@love-moon/conductor-cli 0.9.0 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,134 @@
 # @love-moon/conductor-cli
 
+## 0.11.0
+
+### Minor Changes
+
+- c987457: Allow creating a project whose workspace path does not exist yet.
+
+  The daemon now accepts `create_if_missing` on `validate_project_path` and will
+  `mkdir -p` the workspace before snapshotting it, advertising the new
+  `project_path_create` capability. In the web Create Project dialog a missing
+  path no longer dead-ends: it offers "Create this directory and continue", so a
+  typo still fails loudly instead of silently creating the wrong folder.
+  `conductor project create` gains `--create-workspace` for the same behavior.
+
+- ccf902d: Add daemon sharing so a host can invite other conductor accounts to run tasks on their machine.
+
+  A host daemon can create share invitations from the web settings page. Each invite is scoped to one guest user and carries a `allow_cli_list` whitelist. When the guest accepts, the host daemon spawns an isolated guest daemon with a dedicated workspace and token; the guest sees only their own tasks and cannot access the host's projects or files outside the shared workspace.
+
+  Guest daemons are supervised by the host daemon: if the host restarts, guest configs are regenerated from the backend on the next reconcile; revoking a share stops the guest daemon and removes its workspace.
+
+  This changes the agent-token schema (a new `scope` column is required on the backend) and adds `conductor_guest`, `allow_cli_list`, and `daemon_name` handling to the guest config path.
+
+### Patch Changes
+
+- 30afccc: Make the claude backend usable when conductor runs as root.
+
+  Claude Code refuses `bypassPermissions` / `--dangerously-skip-permissions` under
+  root unless `IS_SANDBOX=1` or `CLAUDE_CODE_BUBBLEWRAP` is set, so every claude
+  turn died immediately on root installs (docker, CI, bare VPS). Both routes a
+  claude command takes are now root-aware, sharing one check
+  (`isClaudeRootPermissionRestricted`, which mirrors claude's own gate):
+
+  - The agent-SDK session downgrades the permission mode to `acceptEdits` (auto
+    mode) and stops passing `allowDangerouslySkipPermissions`.
+  - The daemon's tool-preset PTY path rewrites the configured `allow_cli_list`
+    command via `resolveClaudeCommandForRoot`, using the same env the spawned
+    child receives, so a per-task `IS_SANDBOX=1` opt-out is honored.
+  - `conductor config` no longer writes `--dangerously-skip-permissions` into a
+    config generated on a root machine.
+
+  The mode is also configurable now: `claude --permission-mode acceptEdits` in
+  `allow_cli_list` is lifted out of the command string. An unrecognized mode still
+  falls back to the default instead of failing, but logs a warning at session boot.
+
+  ai-sdk gains three exports: `isClaudeRootPermissionRestricted`,
+  `resolveClaudeCommandForRoot`, `resolveClaudePermissionPolicy`.
+
+- a3c41dd: Document every supported key in the config file `conductor config` generates.
+
+  The generated `config.yaml` only ever contained six keys, so nothing told a new
+  user that the other fifteen existed. They are now all present as commented-out
+  entries carrying their default value and env-var override, grouped into
+  Connection / Coding CLIs / Environment / Daemon behaviour / Optional features:
+
+  - `websocket_url`, previously written only when device authorization returned one
+  - `pre_prompt`, `custom_commands`, `cdp_user_data_dir`
+  - `remote_exec`, `fire_tmux_mode`, `auto_update`, `auto_update_respawn`,
+    `update_window`
+  - `ai_manager.codex.auth_json`, `serve_ai.{host,port,backend,api_key}`,
+    `channels.feishu.*`
+  - `envs.no_proxy`, `envs.DEEPSEEK_API_KEY`, `envs.DEEPSEEK_BASE_URL` alongside
+    the proxy keys and `AISDK_PROVIDER_PATH` that were already shown
+
+  Three notes correct documentation that would otherwise mislead. The commented
+  `websocket_url` example is derived from this install's own `backend_url` (via
+  the same rule as `ConductorConfig.resolvedWebsocketUrl`) instead of naming the
+  official host, so a self-hosted user who uncomments it is not pointed at
+  someone else's server. `daemon_name` is flagged as the one key whose precedence
+  is inverted — the config value wins over `CONDUCTOR_DAEMON_NAME`. `log_level`
+  is marked as validated on load but not yet consumed by any component.
+
+  Behaviour is unchanged: the same six keys are still written uncommented, and
+  the daemon still derives its own WebSocket URL from `backend_url` regardless of
+  the `websocket_url` key.
+
+- ccf902d: Refuse `--force` daemon restart when it would take over an unrelated daemon instance.
+
+  Previously `conductor daemon --force` blindly replaced any existing lock, which could kill a daemon belonging to a different conductor home, backend URL, or agent token. The lock now stores an identity fingerprint (home directory, backend URL, agent token prefix, and daemon name) and `--force` only overwrites when the fingerprint matches. A mismatch reports the running daemon's identity and exits with code 7.
+
+  This makes `--force` safe for "restart my own stuck daemon" while preventing accidental cross-instance takeovers.
+
+- 884945c: Keep every task in a multi-agent group in one working directory. Creating a
+  task with several agents and `worktree` enabled put the worker in
+  `.conductor/worktrees/<branch>/` but pinned each reviewer to the project root,
+  so reviewers read the base branch instead of the worker's changes. Reviewers
+  now inherit the worker's worktree.
+
+  Reviewers join as reuse-only members: they carry the full worktree identity —
+  so archiving one member no longer deletes a directory its siblings are still
+  running in — but never run `git worktree add` themselves. The daemon
+  additionally serializes worktree preparation per on-disk root, so concurrent
+  group members can no longer race on creating the same branch, and treats a
+  worktree as ready only once preparation has fully completed rather than as soon
+  as `.git` appears.
+
+  Two new optional daemon environment variables:
+  `CONDUCTOR_WORKTREE_REUSE_WAIT_TIMEOUT_MS` (default `180000`) and
+  `CONDUCTOR_WORKTREE_REUSE_POLL_INTERVAL_MS` (default `250`).
+
+- Updated dependencies [30afccc]
+  - @love-moon/ai-sdk@0.11.0
+  - @love-moon/conductor-sdk@0.11.0
+
+## 0.10.0
+
+### Minor Changes
+
+- 43c4f87: Runtime health preflight and agent schedule access control. The daemon now
+  advertises positive backend runtime health (`x-conductor-runtime-health`) so the
+  backend can reject task creation with `503 runtime_unavailable` before any
+  timeline activity, and adds `disable_built_in_cli_list` to opt out of built-in
+  SDK backends. The SDK attributes agent-originated scheduled-message calls with
+  `X-Conductor-Actor: agent` so per-task `agent_schedule_access`
+  (full/read_only/blocked) can govern `conductor task schedule` from agents while
+  human/UI calls stay unrestricted.
+
+### Patch Changes
+
+- 43c4f87: Fix `conductor fire` and `conductor diagnose` with an explicit `--config-file`
+  resolving `agent_token`/`backend_url` from daemon-injected `CONDUCTOR_*` env
+  instead of the file. Fire could dial the file's websocket with the inherited
+  token and loop on `4002 invalid-token`; diagnose queried the wrong backend and
+  404'd. An explicit config file now wins over inherited env, matching the
+  daemon's behavior.
+- 43c4f87: Fix `conductor update` installing into the wrong npm prefix.
+- Updated dependencies [43c4f87]
+- Updated dependencies [43c4f87]
+  - @love-moon/ai-sdk@0.10.0
+  - @love-moon/conductor-sdk@0.10.0
+
 ## 0.9.0
 
 ### Minor Changes

package/bin/conductor-config.js

@@ -10,6 +10,7 @@ import { createRequire } from "node:module";
 import yargs from "yargs/yargs";
 import { hideBin } from "yargs/helpers";
 import { RUNTIME_SUPPORTED_BACKENDS } from "../src/runtime-backends.js";
+import { isClaudeRootPermissionRestricted } from "@love-moon/ai-sdk";
 import { resolveConductorConfigPath } from "../src/conductor-paths.js";
 
 const CONFIG_FILE = resolveConductorConfigPath();
@@ -21,7 +22,12 @@ const packageJson = JSON.parse(
 const DEFAULT_CLIs = {
   claude: {
     command: "claude",
-    execArgs: "--dangerously-skip-permissions",
+    // claude exits 1 with `--dangerously-skip-permissions` under root, so never
+    // write a flag the user's own machine cannot run. Same root check the
+    // daemon and the ai-sdk session use.
+    execArgs: isClaudeRootPermissionRestricted()
+      ? "--permission-mode acceptEdits"
+      : "--dangerously-skip-permissions",
     description: "Anthropic Claude CLI"
   },
   codex: {
@@ -293,20 +299,44 @@ async function main() {
   fs.mkdirSync(CONFIG_DIR, { recursive: true });
 
   const lines = [
+    "# Conductor CLI configuration.",
+    "# Lookup order: --config-file > $CONDUCTOR_CONFIG > $CONDUCTOR_HOME/config.yaml",
+    "# > ~/.conductor/config.yaml",
+    "# Commented-out keys are optional; the value shown is the default.",
+    "",
+    "# ---------------------------------------------------------------------------",
+    "# Connection",
+    "# ---------------------------------------------------------------------------",
+    "",
+    "# Agent token issued by `conductor config`. Env: CONDUCTOR_AGENT_TOKEN",
     `agent_token: ${yamlQuote(token)}`,
+    "# Conductor server this daemon talks to. Env: CONDUCTOR_BACKEND_URL",
     `backend_url: ${yamlQuote(resolvedBackendUrl)}`,
+    "# Realtime endpoint used by fire and the other CLI commands; derived from",
+    "# backend_url when unset. The daemon always derives its own WebSocket URL",
+    "# from backend_url and ignores this key. Env: CONDUCTOR_WS_URL",
+    resolvedWebsocketUrl
+      ? `websocket_url: ${yamlQuote(resolvedWebsocketUrl)}`
+      : `# websocket_url: ${deriveWebsocketUrlHint(resolvedBackendUrl)}`,
+    "# Name this machine shows up as in the app. Precedence is inverted here:",
+    "# --daemon-name > this key > CONDUCTOR_DAEMON_NAME > hostname, so this value",
+    "# wins over the env var.",
     `daemon_name: ${yamlQuote(defaultDaemonName)}`,
+    "# debug | info | warning | error | critical (default: info). Validated on",
+    "# load but not consumed by any component yet. Env: CONDUCTOR_LOG_LEVEL",
     "log_level: debug",
+    "# Root directory where the daemon creates task workspaces. Env: CONDUCTOR_WS",
     "workspace: '~/ws/fires'",
     "",
-    "# Allowed coding CLIs",
+    "# ---------------------------------------------------------------------------",
+    "# Coding CLIs",
+    "# ---------------------------------------------------------------------------",
+    "",
+    "# Allowed coding CLIs. Key = backend name shown in the app, value = command",
+    "# line used to launch it. Only backends listed here can run tasks.",
     "allow_cli_list:"
   ];
 
-  if (resolvedWebsocketUrl) {
-    lines.splice(2, 0, `websocket_url: ${yamlQuote(resolvedWebsocketUrl)}`);
-  }
-
   if (detectedCLIs.length > 0) {
     detectedCLIs.forEach((cli) => {
       const info = DEFAULT_CLIs[cli];
@@ -321,12 +351,93 @@ async function main() {
 
   lines.push(
     "",
-    "# Uncomment to use custom envs, such as proxy.",
+    "# Uncomment to disable built-in SDK backends that are otherwise advertised",
+    "# automatically (copilot, dsh). Listing a name here hides it from the",
+    "# daemon's supported backends without removing the shipped dependency.",
+    "# disable_built_in_cli_list:",
+    "#   - dsh",
+    "#   - copilot",
+    "",
+    "# Text automatically sent as the first message of every new task, per",
+    "# backend. ${VAR} / $VAR are expanded from the environment.",
+    "# pre_prompt:",
+    "#   claude: Always answer in English and run the tests before finishing.",
+    "#   codex: Read AGENTS.md first.",
+    "",
+    "# ---------------------------------------------------------------------------",
+    "# Environment for the coding CLIs",
+    "# ---------------------------------------------------------------------------",
+    "",
+    "# Extra environment variables exported into every backend process. Common",
+    "# uses: proxies, API keys, and loading a private AI SDK provider.",
     "# envs:",
     "#   http_proxy: http://127.0.0.1:7890",
     "#   https_proxy: http://127.0.0.1:7890",
     "#   all_proxy: socks5://127.0.0.1:7890",
-    "#   AISDK_PROVIDER_PATH: path-to-private-aisdk-provider.js"
+    "#   no_proxy: localhost,127.0.0.1",
+    "#   DEEPSEEK_API_KEY: sk-xxx            # required by the built-in dsh backend",
+    "#   DEEPSEEK_BASE_URL: https://api.deepseek.com",
+    "#   AISDK_PROVIDER_PATH: path-to-private-aisdk-provider.js",
+    "",
+    "# ---------------------------------------------------------------------------",
+    "# Daemon behaviour",
+    "# ---------------------------------------------------------------------------",
+    "",
+    "# Accept `conductor remote-exec` requests for this host.",
+    "# Env: CONDUCTOR_REMOTE_EXEC",
+    "# remote_exec: true",
+    "",
+    "# Launch each Fire process inside a detached tmux session so it survives a",
+    "# daemon restart. Requires tmux on PATH. Env: CONDUCTOR_FIRE_TMUX_MODE",
+    "# fire_tmux_mode: false",
+    "",
+    "# Let the daemon upgrade the CLI in place (npm/pnpm installs only).",
+    "# Env: CONDUCTOR_AUTO_UPDATE",
+    "# auto_update: true",
+    "",
+    "# After an auto-update, restart the daemon into the new version.",
+    "# Env: CONDUCTOR_AUTO_UPDATE_RESPAWN",
+    "# auto_update_respawn: false",
+    "",
+    "# Local-time window in which auto-update may run. Env: CONDUCTOR_UPDATE_WINDOW",
+    "# update_window: '02:00-04:00'",
+    "",
+    "# Scripts exposed to the app as one-click commands. Key = command name,",
+    "# value = executable script path (relative paths resolve against this file).",
+    "# custom_commands:",
+    "#   restart-service: ~/.conductor/scripts/restart-service.sh",
+    "",
+    "# Chrome profile directory used by `conductor chrome` and the web-* backends.",
+    "# Env: CDP_USER_DATA_DIR",
+    "# cdp_user_data_dir: ~/.conductor/chrome-profile",
+    "",
+    "# ---------------------------------------------------------------------------",
+    "# Optional features",
+    "# ---------------------------------------------------------------------------",
+    "",
+    "# Extra Codex auth.json files to switch between from the app's account",
+    "# picker. The file name (without .json) becomes the account name.",
+    "# ai_manager:",
+    "#   codex:",
+    "#     auth_json:",
+    "#       - ~/.codex/auth-work.json",
+    "#       - ~/.codex/auth-personal.json",
+    "",
+    "# Defaults for `conductor serve-ai`, the OpenAI-compatible local server.",
+    "# serve_ai:",
+    "#   host: 127.0.0.1",
+    "#   port: 8787",
+    "#   backend: codex",
+    "#   api_key: local-dev-key",
+    "",
+    "# Feishu (Lark) chat channel, uploaded with `conductor channel connect feishu`.",
+    "# channels:",
+    "#   feishu:",
+    "#     app_id: cli_xxx",
+    "#     app_secret: xxx",
+    "#     verification_token: xxx",
+    "#     encrypt_key: xxx",
+    ""
   );
 
   fs.writeFileSync(CONFIG_FILE, lines.join("\n"), "utf-8");
@@ -681,6 +792,20 @@ function yamlQuote(value) {
   return JSON.stringify(value);
 }
 
+// Mirror ConductorConfig.resolvedWebsocketUrl so the commented-out
+// `websocket_url` example shows THIS install's derived default rather than a
+// hard-coded official host — a self-hosted user who uncomments it would
+// otherwise point their CLI at someone else's server.
+function deriveWebsocketUrlHint(backendUrl) {
+  try {
+    const url = new URL(backendUrl);
+    const scheme = url.protocol === "https:" ? "wss" : "ws";
+    return `${scheme}://${url.host}/ws/agent`;
+  } catch {
+    return "wss://<your-backend-host>/ws/agent";
+  }
+}
+
 main()
   .catch((error) => {
     process.stderr.write(`Failed to write config: ${error?.message || error}\n`);

package/bin/conductor-daemon.js

@@ -14,6 +14,12 @@ import {
   resolveConductorConfigPath,
   resolveConductorHome,
 } from "../src/conductor-paths.js";
+import {
+  DAEMON_LOCK_FILE_NAME,
+  buildDaemonInstanceIdentity,
+  describeForceRestartRefusal,
+  parseDaemonLockState,
+} from "../src/daemon-lock.js";
 
 const argv = hideBin(process.argv);
 
@@ -109,39 +115,33 @@ function expandHomePath(inputPath, homeDir) {
   return inputPath;
 }
 
-function resolveWorkspaceRoot(configFilePath) {
-  const userConfig = loadUserConfig(configFilePath);
+function resolveWorkspaceRoot(userConfig) {
   const home = process.env.HOME || os.homedir() || "/tmp";
   const workspaceRoot = process.env.CONDUCTOR_WS || userConfig.workspace || path.join(home, "ws");
   return expandHomePath(workspaceRoot, home);
 }
 
-function findRunningDaemonPid(workspaceRoot) {
-  const lockFile = path.join(workspaceRoot, "daemon.pid");
-  if (!fs.existsSync(lockFile)) {
+function readDaemonLockState(workspaceRoot) {
+  const lockFile = path.join(workspaceRoot, DAEMON_LOCK_FILE_NAME);
+  try {
+    return parseDaemonLockState(fs.readFileSync(lockFile, "utf8"));
+  } catch (_err) {
+    return null;
+  }
+}
+
+function findRunningDaemonPid(lockState) {
+  const pid = lockState?.pid;
+  if (!pid) {
     return null;
   }
   try {
-    const pid = parseInt(fs.readFileSync(lockFile, "utf8"), 10);
-    if (Number.isNaN(pid)) {
-      return null;
-    }
     process.kill(pid, 0);
     return pid;
   } catch (err) {
-    if (err && err.code === "ESRCH") {
-      return null;
-    }
-    return pidFromLockFile(lockFile);
-  }
-}
-
-function pidFromLockFile(lockFile) {
-  try {
-    const pid = parseInt(fs.readFileSync(lockFile, "utf8"), 10);
-    return Number.isNaN(pid) ? null : pid;
-  } catch (_err) {
-    return null;
+    // EPERM means the process exists but is owned by another OS user, which is
+    // still "running" for our purposes.
+    return err && err.code === "ESRCH" ? null : pid;
   }
 }
 
@@ -181,13 +181,37 @@ const effectiveConfigFile = args.configFile
   : undefined;
 
 if (args.nohup) {
-  const workspaceRoot = resolveWorkspaceRoot(effectiveConfigFile);
-  const runningPid = findRunningDaemonPid(workspaceRoot);
-  if (runningPid && !args.force) {
-    process.stderr.write(
-      `${CLI_NAME} detected an existing daemon (PID ${runningPid}). Use --force to restart.\n`,
-    );
-    process.exit(1);
+  const userConfig = loadUserConfig(effectiveConfigFile);
+  const workspaceRoot = resolveWorkspaceRoot(userConfig);
+  const lockState = readDaemonLockState(workspaceRoot);
+  const runningPid = findRunningDaemonPid(lockState);
+  if (runningPid) {
+    if (!args.force) {
+      process.stderr.write(
+        `${CLI_NAME} detected an existing daemon (PID ${runningPid}). Use --force to restart.\n`,
+      );
+      process.exit(1);
+    }
+    const identity = buildDaemonInstanceIdentity({
+      conductorHome: materializedConductorPathEnv.CONDUCTOR_HOME,
+      configPath: materializedConductorPathEnv.CONDUCTOR_CONFIG,
+      workspaceRoot,
+      daemonName:
+        (typeof userConfig.daemon_name === "string" && userConfig.daemon_name.trim()) ||
+        process.env.CONDUCTOR_DAEMON_NAME ||
+        os.hostname(),
+    });
+    // Mirrors the ownership gate in src/daemon.js so --nohup --force fails in
+    // the foreground (where the user sees it) instead of inside a detached log.
+    const ownershipError = describeForceRestartRefusal({
+      lockState,
+      identity,
+      lockFile: path.join(workspaceRoot, DAEMON_LOCK_FILE_NAME),
+    });
+    if (ownershipError) {
+      process.stderr.write(`${CLI_NAME} ${ownershipError}\n`);
+      process.exit(1);
+    }
   }
 
   const logsDir = path.join(resolveConductorHome(), "logs");

package/bin/conductor-diagnose.js

@@ -6,6 +6,8 @@ import { hideBin } from "yargs/helpers";
 
 import { loadConfig } from "@love-moon/conductor-sdk";
 
+import { envForExplicitConfigFile } from "../src/config-env.js";
+
 const CLI_NAME = process.env.CONDUCTOR_CLI_NAME || "conductor diagnose";
 const DEFAULT_TIMEOUT_MS = 8000;
 
@@ -45,7 +47,7 @@ main().catch((error) => {
 });
 
 async function main() {
-  const config = loadConfig(args.configFile);
+  const config = loadConfig(args.configFile, { env: envForExplicitConfigFile(args.configFile) });
   const timeoutMs = normalizePositiveInt(args.timeoutMs, DEFAULT_TIMEOUT_MS);
   const baseUrl = String(config.backendUrl || "").replace(/\/+$/, "");
   const endpoint = `${baseUrl}/api/diagnostics/tasks/${encodeURIComponent(taskId)}`;

package/bin/conductor-fire.js

@@ -583,6 +583,17 @@ export function createPendingRemoteInterruptQueue() {
 async function main() {
   syncPwdEnvWithProcessCwdForDaemonLaunch();
   const cliArgs = await parseCliArgs();
+  if (cliArgs.configFile) {
+    // An explicit --config-file must win over CONDUCTOR_* backend/token env
+    // injected by an owning daemon or session (same convention as
+    // envForExplicitConfigFile); otherwise fire dials the file's websocket
+    // with the inherited token and loops on 4002 invalid-token.
+    delete process.env.CONDUCTOR_AGENT_TOKEN;
+    delete process.env.CONDUCTOR_BACKEND_URL;
+    delete process.env.CONDUCTOR_WS_URL;
+    delete process.env.CONDUCTOR_BACKEND_WS_URL;
+    process.env.CONDUCTOR_CONFIG = cliArgs.configFile;
+  }
   let runtimeProjectPath = process.cwd();
   let backendSession = null;
 

package/bin/conductor-project.js

@@ -7,7 +7,7 @@
  *   list [--include-hidden]
  *   show [<id|name>]
  *   current
- *   create [--name <n>] [--workspace-path <p>] [--daemon-host <h>] [--default] [--client-request-id <key>]
+ *   create [--name <n>] [--workspace-path <p>] [--daemon-host <h>] [--create-workspace] [--default] [--client-request-id <key>]
  *   set-default <id|name>
  *   hide <id|name>
  *   unhide <id|name>
@@ -204,6 +204,7 @@ async function handleCreate(argv, deps) {
         ...(defaultName ? { name: defaultName } : {}),
         ...(workspacePath ? { workspacePath } : {}),
         ...(daemonHost ? { daemonHost } : {}),
+        ...(argv.createWorkspace ? { createWorkspaceIfMissing: true } : {}),
         metadata,
         ...(argv.clientRequestId ? { clientRequestId: String(argv.clientRequestId) } : {}),
       };
@@ -375,6 +376,7 @@ export async function main(argvInput = hideBin(process.argv), deps = {}) {
           .option("name", { type: "string", describe: "Project name (defaults to basename of workspace path)" })
           .option("workspace-path", { type: "string", describe: "Workspace path (defaults to cwd)" })
           .option("daemon-host", { type: "string", describe: "Daemon hostname for binding" })
+          .option("create-workspace", { type: "boolean", default: false, describe: "Create the workspace path on the daemon if it does not exist" })
           .option("default", { type: "boolean", default: false, describe: "Create the user's default project" })
           .option("client-request-id", { type: "string", describe: "Idempotency key" }),
         async (argv) => {

package/bin/conductor-update.js

@@ -17,6 +17,7 @@ import {
   fetchLatestVersion,
   isNewerVersion,
   detectPackageManager,
+  resolveGlobalInstallPrefix,
 } from "../src/version-check.js";
 import {
   buildPnpmAllowBuildArgs,
@@ -163,6 +164,18 @@ async function performUpdate() {
   console.log(`   Using package manager: ${colorize(packageManager, "cyan")}`);
   console.log("");
 
+  // `npm install -g` targets whichever npm wins the PATH lookup, which is not necessarily the
+  // one that installed us -- a Conductor-managed Node, an nvm shim and a system npm all resolve
+  // to different prefixes. When they disagree the update lands in a tree nobody runs, so
+  // `conductor --version` keeps reporting the old build and the next update repeats the cycle.
+  // Pin every child command to the prefix the running package actually lives in.
+  const installPrefix = packageManager === "npm" ? resolveGlobalInstallPrefix(PKG_ROOT) : null;
+  if (installPrefix) {
+    process.env.npm_config_prefix = installPrefix;
+    console.log(`   Install prefix: ${colorize(installPrefix, "cyan")}`);
+    console.log("");
+  }
+
   if (packageManager === "pnpm") {
     console.log("   Preparing pnpm native dependency allowlist...");
     await ensurePnpmOnlyBuiltDependencies({

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@love-moon/conductor-cli",
-  "version": "0.9.0",
-  "gitCommitId": "606e5a6",
+  "version": "0.11.0",
+  "gitCommitId": "7d57852",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/lovemoon-ai/conductor.git"
@@ -24,8 +24,8 @@
     "test": "node --test test/*.test.js"
   },
   "dependencies": {
-    "@love-moon/ai-sdk": "0.9.0",
-    "@love-moon/conductor-sdk": "0.9.0",
+    "@love-moon/ai-sdk": "0.11.0",
+    "@love-moon/conductor-sdk": "0.11.0",
     "@github/copilot-sdk": "^0.3.0",
     "chrome-launcher": "^1.2.1",
     "chrome-remote-interface": "^0.33.0",
@@ -38,7 +38,7 @@
   },
   "optionalDependencies": {
     "@roamhq/wrtc": "^0.10.0",
-    "@love-moon/chat-web": "0.9.0"
+    "@love-moon/chat-web": "0.11.0"
   },
   "pnpm": {
     "onlyBuiltDependencies": [