devs-common 5.0.0__tar.gz → 5.0.2__tar.gz

{devs_common-5.0.0 → devs_common-5.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devs-common
-Version: 5.0.0
+Version: 5.0.2
 Summary: Shared utilities for devs package ecosystem
 Author: Dan Lester
 License-Expression: MIT

{devs_common-5.0.0 → devs_common-5.0.2}/devs_common/core/container.py

@@ -433,9 +433,34 @@ class ContainerManager:
         tailscaled and the tailnet node stay down, and VS Code settings aren't
         re-deployed. The script is idempotent, so running it again is harmless. Never
         raises: a container without the devs template simply has no such script.
+
+        The hook's identity env (``DEVS_PROJECT_NAME``/``DEVCONTAINER_NAME``) comes from
+        devcontainer.json ``remoteEnv``, which only the devcontainer CLI injects — a raw
+        exec sees neither. Without them start-tailscale.sh falls through to its
+        ``devcontainer`` default and the node rejoins the tailnet as ``devs-devcontainer``
+        (then clash-suffixed ``-1``, ``-2``…) instead of ``devs-<project>-<dev>`` — so
+        every name anyone SSHes to breaks on each host reboot. Re-derive them from the
+        labels set at creation, which are the container's own record of that identity.
         """
+        environment = {}
+        try:
+            labels = self.docker.get_container_labels(container_name)
+            project = labels.get("devs.project", "")
+            dev = labels.get("devs.dev", "")
+            if project and dev:
+                environment = {
+                    "DEVS_PROJECT_NAME": project,
+                    "DEVCONTAINER_NAME": dev,
+                }
+        except Exception:
+            pass  # fall back to the hook's own defaults
+
         try:
-            self.docker.exec_command(container_name, "/usr/local/bin/post-start.sh")
+            self.docker.exec_command(
+                container_name,
+                "/usr/local/bin/post-start.sh",
+                environment=environment or None,
+            )
         except Exception:
             pass  # not a devs-template container / exec unavailable
 
@@ -942,7 +967,11 @@ class ContainerManager:
         return self.exec_command(
             dev_name=dev_name,
             workspace_dir=workspace_dir,
-            command="codex --full-auto",
+            # `--full-auto` was removed from the Codex CLI (passing it now aborts with
+            # "unexpected argument"). This is the flag Codex intends for externally
+            # sandboxed environments, which a devcontainer is — and it matches the
+            # `claude --dangerously-skip-permissions` alias sitting beside it.
+            command="codex --dangerously-bypass-approvals-and-sandbox",
             stdin_input=prompt,
             debug=debug,
             stream=stream,

{devs_common-5.0.0 → devs_common-5.0.2}/devs_common/templates/Dockerfile

@@ -145,8 +145,10 @@ RUN sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/download/
 # Install Claude CLI via native installer
 RUN curl -fsSL https://claude.ai/install.sh | bash
 
-# Install OpenAI Codex CLI
-RUN npm install -g @openai/codex
+# Install OpenAI Codex CLI. Pinned: an unpinned install silently followed upstream
+# flag changes, which is how the old `--full-auto` alias below ended up broken.
+ARG CODEX_CLI_VERSION=0.144.6
+RUN npm install -g "@openai/codex@${CODEX_CLI_VERSION}"
 
 # Install cloudflared for tunnel support (proxies all HTTP methods correctly)
 # Install VS Code CLI for tunnel support (needs root for /usr/local/bin)
@@ -184,7 +186,8 @@ RUN for shell_rc in /home/node/.zshrc /home/node/.bashrc; do \
   echo "export CODEX_CONFIG_HOME=\"/home/node/codexconfig\"" >> "$shell_rc" && \
   echo "export PATH=\"/home/node/.local/bin:\$PATH\"" >> "$shell_rc" && \
   echo "alias claude=\"claude --dangerously-skip-permissions\"" >> "$shell_rc" && \
-  echo "alias codex=\"/usr/local/share/npm-global/bin/codex --full-auto\"" >> "$shell_rc" && \
+  echo "alias codex=\"/usr/local/share/npm-global/bin/codex -c check_for_update_on_startup=false --dangerously-bypass-approvals-and-sandbox\"" >> "$shell_rc" && \
+  echo "alias codex-normal=\"/usr/local/share/npm-global/bin/codex -c check_for_update_on_startup=false\"" >> "$shell_rc" && \
   echo "" >> "$shell_rc" && \
   echo "# Auto-activate Python venv if it exists" >> "$shell_rc" && \
   echo "if [ -f /home/node/.devs-venv/workspace-venv/bin/activate ]; then" >> "$shell_rc" && \
@@ -231,4 +234,3 @@ RUN echo "DEBUG: Files that need sudo:" && ls -la /tmp/sudo-scripts-list/ && \
   rm -rf /tmp/sudo-scripts-list
 
 USER node
-

{devs_common-5.0.0 → devs_common-5.0.2}/devs_common/templates/README-vscode-settings.md

@@ -30,6 +30,10 @@ unset; the profile is always defined.
 
 ### Notes on the tmux settings
 
+- The profile's args are a bare `new-session` — deliberately **not** `new-session -A -s
+  <name>`. The `-A` form attaches to the named session if it exists, so every "New
+  Terminal" lands you back in the *same* session instead of opening a new one. Reattaching
+  to existing sessions is the auto-reattach extension's job, not the profile's.
 - `~/.tmux.conf` (written in the Dockerfile) sets `mouse on`, 50k scrollback, and
   `set-titles` so tab titles show the running command. Existing sessions keep their old
   config — `tmux source-file ~/.tmux.conf` then start a new session, or `tmux kill-server`.

{devs_common-5.0.0 → devs_common-5.0.2}/devs_common/templates/machine-settings.json

@@ -45,8 +45,7 @@
     },
     "tmux": {
       "path": "tmux",
-      "args": ["new-session", "-A", "-s", "main"],
-      "icon": "terminal-tmux"
+      "args": ["new-session"]
     }
   },
   "terminal.integrated.macOptionClickForcesSelection": true,

{devs_common-5.0.0 → devs_common-5.0.2}/devs_common/templates/scripts/post-create-wrapper.sh

@@ -40,6 +40,16 @@ run_step "start-services.sh" "sudo /usr/local/bin/start-services.sh"
 # Optional: join the tailnet + serve a port. Non-fatal — no auth key => no-op.
 run_step "start-tailscale.sh" "/usr/local/bin/start-tailscale.sh" || true
 
+# setup-devs-env.sh runs through run_step in a subshell, so variables it exports
+# do not reach this wrapper. Load the mounted environment here as well so GH_TOKEN
+# is available while gh configures git's credential helper.
+if [ -f /home/node/.devs-env/.env ]; then
+    set -a
+    # shellcheck disable=SC1091 -- this file is supplied by the devs bind mount
+    source /home/node/.devs-env/.env
+    set +a
+fi
+
 # GitHub auth setup is optional, so handle it separately
 echo "📋 Running gh auth setup-git..."
 if output=$(gh auth setup-git 2>&1); then

{devs_common-5.0.0 → devs_common-5.0.2}/devs_common/templates/scripts/post-start.sh

@@ -21,6 +21,13 @@ fi
 # before the TS_ENABLE gate below, which exits when Tailscale is off.
 /usr/local/bin/setup-vscode-settings.sh || true
 
+# Optional per-user/per-project startup hooks. The mounted env directory is
+# project-specific when ~/.devs/envs/<project>/ exists, otherwise it is the
+# shared ~/.devs/envs/default profile. Hooks are executable files in autoexec/
+# and run in lexical order. Keep failures non-fatal so a broken convenience
+# hook cannot make the devcontainer unusable.
+/usr/local/bin/run-autoexec.sh || true
+
 # Gate on the same master switch as the rest of the Tailscale wiring.
 case "${TS_ENABLE:-}" in
   1|true|yes) ;;

devs_common-5.0.2/devs_common/templates/scripts/run-autoexec.sh

@@ -0,0 +1,30 @@
+#!/bin/bash
+# Run optional, user-supplied startup hooks from the mounted devs environment.
+# The directory's presence is the opt-in; hooks run in lexical filename order.
+set -uo pipefail
+
+hooks_dir="${DEVS_AUTOEXEC_DIR:-/home/node/.devs-env/autoexec}"
+[ -d "$hooks_dir" ] || exit 0
+
+status=0
+found=0
+for hook in "$hooks_dir"/*; do
+  [ -f "$hook" ] || continue
+  [ -x "$hook" ] || {
+    echo "ℹ️  Skipping non-executable autoexec hook: $(basename "$hook")"
+    continue
+  }
+
+  found=1
+  echo "📋 Running autoexec hook: $(basename "$hook")"
+  if "$hook"; then
+    echo "✅ Autoexec hook completed: $(basename "$hook")"
+  else
+    hook_status=$?
+    echo "⚠️  Autoexec hook failed ($hook_status): $(basename "$hook")"
+    status=1
+  fi
+done
+
+[ "$found" -eq 0 ] || echo "🏁 Autoexec hooks finished"
+exit "$status"

{devs_common-5.0.0 → devs_common-5.0.2}/devs_common/utils/docker_client.py

@@ -170,6 +170,25 @@ class DockerClient:
         except DockerException as e:
             raise DockerError(f"Error finding containers by labels: {e}")
     
+    def get_container_labels(self, name: str) -> Dict[str, str]:
+        """Get a single container's labels.
+
+        Args:
+            name: Container name or id
+
+        Returns:
+            The container's label dictionary
+
+        Raises:
+            DockerError: If the container is missing or inspection fails
+        """
+        try:
+            return self.client.containers.get(name).labels or {}
+        except NotFound:
+            raise DockerError(f"Container {name} not found")
+        except DockerException as e:
+            raise DockerError(f"Error inspecting container {name}: {e}")
+
     def rename_container(self, old_name: str, new_name: str) -> None:
         """Rename a container.
         
@@ -188,26 +207,37 @@ class DockerClient:
         except DockerException as e:
             raise DockerError(f"Error renaming container {old_name} to {new_name}: {e}")
     
-    def exec_command(self, container_name: str, command: str, workdir: Optional[str] = None) -> bool:
+    def exec_command(
+        self,
+        container_name: str,
+        command: str,
+        workdir: Optional[str] = None,
+        environment: Optional[Dict[str, str]] = None,
+    ) -> bool:
         """Execute a command in a container.
-        
+
         Args:
             container_name: Container name
             command: Command to execute
             workdir: Working directory for command
-            
+            environment: Extra env vars for this exec only. A raw exec inherits the
+                image's baked-in env but NOT devcontainer.json ``remoteEnv``, which the
+                devcontainer CLI injects per-exec — pass anything the command needs from
+                there explicitly.
+
         Returns:
             True if command succeeded
-            
+
         Raises:
             DockerError: If execution fails
         """
         try:
             container = self.client.containers.get(container_name)
-            
+
             exec_result = container.exec_run(
-                command, 
+                command,
                 workdir=workdir,
+                environment=environment,
                 tty=False,
                 stream=False
             )

{devs_common-5.0.0 → devs_common-5.0.2}/devs_common.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devs-common
-Version: 5.0.0
+Version: 5.0.2
 Summary: Shared utilities for devs package ecosystem
 Author: Dan Lester
 License-Expression: MIT

{devs_common-5.0.0 → devs_common-5.0.2}/devs_common.egg-info/SOURCES.txt

@@ -29,6 +29,7 @@ devs_common/templates/scripts/install-bridge-drop.sh
 devs_common/templates/scripts/post-create-wrapper.sh
 devs_common/templates/scripts/post-start.sh
 devs_common/templates/scripts/python-venv-integration.sh
+devs_common/templates/scripts/run-autoexec.sh
 devs_common/templates/scripts/screenshot-webapp.sh
 devs_common/templates/scripts/setup-vscode-settings.sh
 devs_common/templates/scripts/setup-workspace.sh

{devs_common-5.0.0 → devs_common-5.0.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "devs-common"
-version = "5.0.0"
+version = "5.0.2"
 description = "Shared utilities for devs package ecosystem"
 authors = [
     {name = "Dan Lester"},