@link-assistant/hive-mind 1.77.1 → 1.78.1

package/src/npm-global-prefix.lib.mjs

@@ -0,0 +1,160 @@
+#!/usr/bin/env node
+
+/**
+ * Ensure npm's global install directory is writable before `use-m` runs.
+ *
+ * Issue #1897: `use-m` loads runtime dependencies (command-stream, getenv,
+ * yargs, …) by shelling out to `npm install -g <alias>@npm:<pkg>@latest`.
+ * npm installs into the global prefix reported by `npm root -g`. When the
+ * CLI is launched with a system-wide Node.js whose global `node_modules`
+ * directory is owned by root (e.g. `/opt/node-v24.16.0-linux-x64/lib/node_modules`),
+ * the install fails with `EACCES: permission denied` and the whole process
+ * crashes at the very first `use()` call with an unhandled error:
+ *
+ *   Error: Failed to install command-stream@latest globally.
+ *     ... npm error code EACCES
+ *     ... npm error syscall rename
+ *     ... npm error path /opt/node-.../lib/node_modules/command-stream-v-latest
+ *
+ * This commonly happens when the package was installed with one runtime
+ * (e.g. `bun add -g`, which writes to a user-owned `~/.bun/...`) but launched
+ * under a system Node whose global prefix needs root.
+ *
+ * The fix mirrors npm's own documented recommendation for EACCES errors:
+ * point the global prefix at a user-writable directory. We detect the
+ * non-writable prefix up front and redirect `npm_config_prefix` (which both
+ * `npm install -g` and `npm root -g` honour) to `~/.npm-global`, so use-m's
+ * install succeeds without sudo. When the prefix is already writable we do
+ * nothing — the common case stays a no-op with no extra `npm` spawn.
+ */
+
+import { access, mkdir } from 'node:fs/promises';
+import { constants as fsConstants } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+import { exec } from 'node:child_process';
+import { promisify } from 'node:util';
+
+const execAsync = promisify(exec);
+
+/**
+ * Derive the likely global `node_modules` path from the Node binary location
+ * without spawning npm. For a standard POSIX layout the node binary lives at
+ * `<prefix>/bin/node` and global packages at `<prefix>/lib/node_modules`.
+ *
+ * @param {string} execPath - Absolute path to the running node binary.
+ * @returns {string} Candidate global `node_modules` directory.
+ */
+export const deriveGlobalNodeModules = execPath => join(dirname(dirname(execPath)), 'lib', 'node_modules');
+
+/**
+ * Check whether a directory is writable, walking up to the nearest existing
+ * ancestor when the leaf does not yet exist (npm would create it on install).
+ *
+ * @param {string} startDir - Directory to test.
+ * @param {(path: string, mode: number) => Promise<void>} accessFn - fs.access.
+ * @returns {Promise<boolean>}
+ */
+export const isPathWritable = async (startDir, accessFn = access) => {
+  let current = startDir;
+  for (;;) {
+    try {
+      await accessFn(current, fsConstants.W_OK);
+      return true;
+    } catch (error) {
+      if (error && error.code === 'ENOENT') {
+        const parent = dirname(current);
+        if (parent === current) return false; // reached filesystem root
+        current = parent;
+        continue;
+      }
+      // EACCES / EPERM / anything else → treat as not writable.
+      return false;
+    }
+  }
+};
+
+const queryNpmRoot = async runner => {
+  try {
+    const { stdout } = await runner('npm root -g');
+    const value = String(stdout).trim();
+    return value || null;
+  } catch {
+    return null;
+  }
+};
+
+/**
+ * Detect a non-writable npm global prefix and, if found, redirect global
+ * installs to a user-writable directory by setting `npm_config_prefix`.
+ *
+ * Idempotent and dependency-injectable for tests. Returns an object describing
+ * what happened: `{ changed: boolean, reason: string, prefix?, previousRoot? }`.
+ *
+ * @param {object} [options]
+ * @param {Record<string, string>} [options.env=process.env] - Environment to mutate.
+ * @param {string} [options.execPath=process.execPath] - Running node binary path.
+ * @param {string} [options.platform=process.platform] - OS platform.
+ * @param {string} [options.home] - User home directory.
+ * @param {Function} [options.accessFn=fs.access]
+ * @param {Function} [options.mkdirFn=fs.mkdir]
+ * @param {Function} [options.runner=execAsync] - Runs a shell command, returns {stdout}.
+ * @param {(message: string) => void} [options.log] - Informational logger.
+ * @returns {Promise<{changed: boolean, reason: string, prefix?: string, previousRoot?: string, error?: Error}>}
+ */
+export const ensureWritableNpmGlobalPrefix = async (options = {}) => {
+  const { env = process.env, execPath = process.execPath, platform = process.platform, home = homedir(), accessFn = access, mkdirFn = mkdir, runner = execAsync, log = () => {}, isBunRuntime = typeof Bun !== 'undefined', isDenoRuntime = typeof Deno !== 'undefined' } = options;
+
+  // Windows' global layout differs (`<prefix>/node_modules`, AppData), and the
+  // EACCES scenario this guards against is POSIX-specific. Skip to avoid false
+  // positives that would needlessly relocate the prefix.
+  if (platform === 'win32') return { changed: false, reason: 'win32' };
+
+  // This workaround only protects use-m's Node/npm resolver. Bun and Deno use
+  // different install paths and should not have npm configuration changed.
+  if (isBunRuntime) return { changed: false, reason: 'bun-runtime' };
+  if (isDenoRuntime) return { changed: false, reason: 'deno-runtime' };
+
+  // Respect an explicitly configured prefix — the user (or a parent process)
+  // already chose where global installs go.
+  if (env.npm_config_prefix || env.NPM_CONFIG_PREFIX) return { changed: false, reason: 'preset' };
+
+  // Fast path: derive the likely global node_modules from the node binary and
+  // check writability without spawning npm. Most installs land here.
+  const derived = deriveGlobalNodeModules(execPath);
+  if (await isPathWritable(derived, accessFn)) {
+    return { changed: false, reason: 'writable' };
+  }
+
+  // The cheap heuristic says non-writable. Confirm against the authoritative
+  // path npm/use-m actually use before changing anything (handles custom prefixes).
+  const authoritative = (await queryNpmRoot(runner)) || derived;
+  if (await isPathWritable(authoritative, accessFn)) {
+    return { changed: false, reason: 'writable' };
+  }
+
+  // Global prefix is genuinely not writable by the current user (issue #1897).
+  if (!home) {
+    return { changed: false, reason: 'no-home' };
+  }
+
+  const prefix = join(home, '.npm-global');
+  try {
+    // npm installs into `<prefix>/lib/node_modules`; create it so the very
+    // first `npm install -g` does not have to.
+    await mkdirFn(join(prefix, 'lib', 'node_modules'), { recursive: true });
+  } catch (error) {
+    return { changed: false, reason: 'mkdir-failed', error };
+  }
+
+  env.npm_config_prefix = prefix;
+  // Make globally-installed binaries from the new prefix resolvable too.
+  const binDir = join(prefix, 'bin');
+  const pathParts = String(env.PATH || '').split(':');
+  if (!pathParts.includes(binDir)) {
+    env.PATH = env.PATH ? `${binDir}:${env.PATH}` : binDir;
+  }
+
+  log(`ℹ️  npm global directory (${authoritative}) is not writable; redirecting global installs to ${prefix} (issue #1897).`);
+  return { changed: true, reason: 'redirected', prefix, previousRoot: authoritative };
+};

package/src/opencode.lib.mjs

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 // OpenCode-related utility functions
 
 // Check if use is already defined (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 
 const { $ } = await use('command-stream');

package/src/playwright-mcp.lib.mjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 // Playwright MCP session-level disable/restore utilities.
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const { $ } = await use('command-stream');
 const fs = (await use('fs')).promises;

package/src/protect-branch.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 /**
  * Branch Protection Script
  *
@@ -15,7 +16,7 @@
  */
 
 // Use use-m to dynamically import modules for cross-runtime compatibility
-const { use } = eval(await (await fetch('https://unpkg.com/use-m/use.js')).text());
+const use = await ensureUseM();
 
 // Use command-stream for consistent $ behavior across runtimes
 const { $: __rawDollar$ } = await use('command-stream');

package/src/queue-config.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Queue Configuration Module
@@ -26,7 +27,7 @@
 // Use use-m to dynamically import modules
 if (typeof globalThis.use === 'undefined') {
   try {
-    globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+    await ensureUseM();
   } catch (error) {
     console.error('❌ Fatal error: Failed to load dependencies for queue configuration');
     console.error(`   ${error.message}`);

package/src/qwen.lib.mjs

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 // Qwen Code CLI-related utility functions
 
 // Check if use is already defined (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 
 const { $ } = await use('command-stream');

package/src/review.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Early exit paths - handle these before loading all modules to speed up testing
 const earlyArgs = process.argv.slice(2);
@@ -32,7 +33,7 @@ if (earlyArgs.includes('--help') || earlyArgs.includes('-h')) {
 }
 
 // Use use-m to dynamically import modules for cross-runtime compatibility
-const { use } = eval(await (await fetch('https://unpkg.com/use-m/use.js')).text());
+const use = await ensureUseM();
 
 // Use command-stream for consistent $ behavior across runtimes
 const { $: __rawDollar$ } = await use('command-stream');

package/src/reviewers-hive.mjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Use use-m to dynamically import modules for cross-runtime compatibility
-const { use } = eval(await (await fetch('https://unpkg.com/use-m/use.js')).text());
+const use = await ensureUseM();
 
 // Use command-stream for consistent $ behavior across runtimes
 const { $: __rawDollar$ } = await use('command-stream');

package/src/solve.auto-continue.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Session continuation module for solve command
 // Handles session resumption, PR detection, and limit reset waiting
@@ -8,7 +9,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.auto-ensure.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Finalize module for solve.mjs
@@ -13,7 +14,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.auto-merge-helpers.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Helper functions for the auto-merge module.
@@ -16,7 +17,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.auto-merge.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Auto-merge and auto-restart-until-mergeable module for solve.mjs
@@ -12,7 +13,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.bootstrap.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Handle lightweight early-exit paths before solve loads its full dependency graph.
@@ -20,7 +21,7 @@ export async function handleSolveEarlyExit(earlyArgs) {
 
   if (earlyArgs.includes('--help') || earlyArgs.includes('-h')) {
     // Load minimal modules needed for help output.
-    const { use } = eval(await (await fetch('https://unpkg.com/use-m/use.js')).text());
+    const use = await ensureUseM();
     globalThis.use = use;
     const { initializeConfig, createYargsConfig } = await import('./solve.config.lib.mjs');
     const { yargs, hideBin } = await initializeConfig(use);

package/src/solve.escalate.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Escalate-mode module for solve.mjs
@@ -326,7 +327,7 @@ export const runEscalation = async ({ issueUrl, owner, repo, issueNumber, prNumb
   }
 
   if (typeof globalThis.use === 'undefined') {
-    globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+    await ensureUseM();
   }
   const use = globalThis.use;
   const { $: __rawDollar$ } = await use('command-stream');

package/src/solve.execution.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Main execution logic module for solve command
 // Extracted from solve.mjs to keep files under 1500 lines
@@ -7,7 +8,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.fork-detection.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Fork-detection helpers for solve.mjs
@@ -14,7 +15,7 @@
  */
 
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 const { $ } = await use('command-stream');

package/src/solve.fork-sync.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Fork upstream-sync module for the solve command.
 // Extracted from solve.repository.lib.mjs to keep files under 1500 lines (#1893).
@@ -7,7 +8,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.keep-working.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Keep-working-until-done module for solve.mjs
@@ -25,7 +26,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.mjs

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 // Import Sentry instrumentation first (must be before other imports)
 import './instrument.mjs';
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 const earlyArgs = process.argv.slice(2);
 const { handleSolveEarlyExit } = await import('./solve.bootstrap.lib.mjs');
 await handleSolveEarlyExit(earlyArgs);
 
-const { use } = eval(await (await fetch('https://unpkg.com/use-m/use.js')).text());
-globalThis.use = use;
+const use = (globalThis.use = await ensureUseM());
 const { $: __rawDollar$ } = await use('command-stream');
 const { configureGitHubRateLimitLogging, wrapDollarWithGhRetry } = await import('./github-rate-limit.lib.mjs');
 const $ = wrapDollarWithGhRetry(__rawDollar$);

package/src/solve.repository.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Repository management module for solve command
 // Extracted from solve.mjs to keep files under 1500 lines
@@ -7,7 +8,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.restart-shared.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Shared utilities for watch mode and auto-restart-until-mergeable mode
@@ -15,7 +16,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.results.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Results processing module for solve command
 // Extracted from solve.mjs to keep files under 1500 lines
@@ -7,7 +8,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.validation.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Validation module for solve command
 // Extracted from solve.mjs to keep files under 1500 lines
@@ -7,7 +8,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.watch.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Watch mode module for solve.mjs
@@ -10,7 +11,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/telegram-bot.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 // Early exit for --version (issue #1318: avoid dotenvx MISSING_ENV_FILE warnings)
 if (process.argv.includes('--version')) {
   const v = await import('./version.lib.mjs').then(m => m.getVersion()).catch(() => 'unknown');
@@ -7,7 +8,7 @@ if (process.argv.includes('--version')) {
 }
 
 if (typeof use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 
 const { lino } = await import('./lino.lib.mjs');