@rubytech/taskmaster 1.9.5 → 1.9.6

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.9.5",
-  "commit": "521c1bca1da1357a98d5afc5f71aafcf2a5831b8",
-  "builtAt": "2026-02-28T15:36:00.493Z"
+  "version": "1.9.6",
+  "commit": "ed36605579b1ba21fa2309986f83cae397e7206a",
+  "builtAt": "2026-02-28T15:54:48.228Z"
 }

package/dist/gateway/server-methods/tailscale.js

@@ -122,6 +122,29 @@ export const tailscaleHandlers = {
                 message: typeof errObj.message === "string" ? errObj.message : "",
             };
         };
+        const needsSudo = (output) => {
+            const lower = output.toLowerCase();
+            return (lower.includes("access denied") ||
+                lower.includes("permission denied") ||
+                lower.includes("use 'sudo tailscale") ||
+                lower.includes("requires root"));
+        };
+        // Run `tailscale up` (with optional extra args) and capture output.
+        // If the command fails with a permission error, retries with `sudo -n`.
+        // `tailscale up` blocks until auth completes, so timeouts are expected —
+        // the auth URL appears in stdout/stderr before the timeout kills it.
+        const runTailscaleUp = async (binary, extraArgs = []) => {
+            const args = ["up", ...extraArgs];
+            const execOpts = { timeoutMs: 60_000, maxBuffer: 100_000 };
+            const result = await runExec(binary, args, execOpts).catch((err) => captureExecOutput(err));
+            const output = `${result.stdout}\n${result.stderr}`;
+            if (!needsSudo(output))
+                return output;
+            // Permission denied — retry with sudo -n (non-interactive)
+            context.logGateway.info(`tailscale.enable: permission denied, retrying with sudo: ${args.join(" ")}`);
+            const sudoResult = await runExec("sudo", ["-n", binary, ...args], execOpts).catch((err) => captureExecOutput(err));
+            return `${sudoResult.stdout}\n${sudoResult.stderr}`;
+        };
         try {
             const binary = await findTailscaleBinary();
             if (!binary) {
@@ -149,20 +172,7 @@ export const tailscaleHandlers = {
                 // Other status errors (e.g. NeedsLogin) are fine — continue to `tailscale up`
             }
             // ── Attempt 1: `tailscale up` ──
-            // On a headless device this prints:
-            // "To authenticate, visit:\n\n\thttps://login.tailscale.com/a/..."
-            // The command blocks until auth completes, so we run it with a
-            // timeout and parse the auth URL from the output. The URL appears
-            // within seconds; the timeout just kills the blocking wait.
-            const child = await runExec(binary, ["up"], {
-                timeoutMs: 60_000,
-                maxBuffer: 100_000,
-            }).catch((err) => {
-                // `tailscale up` exits non-zero while waiting for auth but still
-                // prints the URL to stdout/stderr before the timeout kills it.
-                return captureExecOutput(err);
-            });
-            const combined = `${child.stdout}\n${child.stderr}`;
+            const combined = await runTailscaleUp(binary);
             const authUrl = extractAuthUrl(combined);
             if (authUrl) {
                 respond(true, { authUrl });
@@ -184,11 +194,7 @@ export const tailscaleHandlers = {
             // state where plain `tailscale up` doesn't produce a new auth URL.
             // --force-reauth forces a fresh login flow that always emits a URL.
             context.logGateway.info("tailscale.enable: no auth URL from initial attempt, retrying with --force-reauth");
-            const retry = await runExec(binary, ["up", "--force-reauth"], {
-                timeoutMs: 60_000,
-                maxBuffer: 100_000,
-            }).catch((err) => captureExecOutput(err));
-            const retryCombined = `${retry.stdout}\n${retry.stderr}`;
+            const retryCombined = await runTailscaleUp(binary, ["--force-reauth"]);
             const retryUrl = extractAuthUrl(retryCombined);
             if (retryUrl) {
                 respond(true, { authUrl: retryUrl });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/taskmaster",
-  "version": "1.9.5",
+  "version": "1.9.6",
   "description": "AI-powered business assistant for small businesses",
   "publishConfig": {
     "access": "public"