@runuai/host 0.9.130 → 0.9.131

package/lib/task-environment/self.ts

@@ -287,13 +287,22 @@ class SelfTaskEnvironmentHandle implements TaskEnvironmentHandle {
     ) {
       throw new Error("self copy paths must be absolute and NUL-free");
     }
-    // Both sides are this machine. `cp -a` keeps directory trees intact
-    // (engine-account homes), and the result is chowned to the task user so
-    // the agents can read what was copied in for them.
+    // Both sides are this machine. A directory source lands as the
+    // destination's CONTENTS, the way the machine provider's tar stream
+    // does: engine-account provisioning pre-creates the destination, and a
+    // plain `cp -a dir dest` into an existing dest nests `dest/dir/…`, so
+    // CODEX_HOME / GROK_HOME pointed at a dir without auth.json and both
+    // engines ran signed out and silent (live 2026-09-10, first codex + grok
+    // agents on a task machine). A file source copies as before. The result
+    // is chowned to the task user when this process is root, so the agents
+    // can read what was copied in for them.
+    const copy =
+      'if [ -d "$1" ]; then mkdir -p "$2" && cp -a "$1/." "$2/"; ' +
+      'else mkdir -p "$(dirname "$2")" && cp -a "$1" "$2"; fi';
     const script =
-      request.direction === "into"
-        ? 'mkdir -p "$(dirname "$2")" && cp -a "$1" "$2" && chown -R node:node "$2"'
-        : 'mkdir -p "$(dirname "$2")" && cp -a "$1" "$2"';
+      request.direction === "into" && this.#privileged()
+        ? `${copy} && chown -R ${SELF_TASK_USER}:${SELF_TASK_USER} "$2"`
+        : copy;
     const result = await this.exec({
       argv: ["/bin/sh", "-c", script, "copy", request.source, request.destination],
       user: "root",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.130",
+  "version": "0.9.131",
   "description": "Uai host — runs ephemeral AI tasks in containers on a machine you control.",
   "license": "MIT",
   "author": "Uai Tech <team@runuai.com>",