@humwick/runner 0.130.4 → 0.130.6

package/src/index.ts

@@ -32,7 +32,7 @@ import { parseRunnerCliArgs, runnerHelp } from "./spawn-input";
 import { VERSION } from "./version";
 import type { AgentProfile, WorkspaceMetadata } from "@humwick/sdk";
 import { exitRunner } from "./runner-exit";
-import { codexConfigOverrides, errMessage, formatRunnerExitLine, isRecord, isRelayInjectionCategory, normalizeAgentLifecycle, RELAY_TOKEN_HEADER, providerArgsSelectStreamJson, startArtifactCheckoutLease } from "@humwick/sdk";
+import { codexConfigOverrides, errMessage, formatRunnerExitLine, isRecord, isRelayInjectionCategory, normalizeAgentLifecycle, HUMWICK_TOKEN_HEADER, providerArgsSelectStreamJson, startArtifactCheckoutLease } from "@humwick/sdk";
 import { supportedLaunchModesForProvider } from "@humwick/providers";
 import { installUnhandledRejectionGuard } from "./async-guard";
 import type { RunnerRelayInjectionEvent } from "./relay-injection-events";
@@ -40,14 +40,14 @@ import { enableRunnerSubreaper } from "./subreaper";
 
 export async function main(argv = process.argv): Promise<void> {
   disableCoreDumps();
-  // #2443 — last-resort observability, installed before anything can schedule work. Two managed
+  // last-resort observability, installed before anything can schedule work. Two managed
   // OpenCode sessions died with a clean `exit(1)` and an EMPTY stderr capture: the actual cause
   // (a terminal provider failure resolving through onProviderExit, see runner-core.ts) turned out
-  // not to be a crash at all, but this guard closes the still-real, long-documented gap (#1665)
+  // not to be a crash at all, but this guard closes the still-real, long-documented gap
   // for any genuine unhandled rejection or uncaught exception elsewhere in the runner — neither
   // currently leaves a trace beyond "exited after Ns". `unhandledRejection` mirrors the
   // orchestrator's non-fatal "log and survive" backstop (see the SDK function's doc): nothing
-  // here respawns a dead runner (#1618), so surviving beats dying silently. `uncaughtException`
+  // here respawns a dead runner, so surviving beats dying silently. `uncaughtException`
   // stays fatal (a synchronous throw can leave a half-applied mutation behind — same ruling as
   // the orchestrator) but is logged deterministically via multiple paths first, so a crash always
   // leaves a stack trace regardless of whether Bun's own default reporter would have shown one.
@@ -74,7 +74,7 @@ export async function main(argv = process.argv): Promise<void> {
   // Started only once we know this is a real launch, not --version/--help: the lease holds an
   // un-refed setInterval alive (see sdk/src/artifact-checkout-gc.ts), so starting it earlier
   // stops --version/--help from ever exiting on a host whose runtime is a checkout symlink
-  // (e.g. the wbox self-hosted runner) — the process hangs until externally killed. #2122
+  // (e.g. the worker-a self-hosted runner) — the process hangs until externally killed.
   startArtifactCheckoutLease();
   const globalConfig = loadGlobalConfig();
   const relayUrl = opts.relayUrl ?? globalConfig.relayUrl;
@@ -87,7 +87,7 @@ export async function main(argv = process.argv): Promise<void> {
     : undefined);
   const adapter = createProviderAdapter(opts.provider, opts.providerArgs, launchMode);
   // Resolved BEFORE the interactive token exchange so the mint can stamp the posture into the signed
-  // constraints (#2392): `agent.meta.approvalMode` is authz-relevant and therefore stripped at
+  // constraints: `agent.meta.approvalMode` is authz-relevant and therefore stripped at
   // registration unless the token can prove it (src/authz-meta-keys.ts).
   const approvalMode = opts.approvalMode
     ?? detectApprovalModeFromArgs(opts.provider, providerConfig.defaultArgs, opts.providerArgs)
@@ -119,10 +119,10 @@ export async function main(argv = process.argv): Promise<void> {
     provider: opts.provider,
     model: opts.model,
     effort: opts.effort,
-    // #2595 — effective-catalog window resolved server-side; the OpenCode adapter prefers it
+    // effective-catalog window resolved server-side; the OpenCode adapter prefers it
     // over its static manifest so override-defined models (muse-spark) report context usage.
     ...(opts.contextWindowTokens !== undefined ? { contextWindowTokens: opts.contextWindowTokens } : {}),
-    // #2599 — the full record (protocol ≥ 2); the adapter applies payload > manifest precedence.
+    // the full record (protocol ≥ 2); the adapter applies payload > manifest precedence.
     ...(opts.modelRecord ? { modelRecord: opts.modelRecord } : {}),
     runnerId: id,
     instanceId: crypto.randomUUID(),
@@ -161,7 +161,7 @@ export async function main(argv = process.argv): Promise<void> {
     providerConfig,
     ...(launchConfig ? { launchConfig } : {}),
     adapter,
-    // #2443 — printed via console.error (captured into the systemd-redirected stdout/stderr log
+    // printed via console.error (captured into the systemd-redirected stdout/stderr log
     // the orchestrator tails on exit, see logFileDiagnostics/readLogTail) BEFORE process.exit runs
     // below, so a terminal-provider-failure exit reads "model-unavailable: APIError 404 ..." in
     // that log instead of leaving it empty.
@@ -173,7 +173,7 @@ export async function main(argv = process.argv): Promise<void> {
   await runner.run();
 
   const code = await Promise.race([exitPromise, signalPromise(runner)]);
-  // #2619 — the structured exit record is written before stop() can stall: the orchestrator parses
+  // the structured exit record is written before stop can stall: the orchestrator parses
   // it back from the log tail when systemd has already collected the unit. exitRunner then exits.
   const reason = exitReason ?? (code === 130 || code === 143 ? `signal ${code === 130 ? "SIGINT" : "SIGTERM"}` : undefined);
   console.error(formatRunnerExitLine(code, reason));
@@ -202,7 +202,7 @@ export async function resolveRunnerToken(input: {
   runnerId: string;
   agentId: string;
   label?: string;
-  /** #2392 — the posture this interactive session actually launches with. Sent so the relay can stamp
+  /** the posture this interactive session actually launches with. Sent so the relay can stamp
    * it into the signed constraints; without it the session's `meta.approvalMode` is unprovable and
    * gets stripped at registration, silently downgrading spawned children to `guarded`. */
   approvalMode?: string;
@@ -227,7 +227,7 @@ export async function resolveRunnerToken(input: {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
-        [RELAY_TOKEN_HEADER]: input.token,
+        [HUMWICK_TOKEN_HEADER]: input.token,
       },
       body: JSON.stringify({
         provider: input.provider,
@@ -243,9 +243,9 @@ export async function resolveRunnerToken(input: {
     const body = await res.json().catch(() => null) as { token?: string; record?: { jti?: string; profileId?: string; expiresAt?: number }; error?: string } | null;
     if (res.ok && body?.token) return { token: body.token, jti: body.record?.jti, profileId: body.record?.profileId ?? "provider-interactive", expiresAt: body.record?.expiresAt };
     const detail = body?.error ? `: ${body.error}` : "";
-    console.warn(`[agent-relay] interactive scoped-token exchange failed (${res.status}${detail}); continuing with existing token. Root-token runtime fallback is deprecated.`);
+    console.warn(`[humwick] interactive scoped-token exchange failed (${res.status}${detail}); continuing with existing token. Root-token runtime fallback is deprecated.`);
   } catch (error) {
-    console.warn(`[agent-relay] interactive scoped-token exchange failed (${errMessage(error)}); continuing with existing token. Root-token runtime fallback is deprecated.`);
+    console.warn(`[humwick] interactive scoped-token exchange failed (${errMessage(error)}); continuing with existing token. Root-token runtime fallback is deprecated.`);
   }
   return { token: input.token, rootFallback: true };
 }
@@ -334,7 +334,7 @@ function parseRelayInjectionEventsEnv(raw: string | undefined): RunnerRelayInjec
   }
 }
 
-// #2414 — arm the `shuttingDown` restart-suppression latch synchronously, in the signal handler itself, BEFORE resolving this
+// arm the `shuttingDown` restart-suppression latch synchronously, in the signal handler itself, BEFORE resolving this
 // promise (which only unblocks `main()`'s `await Promise.race(...)`, itself an extra tick before
 // `await runner.stop()` ever runs). See `markShuttingDown`'s doc comment in runner-core.ts for the
 // race this closes: a direct-child provider (Codex/OpenCode) dying from the SAME process-group
@@ -381,7 +381,7 @@ export function runCli(provider?: string): void {
     // A fatal startup failure (e.g. the runner could not register with the relay within the
     // deadline) must exit non-zero, not hang or swallow — the orchestrator's exit detection
     // then reports it and the spawn-parent is notified instead of waiting on a silent zombie.
-    console.error(`[agent-relay] runner fatal: ${errMessage(error)}`);
+    console.error(`[humwick] runner fatal: ${errMessage(error)}`);
     exitRunner(1, `runner fatal: ${errMessage(error)}`);
   });
 }