@push.rocks/smartdaemon 2.7.2 → 2.9.0

package/dist_ts/systemd.definition.d.ts

@@ -3,6 +3,16 @@ export interface ISystemdServiceStartup {
     remainAfterExit: boolean;
     timeoutStartSeconds: number;
 }
+/**
+ * Ready when a process admitted by `notifyAccess` sends `READY=1`. `NotifyAccess=none` is not
+ * offered: systemd would discard every notification and the start could only time out.
+ */
+export interface ISystemdServiceNotifyStartup {
+    type: 'notify';
+    notifyAccess: 'main' | 'exec' | 'all';
+    timeoutStartSeconds: number;
+}
+export type TSystemdServiceStartup = ISystemdServiceStartup | ISystemdServiceNotifyStartup;
 /** Complete literal relations. System services always retain After=local-fs.target. */
 export interface ISystemdServiceDependencies {
     defaultDependencies: boolean;
@@ -19,7 +29,7 @@ export interface ISystemdServiceInstallTargets {
 }
 /** Internal validated renderer; no systemd/process/filesystem effects. */
 export declare const renderServiceRelations: (options: {
-    startup?: ISystemdServiceStartup;
+    startup?: TSystemdServiceStartup;
     dependencies?: ISystemdServiceDependencies;
     install?: ISystemdServiceInstallTargets;
 }, unitName: string, restart: string, scope: "system" | "user", fail: () => never) => {

package/dist_ts/systemd.definition.js

@@ -3,9 +3,10 @@ import * as plugins from './smartdaemon.plugins.js';
 export const renderServiceRelations = (options, unitName, restart, scope, fail) => {
     const requireValue = (value) => { if (!value)
         fail(); };
+    const plain = (value) => requireValue(value !== null && typeof value === 'object'
+        && !plugins.util.types.isProxy(value) && Object.getPrototypeOf(value) === Object.prototype);
     const record = (value, keys) => {
-        requireValue(value !== null && typeof value === 'object' && !plugins.util.types.isProxy(value)
-            && Object.getPrototypeOf(value) === Object.prototype);
+        plain(value);
         const actual = Reflect.ownKeys(value);
         requireValue(actual.length === keys.length && actual.every(key => typeof key === 'string' && keys.includes(key)
             && Object.getOwnPropertyDescriptor(value, key)?.enumerable && 'value' in Object.getOwnPropertyDescriptor(value, key)));
@@ -34,10 +35,20 @@ export const renderServiceRelations = (options, unitName, restart, scope, fail)
     };
     if (options.startup !== undefined) {
         const value = options.startup;
-        record(value, ['type', 'remainAfterExit', 'timeoutStartSeconds']);
-        requireValue(value.type === 'oneshot' && typeof value.remainAfterExit === 'boolean' && restart !== 'always'
-            && Number.isSafeInteger(value.timeoutStartSeconds) && value.timeoutStartSeconds >= 1 && value.timeoutStartSeconds <= 600);
-        result.service = ['Type=oneshot', `RemainAfterExit=${value.remainAfterExit ? 'yes' : 'no'}`, `TimeoutStartSec=${value.timeoutStartSeconds}s`];
+        plain(value);
+        // Select the shape from the data descriptor so no accessor runs before record() refuses it.
+        const kind = Object.getOwnPropertyDescriptor(value, 'type');
+        record(value, kind !== undefined && 'value' in kind && kind.value === 'notify'
+            ? ['type', 'notifyAccess', 'timeoutStartSeconds'] : ['type', 'remainAfterExit', 'timeoutStartSeconds']);
+        requireValue(Number.isSafeInteger(value.timeoutStartSeconds) && value.timeoutStartSeconds >= 1 && value.timeoutStartSeconds <= 600);
+        if (value.type === 'notify') {
+            requireValue(['main', 'exec', 'all'].includes(value.notifyAccess));
+            result.service = ['Type=notify', `NotifyAccess=${value.notifyAccess}`, `TimeoutStartSec=${value.timeoutStartSeconds}s`];
+        }
+        else {
+            requireValue(value.type === 'oneshot' && typeof value.remainAfterExit === 'boolean' && restart !== 'always');
+            result.service = ['Type=oneshot', `RemainAfterExit=${value.remainAfterExit ? 'yes' : 'no'}`, `TimeoutStartSec=${value.timeoutStartSeconds}s`];
+        }
     }
     if (options.dependencies !== undefined) {
         const value = options.dependencies;
@@ -58,4 +69,4 @@ export const renderServiceRelations = (options, unitName, restart, scope, fail)
     }
     return result;
 };
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic3lzdGVtZC5kZWZpbml0aW9uLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvc3lzdGVtZC5kZWZpbml0aW9uLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxPQUFPLE1BQU0sMEJBQTBCLENBQUM7QUF3QnBELDBFQUEwRTtBQUMxRSxNQUFNLENBQUMsTUFBTSxzQkFBc0IsR0FBRyxDQUFDLE9BSXRDLEVBQUUsUUFBZ0IsRUFBRSxPQUFlLEVBQUUsS0FBd0IsRUFBRSxJQUFpQixFQUUvRSxFQUFFO0lBQ0YsTUFBTSxZQUFZLEdBQUcsQ0FBQyxLQUFjLEVBQVEsRUFBRSxHQUFHLElBQUksQ0FBQyxLQUFLO1FBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQyxDQUFDLENBQUM7SUFDdkUsTUFBTSxNQUFNLEdBQUcsQ0FBQyxLQUFjLEVBQUUsSUFBdUIsRUFBUSxFQUFFO1FBQy9ELFlBQVksQ0FBQyxLQUFLLEtBQUssSUFBSSxJQUFJLE9BQU8sS0FBSyxLQUFLLFFBQVEsSUFBSSxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUM7ZUFDekYsTUFBTSxDQUFDLGNBQWMsQ0FBQyxLQUFLLENBQUMsS0FBSyxNQUFNLENBQUMsU0FBUyxDQUFDLENBQUM7UUFDeEQsTUFBTSxNQUFNLEdBQUcsT0FBTyxDQUFDLE9BQU8sQ0FBQyxLQUFlLENBQUMsQ0FBQztRQUNoRCxZQUFZLENBQUMsTUFBTSxDQUFDLE1BQU0sS0FBSyxJQUFJLENBQUMsTUFBTSxJQUFJLE1BQU0sQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLEVBQUUsQ0FBQyxPQUFPLEdBQUcsS0FBSyxRQUFRLElBQUksSUFBSSxDQUFDLFFBQVEsQ0FBQyxHQUFHLENBQUM7ZUFDMUcsTUFBTSxDQUFDLHdCQUF3QixDQUFDLEtBQUssRUFBRSxHQUFHLENBQUMsRUFBRSxVQUFVLElBQUksT0FBTyxJQUFJLE1BQU0sQ0FBQyx3QkFBd0IsQ0FBQyxLQUFLLEVBQUUsR0FBRyxDQUFFLENBQUMsQ0FBQyxDQUFDO0lBQzVILENBQUMsQ0FBQztJQUNGLE1BQU0sS0FBSyxHQUFHLENBQUMsS0FBd0IsRUFBWSxFQUFFO1FBQ25ELFlBQVksQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQztlQUNsRSxNQUFNLENBQUMsY0FBYyxDQUFDLEtBQUssQ0FBQyxLQUFLLEtBQUssQ0FBQyxTQUFTLElBQUksS0FBSyxDQUFDLE1BQU0sSUFBSSxFQUFFO2VBQ3RFLE9BQU8sQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLENBQUMsTUFBTSxLQUFLLEtBQUssQ0FBQyxNQUFNLEdBQUcsQ0FBQyxDQUFDLENBQUM7UUFDekQsTUFBTSxNQUFNLEdBQWEsRUFBRSxDQUFDO1FBQzVCLEtBQUssSUFBSSxLQUFLLEdBQUcsQ0FBQyxFQUFFLEtBQUssR0FBRyxLQUFLLENBQUMsTUFBTSxFQUFFLEtBQUssRUFBRSxFQUFFLENBQUM7WUFDbEQsTUFBTSxVQUFVLEdBQUcsTUFBTSxDQUFDLHdCQUF3QixDQUFDLEtBQUssRUFBRSxNQUFNLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQztZQUN6RSxZQUFZLENBQUMsVUFBVSxFQUFFLFVBQVUsSUFBSSxPQUFPLElBQUksVUFBVSxDQUFDLENBQUM7WUFDOUQsTUFBTSxJQUFJLEdBQUcsVUFBVyxDQUFDLEtBQUssQ0FBQztZQUMvQixZQUFZLENBQUMsT0FBTyxJQUFJLEtBQUssUUFBUSxJQUFJLElBQUksS0FBSyxRQUFRLElBQUksSUFBSSxDQUFDLE1BQU0sSUFBSSxHQUFHO21CQUMzRSxnSEFBZ0gsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQztZQUNsSSxNQUFNLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxDQUFDO1FBQ3BCLENBQUM7UUFDRCxZQUFZLENBQUMsSUFBSSxHQUFHLENBQUMsTUFBTSxDQUFDLENBQUMsSUFBSSxLQUFLLE1BQU0sQ0FBQyxNQUFNLENBQUMsQ0FBQztRQUNyRCxPQUFPLE1BQU0sQ0FBQyxJQUFJLEVBQUUsQ0FBQztJQUN2QixDQUFDLENBQUM7SUFDRixNQUFNLElBQUksR0FBRyxDQUFDLEdBQVcsRUFBRSxLQUF3QixFQUFZLEVBQUUsQ0FBQyxLQUFLLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxDQUFDLEdBQUcsR0FBRyxJQUFJLEtBQUssQ0FBQyxJQUFJLENBQUMsR0FBRyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7SUFDcEgsTUFBTSxNQUFNLEdBQUc7UUFDYixJQUFJLEVBQUUsS0FBSyxLQUFLLFFBQVEsQ0FBQyxDQUFDLENBQUMsQ0FBQyx1QkFBdUIsQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFjO1FBQ3JFLE9BQU8sRUFBRSxDQUFDLFdBQVcsQ0FBQztRQUN0QixPQUFPLEVBQUUsQ0FBQyxLQUFLLEtBQUssUUFBUSxDQUFDLENBQUMsQ0FBQyw0QkFBNEIsQ0FBQyxDQUFDLENBQUMseUJBQXlCLENBQUM7S0FDekYsQ0FBQztJQUNGLElBQUksT0FBTyxDQUFDLE9BQU8sS0FBSyxTQUFTLEVBQUUsQ0FBQztRQUNsQyxNQUFNLEtBQUssR0FBRyxPQUFPLENBQUMsT0FBTyxDQUFDO1FBQzlCLE1BQU0sQ0FBQyxLQUFLLEVBQUUsQ0FBQyxNQUFNLEVBQUUsaUJBQWlCLEVBQUUscUJBQXFCLENBQUMsQ0FBQyxDQUFDO1FBQ2xFLFlBQVksQ0FBQyxLQUFLLENBQUMsSUFBSSxLQUFLLFNBQVMsSUFBSSxPQUFPLEtBQUssQ0FBQyxlQUFlLEtBQUssU0FBUyxJQUFJLE9BQU8sS0FBSyxRQUFRO2VBQ3RHLE1BQU0sQ0FBQyxhQUFhLENBQUMsS0FBSyxDQUFDLG1CQUFtQixDQUFDLElBQUksS0FBSyxDQUFDLG1CQUFtQixJQUFJLENBQUMsSUFBSSxLQUFLLENBQUMsbUJBQW1CLElBQUksR0FBRyxDQUFDLENBQUM7UUFDNUgsTUFBTSxDQUFDLE9BQU8sR0FBRyxDQUFDLGNBQWMsRUFBRSxtQkFBbUIsS0FBSyxDQUFDLGVBQWUsQ0FBQyxDQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxJQUFJLEVBQUUsRUFBRSxtQkFBbUIsS0FBSyxDQUFDLG1CQUFtQixHQUFHLENBQUMsQ0FBQztJQUNoSixDQUFDO0lBQ0QsSUFBSSxPQUFPLENBQUMsWUFBWSxLQUFLLFNBQVMsRUFBRSxDQUFDO1FBQ3ZDLE1BQU0sS0FBSyxHQUFHLE9BQU8sQ0FBQyxZQUFZLENBQUM7UUFDbkMsTUFBTSxDQUFDLEtBQUssRUFBRSxDQUFDLHFCQUFxQixFQUFFLE9BQU8sRUFBRSxRQUFRLEVBQUUsVUFBVSxFQUFFLE9BQU8sRUFBRSxXQUFXLENBQUMsQ0FBQyxDQUFDO1FBQzVGLFlBQVksQ0FBQyxPQUFPLEtBQUssQ0FBQyxtQkFBbUIsS0FBSyxTQUFTLENBQUMsQ0FBQztRQUM3RCxNQUFNLEtBQUssR0FBRyxDQUFDLEdBQUcsSUFBSSxHQUFHLENBQUMsQ0FBQyxHQUFHLENBQUMsS0FBSyxLQUFLLFFBQVEsQ0FBQyxDQUFDLENBQUMsQ0FBQyxpQkFBaUIsQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUMsRUFBRSxHQUFHLEtBQUssQ0FBQyxLQUFLLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDL0csTUFBTSxNQUFNLEdBQUcsS0FBSyxDQUFDLEtBQUssQ0FBQyxNQUFNLENBQUMsRUFBRSxRQUFRLEdBQUcsS0FBSyxDQUFDLEtBQUssQ0FBQyxRQUFRLENBQUMsRUFBRSxLQUFLLEdBQUcsS0FBSyxDQUFDLEtBQUssQ0FBQyxLQUFLLENBQUMsRUFBRSxTQUFTLEdBQUcsS0FBSyxDQUFDLEtBQUssQ0FBQyxTQUFTLENBQUMsQ0FBQztRQUNySSxZQUFZLENBQUMsTUFBTSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDLENBQUMsS0FBSyxDQUFDLFFBQVEsQ0FBQyxJQUFJLENBQUMsQ0FBQyxJQUFJLFNBQVMsQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUN4SSxNQUFNLENBQUMsSUFBSSxHQUFHLENBQUMsdUJBQXVCLEtBQUssQ0FBQyxtQkFBbUIsQ0FBQyxDQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxJQUFJLEVBQUUsRUFBRSxHQUFHLElBQUksQ0FBQyxPQUFPLEVBQUUsS0FBSyxDQUFDO1lBQ3ZHLEdBQUcsSUFBSSxDQUFDLFFBQVEsRUFBRSxNQUFNLENBQUMsRUFBRSxHQUFHLElBQUksQ0FBQyxVQUFVLEVBQUUsUUFBUSxDQUFDLEVBQUUsR0FBRyxJQUFJLENBQUMsT0FBTyxFQUFFLEtBQUssQ0FBQyxFQUFFLEdBQUcsSUFBSSxDQUFDLFdBQVcsRUFBRSxTQUFTLENBQUMsQ0FBQyxDQUFDO0lBQ3hILENBQUM7SUFDRCxJQUFJLE9BQU8sQ0FBQyxPQUFPLEtBQUssU0FBUyxFQUFFLENBQUM7UUFDbEMsTUFBTSxLQUFLLEdBQUcsT0FBTyxDQUFDLE9BQU8sQ0FBQztRQUM5QixNQUFNLENBQUMsS0FBSyxFQUFFLENBQUMsVUFBVSxFQUFFLFlBQVksQ0FBQyxDQUFDLENBQUM7UUFDMUMsTUFBTSxNQUFNLEdBQUcsS0FBSyxDQUFDLEtBQUssQ0FBQyxRQUFRLENBQUMsRUFBRSxRQUFRLEdBQUcsS0FBSyxDQUFDLEtBQUssQ0FBQyxVQUFVLENBQUMsQ0FBQztRQUN6RSxZQUFZLENBQUMsTUFBTSxDQUFDLE1BQU0sR0FBRyxRQUFRLENBQUMsTUFBTSxHQUFHLENBQUMsSUFBSSxNQUFNLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxFQUFFLENBQUMsQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUNwRyxNQUFNLENBQUMsT0FBTyxHQUFHLENBQUMsR0FBRyxJQUFJLENBQUMsVUFBVSxFQUFFLE1BQU0sQ0FBQyxFQUFFLEdBQUcsSUFBSSxDQUFDLFlBQVksRUFBRSxRQUFRLENBQUMsQ0FBQyxDQUFDO0lBQ2xGLENBQUM7SUFDRCxPQUFPLE1BQU0sQ0FBQztBQUNoQixDQUFDLENBQUMifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@push.rocks/smartdaemon",
-  "version": "2.7.2",
+  "version": "2.9.0",
   "private": false,
   "description": "Start scripts as long running daemons and manage them.",
   "main": "dist_ts/index.js",
@@ -27,9 +27,9 @@
   "homepage": "https://code.foss.global/push.rocks/smartdaemon",
   "devDependencies": {
     "@git.zone/tsbuild": "^5.0.0",
-    "@git.zone/tsrun": "^3.0.0",
-    "@git.zone/tstest": "^6.2.1",
-    "@types/node": "^26.6.1"
+    "@git.zone/tsrun": "^3.0.1",
+    "@git.zone/tstest": "^6.3.2",
+    "@types/node": "^26.6.2"
   },
   "dependencies": {
     "@push.rocks/lik": "^6.4.1",

package/readme.md

@@ -212,6 +212,23 @@ list and `needsReload` flag. `reloadConfiguration()` explicitly reloads the mana
 unit definitions globally and returns a fresh configuration snapshot. Neither
 operation changes enablement or masks.
 
+`inspectServiceSettings()` reports the loaded service settings a definition renders, drop-ins
+included: `type`, `notifyAccess`, `restart`, `killMode` (systemd's own words; `type` is empty
+for a unit systemd could not load), `delegate`, `restartMicroseconds` and
+`timeoutStopMicroseconds` (exact integers or `'infinity'`), `limitNoFile` and `limitNoFileSoft`
+(hard and soft), `tasksMax` (integers or `'infinity'`) and `oomScoreAdjust`. A missing, repeated,
+foreign or malformed property rejects with `invalid_state`, so a manager too old to report one of
+them fails closed. Reload changed files first; the snapshot describes what the manager loaded.
+
+```typescript
+const settings = await new SystemdUnit({ unitName: 'pallet-containerd.service' }).inspectServiceSettings();
+const carriesContract = settings.type === 'notify' && settings.notifyAccess === 'all' &&
+  settings.killMode === 'process' && settings.delegate && settings.limitNoFile === 'infinity' &&
+  settings.limitNoFileSoft === 'infinity' && settings.tasksMax === 'infinity' &&
+  settings.oomScoreAdjust === -999 && settings.restart === 'always' &&
+  settings.restartMicroseconds === 2_000_000 && settings.timeoutStopMicroseconds === 60_000_000;
+```
+
 `enable()` persistently enables the existing unit definition and returns a fresh
 state snapshot. It does not rewrite the definition, start the unit, unmask it or
 force conflicting links. Run it inside the owning installer's cross-process
@@ -315,12 +332,100 @@ a login session:
 const installed = await new SystemdUnitFile({ scope: 'user', unitName: 'authswitch.service' }).inspect();
 ```
 
+`inspect()` and `install()` check every component of the unit directory from `/`
+down, then the unit file itself. A refusal is a `SystemdUnitFileUnsafePathError`, a
+`SystemdUnitFileError` with code `unsafe_path` that names the offending `path` and a
+`reason` of type `TSystemdUnitFileUnsafePathReason`, so the owner knows exactly what
+to fix:
+
+| `reason` | `path` | Refused because |
+| --- | --- | --- |
+| `unsupported_platform` | unit directory | the process does not run on Linux |
+| `foreign_process` | unit directory | the process does not run as the expected uid |
+| `symlink` | directory component or unit file | it is a symbolic link |
+| `not_directory` | directory component | it is not a directory |
+| `foreign_owner` | directory component or unit file | a directory is owned by neither root nor the expected uid, or the file not by the expected uid |
+| `group_or_world_writable` | directory component | it is group- or world-writable (only a root-owned mode-1777 `/tmp` is admitted) |
+| `unreadable` | unit file | it cannot be opened; the operating-system error is the `cause` |
+| `not_regular_file` | unit file | it is not a regular file |
+| `hard_linked` | unit file | it has more than one hard link |
+| `wrong_mode` | unit file | its mode is not exactly 0644 |
+| `too_large` | unit file | it is larger than 16384 bytes |
+| `replaced` | unit directory or a file being written | it changed identity between two checks during `install()` |
+
+```typescript
+import { SystemdUnitFileUnsafePathError } from '@push.rocks/smartdaemon';
+
+try {
+  await file.inspect();
+} catch (error) {
+  if (error instanceof SystemdUnitFileUnsafePathError) {
+    // e.g. 'group_or_world_writable' '/home/user/.local' after `chmod 0775 ~/.local`
+    console.error(error.reason, error.path);
+  }
+  throw error;
+}
+```
+
 For a boot prerequisite that must finish before dependent services start, supply
 `startup: { type: 'oneshot', remainAfterExit: true, timeoutStartSeconds: 120 }`.
 Systemd waits for successful process exit; `RemainAfterExit` keeps the completed
 unit active. The start timeout is an integer from 1 to 600 seconds. Oneshot
 services reject `restart: 'always'`; the default exec definition remains unchanged.
 
+A long-running service that reports its own readiness uses
+`startup: { type: 'notify', notifyAccess: 'all', timeoutStartSeconds: 120 }`, rendered as
+`Type=notify`, `NotifyAccess=` and `TimeoutStartSec=`. Systemd counts the start complete when a
+process admitted by `notifyAccess` sends `READY=1`: `'main'` admits only the main process,
+`'exec'` also the processes of the unit's `Exec*=` commands, `'all'` every process in the unit's
+cgroup, as a ready notification from a child of the main process needs. `NotifyAccess=none` is
+not offered because it discards every notification. Notify services may use `restart: 'always'`.
+
+These optional settings render one directive each, after `TimeoutStopSec=` in this order, and
+nothing when omitted, so existing definitions keep their exact bytes:
+
+| Option | Directive | Accepted values |
+| --- | --- | --- |
+| `restartSeconds` | `RestartSec=` (after `Restart=`) | integer 1–600; refused with `restart: 'no'` |
+| `delegate` | `Delegate=` | boolean |
+| `limitNoFile` | `LimitNOFILE=` (soft and hard) | positive integer or `'infinity'` |
+| `tasksMax` | `TasksMax=` | positive integer or `'infinity'` |
+| `oomScoreAdjust` | `OOMScoreAdjust=` | integer −1000–1000 |
+
+```typescript
+const containerd = new SystemdServiceDefinition({
+  unitName: 'pallet-containerd.service',
+  description: 'Pallet containerd',
+  executable: '/opt/pallet/current/pallet-control',
+  args: ['containerd-serve'],
+  workingDirectory: '/',
+  user: 'root',
+  group: 'root',
+  restart: 'always',
+  restartSeconds: 2,
+  killMode: 'process',
+  timeoutStopSeconds: 60,
+  startup: { type: 'notify', notifyAccess: 'all', timeoutStartSeconds: 120 },
+  dependencies: {
+    defaultDependencies: true,
+    after: ['pallet-guard.service'],
+    before: ['pallet-node.service'],
+    requires: ['pallet-guard.service'],
+    wants: [],
+    conflicts: [],
+  },
+  delegate: true,
+  limitNoFile: 'infinity',
+  tasksMax: 'infinity',
+  oomScoreAdjust: -999,
+});
+```
+
+Systemd applies these within what the manager itself may grant. Under systemd 255 in an
+unprivileged container, this unit started with the manager's own open-file hard limit for
+`LimitNOFILE=infinity` and without the lowered OOM score, and still reported `active`.
+`inspectServiceSettings()` reports the configured values, not the running process's limits.
+
 Optional `dependencies` describes the complete literal runtime relationships:
 
 ```typescript
@@ -407,7 +512,8 @@ as `<unit>.previous-<sha256>`, flushes them before atomic replacement, reloads
 the manager and checks its selected fragment and final bytes. A reload failure
 leaves the new file and retained previous definition in place; recovery requires
 inspection, never an automatic rollback. Filesystem and definition errors use
-`SystemdUnitFileError` with a local code. Trusted qualification code can set
+`SystemdUnitFileError` with a local code; every `unsafe_path` refusal is a
+`SystemdUnitFileUnsafePathError` naming the offending `path` and its `reason`. Trusted qualification code can set
 `unitDirectory`, `expectedUid` and the inherited `SystemdUnit` command options;
 user scope requires `expectedUid` to match the caller's actual uid. The manager's
 selected fragment must match the installed file after reload, so an unrecognized
@@ -417,7 +523,9 @@ With `killMode: 'mixed'`, the main process owns graceful child shutdown and must
 remain alive until its children have joined. Systemd sends SIGTERM to the main
 process first and can send SIGKILL to the whole cgroup when the main process exits
 or the stop deadline expires. `control-group` sends the initial signal to the
-whole group. A successful systemd start still requires application readiness
+whole group. `process` signals only the main process, on stop and on a stop timeout; every
+other process in the unit survives, so the main process must own their shutdown or their
+deliberate retention (as with `Delegate=yes` workloads). A successful systemd start still requires application readiness
 verification, and a completed stop alone does not prove database drain.
 
 ### SmartDaemonService Class

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@push.rocks/smartdaemon',
-  version: '2.7.2',
+  version: '2.9.0',
   description: 'Start scripts as long running daemons and manage them.'
 }

package/ts/classes.systemdservicedefinition.ts

@@ -1,7 +1,8 @@
 import * as plugins from './smartdaemon.plugins.js';
-import { renderServiceRelations, type ISystemdServiceStartup, type ISystemdServiceDependencies,
+import { renderServiceRelations, type TSystemdServiceStartup, type ISystemdServiceDependencies,
   type ISystemdServiceInstallTargets } from './systemd.definition.js';
-export type { ISystemdServiceStartup, ISystemdServiceDependencies, ISystemdServiceInstallTargets } from './systemd.definition.js';
+export type { ISystemdServiceStartup, ISystemdServiceNotifyStartup, TSystemdServiceStartup,
+  ISystemdServiceDependencies, ISystemdServiceInstallTargets } from './systemd.definition.js';
 
 interface ISystemdServiceDefinitionBaseOptions {
   unitName: string;
@@ -10,11 +11,21 @@ interface ISystemdServiceDefinitionBaseOptions {
   args: readonly string[];
   workingDirectory: string;
   restart: 'no' | 'on-failure' | 'always';
-  killMode: 'mixed' | 'control-group';
+  killMode: 'mixed' | 'control-group' | 'process';
   timeoutStopSeconds: number;
-  startup?: ISystemdServiceStartup;
+  startup?: TSystemdServiceStartup;
   dependencies?: ISystemdServiceDependencies;
   install?: ISystemdServiceInstallTargets;
+  /** Integer seconds from 1 to 600 before a restart (`RestartSec=`). Refused with `restart: 'no'`. */
+  restartSeconds?: number;
+  /** Leaves the cgroups of the processes this service starts to them (`Delegate=`). */
+  delegate?: boolean;
+  /** Soft and hard open-file limit (`LimitNOFILE=`): a positive integer or `'infinity'`. */
+  limitNoFile?: number | 'infinity';
+  /** Task limit of the unit's cgroup (`TasksMax=`): a positive integer or `'infinity'`. */
+  tasksMax?: number | 'infinity';
+  /** Integer from -1000 to 1000 (`OOMScoreAdjust=`). */
+  oomScoreAdjust?: number;
 }
 
 export type ISystemdServiceDefinitionOptions = ISystemdServiceDefinitionBaseOptions & (
@@ -67,8 +78,10 @@ export class SystemdServiceDefinition {
       'timeoutStopSeconds',
       ...(scope === 'system' ? ['user', 'group'] : []),
     ];
+    const optionalKeys = ['scope', 'startup', 'dependencies', 'install', 'restartSeconds', 'delegate',
+      'limitNoFile', 'tasksMax', 'oomScoreAdjust'];
     requireValue(
-      Reflect.ownKeys(options).every(key => typeof key === 'string' && [...keys, 'scope', 'startup', 'dependencies', 'install'].includes(key)
+      Reflect.ownKeys(options).every(key => typeof key === 'string' && [...keys, ...optionalKeys].includes(key)
           && Object.getOwnPropertyDescriptor(options, key)?.enumerable && 'value' in Object.getOwnPropertyDescriptor(options, key)!) && keys.every((key) => {
           const descriptor = Object.getOwnPropertyDescriptor(options, key);
           return descriptor && 'value' in descriptor;
@@ -108,10 +121,35 @@ export class SystemdServiceDefinition {
     }
     requireValue(
       ['no', 'on-failure', 'always'].includes(options.restart) &&
-        ['mixed', 'control-group'].includes(options.killMode) &&
+        ['mixed', 'control-group', 'process'].includes(options.killMode) &&
         Number.isSafeInteger(options.timeoutStopSeconds) &&
         options.timeoutStopSeconds >= 1 && options.timeoutStopSeconds <= 600,
     );
+    const integer = (value: unknown, minimum: number, maximum: number): value is number =>
+      Number.isSafeInteger(value) && (value as number) >= minimum && (value as number) <= maximum;
+    const limit = (value: unknown): value is number | 'infinity' =>
+      value === 'infinity' || integer(value, 1, Number.MAX_SAFE_INTEGER);
+    // Each optional directive is absent unless supplied, so existing definitions keep their bytes.
+    const service: string[] = [];
+    if (options.restartSeconds !== undefined) {
+      requireValue(integer(options.restartSeconds, 1, 600) && options.restart !== 'no');
+    }
+    if (options.delegate !== undefined) {
+      requireValue(typeof options.delegate === 'boolean');
+      service.push(`Delegate=${options.delegate ? 'yes' : 'no'}`);
+    }
+    if (options.limitNoFile !== undefined) {
+      requireValue(limit(options.limitNoFile));
+      service.push(`LimitNOFILE=${options.limitNoFile}`);
+    }
+    if (options.tasksMax !== undefined) {
+      requireValue(limit(options.tasksMax));
+      service.push(`TasksMax=${options.tasksMax}`);
+    }
+    if (options.oomScoreAdjust !== undefined) {
+      requireValue(integer(options.oomScoreAdjust, -1000, 1000));
+      service.push(`OOMScoreAdjust=${options.oomScoreAdjust}`);
+    }
     // Quoting and percent/dollar escaping follow systemd.syntax and systemd.service.
     const quote = (value: string, command = false) =>
       '"' + value
@@ -135,12 +173,14 @@ export class SystemdServiceDefinition {
       // WorkingDirectory is a raw path value, not an ExecStart word list.
       `WorkingDirectory=${options.workingDirectory.replaceAll('%', '%%')}`,
       `Restart=${options.restart}`,
+      ...(options.restartSeconds !== undefined ? [`RestartSec=${options.restartSeconds}s`] : []),
       `KillMode=${options.killMode}`,
       'KillSignal=SIGTERM',
       'FinalKillSignal=SIGKILL',
       'SendSIGKILL=yes',
       'SendSIGHUP=no',
       `TimeoutStopSec=${options.timeoutStopSeconds}s`,
+      ...service,
       'StandardInput=null',
       'StandardOutput=journal',
       'StandardError=journal',

package/ts/classes.systemdunit.ts

@@ -56,6 +56,29 @@ export interface ISystemdUnitRelationships {
   readonly wantedBy: readonly string[];
 }
 
+/**
+ * Service settings as the manager loaded them, drop-ins included. Timespans are exact integer
+ * microseconds; a limit systemd reports as unbounded is `'infinity'`. Mode strings are systemd's
+ * own vocabulary, so a value this package does not render is still reported; `type` is empty for
+ * a unit systemd could not load.
+ */
+export interface ISystemdServiceSettings {
+  readonly unitName: string;
+  readonly type: string;
+  readonly notifyAccess: string;
+  readonly restart: string;
+  readonly restartMicroseconds: number | 'infinity';
+  readonly killMode: string;
+  readonly timeoutStopMicroseconds: number | 'infinity';
+  readonly delegate: boolean;
+  /** Hard open-file limit (`LimitNOFILE`). */
+  readonly limitNoFile: number | 'infinity';
+  /** Soft open-file limit (`LimitNOFILESoft`). */
+  readonly limitNoFileSoft: number | 'infinity';
+  readonly tasksMax: number | 'infinity';
+  readonly oomScoreAdjust: number;
+}
+
 export class SystemdUnitError extends Error {
   constructor(public readonly code: 'invalid_options' | 'command_failed' | 'invalid_state') {
     super(`Systemd unit operation failed: ${code}.`);
@@ -63,6 +86,37 @@ export class SystemdUnitError extends Error {
   }
 }
 
+// systemd's format_timespan() units, largest first; a year and a month are 365.25 and 30.44 days.
+const timespanUnits = new Map<string, bigint>([
+  ['y', 31557600000000n], ['month', 2629800000000n], ['w', 604800000000n], ['d', 86400000000n],
+  ['h', 3600000000n], ['min', 60000000n], ['s', 1000000n], ['ms', 1000n], ['us', 1n],
+]);
+
+/** Parses `systemctl show` timespans such as `0`, `100ms`, `1min 30s`, `1.500000s` or `infinity`. */
+const parseTimespan = (text: string): number | 'infinity' | undefined => {
+  if (text === 'infinity') return 'infinity';
+  if (text === '0') return 0;
+  const names = [...timespanUnits.keys()];
+  let total = 0n;
+  let previous = -1;
+  for (const part of text.split(' ')) {
+    const match = /^(0|[1-9]\d{0,19})(?:\.(\d{1,6}))?([a-z]+)$/.exec(part);
+    const index = match ? names.indexOf(match[3]) : -1;
+    if (!match || index <= previous) return undefined;
+    previous = index;
+    const scale = timespanUnits.get(match[3])!;
+    const fraction = match[2] === undefined ? 0n : BigInt(match[2].padEnd(6, '0')) * scale;
+    if (fraction % 1000000n !== 0n) return undefined;
+    total += BigInt(match[1]) * scale + fraction / 1000000n;
+  }
+  return total > 0n && total <= BigInt(Number.MAX_SAFE_INTEGER) ? Number(total) : undefined;
+};
+
+/** `infinity` or a decimal unsigned integer within the safe integer range. */
+const parseLimit = (text: string): number | 'infinity' | undefined =>
+  text === 'infinity' ? 'infinity'
+    : /^(0|[1-9]\d*)$/.test(text) && Number.isSafeInteger(Number(text)) ? Number(text) : undefined;
+
 const properties = [
   'Id',
   'LoadState',
@@ -217,6 +271,50 @@ export class SystemdUnit {
     });
   }
 
+  /**
+   * Reports the loaded service settings that a definition renders, so an owner can verify an
+   * installed unit carries them. Reads only; the manager must have reloaded changed files first.
+   */
+  public async inspectServiceSettings(): Promise<ISystemdServiceSettings> {
+    const keys = ['Id', 'Type', 'NotifyAccess', 'Restart', 'RestartUSec', 'KillMode', 'TimeoutStopUSec',
+      'Delegate', 'LimitNOFILE', 'LimitNOFILESoft', 'TasksMax', 'OOMScoreAdjust'];
+    const stdout = await this.command(['show', this.unitName, `--property=${keys.join(',')}`, '--all']);
+    const fields = new Map<string, string>();
+    for (const line of (stdout.endsWith('\n') ? stdout.slice(0, -1) : stdout).split('\n')) {
+      const separator = line.indexOf('='), key = line.slice(0, separator);
+      if (separator < 1 || !keys.includes(key) || fields.has(key)) throw new SystemdUnitError('invalid_state');
+      fields.set(key, line.slice(separator + 1));
+    }
+    // An older manager omits a property it does not know; the count check refuses that snapshot.
+    if (fields.size !== keys.length || fields.get('Id') !== this.unitName) throw new SystemdUnitError('invalid_state');
+    const mode = (key: string, empty = false): string => {
+      const value = fields.get(key)!;
+      if (!(empty && value === '') && !/^[a-z][a-z-]{0,31}$/.test(value)) throw new SystemdUnitError('invalid_state');
+      return value;
+    };
+    const parsed = <T>(key: string, parse: (text: string) => T | undefined): T => {
+      const value = parse(fields.get(key)!);
+      if (value === undefined) throw new SystemdUnitError('invalid_state');
+      return value;
+    };
+    const oomScoreAdjust = parsed('OOMScoreAdjust', (text) =>
+      /^(0|-?[1-9]\d{0,3})$/.test(text) && Math.abs(Number(text)) <= 1000 ? Number(text) : undefined);
+    return Object.freeze({
+      unitName: this.unitName,
+      type: mode('Type', true),
+      notifyAccess: mode('NotifyAccess'),
+      restart: mode('Restart'),
+      restartMicroseconds: parsed('RestartUSec', parseTimespan),
+      killMode: mode('KillMode'),
+      timeoutStopMicroseconds: parsed('TimeoutStopUSec', parseTimespan),
+      delegate: parsed('Delegate', (text) => text === 'yes' ? true : text === 'no' ? false : undefined),
+      limitNoFile: parsed('LimitNOFILE', parseLimit),
+      limitNoFileSoft: parsed('LimitNOFILESoft', parseLimit),
+      tasksMax: parsed('TasksMax', parseLimit),
+      oomScoreAdjust,
+    });
+  }
+
   /** Reloads unit definitions globally; does not enable, unmask, start or stop a unit. */
   public async reloadConfiguration(): Promise<ISystemdUnitConfigurationState> {
     await this.command(['daemon-reload']);