@ours.network/fleet 1.2.0-nightly.69 → 1.2.0-nightly.70

package/dist/agent-ours/mcp-endpoint.d.ts

@@ -1,5 +1,6 @@
 import type { FileDeliveryInput, DeliveredFile } from '../file-delivery/types.js';
 import type { ToolRequestExtra } from '@ours.network/mcp/dist/types/mcp/tool.js';
+import { type Server } from 'node:net';
 import type { ApplicationIdentityStore } from '@ours.network/mcp/application-identities';
 import type { OursClient } from '@ours.network/sdk/client';
 import { FileCallbacks } from './file-rpc.js';
@@ -17,6 +18,17 @@ export interface EndpointOptions {
     /** Fleet self-reminders, bound later by the runner; tools refuse until then. */
     reminders?: () => ReminderToolBackend | undefined;
 }
+/**
+ * Listen on the bridge socket. A close unlinks it, but a predecessor that ended
+ * abruptly leaves the file behind, and every later start of the same generation
+ * then fails with EADDRINUSE until the role is held down. Only a provably dead
+ * socket is removed, once, and only if the path still names that same file;
+ * a live listener, a symlink, any other file, an inconclusive probe or a path
+ * replaced since the probe still fails as before. `afterProbe` is a test seam.
+ */
+export declare function listenOnBridgeSocket(server: Server, path: string, hooks?: {
+    afterProbe?: () => Promise<void>;
+}): Promise<void>;
 export declare function startMcpEndpoint(options: EndpointOptions): Promise<{
     close(): Promise<void>;
 }>;

package/dist/agent-ours/mcp-endpoint.js

@@ -1,12 +1,80 @@
 import * as managedMcp from '@ours.network/mcp/server';
-import { createServer } from 'node:net';
-import { chmod, unlink } from 'node:fs/promises';
+import { connect, createServer } from 'node:net';
+import { chmod, lstat, unlink } from 'node:fs/promises';
 import { timingSafeEqual } from 'node:crypto';
 import { createManagedOursMcpServer } from '@ours.network/mcp/server';
 import { JSONRPCMessageSchema } from '@modelcontextprotocol/sdk/types.js';
 import { FileCallbacks } from './file-rpc.js';
 import { Wire } from './wire.js';
 import { registerReminderTools } from '../reminders/tools.js';
+const ORPHAN_PROBE_TIMEOUT_MS = 1_000;
+function listenOnce(server, path) {
+    return new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(path, () => {
+            server.removeListener('error', reject);
+            resolve();
+        });
+    });
+}
+const sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino && a.ctimeNs === b.ctimeNs && a.birthtimeNs === b.birthtimeNs;
+/**
+ * The identity of a socket file, never a symlink or other file, that refuses
+ * connections; undefined when it is not provably dead.
+ */
+async function orphanSocket(path) {
+    let found;
+    try {
+        found = await lstat(path, { bigint: true });
+    }
+    catch {
+        return undefined;
+    }
+    if (!found.isSocket())
+        return undefined;
+    const dead = await new Promise(resolve => {
+        const probe = connect(path);
+        const done = (orphan) => { clearTimeout(timer); probe.destroy(); resolve(orphan); };
+        const timer = setTimeout(() => done(false), ORPHAN_PROBE_TIMEOUT_MS);
+        probe.once('connect', () => done(false));
+        probe.once('error', error => done(error.code === 'ECONNREFUSED'));
+    });
+    return dead ? { dev: found.dev, ino: found.ino, ctimeNs: found.ctimeNs, birthtimeNs: found.birthtimeNs } : undefined;
+}
+/**
+ * Listen on the bridge socket. A close unlinks it, but a predecessor that ended
+ * abruptly leaves the file behind, and every later start of the same generation
+ * then fails with EADDRINUSE until the role is held down. Only a provably dead
+ * socket is removed, once, and only if the path still names that same file;
+ * a live listener, a symlink, any other file, an inconclusive probe or a path
+ * replaced since the probe still fails as before. `afterProbe` is a test seam.
+ */
+export async function listenOnBridgeSocket(server, path, hooks = {}) {
+    let original;
+    try {
+        return await listenOnce(server, path);
+    }
+    catch (error) {
+        original = error;
+        if (error.code !== 'EADDRINUSE')
+            throw error;
+    }
+    const orphan = await orphanSocket(path);
+    if (!orphan)
+        throw original;
+    await hooks.afterProbe?.();
+    let now;
+    try {
+        now = await lstat(path, { bigint: true });
+    }
+    catch {
+        throw original;
+    }
+    if (!now.isSocket() || !sameFile(now, orphan))
+        throw original;
+    await unlink(path);
+    await listenOnce(server, path);
+}
 export async function startMcpEndpoint(options) {
     // Every managed Agent offers current-chat delivery, so a package without the contract is a broken install, not a quiet downgrade.
     if (options.currentChatFile && managedMcp.MANAGED_FILE_DELIVERY_VERSION !== 1)
@@ -100,13 +168,7 @@ export async function startMcpEndpoint(options) {
             transport.onmessage?.(message);
         };
     });
-    await new Promise((resolve, reject) => {
-        server.once('error', reject);
-        server.listen(options.socket, () => {
-            server.removeListener('error', reject);
-            resolve();
-        });
-    });
+    await listenOnBridgeSocket(server, options.socket);
     await chmod(options.socket, 0o600);
     return {
         close: async () => {

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
-  "version": "1.2.0-nightly.69",
-  "buildId": "fd8e44d5cbd1",
-  "commit": "9f7830e8ce959b0ff6f88a95c71262c6ee0b0931",
+  "version": "1.2.0-nightly.70",
+  "buildId": "ca16d5313844",
+  "commit": "16bdad930ad484741ec362a5b1f608d9c5e8706a",
   "dirty": true,
-  "builtAt": "2026-10-16T18:59:33.079Z",
+  "builtAt": "2026-10-16T20:49:37.491Z",
   "capabilities": [
     "service.refresh-v1",
     "managed-cli.codex-reasoning-effort-v1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.2.0-nightly.69",
+  "version": "1.2.0-nightly.70",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",