@bridge4dev/runner 0.22.1 → 0.26.0

package/dist/service-unit.js

@@ -20,10 +20,31 @@ import { systemdUserHome } from './paths.js';
 export const SERVICE_NAME = 'devbridge-runner';
 const COMMAND_NAME = 'devbridge-runner';
 /** `<prefix>/bin/devbridge-runner` for an installed package, else the script. */
+/**
+ * A path that will not exist after a reboot.
+ *
+ * `fnm` (and `nvm`/`volta` in the same spirit) puts the active version's `bin`
+ * into a per-shell directory under `/run/user/<uid>/fnm_multishells/…` — tmpfs,
+ * created for one shell session. `command -v devbridge-runner` resolves there,
+ * so baking it into a unit produces a service that works until the shell that
+ * installed it goes away, and then fails with status=127 forever. Observed on a
+ * real install, 2026-07-31, on a ROOT install — this is not a dedicated-user
+ * problem, it is a per-user node manager problem.
+ */
+export function isEphemeralPath(target) {
+    // Deliberately narrow: `/run` and `/dev/shm` are tmpfs by definition, and
+    // `fnm_multishells` is named because fnm also offers non-tmpfs layouts. `/tmp`
+    // is NOT here — a package installed there is odd but survives, and tests build
+    // their fake installs in temp directories.
+    return (/^\/(run|proc)\//.test(target) ||
+        target.startsWith('/dev/shm/') ||
+        target.includes('fnm_multishells'));
+}
 export function unitExecTarget(argv1 = process.argv[1] ?? '') {
-    // Invoked through the command itself: that is already the stable path.
+    // Invoked through the command itself: that is already the stable path —
+    // unless it lives in a directory that disappears with the shell.
     try {
-        if (fs.lstatSync(argv1).isSymbolicLink()) {
+        if (fs.lstatSync(argv1).isSymbolicLink() && !isEphemeralPath(path.resolve(argv1))) {
             return { execStart: path.resolve(argv1), viaCommand: true };
         }
     }
@@ -43,8 +64,9 @@ export function unitExecTarget(argv1 = process.argv[1] ?? '') {
         let dir = path.dirname(script);
         for (let i = 0; i < 6; i++) {
             const candidate = path.join(dir, 'bin', COMMAND_NAME);
-            if (fs.existsSync(candidate))
+            if (fs.existsSync(candidate) && !isEphemeralPath(candidate)) {
                 return { execStart: candidate, viaCommand: true };
+            }
             const parent = path.dirname(dir);
             if (parent === dir)
                 break;
@@ -56,13 +78,19 @@ export function unitExecTarget(argv1 = process.argv[1] ?? '') {
 export function unitPath(home = systemdUserHome()) {
     return path.join(home, '.config', 'systemd', 'user', `${SERVICE_NAME}.service`);
 }
-export function buildUnit(execStart) {
+export function buildUnit(execStart, nodeBinary = process.execPath) {
     const target = execStart ?? unitExecTarget().execStart;
-    // The command carries a `#!/usr/bin/env node` shebang, so it is exec'd directly;
-    // a bare script path needs the interpreter spelled out.
-    const command = target.endsWith('.js')
-        ? `${process.execPath} ${target} daemon`
-        : `${target} daemon`;
+    /**
+     * The interpreter is ALWAYS spelled out, even for the command symlink.
+     *
+     * The file carries `#!/usr/bin/env node`, and relying on that shebang means
+     * relying on `node` being on the PATH systemd gives the service — which it is
+     * not when node came from fnm/nvm/volta. That produced `status=127` and an
+     * endless restart loop on a real machine. Node runs a file with a shebang
+     * perfectly well (it is a comment to it), so naming the interpreter costs
+     * nothing and removes the dependency entirely.
+     */
+    const command = `${nodeBinary} ${target} daemon`;
     return ([
         '[Unit]',
         'Description=DevBridge Dev Runner',
@@ -206,6 +234,9 @@ export function unitIsBroken(readFile = (p) => fs.readFileSync(p, 'utf8')) {
     const target = parts[0]?.endsWith('node') ? parts[1] : parts[0];
     if (!target)
         return false;
-    return !fs.existsSync(target);
+    // Gone already, or living somewhere that will be gone after a reboot — the
+    // second one still runs today, which is exactly why it has to be repaired
+    // before the reboot rather than after it.
+    return !fs.existsSync(target) || isEphemeralPath(target) || isEphemeralPath(parts[0] ?? '');
 }
 //# sourceMappingURL=service-unit.js.map

package/dist/supervisor.js

@@ -12,8 +12,9 @@ import { VerifyRunner, runOneOffCommand, } from './verify.js';
 import { VerifyReportQueue } from './verify-queue.js';
 import { applySession, gitBranches, gitCommit, gitDiff, gitLog, gitPush, gitRefs, gitShow, gitStatus, revertApply, gitStage, gitUnstage, gitDiscard, gitPull, gitMergeAbort, updateFromBase, workspaceState, } from './gitops.js';
 import { fsView } from './fsview.js';
-import { agentAuthStatuses, AuthRelay } from './auth-relay.js';
+import { agentAuthStatuses, AuthRelay, clearAgentAuthFailure, noteAgentAuthFailure, } from './auth-relay.js';
 import { selfUpdate } from './self-update.js';
+import { rememberWorkspacePath } from './environment.js';
 import { composeMessageWithAttachments, saveAttachments, } from './attachments.js';
 export class Supervisor {
     ws;
@@ -297,6 +298,10 @@ export class Supervisor {
      * would be a lock bought for nothing.
      */
     async prepareWorkspace(descriptor) {
+        // Also here, not only at bind time: a server paired before this existed has
+        // never sent a `validate_path`, and its projects would be invisible to
+        // `doctor` until somebody re-bound them.
+        rememberWorkspacePath(descriptor.workspace.path);
         if (descriptor.workMode === 'DIRECT') {
             return prepareDirectWorkspace(descriptor.workspace.path);
         }
@@ -794,7 +799,12 @@ export class Supervisor {
         if (!running.session)
             return;
         running.parkRequested = true;
+        // `code` is what the dashboard reads to tell «parked» from «your turn»
+        // (#124). The prose stays for runners older than 0.23.0, which the
+        // dashboard still matches on; delete that fallback once the fleet has
+        // moved, not before.
         this.sendEvent(running, 'system_note', {
+            code: 'session_parked',
             text: 'Session parked — the runner switched to another session. Send a message to resume.',
         });
         running.session.stop('session_parked');
@@ -867,6 +877,15 @@ export class Supervisor {
                     });
                     return;
                 }
+                // The retry is spent and the agent is still refused — this is the only
+                // authority on a login the credentials file cannot see through (a
+                // provider-side revocation leaves the file looking perfectly healthy).
+                // The panel is told from here, not from a guess (#121).
+                if (isAuthCode(event.code)) {
+                    const refused = relayAgent(String(descriptor.agent).toLowerCase());
+                    if (refused)
+                        noteAgentAuthFailure(refused);
+                }
                 // Forward the code: the API stores the payload as-is, so the dashboard
                 // can offer "Sign in" instead of a dead error card.
                 this.sendEvent(running, 'error', {
@@ -906,6 +925,13 @@ export class Supervisor {
                 }
                 return;
             case 'message':
+                // The provider answered, so this sign-in works — drop any refusal we
+                // are still holding against it (#121).
+                if (event.role === 'assistant') {
+                    const working = relayAgent(String(descriptor.agent).toLowerCase());
+                    if (working)
+                        clearAgentAuthFailure(working);
+                }
                 this.sendEvent(running, 'message', { role: event.role, text: event.text });
                 return;
             case 'thinking':
@@ -1214,6 +1240,7 @@ export class Supervisor {
         // Parked session: the follow-up message becomes the resume prompt.
         if (!this.ensureCapacity(running.descriptor.id)) {
             this.sendEvent(running, 'system_note', {
+                code: 'runner_busy',
                 text: (this.maxSessions === 1
                     ? 'The runner is busy with another session — this one continues as soon as it finishes its turn.'
                     : `The runner is busy with ${this.maxSessions} other sessions — this one continues as soon as one of them finishes its turn.`) +
@@ -1579,6 +1606,10 @@ export class Supervisor {
                     if (!path)
                         return void reply({ ok: false, error: 'path argument is required' });
                     const validation = await validateWorkspacePath(path);
+                    // Remembered so `devbridge-runner doctor` can check the permissions
+                    // of the real projects without being told which they are.
+                    if (validation.ok)
+                        rememberWorkspacePath(path);
                     return void reply({
                         ok: validation.ok,
                         result: validation,
@@ -2209,6 +2240,9 @@ export class Supervisor {
                     if (!agent || !code)
                         return void reply({ ok: false, error: 'agent and code are required' });
                     const result = await this.authRelay.submitCode(agent, code);
+                    // A fresh credential outranks anything we remember about the old one.
+                    if (result.ok)
+                        clearAgentAuthFailure(agent);
                     return void reply({
                         ok: result.ok,
                         result,

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const RUNNER_VERSION = "0.22.1";
+export declare const RUNNER_VERSION = "0.26.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,3 +1,3 @@
 // Kept in sync with package.json by the release script (manual for now).
-export const RUNNER_VERSION = '0.22.1';
+export const RUNNER_VERSION = '0.26.0';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bridge4dev/runner",
-  "version": "0.22.1",
+  "version": "0.26.0",
   "description": "DevBridge dev runner — connects a dev server to DevBridge and runs agent sessions (Claude Code / Codex)",
   "homepage": "https://bridge4.dev",
   "license": "MIT",