@ricsam/r5d-worker 0.0.126 → 0.0.128

package/README.md

@@ -52,7 +52,7 @@ Worker labels are mandatory and unique per user. Choose labels that describe hos
 
 `r5d-worker start` keeps a lightweight supervisor process attached to the launching terminal or service. When both r5d CLIs are updated from User Settings, the connected runtime verifies the installed versions, exits with a reload signal, and the supervisor reconnects using the new worker package. Updates only run while the worker has no active commands or shells.
 
-Before every new agent generation (including subagents, queued work that starts a new generation, and resumed sessions), the server requires the connected runtime to be at least the worker release offered in User Settings. This is the server's `packages/VERSION.txt` release, or its configured `MANAGED_DEV_WORKER_PACKAGE_*` override; admission does not query the npm registry. Missing or invalid runtime versions also block starts. The error includes the running and required versions plus the exact update command. Update in User Settings, or install the packages on the worker host and restart `r5d-worker`: a newer package on disk does not update an already connected process. From 0.0.116 onward, a runtime keeps its startup version across reconnections even if the package on disk changes. Existing agent generations are allowed to finish, and connected workers remain available for updates and synchronization. Protocol cutover checks still apply separately when connecting. Publish the matching packages before deploying a server that requires their new version.
+Before every new agent generation (including subagents, queued work that starts a new generation, and resumed sessions), the server requires the connected runtime to be at least the worker release offered in User Settings. This is the server's `packages/VERSION.txt` release, or its configured `R5D_WORKER_PACKAGE_*` override; admission does not query the npm registry. Missing or invalid runtime versions also block starts. The error includes the running and required versions plus the exact update command. Update in User Settings, or install the packages on the worker host and restart `r5d-worker`: a newer package on disk does not update an already connected process. From 0.0.116 onward, a runtime keeps its startup version across reconnections even if the package on disk changes. Existing agent generations are allowed to finish, and connected workers remain available for updates and synchronization. Protocol cutover checks still apply separately when connecting. Publish the matching packages before deploying a server that requires their new version.
 
 The supervisor also reconnects automatically after server rollouts and transient network failures. A brief bounded delay prevents a tight retry loop while the server is unavailable. Pressing Ctrl+C still stops the worker, and agent-managed processes retain their existing in-process recovery path while disconnected. In-process reconnects retain initialized project configurations alongside those processes, so an unchanged checkout can reconnect while a dev server is running. Changed layouts and checkouts that need initialization still wait for active commands to finish.
 

package/dist/cjs/main.cjs

@@ -3014,6 +3014,7 @@ async function executeStreamingCommand(input) {
   let timeout;
   let spawnedProcess;
   let preparationSettled = false;
+  let stagedEnvFiles;
   const settlePreparation = () => {
     if (preparationSettled) return;
     preparationSettled = true;
@@ -3042,7 +3043,13 @@ async function executeStreamingCommand(input) {
     const interactive = input.message.interactive === true;
     const control = input.message.commandClass === "control";
     let argv = input.message.argv;
-    let environment = workerChildProcessEnvironment([githubProcessEnv(), input.message.env ?? {}, targetProcessEnv2]);
+    if (control && input.message.envFiles?.length) throw new Error("Control commands cannot receive secret files");
+    stagedEnvFiles = stagePtyEnvFiles(input.message.envFiles);
+    let environment = workerChildProcessEnvironment([
+      githubProcessEnv(),
+      resolvePtyEnvFileReferences(input.message.env ?? {}, stagedEnvFiles),
+      targetProcessEnv2
+    ]);
     if (control) {
       (0, import_control_command_policy.assertControlCommandArgv)(argv);
       if (interactive) throw new Error("Control commands cannot be interactive");
@@ -3177,6 +3184,7 @@ async function executeStreamingCommand(input) {
     if (spawnedProcess) {
       await reapCompletedCredentialBearingProcessGroup(input.message.runId, spawnedProcess);
     }
+    if (stagedEnvFiles) removePtyEnvFiles(stagedEnvFiles.paths);
     await releaseWorkerCommandLaunch(input.resources);
     activeProcesses.delete(input.message.runId);
     cancelledProcessRuns.delete(input.message.runId);
@@ -6051,6 +6059,7 @@ async function startWorker(options, projectRuntime = {
           browserFileUploads: true,
           execStdinV1: true,
           ptyEnvFilesV1: true,
+          execEnvFilesV1: true,
           workspaceRemediationAncestorGuardV1: true,
           workspaceIncidentConfigDeferralV1: true,
           workspaceConfigResetToCanonicalV1: true,

package/dist/cjs/package.json

@@ -1,5 +1,5 @@
 {
   "name": "@ricsam/r5d-worker",
-  "version": "0.0.126",
+  "version": "0.0.128",
   "type": "commonjs"
 }

package/dist/mjs/main.mjs

@@ -3035,6 +3035,7 @@ async function executeStreamingCommand(input) {
   let timeout;
   let spawnedProcess;
   let preparationSettled = false;
+  let stagedEnvFiles;
   const settlePreparation = () => {
     if (preparationSettled) return;
     preparationSettled = true;
@@ -3063,7 +3064,13 @@ async function executeStreamingCommand(input) {
     const interactive = input.message.interactive === true;
     const control = input.message.commandClass === "control";
     let argv = input.message.argv;
-    let environment = workerChildProcessEnvironment([githubProcessEnv(), input.message.env ?? {}, targetProcessEnv2]);
+    if (control && input.message.envFiles?.length) throw new Error("Control commands cannot receive secret files");
+    stagedEnvFiles = stagePtyEnvFiles(input.message.envFiles);
+    let environment = workerChildProcessEnvironment([
+      githubProcessEnv(),
+      resolvePtyEnvFileReferences(input.message.env ?? {}, stagedEnvFiles),
+      targetProcessEnv2
+    ]);
     if (control) {
       assertControlCommandArgv(argv);
       if (interactive) throw new Error("Control commands cannot be interactive");
@@ -3198,6 +3205,7 @@ async function executeStreamingCommand(input) {
     if (spawnedProcess) {
       await reapCompletedCredentialBearingProcessGroup(input.message.runId, spawnedProcess);
     }
+    if (stagedEnvFiles) removePtyEnvFiles(stagedEnvFiles.paths);
     await releaseWorkerCommandLaunch(input.resources);
     activeProcesses.delete(input.message.runId);
     cancelledProcessRuns.delete(input.message.runId);
@@ -6072,6 +6080,7 @@ async function startWorker(options, projectRuntime = {
           browserFileUploads: true,
           execStdinV1: true,
           ptyEnvFilesV1: true,
+          execEnvFilesV1: true,
           workspaceRemediationAncestorGuardV1: true,
           workspaceIncidentConfigDeferralV1: true,
           workspaceConfigResetToCanonicalV1: true,

package/dist/mjs/package.json

@@ -1,5 +1,5 @@
 {
   "name": "@ricsam/r5d-worker",
-  "version": "0.0.126",
+  "version": "0.0.128",
   "type": "module"
 }

package/dist/types/main.d.ts

@@ -421,6 +421,12 @@ type WorkerServerMessage = WorkerRecoveryServerMessage | {
     credentialId?: string;
     cwd?: string;
     env?: Record<string, string>;
+    envFiles?: Array<{
+        path: string;
+        content: string;
+        mode?: number;
+    }>;
+    accountEnvironmentWorkerId?: string;
     timeoutMs?: number;
     interactive?: boolean;
     workspaceEffect?: "none";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ricsam/r5d-worker",
-  "version": "0.0.126",
+  "version": "0.0.128",
   "type": "module",
   "main": "./dist/cjs/main.cjs",
   "module": "./dist/mjs/main.mjs",
@@ -21,7 +21,7 @@
     "r5d-worker": "dist/cjs/main.cjs"
   },
   "dependencies": {
-    "@ricsam/r5d-api": "^0.0.126",
+    "@ricsam/r5d-api": "^0.0.128",
     "node-pty": "^1.1.0",
     "picomatch": "^4.0.3"
   },