@siftd/connect-agent 0.2.35 → 0.2.36

package/dist/workers/manager.js

@@ -162,18 +162,33 @@ Include: job_id=${jobId}, timestamp, summary of work done, files modified, key f
 This ensures nothing is lost even if your output gets truncated.`;
             // Escape single quotes in task for shell safety
             const escapedTask = enhancedTask.replace(/'/g, "'\\''");
+            // Build the claude command
+            const claudeCmd = `claude -p '${escapedTask}' --output-format text --dangerously-skip-permissions`;
+            // If running as root, run workers as 'lia' user to avoid --dangerously-skip-permissions being blocked
+            // The Claude CLI blocks this flag for root users as a security measure
+            const isRoot = process.getuid?.() === 0;
+            let shellCmd;
+            let spawnEnv = {
+                ...process.env,
+                ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,
+                GH_TOKEN: process.env.GH_TOKEN,
+                GITHUB_TOKEN: process.env.GITHUB_TOKEN
+            };
+            if (isRoot) {
+                // When running as root, use runuser to switch to 'lia' user while preserving env
+                // runuser -l creates a login shell but -m preserves the environment
+                shellCmd = `runuser -u lia -- /bin/bash -l -c "${claudeCmd.replace(/"/g, '\\"')}"`;
+            }
+            else {
+                shellCmd = claudeCmd;
+            }
             // Spawn using /bin/bash -l -c to ensure proper PATH resolution (NVM, etc.)
             // Use absolute path to bash to avoid ENOENT errors in restricted environments
-            const child = spawn('/bin/bash', ['-l', '-c', `claude -p '${escapedTask}' --output-format text --dangerously-skip-permissions`], {
+            const child = spawn('/bin/bash', ['-l', '-c', shellCmd], {
                 cwd: workspace,
                 detached: true,
                 stdio: ['ignore', 'pipe', 'pipe'],
-                env: {
-                    ...process.env,
-                    ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,
-                    GH_TOKEN: process.env.GH_TOKEN,
-                    GITHUB_TOKEN: process.env.GITHUB_TOKEN
-                }
+                env: spawnEnv
             });
             job.status = 'running';
             job.started = new Date().toISOString();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@siftd/connect-agent",
-  "version": "0.2.35",
+  "version": "0.2.36",
   "description": "Master orchestrator agent - control Claude Code remotely via web",
   "type": "module",
   "main": "dist/index.js",