@piagent/platform 1.14.0 → 1.15.1

package/packages/piagent-webui/dist/client/index.html

@@ -7,7 +7,7 @@
     <meta name="csp-nonce" content="__PIAGENT_CSP_NONCE__" />
     <meta name="piagent-webui-mode" content="__PIAGENT_WEBUI_MODE__" />
     <title>Piagent WebUI</title>
-    <script type="module" crossorigin src="/assets/index-BBEa7Ger.js"></script>
+    <script type="module" crossorigin src="/assets/index-bE2DKmc1.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-Z91z6SlN.css">
   </head>
   <body>

package/packages/piagent-webui/gateway/pi-host.ts

@@ -28,9 +28,23 @@ export function installedPiHostRoot(): string {
   } catch {
     // The operator installation is normally global.
   }
+  const windows = process.platform === "win32";
+  if (windows) {
+    // npm's global prefix is configurable (CI commonly uses C:\npm\prefix).
+    // Read the package beside each PATH entry directly: where.exe may be
+    // unavailable in a restricted launcher, and an earlier stale shim must
+    // not hide a valid installation later on PATH. Windows env keys ignore case.
+    const environment = Object.fromEntries(Object.entries(process.env).map(([key, value]) => [key.toLowerCase(), value]));
+    const prefixes = [...(environment.path ?? "").split(";"), environment.npm_config_prefix];
+    for (const value of prefixes) {
+      const prefix = value?.trim().replace(/^"(.*)"$/, "$1");
+      if (!prefix || !path.isAbsolute(prefix)) continue;
+      const found = packageRootFrom(path.join(prefix, "node_modules", "@earendil-works", "pi-coding-agent", "package.json"));
+      if (found) return found;
+    }
+  }
   try {
-    const windows = process.platform === "win32";
-    const executable = execFileSync(windows ? "where" : "which", ["pi"], { encoding: "utf8", timeout: 2_000, stdio: ["ignore", "pipe", "ignore"] }).trim().split(/\r?\n/)[0];
+    const executable = execFileSync(windows ? "where.exe" : "which", ["pi"], { encoding: "utf8", timeout: 2_000, stdio: ["ignore", "pipe", "ignore"] }).trim().split(/\r?\n/)[0];
     // npm on Windows puts the pi.cmd shim in the global prefix and the package
     // in node_modules beside it.
     const found = packageRootFrom(fs.realpathSync(executable))

package/packages/piagent-webui/gateway/session-command-controller.ts

@@ -1,4 +1,5 @@
 import { randomBytes } from "node:crypto";
+import { parseFailure } from "../../piagent-core/runtime/managed-failure.mjs";
 
 import type { Catalog, SessionRow } from "../contracts/generated/session-catalog-v1.ts";
 import type { Receipt } from "../contracts/generated/session-command-v1.ts";
@@ -279,6 +280,16 @@ export class SessionCommandController {
         try { if (noDispatchEffect) attachmentReservation.release(); else attachmentReservation.commit(); }
         catch { /* an attempted dispatch with an unprovable reservation remains uncertain */ }
       }
+      // The company runtime of a new or reopened conversation did not open
+      // (key, harness, Agent Watch helper): nothing was sent. Say why, by
+      // its kind, rather than "resyncing" or a bare "could not restart".
+      const company = ["session.create", "session.acquire"].includes(command.action) && /^managed-[a-z]/.test(message) ? parseFailure(message) : null;
+      if (company && company.code !== "managed-request-failed") {
+        const receipt = this.#rejected(command, after, afterRow, "unavailable", `company-${company.kind}`);
+        try { this.#store.settle(command, receipt, this.#now()); } catch { /* intent remains uncertain */ }
+        if (command.action === "session.create" && afterRow) this.#events.publish("session.changed", { catalogRevision: after.catalogRevision, session: afterRow });
+        return receipt;
+      }
       const code = /recovery/.test(message) ? "recovery-required"
         : /(owner-conflict|operation-conflict|runtime-busy)/.test(message) ? "owner-conflict"
           : noDispatchEffect || command.action === "session.send" && !sendAttempted ? "unavailable" : "effect-unknown";

package/packages/piagent-webui/gateway/session-runtime-supervisor.ts

@@ -133,7 +133,7 @@ export class SessionRuntimeSupervisor {
     const runtimeInstanceRef = `runtime_${randomBytes(24).toString("base64url")}`;
     const prior = this.#leases.inspect(sessionRef);
     if (prior.state === "gateway-owned" || prior.state === "terminal-owned" || prior.state === "recovery-required") {
-      try { this.#leases.releaseDeadOwnerForExplicitRecovery(sessionRef); } catch { /* live or unprovable owners stay authoritative */ }
+      try { this.#leases.releaseDeadOwnerForExplicitRecovery(sessionRef, new Date(), this.#gatewayInstanceRef); } catch { /* live or unprovable owners stay authoritative */ }
     }
     const lease = this.#leases.acquire(sessionRef, this.#gatewayInstanceRef, runtimeInstanceRef);
     try {
@@ -161,7 +161,7 @@ export class SessionRuntimeSupervisor {
     const active = this.#active.get(sessionRef);
     if (!active) {
       const current = this.#leases.inspect(sessionRef);
-      if (current.state === "released") return current;
+      if (current.state === "released" || current.state === "recovery-required" && current.gatewayInstanceRef === this.#gatewayInstanceRef) return this.#leases.releaseOwnRecovery(sessionRef, this.#gatewayInstanceRef);
       throw new Error(current.state === "recovery-required" ? "session-recovery-required" : "session-owner-conflict");
     }
     if (active.operationRef) throw new Error("session-runtime-busy");

package/packages/piagent-webui/ownership/session-lease-store.ts

@@ -253,8 +253,10 @@ export class SessionLeaseStore {
     return this.#acquireOwner(sessionRef, gatewayInstanceRef, runtimeInstanceRef, now);
   }
 
-  releaseDeadOwnerForExplicitRecovery(sessionRef: string, now = new Date()): SessionLeaseSnapshot {
+  // `ownGateway`: the calling Gateway, whose own recovery it may release.
+  releaseDeadOwnerForExplicitRecovery(sessionRef: string, now = new Date(), ownGateway?: string): SessionLeaseSnapshot {
     if (!Number.isFinite(now.getTime())) throw new Error("session-lease-input-invalid");
+    if (ownGateway && this.inspect(sessionRef).state === "recovery-required" && this.inspect(sessionRef).gatewayInstanceRef === ownGateway) return this.releaseOwnRecovery(sessionRef, ownGateway, now);
     return this.#withMutationLock(sessionRef, () => {
       const current = this.inspect(sessionRef);
       const terminalOwner = current.state === "terminal-owned"
@@ -329,6 +331,23 @@ export class SessionLeaseStore {
     });
   }
 
+  // A Gateway whose own runtime failed to open or to close left the lease in
+  // recovery under its own name. Nothing of it runs (the Gateway knows its
+  // live runtimes), so that Gateway may release it: archiving or reopening
+  // must not wait for the Gateway itself to exit. Another owner's recovery
+  // still needs proof that the owner is gone.
+  releaseOwnRecovery(sessionRef: string, gatewayInstanceRef: string, now = new Date()): SessionLeaseSnapshot {
+    if (!validRef(gatewayInstanceRef) || gatewayInstanceRef.startsWith(TERMINAL_OWNER_PREFIX) || !Number.isFinite(now.getTime())) throw new Error("session-lease-input-invalid");
+    return this.#withMutationLock(sessionRef, () => {
+      const current = this.inspect(sessionRef);
+      if (current.state === "released") return current;
+      if (current.state !== "recovery-required" || current.gatewayInstanceRef !== gatewayInstanceRef) throw new Error("session-recovery-required");
+      this.#append(sessionRef, { recordedAt: now.toISOString(), sessionRef, event: "released", ownerEpoch: current.ownerEpoch!,
+        gatewayInstanceRef, runtimeInstanceRef: current.runtimeInstanceRef!, reasonCode: null });
+      return this.inspect(sessionRef);
+    });
+  }
+
   requireRecovery(sessionRef: string, ownerEpoch: string, gatewayInstanceRef: string, runtimeInstanceRef: string,
     reasonCode: string, now = new Date()): SessionLeaseSnapshot {
     if (!validRef(reasonCode)) throw new Error("session-lease-reason-invalid");

package/scripts/piagent-cli.mjs

@@ -51,6 +51,10 @@ if (invokedAs === "piagent") {
   } else if (subcommand === "select-verification") {
     script = "scripts/select-independent-verification.mjs";
     forwardedArgs = forwardedArgs.slice(1);
+  } else if (subcommand && Object.hasOwn(scriptByCommand, `piagent-${subcommand}`)) {
+    // `piagent doctor` is `piagent-doctor`: members type it both ways.
+    script = scriptByCommand[`piagent-${subcommand}`];
+    forwardedArgs = forwardedArgs.slice(1);
   } else if ([undefined, "help", "--help", "-h"].includes(subcommand)) {
     // Subcommands are listed, their flags are not. Restating them here meant a
     // second copy that drifts: this line still advertised the dashboard without
@@ -70,7 +74,7 @@ if (invokedAs === "piagent") {
 }
 
 if (!script) {
-  console.error(`Unknown Pi Agent command: ${invokedAs || "(unknown)"}`);
+  console.error(`Unknown Pi Agent command: ${[invokedAs || "(unknown)", invokedAs === "piagent" ? forwardedArgs[0] : ""].filter(Boolean).join(" ")}`);
   console.error(`Expected one of: ${Object.keys(scriptByCommand).sort().join(", ")}`);
   process.exit(2);
 }

package/scripts/update-global.mjs

@@ -423,7 +423,8 @@ function main() {
     fail(`${HELPER_PACKAGE}@${targetHelper} does not pin an exact ${HOST_PACKAGE} version, so the host cannot be updated safely.`);
   }
 
-  const helperNeedsChange = options.force || currentHelper !== targetHelper;
+  // npm exec is temporary even when its version already matches the target.
+  const helperNeedsChange = options.force || currentHelper !== targetHelper || isNpxCacheRoot(platformRoot);
   const hostNeedsChange = options.host && (options.force || currentHost !== targetHost);
 
   console.log("Pi Agent Platform update");
@@ -475,6 +476,11 @@ function main() {
     }
   }
 
+  // Refuse an impossible package installation before replacing either global.
+  if (options.package && !options.host && effectiveHost !== targetHost) {
+    fail(`--no-host cannot install this Pi package: active Pi is ${effectiveHost ?? "missing"}, but v${targetHelper} requires ${targetHost}. Rerun without --no-host.`);
+  }
+
   // Host first: piagent-install refuses to run against a host that does not match
   // the version its package.json pins, so a helper installed ahead of the host
   // would fail on its very next step.