@runuai/host 0.9.123 → 0.9.125

package/lib/container-runtime.ts

@@ -283,6 +283,8 @@ export function pinnedContainerRuntimeMachineIdentity(): {
 /** Failure message for TEARDOWN admission: only a truly absent/unpinned
  * runtime refuses teardown. `checking` with a pin admits it. */
 export function containerRuntimeTeardownProblem(): string | null {
+  // ADR-133 sidecar mode: teardown is the cloud terminating this machine.
+  if (sidecarMode()) return null;
   if (state.status === "no-runtime") return state.message;
   if (pinnedContainerRuntimeMachineIdentity() === null) {
     return (

package/lib/standard-image.ts

@@ -45,6 +45,7 @@ import {
   standardImagePullCommands,
   standardImagePullDigest,
 } from "./standard-image-pin";
+import { sidecarMode } from "./sidecar";
 
 /** Pinned, host-wide constants (must match task-up.sh and the compose gen). */
 export const STANDARD_IMAGE_TAG = "uai-standard:dev";
@@ -1138,6 +1139,14 @@ function markAgentClisReady(): void {
 export function ensureStandardImage(
   opts: { maxAgeMs?: number } = {},
 ): Promise<StandardImageResult> {
+  // ADR-133 sidecar mode: a task machine has no container image to keep —
+  // its agent CLIs are baked into the machine image. Live 2026-09-10
+  // (hostless smoke 4): task-up refused with "could not prepare the host
+  // base image uai-standard:dev … Docker is not available".
+  if (sidecarMode()) {
+    markAgentClisReady();
+    return Promise.resolve({ ok: true });
+  }
   // A task-up passes maxAgeMs: a pass that succeeded recently for the same
   // engine configuration is reused instead of spending ~15 s spinning a
   // maintenance container per task (live 2026-09-09: 16 s of every task

package/lib/task-environment/index.ts

@@ -230,7 +230,15 @@ export function reconstructTaskEnvironment(
 export async function reconstructPersistedTaskEnvironment(
   task: HostTask,
 ): Promise<TaskEnvironmentHandle<TaskDownResult> | null> {
-  const locator = persistedTaskEnvironmentLocator(task, requireMachineIdentity());
+  // ADR-133: a machine or sidecar row carries its own locator and never
+  // needs the container runtime's identity — on a task machine there is
+  // none, and demanding it here would strand every session after task-up.
+  const locator = persistedTaskEnvironmentLocator(
+    task,
+    isEnvironmentTransportProvider(task.environmentProvider)
+      ? null
+      : requireMachineIdentity(),
+  );
   if (locator === null) return null;
   const handle = await registry.reconstruct(locator);
   if (handle.descriptor.taskId !== task.taskId) {
@@ -255,7 +263,9 @@ export function persistedTaskEnvironmentLocator(
     | "codeServerPort"
     | "previewPorts"
   >,
-  machine: HostMachineIdentity,
+  /** Null only for rows whose provider is reached over the environment
+   *  transport (machine, self): their locator is self-contained. */
+  machine: HostMachineIdentity | null,
 ): TaskEnvironmentLocator | null {
   const provider = task.environmentProvider;
   const raw = task.environmentLocator;
@@ -273,6 +283,9 @@ export function persistedTaskEnvironmentLocator(
   if (task.composeProject === null || task.worktreePath === null) {
     throw new Error("legacy task runtime persistence is incomplete");
   }
+  if (machine === null) {
+    throw new Error("legacy task runtime cannot be adopted on a task machine");
+  }
   throw new Error(
     machine.backend === "docker"
       ? "legacy Docker resources have not passed safe adoption"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.123",
+  "version": "0.9.125",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",

package/src/index.ts

@@ -185,7 +185,7 @@ export type {
   PreviewPortRuntime,
 } from "../lib/preview-ports";
 import { isEnvironmentTransportProvider } from "../lib/task-environment/types";
-import { awaitSidecarReady } from "../lib/sidecar";
+import { awaitSidecarReady, sidecarMode } from "../lib/sidecar";
 
 export const hostEvents: HostEventStream = {
   subscribe(handler) {
@@ -1638,6 +1638,10 @@ const RUNTIME_TASK_ADMISSION_WAIT_MS = 3_000;
 async function prepareContainerRuntimeForTask(): Promise<
   HostCommandResult<never> | null
 > {
+  // ADR-133 sidecar mode: the task runs on this machine; there is no
+  // container runtime to prepare (live 2026-09-10, hostless smoke 3: this
+  // step answered with the no-runtime message before the gated check ran).
+  if (sidecarMode()) return null;
   let prepared:
     | Awaited<ReturnType<typeof ensureContainerRuntimeForTask>>
     | null;