@geekbeer/minion 2.4.1 → 2.5.0

package/lib/process-manager.js

@@ -51,7 +51,7 @@ function buildAllowedCommands(procMgr) {
     }
     commands['update-agent'] = {
       description: 'Update @geekbeer/minion to latest version and restart',
-      command: `npm install -g @geekbeer/minion@latest && ${SUDO}systemctl restart minion-agent`,
+      command: `${SUDO}npm install -g @geekbeer/minion@latest && ${SUDO}systemctl restart minion-agent`,
       deferred: true,
     }
     commands['restart-display'] = {
@@ -70,7 +70,7 @@ function buildAllowedCommands(procMgr) {
     }
     commands['update-agent'] = {
       description: 'Update @geekbeer/minion to latest version and restart',
-      command: `npm install -g @geekbeer/minion@latest && ${SUDO}supervisorctl restart minion-agent`,
+      command: `${SUDO}npm install -g @geekbeer/minion@latest && ${SUDO}supervisorctl restart minion-agent`,
       deferred: true,
     }
     commands['restart-display'] = {
@@ -85,7 +85,7 @@ function buildAllowedCommands(procMgr) {
     // Standalone mode: limited commands
     commands['update-agent'] = {
       description: 'Update @geekbeer/minion to latest version',
-      command: 'npm install -g @geekbeer/minion@latest',
+      command: `${SUDO}npm install -g @geekbeer/minion@latest`,
     }
     commands['status-services'] = {
       description: 'Show agent process info',

package/minion-cli.sh

@@ -200,9 +200,9 @@ do_setup() {
   fi
   echo ""
 
-  local TOTAL_STEPS=8
+  local TOTAL_STEPS=9
   if [ "$SETUP_TUNNEL" = true ]; then
-    TOTAL_STEPS=9
+    TOTAL_STEPS=10
   fi
 
   # Step 1: Install Claude Code
@@ -275,8 +275,35 @@ do_setup() {
   echo -e "$ENV_CONTENT" | $SUDO tee /opt/minion-agent/.env > /dev/null
   echo "  -> /opt/minion-agent/.env generated"
 
-  # Step 5: Create service configuration
-  echo "[5/${TOTAL_STEPS}] Creating service configuration ($PROC_MGR)..."
+  # Step 5: Configure sudoers for agent user
+  echo "[5/${TOTAL_STEPS}] Configuring sudoers for agent user..."
+  if [ "$TARGET_USER" != "root" ]; then
+    local NPM_BIN
+    NPM_BIN="$(which npm)"
+    local SUDOERS_FILE="/etc/sudoers.d/minion-agent"
+    local SUDOERS_CONTENT="${TARGET_USER} ALL=(root) NOPASSWD: ${NPM_BIN} install -g @geekbeer/minion@latest"
+
+    case "$PROC_MGR" in
+      systemd)
+        SUDOERS_CONTENT+="\n${TARGET_USER} ALL=(root) NOPASSWD: /usr/bin/systemctl restart minion-agent"
+        SUDOERS_CONTENT+="\n${TARGET_USER} ALL=(root) NOPASSWD: /usr/bin/systemctl restart xvfb fluxbox x11vnc novnc"
+        ;;
+      supervisord)
+        SUDOERS_CONTENT+="\n${TARGET_USER} ALL=(root) NOPASSWD: /usr/bin/supervisorctl restart minion-agent"
+        SUDOERS_CONTENT+="\n${TARGET_USER} ALL=(root) NOPASSWD: /usr/bin/supervisorctl restart xvfb fluxbox x11vnc novnc"
+        SUDOERS_CONTENT+="\n${TARGET_USER} ALL=(root) NOPASSWD: /usr/bin/supervisorctl status"
+        ;;
+    esac
+
+    echo -e "$SUDOERS_CONTENT" | $SUDO tee "$SUDOERS_FILE" > /dev/null
+    $SUDO chmod 440 "$SUDOERS_FILE"
+    echo "  -> $SUDOERS_FILE created"
+  else
+    echo "  -> Skipped (running as root)"
+  fi
+
+  # Step 6: Create service configuration
+  echo "[6/${TOTAL_STEPS}] Creating service configuration ($PROC_MGR)..."
   local NPM_ROOT
   NPM_ROOT="$(npm root -g)"
   local SERVER_PATH="${NPM_ROOT}/@geekbeer/minion/server.js"
@@ -367,8 +394,8 @@ SUPEOF
       ;;
   esac
 
-  # Step 6: Enable and start service
-  echo "[6/${TOTAL_STEPS}] Starting minion-agent service..."
+  # Step 7: Enable and start service
+  echo "[7/${TOTAL_STEPS}] Starting minion-agent service..."
   case "$PROC_MGR" in
     systemd)
       $SUDO systemctl daemon-reload
@@ -388,8 +415,8 @@ SUPEOF
   esac
   echo "  -> minion-agent service started ($PROC_MGR)"
 
-  # Step 7: Health check with retry
-  echo "[7/${TOTAL_STEPS}] Running health check..."
+  # Step 8: Health check with retry
+  echo "[8/${TOTAL_STEPS}] Running health check..."
   local RETRIES=5
   local DELAY=2
   local SUCCESS=false
@@ -414,8 +441,8 @@ SUPEOF
     fi
   fi
 
-  # Step 8: Deploy bundled skills
-  echo "[8/${TOTAL_STEPS}] Deploying bundled skills..."
+  # Step 9: Deploy bundled skills
+  echo "[9/${TOTAL_STEPS}] Deploying bundled skills..."
   local BUNDLED_SKILLS_DIR="${NPM_ROOT}/@geekbeer/minion/skills"
   local CLAUDE_SKILLS_DIR="${TARGET_HOME}/.claude/skills"
 
@@ -448,10 +475,10 @@ SUPEOF
     echo "  -> Deployed Claude rules: minion.md"
   fi
 
-  # Step 9 (optional): Cloudflare Tunnel setup
+  # Step 10 (optional): Cloudflare Tunnel setup
   if [ "$SETUP_TUNNEL" = true ]; then
     echo ""
-    echo "[9/${TOTAL_STEPS}] Setting up Cloudflare Tunnel..."
+    echo "[10/${TOTAL_STEPS}] Setting up Cloudflare Tunnel..."
 
     if [ -z "$HQ_URL" ] || [ -z "$API_TOKEN" ]; then
       echo "  ERROR: --setup-tunnel requires --hq-url and --api-token"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekbeer/minion",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "AI Agent runtime for Minion - manages status and skill deployment on VPS",
   "main": "server.js",
   "bin": {