@the-seeker/server-agent 0.1.0 → 0.1.2

package/README.md

@@ -84,6 +84,19 @@ capability: `available`=조회 성공, `unsupported`=OS 미지원 또는 nginx
 `not_installed`=실행 파일 없음, `permission_denied`=권한 부족, `error`=기타 조회/파싱 실패.
 호스트 조회 실패는 호출자가 처리하고 host capability를 `error`로 지정합니다.
 
+## 문제 해결
+
+systemd의 PATH에서 nvm으로 설치한 PM2가 보이지 않으면 capability가 `not_installed`가 될 수 있습니다. `@the-seeker/server-agent@0.1.1`부터는 실행 중인 node의 `dirname(process.execPath)/pm2`를 자동으로 찾고, `install`이 systemd unit에 `Environment=PATH=<node bin dir>:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`을 기록합니다. 업그레이드 후 호스트에서 `install`을 다시 실행하면 됩니다(0.1.1은 이어서 `sudo systemctl restart theseeker-agent` 필요, 0.1.2부터 `install`이 자동 재시작).
+
+자동 설정을 쓰지 않을 때는 systemd drop-in으로 PM2 실행 파일을 지정합니다.
+
+```ini
+[Service]
+Environment=PM2_BIN=/home/<user>/.nvm/versions/node/<ver>/bin/pm2
+```
+
+drop-in 저장 후 `sudo systemctl restart theseeker-agent`를 실행합니다.
+
 ## 상태 확인과 제거
 
 Ubuntu:

package/dist/collectors/command.d.ts

@@ -4,7 +4,12 @@ export declare function run(file: string, args: readonly string[], options?: Omi
     stdout: string;
     stderr: string;
 }>;
-export declare function locate(binary: string): Promise<string | null>;
+export interface LocateDeps {
+    readonly execPath?: string;
+    readonly access?: (path: string, mode: number) => Promise<void>;
+}
+/** systemd units run with a minimal PATH, so a nvm-installed `pm2` is invisible to `which` but sits next to the node binary in ExecStart. */
+export declare function locate(binary: string, deps?: LocateDeps): Promise<string | null>;
 export declare class CollectionError extends Error {
     readonly code: ResponseError["code"];
     constructor(code: ResponseError["code"]);

package/dist/collectors/command.js

@@ -1,4 +1,6 @@
 import { execFile } from "node:child_process";
+import { access, constants } from "node:fs/promises";
+import { dirname, join } from "node:path";
 export function run(file, args, options = {}) {
     return new Promise((resolve, reject) => {
         execFile(file, [...args], { timeout: 8000, maxBuffer: 8 * 1024 * 1024, ...options, shell: false, encoding: "utf8" }, (error, stdout, stderr) => {
@@ -9,15 +11,25 @@ export function run(file, args, options = {}) {
         });
     });
 }
-export async function locate(binary) {
+/** systemd units run with a minimal PATH, so a nvm-installed `pm2` is invisible to `which` but sits next to the node binary in ExecStart. */
+export async function locate(binary, deps = {}) {
     try {
-        const { stdout } = await run("which", [binary]);
-        return stdout.trim() || null;
+        const found = (await run("which", [binary])).stdout.trim();
+        if (found)
+            return found;
     }
     catch (error) {
-        if (error instanceof Error && "code" in error && (error.code === 1 || error.code === "ENOENT"))
-            return null;
-        throw error;
+        if (!(error instanceof Error && "code" in error && (error.code === 1 || error.code === "ENOENT")))
+            throw error;
+    }
+    const candidate = join(dirname(deps.execPath ?? process.execPath), binary);
+    const isExecutable = deps.access ?? access;
+    try {
+        await isExecutable(candidate, constants.X_OK);
+        return candidate;
+    }
+    catch {
+        return null;
     }
 }
 export class CollectionError extends Error {

package/dist/install/systemd.d.ts

@@ -3,6 +3,8 @@ export declare const SERVICE_NAME = "theseeker-agent";
 export declare const UNIT_PATH = "/etc/systemd/system/theseeker-agent.service";
 export declare const UNIT_FILE_MODE = 420;
 export declare const SUPPLEMENTARY_GROUPS: readonly ["adm", "systemd-journal"];
+/** systemd gives a unit no PATH at all, so the node bin directory (nvm keeps `pm2` there) is prepended to this system default. */
+export declare const SYSTEM_PATH_TAIL = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
 export interface UnitOptions {
     readonly user: string;
     readonly group: string;

package/dist/install/systemd.js

@@ -1,9 +1,12 @@
+import { dirname } from "node:path";
 import { SYSTEM_CONFIG_DIR } from "../config.js";
 import { skipsServiceManager } from "./detect.js";
 export const SERVICE_NAME = "theseeker-agent";
 export const UNIT_PATH = `/etc/systemd/system/${SERVICE_NAME}.service`;
 export const UNIT_FILE_MODE = 0o644;
 export const SUPPLEMENTARY_GROUPS = ["adm", "systemd-journal"];
+/** systemd gives a unit no PATH at all, so the node bin directory (nvm keeps `pm2` there) is prepended to this system default. */
+export const SYSTEM_PATH_TAIL = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
 /** `ProtectSystem=strict` still hides `/home`; the agent reads PM2 logs there, so a `/home` PM2_HOME disables the guard. */
 export function protectHomeValue(pm2Home) {
     return pm2Home.startsWith("/home/") || pm2Home === "/home" ? "false" : "read-only";
@@ -23,7 +26,7 @@ export function buildUnitFile(options) {
     ];
     if (options.addGroups)
         lines.push(`SupplementaryGroups=${SUPPLEMENTARY_GROUPS.join(" ")}`);
-    lines.push(`Environment=PM2_HOME=${options.pm2Home}`, `ExecStart=${options.nodePath} ${options.binPath} run`, "Restart=always", "RestartSec=5", "NoNewPrivileges=true", "ProtectSystem=strict", `ProtectHome=${protectHomeValue(options.pm2Home)}`, `ReadWritePaths=${SYSTEM_CONFIG_DIR}`, "", "[Install]", "WantedBy=multi-user.target", "");
+    lines.push(`Environment=PATH=${dirname(options.nodePath)}:${SYSTEM_PATH_TAIL}`, `Environment=PM2_HOME=${options.pm2Home}`, `ExecStart=${options.nodePath} ${options.binPath} run`, "Restart=always", "RestartSec=5", "NoNewPrivileges=true", "ProtectSystem=strict", `ProtectHome=${protectHomeValue(options.pm2Home)}`, `ReadWritePaths=${SYSTEM_CONFIG_DIR}`, "", "[Install]", "WantedBy=multi-user.target", "");
     return lines.join("\n");
 }
 export function unitOptionsFrom(detection, addGroups) {
@@ -51,6 +54,7 @@ export function manualInstallCommands(endpoint, user, addGroups) {
         "and then runs:",
         "  sudo systemctl daemon-reload",
         `  sudo systemctl enable --now ${SERVICE_NAME}`,
+        `  sudo systemctl restart ${SERVICE_NAME}`,
     ];
 }
 export function manualGroupCommand(user) {
@@ -86,6 +90,11 @@ export async function installSystemd(environment, options) {
     if (!(await runSystemctl(environment, ["enable", "--now", SERVICE_NAME])))
         return 1;
     environment.print(`service enabled: ${SERVICE_NAME}`);
+    // `enable --now` no-ops on an already-running service, so an upgraded package or a rewritten unit/config
+    // would keep running the old process until someone restarted it by hand.
+    if (!(await runSystemctl(environment, ["restart", SERVICE_NAME])))
+        return 1;
+    environment.print(`service restarted: ${SERVICE_NAME}`);
     if (!options.addGroups)
         for (const line of manualGroupCommand(options.detection.user))
             environment.print(line);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@the-seeker/server-agent",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "type": "module",
   "bin": { "theseeker-agent": "dist/cli.js" },
   "engines": { "node": ">=20" },