@spunto/build 0.18.0 → 0.19.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spunto/build",
-  "version": "0.18.0",
+  "version": "0.19.1",
   "description": "Spunto's shared Build engine — the devcontainer image protocol and VS Code extension registry clients, with no database, no HTTP framework and no UI.",
   "type": "module",
   "license": "MIT",

package/src/sandbox-agent/agent.mjs

@@ -181,8 +181,17 @@ function startDone(worker) {
 function projectState() {
   if (!project) return null
   const { plan } = project
-  const baked = existsSync(join(DIR, `.baked-${plan.bakeKey}`))
   const alive = runnerPid() != null
+  // The recipe of the runner of this boot, not the plan's: a recipe change deployed while the box
+  // runs (new bakeKey, the plan re-sent at the agent's reconnection) applies at its next start, and
+  // the plan's marker is not there before. Read against the plan, the box said `baking` until then,
+  // `building` in the dashboard, while it was up and ready (2026-10-26, IMAGE_RECIPE_VERSION 3).
+  // A runner started by an agent that kept no key in started.json: past its bake once setup is done.
+  const last = lastStart()
+  const ofThisBoot = last != null && (alive || last.boot === bootId())
+  const baked = ofThisBoot && last.bakeKey
+    ? existsSync(join(DIR, `.baked-${last.bakeKey}`))
+    : existsSync(join(DIR, `.baked-${plan.bakeKey}`)) || (alive && existsSync(SETUP_DONE))
   let worker = null
   try {
     worker = JSON.parse(readFileSync(MP_STATUS, "utf8"))
@@ -304,7 +313,7 @@ function applyProject(plan) {
   }
   const log = openSync(join(DIR, "project.log"), "a")
   // Before the spawn: the worker script's `ready` of this start must be newer than it (startDone).
-  writeFileSync(STARTED(), JSON.stringify({ boot, version: plan.version, exitCode: null, at: new Date().toISOString() }))
+  writeFileSync(STARTED(), JSON.stringify({ boot, version: plan.version, bakeKey: plan.bakeKey, exitCode: null, at: new Date().toISOString() }))
   // Detached, in its own session: it outlives an agent restart, like a container's CMD would.
   const child = spawn("bash", [join(DIR, "runner.sh"), DIR, plan.bakeKey, plan.bakeOnly ? "bake-only" : "full"], {
     cwd: "/",

package/src/script/setup-script.ts

@@ -636,6 +636,9 @@ export function defaultVscodeUserSettings(opts?: {
 }): Record<string, unknown> {
   const { projectName, colorByProject } = opts ?? {}
   const settings: Record<string, unknown> = {
+    // Built into the image by spunto-pack (`brand: spunto`, coderhammer/features). On an image
+    // from before it the theme is missing and VS Code silently keeps its own default.
+    "workbench.colorTheme": "Spunto Light",
     "chat.disableAIFeatures": true,
     // Workers are ephemeral/single-purpose — the trust prompt only adds friction.
     "security.workspace.trust.enabled": false,
@@ -685,8 +688,9 @@ export function defaultVscodeUserSettings(opts?: {
  *
  * 1 → the hand-written blocks (vscode user, code-server, tmux, dtach, sshd).
  * 2 → common-utils + spunto-pack.
+ * 3 → spunto-pack 1.1: the IDE wears Spunto's name, icons and themes (coderhammer/features).
  */
-export const IMAGE_RECIPE_VERSION = 2
+export const IMAGE_RECIPE_VERSION = 3
 
 export function buildImageScript(params: {
   features: { id: string; ociRef?: string; options?: Record<string, string> }[]
@@ -1406,6 +1410,14 @@ export function buildStartScript(params: StartScriptParams): { script: string; h
     // Makes the editor's own Extensions view search the same registry the picker and the image
     // build used (org setting — see lib/extension-registry.ts). Nothing when the org is on Open VSX.
     ...galleryExport(extensionsGallery),
+    // The IDE is Spunto's, not Coder's (spunto-pack rebrands the files): the name in the title,
+    // no "Deploy code-server for your team" on the welcome page, no "code-server vX is out"
+    // notification. Each flag only if this code-server knows it — an unknown one stops it dead.
+    '_mp_cs_flags=""',
+    "for _f in --app-name --disable-getting-started-override --disable-update-check; do",
+    '  code-server --help 2>/dev/null | grep -q -- "$_f" || continue',
+    '  case "$_f" in --app-name) _mp_cs_flags="$_mp_cs_flags --app-name Spunto" ;; *) _mp_cs_flags="$_mp_cs_flags $_f" ;; esac',
+    "done",
     "while true; do",
     '  VSCODE_PROXY_URI="${PUBLIC_PROTOCOL}://${WORKER_SLUG}-{{port}}.${BASE_DOMAIN}" \\',
     // PORT is overridden here (not unset globally) so a project secret named
@@ -1414,7 +1426,7 @@ export function buildStartScript(params: StartScriptParams): { script: string; h
     // § 4c above restores the original value for that terminal specifically.
     // apps/agent/src/terminal.ts (dashboard's separate terminal feature) is a
     // different process tree entirely and was never affected.
-    `    PORT=${idePort} code-server --bind-addr 0.0.0.0:${idePort} --auth none /workspace 2>&1`,
+    `    PORT=${idePort} code-server --bind-addr 0.0.0.0:${idePort} --auth none $_mp_cs_flags /workspace 2>&1`,
     '  echo "[start] code-server exited ($?), restarting in 3s..."',
     "  sleep 3",
     "done",
@@ -1642,9 +1654,17 @@ export function buildContainerScript(params: StartScriptParams): { script: strin
     // Same org-level gallery export as the legacy loop above — the two blocks are duplicated on
     // purpose (RFC 0017 §2.1), so this one has to be kept in step by hand.
     ...galleryExport(extensionsGallery),
+    // The IDE is Spunto's, not Coder's (spunto-pack rebrands the files): the name in the title,
+    // no "Deploy code-server for your team" on the welcome page, no "code-server vX is out"
+    // notification. Each flag only if this code-server knows it — an unknown one stops it dead.
+    '_mp_cs_flags=""',
+    "for _f in --app-name --disable-getting-started-override --disable-update-check; do",
+    '  code-server --help 2>/dev/null | grep -q -- "$_f" || continue',
+    '  case "$_f" in --app-name) _mp_cs_flags="$_mp_cs_flags --app-name Spunto" ;; *) _mp_cs_flags="$_mp_cs_flags $_f" ;; esac',
+    "done",
     "while true; do",
     '  VSCODE_PROXY_URI="${PUBLIC_PROTOCOL}://${WORKER_SLUG}-{{port}}.${BASE_DOMAIN}" \\',
-    `    PORT=${idePort} code-server --bind-addr 0.0.0.0:${idePort} --auth none /workspace 2>&1`,
+    `    PORT=${idePort} code-server --bind-addr 0.0.0.0:${idePort} --auth none $_mp_cs_flags /workspace 2>&1`,
     '  echo "[start] code-server exited ($?), restarting in 3s..."',
     "  sleep 3",
     "done",