@runuai/host 0.2.0 → 0.2.1

package/lib/github-tokens.ts

@@ -278,6 +278,11 @@ export interface SetupTaskDeps {
  * a failure emits the auth-expired note but never aborts task-up. Returns true
  * iff a token was injected.
  */
+/** Tasks whose gh setup is currently in flight. task-up and the first
+ *  channel-ensure both kick this off and can overlap; a second concurrent
+ *  `gh auth login` would race the container's gh config, so we dedupe. */
+const setupInFlight = new Set<string>();
+
 export async function setupTaskGithub(
   taskId: string,
   userId: string,
@@ -288,6 +293,8 @@ export async function setupTaskGithub(
   const _inject =
     deps.inject ?? ((t: string, tok: string) => injectIntoContainer(t, tok));
   const _schedule = deps.schedule ?? scheduleRefresh;
+  if (setupInFlight.has(taskId)) return false;
+  setupInFlight.add(taskId);
   try {
     if (_hasToken(userId)) {
       const tok = await _request(userId);
@@ -311,6 +318,8 @@ export async function setupTaskGithub(
     console.warn(`[github] task ${taskId}: gh setup failed: ${reason}`);
     authExpiredHandler?.(taskId, userId, reason);
     return false;
+  } finally {
+    setupInFlight.delete(taskId);
   }
 }
 

package/lib/orchestrator.ts

@@ -181,6 +181,16 @@ class Orchestrator {
     // container), using the creator's per-user key. Best-effort.
     setupTaskGitIdentity(channel.taskId, task.ownerName, task.ownerEmail);
 
+    // GitHub auth for `gh` (ADR-027): mint + inject the access token and
+    // (re)start its refresh schedule. Done here — not only at task-up — so it
+    // survives a host restart: recovery recreates the channel and re-runs
+    // ensureSessions, whereas the in-memory refresh timer from the original
+    // task-up is gone. Guarded + best-effort + non-blocking; the token lands
+    // before the agents (spawned just below) make their first `gh` call.
+    if (task.ownerUserId) {
+      void setupTaskGithub(channel.taskId, task.ownerUserId);
+    }
+
     for (const agent of channel.roster) {
       const session = await this.factory.create({
         taskId: channel.taskId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Uai host — runs ephemeral AI coding tasks in Docker on a machine you control.",
   "license": "MIT",
   "author": "Diogo Perillo <diogo.perillo@gmail.com>",