@zixt/host 0.0.9 → 0.0.11

package/dist/index.js

@@ -31,7 +31,7 @@ import { homedir } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.9",
+  version: "0.0.11",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -15938,8 +15938,8 @@ var CreateTaskInput = external_exports.object({
   /** May be empty only when the message carries attachments (TS-15). */
   instructions: external_exports.string().max(1e5),
   priority: Task.shape.priority.default(0),
-  /** Must name one of the selected agent's configured workspaces. */
-  workspace: SafeDisplayPath.optional(),
+  /** Omitted uses the teammate default; null explicitly uses its Zixt-owned persistent folder. */
+  workspace: SafeDisplayPath.nullable().optional(),
   interactionMode: InteractionMode.optional(),
   /** Ask the agent to post a plan via ask_user before doing any work. */
   planFirst: external_exports.boolean().optional(),
@@ -20842,6 +20842,10 @@ var HostClient = class _HostClient {
           });
         }
       }
+      try {
+        this.opts.onTaskSettled?.();
+      } catch {
+      }
     }
   }
   /** Dial an MCP server on the cloud's behalf and report its tools/health. */
@@ -20888,6 +20892,28 @@ function releaseSourceUrl() {
 var DEFAULT_INTERVAL_MS = 15 * 6e4;
 var MIN_INTERVAL_MS = 6e4;
 var REQUEST_TIMEOUT_MS2 = 1e4;
+function createIdleUpdateRestartGate(options) {
+  let pending = null;
+  let restarting = false;
+  const restartIfIdle = () => {
+    if (restarting || pending === null || options.activeTasks() > 0) return;
+    restarting = true;
+    const version2 = pending;
+    pending = null;
+    options.restart(version2);
+  };
+  return {
+    updateAvailable(version2) {
+      if (restarting || pending !== null) return;
+      pending = version2;
+      const activeTasks = options.activeTasks();
+      if (activeTasks > 0) options.deferred?.(version2, activeTasks);
+      restartIfIdle();
+    },
+    taskSettled: restartIfIdle,
+    pendingVersion: () => pending
+  };
+}
 async function fetchPublishedVersion(registryUrl = DEFAULT_REGISTRY_URL, fetchImpl = fetch) {
   try {
     const response = await fetchImpl(registryUrl, {
@@ -21086,7 +21112,7 @@ function posixProcessRecordsFromPs(output) {
   const seen = /* @__PURE__ */ new Set();
   for (const line of output.split(/\r?\n/)) {
     if (!line.trim()) continue;
-    const match = /^\s*(\d+)\s+(\d+)\s+(\d+)\s+(\S+)\s*$/.exec(line);
+    const match = /^\s*(?:(\d+)\s+)?(\d+)\s+(\d+)\s+(\d+)\s+(\S+)\s*$/.exec(line);
     if (!match) {
       throw new ProcessTreeTerminationError(
         "state_unknown",
@@ -21094,12 +21120,13 @@ function posixProcessRecordsFromPs(output) {
       );
     }
     const record2 = {
-      pid: Number(match[1]),
-      ppid: Number(match[2]),
-      pgid: Number(match[3]),
-      stat: match[4]
+      uid: match[1] === void 0 ? null : Number(match[1]),
+      pid: Number(match[2]),
+      ppid: Number(match[3]),
+      pgid: Number(match[4]),
+      stat: match[5]
     };
-    if (!Number.isSafeInteger(record2.pid) || record2.pid <= 0 || !Number.isSafeInteger(record2.ppid) || record2.ppid < 0 || !Number.isSafeInteger(record2.pgid) || record2.pgid < 0 || seen.has(record2.pid)) {
+    if (record2.uid !== null && (!Number.isSafeInteger(record2.uid) || record2.uid < 0) || !Number.isSafeInteger(record2.pid) || record2.pid <= 0 || !Number.isSafeInteger(record2.ppid) || record2.ppid < 0 || !Number.isSafeInteger(record2.pgid) || record2.pgid < 0 || seen.has(record2.pid)) {
       throw new ProcessTreeTerminationError(
         "state_unknown",
         "POSIX process-tree observation returned invalid evidence"
@@ -21112,7 +21139,7 @@ function posixProcessRecordsFromPs(output) {
 }
 async function snapshotPosixProcesses() {
   return new Promise((resolve13, reject3) => {
-    const observer = spawn2("/bin/ps", ["-axo", "pid=,ppid=,pgid=,stat="], {
+    const observer = spawn2("/bin/ps", ["-axo", "uid=,pid=,ppid=,pgid=,stat="], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     let output = "";
@@ -21176,6 +21203,9 @@ async function snapshotPosixProcesses() {
     });
   });
 }
+function legacyPosixProcessIsDefinitelyForeign(record2, currentUid = process.getuid?.()) {
+  return record2.uid !== null && currentUid !== void 0 && record2.uid !== currentUid;
+}
 function capturePosixTree(rootPid, records) {
   const byPid = new Map(records.map((record2) => [record2.pid, record2]));
   const host = byPid.get(process.pid);
@@ -21648,6 +21678,7 @@ async function terminateRecordedProcessTree(pid, identity, options = {}) {
   const liveGroup = records.some((record2) => record2.pgid === pid && !record2.stat.startsWith("Z"));
   if (!root && !liveGroup) return;
   if (!identity) {
+    if (root && legacyPosixProcessIsDefinitelyForeign(root)) return;
     throw new ProcessTreeTerminationError(
       "state_unknown",
       "a live legacy runner has no process identity and cannot be stopped safely"
@@ -25753,6 +25784,7 @@ var GITHUB_TOOL_DEFINITIONS = {
     description: "Open one exact GitHub repository for this task, prepare its local workspace, and enable its granted tools.",
     inputSchema: {
       type: "object",
+      description: "Provide exactly one of repository_id or full_name.",
       properties: {
         repository_id: repositoryId,
         full_name: {
@@ -25760,7 +25792,6 @@ var GITHUB_TOOL_DEFINITIONS = {
           pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
         }
       },
-      oneOf: [{ required: ["repository_id"] }, { required: ["full_name"] }],
       additionalProperties: false
     }
   },
@@ -33311,7 +33342,26 @@ function createCliRunner(adapter, opts = {}) {
           }
         },
         agentOp: (op) => task.agentOp(op),
-        toolPacks
+        // GitHub repository work belongs in the installed `git` and `gh`
+        // commands backed by GithubShellAuth. Do not advertise the bundled
+        // repository/Issue/PR/Actions MCP surface to the model: besides being
+        // redundant, provider schema dialect changes can otherwise prevent a
+        // Claude request before any command runs. Repository creation remains
+        // the one bounded exception because it uses Zixt's durable admin-intent
+        // reservation and ambiguity reconciliation rather than ordinary repo
+        // authority.
+        toolPacks: toolPacks.flatMap((pack) => {
+          if (pack.provider !== "github") return [pack];
+          const tools = pack.tools.filter(({ name }) => name === "github_create_repository");
+          if (tools.length === 0) return [];
+          return [
+            {
+              ...pack,
+              tools,
+              call: (name, args) => name === "github_create_repository" ? pack.call(name, args) : Promise.resolve({ ok: false, error: "Unknown GitHub operation." })
+            }
+          ];
+        })
       });
       const prepared = await adapter.prepareRun({
         task,
@@ -36382,6 +36432,28 @@ var connectionContext = connectionLogContext({
   cloud: cloudTarget,
   version: HOST_VERSION
 });
+var stopUpdateWatch = () => {
+};
+var updateRestartGate = createIdleUpdateRestartGate({
+  activeTasks: () => activeSessions,
+  deferred: (version2, activeTasks) => {
+    log.info("A newer Zixt Host is ready; update waits for active Tasks to finish", {
+      machine,
+      version: version2,
+      running: HOST_VERSION,
+      activeTasks
+    });
+  },
+  restart: (version2) => {
+    log.info("Active Tasks settled; restarting to update Zixt Host", {
+      machine,
+      version: version2,
+      running: HOST_VERSION
+    });
+    stopUpdateWatch();
+    shutdown(UPDATE_EXIT_CODE);
+  }
+});
 var client = new HostClient({
   url: url2,
   token,
@@ -36403,6 +36475,7 @@ var client = new HostClient({
       forgetSupersededTerminalOutcomes(hostId, taskId, epoch, terminalOutcomeRoot)
     ]);
   },
+  onTaskSettled: () => updateRestartGate.taskSettled(),
   onUnwindStalled: (reason) => {
     retainRunAssignments();
     log.error("Task cleanup did not finish; restarting the Host to recover safely", {
@@ -36474,17 +36547,11 @@ function shutdown(exitCode = 0) {
   ).unref();
   void client.stop().then(() => process.exit(exitCode));
 }
-var stopUpdateWatch = !packagedBuild ? () => {
+stopUpdateWatch = !packagedBuild ? () => {
 } : watchForUpdates({
   onUpdateAvailable: (version2) => {
-    log.info("A newer Zixt Host was published; restarting to pick it up", {
-      machine,
-      version: version2,
-      running: HOST_VERSION,
-      activeTasks: activeSessions
-    });
     stopUpdateWatch();
-    shutdown(UPDATE_EXIT_CODE);
+    updateRestartGate.updateAvailable(version2);
   }
 });
 process.on("SIGINT", () => shutdown());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.9",
+  "version": "0.0.11",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",