@animalabs/agent-framework 0.23.2 → 0.24.0

package/dist/src/mcpl/server-connection.js

@@ -13,23 +13,35 @@ import { openTransport, STDERR_END_WAIT_MS } from './transport.js';
 import { maskNegotiatedCapabilities } from './capability-mask.js';
 import { CapabilityGrant, expandAdvertisementShorthand } from './capability-grant.js';
 import { CAPABILITY_DISABLED, boundedForLog, describeCause } from './errors.js';
-import { logDetail, logValue, logValueRedacted } from './log-value.js';
-import { LEGACY_MCP_PROTOCOL_VERSION, MODERN_MCP_PROTOCOL_VERSION, checkServerConfig, redactServerText, } from './protocol-family.js';
+import { logDetail, logValue, logValueRedacted, loggedCode } from './log-value.js';
+import { LEGACY_MCP_PROTOCOL_VERSION, MODERN_MCP_PROTOCOL_VERSION, checkServerConfig, redactServerText, redactedData, serverTextRedactor, } from './protocol-family.js';
 import { McplMethod } from './types.js';
 /** Timeout for the initialize handshake in milliseconds.
  *  Spring Boot + JDA servers can take 5-10s to boot, so 30s is safe. */
 const INITIALIZE_TIMEOUT_MS = 30_000;
+/** How many errors down a `cause` chain stderrTailOf looks. */
+const STDERR_TAIL_CAUSE_LINKS = 8;
 /** A failed connect's `stderrTail`, the last of the server's stderr that its
- *  handshake's error keeps, when there is one. */
+ *  handshake's error keeps, when there is one: the error's own, or the
+ *  nearest one in its `cause` chain, since a launch that couldn't be reaped
+ *  (McplUnreapedLaunchError) and the framework's refusals wrap the
+ *  handshake's error. It looks at most STDERR_TAIL_CAUSE_LINKS causes down,
+ *  so a chain that loops ends. */
 export function stderrTailOf(error) {
-    const tail = error?.stderrTail;
-    return typeof tail === 'string' && tail !== '' ? tail : undefined;
+    let at = error;
+    for (let link = 0; link <= STDERR_TAIL_CAUSE_LINKS && typeof at === 'object' && at !== null; link++) {
+        const { stderrTail, cause } = at;
+        if (typeof stderrTail === 'string' && stderrTail !== '')
+            return stderrTail;
+        at = cause;
+    }
+    return undefined;
 }
 /** For the host's own log line about a failed connect: the server's stderr
- *  that the error keeps as `stderrTail`, with the server's credentials
- *  taken out by `redact` (its redactServerText), one marked line per line of
- *  it, each through log-value, since it's the server's text. '' when there's
- *  none. */
+ *  that the error, or the nearest error it wraps, keeps as `stderrTail`
+ *  (stderrTailOf), with the server's credentials taken out by `redact` (its
+ *  redactServerText), one marked line per line of it, each through
+ *  log-value, since it's the server's text. '' when there's none. */
 export function withStderr(error, redact) {
     const tail = stderrTailOf(error);
     if (tail === undefined)
@@ -90,11 +102,13 @@ export class McplProtocolVersionError extends Error {
     data;
     offered;
     constructor(message, kind, 
-    /** Revision the server answered with (`mismatch`; null when it gave none). */
+    /** Revision the server answered with (`mismatch`; null when it gave
+     *  none), redacted as the server's words are. */
     returned, 
     /** Revisions the server says it supports (`rejected`, when stated). */
     supported, 
-    /** The JSON-RPC error's code and data, verbatim (`rejected`). */
+    /** The JSON-RPC error's code, and its data with each string in it
+     *  redacted (`rejected`). */
     code, data, 
     /** The revision this client offered: the legacy engine's, unless a
      *  modern connection's. */
@@ -109,8 +123,13 @@ export class McplProtocolVersionError extends Error {
         this.name = 'McplProtocolVersionError';
     }
 }
-function protocolVersionRejection(id, error) {
-    const data = error.data;
+function protocolVersionRejection(config, error) {
+    const id = config.id;
+    // The server's words and data, redacted before they're bounded or kept:
+    // the error goes to the host. One build for all of them, so a
+    // configuration that can't be read is read once.
+    const redact = serverTextRedactor(config).now();
+    const data = redactedData(error.data, redact);
     const supported = Array.isArray(data?.supported) && data.supported.every((v) => typeof v === 'string')
         ? data.supported
         : null;
@@ -119,9 +138,10 @@ function protocolVersionRejection(id, error) {
         : '';
     return new McplProtocolVersionError(`MCPL server "${id}" does not support MCP ${MCP_PROTOCOL_VERSION}` +
         // The server's message can be any JSON value, so it's read without
-        // throwing (describeCause) and bounded, as the initialize error is.
-        (supported ? ` (it supports: ${supported.join(', ') || 'none listed'}).` : ` (${boundedForLog(describeCause(error.message))}).`) +
-        modernHint, 'rejected', null, supported, error.code, error.data);
+        // throwing (describeCause), and redacted, then bounded, as the
+        // initialize error is.
+        (supported ? ` (it supports: ${boundedForLog(supported.join(', ')) || 'none listed'}).` : ` (${boundedForLog(redact(describeCause(error.message)))}).`) +
+        modernHint, 'rejected', null, supported, error.code, data);
 }
 const errorOf = (value) => (value instanceof Error ? value : new Error(String(value)));
 /**
@@ -147,17 +167,18 @@ class HandshakeCleanupError extends Error {
  * is confirmed, so the caller can still clean up, and should start nothing
  * else for this server until then. connect() and connectWithReconnect()
  * throw this, and the modern engine's ModernMcpConnection.connect() too.
- * `cause` is the connect's own failure.
+ * `cause` is the connect's own failure. `connection` isn't enumerable, so
+ * printing the error doesn't print the connection's configuration, its
+ * credentials included.
  */
 export class McplUnreapedLaunchError extends Error {
-    connection;
     cleanup;
     constructor(connection, failure, 
     /** The cleanup's own failure: the child it couldn't confirm exited. */
     cleanup) {
         super(`${failure.message}; its cleanup also failed: ${cleanup.message}`, { cause: failure });
-        this.connection = connection;
         this.cleanup = cleanup;
+        Object.defineProperty(this, 'connection', { value: connection, enumerable: false });
         this.name = 'McplUnreapedLaunchError';
     }
 }
@@ -179,8 +200,9 @@ export class McplRequestError extends Error {
     outcome;
     data;
     constructor(message, outcome, 
-    /** The JSON-RPC error's `data`, verbatim, when the server supplied one
-     *  (e.g. which parts of a multi-part send were posted). */
+    /** The JSON-RPC error's `data`, when the server supplied one (e.g. which
+     *  parts of a multi-part send were posted), with each string in it
+     *  redacted (redactedData): a host hands it on. */
     data) {
         super(message);
         this.outcome = outcome;
@@ -405,8 +427,8 @@ export class McplServerConnection extends EventEmitter {
     publishDeadlineMs = DEFAULT_REQUEST_TIMEOUT_MS;
     // Event buffering: control-plane traffic can be released independently from
     // inference-bearing data-plane traffic. This lets a server finish its own
-    // registration (and answer host tools/call requests) while startup/reconnect
-    // reconciliation keeps agent wakes behind a durable barrier.
+    // registration (and answer host tools/call requests) while its data plane
+    // stays held, as through a quiesce.
     controlPlaneReady = false;
     dataPlaneReady = false;
     bufferedEvents = [];
@@ -443,6 +465,15 @@ export class McplServerConnection extends EventEmitter {
     refusedHeldRequests = 0;
     // Reconnect state (adapted from Anarchid/agent-framework@mcpl-module-proto)
     config = null;
+    /** The redactor of the server's text for `config`, made at its first error
+     *  answer, by when `config` is set, and kept: a framework-launched child's
+     *  `env` is a getter that reads the awareness ledger, so a redactor built
+     *  per answer would read it per answer (#540's review, R1-2). An answer
+     *  takes one build of it for its words, data and log line (`now()`), so
+     *  it reads the ledger at most once. It builds again only after a build
+     *  that failed, which withholds that answer's text, or once a dial notes
+     *  something new (serverTextRedactor). */
+    redactor = null;
     hostCapabilities = null;
     reconnectEnabled = false;
     reconnectIntervalMs = 5000;
@@ -528,8 +559,8 @@ export class McplServerConnection extends EventEmitter {
             console.error(`[mcpl] ${this.id}: flushing ${pending.length} buffered event(s) synchronously ` +
                 `(long pause backlog${dropped > 0 ? `; ${dropped} dropped at cap` : ''})`);
         }
-        // Re-enter the gate for every buffered item. A control handler (notably
-        // tools/list_changed) may install a newer data-plane barrier while this
+        // Re-enter the gate for every buffered item. A control handler (a
+        // host/command quiesce, say) may pause the data plane while this
         // snapshot is being flushed; later data items must observe that pause.
         this.flushHeld(pending);
     }
@@ -695,17 +726,16 @@ export class McplServerConnection extends EventEmitter {
     }
     /**
      * Close the data plane synchronously while leaving an already-released
-     * control plane live. Used before list-change reconciliation so no new
-     * inference event can beat barrier installation. A reconnect closes both
-     * planes instead.
+     * control plane live. Used by quiesce, and by reconnectAfterFailure before
+     * its teardown. A reconnect closes both planes instead.
      */
     pauseDataPlane() {
         this.dataPlaneReady = false;
     }
     /**
      * Override emit to buffer server→host events until the corresponding plane
-     * is ready. Lifecycle events always pass through so reconnect can install a
-     * new data-plane gate before the fresh transport is exposed.
+     * is ready. Lifecycle events always pass through so the reconnect listener
+     * runs before the fresh transport's buffered traffic is released.
      */
     emit(event, ...args) {
         const name = typeof event === 'string' ? event : '';
@@ -999,18 +1029,21 @@ export class McplServerConnection extends EventEmitter {
                     clientInfo: { name: 'agent-framework', version: '1.0.0' },
                 },
             };
+            // When the transport fails, the end of the server's stderr often says
+            // why, such as a missing token or a crash at startup. It goes on the
+            // error as `stderrTail`, never into the message: an error's message
+            // travels to traces and tool results, and a server's stderr is its own
+            // text, which can hold a credential.
+            const failed = (failure) => {
+                // It goes to the host too, so it's redacted, from a window of the
+                // stream longer than the tail, so a credential the tail's cut
+                // would split is whole when it's matched (stderrTailRedacted).
+                const tail = transport.stderrTailRedacted(serverTextRedactor(config)).trimEnd();
+                return Object.assign(new Error(failure), tail ? { stderrTail: tail } : {});
+            };
             // Await the initialize response, racing an early transport close/error,
             // a timeout and the owner's close. Every path cleans up its listeners.
             const { mcpl: rawCapabilities, mcpToolsAdvertised, protocolVersion } = await new Promise((resolve, reject) => {
-                // When the transport fails, the end of the server's stderr often says
-                // why, such as a missing token or a crash at startup. It goes on the
-                // error as `stderrTail`, never into the message: an error's message
-                // travels to traces and tool results, and a server's stderr is its
-                // own text, which can hold a credential.
-                const failed = (failure) => {
-                    const tail = transport.stderrTail.trimEnd();
-                    return Object.assign(new Error(failure), tail ? { stderrTail: tail } : {});
-                };
                 const cleanup = () => {
                     transport.off('line', onLine);
                     transport.off('close', onClose);
@@ -1055,20 +1088,24 @@ export class McplServerConnection extends EventEmitter {
                         // listener after cleanup() has cleared the timeout: an uncaught
                         // exception, which ends a host that doesn't catch them, and a
                         // handshake left to wait forever. It's the server's text in an
-                        // error's message, so it's bounded as errors.ts says.
+                        // error the host gets, so it's redacted, then bounded as
+                        // errors.ts says: a cut or a replaced character first would
+                        // leave part of a credential the redactor can't match.
                         reject(msg.error.code === UNSUPPORTED_PROTOCOL_VERSION_CODE
-                            ? protocolVersionRejection(config.id, msg.error)
-                            : new Error(`MCPL server "${config.id}" initialize error: ${boundedForLog(describeCause(msg.error.message))}`));
+                            ? protocolVersionRejection(config, msg.error)
+                            : new Error(`MCPL server "${config.id}" initialize error: ${boundedForLog(redactServerText(describeCause(msg.error.message), config))}`));
                         return;
                     }
                     const result = msg.result;
                     // The server's answer is the established revision. This engine
                     // implements exactly one, so any other answer (or none) means the
                     // two sides never agreed on what they're speaking.
-                    const returned = typeof result?.protocolVersion === 'string' ? result.protocolVersion : null;
-                    if (returned !== MCP_PROTOCOL_VERSION) {
+                    const answered = typeof result?.protocolVersion === 'string' ? result.protocolVersion : null;
+                    if (answered !== MCP_PROTOCOL_VERSION) {
+                        // The server's words go to the host, so they're redacted.
+                        const returned = answered === null ? null : redactServerText(answered, config);
                         reject(new McplProtocolVersionError(`MCPL server "${config.id}" answered initialize with protocolVersion ` +
-                            `${returned === null ? '(none)' : JSON.stringify(returned)}; this client's legacy engine speaks only ${MCP_PROTOCOL_VERSION}`, 'mismatch', returned, null));
+                            `${returned === null ? '(none)' : boundedForLog(JSON.stringify(returned))}; this client's legacy engine speaks only ${MCP_PROTOCOL_VERSION}`, 'mismatch', returned, null));
                         return;
                     }
                     const caps = result?.capabilities;
@@ -1079,7 +1116,7 @@ export class McplServerConnection extends EventEmitter {
                     resolve({
                         mcpl: experimental?.mcpl ?? null,
                         mcpToolsAdvertised: caps?.tools !== undefined,
-                        protocolVersion: returned,
+                        protocolVersion: answered,
                     });
                 };
                 const onClose = (info) => {
@@ -1107,6 +1144,22 @@ export class McplServerConnection extends EventEmitter {
                 transport.on('error', onError);
                 transport.writeLine(JSON.stringify(initRequest));
             });
+            // The transport has found the child's stdin or stdout failed before the
+            // handshake could hand it on, such as when this host's answer to a ping
+            // the server sent met EPIPE. Nothing more is written to the child then,
+            // so the connection couldn't serve. It's read here, once the answer has
+            // passed its own checks, rather than as the answer arrives: a write's
+            // EPIPE is reported only once the callback that wrote it has returned,
+            // so a ping and the answer read in one callback would pass a check made
+            // there. A child that outlived SIGKILL may already have said so with
+            // nothing listening (the transport's 'unreaped' is wired only once the
+            // handshake hands it on). So the handshake fails, and its cleanup holds
+            // the launch if it can't reap the child. A failure of the write below
+            // is reported only once the caller has wired the transport, so it
+            // reaches the connection as a loss, like any later one.
+            const pipeFailure = transport.pipeFailure;
+            if (pipeFailure)
+                throw failed(`MCPL server "${config.id}" stdio pipe failed with ${pipeFailure.message} during the handshake`);
             // Send `initialized` notification (no id)
             transport.writeLine(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }));
             // §5.1 boolean shorthand expands to explicit leaves BEFORE the config
@@ -1282,9 +1335,13 @@ export class McplServerConnection extends EventEmitter {
         const timeoutMs = this.requestTimeoutMs > 0 ? this.requestTimeoutMs : this.publishDeadlineMs;
         return this.sendRequest(McplMethod.ChannelsOpen, params, { timeoutMs });
     }
-    /** Send `channels/close` request and await result. */
+    /** Send `channels/close` request and await result. It keeps a deadline as
+     *  channels/open does: a delivery waits for a channel's queued lifecycle
+     *  work, closes included, so a close that is never answered would hold the
+     *  delivery, and the turn that waits for it, for good. */
     sendChannelsClose(params) {
-        return this.sendRequest(McplMethod.ChannelsClose, params);
+        const timeoutMs = this.requestTimeoutMs > 0 ? this.requestTimeoutMs : this.publishDeadlineMs;
+        return this.sendRequest(McplMethod.ChannelsClose, params, { timeoutMs });
     }
     /** Send `channels/acknowledge` request and await result. */
     sendChannelsAcknowledge(params) {
@@ -1367,10 +1424,11 @@ export class McplServerConnection extends EventEmitter {
                 return { ...rest, tools };
             }
             if (typeof result.nextCursor !== 'string') {
-                throw malformed(`nextCursor must be a string, got ${JSON.stringify(result.nextCursor)}`);
+                // The cursor is the server's, so it's redacted, then bounded.
+                throw malformed(`nextCursor must be a string, got ${boundedForLog(redactServerText(JSON.stringify(result.nextCursor), this.config ?? {}))}`);
             }
             if (seen.has(result.nextCursor)) {
-                throw new Error(`MCPL server "${this.id}" repeated tools/list cursor ${JSON.stringify(result.nextCursor)}`);
+                throw new Error(`MCPL server "${this.id}" repeated tools/list cursor ${boundedForLog(redactServerText(JSON.stringify(result.nextCursor), this.config ?? {}))}`);
             }
             seen.add(result.nextCursor);
             cursor = result.nextCursor;
@@ -1662,9 +1720,8 @@ export class McplServerConnection extends EventEmitter {
         // boundary resets, so control traffic too (a server's channels/register
         // right after initialize) must wait for the new grant rather than be
         // refused against the empty one. The reconnect lifecycle event bypasses
-        // buffering; its framework listener installs the awareness barrier,
-        // re-establishes the grant (§5.3 policy responses are never buffered),
-        // and then opens the planes.
+        // buffering; its framework listener re-establishes the grant (§5.3
+        // policy responses are never buffered), and then opens the planes.
         this.controlPlaneReady = false;
         this.dataPlaneReady = false;
         this.resetPolicyForTransportBoundary();
@@ -1685,6 +1742,17 @@ export class McplServerConnection extends EventEmitter {
     // ==========================================================================
     // Private: message sending
     // ==========================================================================
+    /**
+     * A request refused before anything is kept for it, as `error`, with its
+     * operator's line logged after the refusal: a host logger that throws then
+     * loses that line, and can't turn the refusal into a throw from the call.
+     */
+    static refused(error, line) {
+        return new Promise((_, reject) => {
+            reject(error);
+            console.error(line);
+        });
+    }
     /**
      * Send a JSON-RPC request and return a promise that resolves with the result
      * or rejects with a JSON-RPC error.
@@ -1716,11 +1784,10 @@ export class McplServerConnection extends EventEmitter {
         // pipe's error are the operator's, so they go to the log.
         const pipeFailure = this.transport?.pipeFailure;
         if (pipeFailure) {
-            console.error(`MCPL server "${this.id}": ${method} not sent, since its stdio pipe failed: ${logDetail(pipeFailure.message)}`);
-            return Promise.reject(new McplRequestError(`The request wasn't sent: this host can no longer write to the "${this.id}" server, so nothing ran. ` +
+            return McplServerConnection.refused(new McplRequestError(`The request wasn't sent: this host can no longer write to the "${this.id}" server, so nothing ran. ` +
                 (this.willReconnect
                     ? 'This host is reconnecting to it; try again later.'
-                    : "This host won't reconnect to it on its own. If you need it, ask whoever runs this host."), 'not-sent'));
+                    : "This host won't reconnect to it on its own. If you need it, ask whoever runs this host."), 'not-sent'), `MCPL server "${this.id}": ${method} not sent, since its stdio pipe failed: ${logDetail(pipeFailure.message)}`);
         }
         const id = this.nextRequestId++;
         const request = {
@@ -1729,6 +1796,18 @@ export class McplServerConnection extends EventEmitter {
             id,
             params,
         };
+        // A request JSON can't write (a BigInt, a cycle) never leaves this host,
+        // and calling again fails the same way, so it's refused before anything
+        // is kept for it, in the modern engine's words (#556). The method, id and
+        // the serializer's words are the operator's.
+        let line;
+        try {
+            line = JSON.stringify(request);
+        }
+        catch (err) {
+            return McplServerConnection.refused(new McplRequestError(`The request wasn't sent: this host couldn't send it to the "${this.id}" server, so nothing ran. ` +
+                'If calling it again fails, ask whoever runs this host.', 'not-sent'), `MCPL server "${this.id}": ${method} (id=${id}) not sent, since it can't be written as JSON: ${logDetail(err instanceof Error ? err.message : err)}`);
+        }
         return new Promise((resolve, reject) => {
             const pending = { resolve, reject, method };
             const timeoutMs = options.timeoutMs ?? this.requestTimeoutMs;
@@ -1766,17 +1845,18 @@ export class McplServerConnection extends EventEmitter {
             }
             this.pendingRequests.set(id, pending);
             try {
-                this.transport.writeLine(JSON.stringify(request));
+                this.transport.writeLine(line);
             }
             catch (err) {
                 // A synchronous write rejection sent no request. Remove its pending
                 // state and watchdog before reporting that it is safe to retry. The
-                // method, id and the transport's words are the operator's.
+                // method, id and the transport's words are the operator's, logged
+                // after the refusal, as refused() logs.
                 this.pendingRequests.delete(id);
                 if (pending.timer)
                     clearTimeout(pending.timer);
-                console.error(`MCPL server "${this.id}": writing ${method} (id=${id}) failed: ${logDetail(err instanceof Error ? err.message : err)}`);
                 reject(new McplRequestError(`The request wasn't sent: this host couldn't write it to the "${this.id}" server, so nothing ran. Try again later.`, 'not-sent'));
+                console.error(`MCPL server "${this.id}": writing ${method} (id=${id}) failed: ${logDetail(err instanceof Error ? err.message : err)}`);
             }
         });
     }
@@ -2117,16 +2197,18 @@ export class McplServerConnection extends EventEmitter {
         if (pending.timer)
             clearTimeout(pending.timer);
         if (response.error) {
-            // The server's own words, after a word on whose they are, bounded as
-            // errors.ts says, since they're the server's text. Only a string is
-            // words: a message of any other JSON value reads as none. The method,
-            // id and JSON-RPC code are the operator's, so they go to the log, which
-            // prints any value a server can send without throwing (logValue). The
-            // caller's text keeps the server's words unredacted, as a JSON-RPC
-            // answer passes (redactServerText's scope); the log is a record of the
-            // server's text, so the message is redacted there, whatever JSON value
-            // it is, as every other line this connection writes is.
-            const said = typeof response.error.message === 'string' ? boundedForLog(response.error.message.trim()) : '';
+            // The server's own words, after a word on whose they are, redacted and
+            // then bounded as errors.ts says, since they're the server's text in
+            // an error the caller gets (redactServerText's scope), and its data's
+            // strings redacted too. It's trimmed after it's redacted, so a
+            // credential that ends in a space is whole when it's matched. Only a
+            // string is words: a message of any other JSON value reads as none.
+            // The method and id are the operator's, so they go to the log, and the
+            // code (loggedCode) and the message, whatever JSON values they are, go
+            // there redacted (logValueRedacted), as every other line this
+            // connection writes is.
+            const redact = (this.redactor ??= serverTextRedactor(this.config ?? {})).now();
+            const said = typeof response.error.message === 'string' ? boundedForLog(redact(response.error.message).trim()) : '';
             // The call is settled before its log line: its entry is gone and its
             // timer cleared, so nothing else would settle it, and a host's logger
             // can throw. The dispatch's containment reports such a throw. (A
@@ -2135,9 +2217,9 @@ export class McplServerConnection extends EventEmitter {
             pending.reject(new McplRequestError(said
                 ? `The "${this.id}" server answered with an error: ${said}`
                 : `The "${this.id}" server answered with an error without saying what went wrong, so whether the request took effect is unknown. ` +
-                    'Check its effect before trying again.', 'error-response', response.error.data));
-            console.error(`MCPL server "${this.id}" answered ${pending.method} (id=${response.id}) with error ${logValue(response.error.code)}: ` +
-                logValueRedacted(response.error.message, (text) => redactServerText(text, this.config ?? {})));
+                    'Check its effect before trying again.', 'error-response', redactedData(response.error.data, redact)));
+            console.error(`MCPL server "${this.id}" answered ${pending.method} (id=${response.id}) with error ${loggedCode(response.error.code, redact)}: ` +
+                logValueRedacted(response.error.message, redact));
         }
         else {
             pending.resolve(response.result);
@@ -2246,8 +2328,10 @@ export class McplServerConnection extends EventEmitter {
         // reconnecting, and is lost as on a close, with the permanent failure
         // that raises the alert and takes its tools off the list. Its id stays
         // held until close() confirms the exit. A close the host has begun
-        // reports the failure itself. During a handshake nothing listens yet:
-        // the handshake's own cleanup holds the launch, once the handshake fails.
+        // reports the failure itself. During a handshake nothing listens yet: a
+        // handshake whose pipe has failed fails, when its answer comes (it's
+        // refused then), when the child's exit closes the transport, or at its
+        // timeout, and its own cleanup holds the launch.
         transport.on('unreaped', (failure) => {
             if (this.closed || this.transport !== transport)
                 return;