local-commander-agent-linux-x64 0.3.48 → 0.3.50

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-commander-agent-linux-x64",
-  "version": "0.3.48",
+  "version": "0.3.50",
   "description": "Local Commander runtime for Linux x64. Installed automatically by local-commander-agent; run npx local-commander-agent@latest instead.",
   "os": [
     "linux"

package/runtime/agent.mjs

@@ -31118,7 +31118,7 @@ var NativeTools = class {
     if (call.name === "command_run") {
       if (!["win32", "linux", "darwin"].includes(process.platform)) fail3("COMMAND_NOT_ALLOWED");
       const cwd2 = await resolve(call.args.cwd, true), program = await this.resolveProgram(call.args.command, workspace2, call.args.args);
-      const claims2 = writeClaim(cwd2);
+      const claims2 = call.args.cwd === void 0 ? [{ path: cwd2, namespace: "process", mode: "read" }] : writeClaim(cwd2);
       return { call, claims: claims2, execution: { ...program, cwd: cwd2 }, run: async (signal, onStarted, onOutput, onSupervisor) => {
         let r;
         try {
@@ -31386,7 +31386,10 @@ var NativeScheduler = class {
     } catch {
     }
   }
-  schedule(id2, claims, deadlineAt, run2, signal) {
+  /** lockWaitMs: how long a job may wait behind a conflicting claim before it is refused with
+   * RESOURCE_LOCKED (proved not started), so the caller hears back inside its relay window
+   * instead of timing out (#504). Waiting only for a free slot still lasts until the deadline. */
+  schedule(id2, claims, deadlineAt, run2, signal, lockWaitMs) {
     if (!this.accepting) return Promise.reject(Error("AGENT_PAUSED"));
     if (!id2 || id2.length > 100 || this.active.has(id2) || this.waiting.some((j) => j.id === id2)) return Promise.reject(Error("DUPLICATE_SCHEDULED_EXECUTION"));
     if (!Array.isArray(claims) || !claims.length || claims.length > 32 || claims.some((c) => !c || !path19.isAbsolute(c.path) || !["read", "write"].includes(c.mode))) return Promise.reject(Error("INVALID_RESOURCE_CLAIM"));
@@ -31407,6 +31410,12 @@ var NativeScheduler = class {
       };
       job.aborted = () => remove("CANCELLED_BEFORE_ACCEPTANCE");
       job.timer = setTimeout(() => remove("ADMISSION_DEADLINE_EXPIRED"), Math.min(2147483647, Math.max(1, deadline - Date.now())));
+      if (lockWaitMs !== void 0 && Number.isFinite(lockWaitMs) && lockWaitMs >= 0) {
+        const lockIn = Math.min(lockWaitMs, deadline - Date.now() - 1e3);
+        if (lockIn > 0) job.lockTimer = setTimeout(() => {
+          if (this.lockBlocked(job)) remove("RESOURCE_LOCKED");
+        }, lockIn);
+      }
       signal?.addEventListener("abort", job.aborted, { once: true });
       this.waiting.push(job);
       this.observe({ kind: "queued", executionId: id2, deadlineAt: deadline });
@@ -31415,8 +31424,21 @@ var NativeScheduler = class {
   }
   cleanup(job) {
     clearTimeout(job.timer);
+    clearTimeout(job.lockTimer);
     if (job.aborted) job.signal?.removeEventListener("abort", job.aborted);
   }
+  /** True when a waiting job is held by a conflicting claim: a running job, or an earlier conflicting
+   * waiter that is itself lock-blocked. A wait that is only for a free slot is never a lock. */
+  lockBlocked(job) {
+    const index = this.waiting.indexOf(job);
+    if (index < 0) return false;
+    const blocked2 = [];
+    for (let i = 0; i <= index; i++) {
+      const current2 = this.waiting[i];
+      blocked2[i] = [...this.active.values()].some((claims) => claimsConflict(claims, current2.claims)) || this.waiting.slice(0, i).some((older, j) => blocked2[j] === true && claimsConflict(older.claims, current2.claims));
+    }
+    return blocked2[index] === true;
+  }
   pump() {
     for (let i = 0; i < this.waiting.length && this.active.size < this.safeSlots; ) {
       const job = this.waiting[i];
@@ -32119,6 +32141,7 @@ var knownCodes = /* @__PURE__ */ new Set([
   "WORKSPACE_CHANGED",
   "WORKSPACE_UNAVAILABLE",
   "RESOURCE_BUSY",
+  "RESOURCE_LOCKED",
   "AGENT_PAUSED",
   "CANCELLED_BEFORE_ACCEPTANCE",
   "ADMISSION_DEADLINE_EXPIRED",
@@ -32133,6 +32156,7 @@ var knownCodes = /* @__PURE__ */ new Set([
   "SCREEN_ENCODER_UNAVAILABLE",
   "SCREEN_RECORDING_PERMISSION_REQUIRED"
 ]);
+var LOCK_WAIT_MS = 2e4;
 function safeCode(error62) {
   const code = error62 instanceof NativeToolError ? error62.code : error62 instanceof Error ? error62.message : "";
   return knownCodes.has(code) || /^GUARD_[A-Z_]{1,30}$/.test(code) ? code : "TOOL_FAILED";
@@ -32344,7 +32368,7 @@ var NativeRuntime = class {
         const final = await this.options.journal.finish(binding2.executionId, image === void 0 ? journalOutput : { ...journalOutput, stdout: screenshotMetadata(image) }, resultCode);
         const outbound = await outboundResult(runnable.call, journalResult(final.result, resultCode), binding2, this.optionalTelemetry, this.options.efficiencyLedger);
         this.send({ type: "result", version: 1, binding: binding2, result: image === void 0 ? outbound : { ...outbound, stdout: image } });
-      }, abort.signal);
+      }, abort.signal, LOCK_WAIT_MS);
       context.task = work.catch(async (error62) => {
         if (!context.accepted) {
           if (context.guardPermit) await this.options.guard.rejected(context.guardPermit, safeCode(error62)).catch(() => {
@@ -47399,9 +47423,9 @@ function waitForMessage(socket, maxBytes, timeoutMs2, timeoutCode) {
       cleanup();
       reject(new RelayClientError(error62.code === "WS_ERR_UNSUPPORTED_MESSAGE_LENGTH" ? "RELAY_FRAME_TOO_LARGE" : "RELAY_SOCKET_FAILED"));
     };
-    const onClose = () => {
+    const onClose = (code, reason) => {
       cleanup();
-      reject(new RelayClientError("RELAY_SOCKET_CLOSED"));
+      reject(new RelayClientError(code === 1008 && reason.toString("utf8") === "device_quarantined" ? "RELAY_DEVICE_QUARANTINED" : "RELAY_SOCKET_CLOSED"));
     };
     socket.once("message", onMessage);
     socket.once("error", onError);
@@ -48997,7 +49021,7 @@ var NativeEventBuffer = class {
 
 // agent/src/native-event-supervisor.ts
 var eventKinds = /* @__PURE__ */ new Set(["queued", "admitted", "released", "queue_rejected", "prepared", "accepted", "running", "result", "not_accepted", "connected", "disconnected", "mailbox_expired"]);
-var codes = /* @__PURE__ */ new Set(["SUCCESS", "EXECUTION_UNKNOWN", "AGENT_RESTARTED", "ADMISSION_DEADLINE_EXPIRED", "CANCELLED_BEFORE_ACCEPTANCE", "RESOURCE_BUSY", "AGENT_PAUSED", "PREPARATION_EXPIRED", "CANCELLED", "TIMEOUT", "USER_PROGRAM_FAILED", "TOOL_FAILED", "MAILBOX_EXPIRED"]);
+var codes = /* @__PURE__ */ new Set(["SUCCESS", "EXECUTION_UNKNOWN", "AGENT_RESTARTED", "ADMISSION_DEADLINE_EXPIRED", "CANCELLED_BEFORE_ACCEPTANCE", "RESOURCE_BUSY", "RESOURCE_LOCKED", "AGENT_PAUSED", "PREPARATION_EXPIRED", "CANCELLED", "TIMEOUT", "USER_PROGRAM_FAILED", "TOOL_FAILED", "MAILBOX_EXPIRED"]);
 var NativeEventSupervisor = class {
   constructor(onChange) {
     this.onChange = onChange;
@@ -50829,9 +50853,10 @@ async function restoreContentAudit(input2, output2, key) {
 }
 
 // agent/src/main.ts
-var AGENT_VERSION2 = true ? "0.3.48" : "0.3.2";
+var AGENT_VERSION2 = true ? "0.3.50" : "0.3.2";
 var NETWORK_PUBLIC_KEY = true ? "-----BEGIN PUBLIC KEY-----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\nn6HK/F5May25c6oMmS3nh/NsiZopL1OvdtWKTt1L4WlRAgMBAAE=\n-----END PUBLIC KEY-----\n" : "";
 var AI_CONNECTION_SHIPPED = false;
+var QUARANTINE_RETRY_MS = 6e4;
 function processAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
   try {
@@ -50977,7 +51002,7 @@ async function runAgent(options) {
   try {
     while (!options.signal.aborted) {
       computerName = await readComputerName();
-      let ready;
+      let ready, wait = delay4;
       const readyPromise = new Promise((resolve) => {
         ready = resolve;
       });
@@ -51066,6 +51091,8 @@ async function runAgent(options) {
         ready();
         monitor(() => options.monitor?.connectionFailed(error62));
         if (error62 instanceof RelayClientError && ["RELAY_CONNECT_FAILED", "RELAY_CONNECT_CLOSED", "RELAY_CONNECT_TIMEOUT", "RELAY_HANDSHAKE_TIMEOUT"].includes(error62.code)) {
+        } else if (error62 instanceof RelayClientError && error62.code === "RELAY_DEVICE_QUARANTINED") {
+          wait = Math.max(delay4, QUARANTINE_RETRY_MS);
         } else throw error62;
       } finally {
         connectivity?.close();
@@ -51083,7 +51110,7 @@ async function runAgent(options) {
         await bridge.disconnected();
         connection = null;
       }
-      if (!options.signal.aborted) await aborted2(options.signal, delay4);
+      if (!options.signal.aborted) await aborted2(options.signal, wait);
     }
   } finally {
     try {

package/runtime/manifest.json

@@ -1,17 +1,17 @@
 {
-  "version": "0.3.48",
+  "version": "0.3.50",
   "experimental": true,
   "platform": "linux",
   "arch": "x64",
   "node": "v22.23.3",
-  "source": "6d64c886f4cb5a4393a855a2ed7fa16a395399dc",
-  "sourceTreeSha256": "4f75f63d2380ac2ae9f53678bf71ece1f38df62642ea43e48dbb38bdc244efb9",
+  "source": "846ebe4409172d55c88aa8611a90b1098bbe36b0",
+  "sourceTreeSha256": "2615d6cb62edfb9bd628788a813147cecbf898a7062e4b3e08f3d0623bbe4343",
   "qualification": "unqualified",
   "lifecycleVersion": 1,
   "packaging": "npm platform package runtime",
   "files": {
     "NODE-LICENSE.txt": "c738ae413cf561f174e34f6961f8ca458aae2369a73640dda6234c629b98bcc4",
-    "agent.mjs": "b238ee5cfe6bbeeda7804c37b41b2748076402dd0af423a5f6f20b2ea9d36a67",
+    "agent.mjs": "49ce9d10658ebc80227eeeedc0fd21faa931f390ccbd39171892658276dfb429",
     "job-host.mjs": "54ab42fa00a53dfd4df6c93fd9e6692d5e03a0870aba8bf501f398905694b72d",
     "lifecycle.mjs": "ebed6bac75115ef1df34aff9fef211c9f710a524b2b614115b6bc80ef57b464b",
     "node": "fde6a4bf8d0562f7751d1a2d6cb9b417c4cfe107bbcb0aa3e9a24e125e348f48",