infinicode 2.8.57 → 2.8.58

package/dist/kernel/federation/self-update.js

@@ -35,7 +35,22 @@ export async function performSelfUpdate(opts = {}) {
     try {
         // Use npm.cmd on Windows so we never need a shell (no injection surface).
         const bin = process.platform === 'win32' ? 'npm.cmd' : 'npm';
-        const res = await execa(bin, ['install', '-g', spec], { all: true, timeout: 300_000 });
+        const args = ['install', '-g', spec];
+        let res;
+        try {
+            res = await execa(bin, args, { all: true, timeout: 300_000 });
+        }
+        catch (err) {
+            const message = String(err.all ?? err.message ?? err);
+            const unprivileged = process.platform !== 'win32' && process.getuid?.() !== 0;
+            if (!unprivileged || !/\bEACCES\b|permission denied/i.test(message))
+                throw err;
+            // RoboPark systemd services normally run as root. This fallback also
+            // supports an operator-launched satellite when sudo is intentionally
+            // configured non-interactively; it never prompts or shells out.
+            info('[update] global npm directory is root-owned; retrying with sudo -n…');
+            res = await execa('sudo', ['-n', bin, ...args], { all: true, timeout: 300_000 });
+        }
         const tail = String(res.all ?? res.stdout ?? '').split('\n').filter(Boolean).slice(-2).join(' ').trim();
         info(`[update] installed ${spec}${tail ? ' — ' + tail : ''}`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "infinicode",
-  "version": "2.8.57",
+  "version": "2.8.58",
   "description": "OpenKernel — provider-agnostic AI execution kernel. Native coding agent + mission-driven execution runtime.",
   "type": "module",
   "main": "./dist/kernel/index.js",
@@ -74,7 +74,6 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@anthropic-ai/claude-code": "^2.1.207",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "chalk": "^5.3.0",
     "commander": "^12.1.0",