moflo 4.8.74 → 4.8.75

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moflo",
-  "version": "4.8.74",
+  "version": "4.8.75",
   "description": "MoFlo — AI agent orchestration for Claude Code. Forked from ruflo/claude-flow with patches applied to source, plus feature-level orchestration.",
   "main": "dist/index.js",
   "type": "module",
@@ -112,7 +112,7 @@
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^20.19.37",
     "eslint": "^8.0.0",
-    "moflo": "^4.8.73",
+    "moflo": "^4.8.74",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.0"

package/src/modules/cli/dist/src/version.js

@@ -2,5 +2,5 @@
  * Auto-generated by build. Do not edit manually.
  * Source of truth: root package.json → scripts/sync-version.mjs
  */
-export const VERSION = '4.8.74';
+export const VERSION = '4.8.75';
 //# sourceMappingURL=version.js.map

package/src/modules/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moflo/cli",
-  "version": "4.8.74",
+  "version": "4.8.75",
   "type": "module",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",

package/src/modules/spells/dist/core/docker-sandbox.js

@@ -10,9 +10,11 @@
  *     container. projectRoot mounts at `/workspace` (the container's CWD);
  *     scopes inside projectRoot translate to `/workspace/<rel>`; absolute
  *     scopes outside the project are skipped with a log line.
- *   - Tool home paths mount under `/root/<rel>` so that claude/gh/git inside
- *     the container read and write the same config files the user edits on
- *     Windows.
+ *   - Tool home paths mount under `/home/node/<rel>` so that claude/gh/git
+ *     inside the container read and write the same config files the user
+ *     edits on Windows. The container runs as the `node` user (uid 1000)
+ *     because Claude Code CLI refuses to run as root with
+ *     `--dangerously-skip-permissions`.
  *   - `--network none` is the default; `net` cap or elevated/autonomous omit
  *     it (default bridge) — mirrors the bwrap policy.
  *   - `--rm` handles cleanup automatically.
@@ -23,8 +25,12 @@ import { homedir } from 'node:os';
 import { posix, isAbsolute, relative } from 'node:path';
 /** Container path where projectRoot is mounted. */
 const CONTAINER_WORKSPACE = '/workspace';
-/** Container path where the user's home is projected (for tool home mounts). */
-const CONTAINER_HOME = '/root';
+/**
+ * Container path where the user's home is projected (for tool home mounts).
+ * The sandbox image switches to the `node` user, so tool configs must land
+ * in that user's home — not `/root`.
+ */
+const CONTAINER_HOME = '/home/node';
 /**
  * Tool home paths mounted rw for elevated/autonomous steps so claude, gh,
  * git, npm can persist their config/credentials/cache. Mirrors the bwrap
@@ -112,7 +118,7 @@ function toSafeSegment(hostPath) {
  *   - net              → omit `--network none`
  *
  * When `permissionLevel` is `elevated` or `autonomous`:
- *   - Mount tool home paths rw at `/root/<rel>`
+ *   - Mount tool home paths rw at `/home/node/<rel>`
  *   - Share the host network (omit `--network none`)
  */
 export function buildDockerArgs(command, capabilities, projectRoot, options) {