@atolis-hq/wake 0.4.28 → 0.4.29

package/dist/src/bootstrap/surface-cli-applications.js

@@ -531,8 +531,8 @@ function createOperationalApplications(root) {
             if (arguments_.includes('--loop')) {
                 const intervalMs = selfUpdateLoopInterval(arguments_);
                 if (updateTag !== undefined)
-                    return runSelfUpdateLatestLoop(async () => application.update(updateTag, force), () => delay(intervalMs));
-                return runSelfUpdateLatestLoop(async () => application.updateLatest(force), () => delay(intervalMs));
+                    return runSelfUpdateLatestLoop(async () => application.update(updateTag, force), () => delay(intervalMs), (message) => process.stderr.write(`${message}\n`));
+                return runSelfUpdateLatestLoop(async () => application.updateLatest(force), () => delay(intervalMs), (message) => process.stderr.write(`${message}\n`));
             }
             if (updateTag !== undefined)
                 return { tag: updateTag, updated: await application.update(updateTag, force) };

package/dist/src/bootstrap/version.js

@@ -124,6 +124,6 @@ export function resolveWakeVersion(options = {}) {
         return `g${headHash.slice(0, 7)}`;
     return '0.1.0-dev';
 }
-export const wakeVersion = "v0.4.28";
+export const wakeVersion = "v0.4.29";
 /** The registry-installable version used by packaged sandbox images. */
 export const wakePackageVersion = packageVersion(defaultRepoRoot) ?? wakeVersion;

package/dist/src/surfaces/cli/commands/self-update.d.ts

@@ -7,9 +7,10 @@ export interface SelfUpdateDependencies {
     readonly health?: () => Promise<boolean>;
     readonly rollback?: (priorTag: string) => Promise<void>;
 }
+export type SelfUpdateLog = (message: string) => void;
 /** Updates application files only; journal and projection ownership stay outside this command. */
 export declare function runSelfUpdate(input: SelfUpdateDependencies): Promise<boolean>;
 /** Runs update checks resiliently; the injected wait boundary owns shutdown. */
-export declare function runSelfUpdateLoop(input: SelfUpdateDependencies, wait: () => Promise<void>): Promise<never>;
+export declare function runSelfUpdateLoop(input: SelfUpdateDependencies, wait: () => Promise<void>, log?: SelfUpdateLog): Promise<never>;
 /** Re-discovers the source tag per iteration so a resident updater does not retain stale version state. */
-export declare function runSelfUpdateLatestLoop(updateLatest: () => Promise<unknown>, wait: () => Promise<void>): Promise<never>;
+export declare function runSelfUpdateLatestLoop(updateLatest: () => Promise<unknown>, wait: () => Promise<void>, log?: SelfUpdateLog): Promise<never>;

package/dist/src/surfaces/cli/commands/self-update.js

@@ -20,26 +20,41 @@ export async function runSelfUpdate(input) {
     return true;
 }
 /** Runs update checks resiliently; the injected wait boundary owns shutdown. */
-export async function runSelfUpdateLoop(input, wait) {
+export async function runSelfUpdateLoop(input, wait, log) {
     for (;;) {
         try {
-            await runSelfUpdate(input);
+            const updated = await runSelfUpdate(input);
+            log?.(`wake self-update: ${updated ? 'applied' : 'already current'} ${input.tag}`);
         }
-        catch {
-            // A failed update is already rolled back when possible; the resident host retries later.
+        catch (error) {
+            log?.(`wake self-update: ${formatError(error)}`);
         }
         await wait();
     }
 }
 /** Re-discovers the source tag per iteration so a resident updater does not retain stale version state. */
-export async function runSelfUpdateLatestLoop(updateLatest, wait) {
+export async function runSelfUpdateLatestLoop(updateLatest, wait, log) {
     for (;;) {
         try {
-            await updateLatest();
+            const result = await updateLatest();
+            log?.(describeLatestUpdate(result));
         }
-        catch {
-            // Update failures are isolated to this iteration; the wait boundary controls retry cadence and shutdown.
+        catch (error) {
+            log?.(`wake self-update: ${formatError(error)}`);
         }
         await wait();
     }
 }
+function describeLatestUpdate(result) {
+    if (typeof result === 'object' &&
+        result !== null &&
+        'tag' in result &&
+        typeof result.tag === 'string' &&
+        'updated' in result &&
+        typeof result.updated === 'boolean')
+        return `wake self-update: ${result.updated ? 'applied' : 'no eligible update'} ${result.tag}`;
+    return 'wake self-update: check completed';
+}
+function formatError(error) {
+    return error instanceof Error ? error.message : String(error);
+}

package/docker/Dockerfile.runtime

@@ -79,7 +79,9 @@ EXPOSE 4317
 # that's fine since it's the very first thing that runs.
 ENV WAKE_MAIN_JS=/app/dist/src/main.js
 
+# The supervised entrypoint stays alive when its resident child fails, so the
+# sandbox remains reachable for setup and ownership repair after a failed boot.
 # Startup ownership repair is best effort because bind-mounted paths or host
 # permissions may prevent chown. The bounded direct-child pass avoids traversing
 # accumulated runtime data.
-ENTRYPOINT ["sh", "-c", "set -eu; mkdir -p /wake/.wake /wake/workspaces /wake/.wake/auth; chown wake:wake /wake/.wake /wake/workspaces /wake/.wake/auth || true; find /wake/.wake -mindepth 1 -maxdepth 1 -type d -exec chown wake:wake {} + || true; find /wake/.wake/auth -mindepth 1 -maxdepth 1 -type f -exec chown wake:wake {} + || true; exec su wake -s /bin/sh -c 'if [ \"$WAKE_START_ENABLED\" = \"true\" ]; then exec node /app/dist/src/main.js start --wake-root /wake --no-sandbox; else exec sleep infinity; fi'"]
+ENTRYPOINT ["sh", "-c", "set -eu; mkdir -p /wake/.wake /wake/workspaces /wake/.wake/auth; chown wake:wake /wake/.wake /wake/workspaces /wake/.wake/auth || true; find /wake/.wake -mindepth 1 -maxdepth 1 -type d -exec chown wake:wake {} + || true; find /wake/.wake/auth -mindepth 1 -maxdepth 1 -type f -exec chown wake:wake {} + || true; if [ -n \"$WAKE_HOME_INIT_DIRS\" ]; then printf '%s\\n' \"$WAKE_HOME_INIT_DIRS\" | while IFS= read -r directory; do case \"$directory\" in \"$WAKE_HOME_INIT_ROOT\"/*) mkdir -p \"$directory\"; chown wake:wake \"$directory\" ;; *) exit 1 ;; esac; done; fi; exec su wake -s /bin/sh -c 'HOME=/home/wake exec node \"$WAKE_MAIN_JS\" sandbox-entrypoint --wake-root /wake'"]

package/docker/Dockerfile.runtime.packaged

@@ -65,4 +65,4 @@ EXPOSE 4317
 # Startup ownership repair is best effort because bind-mounted paths or host
 # permissions may prevent chown. The bounded direct-child pass avoids traversing
 # accumulated runtime data.
-ENTRYPOINT ["sh", "-c", "set -eu; mkdir -p /wake/.wake /wake/workspaces /wake/.wake/auth; chown wake:wake /wake/.wake /wake/workspaces /wake/.wake/auth || true; find /wake/.wake -mindepth 1 -maxdepth 1 -type d -exec chown wake:wake {} + || true; find /wake/.wake/auth -mindepth 1 -maxdepth 1 -type f -exec chown wake:wake {} + || true; exec su wake -s /bin/sh -c 'exec wake sandbox-entrypoint'"]
+ENTRYPOINT ["sh", "-c", "set -eu; mkdir -p /wake/.wake /wake/workspaces /wake/.wake/auth; chown wake:wake /wake/.wake /wake/workspaces /wake/.wake/auth || true; find /wake/.wake -mindepth 1 -maxdepth 1 -type d -exec chown wake:wake {} + || true; find /wake/.wake/auth -mindepth 1 -maxdepth 1 -type f -exec chown wake:wake {} + || true; if [ -n \"$WAKE_HOME_INIT_DIRS\" ]; then printf '%s\\n' \"$WAKE_HOME_INIT_DIRS\" | while IFS= read -r directory; do case \"$directory\" in \"$WAKE_HOME_INIT_ROOT\"/*) mkdir -p \"$directory\"; chown wake:wake \"$directory\" ;; *) exit 1 ;; esac; done; fi; exec su wake -s /bin/sh -c 'HOME=/home/wake exec wake sandbox-entrypoint --wake-root /wake'"]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atolis-hq/wake",
-  "version": "0.4.28",
+  "version": "0.4.29",
   "description": "Local autonomous agent control plane for software development",
   "license": "Apache-2.0",
   "repository": {