@code-yeongyu/senpi 2026.9.22-2 → 2026.9.22-3

package/dist/modes/rpc/host-process-metrics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-process-metrics.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-process-metrics.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,kBAAkB;IAClC,uGAAuG;IACvG,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAWD,wBAAsB,sBAAsB,CAC3C,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C,OAAO,CAAC,kBAAkB,CAAC,CAW7B"}
+{"version":3,"file":"host-process-metrics.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-process-metrics.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,kBAAkB;IAClC,uGAAuG;IACvG,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAeD,wBAAsB,sBAAsB,CAC3C,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C,OAAO,CAAC,kBAAkB,CAAC,CAa7B"}

package/dist/modes/rpc/host-process-metrics.js

@@ -7,22 +7,35 @@
  * that holds every session is its child. Reporting only the supervisor would answer "3 MB" for a
  * daemon holding two gigabytes.
  *
- * Every field is `number | null`, and `null` means "this platform does not publish it here" rather
- * than zero: a status that reported 0 open descriptors on a platform it cannot count them on would
- * be worse than saying nothing. A failing probe never fails the status - an operator asking what a
- * daemon is doing must still get its identity and its sessions when `ps` is unavailable.
+ * The table itself is read through the kernel (`host-process-table.ts`), never by spawning `ps`:
+ * a daemon-control surface polled at client cadence must not run one probe child per read - on a
+ * runtime whose `execFile` does not reap, that is the #1507/omo-desktop#594 zombie machine, one
+ * permanent defunct child per status request. Where the kernel reader is unavailable (Node,
+ * unsupported platforms) every field is `null`, which means "this platform does not publish it
+ * here" rather than zero: a status that reported 0 open descriptors on a platform it cannot count
+ * them on would be worse than saying nothing. A failing read never fails the status - an operator
+ * asking what a daemon is doing must still get its identity and its sessions.
  */
-import { execFile } from "node:child_process";
 import { readdir } from "node:fs/promises";
-import { promisify } from "node:util";
-const run = promisify(execFile);
-const PS_TIMEOUT_MS = 5_000;
-const KILOBYTES_PER_MEGABYTE = 1024;
+import { loadProcessTableReader } from "./host-process-table.js";
 const UNOBSERVED = { rss_mb: null, open_fds: null, zombies: null };
+/** Resolved once per platform; `undefined` on runtimes that cannot read the table without spawning. */
+const readers = new Map();
+function tableReader(platform) {
+    const cached = readers.get(platform);
+    if (cached !== undefined)
+        return cached;
+    const loading = loadProcessTableReader(platform);
+    readers.set(platform, loading);
+    return loading;
+}
 export async function readHostProcessMetrics(pid, platform = process.platform) {
     if (platform === "win32")
         return UNOBSERVED;
-    const rows = await processTable();
+    const read = await tableReader(platform);
+    if (read === undefined)
+        return UNOBSERVED;
+    const rows = read();
     if (rows === undefined)
         return UNOBSERVED;
     const tree = descendants(rows, pid);
@@ -34,27 +47,6 @@ export async function readHostProcessMetrics(pid, platform = process.platform) {
         zombies: tree.filter((row) => row.state.startsWith("Z")).length,
     };
 }
-/**
- * One `ps` reading of the whole table. A daemon's children are found by walking `ppid`, so the
- * table has to be read once rather than probed per pid - and this process spawns nothing else.
- */
-async function processTable() {
-    try {
-        const { stdout } = await run("ps", ["-A", "-o", "pid=,ppid=,stat=,rss="], { timeout: PS_TIMEOUT_MS });
-        return stdout.split("\n").flatMap((line) => {
-            const [pid, ppid, state, rss] = line.trim().split(/\s+/u);
-            if (pid === undefined || ppid === undefined || state === undefined || rss === undefined)
-                return [];
-            const row = { pid: Number(pid), ppid: Number(ppid), state, rssKb: Number(rss) };
-            return Number.isInteger(row.pid) && Number.isInteger(row.ppid) && Number.isFinite(row.rssKb) ? [row] : [];
-        });
-    }
-    catch {
-        // `ps` missing, denied or slow: the daemon's own answers still stand, so this stays a gap in
-        // the report rather than a failed status.
-        return undefined;
-    }
-}
 function descendants(rows, root) {
     const tree = rows.filter((row) => row.pid === root);
     if (tree.length === 0)
@@ -68,6 +60,7 @@ function descendants(rows, root) {
     }
     return tree;
 }
+const KILOBYTES_PER_MEGABYTE = 1024;
 async function openDescriptors(tree) {
     let total = 0;
     let counted = false;

package/dist/modes/rpc/host-process-metrics.js.map

@@ -1 +1 @@
-{"version":3,"file":"host-process-metrics.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-process-metrics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAChC,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAWpC,MAAM,UAAU,GAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AASvF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,GAAW,EACX,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,UAAU,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IACzC,OAAO;QACN,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,sBAAsB,CAAC;QAC9F,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACnE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;KAC/D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY;IAC1B,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,uBAAuB,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QACtG,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1C,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1D,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YACnG,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChF,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3G,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,6FAA6F;QAC7F,0CAA0C;QAC1C,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,IAA2B,EAAE,IAAY;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAA2B;IACzD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/B,CAAC","sourcesContent":["/**\n * What the operating system says about a running daemon: its resident memory, its open descriptors\n * and the children it has not reaped.\n *\n * The numbers describe the whole PROCESS TREE rooted at the registered pid, because that is what a\n * daemon costs: the pid a client can prove ownership of is the lifecycle SUPERVISOR, and the host\n * that holds every session is its child. Reporting only the supervisor would answer \"3 MB\" for a\n * daemon holding two gigabytes.\n *\n * Every field is `number | null`, and `null` means \"this platform does not publish it here\" rather\n * than zero: a status that reported 0 open descriptors on a platform it cannot count them on would\n * be worse than saying nothing. A failing probe never fails the status - an operator asking what a\n * daemon is doing must still get its identity and its sessions when `ps` is unavailable.\n */\nimport { execFile } from \"node:child_process\";\nimport { readdir } from \"node:fs/promises\";\nimport { promisify } from \"node:util\";\n\nconst run = promisify(execFile);\nconst PS_TIMEOUT_MS = 5_000;\nconst KILOBYTES_PER_MEGABYTE = 1024;\n\nexport interface HostProcessMetrics {\n\t/** Resident memory of the daemon's process tree, in megabytes; shared pages count once per process. */\n\treadonly rss_mb: number | null;\n\t/** Open descriptors across the tree. `/proc`-only, so `null` off Linux. */\n\treadonly open_fds: number | null;\n\t/** Processes in the tree that have exited and whose status nobody collected. */\n\treadonly zombies: number | null;\n}\n\nconst UNOBSERVED: HostProcessMetrics = { rss_mb: null, open_fds: null, zombies: null };\n\ninterface ProcessRow {\n\treadonly pid: number;\n\treadonly ppid: number;\n\treadonly state: string;\n\treadonly rssKb: number;\n}\n\nexport async function readHostProcessMetrics(\n\tpid: number,\n\tplatform: NodeJS.Platform = process.platform,\n): Promise<HostProcessMetrics> {\n\tif (platform === \"win32\") return UNOBSERVED;\n\tconst rows = await processTable();\n\tif (rows === undefined) return UNOBSERVED;\n\tconst tree = descendants(rows, pid);\n\tif (tree.length === 0) return UNOBSERVED;\n\treturn {\n\t\trss_mb: Math.round(tree.reduce((total, row) => total + row.rssKb, 0) / KILOBYTES_PER_MEGABYTE),\n\t\topen_fds: platform === \"linux\" ? await openDescriptors(tree) : null,\n\t\tzombies: tree.filter((row) => row.state.startsWith(\"Z\")).length,\n\t};\n}\n\n/**\n * One `ps` reading of the whole table. A daemon's children are found by walking `ppid`, so the\n * table has to be read once rather than probed per pid - and this process spawns nothing else.\n */\nasync function processTable(): Promise<readonly ProcessRow[] | undefined> {\n\ttry {\n\t\tconst { stdout } = await run(\"ps\", [\"-A\", \"-o\", \"pid=,ppid=,stat=,rss=\"], { timeout: PS_TIMEOUT_MS });\n\t\treturn stdout.split(\"\\n\").flatMap((line) => {\n\t\t\tconst [pid, ppid, state, rss] = line.trim().split(/\\s+/u);\n\t\t\tif (pid === undefined || ppid === undefined || state === undefined || rss === undefined) return [];\n\t\t\tconst row = { pid: Number(pid), ppid: Number(ppid), state, rssKb: Number(rss) };\n\t\t\treturn Number.isInteger(row.pid) && Number.isInteger(row.ppid) && Number.isFinite(row.rssKb) ? [row] : [];\n\t\t});\n\t} catch {\n\t\t// `ps` missing, denied or slow: the daemon's own answers still stand, so this stays a gap in\n\t\t// the report rather than a failed status.\n\t\treturn undefined;\n\t}\n}\n\nfunction descendants(rows: readonly ProcessRow[], root: number): readonly ProcessRow[] {\n\tconst tree = rows.filter((row) => row.pid === root);\n\tif (tree.length === 0) return tree;\n\tfor (let index = 0; index < tree.length; index++) {\n\t\tconst parent = tree[index].pid;\n\t\tfor (const row of rows) {\n\t\t\tif (row.ppid === parent && !tree.includes(row)) tree.push(row);\n\t\t}\n\t}\n\treturn tree;\n}\n\nasync function openDescriptors(tree: readonly ProcessRow[]): Promise<number | null> {\n\tlet total = 0;\n\tlet counted = false;\n\tfor (const row of tree) {\n\t\tconst entries = await readdir(`/proc/${row.pid}/fd`).catch(() => undefined);\n\t\tif (entries === undefined) continue;\n\t\tcounted = true;\n\t\ttotal += entries.length;\n\t}\n\treturn counted ? total : null;\n}\n"]}
+{"version":3,"file":"host-process-metrics.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-process-metrics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAiD,MAAM,yBAAyB,CAAC;AAWhH,MAAM,UAAU,GAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAEvF,uGAAuG;AACvG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmD,CAAC;AAE3E,SAAS,WAAW,CAAC,QAAyB;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,GAAW,EACX,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,UAAU,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC;IACpB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IACzC,OAAO;QACN,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,sBAAsB,CAAC;QAC9F,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACnE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;KAC/D,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAgC,EAAE,IAAY;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC,KAAK,UAAU,eAAe,CAAC,IAAgC;IAC9D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/B,CAAC","sourcesContent":["/**\n * What the operating system says about a running daemon: its resident memory, its open descriptors\n * and the children it has not reaped.\n *\n * The numbers describe the whole PROCESS TREE rooted at the registered pid, because that is what a\n * daemon costs: the pid a client can prove ownership of is the lifecycle SUPERVISOR, and the host\n * that holds every session is its child. Reporting only the supervisor would answer \"3 MB\" for a\n * daemon holding two gigabytes.\n *\n * The table itself is read through the kernel (`host-process-table.ts`), never by spawning `ps`:\n * a daemon-control surface polled at client cadence must not run one probe child per read - on a\n * runtime whose `execFile` does not reap, that is the #1507/omo-desktop#594 zombie machine, one\n * permanent defunct child per status request. Where the kernel reader is unavailable (Node,\n * unsupported platforms) every field is `null`, which means \"this platform does not publish it\n * here\" rather than zero: a status that reported 0 open descriptors on a platform it cannot count\n * them on would be worse than saying nothing. A failing read never fails the status - an operator\n * asking what a daemon is doing must still get its identity and its sessions.\n */\nimport { readdir } from \"node:fs/promises\";\nimport { loadProcessTableReader, type ProcessTableReader, type ProcessTableRow } from \"./host-process-table.ts\";\n\nexport interface HostProcessMetrics {\n\t/** Resident memory of the daemon's process tree, in megabytes; shared pages count once per process. */\n\treadonly rss_mb: number | null;\n\t/** Open descriptors across the tree. `/proc`-only, so `null` off Linux. */\n\treadonly open_fds: number | null;\n\t/** Processes in the tree that have exited and whose status nobody collected. */\n\treadonly zombies: number | null;\n}\n\nconst UNOBSERVED: HostProcessMetrics = { rss_mb: null, open_fds: null, zombies: null };\n\n/** Resolved once per platform; `undefined` on runtimes that cannot read the table without spawning. */\nconst readers = new Map<string, Promise<ProcessTableReader | undefined>>();\n\nfunction tableReader(platform: NodeJS.Platform): Promise<ProcessTableReader | undefined> {\n\tconst cached = readers.get(platform);\n\tif (cached !== undefined) return cached;\n\tconst loading = loadProcessTableReader(platform);\n\treaders.set(platform, loading);\n\treturn loading;\n}\n\nexport async function readHostProcessMetrics(\n\tpid: number,\n\tplatform: NodeJS.Platform = process.platform,\n): Promise<HostProcessMetrics> {\n\tif (platform === \"win32\") return UNOBSERVED;\n\tconst read = await tableReader(platform);\n\tif (read === undefined) return UNOBSERVED;\n\tconst rows = read();\n\tif (rows === undefined) return UNOBSERVED;\n\tconst tree = descendants(rows, pid);\n\tif (tree.length === 0) return UNOBSERVED;\n\treturn {\n\t\trss_mb: Math.round(tree.reduce((total, row) => total + row.rssKb, 0) / KILOBYTES_PER_MEGABYTE),\n\t\topen_fds: platform === \"linux\" ? await openDescriptors(tree) : null,\n\t\tzombies: tree.filter((row) => row.state.startsWith(\"Z\")).length,\n\t};\n}\n\nfunction descendants(rows: readonly ProcessTableRow[], root: number): readonly ProcessTableRow[] {\n\tconst tree = rows.filter((row) => row.pid === root);\n\tif (tree.length === 0) return tree;\n\tfor (let index = 0; index < tree.length; index++) {\n\t\tconst parent = tree[index].pid;\n\t\tfor (const row of rows) {\n\t\t\tif (row.ppid === parent && !tree.includes(row)) tree.push(row);\n\t\t}\n\t}\n\treturn tree;\n}\n\nconst KILOBYTES_PER_MEGABYTE = 1024;\n\nasync function openDescriptors(tree: readonly ProcessTableRow[]): Promise<number | null> {\n\tlet total = 0;\n\tlet counted = false;\n\tfor (const row of tree) {\n\t\tconst entries = await readdir(`/proc/${row.pid}/fd`).catch(() => undefined);\n\t\tif (entries === undefined) continue;\n\t\tcounted = true;\n\t\ttotal += entries.length;\n\t}\n\treturn counted ? total : null;\n}\n"]}

package/dist/modes/rpc/host-process-table.d.ts

@@ -0,0 +1,36 @@
+/** One row of the whole-table read; `state` is `"Z"` for zombies, `"U"` otherwise. */
+export interface ProcessTableRow {
+    readonly pid: number;
+    readonly ppid: number;
+    readonly state: string;
+    /** Resident memory in kilobytes; 0 where the kernel reports none (zombies). */
+    readonly rssKb: number;
+}
+/** Reads the whole process table without spawning anything, or `undefined` when it cannot. */
+export type ProcessTableReader = () => readonly ProcessTableRow[] | undefined;
+export interface ProcessTableReaderOptions {
+    /**
+     * Size of the first `sysctl` buffer. The reader grows geometrically from here on a
+     * short read; tests use a tiny value to force the growth path. Production keeps the
+     * default, sized for the busiest observed table.
+     */
+    readonly initialTableBytes?: number;
+}
+/**
+ * Loads the platform reader once per process. Node (and any platform without bindings)
+ * resolves to `undefined`: the status surface then reports `null` fields rather than
+ * falling back to a `ps` child, because a read that spawns a probe is the bug this module
+ * exists to prevent.
+ */
+export declare function loadProcessTableReader(platform?: NodeJS.Platform, options?: ProcessTableReaderOptions): Promise<ProcessTableReader | undefined>;
+/**
+ * Parses `rowCount` `kinfo_proc` rows out of a `sysctl(KERN_PROC_ALL)` buffer.
+ *
+ * Fails closed: the parsed table must describe THIS process - its row exists, its ppid
+ * equals the kernel's own view (`process.ppid`), and it is not a zombie - or the caller
+ * gets `undefined`. The offsets above are pinned by measurement on darwin arm64; if a
+ * future SDK or arch moves the layout, that drift surfaces here as a failed self-check and
+ * the status reports `null`, never a plausible wrong table.
+ */
+export declare function parseKernelProcessTable(table: Uint8Array, rowCount: number, residentKb: (pid: number) => number): readonly ProcessTableRow[] | undefined;
+//# sourceMappingURL=host-process-table.d.ts.map

package/dist/modes/rpc/host-process-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-process-table.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-process-table.ts"],"names":[],"mappings":"AAoBA,sFAAsF;AACtF,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED,8FAA8F;AAC9F,MAAM,MAAM,kBAAkB,GAAG,MAAM,SAAS,eAAe,EAAE,GAAG,SAAS,CAAC;AAE9E,MAAM,WAAW,yBAAyB;IACzC;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACpC;AAQD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC3C,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,OAAO,GAAE,yBAA8B,GACrC,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAMzC;AAeD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GACjC,SAAS,eAAe,EAAE,GAAG,SAAS,CAkBxC"}

package/dist/modes/rpc/host-process-table.js

@@ -0,0 +1,162 @@
+/**
+ * The process table through the kernel, for a long-lived daemon's status surface.
+ *
+ * Why this exists (omo-desktop#594, senpi#1507): a daemon-control surface that reads its
+ * metrics by spawning `ps` runs one short-lived probe child per request, at client poll
+ * cadence. On runtimes whose `execFile` does not reap (the condition #1507 measured in the
+ * wild - 9,386 zombies), every probe becomes a permanent zombie of whichever long-lived
+ * process performed the read. The watchdog lost its `ps` probe for exactly this reason
+ * (#1721); this module gives the status metrics the same zero-spawn property: one `sysctl`
+ * on darwin (the table `ps` itself reads, zombies included), a `/proc/<pid>/stat` scan on
+ * linux, and nothing at all on runtimes without the bindings - the caller reports `null`
+ * rather than spawning.
+ *
+ * RUNTIME BOUNDARY (same shape as `child-reaper-syscalls.ts`): the darwin reader needs
+ * `bun:ffi`, a Bun-only builtin whose top-level import makes this module unloadable on Node.
+ * The specifier is imported behind the runtime gate, so a Node caller gets `undefined` and
+ * answers `null`, never a child process.
+ */
+import { readdirSync, readFileSync } from "node:fs";
+function supportedPlatform(platform) {
+    return platform === "darwin" || platform === "linux" ? platform : undefined;
+}
+/**
+ * Loads the platform reader once per process. Node (and any platform without bindings)
+ * resolves to `undefined`: the status surface then reports `null` fields rather than
+ * falling back to a `ps` child, because a read that spawns a probe is the bug this module
+ * exists to prevent.
+ */
+export async function loadProcessTableReader(platform = process.platform, options = {}) {
+    const supported = supportedPlatform(platform);
+    if (supported === undefined)
+        return undefined;
+    if (typeof globalThis.Bun === "undefined")
+        return undefined;
+    const read = supported === "darwin" ? await darwinReader(options) : linuxReader;
+    return read;
+}
+/** `struct kinfo_proc` fields this reader consumes, byte offsets pinned on darwin arm64. */
+const KINFO_PROC_STRIDE = 648;
+const KINFO_PID_OFFSET = 40;
+const KINFO_PPID_OFFSET = 560;
+/** `p_stat`: SZOMB is 5; every live state is a different value. */
+const KINFO_STAT_OFFSET = 36;
+const SZOMB = 5;
+/** `struct proc_taskinfo` `pti_resident_size`, the same field `ps -o rss` reports. */
+const PROC_PIDTASKINFO = 4;
+const TASKINFO_RESIDENT_OFFSET = 8;
+const TABLE_START_BYTES = 1 << 20;
+const TABLE_MAX_BYTES = 32 << 20;
+/**
+ * Parses `rowCount` `kinfo_proc` rows out of a `sysctl(KERN_PROC_ALL)` buffer.
+ *
+ * Fails closed: the parsed table must describe THIS process - its row exists, its ppid
+ * equals the kernel's own view (`process.ppid`), and it is not a zombie - or the caller
+ * gets `undefined`. The offsets above are pinned by measurement on darwin arm64; if a
+ * future SDK or arch moves the layout, that drift surfaces here as a failed self-check and
+ * the status reports `null`, never a plausible wrong table.
+ */
+export function parseKernelProcessTable(table, rowCount, residentKb) {
+    if (rowCount <= 0 || table.byteLength < rowCount * KINFO_PROC_STRIDE)
+        return undefined;
+    const view = new DataView(table.buffer, table.byteOffset, table.byteLength);
+    const rows = [];
+    let selfSeen = false;
+    for (let index = 0; index < rowCount; index++) {
+        const base = index * KINFO_PROC_STRIDE;
+        const pid = view.getUint32(base + KINFO_PID_OFFSET, true);
+        if (!Number.isInteger(pid) || pid <= 0)
+            continue;
+        const ppid = view.getUint32(base + KINFO_PPID_OFFSET, true);
+        const zombie = table[base + KINFO_STAT_OFFSET] === SZOMB;
+        if (pid === process.pid) {
+            if (ppid !== process.ppid || zombie)
+                return undefined;
+            selfSeen = true;
+        }
+        rows.push({ pid, ppid, state: zombie ? "Z" : "U", rssKb: residentKb(pid) });
+    }
+    return selfSeen ? rows : undefined;
+}
+async function darwinReader(options) {
+    const { dlopen, FFIType, ptr } = await import("bun:ffi");
+    const library = dlopen("libSystem.B.dylib", {
+        sysctl: {
+            args: [FFIType.ptr, FFIType.u32, FFIType.ptr, FFIType.ptr, FFIType.ptr, FFIType.i32],
+            returns: FFIType.i32,
+        },
+        proc_pidinfo: {
+            // The `u_int64_t arg` parameter is flavor-specific and unused by PROC_PIDTASKINFO;
+            // the repo's bun:ffi shim has no u64, and a u32 0 fills the register identically.
+            args: [FFIType.i32, FFIType.i32, FFIType.u32, FFIType.ptr, FFIType.i32],
+            returns: FFIType.i32,
+        },
+    });
+    const mib = new Int32Array([1, 14, 0]); // CTL_KERN, KERN_PROC, KERN_PROC_ALL
+    const none = new Uint8Array(1);
+    const requested = options.initialTableBytes;
+    let table = new Uint8Array(Number.isFinite(requested) && requested !== undefined && requested > 0
+        ? Math.min(Math.floor(requested), TABLE_MAX_BYTES)
+        : TABLE_START_BYTES);
+    const length = new Uint32Array(1);
+    const taskInfo = new Uint8Array(256);
+    const taskView = new DataView(taskInfo.buffer);
+    const residentKb = (pid) => {
+        taskInfo.fill(0);
+        const filled = library.symbols.proc_pidinfo(pid, PROC_PIDTASKINFO, 0, ptr(taskInfo), taskInfo.byteLength);
+        return filled > 0 ? Math.round(Number(taskView.getBigUint64(TASKINFO_RESIDENT_OFFSET, true)) / 1024) : 0;
+    };
+    return () => {
+        for (;;) {
+            length[0] = table.byteLength;
+            const result = library.symbols.sysctl(ptr(mib), mib.length, ptr(table), ptr(length), ptr(none), 0);
+            if (result !== 0) {
+                // XNU is not documented to raise `oldlenp` on a too-small KERN_PROC read, so the
+                // growth never depends on it: double (or jump to a larger reported size, if the
+                // kernel did write one), bounded by the cap, and retry.
+                if (table.byteLength >= TABLE_MAX_BYTES)
+                    return undefined;
+                const reported = length[0] > table.byteLength ? length[0] : 0;
+                table = new Uint8Array(Math.min(TABLE_MAX_BYTES, Math.max(table.byteLength * 2, reported)));
+                continue;
+            }
+            return parseKernelProcessTable(table, Math.floor(length[0] / KINFO_PROC_STRIDE), residentKb);
+        }
+    };
+}
+/** `/proc/<pid>/stat`: state is field 3, ppid field 4, rss field 24 in pages. */
+function linuxReader() {
+    const rows = [];
+    // The stat file reports rss in pages; node exposes no page size, and every platform this
+    // ships on today uses 4 KiB pages - arm64 linux kernels with 16 KiB or 64 KiB pages
+    // under-report rss by 4x-16x. The figure feeds an advisory MB status, not accounting.
+    const pageKb = 4;
+    for (const entry of readdirSync("/proc")) {
+        const pid = Number(entry);
+        if (!Number.isInteger(pid) || pid <= 0)
+            continue;
+        let stat;
+        try {
+            stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+        }
+        catch {
+            // The process exited between the directory listing and this read.
+            continue;
+        }
+        // comm is parenthesised and may contain spaces, so parse after its last ')'.
+        const tail = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
+        const state = tail[0];
+        const ppid = Number(tail[1]);
+        if (state === undefined || !Number.isInteger(ppid))
+            continue;
+        const rssPages = Number(tail[21]);
+        rows.push({
+            pid,
+            ppid,
+            state,
+            rssKb: Number.isFinite(rssPages) ? Math.round(rssPages * pageKb) : 0,
+        });
+    }
+    return rows;
+}
+//# sourceMappingURL=host-process-table.js.map

package/dist/modes/rpc/host-process-table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-process-table.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-process-table.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAyBpD,SAAS,iBAAiB,CAAC,QAAgB;IAC1C,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAC5C,OAAO,GAA8B,EAAE;IAEvC,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,OAAQ,UAAgC,CAAC,GAAG,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACnF,MAAM,IAAI,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAChF,OAAO,IAAI,CAAC;AACb,CAAC;AAED,4FAA4F;AAC5F,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,mEAAmE;AACnE,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,KAAK,GAAG,CAAC,CAAC;AAChB,sFAAsF;AACtF,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,CAAC;AAClC,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACtC,KAAiB,EACjB,QAAgB,EAChB,UAAmC;IAEnC,IAAI,QAAQ,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ,GAAG,iBAAiB;QAAE,OAAO,SAAS,CAAC;IACvF,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,KAAK,GAAG,iBAAiB,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,SAAS;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,GAAG,iBAAiB,CAAC,KAAK,KAAK,CAAC;QACzD,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,MAAM;gBAAE,OAAO,SAAS,CAAC;YACtD,QAAQ,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAkC;IAC7D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,EAAE;QAC3C,MAAM,EAAE;YACP,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;YACpF,OAAO,EAAE,OAAO,CAAC,GAAG;SACpB;QACD,YAAY,EAAE;YACb,mFAAmF;YACnF,kFAAkF;YAClF,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;YACvE,OAAO,EAAE,OAAO,CAAC,GAAG;SACpB;KACD,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,qCAAqC;IAC7E,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAC5C,IAAI,KAAK,GAAG,IAAI,UAAU,CACzB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;QAClD,CAAC,CAAC,iBAAiB,CACpB,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,CAAC,GAAW,EAAU,EAAE;QAC1C,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC1G,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,CAAC,CAAC;IACF,OAAO,GAAG,EAAE;QACX,SAAS,CAAC;YACT,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACnG,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClB,iFAAiF;gBACjF,gFAAgF;gBAChF,wDAAwD;gBACxD,IAAI,KAAK,CAAC,UAAU,IAAI,eAAe;oBAAE,OAAO,SAAS,CAAC;gBAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9D,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC5F,SAAS;YACV,CAAC;YACD,OAAO,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9F,CAAC;IACF,CAAC,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,WAAW;IACnB,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,yFAAyF;IACzF,oFAAoF;IACpF,sFAAsF;IACtF,MAAM,MAAM,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,SAAS;QACjD,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACJ,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACR,kEAAkE;YAClE,SAAS;QACV,CAAC;QACD,6EAA6E;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC;YACT,GAAG;YACH,IAAI;YACJ,KAAK;YACL,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;SACpE,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC","sourcesContent":["/**\n * The process table through the kernel, for a long-lived daemon's status surface.\n *\n * Why this exists (omo-desktop#594, senpi#1507): a daemon-control surface that reads its\n * metrics by spawning `ps` runs one short-lived probe child per request, at client poll\n * cadence. On runtimes whose `execFile` does not reap (the condition #1507 measured in the\n * wild - 9,386 zombies), every probe becomes a permanent zombie of whichever long-lived\n * process performed the read. The watchdog lost its `ps` probe for exactly this reason\n * (#1721); this module gives the status metrics the same zero-spawn property: one `sysctl`\n * on darwin (the table `ps` itself reads, zombies included), a `/proc/<pid>/stat` scan on\n * linux, and nothing at all on runtimes without the bindings - the caller reports `null`\n * rather than spawning.\n *\n * RUNTIME BOUNDARY (same shape as `child-reaper-syscalls.ts`): the darwin reader needs\n * `bun:ffi`, a Bun-only builtin whose top-level import makes this module unloadable on Node.\n * The specifier is imported behind the runtime gate, so a Node caller gets `undefined` and\n * answers `null`, never a child process.\n */\nimport { readdirSync, readFileSync } from \"node:fs\";\n\n/** One row of the whole-table read; `state` is `\"Z\"` for zombies, `\"U\"` otherwise. */\nexport interface ProcessTableRow {\n\treadonly pid: number;\n\treadonly ppid: number;\n\treadonly state: string;\n\t/** Resident memory in kilobytes; 0 where the kernel reports none (zombies). */\n\treadonly rssKb: number;\n}\n\n/** Reads the whole process table without spawning anything, or `undefined` when it cannot. */\nexport type ProcessTableReader = () => readonly ProcessTableRow[] | undefined;\n\nexport interface ProcessTableReaderOptions {\n\t/**\n\t * Size of the first `sysctl` buffer. The reader grows geometrically from here on a\n\t * short read; tests use a tiny value to force the growth path. Production keeps the\n\t * default, sized for the busiest observed table.\n\t */\n\treadonly initialTableBytes?: number;\n}\n\ntype SupportedPlatform = \"darwin\" | \"linux\";\n\nfunction supportedPlatform(platform: string): SupportedPlatform | undefined {\n\treturn platform === \"darwin\" || platform === \"linux\" ? platform : undefined;\n}\n\n/**\n * Loads the platform reader once per process. Node (and any platform without bindings)\n * resolves to `undefined`: the status surface then reports `null` fields rather than\n * falling back to a `ps` child, because a read that spawns a probe is the bug this module\n * exists to prevent.\n */\nexport async function loadProcessTableReader(\n\tplatform: NodeJS.Platform = process.platform,\n\toptions: ProcessTableReaderOptions = {},\n): Promise<ProcessTableReader | undefined> {\n\tconst supported = supportedPlatform(platform);\n\tif (supported === undefined) return undefined;\n\tif (typeof (globalThis as { Bun?: unknown }).Bun === \"undefined\") return undefined;\n\tconst read = supported === \"darwin\" ? await darwinReader(options) : linuxReader;\n\treturn read;\n}\n\n/** `struct kinfo_proc` fields this reader consumes, byte offsets pinned on darwin arm64. */\nconst KINFO_PROC_STRIDE = 648;\nconst KINFO_PID_OFFSET = 40;\nconst KINFO_PPID_OFFSET = 560;\n/** `p_stat`: SZOMB is 5; every live state is a different value. */\nconst KINFO_STAT_OFFSET = 36;\nconst SZOMB = 5;\n/** `struct proc_taskinfo` `pti_resident_size`, the same field `ps -o rss` reports. */\nconst PROC_PIDTASKINFO = 4;\nconst TASKINFO_RESIDENT_OFFSET = 8;\nconst TABLE_START_BYTES = 1 << 20;\nconst TABLE_MAX_BYTES = 32 << 20;\n\n/**\n * Parses `rowCount` `kinfo_proc` rows out of a `sysctl(KERN_PROC_ALL)` buffer.\n *\n * Fails closed: the parsed table must describe THIS process - its row exists, its ppid\n * equals the kernel's own view (`process.ppid`), and it is not a zombie - or the caller\n * gets `undefined`. The offsets above are pinned by measurement on darwin arm64; if a\n * future SDK or arch moves the layout, that drift surfaces here as a failed self-check and\n * the status reports `null`, never a plausible wrong table.\n */\nexport function parseKernelProcessTable(\n\ttable: Uint8Array,\n\trowCount: number,\n\tresidentKb: (pid: number) => number,\n): readonly ProcessTableRow[] | undefined {\n\tif (rowCount <= 0 || table.byteLength < rowCount * KINFO_PROC_STRIDE) return undefined;\n\tconst view = new DataView(table.buffer, table.byteOffset, table.byteLength);\n\tconst rows: ProcessTableRow[] = [];\n\tlet selfSeen = false;\n\tfor (let index = 0; index < rowCount; index++) {\n\t\tconst base = index * KINFO_PROC_STRIDE;\n\t\tconst pid = view.getUint32(base + KINFO_PID_OFFSET, true);\n\t\tif (!Number.isInteger(pid) || pid <= 0) continue;\n\t\tconst ppid = view.getUint32(base + KINFO_PPID_OFFSET, true);\n\t\tconst zombie = table[base + KINFO_STAT_OFFSET] === SZOMB;\n\t\tif (pid === process.pid) {\n\t\t\tif (ppid !== process.ppid || zombie) return undefined;\n\t\t\tselfSeen = true;\n\t\t}\n\t\trows.push({ pid, ppid, state: zombie ? \"Z\" : \"U\", rssKb: residentKb(pid) });\n\t}\n\treturn selfSeen ? rows : undefined;\n}\n\nasync function darwinReader(options: ProcessTableReaderOptions): Promise<ProcessTableReader | undefined> {\n\tconst { dlopen, FFIType, ptr } = await import(\"bun:ffi\");\n\tconst library = dlopen(\"libSystem.B.dylib\", {\n\t\tsysctl: {\n\t\t\targs: [FFIType.ptr, FFIType.u32, FFIType.ptr, FFIType.ptr, FFIType.ptr, FFIType.i32],\n\t\t\treturns: FFIType.i32,\n\t\t},\n\t\tproc_pidinfo: {\n\t\t\t// The `u_int64_t arg` parameter is flavor-specific and unused by PROC_PIDTASKINFO;\n\t\t\t// the repo's bun:ffi shim has no u64, and a u32 0 fills the register identically.\n\t\t\targs: [FFIType.i32, FFIType.i32, FFIType.u32, FFIType.ptr, FFIType.i32],\n\t\t\treturns: FFIType.i32,\n\t\t},\n\t});\n\tconst mib = new Int32Array([1, 14, 0]); // CTL_KERN, KERN_PROC, KERN_PROC_ALL\n\tconst none = new Uint8Array(1);\n\tconst requested = options.initialTableBytes;\n\tlet table = new Uint8Array(\n\t\tNumber.isFinite(requested) && requested !== undefined && requested > 0\n\t\t\t? Math.min(Math.floor(requested), TABLE_MAX_BYTES)\n\t\t\t: TABLE_START_BYTES,\n\t);\n\tconst length = new Uint32Array(1);\n\tconst taskInfo = new Uint8Array(256);\n\tconst taskView = new DataView(taskInfo.buffer);\n\tconst residentKb = (pid: number): number => {\n\t\ttaskInfo.fill(0);\n\t\tconst filled = library.symbols.proc_pidinfo(pid, PROC_PIDTASKINFO, 0, ptr(taskInfo), taskInfo.byteLength);\n\t\treturn filled > 0 ? Math.round(Number(taskView.getBigUint64(TASKINFO_RESIDENT_OFFSET, true)) / 1024) : 0;\n\t};\n\treturn () => {\n\t\tfor (;;) {\n\t\t\tlength[0] = table.byteLength;\n\t\t\tconst result = library.symbols.sysctl(ptr(mib), mib.length, ptr(table), ptr(length), ptr(none), 0);\n\t\t\tif (result !== 0) {\n\t\t\t\t// XNU is not documented to raise `oldlenp` on a too-small KERN_PROC read, so the\n\t\t\t\t// growth never depends on it: double (or jump to a larger reported size, if the\n\t\t\t\t// kernel did write one), bounded by the cap, and retry.\n\t\t\t\tif (table.byteLength >= TABLE_MAX_BYTES) return undefined;\n\t\t\t\tconst reported = length[0] > table.byteLength ? length[0] : 0;\n\t\t\t\ttable = new Uint8Array(Math.min(TABLE_MAX_BYTES, Math.max(table.byteLength * 2, reported)));\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\treturn parseKernelProcessTable(table, Math.floor(length[0] / KINFO_PROC_STRIDE), residentKb);\n\t\t}\n\t};\n}\n\n/** `/proc/<pid>/stat`: state is field 3, ppid field 4, rss field 24 in pages. */\nfunction linuxReader(): readonly ProcessTableRow[] | undefined {\n\tconst rows: ProcessTableRow[] = [];\n\t// The stat file reports rss in pages; node exposes no page size, and every platform this\n\t// ships on today uses 4 KiB pages - arm64 linux kernels with 16 KiB or 64 KiB pages\n\t// under-report rss by 4x-16x. The figure feeds an advisory MB status, not accounting.\n\tconst pageKb = 4;\n\tfor (const entry of readdirSync(\"/proc\")) {\n\t\tconst pid = Number(entry);\n\t\tif (!Number.isInteger(pid) || pid <= 0) continue;\n\t\tlet stat: string | undefined;\n\t\ttry {\n\t\t\tstat = readFileSync(`/proc/${pid}/stat`, \"utf8\");\n\t\t} catch {\n\t\t\t// The process exited between the directory listing and this read.\n\t\t\tcontinue;\n\t\t}\n\t\t// comm is parenthesised and may contain spaces, so parse after its last ')'.\n\t\tconst tail = stat.slice(stat.lastIndexOf(\")\") + 2).split(\" \");\n\t\tconst state = tail[0];\n\t\tconst ppid = Number(tail[1]);\n\t\tif (state === undefined || !Number.isInteger(ppid)) continue;\n\t\tconst rssPages = Number(tail[21]);\n\t\trows.push({\n\t\t\tpid,\n\t\t\tppid,\n\t\t\tstate,\n\t\t\trssKb: Number.isFinite(rssPages) ? Math.round(rssPages * pageKb) : 0,\n\t\t});\n\t}\n\treturn rows;\n}\n"]}

package/dist/modes/rpc/rpc-client.d.ts

@@ -259,7 +259,7 @@ export declare class RpcClient {
      */
     getAvailableThinkingLevels(): Promise<ThinkingLevel[]>;
     /**
-     * Turn OpenAI Codex fast mode (the `priority` service tier) on or off for the active model.
+     * Turn ChatGPT Subscription fast mode (the `priority` service tier) on or off for the active model.
      *
      * The choice is remembered per model, so a later session on the same model starts the same
      * way. Throws when the request is refused: a non-Codex model, or an active `:priority` model

package/dist/modes/rpc/rpc-client.js

@@ -459,7 +459,7 @@ export class RpcClient {
         return this.getData(response).levels;
     }
     /**
-     * Turn OpenAI Codex fast mode (the `priority` service tier) on or off for the active model.
+     * Turn ChatGPT Subscription fast mode (the `priority` service tier) on or off for the active model.
      *
      * The choice is remembered per model, so a later session on the same model starts the same
      * way. Throws when the request is refused: a non-Codex model, or an active `:priority` model