@runuai/host 0.9.92 → 0.9.94

package/lib/browser-testing.ts

@@ -941,6 +941,15 @@ console.log(
  * lockfile and PIDFILES — never pgrep: a pgrep -f guard sharing a cmdline
  * with its own payload self-matches and skips the start (this exact bug
  * kept the stack down in every container until 2026-07-08).
+ *
+ * The pidfile tracks the LOOP SHELL, not the port. When a loop is orphaned
+ * — the display owner changes, or two ensures race, and the single pidfile
+ * only remembers the latest — the previous loop's websockify keeps holding
+ * 6080, and SO_REUSEADDR lets the new one bind alongside it. The kernel
+ * then round-robins connections across both, so the viewer lands on a live
+ * proxy only SOMETIMES and reconnects the rest (live 2026-09-02). So the
+ * start branch — reached only when the tracked loop is already dead — first
+ * reaps anything still holding the port, guaranteeing exactly one listener.
  */
 const VIEWER_STEPS: string[] = [
   // Xvfb — one-shot; the X lockfile is the truth (also set when an agent
@@ -949,9 +958,9 @@ const VIEWER_STEPS: string[] = [
   `[ -x /usr/bin/Xvfb ] || exit 0; [ -e ${X_LOCK} ] || /usr/bin/nohup /usr/bin/${XVFB_CMD} >>/tmp/uai-xvfb.log 2>&1 &`,
   // x11vnc under a restart loop (it exits whenever the X server isn't up
   // yet). Pidfile-guarded.
-  `[ -x /usr/bin/x11vnc ] || exit 0; [ -f /tmp/uai-x11vnc.pid ] && /usr/bin/kill -0 "$(/usr/bin/cat /tmp/uai-x11vnc.pid)" 2>/dev/null && exit 0; /usr/bin/nohup /bin/sh -c 'echo $$ > /tmp/uai-x11vnc.pid; while true; do /usr/bin/x11vnc -display ${SERVER_DISPLAY} -forever -shared -nopw -quiet >>/tmp/uai-x11vnc.log 2>&1; /bin/sleep 2; done' >/dev/null 2>&1 &`,
+  `[ -x /usr/bin/x11vnc ] || exit 0; [ -f /tmp/uai-x11vnc.pid ] && /usr/bin/kill -0 "$(/usr/bin/cat /tmp/uai-x11vnc.pid)" 2>/dev/null && exit 0; /usr/bin/pkill -f 'x11vnc -display' 2>/dev/null; /usr/bin/nohup /bin/sh -c 'echo $$ > /tmp/uai-x11vnc.pid; while true; do /usr/bin/x11vnc -display ${SERVER_DISPLAY} -forever -shared -nopw -quiet >>/tmp/uai-x11vnc.log 2>&1; /bin/sleep 2; done' >/dev/null 2>&1 &`,
   // websockify/noVNC under the same pattern.
-  `[ -x /usr/bin/websockify ] || exit 0; [ -f /tmp/uai-novnc.pid ] && /usr/bin/kill -0 "$(/usr/bin/cat /tmp/uai-novnc.pid)" 2>/dev/null && exit 0; /usr/bin/nohup /bin/sh -c 'echo $$ > /tmp/uai-novnc.pid; while true; do /usr/bin/websockify --web=/usr/share/novnc 0.0.0.0:6080 localhost:5900 >>/tmp/uai-websockify.log 2>&1; /bin/sleep 2; done' >/dev/null 2>&1 &`,
+  `[ -x /usr/bin/websockify ] || exit 0; [ -f /tmp/uai-novnc.pid ] && /usr/bin/kill -0 "$(/usr/bin/cat /tmp/uai-novnc.pid)" 2>/dev/null && exit 0; /usr/bin/pkill -f 'websockify.*6080' 2>/dev/null; /usr/bin/nohup /bin/sh -c 'echo $$ > /tmp/uai-novnc.pid; while true; do /usr/bin/websockify --web=/usr/share/novnc 0.0.0.0:6080 localhost:5900 >>/tmp/uai-websockify.log 2>&1; /bin/sleep 2; done' >/dev/null 2>&1 &`,
 ];
 
 const DEFAULT_NODE_BIN =

package/lib/machine-provider-aws.ts

@@ -101,11 +101,18 @@ export function awsMachineName(taskId: string): string {
   return `uai-machine-${taskId.toLowerCase()}`;
 }
 
-/** Smallest Graviton type satisfying both dimensions. */
+/** Smallest Graviton type satisfying both dimensions.
+ *
+ * FLOORS AT 16GiB (owner decision 2026-08-31, priced at $0.25/machine-up
+ * hour): an 8GiB machine thrashed to death twice in one day under the
+ * ordinary heavy shape — a 5-agent crew + Turbopack dev server + editor +
+ * VNC browser — and a memory wall reads as "the product is broken", which
+ * costs more than the larger instance. m7g (sustained) over t4g (burstable)
+ * deliberately: compile bursts on a drained CPU-credit balance are the same
+ * wall wearing a different mask. The floor is AWS-only — local VM sizing
+ * has its own constraints and keeps the spec-driven path. */
 export function defaultInstanceType(spec: MachineSpec): string {
   const ladder: Array<[string, number, number]> = [
-    ["m7g.medium", 1, 4096],
-    ["m7g.large", 2, 8192],
     ["m7g.xlarge", 4, 16384],
     ["m7g.2xlarge", 8, 32768],
     ["m7g.4xlarge", 16, 65536],
@@ -142,7 +149,10 @@ export function awsUserData(authorizedPublicKey: string): string {
     // real machine task; the HOSTS got their swapfile in 0.9.85, the
     // machines never did). Best-effort: a machine without fallocate still
     // boots.
-    "(fallocate -l 4G /swapfile && chmod 600 /swapfile && mkswap /swapfile && swapon /swapfile && echo '/swapfile none swap sw 0 0' >> /etc/fstab) || true",
+    // 16G (owner decision 2026-08-31): the graceful-degradation floor has to
+    // absorb the whole heavy shape, not soften its first half — 4G filled
+    // and the wall moved instead of vanishing. Disk is already paid for.
+    "(fallocate -l 16G /swapfile && chmod 600 /swapfile && mkswap /swapfile && swapon /swapfile && echo '/swapfile none swap sw 0 0' >> /etc/fstab) || true",
     // The task OWNS its machine (ADR-121 — per-customer kernel isolation is
     // the whole point); denying sudo just breaks project setups that
     // container tasks handle fine (live 2026-08-31: a Hightop machine task

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.92",
+  "version": "0.9.94",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",