cowork-os 0.3.79 → 0.3.82

package/CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.82] - 2026-02-14
+
+### Fixed
+- **SIGKILL regression fix for npm installs**: `setup_native` no longer uses `npm install --ignore-scripts=false` when recovering missing `better-sqlite3`, preventing `electron-winstaller` lifecycle scripts from being executed during first-time setup.
+- **Recovery install hardening**: missing runtime dependency repair now uses `--omit=dev` and `--package-lock=false` to avoid reifying packaging/dev dependency trees in user runtime installs.
+
+## [0.3.81] - 2026-02-14
+
+### Fixed
+- **README install path hardening**: `npm run setup` now skips a full dependency reinstall when the Electron dependency is already present, so fresh `/tmp` installs avoid avoidable reinstall-driven SIGKILL pressure.
+- **Native setup reliability**: restores the 0.3.71-style flow with retryable native setup and keeps `better-sqlite3` installation script-safe, then rebuilds it explicitly against Electron ABI.
+
+## [0.3.80] - 2026-02-14
+
+### Fixed
+- **macOS install reliability hardening**: setup now skips optional dependency reinstall during `npm run setup`, avoids propagating child SIGKILL events from native setup back to the shell, and documents a first-install flow that avoids macOS-terminating paths.
+- **Release validation hardening**: CI now resolves release metadata before install validation and validates installability from either published npm tarball (if already published) or local `npm pack` fallback, preventing release regressions for first-release tags.
+
 ## [0.3.79] - 2026-02-14
 
 ### Fixed
@@ -548,6 +566,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 | Version | Date | Highlights |
 |---------|------|------------|
+| 0.3.82 | 2026-02-14 | Removes script-enabled recovery installs that triggered electron-winstaller SIGKILL and hardens runtime repair install flags |
+| 0.3.81 | 2026-02-14 | Restored reliable /tmp install flow with retry-safe native setup and CI validation for both registry and npm-pack install paths |
+| 0.3.80 | 2026-02-14 | Fixed macOS first-install runtime setup reliability and hardened release validation so new tags can still run installation checks |
 | 0.3.79 | 2026-02-14 | Retained the 0.3.71 SIGKILL workaround and hardened draft release preparation so desktop assets upload reliably |
 | 0.3.78 | 2026-02-14 | Fixes missing release-time `executor-helpers` source and remaining strict-mode TypeScript blockers |
 | 0.3.77 | 2026-02-14 | Skips lifecycle scripts during setup reinstall and prevents setup-time SIGKILL in user-first installs |
@@ -564,7 +585,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 | 0.1.0 | 2025-01-24 | First public release with core features |
 | 0.0.1 | 2025-01-20 | Initial development setup |
 
-[Unreleased]: https://github.com/CoWork-OS/CoWork-OS/compare/v0.3.79...HEAD
+[Unreleased]: https://github.com/CoWork-OS/CoWork-OS/compare/v0.3.82...HEAD
+[0.3.82]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.82
+[0.3.81]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.81
+[0.3.80]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.80
 [0.3.79]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.79
 [0.3.78]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.78
 [0.3.77]: https://github.com/CoWork-OS/CoWork-OS/releases/tag/v0.3.77

package/README.md

@@ -36,11 +36,11 @@ Your AI needs a secure home. CoWork OS provides the runtime, security layers, an
 | **Security-First** | 2800+ unit tests, configurable guardrails, approval workflows, gateway hardening |
 | **Local-First** | Your data stays on your machine. BYOK (Bring Your Own Key) |
 
-### What’s new in 0.3.79
+### What’s new in 0.3.82
 
-- **0.3.71-style SIGKILL workaround carried forward**: the README macOS first-install flow (`npm install --ignore-scripts ...` then `npm run --prefix node_modules/cowork-os setup`) is now the officially documented path and includes retry/backoff handling for native setup SIGKILLs.
-- **Releaseability alignment**: this release includes the release workflow hardening that guarantees a draft release exists before Electron packaging, so desktop assets can be attached reliably on each tag.
-- **Version sync**: bumped to `0.3.79` so the fix is published for npm and GitHub releases.
+- **SIGKILL regression fixed**: runtime native setup no longer uses script-enabled `npm install` for missing `better-sqlite3`, so `electron-winstaller` lifecycle scripts are not triggered during first-time install setup.
+- **0.3.71 reliability behavior preserved**: first-install flow remains `npm install --ignore-scripts --omit=optional` followed by `npm run --prefix node_modules/cowork-os setup`, with retry handling.
+- **Version sync**: bumped to `0.3.82`.
 
 > **Status**: macOS desktop app + headless/server mode (Linux/VPS). Cross-platform desktop support planned.
 
@@ -67,7 +67,7 @@ Use this flow to test like a first-time user in a clean folder:
 # Install into a local folder
 mkdir -p /tmp/cowork-run
 cd /tmp/cowork-run
-npm install --ignore-scripts cowork-os@latest --no-audit --no-fund
+npm install --ignore-scripts --omit=optional cowork-os@latest --no-audit --no-fund
 
 # Prepare native runtime (Electron binary + native module cache)
 npm run --prefix node_modules/cowork-os setup
@@ -81,7 +81,16 @@ npx cowork-os
 
 This is the first install path users should try on macOS:
 
-> If you run plain `npm install cowork-os@latest`, macOS can still intermittently kill lifecycle scripts during dependency extraction. Use the `--ignore-scripts` flow above and `npm run --prefix node_modules/cowork-os setup` every time before first launch.
+> If you run plain `npm install cowork-os@latest`, macOS can still intermittently kill lifecycle scripts during dependency extraction. Use the flow above with `--ignore-scripts --omit=optional` and `npm run --prefix node_modules/cowork-os setup` before first launch.
+
+For strict reproducibility on low-memory machines:
+
+```bash
+export COWORK_SETUP_JOBS=1
+export COWORK_SETUP_NATIVE_OUTER_ATTEMPTS=10
+export COWORK_SETUP_NATIVE_SHELL_ATTEMPTS=10
+npm run --prefix node_modules/cowork-os setup
+```
 
 #### Install reliability notes (macOS / low-memory environments)
 
@@ -96,7 +105,7 @@ This is the first install path users should try on macOS:
 You can also install globally and launch directly:
 
 ```bash
-npm install -g --ignore-scripts --no-audit --no-fund cowork-os
+npm install -g --ignore-scripts --omit=optional --no-audit --no-fund cowork-os
 
 # Optional: verify installed version
 npm list -g cowork-os --depth=0
@@ -143,10 +152,20 @@ npm run dev
 
 If you see `Killed: 9` during `npm run setup`, macOS terminated a native build due to memory pressure.
 
-`npm run setup` already retries native setup automatically with backoff. Let it continue until it exits. If it still exits non-zero, close heavy apps and run the same command again:
+`npm run setup` already retries native setup automatically with backoff. Let it continue until it exits. If it still exits non-zero:
 
 ```bash
-npm run setup
+pkill -f '/cowork-os' || true
+npm run --prefix node_modules/cowork-os setup
+```
+
+If the shell shows `zsh: killed` again, this usually means your system killed a child process. Repeat with lower-memory settings:
+
+```bash
+COWORK_SETUP_JOBS=1 \
+COWORK_SETUP_NATIVE_OUTER_ATTEMPTS=12 \
+COWORK_SETUP_NATIVE_SHELL_ATTEMPTS=12 \
+npm run --prefix node_modules/cowork-os setup
 ```
 
 #### Build for Production

package/bin/cowork.js

@@ -10,6 +10,13 @@ const mainPath = path.join(packageDir, 'dist', 'electron', 'electron', 'main.js'
 const args = process.argv.slice(2);
 const npmCmd = process.platform === 'win32' ? 'npm.cmd' : 'npm';
 
+function mapSignalToCode(signal) {
+  if (signal === 'SIGKILL') return 137;
+  if (signal === 'SIGTERM') return 143;
+  if (signal === 'SIGINT') return 130;
+  return 1;
+}
+
 function buildAppAndLaunch() {
   console.log('[cowork-os] Build artifacts not found, running npm run build...');
   const build = spawn(npmCmd, ['run', 'build'], {
@@ -70,6 +77,8 @@ function ensureRuntimeDeps() {
     '--no-audit',
     '--no-fund',
     '--ignore-scripts',
+    '--omit=dev',
+    '--package-lock=false',
     ...missing.map((dep) => `${dep.name}@${dep.version}`)
   ];
 
@@ -135,7 +144,14 @@ function runNativeSetup(onDone) {
 
   setup.on('exit', (code, signal) => {
     if (signal) {
-      process.kill(process.pid, signal);
+      const exitCode = mapSignalToCode(signal);
+      console.error(
+        `[cowork-os] Native setup was terminated (${signal}).` +
+          (signal === 'SIGKILL'
+            ? ' Close other memory-heavy apps and rerun `npm run setup`.'
+            : '')
+      );
+      process.exit(exitCode);
       return;
     }
     if (code !== 0) {
@@ -157,7 +173,7 @@ function prepareAndLaunchApp() {
     if (!electronBinary) {
       console.error(
         '[cowork-os] Electron runtime is still missing after setup. Reinstall with:\n' +
-          '  npm install --ignore-scripts --no-audit --no-fund cowork-os@latest\n'
+          '  npm install --ignore-scripts --omit=optional --no-audit --no-fund cowork-os@latest\n'
       );
       process.exit(1);
     }
@@ -192,7 +208,7 @@ function launchApp(electronBinary) {
 
   electron.on('exit', (code, signal) => {
     if (signal) {
-      process.kill(process.pid, signal);
+      process.exit(mapSignalToCode(signal));
       return;
     }
     process.exit(code || 0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cowork-os",
-  "version": "0.3.79",
+  "version": "0.3.82",
   "description": "CoWork OS - The operating system for personal AI assistants",
   "overrides": {
     "@whiskeysockets/baileys": {
@@ -74,13 +74,13 @@
     "@whiskeysockets/baileys"
   ],
   "scripts": {
-    "setup": "npm install --ignore-scripts --no-audit --no-fund --omit=dev && { sleep 2; i=1; max=${COWORK_SETUP_NATIVE_OUTER_ATTEMPTS:-6}; delay=2; while [ $i -le $max ]; do echo \"[cowork] setup:native (outer attempt $i/$max)\"; sh scripts/setup_native_retry.sh; s=$?; if [ $s -eq 0 ]; then exit 0; fi; if [ $s -ne 137 ] && [ $s -ne 9 ]; then exit $s; fi; echo \"[cowork] setup:native was killed; retrying in ${delay}s...\"; sleep $delay; delay=$((delay * 2)); if [ $delay -gt 20 ]; then delay=20; fi; i=$((i + 1)); done; exit $s; }",
+    "setup": "if [ ! -f node_modules/electron/package.json ]; then npm install --ignore-scripts --omit=optional --omit=dev --no-audit --no-fund --no-save; fi; { sleep 2; i=1; max=${COWORK_SETUP_NATIVE_OUTER_ATTEMPTS:-6}; delay=2; while [ $i -le $max ]; do echo \"[cowork] setup:native (outer attempt $i/$max)\"; sh scripts/setup_native_retry.sh; s=$?; if [ $s -eq 0 ]; then exit 0; fi; if [ $s -ne 137 ] && [ $s -ne 9 ]; then exit $s; fi; echo \"[cowork] setup:native was killed; retrying in ${delay}s...\"; sleep $delay; delay=$((delay * 2)); if [ $delay -gt 20 ]; then delay=20; fi; i=$((i + 1)); done; exit $s; }",
     "setup:native": "sleep 2; i=1; max=${COWORK_SETUP_NATIVE_OUTER_ATTEMPTS:-6}; delay=2; while [ $i -le $max ]; do echo \"[cowork] setup:native (outer attempt $i/$max)\"; sh scripts/setup_native_retry.sh; s=$?; if [ $s -eq 0 ]; then exit 0; fi; if [ $s -ne 137 ] && [ $s -ne 9 ]; then exit $s; fi; echo \"[cowork] setup:native was killed; retrying in ${delay}s...\"; sleep $delay; delay=$((delay * 2)); if [ $delay -gt 20 ]; then delay=20; fi; i=$((i + 1)); done; exit $s",
     "setup:server": "npm install && npm rebuild --ignore-scripts=false better-sqlite3",
     "dev": "concurrently \"npm run dev:react\" \"npm run dev:electron\"",
     "dev:react": "vite",
     "dev:electron": "tsc -p tsconfig.electron.json && cross-env NODE_ENV=development electron .",
-    "build": "npm run build:react && npm run build:electron && npm run build:daemon && npm run build:connectors",
+    "build": "npm run build:react && concurrently -n electron,daemon \"npm run build:electron\" \"npm run build:daemon\" && npm run build:connectors",
     "build:react": "vite build",
     "build:electron": "tsc -p tsconfig.electron.json",
     "build:daemon": "tsc -p tsconfig.daemon.json",
@@ -116,6 +116,7 @@
     "eventsource": "^4.1.0",
     "exceljs": "^4.4.0",
     "grammy": "^1.39.3",
+    "i18next": "^25.8.7",
     "jszip": "^3.10.1",
     "mammoth": "^1.11.0",
     "mime-types": "^3.0.2",
@@ -128,6 +129,7 @@
     "qrcode-terminal": "^0.12.0",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
+    "react-i18next": "^16.5.4",
     "react-markdown": "^10.1.0",
     "remark-breaks": "^4.0.0",
     "remark-gfm": "^4.0.1",
@@ -159,7 +161,7 @@
     "eslint": "^9.39.2",
     "globals": "^17.3.0",
     "oxlint": "^1.47.0",
-    "typescript": "^5.7.3",
+    "typescript": "^5.9.0",
     "vite": "^7.3.1",
     "vite-plugin-electron": "^0.29.0",
     "vitest": "^4.0.18"

package/scripts/setup_native.mjs

@@ -145,13 +145,16 @@ function ensureBetterSqlite3(env) {
   console.log(
     `[cowork] better-sqlite3 is missing; installing ${BETTER_SQLITE3_VERSION}...`
   );
+
   return run(
     NPM_CMD,
     [
       "install",
       "--no-audit",
       "--no-fund",
-      "--ignore-scripts=false",
+      "--ignore-scripts",
+      "--omit=dev",
+      "--package-lock=false",
       "--no-save",
       `better-sqlite3@${BETTER_SQLITE3_VERSION}`,
     ],
@@ -210,6 +213,7 @@ function main() {
   const attempt = (attemptJobs) => {
     const env = baseEnvWithJobs(attemptJobs);
     const electronInstallScript = resolveFromCwd("electron/install.js");
+    const electronBinary = getElectronBinaryPath();
 
     if (!electronInstallScript) {
       console.error(
@@ -219,8 +223,12 @@ function main() {
     }
 
     // 1) Ensure Electron binary exists (postinstall is often skipped due to ignore-scripts=true).
-    const installRes = run(process.execPath, [electronInstallScript], { env });
-    if (installRes.status !== 0) return installRes;
+    if (electronBinary && fs.existsSync(electronBinary)) {
+      console.log("[cowork] Electron binary already present; skipping electron/install.js.");
+    } else {
+      const installRes = run(process.execPath, [electronInstallScript], { env });
+      if (installRes.status !== 0) return installRes;
+    }
 
     // If optional dependency install was skipped/failed earlier, recover here.
     const ensureBetterRes = ensureBetterSqlite3(env);
@@ -235,8 +243,8 @@ function main() {
       }`
     );
 
-    // 2) Prefer the Electron-targeted rebuild for better-sqlite3.
-    // This keeps binaries aligned with Electron ABI and avoids Node/host ABI mismatches.
+    // 2) electron-rebuild for the one module (keeps rebuild surface small).
+    // 2) Prefer an Electron-targeted rebuild for better-sqlite3 (often prebuilt, lighter).
     if (electronVersion) {
       const electronEnv = {
         ...env,
@@ -259,7 +267,8 @@ function main() {
       }
 
       console.log(
-        "[cowork] better-sqlite3 did not load after Electron-targeted rebuild; falling back to electron-rebuild path with inferred settings."
+        "[cowork] better-sqlite3 did not load after Electron-targeted rebuild; " +
+          "falling back to electron-rebuild."
       );
     } else {
       console.log(
@@ -267,7 +276,7 @@ function main() {
       );
     }
 
-    // 3) Fallback: electron-rebuild (most expensive). Keep it sequential and only rebuild the one module.
+    // 3) Fallback: electron-rebuild.
     const electronRebuildEntry = resolveFromCwd("@electron/rebuild");
     const electronRebuildCli = electronRebuildEntry
       ? path.join(path.dirname(electronRebuildEntry), "cli.js")
@@ -281,12 +290,25 @@ function main() {
 
     const rebuildRes = run(
       process.execPath,
-      [electronRebuildCli, "-f", "--only", "better-sqlite3", "--sequential"],
+      [
+        electronRebuildCli,
+        "-f",
+        "--only",
+        "better-sqlite3",
+        "--sequential",
+      ],
       { env }
     );
     if (rebuildRes.status !== 0) return rebuildRes;
 
-    return testBetterSqlite3InElectron(env);
+    const testRes = testBetterSqlite3InElectron(env);
+    if (testRes.status === 0) {
+      console.log("[cowork] better-sqlite3 loads in Electron.");
+      return testRes;
+    }
+
+    console.log("[cowork] better-sqlite3 did not load after electron-rebuild.");
+    return testRes;
   };
 
   let res = attempt(jobs);