@runuai/host 0.9.168 → 0.9.170

package/lib/task-project-ops.ts

@@ -74,6 +74,7 @@ import type {
   TaskProjectStatusResult,
 } from "../src/protocol";
 import { RUNTIME_AUTHORITY_ENV } from "./runtime-authority";
+import { TaskEnvironmentRequestValidationError } from "./task-environment/types";
 import type {
   TaskEnvironmentExecRequest,
   TaskEnvironmentExecResult,
@@ -271,7 +272,7 @@ export class TaskProjectJournalStore {
 
 /**
  * $1 staging repo path, $2 target path, $3 repo URL, $4 task branch,
- * $5 activation id, $6 the project's fallback `.tool-versions` ("" for none).
+ * $5 activation id, optional $6 the project's fallback `.tool-versions`.
  * Exit 3: the target already exists. The last stdout line is the checked-out
  * commit, or `empty` for a repository with no commits.
  */
@@ -684,13 +685,13 @@ export class TaskProjectOps {
   }
 
   prepare(input: TaskProjectPrepareInput): Promise<TaskProjectPrepareResult> {
-    return this.serialized(input.taskId, async () => {
-      if (!OPERATION_ID.test(input.operationId)) throw new Error("invalid operation id");
-      if (!SLUG.test(input.project.slug)) throw new Error("invalid project slug");
+    return this.serialized<TaskProjectPrepareResult>(input.taskId, async () => {
+      if (!OPERATION_ID.test(input.operationId)) throw new TaskEnvironmentRequestValidationError("invalid operation id");
+      if (!SLUG.test(input.project.slug)) throw new TaskEnvironmentRequestValidationError("invalid project slug");
       if (!REPO_URL.test(input.project.repoUrl)) {
-        return refused<TaskProjectPrepareResult>("clone_failed", "the repository URL is not an HTTPS or SSH Git remote");
+        throw new TaskEnvironmentRequestValidationError("the repository URL is not an HTTPS or SSH Git remote");
       }
-      if (!BRANCH.test(input.branch)) throw new Error("invalid task branch");
+      if (!BRANCH.test(input.branch)) throw new TaskEnvironmentRequestValidationError("invalid task branch");
       const fenced = this.fenceFails(input);
       if (fenced) return refused<TaskProjectPrepareResult>(fenced.reason, fenced.message);
 
@@ -728,7 +729,9 @@ export class TaskProjectOps {
             input.project.repoUrl,
             input.branch,
             activationId,
-            input.project.toolVersions ?? "",
+            // The provider rejects empty argv elements. The script already
+            // defaults an absent final argument to no fallback (${6:-}).
+            ...(input.project.toolVersions ? [input.project.toolVersions] : []),
           ],
           { cwd: environment.descriptor.workspacePath, timeoutMs: TASK_PROJECT_CLONE_TIMEOUT_MS },
         ),
@@ -780,6 +783,13 @@ export class TaskProjectOps {
         updatedAt: Date.now(),
       });
       return { outcome: "prepared", head, envSchema };
+    }).catch((error: unknown) => {
+      if (error instanceof TaskEnvironmentRequestValidationError) {
+        return refused<TaskProjectPrepareResult>("invalid_request", error.message);
+      }
+      // Provider availability, rebuilds and journal I/O remain INTERNAL so
+      // the cloud can retry them; never classify an error by its message.
+      throw error;
     });
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.168",
+  "version": "0.9.170",
   "description": "Uai host \u2014 runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",

package/src/main.ts

@@ -2,6 +2,7 @@
 import type { AssignmentDelivery, DeliveryOrigin } from "./protocol";
 
 import "./load-env";
+import { sampleDiskPressure } from "../lib/disk-pressure";
 import { TASK_SECRETS_FEATURE, isTaskSecretStagingPut } from "./task-secrets";
 import { writeTaskSecretStaging } from "../lib/task-secret-staging";
 
@@ -1473,12 +1474,28 @@ async function startLocalUi(): Promise<void> {
   }
 }
 
+// Capacity fits the existing capability/status snapshot; no new messages.
+let diskSnapshot: HostCapabilities["disk"];
+let diskSampling = false;
+async function refreshDiskSnapshot(): Promise<void> {
+  if (diskSampling || sidecarMode()) return;
+  diskSampling = true;
+  try {
+    diskSnapshot = await sampleDiskPressure();
+    sendCapabilities();
+  } finally { diskSampling = false; }
+}
+void refreshDiskSnapshot();
+const diskTimer = setInterval(() => void refreshDiskSnapshot(), 60_000);
+diskTimer.unref?.();
+
 /** Build the current host capability advertisement (ADR-021). */
 function buildCapabilities(): HostCapabilities {
   const runtime = containerRuntimeCapabilityState();
   const projectEnvBindings = projectEnvBindingCapability();
   return {
     version: packageVersion(),
+    ...(diskSnapshot ? { disk: diskSnapshot } : {}),
     protocolFeatures: [
       "host-workspace-file-read-v1",
       ASSIGNMENT_EVIDENCE_PROTOCOL_FEATURE,

package/src/protocol.ts

@@ -4068,6 +4068,15 @@ export function isHostConfigAckFrame(
  * changes. The cloud caches it per hostId to drive the task-creation pickers.
  */
 export interface HostCapabilities {
+  /** Filesystem capacity, refreshed each minute. Null means unmeasurable
+   * (for example Docker in a VM); available excludes root-reserved blocks. */
+  disk?: {
+    sampledAt: number;
+    /** Cloud-only: overwritten on authenticated receipt, never trusted from the host. */
+    receivedAt?: number;
+    home: { totalBytes: number; availableBytes: number } | null;
+    docker: { totalBytes: number; availableBytes: number } | null;
+  };
   /** The host-agent package version — the cloud UI shows it on the host page
    *  and flags when npm has a newer release. Optional (older hosts omit it). */
   version?: string;
@@ -4337,6 +4346,15 @@ export interface TaskDiffInput {
   projects: Array<{ id: string; slug: string }>;
 }
 
+/** Cloud Prepare retry timing. */
+export const TASK_PROJECT_PREPARE_MAX_ATTEMPTS = 12;
+export const TASK_PROJECT_PREPARE_TIMEOUT_MS = 11 * 60_000;
+export function taskProjectRetryDelayMs(attempts: number): number {
+  return Math.min(5 * 60_000, 2_000 * 2 ** Math.min(attempts, 7));
+}
+/** Bound the CLI tool call; the durable cloud operation may outlast it. */
+export const TASK_PROJECT_ADD_WAIT_MS = 40 * 60_000;
+
 /**
  * ADR-161 §2.3: every live-project command names the task's run, the
  * operation, and the project-set revision the operation commits. The runner
@@ -4362,6 +4380,7 @@ export interface TaskProjectPrepareInput extends TaskProjectOpFence {
 /** Why a live-project command did nothing. `grant_not_installed` and
  *  `busy` are retryable; the rest are final for that operation. */
 export type TaskProjectRefusal =
+  | "invalid_request"
   | "repo_access_denied"
   | "clone_failed"
   | "workspace_path_taken"