@runuai/host 0.9.151 → 0.9.152

package/lib/credential-consumers/engine-anchor.ts

@@ -1685,7 +1685,11 @@ export async function stopAnchoredEngines(
       request.taskId,
       String(request.runEpoch),
       named === undefined ? "all" : "named",
-      (named ?? []).map(idPathSegment).join("\n"),
+      // Every provider refuses an empty argv entry, and "all" names no
+      // account: a lone newline stands for the empty list (the helper drops
+      // blank names). Live 2026-10-11: the empty string failed every
+      // stop-all, so no cleanup, recovery sweep or relaunch could finish.
+      (named ?? []).map(idPathSegment).join("\n") || "\n",
       String(anchorStopSeconds),
       carrierRoots(),
     ],

package/lib/orchestrator.ts

@@ -3087,7 +3087,14 @@ export class Orchestrator {
     );
     try {
       await Promise.all(earlier.map((retired) => this.retireInRuntime(retired)));
-    } catch {
+    } catch (error) {
+      // Live 2026-10-11: this refusal was silent, so agents that never started
+      // left nothing in the log to say why.
+      console.warn(
+        `[orchestrator] ${slot.identity.taskId}/${agentId}: not starting the agent, an earlier start could not be retired in its runtime (${
+          error instanceof Error ? error.message : String(error)
+        })`,
+      );
       throw new EngineLaunchRefused("an earlier start of this agent could not be retired in its runtime yet");
     }
   }

package/lib/task-environment/workspace-files.ts

@@ -100,9 +100,19 @@ export interface RuntimeNamespace {
 /** macOS (11 and later): fail if any component of the path is a link. */
 const O_NOFOLLOW_ANY = 0x20000000;
 const DIRECTORY = constants.O_RDONLY | constants.O_DIRECTORY;
-/** macOS: a directory, a link nowhere in its path (the last component
- *  refused by O_NOFOLLOW as well). */
-const DIRECTORY_NOFOLLOW_ANY = DIRECTORY | O_NOFOLLOW_ANY | constants.O_NOFOLLOW;
+/** macOS: a directory, a link nowhere in its path, the last component
+ *  included. Never with O_NOFOLLOW: O_NOFOLLOW_ANY already refuses a final
+ *  link, and macOS 27 rejects the two together with EINVAL (live
+ *  2026-10-11: every workspace read and write failed on the Studio). */
+const DARWIN = process.platform === "darwin";
+/** Elsewhere (tests forcing this mode on Linux, where O_NOFOLLOW_ANY means
+ *  nothing) O_NOFOLLOW stays, so a final link is still refused there. */
+const DIRECTORY_NOFOLLOW_ANY = DIRECTORY | O_NOFOLLOW_ANY | (DARWIN ? 0 : constants.O_NOFOLLOW);
+/** The flags one file is opened with in this mode: on macOS `flags` without
+ *  O_NOFOLLOW, which O_NOFOLLOW_ANY covers and cannot be combined with. */
+function nofollowAnyFlags(flags: number): number {
+  return (DARWIN ? flags & ~constants.O_NOFOLLOW : flags) | O_NOFOLLOW_ANY;
+}
 
 type Containment = "proc-fd" | "nofollow-any" | "verify";
 let containment: Containment | null = null;
@@ -128,7 +138,9 @@ function probeContainment(): Containment {
     }
   }
   if (process.platform === "darwin") {
-    const scratch = mkdtempSync(join(tmpdir(), "uai-nofollow-any-"));
+    // Resolved: macOS's temporary directory is below /var, itself a link,
+    // which O_NOFOLLOW_ANY refuses on every path through it.
+    const scratch = realpathSync(mkdtempSync(join(tmpdir(), "uai-nofollow-any-")));
     try {
       mkdirSync(join(scratch, "real"));
       writeFileSync(join(scratch, "real", "file"), "");
@@ -138,8 +150,23 @@ function probeContainment(): Containment {
         // Opened through the link: the flag is not honored here.
         return "verify";
       } catch (error) {
-        return (error as NodeJS.ErrnoException).code === "ELOOP" ? "nofollow-any" : "verify";
+        if ((error as NodeJS.ErrnoException).code !== "ELOOP") return "verify";
+      }
+      // The exact flags the real opens use must work on a plain file and
+      // directory too: a flag the kernel refuses in combination would
+      // otherwise fail every workspace operation, not just links.
+      try {
+        closeSync(
+          openSync(
+            join(scratch, "real", "file"),
+            nofollowAnyFlags(constants.O_WRONLY | constants.O_APPEND | constants.O_NONBLOCK | constants.O_NOFOLLOW),
+          ),
+        );
+        closeSync(openSync(join(scratch, "real"), DIRECTORY_NOFOLLOW_ANY));
+      } catch {
+        return "verify";
       }
+      return "nofollow-any";
     } finally {
       rmSync(scratch, { recursive: true, force: true });
     }
@@ -255,7 +282,7 @@ function openWithin(root: string, parts: readonly string[], flags: number): numb
       }
     }
     if (mode === "nofollow-any") {
-      return openSync(join(base, ...parts), finalFlags | O_NOFOLLOW_ANY, 0o644);
+      return openSync(join(base, ...parts), nofollowAnyFlags(finalFlags), 0o644);
     }
     // Neither: a read verifies what it opened; nothing is written.
     if ((flags & (constants.O_WRONLY | constants.O_RDWR | constants.O_CREAT)) !== 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.151",
+  "version": "0.9.152",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",