@runuai/host 0.9.44 → 0.9.45

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.44",
+  "version": "0.9.45",
   "description": "Uai host — runs ephemeral AI coding tasks in Docker on a machine you control.",
   "license": "MIT",
   "author": "Diogo Perillo <diogo.perillo@gmail.com>",

package/src/index.ts

@@ -75,7 +75,10 @@ import {
 } from "../lib/preview-sidecar";
 import { inspectTunnelContainer } from "../lib/tunnel-runtime";
 import { ContainerRuntimeUnavailableError } from "../lib/runtime-guard";
-import { managedRuntimeAdmissionBlocker } from "../lib/managed-runtime";
+import {
+  managedRuntimeAdmissionBlocker,
+  reclaimAbandonedMaintenanceCheck,
+} from "../lib/managed-runtime";
 import { retireTaskSshIdentityEnsures } from "../lib/git-identity";
 import { removeTaskIdentityStrict } from "../lib/ssh";
 import { proveOrphanTaskResourcesAbsent } from "../lib/task-inventory";
@@ -1347,13 +1350,44 @@ function boundedFailureMessage(error: unknown): string {
 
 /** Managed installation, activation, and uninstall drain instead of admitting work. */
 let lastAdmissionRefusalLogAt = 0;
+let lastAdmissionReclaimAt = 0;
+let admissionReclaimInFlight: Promise<"cleared" | "kept" | "none"> | null =
+  null;
 function managedMaintenanceUnavailable(): HostCommandResult<never> | null {
   const blocker = managedRuntimeAdmissionBlocker();
   if (blocker === null) return null;
+  const now = Date.now();
+  // Mid-run self-heal (the abandoned-uninstall marker recurred WHILE the
+  // service was up, 2026-08-19 — boot-time reclaim alone cannot cover a
+  // writer on a schedule). Reclaim only ever touches a provably-untorn
+  // "checking" marker, under the operation lock; rate-limited so the
+  // cloud's retry hammer cannot churn the lock. The command that observed
+  // the marker still refuses — the NEXT retry finds admission open.
+  if (now - lastAdmissionReclaimAt > 30_000 && !admissionReclaimInFlight) {
+    lastAdmissionReclaimAt = now;
+    admissionReclaimInFlight = reclaimAbandonedMaintenanceCheck();
+    void admissionReclaimInFlight
+      .then((verdict) => {
+        if (verdict === "cleared") {
+          console.warn(
+            "[host-agent] cleared an abandoned maintenance marker mid-run (a managed uninstall/update died before any teardown); task admission reopened",
+          );
+        }
+      })
+      .catch((error) => {
+        console.warn(
+          `[host-agent] mid-run maintenance-marker reclaim failed: ${
+            error instanceof Error ? error.message : String(error)
+          }`,
+        );
+      })
+      .finally(() => {
+        admissionReclaimInFlight = null;
+      });
+  }
   // A refusal must NAME its gate somewhere an operator can find it. Three
   // stacked silent refusals cost hours live (2026-08-18); rate-limited so a
   // retrying cloud cannot flood the log.
-  const now = Date.now();
   if (now - lastAdmissionRefusalLogAt > 60_000) {
     lastAdmissionRefusalLogAt = now;
     console.warn(