fix(installer): preserve Station resume receipt

[senthilr-nv]

Summary

Preserve the owner-only Station Express resume receipt when automatic dual-Station discovery intentionally falls back to the single-Station Ultra recipe. Previously, that successful fallback deleted the receipt before onboarding completed, so a post-reboot install could finish vLLM and OpenClaw setup and then fail the receipt-generation assertion.

Changes

• Keep the Station Express receipt through successful single-Station fallback so normal onboarding completion can validate and retire it.
• Assert the receipt generation in the existing dual-Station installer handoff regression test.

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Quality Gates

• Tests added or updated for changed behavior
• Existing tests cover changed behavior — justification:
• Tests not applicable — justification:
• Docs updated for user-facing behavior changes
• Docs not applicable — justification: This restores the documented Station Express receipt and single-Station fallback behavior without changing the interface or workflow.
• Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
• Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification: The narrow receipt-lifecycle change leaves validation, permissions, explicit cleanup, and failure cleanup unchanged; focused installer lifecycle tests and the repository checks pass.
• Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Documentation Writer Review

• Documentation writer subagent reviewed the completed changes
• Result: no-docs-needed
• Evidence: Existing Station preparation and two-Station inference pages already document receipt-backed reboot resume and single-Station Ultra fallback when no peer qualifies. The fix restores that contract and adds no command, flag, configuration, default, output contract, procedure, or support claim.
• Agent: Codex Desktop

DGX Station Hardware Evidence

• Tested on DGX Station
• Tested commit: v0.0.98 (33883e63f6495e0597d45910a3b9d6f7177c8ff2) reproducer; this fix commit has not been rerun on hardware.
• Station profile/scenario: Clean generic Ubuntu 24.04 ARM64 DGX Station GB300; cold, true-default Station Express; no qualifying trusted pair; post-reboot continuation.
• Result: Reproduced the missing-receipt failure after vLLM, OpenClaw, routing, and sandbox readiness.
• Supporting evidence: Owner-only qualification evidence retained by the maintainer; the deterministic regression is included in this PR.

Verification

• PR description includes a Signed-off-by: line and every commit appears as Verified in GitHub
• Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run validate:pr passed after refreshing origin/main when hooks were skipped or unavailable
• Targeted behavior tests pass for the current change set, or tests are marked not applicable above — npx vitest run --project installer-integration test/install-station-pair-preparation.test.ts (58 passed); expanded Station pair/host/resume suite (111 passed).
• Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — command/result: Not applicable to the narrow installer-state fix; npm run checks:repository passed.
• Quality Gates section completed with required justifications or waivers
• No secrets, API keys, or credentials committed
• npm run docs builds without warnings (doc changes only)
• Doc pages follow the style guide (doc changes only)
• New doc pages include SPDX header and frontmatter (new pages only)

---

Signed-off-by: Senthil Ravichandran senthilr@nvidia.com

Summary by CodeRabbit

• Bug Fixes
  • Fixed single-Station setup so existing resume information is preserved when applying default configuration.
  • Improved installer handoff behavior while retaining the expected single-Station, peer, binding, and model settings.

[coderabbitai]

📝 Walkthrough

Walkthrough

The single-Station installer fallback now retains the Station Express resume receipt while applying the default Ultra configuration. The no-peer handoff test verifies that the receipt generation and single-Station state remain intact.

Changes

Station resume preservation

Layer / File(s)	Summary
Preserve resume receipt in single-Station fallback scripts/install.sh, test/install-station-pair-preparation.test.ts	The fallback stops clearing resume state, and the no-peer test verifies the preserved receipt generation with the existing single-Station defaults.

Estimated code review effort: 2 (Simple) | ~10 minutes

Suggested labels: area: install, bug-fix, platform: dgx-station

Suggested reviewers: cv

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the main change: preserving the Station resume receipt during installer fallback handling.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/preserve-single-station-resume

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-code-quality]

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/plugin

The overall coverage in commit cf39c9a in the codex/preserve-singl... branch remains at 96%, unchanged from commit 57f73a5 in the main branch.

TypeScript / code-coverage/cli

The overall coverage in commit cf39c9a in the codex/preserve-singl... branch remains at 81%, unchanged from commit 57f73a5 in the main branch.

Show a code coverage summary of the most impacted files.

File	main 57f73a5	codex/preserve-singl... cf39c9a	+/-
src/lib/sandbox...rce-identity.ts	88%	88%	0%
src/lib/tunnel/services.ts	75%	75%	0%
src/lib/domain/.../connect-env.ts	89%	97%	+8%

---

_{Updated July 31, 2026 16:49 UTC}

[github-actions]

PR Review Advisor — No blocking findings reported

Advisor assessment: No blocking advisor findings reported
Next action: No advisor follow-up needed.
Findings: 0 blockers · 0 warnings · 0 suggestions

Model lanes

• GPT-5.6 Terra (primary): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Nemotron 3 Ultra (second opinion): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Model comparison: normalized findings match; normalized E2E selections differ; severity counts match.

Nemotron output stays in workflow artifacts and does not change the assessment above.

E2E guidance

Advisory only. E2E / PR Gate selects and runs jobs independently.

Recommended E2E: cloud-onboard

Workflow run details

This automated review informs maintainers. Warnings and suggestions do not require a response. A maintainer decides whether to merge.