@quolu/lattice 0.12.27 → 0.12.29

package/README.md

@@ -3,6 +3,14 @@
 Latticeは、codebaseの境界を観測・変換し、multi-agent開発の並列TODO graphを生成する
 schedulability compilerです。
 
+## 開発工場での位置づけ
+
+Latticeは[dotagents開発工場](https://github.com/kitepon-rgb/dotagents)が管理する
+自作コア10製品の一つです。本repoはplan／ToDo／run store、sensor、schema、migration、
+release、diagnosticsを所有し、dotagentsは製品横断の工程利用・導入・host統合を所有します。
+廃止済みの前身sensorは独立製品として配線せず、Lattice sensorだけを現役面とします。
+MarkItDownは別区分の第三者CLIです。
+
 現在の工程状態と完了証拠の正本は、このrepoのLattice storeです。文書の役割と現行導線は
 [docs/README.md](docs/README.md)、製品思想は[PLAN.md](PLAN.md)、公開contractは
 [docs/00_product-contract.md](docs/00_product-contract.md)を参照してください。

package/docs/bridge-setup.md

@@ -33,6 +33,18 @@ fileを除去し、JSON結果の`recovery`へ処置を明示する。その後
 自動化・隔離testではabsoluteな`LATTICE_CONFIG_DIR`で設定rootを変更できる。無効な設定、低いport、
 使用中の明示port、危険なrequest target、到達不能upstreamはsilent fallbackせずtyped errorを返す。
 
+## listen IPがDHCPで動く場合
+
+設定したlisten IPがホストから消えると、古いsocketは死んだアドレスへ取り残され、LANから到達できなくなる。
+daemonは各reconcileで実効アドレスを解決し直し、同一subnet（IPv4 /24、IPv6 /64）に生きたアドレスがあれば
+そこへbindし直す。VPNや別NICなど異なるnetworkのアドレスは採用せず、候補が無ければ
+`BRIDGE_LISTEN_ADDRESS_ABSENT`で公開socketをfail-closedにする。再bind先は許可Hostへ自動で加わる。
+
+`LATTICE_BRIDGE_REGISTRAR_SSH_HOST`と`LATTICE_BRIDGE_REGISTRAR_SCRIPT`を両方設定すると、新しいbindingを
+張るたびに`ssh <host> <script> <port>`でreverse proxy hostへ自己登録する。アドレスは送らず、remote側が
+ssh送信元から決めるため、各hostは自分自身しか登録できない。登録の失敗はbridgeを落とさずstderrへ
+typedに報告する。この配線が無いと、Caddy等が持つリテラルはlease変更のたびに黙って陳腐化する。
+
 ## Docker Caddy／Cloudflare Tunnelへ接続する
 
 bridgeを有効化したMacとreverse proxy hostの間で、まず許可Hostを付けたLAN到達を確認する。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quolu/lattice",
-  "version": "0.12.27",
+  "version": "0.12.29",
   "description": "Lattice — phase-aware TODO graph compiler and conflict-aware orchestration runtime",
   "type": "module",
   "license": "MIT",

package/src/bridge-server.mjs

@@ -308,6 +308,7 @@ export function bridgeRuntimeController({
   env = process.env, instanceToken = null,
   register = registerBridgeUpstream,
   report = (line) => process.stderr.write(`${line}\n`),
+  readInterfaces = () => networkInterfaces(),
 } = {}) {
   let active = null;
   let fingerprint = null;
@@ -329,23 +330,36 @@ export function bridgeRuntimeController({
     async reconcile() {
       const config = await readBridgeConfig({ env });
       const next = config === null || !config.enabled ? null : JSON.stringify(config);
-      if (next === fingerprint) return active;
+      // The config is not the only thing that can change under a live binding.
+      // A DHCP lease change removes the bound address from the host without
+      // touching a byte of config, and the socket lingers on an address nothing
+      // can route to. Resolve the effective address on every pass, from the
+      // interfaces as they are now, so the binding follows the host rather than
+      // only the file. One snapshot serves both the comparison and the bind, so
+      // a lease that changes mid-reconcile cannot land them on different
+      // addresses.
+      const interfaces = next === null ? null : readInterfaces();
+      const effective = next === null ? null
+        : resolveBridgeListenAddress({ configured: config.listen.address, interfaces }).effective;
+      if (next === fingerprint && (active === null || active.address === effective)) return active;
       if (next === null) {
         await active?.close();
         active = null;
         fingerprint = null;
         return null;
       }
-      // Compare against the CONFIGURED address: a rebound binding still serves
-      // the same configuration, and comparing the effective address would tear
-      // the server down and rebuild it on every reconcile.
+      // The binding is reused while it still serves the same configuration AND
+      // still sits on the address that configuration resolves to today. The
+      // effective address is stable for an unchanged host, so this compares
+      // equal on every quiet pass and only forces a rebind when the ground has
+      // actually moved.
       if (active !== null && active.configured_address === config.listen.address
-        && active.port === config.listen.port) {
+        && active.port === config.listen.port && active.address === effective) {
         active.updateConfig(config);
         fingerprint = next;
         return active;
       }
-      const replacement = await startBridgeServer({ config, env, instanceToken });
+      const replacement = await startBridgeServer({ config, env, instanceToken, interfaces });
       const previous = active;
       active = replacement;
       fingerprint = next;

package/src/todo-store.mjs

@@ -3143,6 +3143,8 @@ export async function applyTodoRevision(options = {}) {
         journal_ref: journalRef, snapshot_ref: snapshotRef,
         topology_digest: revision.desired_plan.topology_digest,
         journal_head_digest: genesis.event_digest,
+        ...(currentManifest.schema === 'lattice.todo_manifest.v2'
+          ? { active_revision_digest: revision.revision_digest } : {}),
       });
       currentManifest.manifest_digest = todoSelfDigest(currentManifest, 'manifest_digest');
       await atomicWrite(path.resolve(repoRoot, MANIFEST_REF), canonicalLine(currentManifest));