traderclaw-cli 1.0.124 → 1.0.127

package/bin/installer-step-engine.mjs

@@ -5,7 +5,7 @@ import { homedir, tmpdir } from "os";
 import { basename, dirname, join } from "path";
 import { resolvePluginPackageRoot } from "./resolve-plugin-root.mjs";
 import { choosePreferredProviderModel } from "./llm-model-preference.mjs";
-import { getLinuxGatewayPersistenceSnapshot } from "./gateway-persistence-linux.mjs";
+import { getLinuxGatewayPersistenceSnapshot, isLinuxGatewayPersistenceEligible } from "./gateway-persistence-linux.mjs";
 
 const CONFIG_DIR = join(homedir(), ".openclaw");
 const CONFIG_FILE = join(CONFIG_DIR, "openclaw.json");
@@ -342,6 +342,7 @@ function buildCommandString(cmd, args = []) {
 
 function isPrivilegeError(err) {
   const text = `${err?.message || ""}\n${err?.stderr || ""}\n${err?.stdout || ""}`.toLowerCase();
+  // Do not match bare "sudo" — OpenClaw prints "try sudo loginctl" in hints; that is not a priv-denied signal.
   return (
     text.includes("permission denied")
     || text.includes("eacces")
@@ -349,7 +350,8 @@ function isPrivilegeError(err) {
     || text.includes("operation not permitted")
     || text.includes("must be root")
     || text.includes("requires root")
-    || text.includes("sudo")
+    || text.includes("sudo: a password is required")
+    || text.includes("a terminal is required to read the password")
     || text.includes("authentication is required")
   );
 }
@@ -367,6 +369,16 @@ function canUseSudoWithoutPrompt() {
   }
 }
 
+/** User systemd (openclaw gateway) expects XDG_RUNTIME_DIR under /run/user/<uid> once linger is on. */
+function primeLinuxUserRuntimeEnv() {
+  if (process.platform !== "linux" || typeof process.getuid !== "function") return;
+  const uid = process.getuid();
+  if (uid === 0) return;
+  if (!process.env.XDG_RUNTIME_DIR) {
+    process.env.XDG_RUNTIME_DIR = `/run/user/${uid}`;
+  }
+}
+
 function tailscalePermissionRemediation() {
   return [
     "Tailscale requires elevated permissions on this host.",
@@ -2307,11 +2319,33 @@ export class InstallerStepEngine {
   }
 
   async runWithPrivilegeGuidance(stepId, cmd, args = [], customLines = []) {
+    primeLinuxUserRuntimeEnv();
+    const onEvent = (evt) =>
+      this.emitLog(stepId, evt.type === "stderr" ? "warn" : "info", evt.text, evt.urls || []);
+    const tryRun = (c, a) => runCommandWithEvents(c, a, { onEvent });
+
     try {
-      return await runCommandWithEvents(cmd, args, {
-        onEvent: (evt) => this.emitLog(stepId, evt.type === "stderr" ? "warn" : "info", evt.text, evt.urls || []),
-      });
+      return await tryRun(cmd, args);
     } catch (err) {
+      const sudoOpenclawGateway =
+        cmd === "openclaw" &&
+        Array.isArray(args) &&
+        args[0] === "gateway" &&
+        !isRootUser() &&
+        canUseSudoWithoutPrompt();
+      if (sudoOpenclawGateway) {
+        const bin = getCommandOutput("command -v openclaw")?.trim();
+        if (bin) {
+          try {
+            return await tryRun("sudo", ["-n", bin, ...args]);
+          } catch (e2) {
+            if (isPrivilegeError(e2)) {
+              throw new Error(privilegeRemediationMessage(cmd, args, customLines));
+            }
+            throw e2;
+          }
+        }
+      }
       if (isPrivilegeError(err)) {
         throw new Error(privilegeRemediationMessage(cmd, args, customLines));
       }
@@ -2481,6 +2515,28 @@ export class InstallerStepEngine {
     this.state.autoRecovery.backupPath = backupPath;
     this.emitLog(stepId, "warn", `Auto-recovery: applied ${changed.join(", ")} with backup at ${backupPath}`);
 
+    if (isLinuxGatewayPersistenceEligible()) {
+      const lingerSnap = getLinuxGatewayPersistenceSnapshot();
+      if (lingerSnap.linger !== true) {
+        try {
+          await this.runWithPrivilegeGuidance(stepId, "sudo", ["loginctl", "enable-linger", lingerSnap.username]);
+        } catch {
+          // best effort; gateway install may still surface a clearer error
+        }
+      }
+      if (!isRootUser() && canUseSudoWithoutPrompt() && typeof process.getuid === "function") {
+        const uid = process.getuid();
+        try {
+          await runCommandWithEvents("sudo", ["-n", "systemctl", "start", `user@${uid}.service`], {
+            onEvent: (evt) => this.emitLog(stepId, evt.type === "stderr" ? "warn" : "info", evt.text, evt.urls || []),
+          });
+        } catch {
+          // best effort
+        }
+      }
+    }
+    primeLinuxUserRuntimeEnv();
+
     try {
       await this.runWithPrivilegeGuidance(stepId, "openclaw", ["gateway", "stop"]);
     } catch {
@@ -2835,6 +2891,45 @@ export class InstallerStepEngine {
             ensureGatewayBootstrapDefaults(CONFIG_FILE, (msg) =>
               this.emitLog("gateway_bootstrap", "info", msg),
             );
+            // `openclaw gateway install` uses user systemd; linger must be enabled before install
+            // (gateway_persistence runs later — too late). VPS userdata may already do this as root.
+            if (isLinuxGatewayPersistenceEligible()) {
+              const lingerSnap = getLinuxGatewayPersistenceSnapshot();
+              if (lingerSnap.linger !== true) {
+                this.emitLog(
+                  "gateway_bootstrap",
+                  "info",
+                  "Enabling systemd user linger before openclaw gateway install (required for headless/SSH).",
+                );
+                await this.runWithPrivilegeGuidance("gateway_bootstrap", "sudo", [
+                  "loginctl",
+                  "enable-linger",
+                  lingerSnap.username,
+                ]);
+              }
+              // Linger alone does not always create /run/user/<uid> until user@uid.service runs (SSH-less bootstrap).
+              if (!isRootUser() && canUseSudoWithoutPrompt() && typeof process.getuid === "function") {
+                const uid = process.getuid();
+                try {
+                  await runCommandWithEvents("sudo", ["-n", "systemctl", "start", `user@${uid}.service`], {
+                    onEvent: (evt) =>
+                      this.emitLog(
+                        "gateway_bootstrap",
+                        evt.type === "stderr" ? "warn" : "info",
+                        evt.text,
+                        evt.urls || [],
+                      ),
+                  });
+                } catch {
+                  this.emitLog(
+                    "gateway_bootstrap",
+                    "warn",
+                    `Could not start user@${uid}.service (non-fatal); gateway install may still work if session exists.`,
+                  );
+                }
+              }
+            }
+            primeLinuxUserRuntimeEnv();
             await this.runWithPrivilegeGuidance("gateway_bootstrap", "openclaw", ["gateway", "install"]);
             await this.runWithPrivilegeGuidance("gateway_bootstrap", "openclaw", ["gateway", "restart"]);
             if (this.options.skipFunnel) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "traderclaw-cli",
-  "version": "1.0.124",
+  "version": "1.0.127",
   "description": "Global TraderClaw CLI (install --wizard, setup, precheck). Installs solana-traderclaw as a dependency for OpenClaw plugin files.",
   "type": "module",
   "bin": {
@@ -17,7 +17,7 @@
     "node": ">=22"
   },
   "dependencies": {
-    "solana-traderclaw": "^1.0.124"
+    "solana-traderclaw": "^1.0.127"
   },
   "keywords": [
     "traderclaw",