fix: detect socket activation for service status healthy logic

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "linux-patch-api"
-version = "0.3.8"
+version = "0.3.9"
 edition = "2021"
 authors = ["Echo <echo@moon-dragon.us>"]
 description = "Secure remote package management API for Linux systems"

debian/changelog

@@ -1,3 +1,11 @@
+linux-patch-api (0.3.9-1) unstable; urgency=low
+
+  * Fix socket activation detection for service status healthy logic
+  * When service is inactive but enabled, check if .socket unit is active
+  * Mark service healthy if socket is listening (e.g., ssh.socket for ssh.service)
+
+ -- Echo <echo@moon-dragon.us>  Mon, 05 May 2026 11:25:00 -0500
+
 linux-patch-api (0.3.8-1) unstable; urgency=low
 
   * Add GET /api/v1/system/services/{name} endpoint for service health checks

src/packages/mod.rs

@@ -568,6 +568,28 @@ fn get_systemd_service_status(name: &str) -> Result<Option<ServiceStatus>> {
 
     let healthy = active_state == "active" && sub_state == "running";
 
+
+    // Check for socket activation: if service is inactive but enabled,
+    // check if the corresponding .socket unit is active (listening)
+    let healthy = if !healthy && active_state == "inactive" && unit_file_state == "enabled" {
+        let socket_name = format!("{}.socket", name.trim_end_matches(".service"));
+        if let Ok(socket_output) = Command::new("systemctl")
+            .args(["show", &socket_name, "--property=ActiveState", "--no-pager"])
+            .output()
+        {
+            let socket_stdout = String::from_utf8_lossy(&socket_output.stdout);
+            if socket_stdout.contains("ActiveState=active") {
+                true
+            } else {
+                healthy
+            }
+        } else {
+            healthy
+        }
+    } else {
+        healthy
+    };
+
     Ok(Some(ServiceStatus {
         name: id,
         display_name: description,