@neurosec/sentry 1.0.11 → 1.0.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neurosec/sentry",
-  "version": "1.0.11",
+  "version": "1.0.13",
   "description": "NeuroShield Sentry — host-level agent protection daemon. Detects and blocks malicious AI agent actions at the OS level.",
   "keywords": [
     "ai-security",

package/scripts/postinstall.js

@@ -120,6 +120,58 @@ discovery:
 `;
 }
 
+const SERVICE_NAME = 'neuroshield-sentry';
+
+function installSystemdService(paths) {
+  const servicePath = '/etc/systemd/system/' + SERVICE_NAME + '.service';
+  const binPath = '/usr/local/bin/neuroshield-sentryd';
+  const content = `[Unit]
+Description=NeuroShield Sentry — Host-Level Agent Protection Daemon
+Documentation=https://docs.neurosec.ai/sentry
+After=network.target network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+ExecStart=${binPath}
+Restart=always
+RestartSec=10
+Environment=NODE_ENV=production
+Environment=SENTRY_CONFIG_PATH=${paths.configPath}
+Environment=LOG_LEVEL=info
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=multi-user.target
+`;
+
+  try {
+    fs.writeFileSync(servicePath, content, 'utf8');
+    console.log(`[neuroshield-sentry] Service file created: ${servicePath}`);
+    return true;
+  } catch (e) {
+    console.warn(`[neuroshield-sentry] Could not write service file: ${e.message}`);
+    return false;
+  }
+}
+
+function enableAndStartService() {
+  const { execSync } = require('child_process');
+  for (const cmd of [
+    'systemctl daemon-reload',
+    'systemctl enable ' + SERVICE_NAME,
+    'systemctl start ' + SERVICE_NAME,
+  ]) {
+    try {
+      execSync(cmd, { timeout: 10000, stdio: 'pipe' });
+    } catch (e) {
+      return false;
+    }
+  }
+  return true;
+}
+
 function main() {
   const paths = getPlatformPaths();
   const configDir = paths.configDir;
@@ -128,6 +180,10 @@ function main() {
 
   // Skip if config already exists
   if (fs.existsSync(configPath)) {
+    // Still ensure service is installed if on Linux
+    if (os.platform() === 'linux' && process.getuid && process.getuid() === 0) {
+      installSystemdService(paths);
+    }
     console.log(`[neuroshield-sentry] Config already exists at ${configPath} — skipping`);
     return;
   }
@@ -164,25 +220,38 @@ function main() {
     console.warn(`[neuroshield-sentry] Warning: could not write token: ${e.message}`);
   }
 
+  console.log('');
+  // Auto-install systemd service on Linux if running as root
+  let serviceInstalled = false;
+  if (os.platform() === 'linux' && process.getuid && process.getuid() === 0) {
+    if (installSystemdService(paths)) {
+      serviceInstalled = enableAndStartService();
+    }
+  }
+
   console.log('');
   console.log('╔══════════════════════════════════════════════════════════╗');
   console.log('║     NeuroShield Sentry installed!                       ║');
   console.log('╠══════════════════════════════════════════════════════════╣');
   console.log('║                                                          ║');
+  if (serviceInstalled) {
+    console.log('║  ✓ Systemd service installed and started                 ║');
+    console.log('║                                                          ║');
+  }
   console.log('║  Next steps:                                             ║');
   console.log('║                                                          ║');
   console.log('║  1. Configure your NeuroSec connection:                  ║');
   console.log(`║     neuroshield-sentry setup                             ║`);
-  console.log('║     (or set env vars: NEUROSEC_ORG_ID, etc.)             ║');
   console.log('║                                                          ║');
-  console.log('║  2. Install as a system service:                         ║');
-  console.log('║     sudo neuroshield-sentry install                      ║');
-  console.log('║                                                          ║');
-  console.log('║  3. Or run directly:                                     ║');
-  console.log('║     sudo neuroshield-sentryd                             ║');
-  console.log('║                                                          ║');
-  console.log('║  4. Check status:                                        ║');
-  console.log('║     neuroshield-sentry status                            ║');
+  if (!serviceInstalled) {
+    console.log('║  2. Install as a system service:                         ║');
+    console.log('║     sudo systemctl daemon-reload                         ║');
+    console.log('║     sudo systemctl enable ' + SERVICE_NAME + '              ║');
+    console.log('║     sudo systemctl start ' + SERVICE_NAME + '               ║');
+    console.log('║                                                          ║');
+  }
+  console.log('║  Check status:                                           ║');
+  console.log('║     systemctl status ' + SERVICE_NAME + '                        ║');
   console.log('║                                                          ║');
   console.log('╚══════════════════════════════════════════════════════════╝');
   console.log('');