kandev 0.50.0 → 0.51.0

package/dist/service/templates.js

@@ -1,11 +1,41 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MANAGED_MARKER_TEXT = void 0;
 exports.looksLikeManagedUnit = looksLikeManagedUnit;
 exports.renderSystemdUnit = renderSystemdUnit;
 exports.renderLaunchdPlist = renderLaunchdPlist;
-const SYSTEMD_PATH = "/usr/local/bin:/usr/bin:/bin:/opt/homebrew/bin:/home/linuxbrew/.linuxbrew/bin";
-const LAUNCHD_PATH = "/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin";
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+// User-mode PATH includes ~/.local/bin so user-installed agent CLIs (npm user
+// prefix, pipx, fnm, etc.) are discoverable.
+const SYSTEMD_SYSTEM_PATH = "/usr/local/bin:/usr/bin:/bin:/opt/homebrew/bin:/home/linuxbrew/.linuxbrew/bin";
+const SYSTEMD_USER_PATH = `%h/.local/bin:${SYSTEMD_SYSTEM_PATH}`;
+const LAUNCHD_SYSTEM_PATH = "/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin";
+const launchdUserPath = () => `${node_os_1.default.homedir()}/.local/bin:${LAUNCHD_SYSTEM_PATH}`;
+// Prepend the launcher node's bin dir so `npm`/`npx` resolve under per-user
+// node managers (fnm, nvm, asdf, volta, mise), where node lives in a versioned
+// subdirectory not covered by the system PATH. ExecStart already points at this
+// node, so its parent dir is exactly where the matching npm/npx live — without
+// this, npx-based ACP agents (claude, codex, opencode) fail to spawn.
+//
+// The isAbsolute guard exists because `path.dirname` on POSIX returns `'.'`
+// for a path with no `/` separator (e.g. a Windows-style `C:\…\node.exe`
+// passed through). Prepending `.` would put CWD ahead of system dirs in the
+// daemon's PATH — a privilege-escalation footgun. Production callers always
+// pass `process.execPath` (absolute on Linux/macOS), so the guard only kicks
+// in for non-POSIX or relative inputs from future callers / tests.
+function pathWithNodeBinDir(basePath, nodePath) {
+    const nodeBinDir = node_path_1.default.dirname(nodePath);
+    if (!node_path_1.default.isAbsolute(nodeBinDir))
+        return basePath;
+    const parts = basePath.split(":");
+    if (parts.includes(nodeBinDir))
+        return basePath;
+    return `${nodeBinDir}:${basePath}`;
+}
 /**
  * Marker substring baked into every unit/plist kandev writes. Used to safely
  * detect "this file is ours, overwriting is fine" vs "user has put something
@@ -26,10 +56,11 @@ function looksLikeManagedUnit(content) {
  * `npm i -g` installs don't get spurious env vars.
  */
 function renderSystemdUnit(input) {
+    const basePath = input.mode === "system" ? SYSTEMD_SYSTEM_PATH : SYSTEMD_USER_PATH;
     const env = [
         envLine("KANDEV_HOME_DIR", input.homeDir),
         envLine("KANDEV_LOG_LEVEL", "info"),
-        envLine("PATH", SYSTEMD_PATH),
+        envLine("PATH", pathWithNodeBinDir(basePath, input.launcher.nodePath)),
     ];
     if (input.port !== undefined) {
         env.push(envLine("KANDEV_SERVER_PORT", String(input.port)));
@@ -71,10 +102,11 @@ WantedBy=${wantedBy}
  * get a LaunchDaemon that runs at boot regardless of login.
  */
 function renderLaunchdPlist(input) {
+    const basePath = input.mode === "system" ? LAUNCHD_SYSTEM_PATH : launchdUserPath();
     const envEntries = [
         ["KANDEV_HOME_DIR", input.homeDir],
         ["KANDEV_LOG_LEVEL", "info"],
-        ["PATH", LAUNCHD_PATH],
+        ["PATH", pathWithNodeBinDir(basePath, input.launcher.nodePath)],
     ];
     if (input.port !== undefined) {
         envEntries.push(["KANDEV_SERVER_PORT", String(input.port)]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kandev",
-  "version": "0.50.0",
+  "version": "0.51.0",
   "private": false,
   "description": "Launcher for Kandev — manage tasks, orchestrate agents, review changes, and ship value",
   "license": "AGPL-3.0-only",
@@ -22,11 +22,11 @@
     "npm": ">=7"
   },
   "optionalDependencies": {
-    "@kdlbs/runtime-linux-x64": "0.50.0",
-    "@kdlbs/runtime-linux-arm64": "0.50.0",
-    "@kdlbs/runtime-darwin-x64": "0.50.0",
-    "@kdlbs/runtime-darwin-arm64": "0.50.0",
-    "@kdlbs/runtime-win32-x64": "0.50.0"
+    "@kdlbs/runtime-linux-x64": "0.51.0",
+    "@kdlbs/runtime-linux-arm64": "0.51.0",
+    "@kdlbs/runtime-darwin-x64": "0.51.0",
+    "@kdlbs/runtime-darwin-arm64": "0.51.0",
+    "@kdlbs/runtime-win32-x64": "0.51.0"
   },
   "dependencies": {
     "tar": "^7.5.11",