maesttro 0.6.2 → 0.7.0

package/README.md

@@ -138,7 +138,7 @@ Defined in `src/clients.ts`, installed in `docker/Dockerfile`, configured via
 
 | Key | Client | Package |
 |---|---|---|
-| `opencode` (default) | opencode | `opencode-ai` |
+| `opencode` (default) | opencode | `@opencode/cli` |
 | `claude` | Claude Code | `@anthropic-ai/claude-code` |
 
 Adding a new client: add an entry to `src/clients.ts`, an install line in

package/dist/maesttro.js

@@ -1859,7 +1859,7 @@ var CLIENTS = {
   },
   opencode: {
     label: "opencode",
-    npmPackage: "opencode-ai",
+    npmPackage: "@opencode/cli",
     binary: "opencode",
     configDir: "/home/agent/.config/opencode"
   }
@@ -2048,7 +2048,11 @@ function opencodeProviders(url) {
 function opencodeConfig(base, url, isStrict = false) {
   const merged = mergeJson({ $schema: "https://opencode.ai/config.json", ...base }, {
     model: `${PROVIDER_ID}/${ORCHESTRATOR_MODEL}`,
-    compaction: { auto: true, keep: { tokens: 24000 }, buffer: 32000 },
+    compaction: {
+      auto: true,
+      preserve_recent_tokens: 24000,
+      reserved: 32000
+    },
     ...isStrict ? {} : { permission: "allow" }
   });
   const enabled = stringList(base.enabled_providers);
@@ -2807,6 +2811,15 @@ async function doctor() {
         return DGX_SPARK_URL;
       }
     ],
+    [
+      "Runner /tmp is usable by the agent",
+      () => {
+        const out = inRunner("mkdir -p /tmp/maesttro-tmpcheck/sub && find /tmp -mindepth 1 ! -user agent ! -path '/tmp/maesttro-tmpcheck*' | head -3; rm -rf /tmp/maesttro-tmpcheck; true");
+        if (out.trim()) {
+          throw new Error(`root-owned in /tmp: ${out.trim().replace(/\n/g, " ")}`);
+        }
+      }
+    ],
     [
       "Personal SSH key NOT visible inside runner (isolation intact)",
       () => {

package/docker/Dockerfile

@@ -1,8 +1,8 @@
 # git is built from source: Debian ships 2.47 and the runner wants a recent
 # git. Builder matches node:24-slim's Debian so the runtime libs line up.
 FROM debian:bookworm-slim AS git-build
-ARG GIT_VERSION=2.55.0
-ARG GIT_SHA256=457fdb04dc8728e007d4688695e6912e6f680727920f2a40bf11eacc17505357
+ARG GIT_VERSION=2.56.0
+ARG GIT_SHA256=26c56c296b38c0695b26fa95f475f1d01704d2d38e73465ca30b0b2f5dc789d3
 RUN apt-get update \
     && apt-get install -y --no-install-recommends ca-certificates curl xz-utils \
       build-essential libcurl4-openssl-dev libexpat1-dev libssl-dev zlib1g-dev \
@@ -14,8 +14,8 @@ RUN apt-get update \
     && make -j"$(nproc)" prefix=/usr/local sysconfdir=/etc NO_TCLTK=1 NO_PERL=1 NO_PYTHON=1 NO_GETTEXT=1 NO_RUST=1 \
       DESTDIR=/out all install
 
-FROM oven/bun:1.4.2-slim AS bun
-FROM ghcr.io/astral-sh/uv:0.12.19 AS uv
+FROM oven/bun:1.4.3-slim AS bun
+FROM ghcr.io/astral-sh/uv:0.13.1 AS uv
 
 FROM node:24-slim
 
@@ -71,11 +71,14 @@ COPY gitconfig /etc/gitconfig
 COPY runner-marker /etc/maesttro/runner
 
 # Curated client CLIs — keep in sync with src/clients.ts
+# Their install hooks run the new binaries as root, which leave root-owned dirs in
+# /tmp that the host-uid agent can't create inside. Clear /tmp here; it's 1777.
 RUN npm install -g \
     @anthropic-ai/claude-code \
-    opencode-ai \
+    @opencode/cli \
     typescript \
-    && corepack enable
+    && corepack enable \
+    && find /tmp -mindepth 1 -delete
 # The image pins the client version; an in-container update would only land on
 # the ephemeral layer and be re-downloaded every session
 ENV DISABLE_AUTOUPDATER=1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maesttro",
-  "version": "0.6.2",
+  "version": "0.7.0",
   "description": "Isolated Docker runner for local coding agents (opencode, claude, ...) under a dedicated bot GitHub identity, with curated configs baked in per client.",
   "type": "module",
   "bin": {
@@ -13,6 +13,7 @@
   "scripts": {
     "build": "bun build src/cli.ts --target node --format esm --outfile dist/maesttro.js",
     "prepack": "bun run build",
+    "pretest": "bun install --frozen-lockfile",
     "test": "bun test ./tests",
     "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.test.json",
     "clean": "rm -rf dist node_modules"