@runuai/host 0.9.5 → 0.9.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runuai/host",
-  "version": "0.9.5",
+  "version": "0.9.7",
   "description": "Uai host — runs ephemeral AI coding tasks in Docker on a machine you control.",
   "license": "MIT",
   "author": "Diogo Perillo <diogo.perillo@gmail.com>",

package/scripts/agent/task-up.sh

@@ -1244,6 +1244,21 @@ managed_clean_env=(
   "PATH=/usr/bin:/bin"
 )
 
+# OpenCode and code-server share ~/.local/share. OpenCode credentials are
+# copied as root below, so creating only its leaf with `mkdir -p` can leave the
+# shared parent root-owned (live 2026-08-04). Then node cannot create
+# code-server's User profile and the editor silently falls back to its light,
+# full-chrome defaults. Repair both explicitly on every start/resume; GNU
+# `install -d` also corrects an existing directory with the wrong owner.
+if ! docker exec -u root "${managed_exec_env[@]}" "$app_container" \
+  /usr/bin/install -d -o node -g node -m 0755 \
+    /home/node/.local/share \
+    /home/node/.local/share/opencode >/dev/null; then
+  emit_err "CONTAINER_INIT_FAILED" \
+    "Uai could not prepare the task's node-owned application data directory. Retry the task; the editor cannot load its settings until this succeeds." \
+    "prepare container application data"
+fi
+
 # Git rejects a repository owned by another uid even when its shared group is
 # writable. Trust only the selected worktrees in this task container—never `*`
 # and never the host cache. The task-private ~/.gitconfig makes these entries
@@ -1404,8 +1419,7 @@ docker exec -u root "$app_container" \
 # binary is baked into the image; here we copy the arch-independent auth+config.
 # ADR-076 EXTRA accounts (isolated dirs) are copied later from the host-agent
 # (provisionEngineAccounts) since they live in the sealed DB, not on disk here.
-docker exec -u root "$app_container" \
-  mkdir -p /home/node/.local/share/opencode >/dev/null 2>&1 || true
+# The shared parent and this leaf were created with node ownership above.
 for oc_item in auth.json config.json; do
   if [ -e "$UAI_OWNER_HOME/.local/share/opencode/$oc_item" ]; then
     docker cp "$UAI_OWNER_HOME/.local/share/opencode/$oc_item" \

package/src/index.ts

@@ -356,7 +356,21 @@ export const hostCommands: HostCommands = {
     logCommand(ctx, "channelEnsure", input.taskId);
     try {
       getOrchestrator().registerChannelSpec(normalizeChannelSpec(input));
-      await getOrchestrator().ensureStarted(input.taskId);
+      const ready = await getOrchestrator().ensureStarted(input.taskId);
+      // Open mode historically treats ensure as best-effort: a stopped task or
+      // transient spawn failure still acknowledges the idempotent command.
+      // Secretary mode is different because its CLI is the only delegation
+      // path, so starting without it would create a human-facing agent that
+      // cannot hand work to the crew.
+      if (!ready && input.mode === "secretary") {
+        return {
+          ok: false,
+          code: HostErrorCode.TaskNotRunning,
+          message:
+            "Secretary channel could not start; verify the task CLI and token were materialized",
+          retryable: false,
+        };
+      }
       return ok(undefined);
     } catch (err) {
       return failFromUnknown(err);

package/src/main.ts

@@ -71,6 +71,7 @@ import {
   capabilities as agentKindCapabilities,
   onChange as onRegistryChange,
 } from "../lib/agents/registry";
+import { canAdvertiseTypedSecretaryDispatch } from "../lib/agents/mode";
 // Importing the real factory triggers the built-in adapters' register()
 // calls (claude, codex), so the registry is populated before we advertise.
 import "../lib/agents/factory";
@@ -78,6 +79,7 @@ import { ensureStandardImage, standardRuntimes } from "../lib/standard-image";
 import { hostCommands, hostEvents } from "./index";
 import {
   HostErrorCode,
+  SECRETARY_TYPED_DISPATCH_PROTOCOL_FEATURE,
   TRANSCRIPT_TARGETS_PROTOCOL_FEATURE,
   type CloudToHost,
   type McpOp,
@@ -221,7 +223,15 @@ async function startLocalUi(): Promise<void> {
 function buildCapabilities(): HostCapabilities {
   return {
     version: packageVersion(),
-    protocolFeatures: [TRANSCRIPT_TARGETS_PROTOCOL_FEATURE],
+    protocolFeatures: [
+      TRANSCRIPT_TARGETS_PROTOCOL_FEATURE,
+      // The echo adapter cannot execute the in-task CLI. Advertising typed
+      // dispatch in mock mode would let the composer create a Secretary that
+      // has no way to wake crew.
+      ...(canAdvertiseTypedSecretaryDispatch()
+        ? [SECRETARY_TYPED_DISPATCH_PROTOCOL_FEATURE]
+        : []),
+    ],
     agentKinds: agentKindCapabilities(),
     runtimes: standardRuntimes(),
     githubUsers: connectedUserIds(),
@@ -1483,6 +1493,13 @@ function expectChannelEnsureInput(
   if (typeof input.secretaryAgentId === "string") {
     out.secretaryAgentId = input.secretaryAgentId;
   }
+  if (
+    input.secretaryDispatchProtocol ===
+    SECRETARY_TYPED_DISPATCH_PROTOCOL_FEATURE
+  ) {
+    out.secretaryDispatchProtocol =
+      SECRETARY_TYPED_DISPATCH_PROTOCOL_FEATURE;
+  }
   // ADR-053: browser testing flag (optional; tolerant of absence).
   if (input.browserTesting === true) out.browserTesting = true;
   // ADR-049: humans in the chat (optional; tolerant of absence for older

package/src/protocol.ts

@@ -33,7 +33,13 @@ export type HostCommandResult<T> =
 
 /** Capability ids shared by host advertisement and fail-closed cloud gates. */
 export const TRANSCRIPT_TARGETS_PROTOCOL_FEATURE = "transcript-targets-v1";
+export const SECRETARY_TYPED_DISPATCH_PROTOCOL_FEATURE =
+  "secretary-typed-dispatch-v1";
 export const COMMUNICATOR_EXECUTION_PROFILE = "communicator";
+export const MAX_AGENT_ID_CHARS = 128;
+export const MAX_SECRETARY_DISPATCH_RECIPIENTS = 16;
+export const MAX_SECRETARY_DISPATCH_INSTRUCTION_CHARS = 8_000;
+export const MAX_SECRETARY_DISPATCH_ID_CHARS = 256;
 
 export interface CommandContext {
   commandId: string;
@@ -250,6 +256,10 @@ export interface ChannelEnsureInput {
   mode?: "open" | "secretary";
   /** The one human-facing communicator in secretary mode. */
   secretaryAgentId?: string;
+  /** Cloud↔host negotiation for ADR-083's structured dispatch action. A new
+   *  host refuses Secretary mode when an older cloud omits it, rather than
+   *  starting a role whose only delegation path that cloud cannot consume. */
+  secretaryDispatchProtocol?: typeof SECRETARY_TYPED_DISPATCH_PROTOCOL_FEATURE;
   /** ADR-049: the humans in the chat. Optional for wire back-compat; absent
    *  or single-entry behaves exactly like the pre-ADR-049 single-human task. */
   humans?: ChannelHuman[];
@@ -642,6 +652,37 @@ export type HostEvent =
         costUsd?: number;
       };
     }
+  /**
+   * ADR-083 §5: the secretary raised a STRUCTURED dispatch (`#165vkk`).
+   *
+   * This exists because a lane cannot be inferred from prose. Rows are created
+   * on the first content chunk, so "who was this for?" has to be answered
+   * before any text exists — and only a tool call carries that answer
+   * structurally. v0 derived it from @mentions in the finished turn, which put
+   * every crew-directed sentence into the human's lane and copied the human's
+   * answer into the crew's.
+   *
+   * `recipients` are roster agent ids the engine's dispatch tool was given.
+   * The cloud validates them against the roster; it does not trust them.
+   */
+  | {
+      kind: "agent.dispatch";
+      taskId: string;
+      agentId: string;
+      recipients: string[];
+      instruction: string;
+      /**
+       * The engine's own id for the tool call this came from (Claude's
+       * `tool_use` id). Optional, and the cloud does not currently dedupe on
+       * it: nothing replays host events today, which is exactly the gap
+       * ADR-083 §6 / `#dmmcbh` exists to close. Carried now because it is free
+       * while the emission point is being chosen and expensive to add to the
+       * wire afterwards — and because a dispatch row that cannot be traced
+       * back to the tool call that raised it is hard to debug precisely when
+       * something has gone wrong with waking the crew.
+       */
+      dispatchId?: string;
+    }
   | {
       kind: "agent.tool_call";
       taskId: string;