engineering-platform 2.3.104__tar.gz → 2.3.106__tar.gz

{engineering_platform-2.3.104 → engineering_platform-2.3.106}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-platform
-Version: 2.3.104
+Version: 2.3.106
 Summary: Local-first Engineering Platform execution operations runtime
 Author: Peter van Tol
 License: MIT

{engineering_platform-2.3.104 → engineering_platform-2.3.106}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "engineering-platform"
-version = "2.3.104"
+version = "2.3.106"
 description = "Local-first Engineering Platform execution operations runtime"
 readme = "README.md"
 requires-python = ">=3.14,<3.15"

{engineering_platform-2.3.104 → engineering_platform-2.3.106}/src/engineering_platform/ENGINEERING_PLATFORM_CONFIG.json

@@ -3,7 +3,7 @@
   "platform": {
     "id": "engineering-platform",
     "name": "Engineering Platform",
-    "version": "2.3.104",
+    "version": "2.3.106",
     "generation": 2,
     "documentation_namespace": "engineering-platform",
     "capability_registry_version": 1

{engineering_platform-2.3.104 → engineering_platform-2.3.106}/src/engineering_platform/ENGINEERING_PLATFORM_VERSION.json

@@ -1,15 +1,15 @@
 {
   "bootstrap_contract": "2026.12",
   "checkpoint_format": 1,
-  "dashboard_version": "2.3.104",
+  "dashboard_version": "2.3.106",
   "handoff_protocol": 1,
   "memory_format": 2,
   "minimum_codex_cli": "0.146.0",
   "inbox_protocol": 1,
-  "platform_version": "2.3.104",
+  "platform_version": "2.3.106",
   "report_format": 2,
-  "runner_version": "2.3.104",
+  "runner_version": "2.3.106",
   "status_model": 1,
   "storage_schema": 45,
-  "watcher_version": "2.3.104"
+  "watcher_version": "2.3.106"
 }

{engineering_platform-2.3.104 → engineering_platform-2.3.106}/src/engineering_platform/platform_version.py

@@ -12,7 +12,7 @@ from .storage import ENGINEERING_STORAGE_SCHEMA_VERSION
 
 SEMVER = re.compile(r"^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$")
 CONTRACT = re.compile(r"^(\d{4})\.(0[1-9]|1[0-2])$")
-CURRENT_PLATFORM_VERSION = "2.3.104"
+CURRENT_PLATFORM_VERSION = "2.3.106"
 MANIFEST_FIELDS = frozenset(
     {
         "platform_version",

{engineering_platform-2.3.104 → engineering_platform-2.3.106}/src/engineering_platform/system_instance_lifecycle.py

@@ -477,40 +477,78 @@ class SystemInstanceLifecycle:
                 "PURGE_READY",
                 mutable_instance_data_digest=tree_digest,
                 descriptor_digest=request["descriptor_digest"],
+                # REMOVE publishes its receipt before deleting this tree.  A
+                # process kill can erase instance.json before rmtree finishes.
+                # Retain only the topology and root identity needed to resume
+                # that exact deletion without adopting a replacement root.
+                display_label=instance.display_label,
+                service_account=instance.service_account,
+                root_device=instance.root.stat(follow_symlinks=False).st_dev,
+                root_inode=instance.root.stat(follow_symlinks=False).st_ino,
             )
 
     def resume_purge_target(
         self,
-        instance: system_installation_topology.SystemInstanceTopology,
-        descriptor: Mapping[str, object],
+        instance_id: str,
         operation_id: str,
+        remove_receipt: Mapping[str, object],
     ) -> None:
-        root = self._operation_root(instance.instance_id, operation_id)
+        root = self._operation_root(instance_id, operation_id)
         state = _read_json(root / "state.json")
         if (
             state.get("contract") != CONTRACT
             or state.get("operation") != "PURGE"
             or state.get("phase") != "PURGE_READY"
-            or state.get("instance_id") != instance.instance_id
-            or state.get("descriptor_digest") != _json_digest(dict(descriptor))
+            or state.get("instance_id") != instance_id
+            or state.get("request") != {
+                "instance_id": instance_id,
+                "descriptor_digest": state.get("descriptor_digest"),
+            }
+            or state.get("request_digest") != _json_digest(state["request"])
+            or remove_receipt.get("operation") != "REMOVE"
+            or remove_receipt.get("operation_id") != operation_id
+            or remove_receipt.get("instance_id") != instance_id
+            or not isinstance(remove_receipt.get("evidence"), Mapping)
+            or remove_receipt["evidence"].get("removed_descriptor_digest") != state.get("descriptor_digest")
         ):
             raise SystemInstanceLifecycleError("EP purge recovery evidence is invalid")
-        with _Lock(instance.lifecycle_lock):
+        try:
+            instance = system_installation_topology.system_instance_topology(
+                self.product,
+                instance_id=instance_id,
+                display_label=state["display_label"],
+                service_account=state["service_account"],
+            )
+        except (KeyError, TypeError, ValueError) as error:
+            raise SystemInstanceLifecycleError("EP purge recovery topology is invalid") from error
+        expected = self.product.system_root / "instances" / instance.instance_id
+        if (
+            instance.root != expected
+            or instance.root.is_symlink()
+            or not instance.root.is_relative_to(self.product.system_root / "instances")
+        ):
+            raise SystemInstanceLifecycleError("EP purge recovery target is invalid")
+
+        def verify_original_root() -> None:
+            details = instance.root.stat(follow_symlinks=False)
+            if (details.st_dev, details.st_ino) != (state.get("root_device"), state.get("root_inode")):
+                raise SystemInstanceLifecycleError("EP purge recovery target was replaced")
+
+        # Check before opening the instance-owned lock, which may recreate a
+        # lock directory already erased by the interrupted deletion.
+        verify_original_root()
+        with _Lock(root / "purge-recovery.lock"), _Lock(instance.lifecycle_lock):
+            verify_original_root()
             self.controller.remove(instance)
             if self.controller.loaded(instance) or self.service_interpreter(instance) is not None:
                 raise SystemInstanceLifecycleError("EP purge recovery service was not fully removed")
-            if _tree_digest(
-                instance.root,
-                ignored_roots=(instance.operations_root / operation_id,),
-            ) != state.get("mutable_instance_data_digest"):
-                raise SystemInstanceLifecycleError("EP purge recovery target changed after preparation")
-            expected = self.product.system_root / "instances" / instance.instance_id
-            if (
-                instance.root != expected
-                or instance.root.is_symlink()
-                or not instance.root.is_relative_to(self.product.system_root / "instances")
-            ):
-                raise SystemInstanceLifecycleError("EP purge recovery target is invalid")
+            # The exact root survives until rmtree's final step.  Its contents
+            # may be a strict subset after SIGKILL, so the original whole-tree
+            # digest cannot be required here.  Reject unsafe remaining entries.
+            _tree_digest(instance.root, ignored_roots=(instance.operations_root / operation_id,))
+            if instance.descriptor.exists():
+                if _json_digest(_read_json(instance.descriptor)) != state.get("descriptor_digest"):
+                    raise SystemInstanceLifecycleError("EP purge recovery descriptor changed")
             shutil.rmtree(instance.root)
 
     def record_purge(

{engineering_platform-2.3.104 → engineering_platform-2.3.106}/src/engineering_platform/system_instance_provisioner.py

@@ -665,8 +665,7 @@ class SystemInstanceProvisioner:
         else:
             remove_receipt = prior_remove
             if instance_root.exists() or instance_root.is_symlink():
-                instance, descriptor = self._instance_from_descriptor(instance_id)
-                lifecycle.resume_purge_target(instance, descriptor, operation_id)
+                lifecycle.resume_purge_target(instance_id, operation_id, remove_receipt)
         receipt = lifecycle.record_purge(instance_id, operation_id, remove_receipt)
         return {
             "contract": system_instance_lifecycle.CONTRACT,
@@ -707,6 +706,7 @@ class SystemInstanceProvisioner:
                 result = subprocess.run(
                     (sys.executable, "-I", "-m", "venv", str(slot.venv)),
                     text=True, capture_output=True, check=False,
+                    cwd=slot.root,
                     env={"PYTHONNOUSERSITE": "1", "PYTHONSAFEPATH": "1"},
                 )
                 if result.returncode:
@@ -718,6 +718,7 @@ class SystemInstanceProvisioner:
                         str(release.artifact),
                     ),
                     text=True, capture_output=True, check=False,
+                    cwd=slot.root,
                     env={"PYTHONNOUSERSITE": "1", "PYTHONSAFEPATH": "1", "PIP_CONFIG_FILE": os.devnull},
                 )
                 if result.returncode:

{engineering_platform-2.3.104 → engineering_platform-2.3.106}/src/engineering_platform/templates/workspace-config.json

@@ -3,7 +3,7 @@
   "platform": {
     "id": "engineering-platform",
     "name": "Engineering Platform",
-    "version": "2.3.104",
+    "version": "2.3.106",
     "generation": 2,
     "documentation_namespace": "engineering-platform",
     "capability_registry_version": 1

{engineering_platform-2.3.104 → engineering_platform-2.3.106}/src/engineering_platform.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-platform
-Version: 2.3.104
+Version: 2.3.106
 Summary: Local-first Engineering Platform execution operations runtime
 Author: Peter van Tol
 License: MIT