cowork-os 0.3.75 → 0.3.79

package/CHANGELOG.md

@@ -7,6 +7,33 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.79] - 2026-02-14
+
+### Fixed
+- **macOS install reliability carry-forward**: retained the 0.3.71 SIGKILL workaround for first-time users by documenting and reinforcing the `npm install --ignore-scripts` + `npm run --prefix node_modules/cowork-os setup` flow.
+- **Release workflow hardening**: ensured the macOS release job always creates or reopens the GitHub release as a draft before packaging so `electron-builder` can attach DMG/zip assets without immutable-release failures.
+- **Version alignment**: published metadata now identifies this release as `0.3.79` with the same installability and packaging reliability changes.
+
+## [0.3.78] - 2026-02-14
+
+### Fixed
+- **Release build hardening**: restored the missing `src/electron/agent/executor-helpers.ts` source file so builds can resolve `executor.ts` imports after packaging from a fresh clone.
+- **TypeScript strictness fixes**: fixed implicit `any` errors in `executor.ts` that could break release builds on CI.
+- **TLS fingerprint callback typing fix**: aligned `remote-client.ts` callback signature/type usage with current `ws` client typings to satisfy strict build checks.
+
+## [0.3.77] - 2026-02-14
+
+### Fixed
+- **Setup script safety**: `npm run setup` in a fresh install now runs dependency reinstall with `--ignore-scripts` so optional postinstall hooks like `electron-winstaller` cannot SIGKILL the process during first-run recovery on macOS.
+- **Install reliability carry-forward**: this patch keeps the documented `/tmp` first-install sequence intact while ensuring setup stays stable across npm install layouts.
+- **Version alignment**: published metadata is now aligned on `0.3.77` so the installability fix is included in both npm and GitHub release tracks.
+
+## [0.3.76] - 2026-02-14
+
+### Fixed
+- **Installability restoration**: pinned `electron` to `40.2.1` so first-time installs from `npm` pull the known-good Electron patch and avoid `SIGKILL` during `node_modules/electron/install.js` on affected macOS environments.
+- **README alignment**: clarified the first-time CLI install path to reflect the exact commands users should run from a fresh temporary folder.
+
 ## [0.3.75] - 2026-02-14
 
 ### Fixed
@@ -521,6 +548,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 | Version | Date | Highlights |
 |---------|------|------------|
+| 0.3.79 | 2026-02-14 | Retained the 0.3.71 SIGKILL workaround and hardened draft release preparation so desktop assets upload reliably |
+| 0.3.78 | 2026-02-14 | Fixes missing release-time `executor-helpers` source and remaining strict-mode TypeScript blockers |
+| 0.3.77 | 2026-02-14 | Skips lifecycle scripts during setup reinstall and prevents setup-time SIGKILL in user-first installs |
+| 0.3.76 | 2026-02-14 | Pinned Electron to 40.2.1 for first-run installability and aligned README CLI flow |
 | 0.3.75 | 2026-02-14 | Restored 0.3.71-compatible Electron lockfile for installability and release confidence |
 | 0.3.73 | 2026-02-14 | Release automation hardening and task/workspace validation fixes |
 | 0.3.72 | 2026-02-14 | Session-based temp workspaces, autonomous execution mode, safer completion validation |
@@ -533,7 +564,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 | 0.1.0 | 2025-01-24 | First public release with core features |
 | 0.0.1 | 2025-01-20 | Initial development setup |
 
-[Unreleased]: https://github.com/CoWork-OS/CoWork-OS/compare/v0.3.75...HEAD
+[Unreleased]: https://github.com/CoWork-OS/CoWork-OS/compare/v0.3.79...HEAD
+[0.3.79]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.79
+[0.3.78]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.78
+[0.3.77]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.77
+[0.3.76]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.76
 [0.3.75]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.75
 [0.3.73]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.73
 [0.3.72]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.72

package/README.md

@@ -36,11 +36,11 @@ Your AI needs a secure home. CoWork OS provides the runtime, security layers, an
 | **Security-First** | 2800+ unit tests, configurable guardrails, approval workflows, gateway hardening |
 | **Local-First** | Your data stays on your machine. BYOK (Bring Your Own Key) |
 
-### What’s new in 0.3.75
+### What’s new in 0.3.79
 
-- **Release pipeline reliability**: restored the working Electron patch-level lock from `v0.3.71` so install flow remains reliable in default `npm install` paths.
-- **Default install resilience**: default `npm install` behavior is now usable again with fewer SIGKILL exits during `electron/install.js` on macOS low-memory installs.
-- **Release + CI alignment**: kept installability changes aligned with the existing release publish workflow and release notes process.
+- **0.3.71-style SIGKILL workaround carried forward**: the README macOS first-install flow (`npm install --ignore-scripts ...` then `npm run --prefix node_modules/cowork-os setup`) is now the officially documented path and includes retry/backoff handling for native setup SIGKILLs.
+- **Releaseability alignment**: this release includes the release workflow hardening that guarantees a draft release exists before Electron packaging, so desktop assets can be attached reliably on each tag.
+- **Version sync**: bumped to `0.3.79` so the fix is published for npm and GitHub releases.
 
 > **Status**: macOS desktop app + headless/server mode (Linux/VPS). Cross-platform desktop support planned.
 
@@ -67,7 +67,10 @@ Use this flow to test like a first-time user in a clean folder:
 # Install into a local folder
 mkdir -p /tmp/cowork-run
 cd /tmp/cowork-run
-npm install cowork-os@latest --no-audit --no-fund
+npm install --ignore-scripts cowork-os@latest --no-audit --no-fund
+
+# Prepare native runtime (Electron binary + native module cache)
+npm run --prefix node_modules/cowork-os setup
 
 # Ensure no previously running CoWork instance is active
 pkill -f '/cowork-os' || true
@@ -76,20 +79,24 @@ pkill -f '/cowork-os' || true
 npx cowork-os
 ```
 
+This is the first install path users should try on macOS:
+
+> If you run plain `npm install cowork-os@latest`, macOS can still intermittently kill lifecycle scripts during dependency extraction. Use the `--ignore-scripts` flow above and `npm run --prefix node_modules/cowork-os setup` every time before first launch.
+
 #### Install reliability notes (macOS / low-memory environments)
 
-- If install fails with `SIGKILL` during `node_modules/electron/install.js`, use a two-step install:
-  - `npm install --ignore-scripts cowork-os@latest --no-audit --no-fund`
-  - `npm run setup` (from the install directory) before launching the CLI
+- If setup is interrupted by `SIGKILL`, close other memory-heavy apps and rerun:
+  - `npm run --prefix node_modules/cowork-os setup`
 - For local package testing, use the same `--ignore-scripts` flow with the tarball:
   - `npm init -y`  
   - `npm install --ignore-scripts /path/to/cowork-os-<version>.tgz`
+  - `npm run --prefix node_modules/cowork-os setup`
 - If you already have a global install, verify with `coworkd-node --version` and avoid launching without dependency setup on first run.
 
 You can also install globally and launch directly:
 
 ```bash
-npm install -g cowork-os
+npm install -g --ignore-scripts --no-audit --no-fund cowork-os
 
 # Optional: verify installed version
 npm list -g cowork-os --depth=0

package/bin/cowork.js

@@ -152,13 +152,27 @@ function prepareAndLaunchApp() {
     process.exit(1);
   }
 
-  const electronBinary = resolveElectronBinary();
+  const launchAfterSetup = () => {
+    const electronBinary = resolveElectronBinary();
+    if (!electronBinary) {
+      console.error(
+        '[cowork-os] Electron runtime is still missing after setup. Reinstall with:\n' +
+          '  npm install --ignore-scripts --no-audit --no-fund cowork-os@latest\n'
+      );
+      process.exit(1);
+    }
+    if (isBetterSqliteReady(electronBinary)) {
+      launchApp(electronBinary);
+      return;
+    }
+    runNativeSetup(() => launchAfterSetup());
+  };
+
+  let electronBinary = resolveElectronBinary();
   if (!electronBinary) {
-    console.error(
-      '[cowork-os] Electron runtime is missing. Reinstall with:\n' +
-      '  npm install cowork-os@latest\n'
-    );
-    process.exit(1);
+    console.log('[cowork-os] Electron runtime is missing. Running setup...');
+    runNativeSetup(() => launchAfterSetup());
+    return;
   }
 
   if (isBetterSqliteReady(electronBinary)) {