@runuai/host 0.9.10 → 0.9.11

package/images/standard/container/code-server-settings.json

@@ -9,28 +9,55 @@
   "workbench.welcomePage.walkthroughs.openOnInstall": false,
   "window.commandCenter": false,
   "chat.commandCenter.enabled": false,
+  "chat.viewSessions.enabled": false,
+  "chat.disableAIFeatures": true,
   "update.mode": "none",
   "extensions.autoCheckUpdates": false,
   "extensions.autoUpdate": false,
   "git.openRepositoryInParentFolders": "always",
-  "workbench.activityBar.location": "top",
-  "chat.viewSessions.enabled": false,
   "workbench.secondarySideBar.defaultVisibility": "hidden",
+
+  "//4": "Colour theme. Overwritten at FIRST init by uai-init when the task",
+  "//5": "carries UAI_EDITOR_THEME (ADR-091); this value is the fallback for",
+  "//6": "tasks created before that shipped, or created outside a browser.",
   "workbench.colorTheme": "Dark 2026",
 
-  "//4": "Workspace Trust — every task runs in an isolated container off the",
-  "//5": "user's own repos. The 'do you trust this folder?' prompt is pure",
-  "//6": "friction here; the user already trusts their code and the container",
-  "//7": "is the security boundary.",
+  "//7": "An editor, not an IDE (ADR-092). This pane is one of three in a",
+  "//8": "task's right panel and is often half a screen wide, so every bar it",
+  "//9": "does not need is width the code does. Cut here is chrome only: the",
+  "//10": "status bar, the layout buttons, the menu bar, the empty-editor",
+  "//11": "watermark, Open Editors, the minimap and the terminal's chat hint.",
+  "//12": "Breadcrumbs STAY: with the status bar gone they are the only thing",
+  "//13": "naming the path, and a tab reading 'route.ts' is worth little in a",
+  "//14": "repo with eleven of them.",
+  "workbench.statusBar.visible": false,
+  "workbench.layoutControl.enabled": false,
+  "window.menuBarVisibility": "hidden",
+  "workbench.editor.empty.hint": "hidden",
+  "explorer.openEditors.visible": 0,
+  "editor.minimap.enabled": false,
+  "terminal.integrated.initialHint": false,
+
+  "//15": "Hide the activity bar and its custom title strip. Explorer stays",
+  "//16": "open; the Editor pane's own toolbar provides the pointer route to",
+  "//17": "Terminal. Individual pins still live in the BROWSER's IndexedDB; the",
+  "//18": "guarded migration keeps the requested containers ready if a user",
+  "//19": "later restores the bar.",
+  "workbench.activityBar.location": "hidden",
+
+  "//22": "Workspace Trust — every task runs in an isolated container off the",
+  "//23": "user's own repos. The 'do you trust this folder?' prompt is pure",
+  "//24": "friction here; the user already trusts their code and the container",
+  "//25": "is the security boundary.",
   "security.workspace.trust.enabled": false,
 
-  "//8": "Port forwarding — code-server's own auto-forward / 'Open in Browser'",
-  "//9": "popup can't reach anything useful here: dev servers are exposed",
-  "//10": "through uai's preview tunnel (ADR-025), not code-server's forwarder.",
-  "//11": "Disable it so the popup doesn't mislead.",
+  "//26": "Port forwarding — code-server's own auto-forward / 'Open in Browser'",
+  "//27": "popup can't reach anything useful here: dev servers are exposed",
+  "//28": "through uai's preview tunnel (ADR-025), not code-server's forwarder.",
+  "//29": "Disable it so the popup doesn't mislead.",
   "remote.autoForwardPorts": false,
   "remote.restoreForwardedPorts": false,
 
-  "//12": "Integrated terminal uses zsh + oh-my-zsh (the node login shell).",
+  "//30": "Integrated terminal uses zsh + oh-my-zsh (the node login shell).",
   "terminal.integrated.defaultProfile.linux": "zsh"
 }

package/images/standard/container/uai-init

@@ -219,11 +219,41 @@ cs_source_seed="$(dirname "${BASH_SOURCE[0]}")/code-server-settings.json"
 if [ ! -f "$cs_seed" ] && [ -f "$cs_source_seed" ]; then
   cs_seed="$cs_source_seed"
 fi
+
+# ADR-091: seed the Editor pane in the palette the task was created from.
+# UAI_EDITOR_THEME carries a VS Code theme LABEL ("Quiet Light"), already
+# resolved cloud-side from the theme registry — the container never maps a Uai
+# palette id and never sees a raw user string. Unset is the normal state for a
+# task created before this shipped or outside a browser; the seed's own baked
+# default then stands.
+#
+# Applied ONLY while seeding. An existing settings.json is still left entirely
+# alone, so a user's own editor tweaks survive a restart — which is also why
+# changing the app's palette later does not re-theme an already-created task
+# (docs/theming.md). If jq is missing or the filter fails, fall through to the
+# plain copy: a themed editor is worth less than an editor that starts.
+seed_code_server_settings() {
+  local seed="$1" dest="$2" theme="${UAI_EDITOR_THEME:-}"
+  if [ -n "$theme" ] && command -v jq >/dev/null 2>&1; then
+    if jq --arg theme "$theme" '.["workbench.colorTheme"] = $theme' \
+      "$seed" >"$dest.tmp" 2>/dev/null && [ -s "$dest.tmp" ]; then
+      mv "$dest.tmp" "$dest"
+      log "seeded code-server settings (theme: $theme)"
+      return 0
+    fi
+    rm -f "$dest.tmp"
+    log "warning: could not apply UAI_EDITOR_THEME=$theme; using image default"
+  fi
+  cp "$seed" "$dest" || return 1
+  log "seeded code-server settings"
+}
+
 if [ ! -f "$cs_user_dir/settings.json" ]; then
   if [ ! -f "$cs_seed" ]; then
     log "warning: code-server settings seed missing at $cs_seed"
-  elif mkdir -p "$cs_user_dir" && cp "$cs_seed" "$cs_user_dir/settings.json"; then
-    log "seeded code-server settings"
+  elif mkdir -p "$cs_user_dir" &&
+    seed_code_server_settings "$cs_seed" "$cs_user_dir/settings.json"; then
+    :
   else
     log "warning: could not seed code-server settings at $cs_user_dir/settings.json"
   fi
@@ -238,6 +268,7 @@ else
     --disable-workspace-trust \
     --auth none \
     --disable-telemetry \
+    --disable-update-check \
     --bind-addr 0.0.0.0:8080 \
     "$editor_root" \
     >/tmp/code-server.log 2>&1 &

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.10",
+  "version": "0.9.11",
   "description": "Uai host — runs ephemeral AI coding tasks in Docker on a machine you control.",
   "license": "MIT",
   "author": "Diogo Perillo <diogo.perillo@gmail.com>",

package/scripts/agent/task-up.sh

@@ -1081,6 +1081,13 @@ fi
   # Projects may declare managed names, so skip them here rather than trust
   # callers. They are also removed from the in-memory Compose override below.
   #
+  # UAI_EDITOR_THEME is reserved in BOTH places for the case that is easy to
+  # miss: a task whose stored palette is null, on a project that happens to
+  # declare that name. The cloud sends no theme, so the `preview_env` entry
+  # that normally shadows a declared key is absent too — and without these two
+  # lines a project would get to pick what the Editor pane looks like. Reserved,
+  # the name is not emitted at all and uai-init seeds the image's own default.
+  #
   # Project values never enter the host environment. Emit an explicit empty
   # default for every declared key; the stdin-only Compose override supplies
   # decrypted values at `compose up` time.
@@ -1094,15 +1101,23 @@ fi
       GIT_SSH | GIT_SSH_COMMAND | HOME | XDG_CONFIG_HOME | XDG_DATA_HOME | \
       BASH_ENV | ENV | UAI_GIT_TRANSPORT | \
       CLAUDE_CODE_OAUTH_TOKEN | ANTHROPIC_API_KEY | \
-      ANTHROPIC_AUTH_TOKEN | XAI_API_KEY | PLAYWRIGHT_BROWSERS_PATH) continue ;;
+      ANTHROPIC_AUTH_TOKEN | XAI_API_KEY | PLAYWRIGHT_BROWSERS_PATH | \
+      UAI_EDITOR_THEME) continue ;;
     esac
     printf '      %s: ""\n' "$ekey"
   done < <(jq -r '.[]' <<<"$union_env_keys_json")
-  # Preview-URL env vars (ADR-025): cloud-computed PUBLIC preview URLs exposed
-  # under operator-chosen names (e.g. EXPO_PACKAGER_PROXY_URL). Non-secret, so
-  # written LITERALLY (unlike the ${KEY:-} pass-throughs above). `preview_env`
-  # is a JSON object {VAR: url} on the task row, one entry per preview port that
-  # set `urlEnv`. Emitted last so it wins over any same-named declared key.
+  # Cloud-computed literal env (ADR-025): a JSON object {VAR: value} on the
+  # task row. Non-secret, so written LITERALLY (unlike the ${KEY:-}
+  # pass-throughs above). Emitted last so it wins over any same-named declared
+  # key. Two producers, both cloud-side and both opaque here:
+  #   - PUBLIC preview URLs under operator-chosen names (EXPO_PACKAGER_PROXY_URL
+  #     and friends), one per preview port that set `urlEnv`;
+  #   - UAI_EDITOR_THEME (ADR-091), the Editor pane's colour theme as a VS Code
+  #     theme LABEL ("Quiet Light"), already resolved from the palette the
+  #     creating browser snapshotted. The host never maps a Uai palette id.
+  # UAI_EDITOR_THEME is absent for every task created before it shipped and for
+  # any created outside a browser; uai-init then seeds the image's own default,
+  # so the column staying null is a supported state, not a value to fill in.
   preview_env_raw=$(jq -r '.[0].preview_env // "{}"' <<<"$task_json")
   while IFS= read -r pe_entry; do
     [ -n "$pe_entry" ] || continue
@@ -1188,7 +1203,8 @@ compose_env_override=$(printf '%s' "$project_env_json" | jq -c \
         .ANTHROPIC_API_KEY,
         .ANTHROPIC_AUTH_TOKEN,
         .XAI_API_KEY,
-        .PLAYWRIGHT_BROWSERS_PATH
+        .PLAYWRIGHT_BROWSERS_PATH,
+        .UAI_EDITOR_THEME
       )
     | delpaths($preview | keys | map([.]))
     | {services:{app:{environment:.}}}

package/src/protocol.ts

@@ -199,11 +199,17 @@ export interface TaskCommandTask {
   reviewerOrder?: string[];
   agents: TaskAgent[];
   /**
-   * Cloud-computed PUBLIC preview URLs to inject into the container env at
-   * task-up, keyed by the operator-chosen var name (e.g.
-   * `EXPO_PACKAGER_PROXY_URL`). Non-secret — written literally into the task's
-   * compose file. Only present on task-up commands, when a preview port set
-   * `urlEnv` and the cloud has a preview base domain configured.
+   * Cloud-computed literal env to inject into the container at task-up.
+   * Non-secret by construction — written straight into the task's compose file,
+   * unlike the `${KEY:-}` pass-throughs used for credentials. Only present on
+   * task-up commands.
+   *
+   * Named for its first user, PUBLIC preview URLs keyed by the operator-chosen
+   * var name (e.g. `EXPO_PACKAGER_PROXY_URL`, present when a preview port set
+   * `urlEnv` and the cloud has a preview base domain). It now also carries
+   * `UAI_EDITOR_THEME` (ADR-091) — same shape, same guarantees, same one-way
+   * trip to `services.app.environment`, so it rides here rather than growing
+   * the protocol a second env channel. The host treats every entry as opaque.
    */
   previewEnv?: Record<string, string>;
   /** ADR-062: owning org — locates the org shared-files root on the host. */