@runuai/host 0.9.44 → 0.9.46

package/lib/release-trust.ts

@@ -17,12 +17,29 @@ export const STABLE_RELEASE_MANIFEST_URL =
  * Provisioning a key is necessary but not sufficient to advertise or serve
  * the one-line installer. The release coordinator flips this only in the same
  * reviewed change that publishes the complete, version-matched four-platform
- * release. Keeping it false while this stack is under review makes accidental
- * key/feed provisioning fail closed.
+ * release. Flipped 2026-08-19 in the change that provisioned
+ * `uai-release-2026-a` and wired auto-release to sign and publish the
+ * four-platform feed on every host version bump.
  */
-export const HOST_INSTALLER_RELEASE_PROMOTED = false;
+export const HOST_INSTALLER_RELEASE_PROMOTED = true;
 
+/**
+ * `uai-release-2026-a`: minted by the operator 2026-08-19 (Ed25519; private
+ * key lives in Infisical and reaches CI as UAI_RELEASE_SIGNING_KEY). Rotation
+ * is additive: pin the successor key beside this one, publish releases signed
+ * by it, and retire this entry only after every supported host updated past
+ * a release that pins both.
+ */
 export const PINNED_RELEASE_MANIFEST_KEYS: ReadonlyMap<
   string,
   PinnedReleaseManifestKey
-> = new Map();
+> = new Map([
+  [
+    "uai-release-2026-a",
+    {
+      publicKey: `-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEAeCBzaLTNYNGkI59T+vNu2M/DMTeTsmfABDtwN9IDejY=
+-----END PUBLIC KEY-----`,
+    },
+  ],
+]);

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.44",
-  "description": "Uai host — runs ephemeral AI coding tasks in Docker on a machine you control.",
+  "version": "0.9.46",
+  "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
-  "author": "Diogo Perillo <diogo.perillo@gmail.com>",
+  "author": "Uai Tech <team@runuai.com>",
   "homepage": "https://github.com/runuai/uai#readme",
   "repository": {
     "type": "git",

package/src/index.ts

@@ -75,7 +75,10 @@ import {
 } from "../lib/preview-sidecar";
 import { inspectTunnelContainer } from "../lib/tunnel-runtime";
 import { ContainerRuntimeUnavailableError } from "../lib/runtime-guard";
-import { managedRuntimeAdmissionBlocker } from "../lib/managed-runtime";
+import {
+  managedRuntimeAdmissionBlocker,
+  reclaimAbandonedMaintenanceCheck,
+} from "../lib/managed-runtime";
 import { retireTaskSshIdentityEnsures } from "../lib/git-identity";
 import { removeTaskIdentityStrict } from "../lib/ssh";
 import { proveOrphanTaskResourcesAbsent } from "../lib/task-inventory";
@@ -1347,13 +1350,44 @@ function boundedFailureMessage(error: unknown): string {
 
 /** Managed installation, activation, and uninstall drain instead of admitting work. */
 let lastAdmissionRefusalLogAt = 0;
+let lastAdmissionReclaimAt = 0;
+let admissionReclaimInFlight: Promise<"cleared" | "kept" | "none"> | null =
+  null;
 function managedMaintenanceUnavailable(): HostCommandResult<never> | null {
   const blocker = managedRuntimeAdmissionBlocker();
   if (blocker === null) return null;
+  const now = Date.now();
+  // Mid-run self-heal (the abandoned-uninstall marker recurred WHILE the
+  // service was up, 2026-08-19 — boot-time reclaim alone cannot cover a
+  // writer on a schedule). Reclaim only ever touches a provably-untorn
+  // "checking" marker, under the operation lock; rate-limited so the
+  // cloud's retry hammer cannot churn the lock. The command that observed
+  // the marker still refuses — the NEXT retry finds admission open.
+  if (now - lastAdmissionReclaimAt > 30_000 && !admissionReclaimInFlight) {
+    lastAdmissionReclaimAt = now;
+    admissionReclaimInFlight = reclaimAbandonedMaintenanceCheck();
+    void admissionReclaimInFlight
+      .then((verdict) => {
+        if (verdict === "cleared") {
+          console.warn(
+            "[host-agent] cleared an abandoned maintenance marker mid-run (a managed uninstall/update died before any teardown); task admission reopened",
+          );
+        }
+      })
+      .catch((error) => {
+        console.warn(
+          `[host-agent] mid-run maintenance-marker reclaim failed: ${
+            error instanceof Error ? error.message : String(error)
+          }`,
+        );
+      })
+      .finally(() => {
+        admissionReclaimInFlight = null;
+      });
+  }
   // A refusal must NAME its gate somewhere an operator can find it. Three
   // stacked silent refusals cost hours live (2026-08-18); rate-limited so a
   // retrying cloud cannot flood the log.
-  const now = Date.now();
   if (now - lastAdmissionRefusalLogAt > 60_000) {
     lastAdmissionRefusalLogAt = now;
     console.warn(