mtech-ai-local-runner 0.1.58 → 0.1.59

package/README.md

@@ -1,3 +1,7 @@
+## 0.1.59: completed publication acknowledgement
+
+Runner 0.1.59 corrects post-publication completion acknowledgement. The Gateway binding primary key is independent of the client session UUID. Recovery uses the saved binding/Job/generation mapping and exact server completion receipt; it does not renew an expired lease or replay a completed publication. Unverified PRs retain `unverified` / `CI not_run` status.
+
 ## 0.1.57: answers go to the session the person is using
 
 An answer names the asker's sessions linked to the Work Item. A named session now gets it only if a person typed in it in

package/dist/src/gateway-client.js

@@ -662,13 +662,17 @@ export class McpGatewayClient {
             throw reject();
         return cursor;
     }
-    /** Read-only acknowledgement of Route B's atomic server completion. No lease,
-     * context restoration, replay or publication write is authorized here. */
+    /** Read-only acknowledgement of Route B's atomic server completion.
+     * No lease renewal, replay or publication write is authorized here. Retained context
+     * identifies the server-issued binding; its ID is not the client session UUID. */
     async confirmServerPublicationCompletion(bindingId, afterSequence, job, receipt) {
         if (nested(job.taskPackage, 'local_fix_scope.verification_mode') !== 'gateway_publish_v1')
             return false;
         try {
-            if (!Number.isSafeInteger(job.generation) || job.generation < 1 || typeof job.id !== 'string' || !job.id || bindingId !== uuidv5(`local-agent-job:${job.id}:${job.generation}`, uuidv5.URL)
+            const context = this.requireContext(bindingId);
+            if (context.jobFence?.job_id !== job.id || context.jobFence?.generation !== job.generation)
+                throw Error();
+            if (!Number.isSafeInteger(job.generation) || job.generation < 1 || typeof job.id !== 'string' || !job.id
                 || !Number.isSafeInteger(afterSequence) || afterSequence < 0 || receipt.status !== 'completed' || receipt.verification_mode !== 'gateway_publish_v1' || receipt.verification_status !== 'unverified' || nested(receipt, 'ci.status') !== 'not_run'
                 || typeof receipt.publication_id !== 'string' || !receipt.publication_id || typeof receipt.commit_sha !== 'string' || !/^[a-f0-9]{40}$/.test(receipt.commit_sha) || typeof receipt.pr_url !== 'string' || !receipt.pr_url)
                 throw Error();
@@ -712,7 +716,7 @@ export class McpGatewayClient {
     }
     async restoreLocalPublicationRecoveryContext(input, stored, terminalReplay = false) {
         if (terminalReplay) {
-            if (stored.bindingId !== input.bindingId || typeof stored.leaseToken !== 'string' || !stored.leaseToken)
+            if (stored.bindingId !== input.bindingId || nested(stored, 'jobFence.job_id') !== input.jobId || nested(stored, 'jobFence.generation') !== input.generation || typeof stored.leaseToken !== 'string' || !stored.leaseToken)
                 throw new Error('LOCAL_PUBLICATION_RECOVERY_CONTEXT_REJECTED');
             this.context = structuredClone(stored);
             return;

package/dist/src/platform/macos/launchd.js

@@ -1,9 +1,14 @@
 import { access, chmod, mkdir, rename, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { execFile } from "node:child_process";
+import { setTimeout as delay } from "node:timers/promises";
 import { promisify } from "node:util";
 const execFileAsync = promisify(execFile);
 export const LAUNCHD_LABEL = "com.mtec.ai-local-runner";
+const BOOTOUT_POLLS = 40;
+const BOOTOUT_POLL_MS = 250;
+const BOOTSTRAP_ATTEMPTS = 3;
+const BOOTSTRAP_RETRY_MS = 1000;
 function xml(value) {
     return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 }
@@ -45,7 +50,38 @@ export class LaunchdService {
         const run = this.deps.run ?? defaultRun;
         await (this.deps.writeAtomic ?? defaultWriteAtomic)(this.plistPath, this.render(executablePath, stateRoot), 0o600);
         await run("/bin/launchctl", ["bootout", `gui/${this.deps.uid}/${LAUNCHD_LABEL}`]).catch(() => undefined);
-        await run("/bin/launchctl", ["bootstrap", `gui/${this.deps.uid}`, this.plistPath]);
+        await this.waitUntilUnloaded();
+        await this.bootstrapAfterBootout();
+    }
+    // bootout returns before launchd has removed a service whose process is still exiting, and a
+    // bootstrap in that window fails with "5: Input/output error". The service is gone afterwards,
+    // so a setup rerun on a Mac with the runner loaded left it offline (runner 0.1.57, 2026-10-26).
+    async waitUntilUnloaded() {
+        const sleep = this.deps.sleep ?? delay;
+        for (let poll = 0; poll < BOOTOUT_POLLS; poll++) {
+            if (!(await this.status()).loaded)
+                return;
+            await sleep(BOOTOUT_POLL_MS);
+        }
+    }
+    async bootstrapAfterBootout() {
+        const run = this.deps.run ?? defaultRun;
+        for (let attempt = 1;; attempt++) {
+            try {
+                await run("/bin/launchctl", ["bootstrap", `gui/${this.deps.uid}`, this.plistPath]);
+                return;
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                const ioError = /Bootstrap failed: 5: Input\/output error/.exec(message);
+                if (!ioError)
+                    throw error;
+                if (attempt === BOOTSTRAP_ATTEMPTS) {
+                    throw new Error(`launchd did not load the runner service: ${ioError[0]} (${attempt} attempts). Rerun npx mtech-ai-local-runner setup.`);
+                }
+                await (this.deps.sleep ?? delay)(BOOTSTRAP_RETRY_MS);
+            }
+        }
     }
     async uninstall() {
         await (this.deps.run ?? defaultRun)("/bin/launchctl", ["bootout", `gui/${this.deps.uid}/${LAUNCHD_LABEL}`])

package/dist/src/publication/recovery.js

@@ -24,6 +24,10 @@ export async function recoverLocalFixPublication(input) {
             throw Error('LOCAL_PUBLICATION_RECOVERY_REJECTED');
     }
     const savedReceipt = (s.phase === 'publication_terminal_pending' ? s.publicationTerminal?.completion.result.local_fix_publication : r.completedPublication);
+    // Rehydrate only the recorded identity before a read-only terminal check.
+    // No live fence renewal or publication effect is permitted by this branch.
+    if (savedReceipt && input.gateway.confirmServerPublicationCompletion && job.taskPackage.local_fix_scope?.verification_mode === 'gateway_publish_v1')
+        await input.gateway.restoreLocalPublicationRecoveryContext(fence, r.gatewayContext, true);
     if (await confirmed(savedReceipt)) {
         await input.state.clear();
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtech-ai-local-runner",
-  "version": "0.1.58",
+  "version": "0.1.59",
   "private": false,
   "license": "UNLICENSED",
   "bin": {