external-subagent 0.5.3 → 0.5.5

package/cli/commands/update.mjs

@@ -69,9 +69,36 @@ export async function updateCommand(paths, args = [], daemon = {}) {
   // returns with the daemon still serving spawns. A pure reaffirmal that
   // activates nothing drains only for its claim and needs no candidate.
   const preflight = daemon.preflightUpdate || preflightUpdate;
-  if (!(reconciling && !coordinate)) preflight({ version: requestedVersion });
+  let candidate = null;
+  if (!(reconciling && !coordinate)) {
+    candidate = preflight({ version: requestedVersion });
+  }
+  // A JavaScript-only release ships a native payload byte-identical to the
+  // one the running daemon already executes. Draining and restarting the
+  // service for it would bounce every live subagent task for nothing, and
+  // the health gate would then refuse the "new" payload anyway: the daemon
+  // self-reports the version baked into the (unchanged) binary, which can
+  // never equal the requested JS-only version. So when the running daemon's
+  // self-reported artifact digest matches the candidate's verified daemon
+  // digest, this run skips the drain/service-restart entirely: the JS state
+  // still activates, host bindings still reconcile, and the service keeps
+  // executing the very bytes it already runs. The restart path stays
+  // untouched for any real binary change (digest mismatch) and for offline
+  // daemons (nothing to compare against; the activation boots the service).
+  let jsOnlyRestartSkip = false;
+  if (candidate?.daemon?.digest) {
+    try {
+      const live = await rpc(socket, 'status', {});
+      const liveArtifact = live?.identity?.daemon?.artifact;
+      if (liveArtifact?.sha256 === candidate.daemon.digest) jsOnlyRestartSkip = true;
+    } catch { /* offline or unanswerable daemon: take the normal restart path */ }
+  }
   let status = null;
   let online = true;
+  if (jsOnlyRestartSkip) {
+    online = false;
+    status = { ready_for_activation: true, activation_claim: null, js_only_restart_skipped: true };
+  } else {
   try {
     status = await rpc(socket, 'drain', cancelActive ? { cancel_active: true } : {});
   } catch (error) {
@@ -99,6 +126,7 @@ export async function updateCommand(paths, args = [], daemon = {}) {
     }
     status = await rpc(socket, 'activate-ready', {});
   }
+  }
   const claim = online ? status.activation_claim : `offline-${process.pid}-${Date.now()}-activation`;
   if (!claim) return { ...status, activation_claim: null, update: 'not_activated' };
   if (prior?.status === 'success' && prior.claim === claim
@@ -123,7 +151,11 @@ export async function updateCommand(paths, args = [], daemon = {}) {
   let partialHosts = null;
   try {
     const serviceInstalled = typeof daemon.hasInstalledService === 'function' ? daemon.hasInstalledService(paths) : hasInstalledService(paths);
-    const serviceDue = serviceInstalled && !daemon.skipServiceActivation;
+    // A JS-only release skips the service restart (see jsOnlyRestartSkip):
+    // the running daemon already executes the candidate's exact daemon bytes,
+    // so a bootout/bootstrap would only bounce live tasks and then fail the
+    // version-bearing health gate against the unchanged binary.
+    const serviceDue = serviceInstalled && !daemon.skipServiceActivation && !jsOnlyRestartSkip;
     result = (reconciling && !coordinate)
       ? { ...reconcileInstallation(paths, { cancelActive, yes }), homes: reconcileCodexHomes(paths), zcode: reconcileZcodeBinding(paths), dsh: reconcileDshBindings(paths) }
       : await (daemon.updateInstallation || updateInstallation)(paths, { version: requestedVersion, deferCodexSync: serviceDue });
@@ -163,8 +195,8 @@ export async function updateCommand(paths, args = [], daemon = {}) {
     partialHosts = partialHostSync(result);
     atomicWrite(receiptPath(paths), jsonBytes(partialHosts
       ? { claim, version: receiptVersion, status: 'partial', retryable: true, homes: result.homes, zcode: result.zcode, result }
-      : { claim, version: receiptVersion, status: 'success', result }));
-    if (partialHosts === null) return result;
+      : { claim, version: receiptVersion, status: 'success', ...(jsOnlyRestartSkip ? { js_only_restart_skipped: true } : {}), result }));
+    if (partialHosts === null) return jsOnlyRestartSkip ? { ...result, js_only_restart_skipped: true } : result;
   } catch (error) {
     // Snapshot what the updater recorded before rollback replaces it, so the
     // receipt keeps the candidate and active evidence the retry will need.

package/cli/constants.mjs

@@ -12,7 +12,7 @@ const IS_DEBUG_VARIANT = process.env.EXTERNAL_SUBAGENT_VARIANT === 'debug';
 
 export const PRODUCT_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debug' : 'external-subagent';
 export const PRODUCT_ID = IS_DEBUG_VARIANT ? 'external_subagent_debug' : 'external_subagent';
-export const VERSION = '0.5.3';
+export const VERSION = '0.5.5';
 export const LAUNCH_AGENT_LABEL = IS_DEBUG_VARIANT ? 'com.external-subagent-debug.daemon' : 'com.external-subagent.daemon';
 export const DAEMON_BIN_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debugd' : 'external-subagentd';
 export const MCP_BIN_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debug-mcp' : 'external-subagent-mcp';

package/cli/install/dsh.mjs

@@ -140,7 +140,7 @@ function managedBlock(binding, socket) {
     SENTINEL,
     '- insert:',
     `    - id: ${MCP_ENTRY_ID}`,
-    `    - name: ${yamlScalar(MCP_CLIENT_PACKAGE)}`,
+    `      name: ${yamlScalar(MCP_CLIENT_PACKAGE)}`,
     '      config:',
     `        serverName: ${yamlScalar('external_subagent')}`,
     `        transport: ${yamlScalar('stdio')}`,
@@ -394,15 +394,22 @@ function verifyWithDump(dshHome, profileName, options = {}) {
   // composition (an older manual row, another profile's leftovers in a
   // copied fixture) could otherwise satisfy a substring check and mask a
   // silently-dropped managed row.  The composed dump re-serializes the
-  // entry, so anchor on the plugin name line and require the serverName
-  // within the following mapping block.  The dump may render the package
-  // name quoted (`'@deepseek-ai/dsh-mcp-client'`) or bare depending on the
-  // dsh version, so anchor on both spellings.
-  const anchor = Math.max(out.indexOf(`name: ${MCP_CLIENT_PACKAGE}\n`), out.indexOf(`name: '${MCP_CLIENT_PACKAGE}'`));
+  // entry with its id first (dsh emits `id`, `name`, `config` in key
+  // order), so anchor on OUR entry id and require both the plugin name and
+  // the serverName in the same mapping block.  Anchoring on the id is what
+  // makes this structural: a sibling `- id:`/`- name:` regression (two list
+  // items instead of one) drops the id from the composed entry, and this
+  // check then fails even though a bare `name:` line still exists for some
+  // other mcp-client row in the dump.  The dump may render the package name
+  // quoted or bare depending on the dsh version, so accept both spellings.
+  const anchor = out.indexOf(`- id: ${MCP_ENTRY_ID}\n`);
   if (anchor === -1) {
-    throw new CliError('DSH_BINDING_UNVERIFIABLE', 'the managed mcp-client entry is absent from the composed profile dump');
+    throw new CliError('DSH_BINDING_UNVERIFIABLE', `the managed entry id ${MCP_ENTRY_ID} is absent from the composed profile dump`);
   }
   const window = out.slice(anchor, anchor + 1200);
+  if (!window.includes(`name: ${MCP_CLIENT_PACKAGE}`) && !window.includes(`name: '${MCP_CLIENT_PACKAGE}'`)) {
+    throw new CliError('DSH_BINDING_UNVERIFIABLE', 'the managed entry is present but does not carry the mcp-client plugin name');
+  }
   if (!window.includes('serverName: external_subagent')) {
     throw new CliError('DSH_BINDING_UNVERIFIABLE', 'the managed mcp-client entry is present but its serverName is missing from the composed dump');
   }

package/npm/native/darwin-arm64/payload.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "product": "external-subagent",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "platform": "darwin-arm64",
   "files": [
     {

package/npm/native/linux-x64/payload.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "product": "external-subagent",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "platform": "linux-x64",
   "files": [
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "external-subagent",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "description": "Manage bounded ZCode, DeepSeek Harness (DSH), Codex, and Google Antigravity (agy) subagent tasks through a local MCP service for any local host (Codex, ZCode, or a custom MCP client)",
   "type": "module",
   "license": "MIT",