@dashclaw/cli - npm Package Compare versions

Comparing version 0.7.4 to 0.7.6

lib/claude/install.js

@@ -50,2 +50,8 @@ // cli/lib/claude/install.js
 ];
+// Shipped when present in the bundle, skipped otherwise — a newer CLI must
+// keep installing against an older hosted bundle. enforcement_liveness_probe
+// (v8.2) is not wired as a hook here (the CLI does not install the
+// SessionStart digest that auto-spawns it), but travels with the hooks so
+// `python .claude/hooks/enforcement_liveness_probe.py` works out of the box.
+const OPTIONAL_HOOK_FILES = ['enforcement_liveness_probe.py'];
 const HOOK_INTEL_DIR = 'dashclaw_agent_intel';
@@ -140,2 +146,6 @@ const HOOKS_BUNDLE_PATH = '/downloads/dashclaw-claude-code-hooks.zip';
   }
+  for (const name of OPTIONAL_HOOK_FILES) {
+    const sp = join(hooksSrc, name);
+    if (existsSync(sp)) copyFileSync(sp, join(hooksDst, name));
+  }
   const intelSrc = join(hooksSrc, HOOK_INTEL_DIR);
@@ -142,0 +152,0 @@ if (!existsSync(intelSrc) || !statSync(intelSrc).isDirectory()) {

lib/up/db.js

@@ -128,2 +128,15 @@ // cli/lib/up/db.js
 
+/**
+ * Extra embedded-postgres options when running as root on POSIX (the fresh
+ * root-VPS case, caught live by the first `drill:fresh-linux --as-root` run):
+ * postgres refuses to run as root, and embedded-postgres's escape hatch is
+ * `createPostgresUser: true` (it provisions a `postgres` system user and runs
+ * the cluster as that user). No-op everywhere else — including Windows, where
+ * the elevated-token case is handled by the pg_ctl lifecycle instead.
+ */
+export function rootPostgresOptions({ platform = process.platform, getuid = process.getuid } = {}) {
+  if (platform === 'win32' || typeof getuid !== 'function') return {};
+  return getuid() === 0 ? { createPostgresUser: true } : {};
+}
+
 export const DEFAULT_DB_PORT = 5433;
@@ -413,2 +426,3 @@ // Scan window when the preferred port is taken: preferred+1 .. preferred+10.
     initdbFlags: INITDB_FLAGS,
+    ...rootPostgresOptions(),
   });
@@ -415,0 +429,0 @@ try {

package.json

 {
   "name": "@dashclaw/cli",
-  "version": "0.7.4",
+  "version": "0.7.6",
   "description": "DashClaw terminal client — approve agent actions and diagnose your instance",
@@ -5,0 +5,0 @@ "type": "module",

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 2 instances

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 2 instances

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

261226

0.52%

Lines of code

5950

0.39%

No dependency changes