@sagentlab/navarch-runtime 0.1.72 → 0.1.74

package/dist/git-worktree.cjs

@@ -11,6 +11,14 @@ const worktree_janitor_cjs_1 = require("./worktree-janitor.cjs");
 const node_fs_1 = require("node:fs");
 const sandbox_cjs_1 = require("./sandbox.cjs");
 const repositoryLocks = new Map();
+/**
+ * A freshly minted installation token can be rejected for a second or two
+ * before GitHub propagates it, and git reports that 404 on a private repo as
+ * "Repository not found". Every lease gets a new token, so the first clone
+ * right after a claim can land in that window.
+ */
+const DEFAULT_AUTH_RETRY_DELAYS_MS = [1_000, 2_000, 4_000];
+const TRANSIENT_GIT_AUTH_FAILURE = /Repository not found|Authentication failed|could not read Username|The requested URL returned error: (?:401|403|404)|\bHTTP (?:401|403|404)\b/i;
 /**
  * Maintains one bare repository cache per project and checks out each session
  * into its own uniquely named worktree. Sessions that need a repo-local secret
@@ -27,6 +35,8 @@ class GitWorktree {
     /** Why an existing hosted checkpoint could not be restored, for the session log. */
     hostedCheckpointRestoreFailure = null;
     runner;
+    authRetryDelaysMs;
+    sleep;
     checkpointRoot;
     cloneUrl;
     githubToken;
@@ -64,6 +74,8 @@ class GitWorktree {
         this.branch = `navarch/${branchSlug(options)}${this.taskBranchSuffix}` +
             (options.prContinuation ? `-${sessionKey}` : "");
         this.runner = options.runner ?? sandbox_cjs_1.nodeCommandRunner;
+        this.authRetryDelaysMs = options.authRetryDelaysMs ?? DEFAULT_AUTH_RETRY_DELAYS_MS;
+        this.sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
         this.cloneUrl = options.cloneUrl;
         this.githubToken = options.githubToken;
         this.repoLocalGithubToken = options.repoLocalGithubToken;
@@ -134,7 +146,11 @@ class GitWorktree {
     /** Clones the bare cache if missing, repoints origin if needed, and fetches all branches. */
     async ensureRepositoryCache() {
         if (!(await pathExists(node_path_1.default.join(this.repositoryPath, "HEAD")))) {
-            await this.runGit(["clone", "--bare", this.cloneUrl, this.repositoryPath], true);
+            await this.runAuthenticatedGitWithRetry(["clone", "--bare", this.cloneUrl, this.repositoryPath], 
+            // A failed clone can leave a partial bare repository behind, and git
+            // refuses to clone into a non-empty directory. No HEAD means nothing
+            // usable (or shared) lives there yet.
+            () => node_fs_1.promises.rm(this.repositoryPath, { recursive: true, force: true }));
         }
         else {
             const origin = await this.runGit(["--git-dir", this.repositoryPath, "remote", "get-url", "origin"], false);
@@ -142,14 +158,34 @@ class GitWorktree {
                 await this.runGit(["--git-dir", this.repositoryPath, "remote", "set-url", "origin", this.cloneUrl], false);
             }
         }
-        await this.runGit([
+        await this.runAuthenticatedGitWithRetry([
             "--git-dir",
             this.repositoryPath,
             "fetch",
             "--prune",
             "origin",
             "+refs/heads/*:refs/remotes/origin/*",
-        ], true);
+        ]);
+    }
+    /**
+     * Runs a token-authenticated git command, retrying with backoff while GitHub
+     * rejects the credential in a way a not-yet-propagated token produces.
+     * Without a token such a failure is a real access problem and fails at once.
+     */
+    async runAuthenticatedGitWithRetry(args, beforeRetry) {
+        for (let attempt = 0;; attempt += 1) {
+            try {
+                return await this.runGit(args, true);
+            }
+            catch (error) {
+                const delay = this.authRetryDelaysMs[attempt];
+                if (!this.githubToken || delay === undefined || !TRANSIENT_GIT_AUTH_FAILURE.test(errorMessage(error))) {
+                    throw error;
+                }
+                await this.sleep(delay);
+                await beforeRetry?.();
+            }
+        }
     }
     async addSessionWorktree() {
         // A failed session may have pushed before it could report completion. The

package/dist/heartbeat-loop.cjs

@@ -102,6 +102,9 @@ class MachineHeartbeatLoop {
                         available_capacity: this.draining ? 0 : this.capacity.available(),
                         capabilities: this.config.capabilities,
                         ...(agentUsage ? { agent_usage: agentUsage } : {}),
+                        // Explicit null when unpinned, so the control plane clears a model
+                        // this machine reported before its pin was removed.
+                        default_model: this.config.model ?? null,
                         runtime: {
                             version: version_cjs_1.RUNTIME_VERSION,
                             updater_protocol: version_cjs_1.UPDATER_PROTOCOL_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sagentlab/navarch-runtime",
-  "version": "0.1.72",
+  "version": "0.1.74",
   "description": "Navarch machine-side session manager: claims delivery tasks and runs them through local coding agents.",
   "type": "commonjs",
   "license": "MIT",