@proagentstore/cli 0.4.98 → 0.4.99

package/dist/browser-runner/local-apply/reconciliation-runtime.js

@@ -15,9 +15,14 @@ export class LocalApplyReconciliationRuntime {
     deps;
     sessions = new Map();
     now;
+    schedule;
     constructor(deps) {
         this.deps = deps;
         this.now = deps.now ?? (() => Date.now());
+        this.schedule = deps.schedule ?? ((task, delayMs) => {
+            const timer = setTimeout(task, delayMs);
+            return () => clearTimeout(timer);
+        });
     }
     async start(raw) {
         const envelope = parseEnvelope(raw);
@@ -30,6 +35,9 @@ export class LocalApplyReconciliationRuntime {
         const browser = await this.deps.browserFor(envelope.browserProfile, join(this.deps.dataDir, "reconciliation", envelope.reconciliationId));
         const session = { envelope, browser, state: "running", expiresAt: this.now() + TTL_MS };
         this.sessions.set(envelope.reconciliationId, session);
+        // The deadline belongs to the Runner, not to Console polling.  It is installed before
+        // navigation so an abandoned client cannot retain an owned browser/liveWork indefinitely.
+        session.cancelDeadline = this.schedule(() => { void this.expire(session); }, TTL_MS);
         try {
             const page = this.page(session);
             if (!page)
@@ -49,8 +57,10 @@ export class LocalApplyReconciliationRuntime {
             return this.finish(session, { state: "ambiguous", proofKind: "ambiguous_site_history" });
         if (!this.page(session))
             return this.finish(session, { state: "unavailable", proofKind: "authorized_profile_unavailable" });
-        if (session.handoff?.state === "ready" && (session.handoff.expiresAt <= this.now() || !this.deps.takeover || await this.deps.takeover.state(session.handoff.id) !== "ready"))
+        if (session.handoff?.state === "ready" && (session.handoff.expiresAt <= this.now() || !this.deps.takeover || await this.deps.takeover.state(session.handoff.id) !== "ready")) {
             await this.closeHandoff(session, session.handoff.expiresAt <= this.now() ? "expired" : "page_lost");
+            return this.finish(session, { state: "unavailable", proofKind: "authorized_profile_unavailable" });
+        }
         return this.view(session);
     }
     async handoff(raw) {
@@ -80,6 +90,7 @@ export class LocalApplyReconciliationRuntime {
         }
         catch {
             await this.closeHandoff(session, "page_lost");
+            await this.finish(session, { state: "unavailable", proofKind: "authorized_profile_unavailable" });
             throw new RunnerInputError("The reconciliation page is no longer available", 409);
         }
     }
@@ -98,6 +109,7 @@ export class LocalApplyReconciliationRuntime {
         }
         catch {
             await this.closeHandoff(session, "page_lost");
+            await this.finish(session, { state: "unavailable", proofKind: "authorized_profile_unavailable" });
             throw new RunnerInputError("The reconciliation page is no longer available", 409);
         }
     }
@@ -106,12 +118,14 @@ export class LocalApplyReconciliationRuntime {
         return this.inspect(session);
     }
     async end(raw) {
-        const session = this.require(raw);
+        const request = this.handoffRequest(raw);
+        const session = this.require(request);
+        this.assertHandoffBinding(session, request);
+        if (session.handoff?.id !== request.handoffId)
+            throw new RunnerInputError("The reconciliation handoff is closed", 409);
         if (session.handoff?.state === "ready")
             await this.closeHandoff(session, "unavailable");
-        session.state = "running";
-        session.pauseReason = undefined;
-        return this.view(session);
+        return this.finish(session, { state: "ambiguous", proofKind: "ambiguous_site_history" });
     }
     liveWork() { return [...this.sessions.values()].filter((s) => s.state !== "ended").map((s) => `reconciliation:${s.envelope.reconciliationId}`); }
     closeAll() { for (const session of this.sessions.values())
@@ -141,16 +155,29 @@ export class LocalApplyReconciliationRuntime {
         // prose, receipt-like URLs, unauthenticated pages and absent receipts prove nothing.
         return this.finish(session, { state: "ambiguous", proofKind: "ambiguous_site_history" });
     }
+    async expire(session) {
+        if (session.state !== "ended" && session.expiresAt <= this.now())
+            await this.finish(session, { state: "ambiguous", proofKind: "ambiguous_site_history" });
+    }
     async finish(session, result) {
+        if (session.finishing)
+            return session.finishing;
         if (session.state === "ended")
             return this.view(session);
-        if (session.handoff?.state === "ready")
-            await this.closeHandoff(session, "unavailable");
+        // Set terminal state synchronously, before any async teardown.  Concurrent End/timeout/page
+        // loss callers then converge on the same result and liveWork stops advertising ownership.
         session.state = "ended";
         session.pauseReason = undefined;
         session.result = result;
-        await session.browser.stop().catch(() => undefined);
-        return this.view(session);
+        session.cancelDeadline?.();
+        session.cancelDeadline = undefined;
+        session.finishing = (async () => {
+            if (session.handoff?.state === "ready")
+                await this.closeHandoff(session, "unavailable");
+            await session.browser.stop().catch(() => undefined);
+            return this.view(session);
+        })();
+        return session.finishing;
     }
     async closeHandoff(session, reason) {
         if (!session.handoff || session.handoff.state === "closed")
@@ -159,7 +186,10 @@ export class LocalApplyReconciliationRuntime {
         session.handoff.reason = reason;
         await this.deps.takeover?.end(session.handoff.id).catch(() => undefined);
     }
-    closedHandoff(session, id, reason) { session.handoff = { id, expiresAt: this.now(), state: "closed", reason }; return this.view(session); }
+    async closedHandoff(session, id, reason) {
+        session.handoff = { id, expiresAt: this.now(), state: "closed", reason };
+        return this.finish(session, { state: "unavailable", proofKind: "authorized_profile_unavailable" });
+    }
     page(session) { const page = session.browser.handoffPage?.(); return page && !page.isClosed() ? page : null; }
     permitted(session, raw) { try {
         const host = new URL(raw).hostname.toLowerCase();
@@ -191,6 +221,7 @@ export class LocalApplyReconciliationRuntime {
     async liveHandoff(raw) { const request = this.handoffRequest(raw); const session = this.require(request); this.assertHandoffBinding(session, request); if ((session.state !== "paused" && session.state !== "running") || session.handoff?.id !== request.handoffId || session.handoff.state !== "ready")
         throw new RunnerInputError("The reconciliation handoff is closed", 409); if (session.handoff.expiresAt <= this.now()) {
         await this.closeHandoff(session, "expired");
+        await this.finish(session, { state: "ambiguous", proofKind: "ambiguous_site_history" });
         throw new RunnerInputError("The reconciliation handoff is closed", 409);
     } return session; }
     view(session) { const e = session.envelope; return { reconciliationId: e.reconciliationId, runId: e.runId, applicationId: e.applicationId, browserProfile: e.browserProfile, context: "separate_read_only_context", state: session.state, ...(session.pauseReason ? { pauseReason: session.pauseReason } : {}), ...(session.result ? { result: session.result } : {}) }; }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.98",
+  "version": "0.4.99",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",