@ghl-ai/aw 0.1.44 → 0.1.45

package/c4/templates/scripts/aw-c4-bootstrap.sh

@@ -17,7 +17,8 @@
 #                @ghl-ai/aw@0.1.x for reproducible CI runs.
 set -Eeuo pipefail
 
-: "${GITHUB_PAT:?ERROR: Set GITHUB_PAT in your harness secrets UI before running aw c4}"
+# GitHub auth is resolved inside `aw c4` so GITHUB_PAT, GITHUB_TOKEN, and
+# no-token diagnostics stay centralized in the CLI preflight.
 
 # Ensure npm is on PATH. Cursor Cloud's install shell is non-interactive — nvm
 # is not auto-sourced, and Node may not be pre-installed at all. Walk common
@@ -30,6 +31,7 @@ set -Eeuo pipefail
 #     /usr/local/ or /opt/.
 #   - DEBIAN_FRONTEND=noninteractive prevents debconf prompts from hanging
 #     the apt configure step on a non-TTY shell.
+#   - Run apt-get directly when already root; use sudo only for non-root shells.
 #   - Drop the >/dev/null on apt + NodeSource setup so progress is visible.
 #     The previous "silent + interactive" combination produced the canonical
 #     "looks frozen" symptom in pilot use after Cursor Cloud stopped shipping
@@ -57,15 +59,28 @@ ensure_npm() {
     fi
   done
 
-  if command -v sudo >/dev/null 2>&1 && command -v apt-get >/dev/null 2>&1; then
+  if command -v apt-get >/dev/null 2>&1; then
     echo "[aw-c4-bootstrap] npm not found; installing Node 20 via NodeSource (1-2 min over corporate proxy)"
     export DEBIAN_FRONTEND=noninteractive
-    if ! timeout 180 bash -c 'curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -'; then
+    node_setup_command='curl -fsSL https://deb.nodesource.com/setup_20.x | bash -'
+    apt_install_command=(apt-get install -y nodejs)
+    current_uid="$(id -u 2>/dev/null || printf '1')"
+    if [ "$current_uid" != "0" ]; then
+      if command -v sudo >/dev/null 2>&1; then
+        node_setup_command='curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -'
+        apt_install_command=(sudo -E apt-get install -y nodejs)
+      else
+        echo "[aw-c4-bootstrap] FATAL: apt-get is available, but sudo is not, and the current user is not root" >&2
+        echo "[aw-c4-bootstrap]        Run as root, install sudo, or preinstall Node 20+ in the harness snapshot." >&2
+        exit 1
+      fi
+    fi
+    if ! timeout 180 bash -c "$node_setup_command"; then
       echo "[aw-c4-bootstrap] FATAL: NodeSource setup script timed out or failed after 180s" >&2
       echo "[aw-c4-bootstrap]        Preinstall Node 20+ in the agent snapshot, or check proxy reachability." >&2
       exit 1
     fi
-    if ! timeout 180 sudo -E apt-get install -y nodejs; then
+    if ! timeout 180 "${apt_install_command[@]}"; then
       echo "[aw-c4-bootstrap] FATAL: apt-get install nodejs timed out or failed after 180s" >&2
       exit 1
     fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ghl-ai/aw",
-  "version": "0.1.44",
+  "version": "0.1.45",
   "description": "Agentic Workspace CLI — pull, push & manage agents, skills and commands from the registry",
   "type": "module",
   "bin": {

package/update.mjs

@@ -223,7 +223,14 @@ export async function promptUpdate(result) {
   const cmd = getInstallCmd(result.latest);
   fmt.logWarn(`Update available: ${chalk.dim(result.current)} → ${chalk.green(result.latest)}`);
 
-  const { default: clack } = await import('@clack/prompts');
+  let clackMod;
+  try {
+    clackMod = (await import('@clack/prompts')).default ?? await import('@clack/prompts');
+  } catch {
+    fmt.logStep(chalk.dim('Skipped update (clack unavailable)'));
+    return false;
+  }
+  const clack = clackMod;
   const shouldUpdate = await clack.confirm({
     message: `Update ${PKG_NAME} to ${result.latest}?`,
     initialValue: true,