@runuai/host 0.8.17 → 0.8.18

package/lib/agents/transport.ts

@@ -66,6 +66,25 @@ export interface AgentTransportOptions {
 /** Runner heartbeat is 5 s; older than this = not attachable. */
 const ATTACH_HEARTBEAT_FRESH_MS = 20_000;
 
+/**
+ * ONE live outbox consumer per (task, agent) in this host process. A session
+ * dropped from the orchestrator's map without close()/detach() (e.g. the
+ * error-event path — a pipes-era "process is dead" assumption) leaves its
+ * DurableProcess polling FOREVER: its liveness check only trips when the
+ * RUNNER dies, and the runner is alive. The next channelEnsure then attaches
+ * a second tail to the same outbox, and every agent turn is emitted once per
+ * leaked tail — live incident 2026-07-20: one agent's messages posted ×5 to
+ * the feed, multiplicity growing by one per errored turn. Enforcing the
+ * invariant here covers every replacement path, including future ones.
+ */
+const liveTails = new Map<string, DurableProcess>();
+
+function claimTail(key: string, proc: DurableProcess): DurableProcess {
+  liveTails.get(key)?.detach();
+  liveTails.set(key, proc);
+  return proc;
+}
+
 function durableEnabled(): boolean {
   return process.env.UAI_DURABLE_SESSIONS !== "0";
 }
@@ -117,6 +136,8 @@ export function createAgentTransport(opts: AgentTransportOptions): LineTransport
       .run();
   };
 
+  const tailKey = `${opts.taskId}:${opts.agentId}`;
+
   // ---- Attach: a previous host process left this agent's runner alive. ----
   if (opts.allowAttach && row && row.status === "running" && heartbeatFresh(row.sessionDir)) {
     const proc = new DurableProcess({
@@ -127,7 +148,7 @@ export function createAgentTransport(opts: AgentTransportOptions): LineTransport
       debugLabel: opts.debugLabel,
     });
     proc.onExit(markClosed);
-    return proc;
+    return claimTail(tailKey, proc);
   }
 
   // ---- Spawn a fresh runner, asking any predecessor to stop. --------------
@@ -231,7 +252,7 @@ export function createAgentTransport(opts: AgentTransportOptions): LineTransport
     .run();
 
   proc.onExit(markClosed);
-  return proc;
+  return claimTail(tailKey, proc);
 }
 
 function heartbeatFresh(sessionDir: string): boolean {

package/lib/orchestrator.ts

@@ -688,7 +688,11 @@ class Orchestrator {
         // becomes a zombie: the map still holds the dead session and every
         // later deliver "succeeds" into a closed pipe (found live 2026-07-08
         // after a double SIGKILL). Bounded by the respawn budget, checked in
-        // reconcileSessions.
+        // reconcileSessions. NOTE (durable sessions): an errored TURN does
+        // not mean a dead RUNNER — the dropped session's outbox tail would
+        // poll forever and duplicate every later turn (×5 live 2026-07-20).
+        // createAgentTransport's one-tail-per-agent registry detaches the
+        // stale consumer when the respawn attaches.
         channel.respawns.set(agentId, (channel.respawns.get(agentId) ?? 0) + 1);
         channel.respawnLastAt.set(agentId, Date.now());
         channel.sessions.delete(agentId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.8.17",
+  "version": "0.8.18",
   "description": "Uai host — runs ephemeral AI coding tasks in Docker on a machine you control.",
   "license": "MIT",
   "author": "Diogo Perillo <diogo.perillo@gmail.com>",