From 9bd185f96af1009a7283844581ed3486968a735f Mon Sep 17 00:00:00 2001
From: Zer0phucks <10062537@cc.peralta.edu>
Date: Mon, 16 Mar 2026 00:49:26 -0700
Subject: [PATCH] fix: resolve snap bun filesystem confinement breaking setup

Bun installed via snap runs in a sandbox that blocks access to files
outside approved paths (including ~/.claude/). This causes:
- EACCES on `bun install` (can't read package.json)
- CouldntReadCurrentDirectory on `bun run <script>`
- Same errors with `bunx`

Fix: resolve bun at setup start, preferring ~/.bun/bin/bun (the
official installer target) over whatever is in PATH. Fall back to
PATH bun if ~/.bun/bin/bun doesn't exist.

Also inline the build steps that `bun run build` would have invoked,
since `bun run` fails with CouldntReadCurrentDirectory even with the
non-snap bun on some Linux setups.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 setup | 19 +++++++++++++++----
 1 file changed, 15 insertions(+), 4 deletions(-)

diff --git a/setup b/setup
index 607c277..7b6ee44 100755
--- a/setup
+++ b/setup
@@ -6,10 +6,17 @@ GSTACK_DIR="$(cd "$(dirname "$0")" && pwd)"
 SKILLS_DIR="$(dirname "$GSTACK_DIR")"
 BROWSE_BIN="$GSTACK_DIR/browse/dist/browse"
 
+# Prefer ~/.bun/bin/bun over snap bun (snap has filesystem confinement issues)
+if [ -x "$HOME/.bun/bin/bun" ]; then
+  BUN="$HOME/.bun/bin/bun"
+else
+  BUN="$(command -v bun)"
+fi
+
 ensure_playwright_browser() {
   (
     cd "$GSTACK_DIR"
-    bun --eval 'import { chromium } from "playwright"; const browser = await chromium.launch(); await browser.close();'
+    "$BUN" --eval 'import { chromium } from "playwright"; const browser = await chromium.launch(); await browser.close();'
   ) >/dev/null 2>&1
 }
 
@@ -29,8 +36,12 @@ if [ "$NEEDS_BUILD" -eq 1 ]; then
   echo "Building browse binary..."
   (
     cd "$GSTACK_DIR"
-    bun install
-    bun run build
+    "$BUN" install
+    "$BUN" scripts/gen-skill-docs.ts
+    "$BUN" build --compile browse/src/cli.ts --outfile browse/dist/browse
+    "$BUN" build --compile browse/src/find-browse.ts --outfile browse/dist/find-browse
+    git rev-parse HEAD > browse/dist/.version 2>/dev/null || true
+    rm -f .*.bun-build
   )
   # Safety net: write .version if build script didn't (e.g., git not available during build)
   if [ ! -f "$GSTACK_DIR/browse/dist/.version" ]; then
@@ -48,7 +59,7 @@ if ! ensure_playwright_browser; then
   echo "Installing Playwright Chromium..."
   (
     cd "$GSTACK_DIR"
-    bunx playwright install chromium
+    "$BUN" x playwright install chromium
   )
 fi