@runuai/host 0.9.149 → 0.9.150

package/lib/orchestrator.ts

@@ -8314,6 +8314,17 @@ async function recoverOneDockerTask(
   lifecycle?: RecoveryTaskConsumers,
 ): Promise<boolean> {
   if (!isCurrent()) return true;
+  // Recovery is sanctioned private maintenance while public admission is
+  // deliberately `checking`. Its container work is fenced by this daemon
+  // epoch instead of the public operational bit: work it starts keeps going
+  // while the generation is current, and a superseded one stops.
+  const admitRecoveryContainerWork = (): void => {
+    if (!isCurrent()) {
+      throw new ContainerRuntimeUnavailableError(
+        "container runtime recovery generation was superseded",
+      );
+    }
+  };
   const composeProject = task.composeProject;
   if (!composeProject) {
     // We never wrote a compose project name for this row — must be
@@ -8463,7 +8474,9 @@ async function recoverOneDockerTask(
     // ~8h later. Cheap with the per-user access-token cache — one exchange
     // per user, every task re-injects from it. Best-effort.
     if (task.ownerUserId) {
-      void reconcileTaskGitAuth(task.taskId, task.ownerUserId).catch((err) =>
+      void reconcileTaskGitAuth(task.taskId, task.ownerUserId, {
+        admitContainerWork: admitRecoveryContainerWork,
+      }).catch((err) =>
         console.warn(
           `[github] task ${task.taskId}: running recovery reconciliation failed: ${
             err instanceof Error ? err.message : String(err)
@@ -8602,17 +8615,9 @@ async function recoverOneDockerTask(
   if (task.ownerUserId) {
     try {
       await reconcileTaskGitAuth(task.taskId, task.ownerUserId, {
-        // Recovery is sanctioned private maintenance while public admission is
-        // deliberately `checking`. Fence it by this daemon epoch instead of
-        // the public operational bit, preserving private-dependency setup
-        // before uai-init without letting stale recovery keep mutating.
-        admitContainerWork: () => {
-          if (!isCurrent()) {
-            throw new ContainerRuntimeUnavailableError(
-              "container runtime recovery generation was superseded",
-            );
-          }
-        },
+        // Before uai-init, so private dependencies resolve; fenced by this
+        // recovery's epoch, not the public operational bit.
+        admitContainerWork: admitRecoveryContainerWork,
       });
       if (!isCurrent()) return true;
     } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.149",
+  "version": "0.9.150",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",

package/src/main.ts

@@ -577,7 +577,7 @@ try {
     }
   }
   console.warn(
-    `[project-env] bindings stay disabled because the runtime floor could not be persisted: ${error instanceof Error ? error.message : String(error)}`,
+    `[project-env] bindings are off until the runtime floor is persisted (${error instanceof Error ? error.message : String(error)}); an update that is still activating turns them on when it finishes, anything else needs a restart`,
   );
 }