chdir(appDir);
 // Make `bivy update` and user-scoped npm globals available to agents/tools
 // launched by the daemon even when the node runs under systemd/launchd with a
 // minimal PATH. The installer also symlinks ~/.local/bin/bivy, but adding these
@@ -2377,6 +2384,9 @@ const RELAY_COMMANDS = {
     "node.rename"(msg, ctx) {
         const prev = identity.name;
         const name = identity.setName(String(msg.name ?? ""));
+        // Queue routing follows the node name (`bivy/<name>`). Update the live
+        // poller now instead of leaving it on its startup-time label until restart.
+        refreshControlPlaneTaskLabels();
         void advertiseNodeName(name, prev);
         ctx.broadcast({ type: "node.updated", name });
         ctx.reply({ type: "node.updated", name });
@@ -3850,6 +3860,7 @@ async function advertiseNodeName(name, prevName) {
             const accepted = typeof data?.node?.name === "string" ? data.node.name : undefined;
             if (accepted && accepted !== identity.name) {
                 identity.setName(accepted);
+                refreshControlPlaneTaskLabels();
                 broadcast({ type: "node.updated", name: accepted });
                 relay?.sendEvent({ type: "node.updated", name: accepted });
             }
@@ -3859,6 +3870,7 @@ async function advertiseNodeName(name, prevName) {
         // optimistic local change so the node name stays consistent with the account.
         if (prevName && prevName !== identity.name) {
             identity.setName(prevName);
+            refreshControlPlaneTaskLabels();
             broadcast({ type: "node.updated", name: prevName });
             relay?.sendEvent({ type: "node.updated", name: prevName });
         }
@@ -4524,6 +4536,14 @@ async function startGitHubTasksIfConfigured() {
     githubPoller.start();
 }
 let controlPlanePoller;
+/** Refresh a running queue poller's labels after the node is renamed. */
+function refreshControlPlaneTaskLabels() {
+    if (!controlPlanePoller)
+        return;
+    const cfg = resolveControlPlaneTaskConfig(loadRelayConfig(appDir), process.env, identity.name);
+    if (cfg)
+        controlPlanePoller.setLabels(cfg.labels);
+}
 let githubApps;
 const installationIdByRepo = new Map();
 /** Resolve (once) the GitHub Apps configured on this node. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bivy/bivy",
-  "version": "0.1.0",
+  "version": "0.1.1-staging.21",
   "type": "module",
   "license": "FSL-1.1-ALv2",
   "description": "Run coding agents on machines you own. Source-available, self-hostable agent workspace.",