@bitsocial/bitsocial-cli 0.19.69 → 0.19.71

package/README.md

@@ -421,7 +421,7 @@ EXAMPLES
   $ bitsocial challenge install ./my-local-challenge
 ```
 
-_See code: [src/cli/commands/challenge/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/challenge/install.ts)_
+_See code: [src/cli/commands/challenge/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/challenge/install.ts)_
 
 ## `bitsocial challenge list`
 
@@ -447,7 +447,7 @@ EXAMPLES
   $ bitsocial challenge list -q
 ```
 
-_See code: [src/cli/commands/challenge/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/challenge/list.ts)_
+_See code: [src/cli/commands/challenge/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/challenge/list.ts)_
 
 ## `bitsocial challenge ls`
 
@@ -501,7 +501,7 @@ EXAMPLES
   $ bitsocial challenge remove @scope/my-challenge
 ```
 
-_See code: [src/cli/commands/challenge/remove.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/challenge/remove.ts)_
+_See code: [src/cli/commands/challenge/remove.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/challenge/remove.ts)_
 
 ## `bitsocial challenge rm NAME`
 
@@ -615,7 +615,7 @@ EXAMPLES
     $ bitsocial community create --jsonFile ./create-options.json
 ```
 
-_See code: [src/cli/commands/community/create.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/community/create.ts)_
+_See code: [src/cli/commands/community/create.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/create.ts)_
 
 ## `bitsocial community delete ADDRESSES`
 
@@ -640,7 +640,7 @@ EXAMPLES
   $ bitsocial community delete 12D3KooWG3XbzoVyAE6Y9vHZKF64Yuuu4TjdgQKedk14iYmTEPWu
 ```
 
-_See code: [src/cli/commands/community/delete.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/community/delete.ts)_
+_See code: [src/cli/commands/community/delete.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/delete.ts)_
 
 ## `bitsocial community edit ADDRESS`
 
@@ -710,7 +710,7 @@ EXAMPLES
     $ bitsocial community edit bitsocial.bso --jsonFile ./edit-options.json
 ```
 
-_See code: [src/cli/commands/community/edit.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/community/edit.ts)_
+_See code: [src/cli/commands/community/edit.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/edit.ts)_
 
 ## `bitsocial community export [ADDRESS]`
 
@@ -751,7 +751,7 @@ EXAMPLES
   $ bitsocial community export --publicKey 12D3KooWG3XbzoVyAE6Y9vHZKF64Yuuu4TjdgQKedk14iYmTEPWu
 ```
 
-_See code: [src/cli/commands/community/export.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/community/export.ts)_
+_See code: [src/cli/commands/community/export.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/export.ts)_
 
 ## `bitsocial community get [ADDRESS]`
 
@@ -782,7 +782,7 @@ EXAMPLES
   $ bitsocial community get --publicKey 12D3KooWG3XbzoVyAE6Y9vHZKF64Yuuu4TjdgQKedk14iYmTEPWu
 ```
 
-_See code: [src/cli/commands/community/get.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/community/get.ts)_
+_See code: [src/cli/commands/community/get.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/get.ts)_
 
 ## `bitsocial community list`
 
@@ -805,7 +805,7 @@ EXAMPLES
   $ bitsocial community list
 ```
 
-_See code: [src/cli/commands/community/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/community/list.ts)_
+_See code: [src/cli/commands/community/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/list.ts)_
 
 ## `bitsocial community start ADDRESSES`
 
@@ -839,7 +839,7 @@ EXAMPLES
     $ bitsocial community start $(bitsocial community list -q) --concurrency 1
 ```
 
-_See code: [src/cli/commands/community/start.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/community/start.ts)_
+_See code: [src/cli/commands/community/start.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/start.ts)_
 
 ## `bitsocial community stop ADDRESSES`
 
@@ -864,7 +864,7 @@ EXAMPLES
   $ bitsocial community stop Qmb99crTbSUfKXamXwZBe829Vf6w5w5TktPkb6WstC9RFW
 ```
 
-_See code: [src/cli/commands/community/stop.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/community/stop.ts)_
+_See code: [src/cli/commands/community/stop.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/stop.ts)_
 
 ## `bitsocial daemon`
 
@@ -911,7 +911,7 @@ EXAMPLES
   $ bitsocial daemon --no-allowPrivateKeyExport
 ```
 
-_See code: [src/cli/commands/daemon.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/daemon.ts)_
+_See code: [src/cli/commands/daemon.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/daemon.ts)_
 
 ## `bitsocial help [COMMAND]`
 
@@ -977,7 +977,7 @@ EXAMPLES
   $ bitsocial logs --stdout -f
 ```
 
-_See code: [src/cli/commands/logs.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/logs.ts)_
+_See code: [src/cli/commands/logs.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/logs.ts)_
 
 ## `bitsocial update check`
 
@@ -994,7 +994,7 @@ EXAMPLES
   $ bitsocial update check
 ```
 
-_See code: [src/cli/commands/update/check.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/update/check.ts)_
+_See code: [src/cli/commands/update/check.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/update/check.ts)_
 
 ## `bitsocial update install [VERSION]`
 
@@ -1026,7 +1026,7 @@ EXAMPLES
   $ bitsocial update install --no-restart-daemons
 ```
 
-_See code: [src/cli/commands/update/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/update/install.ts)_
+_See code: [src/cli/commands/update/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/update/install.ts)_
 
 ## `bitsocial update versions`
 
@@ -1048,7 +1048,7 @@ EXAMPLES
   $ bitsocial update versions --limit 5
 ```
 
-_See code: [src/cli/commands/update/versions.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.69/src/cli/commands/update/versions.ts)_
+_See code: [src/cli/commands/update/versions.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/update/versions.ts)_
 <!-- commandsstop -->
 
 ## Contribution

package/dist/cli/commands/daemon.js

@@ -9,7 +9,7 @@ import { printBanner } from "../ascii-banner.js";
 import { loadChallengesIntoPKC, formatChallengeNameVersion } from "../../challenge-packages/challenge-utils.js";
 import { migrateDataDirectory } from "../../common-utils/data-migration.js";
 import { createBsoResolvers, DEFAULT_PROVIDERS } from "../../common-utils/resolvers.js";
-import { pruneStaleStates, writeDaemonState, deleteDaemonState, DAEMON_SHUTDOWN_TIMEOUT_MS } from "../../common-utils/daemon-state.js";
+import { pruneStaleStates, writeDaemonState, deleteDaemonState, detectSelfSupervisor, DAEMON_SHUTDOWN_TIMEOUT_MS } from "../../common-utils/daemon-state.js";
 import { createDaemonFileLogger } from "../../common-utils/daemon-file-logger.js";
 import fs from "fs";
 import fsPromise from "fs/promises";
@@ -260,13 +260,17 @@ export default class Daemon extends Command {
             migrateDataDirectory(mergedPkcOptions.dataPath);
             // Prune stale daemon state files (dead PIDs from crashed daemons)
             await pruneStaleStates();
-            // Persist this daemon's PID and startup args so `bitsocial update install --restart-daemons` can stop and restart it
+            // Persist this daemon's PID and startup args so `bitsocial update install --restart-daemons` can stop and restart it.
+            // Also record the supervisor (e.g. systemd) so the updater restarts via the supervisor instead of spawning a
+            // detached daemon that would compete with it for the RPC port (issue #82).
             const daemonArgv = process.argv.slice(process.argv.indexOf("daemon") + 1);
+            const supervisor = await detectSelfSupervisor();
             await writeDaemonState({
                 pid: process.pid,
                 startedAt: new Date().toISOString(),
                 argv: daemonArgv,
-                pkcRpcUrl: pkcRpcUrl.toString()
+                pkcRpcUrl: pkcRpcUrl.toString(),
+                ...(supervisor ? { supervisor } : {})
             });
             // Create BSO name resolvers for .bso/.eth domain resolution
             const bsoResolvers = createBsoResolvers(flags.chainProviderUrls);

package/dist/cli/commands/update/install.d.ts

@@ -16,5 +16,8 @@ export default class Install extends Command {
      * but owned by another user, so we keep waiting.
      */
     private _waitForProcessExit;
-    private _restartDaemons;
+    /** Build the side effects that the restart orchestration drives (split out so the routing is testable). */
+    private _daemonLifecycle;
+    /** Restart a supervised daemon onto the new binary by asking its supervisor (e.g. systemd). */
+    private _restartViaSupervisor;
 }

package/dist/cli/commands/update/install.js

@@ -4,7 +4,9 @@ import tcpPortUsed from "tcp-port-used";
 import { fetchLatestVersion, installGlobal } from "../../../update/npm-registry.js";
 import { fastInstallGlobal } from "../../../update/fast-update.js";
 import { compareVersions } from "../../../update/semver.js";
-import { getAliveDaemonStates, DAEMON_SHUTDOWN_TIMEOUT_MS } from "../../../common-utils/daemon-state.js";
+import { systemctlRestart } from "../../../update/systemctl.js";
+import { getAliveDaemonStates, resolveDaemonSupervisor, DAEMON_SHUTDOWN_TIMEOUT_MS } from "../../../common-utils/daemon-state.js";
+import { planDaemonRestarts, stopUnmanagedDaemons, startUnmanagedDaemons, restartManagedDaemons } from "../../../update/restart-orchestration.js";
 export default class Install extends Command {
     static description = "Install a specific version of bitsocial from npm";
     static args = {
@@ -34,40 +36,26 @@ export default class Install extends Command {
     ];
     async run() {
         const { args, flags } = await this.parse(Install);
-        // Check for running daemons via state files
+        // Discover running daemons and split them into supervisor-managed vs. updater-managed (issue #82).
+        // Supervised daemons (e.g. systemd) are restarted through their supervisor; spawning a detached
+        // replacement ourselves would create a process the supervisor doesn't own that competes with it
+        // for the RPC port and triggers a restart loop.
         const aliveDaemons = await getAliveDaemonStates();
+        const plan = await planDaemonRestarts(aliveDaemons, (d) => resolveDaemonSupervisor(d));
+        const lifecycle = this._daemonLifecycle();
         if (aliveDaemons.length > 0) {
             if (!flags["restart-daemons"]) {
                 this.error(`${aliveDaemons.length} daemon(s) running. Stop them first, then retry.`, { exit: 1 });
             }
-            // Stop all running daemons
-            for (const d of aliveDaemons) {
-                this.log(`Stopping daemon (PID ${d.pid})...`);
-                try {
-                    process.kill(d.pid, "SIGINT");
-                }
-                catch (e) {
-                    if (e.code === "ESRCH") {
-                        this.log(`  PID ${d.pid} already exited.`);
-                        continue;
-                    }
-                    throw e;
-                }
+            // Stop only the unsupervised daemons before the binary swap. Supervised daemons keep running
+            // and are restarted by their supervisor afterwards (see _restartViaSupervisor).
+            await stopUnmanagedDaemons(plan, lifecycle);
+            if (plan.unmanaged.length > 0)
+                this.log("All unsupervised daemons stopped.");
+            for (const { daemon, supervisor } of plan.managed) {
+                this.log(`Daemon (PID ${daemon.pid}) is managed by ${supervisor.type} (${supervisor.unit}); ` +
+                    `it will be restarted by its supervisor.`);
             }
-            // Wait for each daemon process to fully exit — NOT just for its RPC port to free.
-            // The daemon releases its RPC port (daemonServer.destroy()) before it finishes killing
-            // its kubo child, so a port-only wait lets us restart while the old kubo still holds the
-            // IPFS API port; the new daemon then dies on startup with "IPFS API port already in use"
-            // (issue #70). The daemon's exit hook kills kubo before the process exits, so waiting for
-            // the PID to disappear guarantees the kubo port is free before we restart.
-            for (const d of aliveDaemons) {
-                this.log(`Waiting for daemon (PID ${d.pid}) to exit...`);
-                const exited = await this._waitForProcessExit(d.pid, DAEMON_SHUTDOWN_TIMEOUT_MS);
-                if (!exited) {
-                    this.error(`Daemon (PID ${d.pid}) did not shut down within ${DAEMON_SHUTDOWN_TIMEOUT_MS / 1000} seconds.`, { exit: 1 });
-                }
-            }
-            this.log("All daemons stopped.");
         }
         // Resolve the target version
         let targetVersion;
@@ -86,10 +74,10 @@ export default class Install extends Command {
         // Skip if already on this version (unless --force)
         if (compareVersions(current, targetVersion) === 0 && !flags.force) {
             this.log(`Already on v${current}. Use --force to reinstall.`);
-            if (aliveDaemons.length > 0 && flags["restart-daemons"]) {
-                // We stopped daemons but don't need to update — restart them
-                await this._restartDaemons(aliveDaemons);
-            }
+            // We stopped the unsupervised daemons but aren't updating — bring them back. Supervised daemons
+            // were never stopped, so leave them running (no unnecessary service bounce).
+            if (flags["restart-daemons"])
+                await startUnmanagedDaemons(plan, lifecycle);
             return;
         }
         this.log(`Installing bitsocial-cli@${targetVersion}...`);
@@ -114,10 +102,13 @@ export default class Install extends Command {
             }
         }
         this.log(`Installed bitsocial v${targetVersion} (was v${current}).`);
-        // Restart daemons with the new binary
+        // Restart daemons with the new binary: re-spawn the unsupervised ones we stopped, and ask each
+        // supervisor to restart its daemon onto the new binary.
         if (aliveDaemons.length > 0 && flags["restart-daemons"]) {
-            await this._restartDaemons(aliveDaemons);
+            await startUnmanagedDaemons(plan, lifecycle);
+            await restartManagedDaemons(plan, lifecycle);
             this.log("To see the daemon logs run `bitsocial logs --stdout`");
+            this.log("Check community status with: bitsocial community list");
         }
     }
     /**
@@ -147,32 +138,69 @@ export default class Install extends Command {
         }
         return false;
     }
-    async _restartDaemons(daemons) {
-        this.log(`Restarting ${daemons.length} daemon(s)...`);
-        for (const d of daemons) {
-            const argStr = d.argv.length > 0 ? d.argv.join(" ") : "(defaults)";
-            this.log(`  Starting daemon with args: ${argStr}`);
-            const child = spawn("bitsocial", ["daemon", ...d.argv], {
-                detached: true,
-                stdio: "ignore"
-            });
-            child.unref();
-            if (!child.pid) {
-                this.warn(`Failed to spawn daemon for args: ${argStr}`);
-                continue;
-            }
-            // Wait briefly for the daemon's RPC port to come up
-            const url = new URL(d.pkcRpcUrl);
-            const port = Number(url.port);
-            const started = await tcpPortUsed.waitUntilUsed(port, 500, 30000).then(() => true).catch(() => false);
-            if (started) {
-                this.log(`  Daemon started (port ${port}).`);
-            }
-            else {
-                this.warn(`  Daemon may not have started — port ${port} not responding after 30s. Check logs with: bitsocial logs`);
+    /** Build the side effects that the restart orchestration drives (split out so the routing is testable). */
+    _daemonLifecycle() {
+        return {
+            stopUnmanaged: async (daemon) => {
+                this.log(`Stopping daemon (PID ${daemon.pid})...`);
+                try {
+                    process.kill(daemon.pid, "SIGINT");
+                }
+                catch (e) {
+                    if (e.code === "ESRCH") {
+                        this.log(`  PID ${daemon.pid} already exited.`);
+                        return;
+                    }
+                    throw e;
+                }
+                // Wait for the process to fully exit — NOT just for its RPC port to free. The daemon
+                // releases its RPC port (daemonServer.destroy()) before it finishes killing its kubo
+                // child, so a port-only wait lets us restart while the old kubo still holds the IPFS API
+                // port; the new daemon then dies on "IPFS API port already in use" (issue #70). The
+                // daemon's exit hook kills kubo before exiting, so "PID gone" guarantees kubo is free.
+                this.log(`Waiting for daemon (PID ${daemon.pid}) to exit...`);
+                const exited = await this._waitForProcessExit(daemon.pid, DAEMON_SHUTDOWN_TIMEOUT_MS);
+                if (!exited) {
+                    this.error(`Daemon (PID ${daemon.pid}) did not shut down within ${DAEMON_SHUTDOWN_TIMEOUT_MS / 1000} seconds.`, { exit: 1 });
+                }
+            },
+            startUnmanaged: async (daemon) => {
+                const argStr = daemon.argv.length > 0 ? daemon.argv.join(" ") : "(defaults)";
+                this.log(`Restarting daemon with args: ${argStr}`);
+                const child = spawn("bitsocial", ["daemon", ...daemon.argv], {
+                    detached: true,
+                    stdio: "ignore"
+                });
+                child.unref();
+                if (!child.pid) {
+                    this.warn(`Failed to spawn daemon for args: ${argStr}`);
+                    return;
+                }
+                // Wait briefly for the daemon's RPC port to come up
+                const port = Number(new URL(daemon.pkcRpcUrl).port);
+                const started = await tcpPortUsed.waitUntilUsed(port, 500, 30000).then(() => true).catch(() => false);
+                if (started) {
+                    this.log(`  Daemon started (port ${port}).`);
+                }
+                else {
+                    this.warn(`  Daemon may not have started — port ${port} not responding after 30s. Check logs with: bitsocial logs`);
+                }
+            },
+            restartManaged: async (supervisor) => {
+                await this._restartViaSupervisor(supervisor);
             }
+        };
+    }
+    /** Restart a supervised daemon onto the new binary by asking its supervisor (e.g. systemd). */
+    async _restartViaSupervisor(supervisor) {
+        this.log(`Restarting ${supervisor.type} unit ${supervisor.unit} so it picks up the new binary...`);
+        try {
+            await systemctlRestart(supervisor.unit);
+            this.log(`  ${supervisor.unit} restarted.`);
+        }
+        catch (err) {
+            this.error(`Updated the binary but failed to restart ${supervisor.type} unit ${supervisor.unit}: ${err.message}. ` +
+                `Restart it manually, e.g. 'sudo systemctl restart ${supervisor.unit}'.`, { exit: 1 });
         }
-        this.log("Check community status with: bitsocial community list");
-        this.log("Check logs with: bitsocial logs");
     }
 }

package/dist/common-utils/daemon-state.d.ts

@@ -5,6 +5,17 @@
  * a slow-but-valid shutdown (within the daemon's own contract) aborts the update midway.
  */
 export declare const DAEMON_SHUTDOWN_TIMEOUT_MS = 120000;
+/**
+ * How a daemon's lifecycle is managed by an external supervisor. Recorded at startup so that
+ * `update install` restarts the daemon through its supervisor instead of spawning a detached
+ * replacement that would compete with the supervisor for the RPC port (issue #82).
+ */
+export interface DaemonSupervisor {
+    /** The supervisor managing this daemon. Only systemd is detected today. */
+    type: "systemd";
+    /** The unit that owns the daemon, e.g. "bitsocial.service". */
+    unit: string;
+}
 export interface DaemonState {
     pid: number;
     startedAt: string;
@@ -12,7 +23,32 @@ export interface DaemonState {
     pkcRpcUrl: string;
     /** OS-reported process start time, used to detect PID reuse. Absent in legacy state files. */
     procStartTime?: string;
+    /** External supervisor managing this daemon, if any. Absent for standalone or legacy daemons. */
+    supervisor?: DaemonSupervisor;
 }
+/**
+ * Parse the systemd service unit a process belongs to out of its cgroup contents, or undefined.
+ *   cgroup v2: a single line `0::/system.slice/bitsocial.service`
+ *   cgroup v1: many `id:controller:/system.slice/bitsocial.service` lines (all point at the same unit)
+ * The unit is the leaf of the cgroup path when it ends in `.service`. A user session has a `.scope`
+ * leaf (e.g. `…/session-36.scope`) — not a service — so it returns undefined (that daemon is not
+ * systemd-supervised even if it happens to live under system.slice somewhere up the tree).
+ */
+export declare function parseSystemdUnitFromCgroup(content: string): string | undefined;
+/** Read the systemd unit owning `pid` (or the current process when "self") from /proc, or undefined. */
+export declare function readSystemdUnit(pid: number | "self"): Promise<string | undefined>;
+/**
+ * Detect whether THIS process was started by systemd, and under which unit. systemd sets
+ * $INVOCATION_ID for every service it spawns; the unit name comes from this process's own cgroup.
+ * `env`/`readUnit` are injectable for testing. Returns undefined when not systemd-supervised.
+ */
+export declare function detectSelfSupervisor(env?: NodeJS.ProcessEnv, readUnit?: (pid: number | "self") => Promise<string | undefined>): Promise<DaemonSupervisor | undefined>;
+/**
+ * Resolve the supervisor for a daemon described by `state`. Prefers the `supervisor` it recorded
+ * at startup; for legacy daemons that predate that field, falls back to inferring the unit from the
+ * live process's cgroup. `readUnit` is injectable for testing.
+ */
+export declare function resolveDaemonSupervisor(state: DaemonState, readUnit?: (pid: number | "self") => Promise<string | undefined>): Promise<DaemonSupervisor | undefined>;
 /** Write a daemon state file atomically (write to .tmp then rename). */
 export declare function writeDaemonState(state: DaemonState): Promise<void>;
 /** Read all state files from the daemon states directory. */

package/dist/common-utils/daemon-state.js

@@ -12,6 +12,58 @@ const DAEMON_STATES_DIR = path.join(defaults.PKC_DATA_PATH, ".daemon_states");
  * a slow-but-valid shutdown (within the daemon's own contract) aborts the update midway.
  */
 export const DAEMON_SHUTDOWN_TIMEOUT_MS = 120000;
+/**
+ * Parse the systemd service unit a process belongs to out of its cgroup contents, or undefined.
+ *   cgroup v2: a single line `0::/system.slice/bitsocial.service`
+ *   cgroup v1: many `id:controller:/system.slice/bitsocial.service` lines (all point at the same unit)
+ * The unit is the leaf of the cgroup path when it ends in `.service`. A user session has a `.scope`
+ * leaf (e.g. `…/session-36.scope`) — not a service — so it returns undefined (that daemon is not
+ * systemd-supervised even if it happens to live under system.slice somewhere up the tree).
+ */
+export function parseSystemdUnitFromCgroup(content) {
+    for (const line of content.split("\n")) {
+        if (!line.trim())
+            continue;
+        // hierarchy-id:controller-list:cgroup-path — the path is the last colon-separated field
+        const cgroupPath = line.slice(line.lastIndexOf(":") + 1);
+        const leaf = cgroupPath.slice(cgroupPath.lastIndexOf("/") + 1);
+        if (leaf.endsWith(".service"))
+            return leaf;
+    }
+    return undefined;
+}
+/** Read the systemd unit owning `pid` (or the current process when "self") from /proc, or undefined. */
+export async function readSystemdUnit(pid) {
+    try {
+        const content = await fs.readFile(`/proc/${pid}/cgroup`, "utf-8");
+        return parseSystemdUnitFromCgroup(content);
+    }
+    catch {
+        return undefined; // no /proc (non-Linux) or unreadable — treat as unsupervised
+    }
+}
+/**
+ * Detect whether THIS process was started by systemd, and under which unit. systemd sets
+ * $INVOCATION_ID for every service it spawns; the unit name comes from this process's own cgroup.
+ * `env`/`readUnit` are injectable for testing. Returns undefined when not systemd-supervised.
+ */
+export async function detectSelfSupervisor(env = process.env, readUnit = readSystemdUnit) {
+    if (!env.INVOCATION_ID)
+        return undefined;
+    const unit = await readUnit("self");
+    return unit ? { type: "systemd", unit } : undefined;
+}
+/**
+ * Resolve the supervisor for a daemon described by `state`. Prefers the `supervisor` it recorded
+ * at startup; for legacy daemons that predate that field, falls back to inferring the unit from the
+ * live process's cgroup. `readUnit` is injectable for testing.
+ */
+export async function resolveDaemonSupervisor(state, readUnit = readSystemdUnit) {
+    if (state.supervisor)
+        return state.supervisor;
+    const unit = await readUnit(state.pid);
+    return unit ? { type: "systemd", unit } : undefined;
+}
 function stateFilePath(pid) {
     return path.join(DAEMON_STATES_DIR, `${pid}-daemon.state`);
 }

package/dist/update/restart-orchestration.d.ts

@@ -0,0 +1,34 @@
+import type { DaemonState, DaemonSupervisor } from "../common-utils/daemon-state.js";
+export interface ManagedDaemon {
+    daemon: DaemonState;
+    supervisor: DaemonSupervisor;
+}
+export interface DaemonPlan {
+    /** Daemons restarted through their supervisor (left running across the binary swap). */
+    managed: ManagedDaemon[];
+    /** Daemons the updater stops and re-spawns itself. */
+    unmanaged: DaemonState[];
+}
+/** The side effects of restarting daemons; injected so the orchestration is testable. */
+export interface DaemonLifecycle {
+    /** Take an unsupervised daemon down (SIGINT) and wait for it to fully exit, before the binary swap. */
+    stopUnmanaged(daemon: DaemonState): Promise<void>;
+    /** Re-spawn an unsupervised daemon as a detached process with its original args, after the binary swap. */
+    startUnmanaged(daemon: DaemonState): Promise<void>;
+    /** Ask a supervisor to restart its daemon onto the new binary (e.g. `systemctl restart <unit>`). */
+    restartManaged(supervisor: DaemonSupervisor): Promise<void>;
+}
+/** Partition the alive daemons into supervised vs. updater-managed. */
+export declare function planDaemonRestarts(daemons: DaemonState[], resolve: (daemon: DaemonState) => Promise<DaemonSupervisor | undefined>): Promise<DaemonPlan>;
+/**
+ * Stop the daemons that must come down before the binary swap: only the unsupervised ones.
+ * Supervised daemons keep running — their supervisor restarts them after the swap.
+ */
+export declare function stopUnmanagedDaemons(plan: DaemonPlan, lifecycle: DaemonLifecycle): Promise<void>;
+/** Re-spawn the unsupervised daemons that were stopped. Safe to call even after a no-op update. */
+export declare function startUnmanagedDaemons(plan: DaemonPlan, lifecycle: DaemonLifecycle): Promise<void>;
+/**
+ * Restart supervised daemons onto the new binary, deduplicated per unit. Call only after a real
+ * install — a no-op update shouldn't bounce a supervised service, since it was never stopped.
+ */
+export declare function restartManagedDaemons(plan: DaemonPlan, lifecycle: DaemonLifecycle): Promise<void>;

package/dist/update/restart-orchestration.js

@@ -0,0 +1,40 @@
+/** Partition the alive daemons into supervised vs. updater-managed. */
+export async function planDaemonRestarts(daemons, resolve) {
+    const managed = [];
+    const unmanaged = [];
+    for (const daemon of daemons) {
+        const supervisor = await resolve(daemon);
+        if (supervisor)
+            managed.push({ daemon, supervisor });
+        else
+            unmanaged.push(daemon);
+    }
+    return { managed, unmanaged };
+}
+/**
+ * Stop the daemons that must come down before the binary swap: only the unsupervised ones.
+ * Supervised daemons keep running — their supervisor restarts them after the swap.
+ */
+export async function stopUnmanagedDaemons(plan, lifecycle) {
+    for (const daemon of plan.unmanaged)
+        await lifecycle.stopUnmanaged(daemon);
+}
+/** Re-spawn the unsupervised daemons that were stopped. Safe to call even after a no-op update. */
+export async function startUnmanagedDaemons(plan, lifecycle) {
+    for (const daemon of plan.unmanaged)
+        await lifecycle.startUnmanaged(daemon);
+}
+/**
+ * Restart supervised daemons onto the new binary, deduplicated per unit. Call only after a real
+ * install — a no-op update shouldn't bounce a supervised service, since it was never stopped.
+ */
+export async function restartManagedDaemons(plan, lifecycle) {
+    const restarted = new Set();
+    for (const { supervisor } of plan.managed) {
+        const key = `${supervisor.type}:${supervisor.unit}`;
+        if (restarted.has(key))
+            continue;
+        restarted.add(key);
+        await lifecycle.restartManaged(supervisor);
+    }
+}

package/dist/update/systemctl.d.ts

@@ -0,0 +1,6 @@
+export type Exec = (cmd: string, args: string[]) => Promise<unknown>;
+/**
+ * Restart a systemd unit so it picks up a freshly installed binary. Rejects (propagating the
+ * underlying error) if systemctl is missing or the restart fails. `exec` is injectable for testing.
+ */
+export declare function systemctlRestart(unit: string, exec?: Exec): Promise<void>;

package/dist/update/systemctl.js

@@ -0,0 +1,10 @@
+import { execFile } from "child_process";
+import { promisify } from "util";
+const execFileAsync = promisify(execFile);
+/**
+ * Restart a systemd unit so it picks up a freshly installed binary. Rejects (propagating the
+ * underlying error) if systemctl is missing or the restart fails. `exec` is injectable for testing.
+ */
+export async function systemctlRestart(unit, exec = execFileAsync) {
+    await exec("systemctl", ["restart", unit]);
+}

package/oclif.manifest.json

@@ -871,5 +871,5 @@
       ]
     }
   },
-  "version": "0.19.69"
+  "version": "0.19.71"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bitsocial/bitsocial-cli",
-    "version": "0.19.69",
+    "version": "0.19.71",
     "description": "Command line interface to Bitsocial API",
     "types": "./dist/index.d.ts",
     "homepage": "https://github.com/bitsocialnet/bitsocial-cli",
@@ -119,7 +119,7 @@
         "@oclif/plugin-help": "6.2.36",
         "@oclif/plugin-not-found": "3.2.73",
         "@oclif/table": "0.5.1",
-        "@pkcprotocol/pkc-js": "0.0.41",
+        "@pkcprotocol/pkc-js": "0.0.45",
         "dataobject-parser": "1.2.22",
         "decompress": "4.2.1",
         "env-paths": "2.2.1",