Release v0.2.40

Author: dxcodeagent

.github/workflows/ci.yml

@@ -10,7 +10,8 @@ permissions:
 
 jobs:
   verify:
-    runs-on: ubuntu-latest
+    # Pinned: Playwright 1.55 cannot install Chromium on ubuntu-latest (26.04).
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: pnpm/action-setup@v6.1.0

.github/workflows/deploy.yml

@@ -23,7 +23,7 @@ jobs:
   deploy:
     name: Deploy
     environment: production
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     steps:
       - uses: actions/checkout@v4

.github/workflows/orb-image.yml

@@ -25,7 +25,7 @@ concurrency:
 
 jobs:
   publish:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - uses: docker/setup-buildx-action@v3

RELEASE.json

@@ -1,14 +1,14 @@
 {
-  "version": "0.2.39",
+  "version": "0.2.40",
   "license": "FSL-1.1-ALv2",
   "baselineSha256": "7847f65a9b20b366a60d52d19ca3cd6bdd1bb09b8cb506659a270f27a21d8877",
   "e2b": {
     "recipeSha256": "761809ee2efa2b6c750451ace29283cbb8e55b6ce3b5b14c2bb4509df71df801",
     "profileSha256": "414dbecee2d47de36016ea05c736e2edff3a0deb298babf923887ea184a01c10"
   },
   "dxd": {
-    "url": "https://github.com/dxcode-dev/dxcode/releases/download/v0.2.39/dxd-linux-x64",
-    "sha256": "d3a85385666b547620a62444b8267b84d484e551266e5b272b0ab3d7646b1455"
+    "url": "https://github.com/dxcode-dev/dxcode/releases/download/v0.2.40/dxd-linux-x64",
+    "sha256": "ec3cc56921fc136a3d36fc2dbaf19d22dd70d27b12912317a0cef5cd170914f7"
   },
   "toolchain": {
     "node": ">=22.19.0",

apps/core/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dx/core",
   "private": true,
-  "version": "0.2.39",
+  "version": "0.2.40",
   "license": "FSL-1.1-ALv2",
   "type": "module",
   "scripts": {
@@ -20,7 +20,7 @@
     "@dx/api": "workspace:^",
     "@dx/domain": "workspace:^",
     "@effect/sql-d1": "4.0.5",
-    "@flue/runtime": "file:../../third-party/flue/runtime-7047c601e7923609e65a9ae09d25eefd9081b2df.tgz",
+    "@flue/runtime": "file:../../third-party/flue/runtime-de1dda9ae8b4791dea431cbdcbc818f4b5f22f71.tgz",
     "@jitl/quickjs-wasmfile-release-sync": "0.32.0",
     "@logtape/logtape": "2.3.1",
     "@modelcontextprotocol/client": "2.0.0",
@@ -43,8 +43,8 @@
     "@cloudflare/vitest-plugin": "1.0.0",
     "@cloudflare/workers-types": "5.20260820.1",
     "@earendil-works/pi-ai": "1.1.0",
-    "@flue/sdk": "file:../../third-party/flue/sdk-7047c601e7923609e65a9ae09d25eefd9081b2df.tgz",
-    "@flue/vite": "file:../../third-party/flue/vite-7047c601e7923609e65a9ae09d25eefd9081b2df.tgz",
+    "@flue/sdk": "file:../../third-party/flue/sdk-de1dda9ae8b4791dea431cbdcbc818f4b5f22f71.tgz",
+    "@flue/vite": "file:../../third-party/flue/vite-de1dda9ae8b4791dea431cbdcbc818f4b5f22f71.tgz",
     "@msw/cloudflare": "^0.0.1",
     "@types/ws": "8.18.1",
     "@valibot/to-json-schema": "1.7.1",

apps/core/src/agents/dx-agent.ts

@@ -27,6 +27,11 @@ import {
 import { rememberClaudeCodeSandbox } from "../claude-code/runs.js";
 import { claudeCodeMirrorTools } from "../claude-code/tools.js";
 import { traceSpan } from "../observability/tracing.js";
+import {
+  takeWorkspaceDisk,
+  WORKSPACE_DISK_SIGNAL,
+  workspaceDiskNote,
+} from "../orb-disk/note.js";
 import {
   agentPluginHostContext,
   agentThreadToolsContext,
@@ -184,8 +189,9 @@ const agentSandbox: SandboxFactory | undefined =
 /**
  * Installed plugins' agent-start and agent-finish hooks. The agent-start
  * hook first writes dx's built-in skills into the workspace, for the dx
- * agent and Claude Code alike; Flue runs separate start hooks concurrently,
- * so both stay in one.
+ * agent and Claude Code alike, then tells the agent when its disk is nearly
+ * or completely full; Flue runs separate start hooks concurrently, so all
+ * stay in one.
  */
 const usePluginLifecycle = (
   threadId: string,
@@ -218,7 +224,16 @@ const usePluginLifecycle = (
       }
     };
   useAgentStart(async (context) => {
+    // Opening the sandbox runs this turn's activation and its disk guard.
     await installBuiltInSkills(context.harness.sandbox);
+    const disk = takeWorkspaceDisk(threadId);
+    const note = disk === undefined ? undefined : workspaceDiskNote(disk);
+    if (note !== undefined)
+      context.append({
+        kind: "signal",
+        type: WORKSPACE_DISK_SIGNAL,
+        body: note,
+      });
     await hook("agent-start")(context);
   });
   if (plugins.some(({ lifecycle }) => lifecycle.includes("agent-finish")))

apps/core/src/app.ts

@@ -19,6 +19,7 @@ import {
 } from "./notifications/routes.js";
 import { installFlueObservation } from "./observability/flue.js";
 import { installRuntimeTracing } from "./observability/platform-tracing.js";
+import { threadOrbDiskRoutes } from "./orb-disk/routes.js";
 import { threadOrbMemoryRoutes } from "./orb-memory/routes.js";
 import { portalAuthRoutes } from "./portals/auth-routes.js";
 import { portalHostRouting } from "./portals/host-routing.js";
@@ -123,6 +124,8 @@ app.route("/v1/threads", threadPortalRoutes);
 // `/memory/*` also matches `/memory`; see Portals above.
 app.use("/v1/threads/:threadId/memory/*", authorizeThread);
 app.route("/v1/threads", threadOrbMemoryRoutes);
+app.use("/v1/threads/:threadId/disk/*", authorizeThread);
+app.route("/v1/threads", threadOrbDiskRoutes);
 app.use("/v1/threads/:threadId/desktop/*", authorizeThread);
 app.use("/v1/threads/:threadId/desktop/*", enforceThreadActive);
 app.route("/v1/threads", threadDesktopRoutes);

apps/core/src/claude-code/claude-code.test.ts

@@ -165,7 +165,7 @@ exec /usr/bin/awk "$@"
     "curl",
     options.installerWorks === true
       ? `#!/bin/sh\necho 'mkdir -p "$HOME/.local/bin" && cp ${join(root, "claude-latest")} "$HOME/.local/bin/claude"'\n`
-      : "#!/bin/sh\necho 'echo \"Installation failed: no space left on device\" >&2; exit 1'\n",
+      : "#!/bin/sh\necho 'echo \"Installation failed: checksum mismatch\" >&2; exit 1'\n",
   );
   const installClaude = () => tool("claude", FAKE_CLAUDE);
   if (options.oldClaude !== undefined)
@@ -397,7 +397,8 @@ const waitFor = async (ready: () => boolean, ms = 10_000) => {
 const runDirectories = (ops: ReadonlyArray<GuestOp>) =>
   new Set(
     ops.flatMap(({ path }) => {
-      const match = /dx-claude-code\/runs\/([^/'"\s]+)/.exec(path);
+      // A launch's disk guard names the runs directory with a glob.
+      const match = /dx-claude-code\/runs\/([^/'"\s*]+)/.exec(path);
       return match?.[1] === undefined ? [] : [match[1]];
     }),
   );
@@ -532,7 +533,7 @@ describe("Claude Code mode in a workspace", { timeout: 30_000 }, () => {
       type: "error",
       error: {
         errorMessage: expect.stringMatching(
-          /Claude Code could not be installed\.[\s\S]*no space left on device/,
+          /Claude Code could not be installed\.[\s\S]*checksum mismatch/,
         ),
       },
     });
@@ -580,7 +581,7 @@ describe("Claude Code mode in a workspace", { timeout: 30_000 }, () => {
       type: "error",
       error: {
         errorMessage: expect.stringMatching(
-          /Claude Code 1\.0\.108 is older than 2\.1\.310[\s\S]*claude update[\s\S]*no space left on device/,
+          /Claude Code 1\.0\.108 is older than 2\.1\.310[\s\S]*claude update[\s\S]*checksum mismatch/,
         ),
       },
     });

apps/core/src/claude-code/workspace-run.ts

@@ -1,7 +1,14 @@
 import type { Sandbox } from "@flue/runtime";
 import { BUILT_IN_SKILL_NAMES } from "../agents/built-in-skill-names.js";
 import { encodeBase64 } from "../encoding/base64.js";
-import { markRunFailure } from "../runtime/run-failure.js";
+import {
+  isDiskFullText,
+  parseWorkspaceDiskReading,
+  withoutWorkspaceDiskReading,
+  workspaceDiskFullFailure,
+  workspaceDiskGuard,
+} from "../orb-disk/guard.js";
+import { classifyRunFailure, markRunFailure } from "../runtime/run-failure.js";
 import { environmentSecretsOf } from "../settings/environment-variables/sandbox.js";
 import { CLAUDE_CODE_MCP_SERVER } from "./mcp-server.js";
 import { CHUNK_END_LINE, ClaudeCodeStream } from "./stream.js";
@@ -126,6 +133,11 @@ const CLI_ENVIRONMENT = {
  */
 const CLAUDE_CODE_MIN_VERSION = "2.1.310";
 
+const isWorkspaceReset = (error: unknown) =>
+  classifyRunFailure({
+    message: error instanceof Error ? error.message : String(error),
+  }).code === "WORKSPACE_RESET";
+
 const quote = (value: string) => `'${value.replaceAll("'", "'\\''")}'`;
 
 /** The read's answer, or a failure once it has waited READ_TIMEOUT_MS. */
@@ -226,6 +238,13 @@ const launchFiles = (files: Readonly<Record<string, string>>) =>
 
 const LAUNCH_FILES = "launch-files.sh";
 
+/**
+ * Added to an attempt's system prompt when its launch found the disk full:
+ * a Claude Code run that died of it is restarted mid-turn, before the next
+ * turn's note can tell it.
+ */
+const CLAUDE_CODE_DISK_FULL_NOTE = `dx note: this Orb's disk filled up completely during this turn, which stopped Claude Code. dx freed its own emergency space so it could restart. Before anything else, free regenerable space (build outputs and caches such as node_modules, target, dist, build, .cache, and package manager caches; find them with \`du -xh -d 2 ~ 2>/dev/null | sort -h | tail -n 20\`), never source files or uncommitted work, then continue the task.`;
+
 /** Moves the plan token from the command's environment to descriptor 3. */
 const TOKEN_TO_DESCRIPTOR = `# The plan token arrives in this command's environment, which every process
 # of the workspace user can read through /proc while the process lives, and
@@ -276,7 +295,9 @@ const launchScript = (
     .join(" ");
   return `${TOKEN_TO_DESCRIPTOR}
 set -eu
-D=${quote(dir)}
+# A full disk must not keep Claude Code from starting: the guard frees dx's
+# reserve and leftovers first, and the agent is told to free space.
+${workspaceDiskGuard(false)}D=${quote(dir)}
 S=${quote(STATE_ROOT)}
 mkdir -p "$D"
 if [ -e "$D/pid" ]; then echo running; exit 0; fi
@@ -291,6 +312,7 @@ finish() {
 }
 trap finish EXIT
 ${files ?? `. "$D/${LAUNCH_FILES}"`}
+if [ "$dx_disk_full" = 1 ]; then printf '\n\n%s\n' ${quote(CLAUDE_CODE_DISK_FULL_NOTE)} >> "$D/prompt.txt"; fi
 # A recorded PID is killed only while it is still that run's runner: after a
 # container restart the number can belong to any process.
 ours() { tr '\\0' ' ' < "/proc/$2/cmdline" 2>/dev/null | grep -qF "$1/runner.sh"; }
@@ -625,12 +647,16 @@ export class ClaudeCodeRun {
         signal,
       },
     );
-    if (result.exitCode !== 0)
+    if (result.exitCode !== 0) {
+      const stderr = withoutWorkspaceDiskReading(result.stderr).trim();
+      const disk = parseWorkspaceDiskReading(result.stderr);
+      // Retrying frees nothing: the person or the agent must.
+      if (isDiskFullText(`${stderr}\n${result.stdout}`))
+        throw new Error(workspaceDiskFullFailure(disk?.totalBytes));
       throw new Error(
-        result.stderr.trim() ||
-          result.stdout.trim() ||
-          "Claude Code could not start.",
+        stderr || result.stdout.trim() || "Claude Code could not start.",
       );
+    }
   }
 
   async #read(path: string) {
@@ -718,6 +744,9 @@ export class ClaudeCodeRun {
       this.#forgetReadFailures();
       return value;
     } catch (error) {
+      // The workspace lost its files: no read will answer, and Flue
+      // re-attempts the submission for it at once.
+      if (isWorkspaceReset(error)) throw error;
       let failure = error;
       if (!this.#reconnected && this.reconnect !== undefined) {
         this.#reconnected = true;

apps/core/src/cloudflare.ts

@@ -53,6 +53,11 @@ configureRetryPolicy({
     retryDelay(errorMessage, attempt),
   submissionRetryPolicy: ({ errorMessage, attempt }) =>
     retryDelay(errorMessage, attempt),
+  // A workspace that lost its files fails every model or tool retry in
+  // place; re-attempting the submission runs activation, which sets it up
+  // again.
+  reattemptSubmission: ({ errorMessage }) =>
+    classifyRunFailure({ message: errorMessage }).code === "WORKSPACE_RESET",
 });
 
 const bindings = env as Bindings;