volute 0.8.0 → 0.8.2

package/README.md

@@ -242,9 +242,11 @@ Or manually:
 
 ```sh
 npm install -g volute
-sudo volute setup --host 0.0.0.0
+sudo $(which volute) setup --host 0.0.0.0
 ```
 
+> **Note:** The initial `sudo $(which volute)` is needed because `sudo` resets PATH. After setup completes, a wrapper at `/usr/local/bin/volute` is created so `sudo volute` works normally going forward.
+
 This installs a system-level systemd service with data at `/var/lib/volute` and user isolation enabled. Check status with `systemctl status volute`. Uninstall with `sudo volute setup uninstall --force`.
 
 ### Auto-start (user-level)

package/dist/cli.js

@@ -9,7 +9,7 @@ if (!process.env.VOLUTE_HOME) {
 var command = process.argv[2];
 var args = process.argv.slice(3);
 if (command === "--version" || command === "-v") {
-  const { default: pkg } = await import("./package-5UCKNK6J.js");
+  const { default: pkg } = await import("./package-TWWKVRRL.js");
   console.log(pkg.version);
   process.exit(0);
 }
@@ -48,10 +48,10 @@ switch (command) {
     await import("./daemon-restart-CPBLMMRI.js").then((m) => m.run(args));
     break;
   case "setup":
-    await import("./setup-JXDCJX7W.js").then((m) => m.run(args));
+    await import("./setup-2JDBGU7Y.js").then((m) => m.run(args));
     break;
   case "service":
-    await import("./service-R4MCNBOA.js").then((m) => m.run(args));
+    await import("./service-XCADRKIS.js").then((m) => m.run(args));
     break;
   case "update":
     await import("./update-EUCZ7XGG.js").then((m) => m.run(args));

package/dist/{package-5UCKNK6J.js → package-TWWKVRRL.js}

@@ -4,7 +4,7 @@ import "./chunk-K3NQKI34.js";
 // package.json
 var package_default = {
   name: "volute",
-  version: "0.8.0",
+  version: "0.8.2",
   description: "CLI for creating and managing self-modifying AI agents powered by the Claude Agent SDK",
   type: "module",
   license: "MIT",

package/dist/{service-R4MCNBOA.js → service-XCADRKIS.js}

@@ -82,6 +82,13 @@ async function install(port, host) {
     await execFileAsync("launchctl", ["load", path]);
     console.log("Service installed and loaded. Volute daemon will start on login.");
   } else if (platform === "linux") {
+    if (process.getuid?.() === 0) {
+      console.error(
+        "Error: `volute service install` uses systemd user services, which don't work as root."
+      );
+      console.error("Use `volute setup` instead to install a system-level service.");
+      process.exit(1);
+    }
     const path = unitPath();
     mkdirSync(resolve(homedir(), ".config", "systemd", "user"), { recursive: true });
     writeFileSync(path, generateUnit(voluteBin, port, host));

package/dist/{setup-JXDCJX7W.js → setup-2JDBGU7Y.js}

@@ -14,8 +14,12 @@ import "./chunk-K3NQKI34.js";
 // src/commands/setup.ts
 import { execFileSync } from "child_process";
 import { existsSync, mkdirSync, rmSync, unlinkSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { dirname, resolve } from "path";
 var SERVICE_NAME = "volute.service";
 var SERVICE_PATH = `/etc/systemd/system/${SERVICE_NAME}`;
+var PROFILE_PATH = "/etc/profile.d/volute.sh";
+var WRAPPER_PATH = "/usr/local/bin/volute";
 var DATA_DIR = "/var/lib/volute";
 var AGENTS_DIR = "/agents";
 var HOST_RE = /^[a-zA-Z0-9.:_-]+$/;
@@ -24,31 +28,51 @@ function validateHost(host) {
     throw new Error(`Invalid host: ${host}`);
   }
 }
+function buildServicePath(voluteBin) {
+  const binDir = dirname(voluteBin);
+  const standardPaths = [
+    "/usr/local/sbin",
+    "/usr/local/bin",
+    "/usr/sbin",
+    "/usr/bin",
+    "/sbin",
+    "/bin"
+  ];
+  const parts = standardPaths.includes(binDir) ? standardPaths : [binDir, ...standardPaths];
+  return parts.join(":");
+}
 function generateUnit(voluteBin, port, host) {
   const args = ["up", "--foreground"];
   if (port != null) args.push("--port", String(port));
   if (host) args.push("--host", host);
-  return `[Unit]
-Description=Volute Agent Manager
-After=network.target
-
-[Service]
-Type=exec
-ExecStart=${voluteBin} ${args.join(" ")}
-Environment=VOLUTE_HOME=${DATA_DIR}
-Environment=VOLUTE_AGENTS_DIR=${AGENTS_DIR}
-Environment=VOLUTE_ISOLATION=user
-Restart=on-failure
-RestartSec=5
-ProtectSystem=strict
-ReadWritePaths=${DATA_DIR} ${AGENTS_DIR}
-PrivateTmp=yes
-ProtectHome=yes
-RestrictSUIDSGID=yes
-
-[Install]
-WantedBy=multi-user.target
-`;
+  const home = homedir();
+  const binUnderHome = voluteBin.startsWith(`${home}/`);
+  const lines = [
+    "[Unit]",
+    "Description=Volute Agent Manager",
+    "After=network.target",
+    "",
+    "[Service]",
+    "Type=exec",
+    `ExecStart=${voluteBin} ${args.join(" ")}`,
+    `Environment=PATH=${buildServicePath(voluteBin)}`,
+    `Environment=VOLUTE_HOME=${DATA_DIR}`,
+    `Environment=VOLUTE_AGENTS_DIR=${AGENTS_DIR}`,
+    "Environment=VOLUTE_ISOLATION=user",
+    "Restart=on-failure",
+    "RestartSec=5",
+    "ProtectSystem=strict",
+    `ReadWritePaths=${DATA_DIR} ${AGENTS_DIR}`,
+    "PrivateTmp=yes"
+  ];
+  if (!binUnderHome) {
+    lines.push("ProtectHome=yes");
+  } else {
+    console.warn(`Warning: ProtectHome=yes omitted because volute binary is under ${home}.`);
+    console.warn("Consider installing Node.js system-wide for stronger sandboxing.");
+  }
+  lines.push("RestrictSUIDSGID=yes", "", "[Install]", "WantedBy=multi-user.target", "");
+  return lines.join("\n");
 }
 function install(port, host) {
   if (host) validateHost(host);
@@ -71,14 +95,48 @@ function install(port, host) {
   execFileSync("chmod", ["755", DATA_DIR]);
   execFileSync("chmod", ["755", AGENTS_DIR]);
   console.log("Set permissions on directories");
+  writeFileSync(
+    PROFILE_PATH,
+    `export VOLUTE_HOME=${DATA_DIR}
+export VOLUTE_AGENTS_DIR=${AGENTS_DIR}
+`
+  );
+  console.log(`Wrote ${PROFILE_PATH}`);
+  const binDir = dirname(voluteBin);
+  if (voluteBin !== WRAPPER_PATH && !voluteBin.startsWith("/usr/bin")) {
+    const nodeBin = resolve(binDir, "node");
+    const wrapper = `#!/bin/sh
+exec "${nodeBin}" "${voluteBin}" "$@"
+`;
+    writeFileSync(WRAPPER_PATH, wrapper, { mode: 493 });
+    console.log(`Wrote ${WRAPPER_PATH} (wrapper for ${voluteBin})`);
+  }
   writeFileSync(SERVICE_PATH, generateUnit(voluteBin, port, host ?? "0.0.0.0"));
   console.log(`Wrote ${SERVICE_PATH}`);
-  execFileSync("systemctl", ["daemon-reload"]);
-  execFileSync("systemctl", ["enable", "--now", SERVICE_NAME]);
-  console.log("Service installed, enabled, and started.");
-  console.log(`
+  try {
+    execFileSync("systemctl", ["daemon-reload"]);
+  } catch (err) {
+    const e = err;
+    console.error(`Failed to reload systemd after writing ${SERVICE_PATH}.`);
+    if (e.stderr) console.error(e.stderr.toString().trim());
+    console.error(
+      "Try running `systemctl daemon-reload` manually, then `systemctl enable --now volute`."
+    );
+    process.exit(1);
+  }
+  try {
+    execFileSync("systemctl", ["enable", "--now", SERVICE_NAME]);
+    console.log("Service installed, enabled, and started.");
+    console.log(`
 Volute daemon is running. Data directory: ${DATA_DIR}`);
-  console.log("Use `systemctl status volute` to check status.");
+    console.log("Use `systemctl status volute` to check status.");
+  } catch (err) {
+    const e = err;
+    console.error("Service installed but failed to start.");
+    if (e.stderr) console.error(e.stderr.toString().trim());
+    console.error("Check `journalctl -xeu volute.service` for details.");
+    process.exit(1);
+  }
 }
 function uninstall(force) {
   if (process.getuid?.() !== 0) {
@@ -95,6 +153,8 @@ function uninstall(force) {
     console.warn("Warning: failed to disable service (may already be stopped)");
   }
   unlinkSync(SERVICE_PATH);
+  if (existsSync(PROFILE_PATH)) unlinkSync(PROFILE_PATH);
+  if (existsSync(WRAPPER_PATH)) unlinkSync(WRAPPER_PATH);
   try {
     execFileSync("systemctl", ["daemon-reload"]);
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "volute",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "CLI for creating and managing self-modifying AI agents powered by the Claude Agent SDK",
   "type": "module",
   "license": "MIT",