@runuai/host 0.9.122 → 0.9.123

package/lib/container-runtime.ts

@@ -24,6 +24,7 @@ import {
   runtimeProviderStatePath,
   type RuntimeProviderStateStore,
 } from "./runtime-provider-state";
+import { sidecarMode } from "./sidecar";
 
 export type RuntimePreference = "auto" | "docker" | "apple-container";
 
@@ -1347,6 +1348,11 @@ export function resetContainerRuntimeSelectionForTests(): void {
 
 /** Human-facing task failure, or null while the host can attempt Docker work. */
 export function containerRuntimeProblem(): string | null {
+  // ADR-133 sidecar mode: the task runs on this machine, not in a container;
+  // there is no runtime to be ready. Live 2026-09-10: the first hostless
+  // task-up reached its machine and was refused with the Docker-context
+  // message below, because this gate never knew the machine had no Docker.
+  if (sidecarMode()) return null;
   if (state.status === "no-runtime") return state.message;
   if (state.status !== "ready" || !operational) {
     return (

package/lib/machine-provider-aws.ts

@@ -38,6 +38,11 @@ export const AWS_MACHINE_TAG = "com.uai.machine";
  * UAI_MACHINE_IMAGE resolves the newest published payload in its region. */
 export const PAYLOAD_AMI_OWNER = "277057415208";
 export const PAYLOAD_AMI_NAME_PREFIX = "uai-machine-payload";
+/** Regions the payload AMI is published to (build-ami.sh bakes in the first
+ * and copies to the rest). A BYO-AWS runner elsewhere would find no image
+ * and fail every launch, so setup refuses other regions up front (owner,
+ * 2026-09-10: "only show the available ones for now"). */
+export const PAYLOAD_AMI_REGIONS: readonly string[] = ["us-west-2", "us-east-1"];
 /** Name of the security group auto-created in the default VPC when the host
  * config names none. Inbound: all TCP from the HOST's egress /32 only —
  * code-server runs auth-none and preview ports are plain HTTP, so exposure

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.122",
+  "version": "0.9.123",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",

package/src/cli.ts

@@ -109,6 +109,7 @@ import {
   TasksResponse,
 } from "./ui/types";
 import type { InstallContext, Installer } from "../scripts/install/types";
+import { PAYLOAD_AMI_REGIONS } from "../lib/machine-provider-aws";
 
 // --- tiny ANSI (no chalk) ---------------------------------------------------
 
@@ -636,6 +637,14 @@ async function cmdAwsSetup(rest: string[]): Promise<void> {
     process.exitCode = 1;
     return;
   }
+  if (!PAYLOAD_AMI_REGIONS.includes(region)) {
+    console.error(
+      red(`task machines are not available in ${region} yet — Uai's machine image is published in ${PAYLOAD_AMI_REGIONS.join(", ")}`),
+    );
+    console.error(dim("pass --region with one of those; more regions are coming."));
+    process.exitCode = 1;
+    return;
+  }
 
   const identity = awsAdmin(["sts", "get-caller-identity"], region);
   if (identity.status !== 0) {