byollm 0.1.0-alpha.71 → 0.1.0-alpha.72

package/README.md

@@ -1,5 +1,5 @@
 > [!WARNING]
-> **Alpha (`0.1.0-alpha.71`) — under active development. Don't use this yet.**
+> **Alpha (`0.1.0-alpha.72`) — under active development. Don't use this yet.**
 >
 > Install it deliberately: `npx byollm@alpha`, or `npm install byollm@alpha`.
 >
@@ -85,7 +85,7 @@
 > packages published and `@byollm/server` did not: a Sigstore
 > transparency-log 409 on its provenance attestation. The workflow's
 > "already published" guard correctly refuses to resume a partial publish,
-> so `0.1.0-alpha.71` is that release, whole.
+> so `0.1.0-alpha.72` is that release, whole.
 >
 > If you run the Supabase adapter, `alpha.21` needs
 > `20260819010000_completed_by_lease_id.sql`: alpha.19 shipped §3.6's

package/dist/bin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   main
-} from "./chunk-YJ3OSRLT.js";
+} from "./chunk-4T4QT3GX.js";
 
 // src/bin.ts
 process.exitCode = await main(process.argv.slice(2));

package/dist/{chunk-YJ3OSRLT.js → chunk-4T4QT3GX.js}

@@ -2171,6 +2171,22 @@ function describeDrift(ms) {
   return `${amount} ${ms > 0 ? "ahead of" : "behind"} the server`;
 }
 
+// src/revoked.ts
+var REVOKED_SENTENCE = "this device was revoked \u2014 re-pair to return";
+function revokedRemedy(origin) {
+  return `  re-pair:  byollm connect${origin === void 0 ? "" : ` ${origin}`}
+`;
+}
+async function revokedMark(healthPath) {
+  return (await readHealth(healthPath))?.revoked;
+}
+async function clearRevokedMark(healthPath) {
+  const health = await readHealth(healthPath);
+  if (health?.revoked === void 0) return;
+  const { revoked: _gone, ...rest } = health;
+  await writeHealth(healthPath, rest);
+}
+
 // src/test-your-device.ts
 var TEST_YOUR_DEVICE = "TEST YOUR DEVICE: Visit https://test.byollm.cloud and press the Connect BYOLLM button.";
 
@@ -3918,6 +3934,8 @@ var Runner = class {
     this.#revoked = true;
     this.#stopped = true;
     this.cancelAll();
+    void this.#recordHealth().catch(() => {
+    });
     this.#options.onEvent?.({ type: "revoked" });
     return true;
   }
@@ -3944,7 +3962,13 @@ var Runner = class {
       at: this.#now(),
       consecutiveFailures: this.#consecutiveFailures,
       ...this.#lastUpstreamError === void 0 ? {} : { lastError: this.#lastUpstreamError },
-      origin: this.#options.client.origin
+      origin: this.#options.client.origin,
+      ...this.#revoked ? {
+        revoked: {
+          at: this.#now(),
+          origin: this.#options.client.origin
+        }
+      } : {}
     });
   }
   async #tick() {
@@ -4775,7 +4799,7 @@ function refusalOf(command, result) {
   const denied = /access is denied|requires elevation|0x80070005/i.test(said);
   return denied ? `${command.join(" ")} \u2014 this machine will not let you register a scheduled task (no administrator rights, or IT policy).` : `${command.join(" ")} \u2014 exit ${String(result.code)}` + (said === "" ? "" : `: ${said}`);
 }
-async function installService(target, run2, wait = (ms) => new Promise((resolve) => setTimeout(resolve, ms))) {
+async function installService(target, run2, wait = (ms) => new Promise((resolve) => setTimeout(resolve, ms)), revoked = false) {
   const plan = servicePlan(target);
   const refusal = refuseToSupervise(target.scriptPath);
   if (refusal !== null) {
@@ -4840,7 +4864,25 @@ async function installService(target, run2, wait = (ms) => new Promise((resolve)
     return {
       ok: false,
       plan,
-      lines: [
+      lines: revoked ? [
+        /**
+         * The cause, not the symptom — ruled 2026-09-03 (2).
+         *
+         * Todd revoked a machine and `install` told him "retry: byollm
+         * install". Honest about the failure and wrong about the fix: the
+         * daemon starts, is refused, and stops, and it will do that every
+         * time. A remedy must match the cause.
+         */
+        `${plan.supervisor} accepted the service, and the daemon is not running.`,
+        "",
+        `  ${REVOKED_SENTENCE}.`,
+        "",
+        `  re-pair:  byollm connect`,
+        `  then:     byollm install`,
+        "",
+        `Installing again will not change this \u2014 the refusal is the hub's,`,
+        `and it stands until this device is approved again.`
+      ] : [
         `${plan.supervisor} accepted the service, and the daemon is not running.`,
         "",
         `  ${started.state === "absent" ? "the supervisor no longer knows it" : started.detail}`,
@@ -5155,7 +5197,8 @@ async function commandInstall(paths, io, service) {
   const result = await installService(
     serviceTarget(paths, service),
     service.run,
-    ...service.wait === void 0 ? [] : [service.wait]
+    service.wait ?? ((ms) => new Promise((r) => setTimeout(r, ms))),
+    await revokedMark(paths.health) !== void 0
   );
   for (const line of result.lines) (result.ok ? io.out : io.err)(`${line}
 `);
@@ -5173,14 +5216,16 @@ async function commandUninstall(paths, io, service) {
 `);
   return 0;
 }
-async function supervisionLine(paths, service) {
-  const plan = servicePlan(serviceTarget(paths, service));
-  const state = await serviceState(plan, service.run);
+async function supervisionLine(plan, state, revoked) {
   switch (state.state) {
     case "running":
       return `service: running under ${plan.supervisor}
 `;
     case "installed": {
+      if (revoked) {
+        return `service: installed, not serving \u2014 ${REVOKED_SENTENCE}.
+`;
+      }
       const program = await installedProgram(plan);
       const gone = program === null || program.exists ? "" : `
   the program it runs is missing: ${program.path}
@@ -5442,6 +5487,7 @@ Connecting to ${origin}
   await pairings.load();
   reportSkipped(pairings, io);
   await pairings.put(result.pairing);
+  await clearRevokedMark(paths.health);
   io.out(` paired as ${result.pairing.ownerLabel ?? result.pairing.owner}
 `);
   const pinned = Object.values(result.pairing.sites);
@@ -5478,8 +5524,7 @@ async function commandRun(paths, args, io, signal) {
   const target = args[0];
   const origins = target === void 0 ? pairings.list().map((pairing) => pairing.origin) : [normalizeOrigin(target)];
   if (origins.length === 0) {
-    io.err("No apps are paired yet. Run `byollm connect <url>` first.\n");
-    return 2;
+    return nothingToServe(paths, io, signal);
   }
   return runLoop(paths, origins, io, signal);
 }
@@ -5536,7 +5581,32 @@ ${wrap(
   );
   await rm5(paths.allowlist, { force: true });
 }
-async function runLoop(paths, origins, io, signal) {
+async function nothingToServe(paths, io, signal, supervised = !process.stdout.isTTY) {
+  const mark = await revokedMark(paths.health);
+  if (mark === void 0) {
+    io.err(
+      "No app is paired, so there is nothing to serve \u2014 this device will appear on rosters and answer nothing.\n  byollm connect <url>   pair this device\n  byollm status          what this device believes right now\n"
+    );
+    return 2;
+  }
+  io.err(
+    `${REVOKED_SENTENCE}.
+  ${mark.origin} no longer accepts this device's credential, so there is nothing to serve.
+` + revokedRemedy(mark.origin)
+  );
+  if (!supervised) return 2;
+  await new Promise((resolve) => {
+    if (signal === void 0 || signal.aborted) {
+      resolve();
+      return;
+    }
+    signal.addEventListener("abort", () => {
+      resolve();
+    });
+  });
+  return 0;
+}
+async function runLoop(paths, origins, io, signal, supervised = !process.stdout.isTTY) {
   const { loaded, ingress, budgets, spend, spentGrants } = await context(paths);
   const identity = new DeviceIdentity(paths.keys);
   const pairings = new Pairings(paths.pairings);
@@ -5624,10 +5694,7 @@ async function runLoop(paths, origins, io, signal) {
     runners.push(runner);
   }
   if (runners.length === 0) {
-    io.err(
-      "No app is paired, so there is nothing to serve \u2014 this device will appear on rosters and answer nothing.\n  byollm connect <url>   pair this device\n  byollm status          what this device believes right now\n"
-    );
-    return 2;
+    return nothingToServe(paths, io, signal, supervised);
   }
   if (signal === void 0) {
     const stop = () => {
@@ -5756,10 +5823,20 @@ async function commandStatus(paths, io, service) {
   );
   const health = await readHealth(paths.health);
   const failing = health !== void 0 && health.consecutiveFailures >= FAILURES_BEFORE_ALARM;
+  const plan = servicePlan(serviceTarget(paths, service));
+  const supervision = await serviceState(plan, service.run);
+  const revoked = await revokedMark(paths.health);
   io.out(
-    `state: ${paused ? "PAUSED" : failing ? "NOT REPORTING" : "running"}
+    `state: ${revoked !== void 0 ? "REVOKED" : paused ? "PAUSED" : supervision.state === "installed" ? "NOT RUNNING" : failing ? "NOT REPORTING" : "running"}
 `
   );
+  if (revoked !== void 0) {
+    io.out(
+      `  ${REVOKED_SENTENCE}.
+  ${revoked.origin} no longer accepts this device's credential.
+` + revokedRemedy(revoked.origin)
+    );
+  }
   if (failing) {
     io.out(
       `  the hub has rejected this device's last ${String(health.consecutiveFailures)} messages \u2014 it is running and invisible.
@@ -5769,7 +5846,7 @@ async function commandStatus(paths, io, service) {
 `
     );
   }
-  io.out(await supervisionLine(paths, service));
+  io.out(await supervisionLine(plan, supervision, revoked !== void 0));
   io.out("\n");
   io.out("paired apps\n");
   const list = pairings.list();
@@ -6376,7 +6453,7 @@ async function exists(path) {
 }
 
 // src/index.ts
-var DAEMON_VERSION = "0.1.0-alpha.71";
+var DAEMON_VERSION = "0.1.0-alpha.72";
 function daemonVersion() {
   return {
     daemon: DAEMON_VERSION,
@@ -6428,4 +6505,4 @@ export {
   runCli,
   main
 };
-//# sourceMappingURL=chunk-YJ3OSRLT.js.map
+//# sourceMappingURL=chunk-4T4QT3GX.js.map