@agentsoc/beacon 0.0.3 → 0.0.4

package/dist/cli.js

@@ -60,7 +60,8 @@ program
         await installService();
     }
     catch (err) {
-        console.error("[beacon] Install failed:", err);
+        const message = err instanceof Error ? err.message : String(err);
+        console.error(`[beacon] Install failed:\n\n${message}\n`);
         process.exit(1);
     }
 });

package/dist/service-install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service-install.d.ts","sourceRoot":"","sources":["../src/service-install.ts"],"names":[],"mappings":"AAKA,wBAAsB,cAAc,kBAgEnC"}
+{"version":3,"file":"service-install.d.ts","sourceRoot":"","sources":["../src/service-install.ts"],"names":[],"mappings":"AA2GA,wBAAsB,cAAc,kBAuEnC"}

package/dist/service-install.js

@@ -1,7 +1,101 @@
+import { constants as fsConstants } from 'node:fs';
 import fs from 'node:fs/promises';
 import path from 'node:path';
-import { execSync } from 'node:child_process';
+import { execFileSync, execSync } from 'node:child_process';
 import { BEACON_CONFIG_REQUIRED_MESSAGE, loadConfig } from './config.js';
+const PERMISSION_DENIED_HINT = `That location is only writable as root. Run the same command with sudo, for example:
+
+  sudo beacon install
+
+You will be prompted for your administrator password.`;
+function permissionDeniedInstallError(destPath) {
+    return new Error(`Cannot install the system service: permission denied for ${path.dirname(destPath)}.\n\n${PERMISSION_DENIED_HINT}`);
+}
+async function assertServiceInstallWritable(destPath) {
+    const dir = path.dirname(destPath);
+    try {
+        await fs.access(dir, fsConstants.W_OK);
+    }
+    catch (e) {
+        const code = e && typeof e === 'object' && 'code' in e
+            ? e.code
+            : undefined;
+        if (code === 'EACCES' || code === 'EPERM') {
+            throw permissionDeniedInstallError(destPath);
+        }
+        throw e;
+    }
+}
+async function writeServiceFile(destPath, contents) {
+    try {
+        await fs.writeFile(destPath, contents, 'utf8');
+    }
+    catch (e) {
+        const code = e && typeof e === 'object' && 'code' in e
+            ? e.code
+            : undefined;
+        if (code === 'EACCES' || code === 'EPERM') {
+            throw permissionDeniedInstallError(destPath);
+        }
+        throw e;
+    }
+}
+/** launchd does not use your shell PATH — use an absolute interpreter path. */
+function resolveLaunchdRunner() {
+    const isBun = process.execPath.endsWith('bun') || process.execPath.endsWith('bun.exe');
+    if (isBun) {
+        return process.execPath;
+    }
+    const base = path.basename(process.execPath);
+    if (/^node(\.exe)?$/i.test(base)) {
+        return process.execPath;
+    }
+    try {
+        const nodePath = execFileSync('/usr/bin/which', ['node'], {
+            encoding: 'utf8',
+        }).trim();
+        if (nodePath) {
+            return nodePath;
+        }
+    }
+    catch {
+        // fall through
+    }
+    return 'node';
+}
+function launchctlBootoutSystem(plistPath, label) {
+    try {
+        execFileSync('launchctl', ['bootout', 'system', plistPath], {
+            stdio: 'ignore',
+        });
+        return;
+    }
+    catch {
+        // try service target (older registration style)
+    }
+    try {
+        execFileSync('launchctl', ['bootout', `system/${label}`], {
+            stdio: 'ignore',
+        });
+    }
+    catch {
+        // not loaded yet
+    }
+}
+function launchctlBootstrapSystem(plistPath) {
+    try {
+        execFileSync('launchctl', ['bootstrap', 'system', plistPath], {
+            encoding: 'utf8',
+            stdio: ['ignore', 'inherit', 'pipe'],
+        });
+    }
+    catch (e) {
+        const err = e;
+        const detail = err.stderr?.toString('utf8').trim() ?? '';
+        const suffix = detail ? `\n${detail}` : '';
+        throw new Error(`launchctl bootstrap failed for ${plistPath}.${suffix}\n\nTry:\n  sudo launchctl bootout system ${plistPath}\n  sudo beacon install`);
+    }
+}
 export async function installService() {
     const config = await loadConfig();
     // Service units do not inherit the install shell's env — key must be saved in config.
@@ -28,22 +122,25 @@ Environment=NODE_ENV=production
 WantedBy=multi-user.target
 `;
         const dest = '/etc/systemd/system/syslog-beacon.service';
-        await fs.writeFile(dest, serviceUnit, 'utf8');
+        await assertServiceInstallWritable(dest);
+        await writeServiceFile(dest, serviceUnit);
         execSync('systemctl daemon-reload');
         execSync('systemctl enable syslog-beacon');
         execSync('systemctl start syslog-beacon');
         console.log('[syslog-beacon] Installed systemd service');
     }
     else if (process.platform === 'darwin') {
+        const label = 'com.agentsoc.syslog-beacon';
+        const launchdRunner = resolveLaunchdRunner();
         const plist = `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
     <key>Label</key>
-    <string>com.agentsoc.syslog-beacon</string>
+    <string>${label}</string>
     <key>ProgramArguments</key>
     <array>
-        <string>${runner}</string>
+        <string>${launchdRunner}</string>
         <string>${cliPath}</string>
         <string>run</string>
     </array>
@@ -54,9 +151,13 @@ WantedBy=multi-user.target
 </dict>
 </plist>
 `;
-        const dest = '/Library/LaunchDaemons/com.agentsoc.syslog-beacon.plist';
-        await fs.writeFile(dest, plist, 'utf8');
-        execSync(`launchctl load -w ${dest}`);
+        const dest = `/Library/LaunchDaemons/${label}.plist`;
+        await assertServiceInstallWritable(dest);
+        launchctlBootoutSystem(dest, label);
+        await writeServiceFile(dest, plist);
+        execFileSync('chown', ['root:wheel', dest], { stdio: 'inherit' });
+        await fs.chmod(dest, 0o644);
+        launchctlBootstrapSystem(dest);
         console.log('[syslog-beacon] Installed launchd service');
     }
     else if (process.platform === 'win32') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsoc/beacon",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "description": "Lightweight, background-running log forwarder (beacon) for AgentSOC",
   "type": "module",
   "bin": {