@siftd/connect-agent 0.2.35 → 0.2.37

package/dist/tools/bash.js

@@ -4,7 +4,10 @@
  */
 import { exec } from 'child_process';
 import { promisify } from 'util';
+import { existsSync } from 'fs';
 const execAsync = promisify(exec);
+// Detect available shell - prefer bash for cross-platform compatibility
+const SHELL = existsSync('/bin/bash') ? '/bin/bash' : '/bin/sh';
 const MAX_OUTPUT_LENGTH = 10000;
 const DEFAULT_TIMEOUT = 30000;
 const MAX_TIMEOUT = 120000;
@@ -28,7 +31,7 @@ export class BashTool {
                 cwd: this.workspaceDir,
                 timeout: effectiveTimeout,
                 maxBuffer: 1024 * 1024 * 10, // 10MB
-                shell: '/bin/zsh',
+                shell: SHELL,
                 env: { ...process.env }
             });
             let output = '';

package/dist/workers/manager.js

@@ -162,18 +162,33 @@ Include: job_id=${jobId}, timestamp, summary of work done, files modified, key f
 This ensures nothing is lost even if your output gets truncated.`;
             // Escape single quotes in task for shell safety
             const escapedTask = enhancedTask.replace(/'/g, "'\\''");
+            // Build the claude command
+            const claudeCmd = `claude -p '${escapedTask}' --output-format text --dangerously-skip-permissions`;
+            // If running as root, run workers as 'lia' user to avoid --dangerously-skip-permissions being blocked
+            // The Claude CLI blocks this flag for root users as a security measure
+            const isRoot = process.getuid?.() === 0;
+            let shellCmd;
+            let spawnEnv = {
+                ...process.env,
+                ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,
+                GH_TOKEN: process.env.GH_TOKEN,
+                GITHUB_TOKEN: process.env.GITHUB_TOKEN
+            };
+            if (isRoot) {
+                // When running as root, use runuser to switch to 'lia' user while preserving env
+                // runuser -l creates a login shell but -m preserves the environment
+                shellCmd = `runuser -u lia -- /bin/bash -l -c "${claudeCmd.replace(/"/g, '\\"')}"`;
+            }
+            else {
+                shellCmd = claudeCmd;
+            }
             // Spawn using /bin/bash -l -c to ensure proper PATH resolution (NVM, etc.)
             // Use absolute path to bash to avoid ENOENT errors in restricted environments
-            const child = spawn('/bin/bash', ['-l', '-c', `claude -p '${escapedTask}' --output-format text --dangerously-skip-permissions`], {
+            const child = spawn('/bin/bash', ['-l', '-c', shellCmd], {
                 cwd: workspace,
                 detached: true,
                 stdio: ['ignore', 'pipe', 'pipe'],
-                env: {
-                    ...process.env,
-                    ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,
-                    GH_TOKEN: process.env.GH_TOKEN,
-                    GITHUB_TOKEN: process.env.GITHUB_TOKEN
-                }
+                env: spawnEnv
             });
             job.status = 'running';
             job.started = new Date().toISOString();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@siftd/connect-agent",
-  "version": "0.2.35",
+  "version": "0.2.37",
   "description": "Master orchestrator agent - control Claude Code remotely via web",
   "type": "module",
   "main": "dist/index.js",