@bitsocial/bitsocial-cli 0.19.71 → 0.19.72

package/README.md

@@ -421,7 +421,7 @@ EXAMPLES
   $ bitsocial challenge install ./my-local-challenge
 ```
 
-_See code: [src/cli/commands/challenge/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/challenge/install.ts)_
+_See code: [src/cli/commands/challenge/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/challenge/install.ts)_
 
 ## `bitsocial challenge list`
 
@@ -447,7 +447,7 @@ EXAMPLES
   $ bitsocial challenge list -q
 ```
 
-_See code: [src/cli/commands/challenge/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/challenge/list.ts)_
+_See code: [src/cli/commands/challenge/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/challenge/list.ts)_
 
 ## `bitsocial challenge ls`
 
@@ -501,7 +501,7 @@ EXAMPLES
   $ bitsocial challenge remove @scope/my-challenge
 ```
 
-_See code: [src/cli/commands/challenge/remove.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/challenge/remove.ts)_
+_See code: [src/cli/commands/challenge/remove.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/challenge/remove.ts)_
 
 ## `bitsocial challenge rm NAME`
 
@@ -615,7 +615,7 @@ EXAMPLES
     $ bitsocial community create --jsonFile ./create-options.json
 ```
 
-_See code: [src/cli/commands/community/create.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/create.ts)_
+_See code: [src/cli/commands/community/create.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/community/create.ts)_
 
 ## `bitsocial community delete ADDRESSES`
 
@@ -640,7 +640,7 @@ EXAMPLES
   $ bitsocial community delete 12D3KooWG3XbzoVyAE6Y9vHZKF64Yuuu4TjdgQKedk14iYmTEPWu
 ```
 
-_See code: [src/cli/commands/community/delete.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/delete.ts)_
+_See code: [src/cli/commands/community/delete.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/community/delete.ts)_
 
 ## `bitsocial community edit ADDRESS`
 
@@ -710,7 +710,7 @@ EXAMPLES
     $ bitsocial community edit bitsocial.bso --jsonFile ./edit-options.json
 ```
 
-_See code: [src/cli/commands/community/edit.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/edit.ts)_
+_See code: [src/cli/commands/community/edit.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/community/edit.ts)_
 
 ## `bitsocial community export [ADDRESS]`
 
@@ -751,7 +751,7 @@ EXAMPLES
   $ bitsocial community export --publicKey 12D3KooWG3XbzoVyAE6Y9vHZKF64Yuuu4TjdgQKedk14iYmTEPWu
 ```
 
-_See code: [src/cli/commands/community/export.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/export.ts)_
+_See code: [src/cli/commands/community/export.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/community/export.ts)_
 
 ## `bitsocial community get [ADDRESS]`
 
@@ -782,7 +782,7 @@ EXAMPLES
   $ bitsocial community get --publicKey 12D3KooWG3XbzoVyAE6Y9vHZKF64Yuuu4TjdgQKedk14iYmTEPWu
 ```
 
-_See code: [src/cli/commands/community/get.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/get.ts)_
+_See code: [src/cli/commands/community/get.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/community/get.ts)_
 
 ## `bitsocial community list`
 
@@ -805,7 +805,7 @@ EXAMPLES
   $ bitsocial community list
 ```
 
-_See code: [src/cli/commands/community/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/list.ts)_
+_See code: [src/cli/commands/community/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/community/list.ts)_
 
 ## `bitsocial community start ADDRESSES`
 
@@ -839,7 +839,7 @@ EXAMPLES
     $ bitsocial community start $(bitsocial community list -q) --concurrency 1
 ```
 
-_See code: [src/cli/commands/community/start.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/start.ts)_
+_See code: [src/cli/commands/community/start.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/community/start.ts)_
 
 ## `bitsocial community stop ADDRESSES`
 
@@ -864,7 +864,7 @@ EXAMPLES
   $ bitsocial community stop Qmb99crTbSUfKXamXwZBe829Vf6w5w5TktPkb6WstC9RFW
 ```
 
-_See code: [src/cli/commands/community/stop.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/community/stop.ts)_
+_See code: [src/cli/commands/community/stop.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/community/stop.ts)_
 
 ## `bitsocial daemon`
 
@@ -911,7 +911,7 @@ EXAMPLES
   $ bitsocial daemon --no-allowPrivateKeyExport
 ```
 
-_See code: [src/cli/commands/daemon.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/daemon.ts)_
+_See code: [src/cli/commands/daemon.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/daemon.ts)_
 
 ## `bitsocial help [COMMAND]`
 
@@ -977,7 +977,7 @@ EXAMPLES
   $ bitsocial logs --stdout -f
 ```
 
-_See code: [src/cli/commands/logs.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/logs.ts)_
+_See code: [src/cli/commands/logs.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/logs.ts)_
 
 ## `bitsocial update check`
 
@@ -994,7 +994,7 @@ EXAMPLES
   $ bitsocial update check
 ```
 
-_See code: [src/cli/commands/update/check.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/update/check.ts)_
+_See code: [src/cli/commands/update/check.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/update/check.ts)_
 
 ## `bitsocial update install [VERSION]`
 
@@ -1026,7 +1026,7 @@ EXAMPLES
   $ bitsocial update install --no-restart-daemons
 ```
 
-_See code: [src/cli/commands/update/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/update/install.ts)_
+_See code: [src/cli/commands/update/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/update/install.ts)_
 
 ## `bitsocial update versions`
 
@@ -1048,7 +1048,7 @@ EXAMPLES
   $ bitsocial update versions --limit 5
 ```
 
-_See code: [src/cli/commands/update/versions.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.71/src/cli/commands/update/versions.ts)_
+_See code: [src/cli/commands/update/versions.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.72/src/cli/commands/update/versions.ts)_
 <!-- commandsstop -->
 
 ## Contribution

package/dist/common-utils/daemon-state.d.ts

@@ -37,18 +37,37 @@ export interface DaemonState {
 export declare function parseSystemdUnitFromCgroup(content: string): string | undefined;
 /** Read the systemd unit owning `pid` (or the current process when "self") from /proc, or undefined. */
 export declare function readSystemdUnit(pid: number | "self"): Promise<string | undefined>;
+/**
+ * MainPID of a systemd unit as reported by the system manager, or undefined when it cannot be
+ * determined (systemctl missing, unit unknown, MainPID=0). `systemctl --user` units are invisible
+ * to the system manager and resolve to undefined — the daemon is then treated as unsupervised,
+ * matching the restart path, which also only drives the system manager.
+ */
+export declare function readUnitMainPid(unit: string): Promise<number | undefined>;
+/** Parent PID of `pid` from /proc/<pid>/stat, or undefined. */
+export declare function readParentPid(pid: number): Promise<number | undefined>;
 /**
  * Detect whether THIS process was started by systemd, and under which unit. systemd sets
- * $INVOCATION_ID for every service it spawns; the unit name comes from this process's own cgroup.
- * `env`/`readUnit` are injectable for testing. Returns undefined when not systemd-supervised.
+ * $INVOCATION_ID for every service it spawns and the unit name comes from this process's own
+ * cgroup — but BOTH are inherited by every descendant of any service (e.g. all processes inside a
+ * CI runner's agent service, issue #92), so unit membership alone is not ownership. The daemon is
+ * only systemd-supervised when it is the unit's main process (or its direct child, covering
+ * `ExecStart=/bin/sh -c …` wrappers); otherwise restarting the unit would bounce an unrelated
+ * service. `env`/`readUnit`/`getMainPid`/`self` are injectable for testing. Returns undefined when
+ * not systemd-supervised.
  */
-export declare function detectSelfSupervisor(env?: NodeJS.ProcessEnv, readUnit?: (pid: number | "self") => Promise<string | undefined>): Promise<DaemonSupervisor | undefined>;
+export declare function detectSelfSupervisor(env?: NodeJS.ProcessEnv, readUnit?: (pid: number | "self") => Promise<string | undefined>, getMainPid?: (unit: string) => Promise<number | undefined>, self?: {
+    pid: number;
+    ppid: number;
+}): Promise<DaemonSupervisor | undefined>;
 /**
  * Resolve the supervisor for a daemon described by `state`. Prefers the `supervisor` it recorded
- * at startup; for legacy daemons that predate that field, falls back to inferring the unit from the
- * live process's cgroup. `readUnit` is injectable for testing.
+ * at startup (already ownership-verified by detectSelfSupervisor); for legacy daemons that predate
+ * that field, falls back to inferring the unit from the live process's cgroup, with the same
+ * MainPID ownership check as detectSelfSupervisor (issue #92).
+ * `readUnit`/`getMainPid`/`getParentPid` are injectable for testing.
  */
-export declare function resolveDaemonSupervisor(state: DaemonState, readUnit?: (pid: number | "self") => Promise<string | undefined>): Promise<DaemonSupervisor | undefined>;
+export declare function resolveDaemonSupervisor(state: DaemonState, readUnit?: (pid: number | "self") => Promise<string | undefined>, getMainPid?: (unit: string) => Promise<number | undefined>, getParentPid?: (pid: number) => Promise<number | undefined>): Promise<DaemonSupervisor | undefined>;
 /** Write a daemon state file atomically (write to .tmp then rename). */
 export declare function writeDaemonState(state: DaemonState): Promise<void>;
 /** Read all state files from the daemon states directory. */

package/dist/common-utils/daemon-state.js

@@ -42,27 +42,76 @@ export async function readSystemdUnit(pid) {
         return undefined; // no /proc (non-Linux) or unreadable — treat as unsupervised
     }
 }
+/**
+ * MainPID of a systemd unit as reported by the system manager, or undefined when it cannot be
+ * determined (systemctl missing, unit unknown, MainPID=0). `systemctl --user` units are invisible
+ * to the system manager and resolve to undefined — the daemon is then treated as unsupervised,
+ * matching the restart path, which also only drives the system manager.
+ */
+export async function readUnitMainPid(unit) {
+    try {
+        const { stdout } = await execFileAsync("systemctl", ["show", "--property=MainPID", "--value", unit]);
+        const mainPid = Number(String(stdout).trim());
+        return Number.isInteger(mainPid) && mainPid > 0 ? mainPid : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Parent PID of `pid` from /proc/<pid>/stat, or undefined. */
+export async function readParentPid(pid) {
+    try {
+        const stat = await fs.readFile(`/proc/${pid}/stat`, "utf-8");
+        // Format: `pid (comm) state ppid …` — comm may itself contain spaces or parens, so the
+        // fields are only parseable after the LAST closing paren.
+        const afterComm = stat.slice(stat.lastIndexOf(")") + 2);
+        const ppid = Number(afterComm.split(" ")[1]);
+        return Number.isInteger(ppid) && ppid > 0 ? ppid : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 /**
  * Detect whether THIS process was started by systemd, and under which unit. systemd sets
- * $INVOCATION_ID for every service it spawns; the unit name comes from this process's own cgroup.
- * `env`/`readUnit` are injectable for testing. Returns undefined when not systemd-supervised.
+ * $INVOCATION_ID for every service it spawns and the unit name comes from this process's own
+ * cgroup — but BOTH are inherited by every descendant of any service (e.g. all processes inside a
+ * CI runner's agent service, issue #92), so unit membership alone is not ownership. The daemon is
+ * only systemd-supervised when it is the unit's main process (or its direct child, covering
+ * `ExecStart=/bin/sh -c …` wrappers); otherwise restarting the unit would bounce an unrelated
+ * service. `env`/`readUnit`/`getMainPid`/`self` are injectable for testing. Returns undefined when
+ * not systemd-supervised.
  */
-export async function detectSelfSupervisor(env = process.env, readUnit = readSystemdUnit) {
+export async function detectSelfSupervisor(env = process.env, readUnit = readSystemdUnit, getMainPid = readUnitMainPid, self = { pid: process.pid, ppid: process.ppid }) {
     if (!env.INVOCATION_ID)
         return undefined;
     const unit = await readUnit("self");
-    return unit ? { type: "systemd", unit } : undefined;
+    if (!unit)
+        return undefined;
+    const mainPid = await getMainPid(unit);
+    if (mainPid === undefined || (mainPid !== self.pid && mainPid !== self.ppid))
+        return undefined;
+    return { type: "systemd", unit };
 }
 /**
  * Resolve the supervisor for a daemon described by `state`. Prefers the `supervisor` it recorded
- * at startup; for legacy daemons that predate that field, falls back to inferring the unit from the
- * live process's cgroup. `readUnit` is injectable for testing.
+ * at startup (already ownership-verified by detectSelfSupervisor); for legacy daemons that predate
+ * that field, falls back to inferring the unit from the live process's cgroup, with the same
+ * MainPID ownership check as detectSelfSupervisor (issue #92).
+ * `readUnit`/`getMainPid`/`getParentPid` are injectable for testing.
  */
-export async function resolveDaemonSupervisor(state, readUnit = readSystemdUnit) {
+export async function resolveDaemonSupervisor(state, readUnit = readSystemdUnit, getMainPid = readUnitMainPid, getParentPid = readParentPid) {
     if (state.supervisor)
         return state.supervisor;
     const unit = await readUnit(state.pid);
-    return unit ? { type: "systemd", unit } : undefined;
+    if (!unit)
+        return undefined;
+    const mainPid = await getMainPid(unit);
+    if (mainPid === undefined)
+        return undefined;
+    if (mainPid !== state.pid && mainPid !== (await getParentPid(state.pid)))
+        return undefined;
+    return { type: "systemd", unit };
 }
 function stateFilePath(pid) {
     return path.join(DAEMON_STATES_DIR, `${pid}-daemon.state`);

package/oclif.manifest.json

@@ -871,5 +871,5 @@
       ]
     }
   },
-  "version": "0.19.71"
+  "version": "0.19.72"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bitsocial/bitsocial-cli",
-    "version": "0.19.71",
+    "version": "0.19.72",
     "description": "Command line interface to Bitsocial API",
     "types": "./dist/index.d.ts",
     "homepage": "https://github.com/bitsocialnet/bitsocial-cli",
@@ -119,7 +119,7 @@
         "@oclif/plugin-help": "6.2.36",
         "@oclif/plugin-not-found": "3.2.73",
         "@oclif/table": "0.5.1",
-        "@pkcprotocol/pkc-js": "0.0.45",
+        "@pkcprotocol/pkc-js": "0.0.47",
         "dataobject-parser": "1.2.22",
         "decompress": "4.2.1",
         "env-paths": "2.2.1",