This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryFixed installer breakage when run with sudo on WSL/Linux.
Full changelog
What's New in v3.9.18
Fixed
Block sudo curl | bash and sudo bash install.sh
Running the installer wrapped in sudo caused two compounding failures on WSL/Linux:
| Problem | Cause |
|---------|-------|
| curl: (23) Failure writing output to destination | Pipe write owned by root, read by another user |
| [✗] GitHub CLI not authenticated | gh auth stored creds in /root/.config/gh/, invisible to the real user |
The installer now detects SUDO_USER at startup and exits immediately with:
╔══════════════════════════════════════════════════════════╗
║ ⚠️ Do NOT run this installer with sudo ║
╚══════════════════════════════════════════════════════════╝
Running as root via sudo breaks GitHub CLI authentication.
gh auth stores credentials in your home directory — not root's.
Re-run without sudo:
curl -sSL https://raw.githubusercontent.com/dl4rce/flaiwheel/main/scripts/install.sh | bash
The installer will use sudo internally only where needed (package installs).
The internal $_SUDO escalation for package managers and systemctl (added in v3.9.16) continues to work correctly — it only elevates the specific commands that need root, not the whole process.
Upgrade
curl -sSL https://raw.githubusercontent.com/dl4rce/flaiwheel/main/scripts/install.sh | bash
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About dl4rce/flaiwheel
Self-hosted memory and governance layer for AI coding agents. 28 MCP tools with structured knowledge capture, hybrid search (semantic + BM25 + cross-encoder reranking), behavioral documentation nudges, cold-start codebase analyzer, and git-native storage. Single Docker container, zero cloud dependencies.
Related context
Beta — feedback welcome: [email protected]