@blogic-cz/agent-tools 0.15.8 → 0.15.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blogic-cz/agent-tools",
-  "version": "0.15.8",
+  "version": "0.15.10",
   "description": "CLI tools for AI coding agent workflows — GitHub, database, Kubernetes, Azure DevOps, logs, sessions, and audit",
   "keywords": [
     "agent",

package/src/shared/prerequisites/runtime.ts

@@ -557,10 +557,23 @@ const acquireVpn = <E>(
         while (true) {
           const snapshot = store.snapshot();
           if (snapshot.lifecycle === "UNKNOWN") {
+            const contended = snapshot.activeLeases > 0;
+            if (!contended) {
+              const observed = yield* runStatusBefore(driver, connectDeadline, runCommand);
+              if (
+                observed !== undefined &&
+                (store.reconcileUnknown(snapshot, observed, Date.now()) ||
+                  store.snapshot().lifecycle !== "UNKNOWN")
+              ) {
+                continue;
+              }
+            }
             return yield* fail(
               new PrerequisiteRunError({
                 message: `VPN prerequisite "${key}" has unknown ownership: ${snapshot.evidence ?? "no evidence"}`,
-                hint: "Quiesce all agent-tools processes and remove its VPN runtime state before retrying.",
+                hint: contended
+                  ? "Another agent-tools process holds an active lease on this VPN. Retry once it has finished."
+                  : missingVpnToolHint(driver),
               }),
             );
           }

package/src/shared/prerequisites/store.ts

@@ -534,6 +534,28 @@ export class VpnStore {
     return false;
   }
 
+  /** Recovers terminal UNKNOWN from an observed status; fenced so it can never take ownership from a holder. */
+  reconcileUnknown(snapshot: VpnStateSnapshot, connected: boolean, now: number): boolean {
+    return this.immediate(
+      () =>
+        this.db
+          .query(
+            `UPDATE vpn_state SET lifecycle=?, managed_epoch_id=NULL, idle_deadline=NULL,
+               revision=revision+1, evidence=?, updated_at=?
+             WHERE singleton=1 AND lifecycle='UNKNOWN' AND operation_id IS NULL AND revision=?
+               AND NOT EXISTS (SELECT 1 FROM leases WHERE status='ACTIVE')`,
+          )
+          .run(
+            connected ? "EXTERNAL" : "DOWN",
+            connected
+              ? "Recovered from unknown ownership: VPN observed connected outside agent-tools."
+              : "Recovered from unknown ownership: VPN observed disconnected.",
+            now,
+            snapshot.revision,
+          ).changes === 1,
+    );
+  }
+
   private commitOperation(
     guard: OperationGuard,
     from: VpnLifecycle,