@runuai/host 0.9.147 → 0.9.148

package/lib/ulid.ts

@@ -4,4 +4,13 @@ export function newId(): string {
   return ulid().toLowerCase();
 }
 
-export { ulid as monotonicUlid };
+/**
+ * A ULID with its canonical UPPERCASE base32, unlike `newId()` above.
+ *
+ * Renamed from `monotonicUlid`, which it never was: the plain generator
+ * randomises the suffix, so two ids minted in the same millisecond do not
+ * sort in call order. Nothing in this package imports it — it is kept only to
+ * mirror `lib/ulid.ts`, and it is renamed here too so the false promise is
+ * not sitting in the copy someone reads next.
+ */
+export { ulid as rawUlid };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.147",
+  "version": "0.9.148",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",

package/src/main.ts

@@ -212,6 +212,7 @@ import {
   HOST_ENGINE_ACCOUNT_SCOPES_PROTOCOL_FEATURE,
   HOST_ENGINE_DISCONNECT_PROTOCOL_FEATURE,
   HOST_ENGINE_LOGIN_PROTOCOL_FEATURE,
+  LIVE_ROSTER_EDIT_PROTOCOL_FEATURE,
   isEngineAccountScope,
   HOST_LOGS_PROTOCOL_FEATURE,
   HOST_TASK_INVENTORY_PROTOCOL_FEATURE,
@@ -916,6 +917,7 @@ function buildCapabilities(): HostCapabilities {
       HOST_ENGINE_ACCOUNT_SCOPES_PROTOCOL_FEATURE,
       HOST_ENGINE_ACCOUNT_MANAGE_PROTOCOL_FEATURE,
       HOST_ENGINE_DISCONNECT_PROTOCOL_FEATURE,
+      LIVE_ROSTER_EDIT_PROTOCOL_FEATURE,
       // The echo adapter cannot execute the in-task CLI. Advertising typed
       // dispatch in mock mode would let the composer create a Secretary that
       // has no way to wake crew.

package/src/protocol.ts

@@ -120,6 +120,14 @@ export const HOST_ENGINE_ACCOUNT_MANAGE_PROTOCOL_FEATURE =
   "host-engine-account-manage-v1";
 export const HOST_ENGINE_ACCOUNT_SCOPES_PROTOCOL_FEATURE =
   "host-engine-account-scopes-v1";
+/** ADR-049 addendum: live roster edits. On channel.ensure the host diffs the
+ * live roster against the spec — an agent whose kind, model or effort changed
+ * has its session recycled so the reconciler respawns it on the new settings,
+ * and an agent missing from the spec has its session stopped (its session dir
+ * stays). A host without this keeps a changed agent's old process until some
+ * unrelated respawn and never stops a removed one, so the cloud refuses to
+ * edit or remove a running task's agents on it. */
+export const LIVE_ROSTER_EDIT_PROTOCOL_FEATURE = "live-roster-edit-v1";
 /** The owner-level account scope; every pre-scope account lives here. */
 export const HOST_ACCOUNT_SCOPE = "host";
 const ORG_ACCOUNT_SCOPE_RE = /^org:[A-Za-z0-9_-]{1,128}$/;
@@ -2037,6 +2045,18 @@ export type HostEvent =
       agentId: string;
       reason: string;
     }
+  // A roster change moved an agent's session (LIVE_ROSTER_EDIT_PROTOCOL_FEATURE).
+  // `restarting`: its kind/model/effort changed and the old session was stopped
+  // (at once when idle, otherwise when its turn ended) — the reconciler is
+  // respawning it. `ready`: that replacement session bound. `removed`: the
+  // agent left the roster and its session was stopped. An older cloud ignores
+  // the unknown kind.
+  | {
+      kind: "agent.session";
+      taskId: string;
+      agentId: string;
+      state: "restarting" | "ready" | "removed";
+    }
   // A host-originated system note for the task channel (ADR-027) — e.g. gh
   // auth expired. The cloud renders it as an author:"system" message.
   | {