@tablation/crew 0.127.7 → 0.127.9

package/dist/cli.js

@@ -11509,7 +11509,7 @@ var SandboxRunner = class {
           rmSync14(tmp, { recursive: true, force: true });
         }
       }
-      const withStubs = `PATH=${shQuote2(SANDBOX_STUB_DIR)}:"$PATH"; export PATH; `;
+      const withStubs = `${sandboxEnvExports()}PATH=${shQuote2(SANDBOX_STUB_DIR)}:"$PATH"; export PATH; `;
       const command2 = viaUpload ? ["sh", "-c", `${withStubs}exec ${[harness, ...plan.args].map(shQuote2).join(" ")} < ${SANDBOX_PROMPT_PATH}`] : ["sh", "-c", `${withStubs}exec "$@"`, "sh", harness, ...plan.args];
       const child = spawn3(cfg.bin, ["sandbox", "exec", "-n", name, "--no-login-shell", "--workdir", cfg.workDir, "--", ...command2], {
         env: process.env,
@@ -12792,9 +12792,10 @@ var realExec = (bin, args, o) => execFileP2(bin, args, { env: o?.env ?? process.
 var OPENSHELL_ATTACHABLE_LABEL = "openshell.ai/sandbox-attachable=true";
 var OPENSHELL_WORKSPACE_LABEL = "openshell.ai/sandbox-attachable-workspace";
 var VOLUME_ROOT = "/cache";
+var SANDBOX_WORKSPACE = "default";
 var DEFAULT_CACHE_SETTINGS = {
   engine: "docker",
-  workspace: "crew",
+  workspace: SANDBOX_WORKSPACE,
   helperImage: "alpine/git:latest",
   depsLockfile: "pnpm-lock.yaml"
 };
@@ -12950,6 +12951,16 @@ var SandboxCache = class {
     ]);
     return true;
   }
+  /** The workspace label the existing volume carries, or null when the volume is absent or unlabeled. A volume's labels cannot be changed in place. */
+  async volumeWorkspace() {
+    try {
+      const { stdout } = await this.engine(["volume", "inspect", "--format", `{{index .Labels "${OPENSHELL_WORKSPACE_LABEL}"}}`, this.s.volume]);
+      const v = stdout.trim();
+      return v && v !== "<no value>" ? v : null;
+    } catch {
+      return null;
+    }
+  }
   helper(image, script, args, env = {}, extra = []) {
     const flags = Object.keys(env).flatMap((k) => ["-e", k]);
     return this.engine(["run", "--rm", "--label", DOCKER_LABEL_OWNER, "-v", `${this.s.volume}:${VOLUME_ROOT}`, ...extra, ...flags, "--entrypoint", "sh", image, "-c", script, "sh", ...args], { ...process.env, ...env });
@@ -13365,6 +13376,14 @@ var CREW_ENV = {
   // A run cannot reach the download host, so an in-run update attempt is only noise.
   DISABLE_AUTOUPDATER: "1"
 };
+function sandboxEnvExports() {
+  const vars = {
+    ...CREW_ENV,
+    [SERENA_LANGUAGE_SERVERS_ENV]: `${SERENA_IMAGE_HOME}/language_servers`,
+    UV_PYTHON_INSTALL_DIR: `${CREW_PREFIX}/uv/python`
+  };
+  return Object.entries(vars).map(([k, v]) => `${k}=${v}; export ${k}; `).join("");
+}
 function claudeInstallCommand() {
   const cases = Object.entries(SANDBOX_CLAUDE_SHA256).map(([arch, { platform: platform2, sha256: sha2562 }]) => `${arch}) p=${platform2}; sum=${sha2562};;`).join(" ");
   return [
@@ -30742,6 +30761,8 @@ watermark:  ${state.watermark()}
           try {
             const missing = unmirroredRepos(sandboxCacheRepos(route2, cfg.ship), await new SandboxCache(cacheSettings).list());
             for (const r of missing) problems.push({ severity: "attention", kind: "sandbox_cache_unmirrored", route: route2.route, message: `${r} has no mirror in the cache volume ${cacheSettings.volume}, so sandboxed runs cannot clone it`, remedy: "see `crew sandbox cache` for the last refresh failure" });
+            const labeled = await new SandboxCache(cacheSettings).volumeWorkspace();
+            if (labeled !== null && labeled !== cacheSettings.workspace) problems.push({ severity: "blocker", kind: "sandbox_cache_workspace_mismatch", route: route2.route, message: `the cache volume ${cacheSettings.volume} is labeled for OpenShell workspace "${labeled}" but sandboxes are created in "${cacheSettings.workspace}", so the gateway refuses to mount it`, remedy: "run `crew sandbox cache --reset` to recreate the volume with the right label" });
           } catch {
           }
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tablation/crew",
-  "version": "0.127.7",
+  "version": "0.127.9",
   "description": "A standing team of headless agents that picks work off a Tablation board, does it on a machine you control, and reports back.",
   "type": "module",
   "license": "MIT",