@runuai/host 0.9.151 → 0.9.153

package/src/main.ts

@@ -28,7 +28,9 @@ import {
   closeTaskRunAssignment,
   getHostTask,
   hasInFlightHostTaskLifecycle,
+  hostTaskSharedFilesMode,
   readTaskRunEpochState,
+  taskFilesRecoveryBinding,
   upsertHostTask,
 } from "../lib/runtime-state";
 import {
@@ -112,6 +114,7 @@ import {
   parseLeaseGrantV1Frame,
   parseLeaseStaleFrame,
   parseLeaseUnavailableFrame,
+  HOST_TASK_FILES_LEASE_FEATURE,
 } from "./cloud-credentials";
 import { captureEngineAccount } from "../lib/capture-flow";
 import { registerTaskGatewayTlsHandler, setMcpGatewayLeaseOnly, startMcpGateway } from "../lib/mcp-gateway";
@@ -408,6 +411,12 @@ import {
 } from "../lib/legacy-runtime-retirement";
 import { taskContainerBackend, taskContainerCli } from "../lib/task-container-cli";
 import { CloudCredentialRuntime } from "../lib/cloud-credential-runtime";
+import { createTaskFilesV1Consumer } from "../lib/credential-consumers/files";
+import { taskFilesV1Readiness } from "../lib/task-files-readiness";
+import {
+  requestTaskFilesMachineRetirement,
+  taskFilesMachineRetirementReady,
+} from "../lib/task-files-machine-retirement";
 import { ProjectEnvTaskReplicaManager } from "../lib/project-env-task-replica";
 import {
   purgeDefaultEngineSlots,
@@ -908,15 +917,29 @@ if (signInBoxMode()) {
 // ADR-154: the composer for tasks on cloud credentials. Nothing runs on it
 // until the runner's activation authority makes cloud credentials its
 // tasks' only ones (lib/cloud-credential-host.ts).
+const taskFilesReadiness = taskFilesV1Readiness(sidecarMode());
+const taskFiles = sidecarMode()
+  ? createTaskFilesV1Consumer({
+      recoveredBinding: (assignment) => {
+        return taskFilesRecoveryBinding(getHostTask(assignment.taskId), assignment);
+      },
+      ready: () =>
+        taskFilesV1Readiness(true).ready &&
+        taskFilesMachineRetirementReady(),
+      retireMachine: requestTaskFilesMachineRetirement,
+    })
+  : null;
 const cloudCredentials = new CloudCredentialRuntime({
   runnerKind: sidecarMode() ? "task-machine" : "owned",
   send: sendCredentialFrame,
   quiesceProcesses: (request) => getOrchestrator().quiesceLeasedEngineAgents(request),
+  mcpServedChanged: (taskId) => getOrchestrator().mcpServedChanged(taskId),
   // The task-keyed env replica the cloud streams for each run. A change to
   // it, or to what the composer serves from it, makes the proxy's trust
   // delivery look again; /env reads it afresh on every command.
   envReplica: new ProjectEnvTaskReplicaManager({ onChange: () => noteProjectEnvViewChange() }),
   envServedChanged: () => noteProjectEnvViewChange(),
+  files: taskFiles,
 });
 // Leaving its own credentials ends every task's env from the runner's
 // stores at once, and makes the proxy's trust delivery look again.
@@ -926,8 +949,25 @@ followLeavingLegacy();
 // from its own run's Files session, never the runner's v0 lease); and the
 // proxy's upkeep from activation on, with no v0 first grant to start it.
 if (sidecarMode()) {
-  setRecoveredRuntimeSetup(async (_run, signal) => {
-    const resumed = await resumeSidecarTask({ remountFiles: false, signal });
+  setRecoveredRuntimeSetup(async (run, signal) => {
+    const task = getHostTask(run.taskId);
+    let mode: ReturnType<typeof hostTaskSharedFilesMode>;
+    try {
+      mode = task ? hostTaskSharedFilesMode(task) : null;
+      if (mode === null) {
+        throw new Error("the recovered task has no trusted Files-v1 mode");
+      }
+    } catch (error) {
+      if (signal.aborted) throw signal.reason;
+      cloudCredentials.failTaskFilesSetup(run, error);
+      throw error;
+    }
+    const resumed = await resumeSidecarTask({
+      remountFiles: false,
+      signal,
+      prepareFiles: (handle) =>
+        cloudCredentials.prepareTaskFiles(run, handle, mode, signal),
+    });
     if (resumed.outcome === "resumed") {
       console.log(
         `[sidecar] task ${sidecarTaskId()} resumed on cloud credentials: loader, proxy and editor re-asserted` +
@@ -1365,6 +1405,11 @@ function buildCapabilities(): HostCapabilities {
       ...(projectEnvBindings === null ? [] : [projectEnvBindings.feature]),
       // ADR-154 §13: the runner reads cloud credentials, its stores purged.
       ...(credentialsMode() === "active" ? [HOST_CLOUD_CREDENTIALS_FEATURE] : []),
+      ...(taskFiles !== null &&
+        taskFilesReadiness.ready &&
+        taskFilesMachineRetirementReady()
+        ? [HOST_TASK_FILES_LEASE_FEATURE]
+        : []),
       // ADR-154: only the sign-in box writes cloud credentials.
       ...(signInBoxMode()
         ? [