@roamcode.ai/server 1.0.1 → 1.0.3

package/dist/index.js

@@ -1954,6 +1954,13 @@ function npmInvocation(npmCommand, args, nodePath) {
     return { command: nodePath, args: [npmCommand, ...args] };
   return { command: npmCommand, args };
 }
+function npmProjectEnv(env = process.env) {
+  const clean = { ...env };
+  for (const key of Object.keys(clean)) {
+    if (key.toLowerCase() === "npm_config_allow_scripts") delete clean[key];
+  }
+  return clean;
+}
 async function npmIntegrity(npmCommand, packageName, version, nodePath, log) {
   let output = "";
   const invocation = npmInvocation(
@@ -1962,7 +1969,10 @@ async function npmIntegrity(npmCommand, packageName, version, nodePath, log) {
     nodePath
   );
   await new Promise((resolvePromise, reject) => {
-    const child = spawn(invocation.command, invocation.args, { stdio: ["ignore", "pipe", "pipe"] });
+    const child = spawn(invocation.command, invocation.args, {
+      env: npmProjectEnv(),
+      stdio: ["ignore", "pipe", "pipe"]
+    });
     child.stdout?.on("data", (chunk) => output += chunk.toString());
     child.stderr?.on("data", (chunk) => log(chunk.toString()));
     child.on("error", reject);
@@ -2098,7 +2108,7 @@ async function installManagedRelease(opts) {
         ],
         nodePath
       );
-      await runLogged(invocation.command, invocation.args, { log });
+      await runLogged(invocation.command, invocation.args, { env: npmProjectEnv(), log });
       const installed = versionFromReleaseDir(stage);
       if (installed !== opts.version)
         throw new Error(`installed roamcode ${installed ?? "unknown"}, expected ${opts.version}`);
@@ -2181,7 +2191,7 @@ async function installManagedRelease(opts) {
 }
 
 // src/updater.ts
-var RUNNING_VERSION = "1.0.1" ? "1.0.1".replace(/^v/, "") : packageVersion();
+var RUNNING_VERSION = "1.0.3" ? "1.0.3".replace(/^v/, "") : packageVersion();
 var RUNNING_BUILD = RUNNING_VERSION;
 var RELEASES_API = "https://api.github.com/repos/burakgon/roamcode/releases?per_page=100";
 var RELEASE_MANIFEST_ASSET = "roamcode-release.json";

package/dist/managed-update-helper.js

@@ -367,6 +367,13 @@ function npmInvocation(npmCommand, args, nodePath) {
     return { command: nodePath, args: [npmCommand, ...args] };
   return { command: npmCommand, args };
 }
+function npmProjectEnv(env = process.env) {
+  const clean = { ...env };
+  for (const key of Object.keys(clean)) {
+    if (key.toLowerCase() === "npm_config_allow_scripts") delete clean[key];
+  }
+  return clean;
+}
 async function npmIntegrity(npmCommand, packageName, version, nodePath, log) {
   let output = "";
   const invocation = npmInvocation(
@@ -375,7 +382,10 @@ async function npmIntegrity(npmCommand, packageName, version, nodePath, log) {
     nodePath
   );
   await new Promise((resolvePromise, reject) => {
-    const child = spawn(invocation.command, invocation.args, { stdio: ["ignore", "pipe", "pipe"] });
+    const child = spawn(invocation.command, invocation.args, {
+      env: npmProjectEnv(),
+      stdio: ["ignore", "pipe", "pipe"]
+    });
     child.stdout?.on("data", (chunk) => output += chunk.toString());
     child.stderr?.on("data", (chunk) => log(chunk.toString()));
     child.on("error", reject);
@@ -511,7 +521,7 @@ async function installManagedRelease(opts) {
         ],
         nodePath
       );
-      await runLogged(invocation.command, invocation.args, { log });
+      await runLogged(invocation.command, invocation.args, { env: npmProjectEnv(), log });
       const installed = versionFromReleaseDir(stage);
       if (installed !== opts.version)
         throw new Error(`installed roamcode ${installed ?? "unknown"}, expected ${opts.version}`);

package/dist/start.js

@@ -765,7 +765,7 @@ function readPreviousVersion(root) {
 }
 
 // src/updater.ts
-var RUNNING_VERSION = "1.0.1" ? "1.0.1".replace(/^v/, "") : packageVersion();
+var RUNNING_VERSION = "1.0.3" ? "1.0.3".replace(/^v/, "") : packageVersion();
 var RELEASES_API = "https://api.github.com/repos/burakgon/roamcode/releases?per_page=100";
 var RELEASE_MANIFEST_ASSET = "roamcode-release.json";
 var CHECK_CACHE_MS = 15 * 6e4;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@roamcode.ai/server",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Host-native server for RoamCode",
   "homepage": "https://roamcode.ai",
   "bugs": "https://github.com/burakgon/roamcode/issues",
@@ -40,7 +40,7 @@
     "node-pty": "1.1.0",
     "web-push": "^3.6.7",
     "zod": "^4.4.3",
-    "@roamcode.ai/web": "1.0.1"
+    "@roamcode.ai/web": "1.0.3"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",