artifacty 0.10.7 → 0.10.8

package/README.md

@@ -92,6 +92,10 @@ artifacty serve --host 10.0.0.50 --share-mode team --api-token "$ARTIFACTY_BOOTS
 artifacty install all --mcp-url http://10.0.0.50:8787/mcp --api-token "$ARTIFACTY_PERSONAL_TOKEN"
 ```
 
+When running the central server as a Linux `systemctl --user` service, enable
+lingering for the service account so Artifacty stays up after logout:
+`sudo loginctl enable-linger $USER`.
+
 Administrators can create users individually at `/admin/users` or import them
 from CSV. Use `email,name,role,password,password_reset_required` headers. If
 `password` is empty, Artifacty generates a temporary password, shows it once in

package/docs/central-team-deployment-design.md

@@ -134,6 +134,19 @@ proxy, keep `ARTIFACTY_ENABLE_REACT_RENDERER` disabled unless the team trusts
 all artifact authors, and store `ARTIFACTY_HOME` on local server disk with
 regular backups.
 
+For Linux user-service deployments, enable systemd lingering for the service
+account:
+
+```bash
+sudo loginctl enable-linger artifacty
+loginctl show-user artifacty -p Linger
+```
+
+Use the actual service account name. Without lingering, `systemctl --user`
+services are tied to the user's login manager and can stop after logout, making
+the central dashboard and `/mcp` endpoint unavailable until that user logs in
+again. A system-level unit is another valid option for central servers.
+
 The central server exposes `/mcp` only when explicitly enabled. This keeps the
 local browser/API server behavior unchanged while making team MCP exposure an
 intentional operating mode.

package/docs/integrations.md

@@ -393,9 +393,11 @@ The generated service runs `src/server.js` with explicit `--host` and `--home` a
 Activation is still delegated to the OS service manager:
 
 - macOS: `launchctl load ~/Library/LaunchAgents/com.artifacty.server.plist`
-- Linux: `systemctl --user enable --now com.artifacty.server.service`
+- Linux: `sudo loginctl enable-linger $USER`, then `systemctl --user enable --now com.artifacty.server.service`
 - Windows: run the generated PowerShell script, which registers and starts the `ArtifactyServer` scheduled task.
 
+On Linux central servers, user services stop when the user's systemd manager exits unless lingering is enabled. Verify durable operation with `loginctl show-user $USER -p Linger`; it should report `Linger=yes`. Without lingering, Artifacty may be unavailable after logout and appear to recover only after the user logs back in.
+
 For background services, prefer a stable `ARTIFACTY_API_TOKEN` or `--api-token` value. `serve --generate-token` is intended for temporary interactive sessions; the parent CLI returns the generated token in JSON.
 
 ## Backup and Audit

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "artifacty",
-  "version": "0.10.7",
+  "version": "0.10.8",
   "description": "Local artifact exchange for heterogeneous LLM agents via HTTP and MCP.",
   "type": "module",
   "keywords": [

package/src/lib/service.js

@@ -184,9 +184,11 @@ function definitionForPlatform(platform, options = {}, renderOnly) {
       path: servicePath(platform, options),
       content: createSystemdUserUnit(options),
       nextSteps: [
+        "sudo loginctl enable-linger $USER",
         "systemctl --user daemon-reload",
         `systemctl --user enable --now ${path.basename(servicePath(platform, options))}`,
         `systemctl --user status ${path.basename(servicePath(platform, options))}`,
+        "loginctl show-user $USER -p Linger",
         `journalctl --user -u ${path.basename(servicePath(platform, options))} -f`,
         `systemctl --user disable --now ${path.basename(servicePath(platform, options))}`
       ],

package/src/lib/storage.js

@@ -10,6 +10,7 @@ import { assertNoSecrets, securityConfig } from "./security.js";
 export const STORE_VERSION = 4;
 export const ARTIFACT_SCHEMA_VERSION = 1;
 export const MAX_ARTIFACT_BYTES = 16 * 1024 * 1024;
+const SOURCE_AGENT_NORMALIZATION_VERSION = "1";
 export const USER_ROLES = ["admin", "user"];
 export const ARTIFACT_FORMATS = [
   "html",
@@ -123,6 +124,11 @@ export async function writeIndex(store, index) {
           insertVersionRecord(db, artifact.id, version);
         }
       }
+      normalizeStoredSourceAgents(db, store, {
+        force: true,
+        inTransaction: true,
+        rebuildSearch: false
+      });
       rebuildSearchIndexInDb(db, store);
     });
   } finally {
@@ -1502,9 +1508,26 @@ function migrateJsonIndex(db, store) {
   });
 }
 
+function metaValue(db, key) {
+  return db.prepare("SELECT value FROM meta WHERE key = ?").get(key)?.value || "";
+}
+
 const INFERABLE_SOURCE_AGENTS = new Set(["claude", "codex", "copilot", "cursor", "gemini"]);
 
-function normalizeStoredSourceAgents(db, store) {
+function normalizeStoredSourceAgents(db, store, options = {}) {
+  if (!options.force && metaValue(db, "source_agent_normalized_version") === SOURCE_AGENT_NORMALIZATION_VERSION) {
+    return;
+  }
+
+  const run = () => normalizeStoredSourceAgentsInDb(db, store, options);
+  if (options.inTransaction) {
+    run();
+  } else {
+    transaction(db, run);
+  }
+}
+
+function normalizeStoredSourceAgentsInDb(db, store, options = {}) {
   const rows = db.prepare(`
     SELECT id, source_agent, tags_json
     FROM artifacts
@@ -1512,37 +1535,37 @@ function normalizeStoredSourceAgents(db, store) {
   const updateArtifact = db.prepare("UPDATE artifacts SET source_agent = ?, tags_json = ? WHERE id = ?");
   let changed = false;
 
-  transaction(db, () => {
-    for (const row of rows) {
-      const normalized = normalizeSourceAgent(row.source_agent, { defaultValue: "unknown" });
-      const inferred = isUnknownSourceAgent(normalized)
-        ? inferStoredSourceAgent(db, row)
-        : normalized;
-      const nextSourceAgent = inferred || normalized;
-      const nextTags = normalizeStoredSourceTags(row.tags_json, nextSourceAgent);
-      if (nextSourceAgent !== row.source_agent || nextTags !== row.tags_json) {
-        updateArtifact.run(nextSourceAgent, nextTags, row.id);
-        changed = true;
-      }
+  for (const row of rows) {
+    const normalized = normalizeSourceAgent(row.source_agent, { defaultValue: "unknown" });
+    const inferred = isUnknownSourceAgent(normalized)
+      ? inferStoredSourceAgent(db, row)
+      : normalized;
+    const nextSourceAgent = inferred || normalized;
+    const nextTags = normalizeStoredSourceTags(row.tags_json, nextSourceAgent);
+    if (nextSourceAgent !== row.source_agent || nextTags !== row.tags_json) {
+      updateArtifact.run(nextSourceAgent, nextTags, row.id);
+      changed = true;
     }
+  }
 
-    const auditRows = db.prepare(`
-      SELECT id, source_agent
-      FROM audit_log
-      WHERE source_agent IS NOT NULL
-        AND TRIM(source_agent) != ''
-    `).all();
-    const updateAudit = db.prepare("UPDATE audit_log SET source_agent = ? WHERE id = ?");
-    for (const row of auditRows) {
-      const normalized = normalizeSourceAgent(row.source_agent, { defaultValue: "" });
-      if (normalized && normalized !== row.source_agent) {
-        updateAudit.run(normalized, row.id);
-        changed = true;
-      }
+  const auditRows = db.prepare(`
+    SELECT id, source_agent
+    FROM audit_log
+    WHERE source_agent IS NOT NULL
+      AND TRIM(source_agent) != ''
+  `).all();
+  const updateAudit = db.prepare("UPDATE audit_log SET source_agent = ? WHERE id = ?");
+  for (const row of auditRows) {
+    const normalized = normalizeSourceAgent(row.source_agent, { defaultValue: "" });
+    if (normalized && normalized !== row.source_agent) {
+      updateAudit.run(normalized, row.id);
+      changed = true;
     }
-  });
+  }
+
+  db.prepare("INSERT OR REPLACE INTO meta (key, value) VALUES ('source_agent_normalized_version', ?)").run(SOURCE_AGENT_NORMALIZATION_VERSION);
 
-  if (changed) {
+  if (changed && options.rebuildSearch !== false) {
     rebuildSearchIndexInDb(db, store);
   }
 }