@cryptiklemur/lattice 1.36.3 → 1.36.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cryptiklemur/lattice",
-  "version": "1.36.3",
+  "version": "1.36.4",
   "description": "Multi-machine agentic dashboard for Claude Code. Monitor sessions, manage MCP servers and skills, orchestrate across mesh-networked nodes.",
   "license": "MIT",
   "author": "Aaron Scherer <me@aaronscherer.me>",

package/server/src/handlers/update.ts

@@ -1,4 +1,7 @@
-import { chmodSync, renameSync, writeFileSync } from "node:fs";
+import { chmodSync, renameSync, writeFileSync, accessSync, constants as fsConstants } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { execSync } from "node:child_process";
 import type { ClientMessage } from "@lattice/shared";
 import { registerHandler } from "../ws/router";
 import { sendTo, broadcast } from "../ws/broadcast";
@@ -43,11 +46,28 @@ async function downloadBinaryUpdate(): Promise<{ success: boolean; message: stri
 
     var binary = new Uint8Array(await downloadRes.arrayBuffer());
     var execPath = process.execPath;
-    var tmpPath = execPath + ".update";
+    var tmpPath = join(tmpdir(), "lattice-update-" + Date.now());
 
     writeFileSync(tmpPath, binary);
     chmodSync(tmpPath, 0o755);
-    renameSync(tmpPath, execPath);
+
+    var needsSudo = false;
+    try {
+      accessSync(execPath, fsConstants.W_OK);
+    } catch {
+      needsSudo = true;
+    }
+
+    if (needsSudo) {
+      try {
+        execSync("sudo mv " + JSON.stringify(tmpPath) + " " + JSON.stringify(execPath), { stdio: "pipe", timeout: 10000 });
+        execSync("sudo chmod +x " + JSON.stringify(execPath), { stdio: "pipe", timeout: 5000 });
+      } catch {
+        return { success: false, message: "Update downloaded but needs sudo to install. Run: sudo mv " + tmpPath + " " + execPath };
+      }
+    } else {
+      renameSync(tmpPath, execPath);
+    }
 
     return { success: true, message: "Updated successfully. Restart the server to apply." };
   } catch (err) {

package/server/src/index.ts

@@ -243,10 +243,27 @@ async function runUpdate(): Promise<void> {
       console.log("[lattice] Downloading " + assetName + "...");
       var downloadRes = await fetch(asset.browser_download_url);
       var binary = new Uint8Array(await downloadRes.arrayBuffer());
-      var tmpPath = process.execPath + ".update";
+      var { tmpdir } = await import("node:os");
+      var tmpPath = join(tmpdir(), "lattice-update-" + Date.now());
       writeFileSync(tmpPath, binary);
       chmodSync(tmpPath, 0o755);
-      renameSync(tmpPath, process.execPath);
+
+      var needsSudo = false;
+      try {
+        var { accessSync, constants: fsConstants } = await import("node:fs");
+        accessSync(process.execPath, fsConstants.W_OK);
+      } catch {
+        needsSudo = true;
+      }
+
+      if (needsSudo) {
+        console.log("[lattice] Needs elevated permissions to replace binary...");
+        var { execSync } = await import("node:child_process");
+        execSync("sudo mv " + JSON.stringify(tmpPath) + " " + JSON.stringify(process.execPath), { stdio: "inherit" });
+        execSync("sudo chmod +x " + JSON.stringify(process.execPath), { stdio: "inherit" });
+      } else {
+        renameSync(tmpPath, process.execPath);
+      }
       code = 0;
     } catch (err) {
       console.error("[lattice] Download failed:", err instanceof Error ? err.message : String(err));