@openape/nest 1.1.1 → 1.1.2

package/dist/index.mjs

@@ -264,6 +264,21 @@ module.exports = {
 }
 `;
 }
+function startScriptPath(agentName) {
+  return join3(AGENTS_DIR, agentName, "start.sh");
+}
+function startScriptContents(agentName) {
+  const ecosystem = ecosystemPath(agentName);
+  const log2 = `/var/log/openape/${agentName}-pm2.log`;
+  return `#!/bin/bash
+# Auto-generated by Pm2Supervisor for agent '${agentName}'.
+set -e
+export HOME="/Users/${agentName}"
+export PM2_HOME="$HOME/.pm2"
+mkdir -p "$(dirname "${log2}")"
+exec pm2 startOrReload ${ecosystem} >> ${log2} 2>&1 < /dev/null
+`;
+}
 var Pm2Supervisor = class {
   constructor(deps) {
     this.deps = deps;
@@ -278,7 +293,7 @@ var Pm2Supervisor = class {
       try {
         await this.startOrReload(agent.name);
       } catch (err) {
-        this.deps.log(`pm2-supervisor: ${agent.name} startOrReload failed: ${err instanceof Error ? err.message.split("\n")[0] : String(err)}`);
+        this.deps.log(`pm2-supervisor: ${agent.name} reconcile errored: ${err instanceof Error ? err.message.split("\n")[0] : String(err)}`);
       } finally {
         this.inflight.delete(agent.name);
       }
@@ -305,17 +320,52 @@ var Pm2Supervisor = class {
     mkdirSync3(dir, { recursive: true, mode: 493 });
     const path = ecosystemPath(agentName);
     writeFileSync3(path, ecosystemContents(this.deps.apesBin, agentName), { mode: 420 });
-    await this.runAsAgent(agentName, ["pm2", "startOrReload", path]);
-    this.deps.log(`pm2-supervisor: ${agentName} bridge (re)started via pm2`);
+    const startPath = startScriptPath(agentName);
+    writeFileSync3(startPath, startScriptContents(agentName), { mode: 493 });
+    void path;
+    try {
+      await this.runAsAgent(agentName, ["bash", startPath]);
+    } catch {
+    }
+    let online = false;
+    try {
+      const { stdout } = await this.runAsAgent(agentName, ["pm2", "jlist"]);
+      const json = stdout.match(/\[\s*\{.*\}\s*\]/s)?.[0];
+      if (json) {
+        const list = JSON.parse(json);
+        online = list.some((p) => p.name === pm2AppName(agentName) && p.pm2_env?.status === "online");
+      }
+    } catch {
+    }
+    if (online) {
+      this.deps.log(`pm2-supervisor: ${agentName} bridge online (pm2)`);
+    } else {
+      this.deps.log(`pm2-supervisor: ${agentName} bridge NOT online \u2014 see /var/log/openape/${agentName}-pm2.log`);
+    }
   }
   /** Run a pm2 subcommand AS the agent — escapes-helper does the
-   *  setuid switch, then exec's pm2 in the agent's uid. */
+   *  setuid switch, then exec's pm2 in the agent's uid.
+   *
+   *  cwd: the agent process inherits cwd from the spawning Nest
+   *  daemon, whose cwd is /var/openape/nest (mode 750, no access for
+   *  other uids). Without setting cwd to a world-readable dir, the
+   *  child's first `process.cwd()` call (which Node does internally
+   *  during module loading) throws EACCES. /tmp is the most portable
+   *  always-writable location.
+   */
   async runAsAgent(agentName, args) {
-    return execFileAsync2(
-      this.deps.apesBin,
-      ["run", "--as", agentName, "--wait", "--", ...args],
-      { maxBuffer: 1024 * 1024, env: process.env, timeout: 6e4 }
-    );
+    try {
+      return await execFileAsync2(
+        this.deps.apesBin,
+        ["run", "--as", agentName, "--wait", "--", ...args],
+        { maxBuffer: 1024 * 1024, env: process.env, timeout: 6e4, cwd: "/tmp" }
+      );
+    } catch (err) {
+      const e = err;
+      const detail = (e.stderr ?? "").trim().split("\n").slice(-3).join(" / ");
+      const stdoutDetail = (e.stdout ?? "").trim().split("\n").slice(-2).join(" / ");
+      throw new Error(`${e.message?.split("\n")[0] ?? "execFile failed"} | stderr: ${detail || "<empty>"} | stdout: ${stdoutDetail || "<empty>"}`);
+    }
   }
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openape/nest",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "description": "OpenApe Nest — local control-plane daemon that supervises agent processes on this computer. Talks to troop SP for ownership state, spawns/destroys agents via DDISA always-grants, supervises chat-bridge children (replacing per-agent launchd plists).",
   "type": "module",
   "license": "MIT",
@@ -17,8 +17,8 @@
   },
   "dependencies": {
     "ofetch": "^1.4.1",
-    "@openape/core": "0.16.0",
-    "@openape/cli-auth": "0.4.0"
+    "@openape/cli-auth": "0.4.0",
+    "@openape/core": "0.16.0"
   },
   "devDependencies": {
     "@antfu/eslint-config": "^7.6.1",