@runuai/host 0.9.5 → 0.9.6

package/lib/orchestrator.ts

@@ -3172,6 +3172,38 @@ async function dockerStart(containerName: string): Promise<boolean> {
   return true;
 }
 
+/**
+ * Repair the shared node data root before any recovered-container init.
+ * Older task-up versions created the OpenCode leaf as root and accidentally
+ * left this parent root-owned, which prevented code-server from creating its
+ * managed User profile. `install -d` creates or repairs the exact directory
+ * without recursively changing unrelated application state beneath it.
+ */
+async function repairNodeDataRoot(containerName: string): Promise<boolean> {
+  const res = await dockerCli([
+    "exec",
+    "-u",
+    "root",
+    containerName,
+    "/usr/bin/install",
+    "-d",
+    "-o",
+    "node",
+    "-g",
+    "node",
+    "-m",
+    "0755",
+    "/home/node/.local/share",
+  ]);
+  if (res.status !== 0) {
+    console.error(
+      `[orchestrator] recovery: ${containerName} could not repair /home/node/.local/share ownership: ${res.stderr.trim() || `docker exec exited ${String(res.status)}`}`,
+    );
+    return false;
+  }
+  return true;
+}
+
 async function dockerPort(
   containerName: string,
   containerPort: number,
@@ -3372,6 +3404,9 @@ async function recoverOneTask(
     });
     return true;
   }
+  // uai-init seeds code-server's profile beneath this shared data root. Heal
+  // containers created by older hosts before running it as node.
+  await repairNodeDataRoot(containerName);
   // Correctly-owned Codex creds BEFORE uai-init / any agent respawn: the boot
   // reinject sweep only targets containers already running, so a container
   // recovered here would otherwise keep whatever it held when it exited —

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.5",
+  "version": "0.9.6",
   "description": "Uai host — runs ephemeral AI coding tasks in Docker on a machine you control.",
   "license": "MIT",
   "author": "Diogo Perillo <diogo.perillo@gmail.com>",

package/scripts/agent/task-up.sh

@@ -1244,6 +1244,21 @@ managed_clean_env=(
   "PATH=/usr/bin:/bin"
 )
 
+# OpenCode and code-server share ~/.local/share. OpenCode credentials are
+# copied as root below, so creating only its leaf with `mkdir -p` can leave the
+# shared parent root-owned (live 2026-08-04). Then node cannot create
+# code-server's User profile and the editor silently falls back to its light,
+# full-chrome defaults. Repair both explicitly on every start/resume; GNU
+# `install -d` also corrects an existing directory with the wrong owner.
+if ! docker exec -u root "${managed_exec_env[@]}" "$app_container" \
+  /usr/bin/install -d -o node -g node -m 0755 \
+    /home/node/.local/share \
+    /home/node/.local/share/opencode >/dev/null; then
+  emit_err "CONTAINER_INIT_FAILED" \
+    "Uai could not prepare the task's node-owned application data directory. Retry the task; the editor cannot load its settings until this succeeds." \
+    "prepare container application data"
+fi
+
 # Git rejects a repository owned by another uid even when its shared group is
 # writable. Trust only the selected worktrees in this task container—never `*`
 # and never the host cache. The task-private ~/.gitconfig makes these entries
@@ -1404,8 +1419,7 @@ docker exec -u root "$app_container" \
 # binary is baked into the image; here we copy the arch-independent auth+config.
 # ADR-076 EXTRA accounts (isolated dirs) are copied later from the host-agent
 # (provisionEngineAccounts) since they live in the sealed DB, not on disk here.
-docker exec -u root "$app_container" \
-  mkdir -p /home/node/.local/share/opencode >/dev/null 2>&1 || true
+# The shared parent and this leaf were created with node ownership above.
 for oc_item in auth.json config.json; do
   if [ -e "$UAI_OWNER_HOME/.local/share/opencode/$oc_item" ]; then
     docker cp "$UAI_OWNER_HOME/.local/share/opencode/$oc_item" \