@rubytech/taskmaster 1.9.7 → 1.9.8

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.9.7",
-  "commit": "728a31bb44d34f67c214b4a7fbe191f1c72843f2",
-  "builtAt": "2026-02-28T16:34:23.647Z"
+  "version": "1.9.8",
+  "commit": "a48e53e96c2fbfbbc56d274e979d2c7e540ef88d",
+  "builtAt": "2026-02-28T16:44:03.157Z"
 }

package/dist/gateway/server-methods/tailscale.js

@@ -122,15 +122,35 @@ export const tailscaleHandlers = {
                 message: typeof errObj.message === "string" ? errObj.message : "",
             };
         };
-        const needsSudo = (output) => {
+        const isPermissionDenied = (output) => {
             const lower = output.toLowerCase();
             return (lower.includes("access denied") ||
                 lower.includes("permission denied") ||
                 lower.includes("use 'sudo tailscale") ||
                 lower.includes("requires root"));
         };
+        // Ensure the gateway's OS user is set as the Tailscale operator.
+        // This is a persistent setting — once applied, `tailscale up` works
+        // without root for the lifetime of the Tailscale install.
+        const ensureOperator = async (binary) => {
+            const whoami = (await runExec("whoami", [], { timeoutMs: 3_000 }).catch(() => ({ stdout: "" }))).stdout.trim();
+            if (!whoami)
+                return false;
+            context.logGateway.info(`tailscale.enable: setting Tailscale operator to "${whoami}"`);
+            try {
+                await runExec("sudo", ["-n", binary, "set", `--operator=${whoami}`], {
+                    timeoutMs: 10_000,
+                });
+                return true;
+            }
+            catch {
+                context.logGateway.warn("tailscale.enable: failed to set operator (sudo -n not available)");
+                return false;
+            }
+        };
         // Run `tailscale up` (with optional extra args) and capture output.
-        // If the command fails with a permission error, retries with `sudo -n`.
+        // If the command fails with a permission error, sets the current user
+        // as Tailscale operator (permanent fix) and retries without sudo.
         // `tailscale up` blocks until auth completes, so timeouts are expected —
         // the auth URL appears in stdout/stderr before the timeout kills it.
         const runTailscaleUp = async (binary, extraArgs = []) => {
@@ -138,10 +158,17 @@ export const tailscaleHandlers = {
             const execOpts = { timeoutMs: 60_000, maxBuffer: 100_000 };
             const result = await runExec(binary, args, execOpts).catch((err) => captureExecOutput(err));
             const output = `${result.stdout}\n${result.stderr}`;
-            if (!needsSudo(output))
+            if (!isPermissionDenied(output))
                 return output;
-            // Permission denied — retry with sudo -n (non-interactive)
-            context.logGateway.info(`tailscale.enable: permission denied, retrying with sudo: ${args.join(" ")}`);
+            // Permission denied — fix permanently by setting operator, then retry
+            const fixed = await ensureOperator(binary);
+            if (fixed) {
+                // Operator set — retry without sudo (clean output capture)
+                const retryResult = await runExec(binary, args, execOpts).catch((err) => captureExecOutput(err));
+                return `${retryResult.stdout}\n${retryResult.stderr}`;
+            }
+            // Fallback: direct sudo attempt
+            context.logGateway.info(`tailscale.enable: falling back to sudo: ${args.join(" ")}`);
             const sudoResult = await runExec("sudo", ["-n", binary, ...args], execOpts).catch((err) => captureExecOutput(err));
             return `${sudoResult.stdout}\n${sudoResult.stderr}`;
         };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/taskmaster",
-  "version": "1.9.7",
+  "version": "1.9.8",
   "description": "AI-powered business assistant for small businesses",
   "publishConfig": {
     "access": "public"