@lifeaitools/clauth 1.30.16 → 1.30.17

package/cli/supervisor-registry.js

@@ -494,20 +494,33 @@ export function runSurfaceAction(id, action, actor = "localhost") {
   if (!command || command.length === 0) {
     return operation(action, { surface_id: id }, surface, { ok: false, state: "command_missing" }, actor);
   }
-  const [cmd, ...args] = command;
-  const result = spawnSync(cmd, args, {
-    cwd: surface.cwd || undefined,
-    env: { ...process.env, CLAUTH_PM2_HOME: getClauthPm2Home(), PM2_HOME: getClauthPm2Home() },
-    windowsHide: true,
-    encoding: "utf8",
-    timeout: Number(surface.timeoutMs || 30000),
-  });
+  const execute = (selectedCommand) => {
+    const [cmd, ...args] = selectedCommand;
+    return spawnSync(cmd, args, {
+      cwd: surface.cwd || undefined,
+      env: { ...process.env, CLAUTH_PM2_HOME: getClauthPm2Home(), PM2_HOME: getClauthPm2Home() },
+      windowsHide: true,
+      encoding: "utf8",
+      timeout: Number(surface.timeoutMs || 30000),
+    });
+  };
+  let result = execute(command);
+  let fallbackUsed = false;
+  // PM2 restart returns non-zero when the process was deleted. Reconcile is
+  // allowed to fall back to the declared start command; explicit restart keeps
+  // its strict failure semantics for operator-requested actions.
+  if (action === "reconcile" && result.status !== 0 && Array.isArray(surface.start) && surface.start.length > 0 && command !== surface.start) {
+    const restartStatus = result.status;
+    result = execute(surface.start);
+    fallbackUsed = true;
+    result.stderr = `restart exited ${restartStatus}; start fallback attempted\n${result.stderr || ""}`;
+  }
   return operation(action, { surface_id: id }, surface, {
     ok: result.status === 0,
     state: result.status === 0 ? "operation_completed" : "operation_failed",
     status: result.status,
     stderr: result.stderr?.slice(0, 2000),
-    evidence: [`CLAUTH_PM2_HOME=${getClauthPm2Home()}`],
+    evidence: [`CLAUTH_PM2_HOME=${getClauthPm2Home()}`, ...(fallbackUsed ? ["reconcile_start_fallback=true"] : [])],
   }, actor);
 }
 

package/cli/supervisor-registry.test.js

@@ -174,6 +174,29 @@ test("surface actions use dedicated clauth PM2 home and keep CodeFlow observe-on
   assert.equal(supervisorHealth().surfaces, 2);
 }));
 
+test("reconcile falls back to the declared start command when restart reports a missing process", () => withTempSupervisor((root) => {
+  const managed = path.join(root, "managed");
+  process.env.CLAUTH_MANAGED_PLUGIN_ROOTS = managed;
+  process.env.CLAUTH_USER_PLUGIN_ROOTS = path.join(root, "user");
+  writePlugin(root, "managed", "fallback-demo", baseManifest("fallback-demo", {
+    core: true,
+    enable_default: true,
+    surfaces: [{
+      id: "primary",
+      destination: "local/clauth/pm2",
+      lifecycle_owner: "clauth",
+      port: 39114,
+      health: "/health",
+      start: [process.execPath, "--version"],
+      restart: [process.execPath, "-e", "process.exit(1)"],
+    }],
+  }));
+  discoverPlugins();
+  const receipt = runSurfaceAction("fallback-demo:primary", "reconcile");
+  assert.equal(receipt.resulting_state.ok, true);
+  assert.equal(receipt.resulting_state.evidence.includes("reconcile_start_fallback=true"), true);
+}));
+
 test("surface promote and rollback never fall through to restart commands", () => withTempSupervisor((root) => {
   const managed = path.join(root, "managed");
   process.env.CLAUTH_MANAGED_PLUGIN_ROOTS = managed;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/clauth",
-  "version": "1.30.16",
+  "version": "1.30.17",
   "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
   "type": "module",
   "bin": {