@higherdev/cli 0.35.0 → 0.37.0

package/dist/actions-runner.js

@@ -22,6 +22,15 @@ function unitPath(value) {
 function unitEnvironment(name, value) {
     return `"${name}=${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/%/g, "%%")}"`;
 }
+/**
+ * A systemd user service inherits the supplementary groups the user manager had
+ * when it started, so a docker group granted later never reaches the runner.
+ * Starting through `sg <group>` picks the group up per membership in /etc/group.
+ */
+export function actionsRunnerExecStart(runnerDir, viaGroup) {
+    const service = path.join(runnerDir, "bin/runsvc.sh");
+    return viaGroup ? `/usr/bin/sg ${viaGroup} -c "${unitPath(service)}"` : unitPath(service);
+}
 export function actionsRunnerSystemdUnit(input) {
     return `[Unit]
 Description=HDX GitHub Actions runner${input.repo ? ` for ${input.repo}` : ""}
@@ -32,7 +41,7 @@ Wants=network-online.target
 Type=simple
 WorkingDirectory=${unitPath(input.runnerDir)}
 Environment=${unitEnvironment("PATH", input.path)}
-ExecStart=${unitPath(path.join(input.runnerDir, "bin/runsvc.sh"))}
+ExecStart=${actionsRunnerExecStart(input.runnerDir, input.viaGroup)}
 Restart=always
 RestartSec=5
 KillMode=process
@@ -105,10 +114,13 @@ export async function installActionsRunner(options, deps = {}) {
             throw new Error(`Existing Actions runner in ${runnerDir} belongs to another host or repository.`);
         }
     }
+    // Jobs with service containers need the Docker socket; run through the docker group when the user has it.
+    const groups = (await run("id", ["-nG"]).catch(() => ({ stdout: "" }))).stdout.trim().split(/\s+/);
+    const viaGroup = groups.includes("docker") && await exists("/usr/bin/sg") ? "docker" : null;
     await mkdir(path.dirname(unitPath), { recursive: true });
-    await writeFile(unitPath, actionsRunnerSystemdUnit({ runnerDir, path: pathValue, repo: options.repo }), "utf8");
+    await writeFile(unitPath, actionsRunnerSystemdUnit({ runnerDir, path: pathValue, repo: options.repo, viaGroup }), "utf8");
     await run("systemctl", ["--user", "daemon-reload"]);
     await run("systemctl", ["--user", "enable", "--now", unitName]);
     return [`GitHub Actions runner ${options.host} registered to ${options.repo}.`,
-        `labels: self-hosted, hdx, ${options.host}`, `systemd unit: ${unitPath}`];
+        `labels: self-hosted, hdx, ${options.host}`, `systemd unit: ${unitPath}${viaGroup ? ` (via sg ${viaGroup})` : ""}`];
 }

package/dist/attachments.js

@@ -97,6 +97,20 @@ export function parseTuiAttach(text) {
     const paths = key ? words.slice(0, -1) : words;
     return paths.length === 1 ? { path: paths[0], ...(key ? { ticketKey: key } : {}) } : null;
 }
+/**
+ * Text that a Finder drop produces: one or more absolute paths, plain, quoted, or with
+ * escaped spaces. Terminal.app inserts a drop as typed text rather than a bracketed
+ * paste, so the input component and the Enter handler both check this before treating
+ * a line starting with "/" as a slash command.
+ */
+export function looksLikeDroppedPaths(text) {
+    const trimmed = text.trim();
+    if (!/^(?:\/|'\/|"\/)/.test(trimmed))
+        return false;
+    // A slash command is one word without a second "/" (e.g. /architect, /ticket HD-1).
+    const firstWord = trimmed.split(/\s+/)[0].replace(/^['"]/, "");
+    return firstWord.slice(1).includes("/") || /^['"]/.test(trimmed);
+}
 export async function detectDroppedPaths(pasted, isFile = async (path) => (await stat(path)).isFile()) {
     const text = pasted.trim();
     if (!text)

package/dist/tui/App.js

@@ -33,7 +33,7 @@ import { editFor, editableKeys, nextValue, seedFor, settingsRows } from "./setti
 import { appendLines, runLabels, toStreamLines } from "./stream.js";
 import { UI } from "./theme.js";
 import { WorkspaceLoads } from "./workspace-load.js";
-import { attachmentChip, detectDroppedPaths, uploadAttachment } from "../attachments.js";
+import { attachmentChip, detectDroppedPaths, looksLikeDroppedPaths, uploadAttachment } from "../attachments.js";
 let messageSeq = 0;
 const nextId = () => `m${messageSeq++}`;
 const tuiPrompt = (question) => promptOnStdin(question, true);
@@ -457,7 +457,7 @@ export function App({ initial, availableUpdate: initialUpdate = null, updateDeps
         })();
     }, [agentName, config, pendingAttachments, setThread, workspace.id]);
     const receiveDrop = useCallback((pasted) => {
-        if (!/^(?:\/|'\/|"\/)/.test(pasted.trim()))
+        if (!looksLikeDroppedPaths(pasted))
             return false;
         void (async () => {
             const paths = await detectDroppedPaths(pasted);
@@ -520,6 +520,12 @@ export function App({ initial, availableUpdate: initialUpdate = null, updateDeps
     }, [view, ticketKey, visibleStory?.latest_headline, visibleStory?.timeline, config]);
     const run = useCallback(async (raw) => {
         const text = raw.trim();
+        // A dropped path that reached the line as typed text is an attachment, not a command.
+        if (looksLikeDroppedPaths(text) && (await detectDroppedPaths(text)).length) {
+            setDraft("");
+            receiveDrop(text);
+            return;
+        }
         if (view === "settings") {
             const open = editingRef.current;
             if (open) {

package/dist/tui/TextInput.js

@@ -73,6 +73,11 @@ export default function TextInput({ value, onChange, onSubmit, onCancel, onUp, o
         // most of them. Ink reports that as ordinary input with key.return
         // false, so without this the Enter is filtered out with the other
         // control bytes and the line just sits at the prompt unsent.
+        // A Finder drop in Terminal.app arrives as one multi-character chunk of
+        // typed text, not a bracketed paste, so it is offered to the paste
+        // handler first.
+        if (input.length > 1 && onPasteText?.(input))
+            return;
         if (input.length > 1 && /[\r\n]/.test(input)) {
             const parts = input.split(/\r\n|\r|\n/);
             const submits = parts.length === 2 && parts[1] === "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@higherdev/cli",
-  "version": "0.35.0",
+  "version": "0.37.0",
   "type": "module",
   "repository": {
     "type": "git",