@runuai/host 0.9.75 → 0.9.76

package/lib/machine-provider-aws.ts

@@ -22,6 +22,8 @@
 import { spawn } from "node:child_process";
 
 import type { DockerResult } from "./docker-exec";
+import { createHash } from "node:crypto";
+
 import type {
   MachineInfo,
   MachineProvider,
@@ -282,6 +284,28 @@ export function createAwsMachineProvider(
     async launch(spec: MachineSpec): Promise<MachineInfo> {
       const machineId = awsMachineName(spec.taskId);
       const type = (config.instanceType ?? defaultInstanceType)(spec);
+      // The idempotency token binds the machine id TO these exact launch
+      // arguments: EC2 remembers a client token's arguments for ~24h (even
+      // past termination) and rejects reuse with different ones
+      // (IdempotentParameterMismatch — live 2026-08-27: a Resume after a
+      // provider fix changed the user-data and the retry was refused). An
+      // identical retry still cannot mint a second instance; a CHANGED
+      // launch legitimately gets a fresh token, and the resume-aware
+      // provision's describe-first step remains the guard against doubling
+      // a live machine.
+      const launchFingerprint = createHash("sha256")
+        .update(
+          JSON.stringify([
+            spec.image,
+            type,
+            spec.authorizedPublicKey ?? null,
+            config.subnetId ?? null,
+            config.securityGroupId ?? null,
+            config.iamInstanceProfileArn ?? null,
+          ]),
+        )
+        .digest("hex")
+        .slice(0, 16);
       const args = [
         "ec2",
         "run-instances",
@@ -294,7 +318,7 @@ export function createAwsMachineProvider(
         // Idempotency across crashed/retried provisions: the same token can
         // never mint a second instance.
         "--client-token",
-        machineId,
+        `${machineId}-${launchFingerprint}`.slice(0, 64),
         "--tag-specifications",
         `ResourceType=instance,Tags=[{Key=${AWS_MACHINE_TAG},Value=${spec.taskId}},{Key=Name,Value=${machineId}}]`,
         ...(spec.authorizedPublicKey

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.75",
+  "version": "0.9.76",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",