@geekbeer/minion 2.56.1 → 2.58.1

package/core/routes/sudoers.js

@@ -0,0 +1,70 @@
+/**
+ * Sudoers endpoint
+ *
+ * Endpoints:
+ * - GET /api/sudoers - List sudo permissions for the current user
+ */
+
+const { exec } = require('child_process')
+const { promisify } = require('util')
+const execAsync = promisify(exec)
+
+const { verifyToken } = require('../lib/auth')
+
+/**
+ * Parse `sudo -l` output into structured permission entries
+ * @param {string} output - Raw output from `sudo -l`
+ * @returns {string[]} List of allowed commands
+ */
+function parseSudoList(output) {
+  const lines = output.split('\n')
+  const commands = []
+
+  for (const line of lines) {
+    const trimmed = line.trim()
+    // Lines starting with (root) contain permission entries
+    if (trimmed.startsWith('(root)') || trimmed.startsWith('(ALL)')) {
+      // Extract the command part after NOPASSWD: or the run-as spec
+      const match = trimmed.match(/(?:NOPASSWD:\s*)(.+)$/)
+      if (match) {
+        commands.push(match[1].trim())
+      }
+    }
+  }
+
+  return commands
+}
+
+/**
+ * Register sudoers routes as Fastify plugin
+ * @param {import('fastify').FastifyInstance} fastify
+ */
+async function sudoersRoutes(fastify) {
+  fastify.get('/api/sudoers', async (request, reply) => {
+    if (!verifyToken(request)) {
+      reply.code(401)
+      return { success: false, error: 'Unauthorized' }
+    }
+
+    try {
+      const { stdout } = await execAsync('sudo -n -l 2>/dev/null', { timeout: 5000 })
+      const commands = parseSudoList(stdout)
+
+      return {
+        success: true,
+        commands,
+        raw: stdout.trim(),
+      }
+    } catch (error) {
+      // sudo -l may fail if sudo is not configured at all
+      return {
+        success: true,
+        commands: [],
+        raw: '',
+        note: 'sudo is not configured or no permissions granted',
+      }
+    }
+  })
+}
+
+module.exports = { sudoersRoutes }

package/linux/minion-cli.sh

@@ -323,7 +323,12 @@ do_setup() {
       echo "${TARGET_USER} ALL=(root) NOPASSWD: ${NPM_BIN} install -g @geekbeer/minion@latest"
       echo "${TARGET_USER} ALL=(root) NOPASSWD: ${NPM_BIN} install -g @geekbeer/minion@latest --registry *"
       echo "${TARGET_USER} ALL=(root) NOPASSWD: /usr/bin/apt-get install *"
+      echo "${TARGET_USER} ALL=(root) NOPASSWD: /usr/bin/apt-get update"
       echo "${TARGET_USER} ALL=(root) NOPASSWD: /usr/bin/apt-get remove *"
+      # Allow sh -c wrappers (used by playwright install-deps, etc.)
+      echo "${TARGET_USER} ALL=(root) NOPASSWD: /bin/sh -c *apt-get*"
+      echo "${TARGET_USER} ALL=(root) NOPASSWD: /usr/bin/sh -c *apt-get*"
+      echo "${TARGET_USER} ALL=(root) NOPASSWD: /bin/sh -c *dpkg*"
 
       case "$PROC_MGR" in
         systemd)

package/linux/server.js

@@ -20,6 +20,7 @@
  * Secrets:              GET /api/secrets, PUT/DELETE /api/secrets/:key
  * Config:               GET /api/config/backup, GET/PUT /api/config/env
  * Executions:           GET /api/executions, GET /api/executions/:id, etc.
+ * Sudoers:              GET /api/sudoers
  * ─────────────────────────────────────────────────────────────────────────────
  */
 
@@ -65,6 +66,7 @@ const { authRoutes } = require('../core/routes/auth')
 const { variableRoutes } = require('../core/routes/variables')
 const { memoryRoutes } = require('../core/routes/memory')
 const { dailyLogRoutes } = require('../core/routes/daily-logs')
+const { sudoersRoutes } = require('../core/routes/sudoers')
 
 // Linux-specific routes
 const { commandRoutes, getProcessManager, getAllowedCommands } = require('./routes/commands')
@@ -265,6 +267,7 @@ async function registerAllRoutes(app) {
   await app.register(variableRoutes)
   await app.register(memoryRoutes)
   await app.register(dailyLogRoutes)
+  await app.register(sudoersRoutes)
 
   // Linux-specific routes
   await app.register(commandRoutes)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekbeer/minion",
-  "version": "2.56.1",
+  "version": "2.58.1",
   "description": "AI Agent runtime for Minion - manages status and skill deployment on VPS",
   "main": "linux/server.js",
   "bin": {