@songsid/agend 2.1.1-beta.5 → 2.1.1-beta.6

package/dist/sd-notify.d.ts

@@ -1 +1,12 @@
+/**
+ * Keep systemd's notification socket private to the fleet process. The socket
+ * path is a capability: any child that inherits it can send READY/WATCHDOG/
+ * STOPPING on behalf of a NotifyAccess=all service.
+ *
+ * systemd-notify itself must remain an allowed child sender because Node does
+ * not expose AF_UNIX datagram sockets. We therefore remove the capability from
+ * the ambient process environment and pass it only to the short-lived helper.
+ */
+export declare function consumeNotifySocket(environment: NodeJS.ProcessEnv): string | undefined;
+export declare function buildNotifyEnvironment(environment: NodeJS.ProcessEnv, socket: string): NodeJS.ProcessEnv;
 export declare function sdNotify(state: string): void;

package/dist/sd-notify.js

@@ -1,9 +1,32 @@
 import { execFileSync } from "node:child_process";
+/**
+ * Keep systemd's notification socket private to the fleet process. The socket
+ * path is a capability: any child that inherits it can send READY/WATCHDOG/
+ * STOPPING on behalf of a NotifyAccess=all service.
+ *
+ * systemd-notify itself must remain an allowed child sender because Node does
+ * not expose AF_UNIX datagram sockets. We therefore remove the capability from
+ * the ambient process environment and pass it only to the short-lived helper.
+ */
+export function consumeNotifySocket(environment) {
+    const socket = environment.NOTIFY_SOCKET;
+    if (socket)
+        delete environment.NOTIFY_SOCKET;
+    return socket || undefined;
+}
+export function buildNotifyEnvironment(environment, socket) {
+    return { ...environment, NOTIFY_SOCKET: socket };
+}
+const notifySocket = consumeNotifySocket(process.env);
 export function sdNotify(state) {
-    if (!process.env.NOTIFY_SOCKET)
+    if (!notifySocket)
         return;
     try {
-        execFileSync("systemd-notify", [state], { stdio: "ignore", timeout: 5000 });
+        execFileSync("systemd-notify", [state], {
+            env: buildNotifyEnvironment(process.env, notifySocket),
+            stdio: "ignore",
+            timeout: 5000,
+        });
     }
     catch { /* best effort */ }
 }

package/dist/sd-notify.js.map

@@ -1 +1 @@
-{"version":3,"file":"sd-notify.js","sourceRoot":"","sources":["../src/sd-notify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa;QAAE,OAAO;IACvC,IAAI,CAAC;QACH,YAAY,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"sd-notify.js","sourceRoot":"","sources":["../src/sd-notify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAA8B;IAChE,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC;IACzC,IAAI,MAAM;QAAE,OAAO,WAAW,CAAC,aAAa,CAAC;IAC7C,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,WAA8B,EAC9B,MAAc;IAEd,OAAO,EAAE,GAAG,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAEtD,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,IAAI,CAAC;QACH,YAAY,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,EAAE;YACtC,GAAG,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC;YACtD,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@songsid/agend",
-  "version": "2.1.1-beta.5",
+  "version": "2.1.1-beta.6",
   "description": "Multi-agent fleet daemon — run any coding CLI (Claude, Gemini, Codex, OpenCode) from Telegram",
   "type": "module",
   "bin": {

package/templates/systemd.service.ejs

@@ -4,6 +4,8 @@ After=network.target
 
 [Service]
 Type=notify
+# Node delegates AF_UNIX datagram sends to systemd-notify, so the helper must
+# be accepted. src/sd-notify.ts keeps NOTIFY_SOCKET out of all other children.
 NotifyAccess=all
 TimeoutStartSec=0
 WatchdogSec=60