@gtkx/utils 1.6.0 → 2.0.0-beta.10

package/dist/process/spawn-with-parent-death-signal.js

@@ -1,15 +1,168 @@
 import { spawn } from "node:child_process";
 import { randomBytes } from "node:crypto";
+import { readdirSync, readFileSync } from "node:fs";
 import { Socket } from "node:net";
 import { dirname, extname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+import { warn } from "../log/default-logger.js";
 import { killMarkedProcesses, PROCESS_MARKER } from "./kill-marked-processes.js";
+import { cleanupDirectoryIdentity, killProcessGroup, processGroupIdentity, removeCleanupDirectory, } from "./kill-process-group.js";
+import { isReapedState, readProcessStatFields } from "./process-status.js";
 import { resolveExecutable } from "./resolve-executable.js";
 const MODULE_PATH = fileURLToPath(import.meta.url);
 const GUARD_PATH = join(dirname(MODULE_PATH), `process-guard${extname(MODULE_PATH)}`);
 const RUN_ID = randomBytes(8).toString("hex");
 const RUN_PREFIX = `${PROCESS_MARKER}=${RUN_ID}/`;
-const guard = {};
+const guard = { jobs: new Map() };
+const SUPERVISOR_NAME = "gtkx-process-supervisor";
+const SUPERVISOR_CLEANUP_NAME = "gtkx-process-cleanup";
+const SUPERVISOR_WATCH_NAME = "gtkx-process-watch";
+const SUPERVISOR_KILL_GROUP_BODY = [
+    "remaining=40",
+    'while [ "$remaining" -gt 0 ] && kill -KILL "-$group" 2>/dev/null; do',
+    '    "$sleep_command" 0.025',
+    "    remaining=$((remaining - 1))",
+    "done",
+];
+const SUPERVISOR_REMOVE_RUNTIME_BODY = [
+    "remaining=40",
+    'while [ "$remaining" -gt 0 ] && ' +
+        '[ "$("$stat_command" -c "%d:%i:%u" -- "$runtime" 2>/dev/null)" = "$identity" ]; do',
+    '    "$rm_command" -rf -- "$runtime"',
+    '    "$sleep_command" 0.025',
+    "    remaining=$((remaining - 1))",
+    "done",
+];
+const SUPERVISOR_CLEANUP_BODY = [...SUPERVISOR_KILL_GROUP_BODY, ...SUPERVISOR_REMOVE_RUNTIME_BODY];
+const SUPERVISOR_CLEANUP_SCRIPT = [
+    "runtime=$1",
+    "identity=$2",
+    "group=$3",
+    "stat_command=$4",
+    "rm_command=$5",
+    "sleep_command=$6",
+    ...SUPERVISOR_CLEANUP_BODY,
+].join("\n");
+const SUPERVISOR_WATCH_SCRIPT = [
+    "runtime=$1",
+    "identity=$2",
+    "group=$3",
+    "group_start=$4",
+    "expected_parent=$5",
+    "expected_parent_start=$6",
+    "stat_command=$7",
+    "rm_command=$8",
+    "sleep_command=$9",
+    "matches_process() {",
+    "    expected_process=$1",
+    "    expected_start=$2",
+    "    process_stat=",
+    '    IFS= read -r process_stat < "/proc/$expected_process/stat" || return 1',
+    "    process_tail=${process_stat##*) }",
+    "    set -- $process_tail",
+    '    case "$1" in Z|X|x) return 1 ;; esac',
+    '    [ "${20}" = "$expected_start" ]',
+    "}",
+    "matches_parent() {",
+    '    matches_process "$expected_parent" "$expected_parent_start"',
+    "}",
+    "kill_group() {",
+    ...SUPERVISOR_KILL_GROUP_BODY.map((line) => `    ${line}`),
+    "}",
+    "cleanup() {",
+    '    trap "" TERM INT HUP',
+    "    kill_group",
+    ...SUPERVISOR_REMOVE_RUNTIME_BODY.map((line) => `    ${line}`),
+    "    exit 0",
+    "}",
+    "trap cleanup TERM INT HUP",
+    'while matches_process "$group" "$group_start" && matches_parent; do',
+    '    "$sleep_command" 0.1',
+    "done",
+    "kill_group",
+    "while matches_parent; do",
+    '    "$sleep_command" 0.1',
+    "done",
+    "cleanup",
+].join("\n");
+const SUPERVISOR_SCRIPT = [
+    "runtime=$1",
+    "identity=$2",
+    "expected_parent=$3",
+    "expected_parent_start=$4",
+    "stat_command=$5",
+    "rm_command=$6",
+    "shell_command=$7",
+    "setsid_command=$8",
+    "sleep_command=$9",
+    "shift 9",
+    "watch_name=$1",
+    "watch_script=$2",
+    "cleanup_name=$3",
+    "cleanup_script=$4",
+    "shift 4",
+    "process_start() {",
+    "    process_stat=",
+    '    IFS= read -r process_stat < "/proc/$1/stat" || return 1',
+    "    process_tail=${process_stat##*) }",
+    "    set -- $process_tail",
+    '    case "$1" in Z|X|x) return 1 ;; esac',
+    '    printf "%s" "${20}"',
+    "}",
+    "matches_parent() {",
+    "    parent_stat=",
+    '    IFS= read -r parent_stat < "/proc/$expected_parent/stat" || return 1',
+    "    parent_tail=${parent_stat##*) }",
+    "    set -- $parent_tail",
+    '    case "$1" in Z|X|x) return 1 ;; esac',
+    '    [ "${20}" = "$expected_parent_start" ]',
+    "}",
+    "terminate() {",
+    '    trap "" CONT TERM INT HUP',
+    "    while :; do",
+    '        "$setsid_command" "$shell_command" -c "$cleanup_script" "$cleanup_name" "$runtime" "$identity" "$$" ' +
+        '"$stat_command" "$rm_command" "$sleep_command" </dev/null >/dev/null 2>&1 &',
+    "        cleanup=$!",
+    '        wait "$cleanup" 2>/dev/null',
+    '        "$sleep_command" 0.025',
+    "    done",
+    "}",
+    "continue_or_terminate() {",
+    "    remaining=40",
+    '    while matches_parent && [ "$remaining" -gt 0 ]; do',
+    '        "$sleep_command" 0.025',
+    "        remaining=$((remaining - 1))",
+    "    done",
+    "    if ! matches_parent; then terminate; fi",
+    "}",
+    "trap continue_or_terminate CONT",
+    "trap terminate TERM INT HUP",
+    "supervisor_start=$(process_start \"$$\") || terminate",
+    '( unset GTKX_PROCESS_GUARD; exec "$setsid_command" "$shell_command" -c "$watch_script" "$watch_name" "$runtime" ' +
+        '"$identity" "$$" "$supervisor_start" "$expected_parent" "$expected_parent_start" "$stat_command" ' +
+        '"$rm_command" "$sleep_command" ) </dev/null >/dev/null 2>&1 &',
+    "child=",
+    "if ! matches_parent; then terminate; fi",
+    '"$@" &',
+    "child=$!",
+    "while :; do",
+    '    wait "$child"',
+    "    status=$?",
+    '    if kill -0 "$child" 2>/dev/null; then continue; fi',
+    '    exit "$status"',
+    "done",
+].join("\n");
+const processIdentity = (pid) => {
+    const fields = readProcessStatFields(pid);
+    const startTime = fields?.[19];
+    if (startTime === undefined || isReapedState(fields?.[0])) {
+        throw new Error(`Failed to identify process ${String(pid)}`);
+    }
+    return { pid, startTime };
+};
+const writeGuardCommand = (child, operation, job) => {
+    child.stdin?.write(`${operation}${JSON.stringify(job)}\n`);
+};
 const releaseGuard = (child) => {
     child.unref();
     const { stdin } = child;
@@ -17,34 +170,188 @@ const releaseGuard = (child) => {
         stdin.unref();
     }
 };
-const startGuard = () => {
+const isSameProcessWatch = (left, right) => left.owner.pid === right.owner.pid &&
+    left.owner.startTime === right.owner.startTime &&
+    left.target.pid === right.target.pid &&
+    left.target.startTime === right.target.startTime;
+const configureProcessWatch = (watch) => {
+    if (watch === undefined) {
+        return;
+    }
+    if (guard.watch !== undefined && !isSameProcessWatch(guard.watch, watch)) {
+        throw new Error("The process guard is already watching another owner");
+    }
+    if (guard.child !== undefined && guard.watch === undefined) {
+        throw new Error("The process guard was started before its owner was registered");
+    }
+    guard.watch = watch;
+};
+const guardArguments = () => guard.watch === undefined
+    ? [GUARD_PATH, RUN_PREFIX]
+    : [GUARD_PATH, RUN_PREFIX, JSON.stringify(guard.watch)];
+const startGuard = (watch) => {
+    configureProcessWatch(watch);
     if (guard.child) {
         return;
     }
-    const child = spawn(process.execPath, [GUARD_PATH, RUN_PREFIX], {
+    const child = spawn(process.execPath, guardArguments(), {
         detached: true,
         stdio: ["pipe", "ignore", "ignore"],
     });
     child.on("error", () => {
-        guard.child = undefined;
+        if (guard.child === child) {
+            guard.child = undefined;
+        }
+    });
+    child.on("exit", () => {
+        if (guard.child === child) {
+            guard.child = undefined;
+        }
+    });
+    child.stdin.on("error", () => {
+        if (guard.child === child) {
+            guard.child = undefined;
+        }
     });
     guard.child = child;
+    for (const job of guard.jobs.values()) {
+        writeGuardCommand(child, "+", job);
+    }
     releaseGuard(child);
 };
-function spawnWithParentDeathSignal(command, args, options = {}) {
+const watchParentProcess = () => {
+    const parentId = process.ppid;
+    const watch = {
+        owner: processIdentity(parentId),
+        target: processIdentity(process.pid),
+    };
+    if (process.ppid !== parentId) {
+        throw new Error("The parent process exited while its guard was starting");
+    }
+    startGuard(watch);
+};
+const registerJob = (job) => {
+    guard.jobs.set(job.marker, job);
+    if (guard.child) {
+        writeGuardCommand(guard.child, "+", job);
+    }
+};
+const unregisterJob = (job) => {
+    guard.jobs.delete(job.marker);
+    if (guard.child) {
+        writeGuardCommand(guard.child, "-", job);
+    }
+};
+const rollbackSpawn = ({ child, marker, processGroup, cleanupDirectories = [] }) => {
+    if (processGroup === undefined) {
+        child.kill("SIGKILL");
+    }
+    else {
+        killProcessGroup(processGroup);
+    }
+    killMarkedProcesses(marker);
+    for (const identity of cleanupDirectories) {
+        removeCleanupDirectory(identity);
+    }
+};
+const captureCleanupDirectories = (command, paths) => {
+    const identities = paths.map((path) => cleanupDirectoryIdentity(path));
+    if (identities.includes(undefined)) {
+        throw new Error(`Failed to identify a cleanup directory for ${command}`);
+    }
+    return identities.filter((identity) => identity !== undefined);
+};
+const readResource = (path) => {
+    try {
+        return readFileSync(path, "utf8").trim();
+    }
+    catch {
+        return "unknown";
+    }
+};
+const openDescriptors = () => {
+    try {
+        return String(readdirSync("/proc/self/fd").length);
+    }
+    catch {
+        return "unknown";
+    }
+};
+const resourceSummary = () => `open descriptors ${openDescriptors()}, ` +
+    `cgroup pids ${readResource("/sys/fs/cgroup/pids.current")}/${readResource("/sys/fs/cgroup/pids.max")}`;
+const spawnedProcessGroup = (child, command) => {
+    const processGroupId = child.pid;
+    if (processGroupId !== undefined) {
+        return processGroupIdentity(processGroupId);
+    }
+    child.on("error", (cause) => {
+        warn(`Cannot spawn ${command}: ${cause.code ?? cause.message}`);
+    });
+    return undefined;
+};
+const spawnGuarded = (command, options, signal, launchArguments) => {
     const executable = resolveExecutable(command);
     const setpriv = resolveExecutable("setpriv");
     const jobValue = `${RUN_ID}/${randomBytes(4).toString("hex")}`;
+    const marker = `${PROCESS_MARKER}=${jobValue}`;
+    const cleanupDirectories = captureCleanupDirectories(command, options.cleanupDirectories ?? []);
     startGuard();
-    const child = spawn(setpriv, ["--pdeathsig", "SIGKILL", executable, ...args], {
+    const child = spawn(setpriv, launchArguments(executable, cleanupDirectories), {
         detached: true,
         stdio: options.stdio ?? "ignore",
         env: { ...(options.env ?? process.env), [PROCESS_MARKER]: jobValue },
     });
+    const group = spawnedProcessGroup(child, command);
+    if (group === undefined) {
+        rollbackSpawn({ child, marker, cleanupDirectories });
+        throw new Error(`Failed to spawn ${command} or identify its process group (${resourceSummary()})`);
+    }
+    const job = { marker, processGroup: group, cleanupDirectories, signal };
+    registerJob(job);
     child.on("exit", () => {
-        killMarkedProcesses(`${PROCESS_MARKER}=${jobValue}`);
+        killMarkedProcesses(job.marker);
+        unregisterJob(job);
     });
     return child;
+};
+function spawnWithParentDeathSignal(command, args, options = {}) {
+    return spawnGuarded(command, options, "SIGKILL", (executable) => ["--pdeathsig", "SIGKILL", executable, ...args]);
 }
-export { spawnWithParentDeathSignal };
+const spawnWithParentDeathSupervisor = (command, args, options) => {
+    const shell = resolveExecutable("sh");
+    const stat = resolveExecutable("stat");
+    const rm = resolveExecutable("rm");
+    const setsid = resolveExecutable("setsid");
+    const sleep = resolveExecutable("sleep");
+    return spawnGuarded(command, { ...options, cleanupDirectories: [options.cleanupDirectory] }, "SIGCONT", (executable, cleanupDirectories) => {
+        const identity = cleanupDirectories[0];
+        if (identity === undefined) {
+            throw new Error(`Failed to identify a cleanup directory for ${command}`);
+        }
+        return [
+            "--pdeathsig",
+            "SIGCONT",
+            shell,
+            "-c",
+            SUPERVISOR_SCRIPT,
+            SUPERVISOR_NAME,
+            identity.path,
+            `${identity.device}:${identity.inode}:${identity.userId}`,
+            String(process.pid),
+            processIdentity(process.pid).startTime,
+            stat,
+            rm,
+            shell,
+            setsid,
+            sleep,
+            SUPERVISOR_WATCH_NAME,
+            SUPERVISOR_WATCH_SCRIPT,
+            SUPERVISOR_CLEANUP_NAME,
+            SUPERVISOR_CLEANUP_SCRIPT,
+            executable,
+            ...args,
+        ];
+    });
+};
+export { spawnWithParentDeathSignal, spawnWithParentDeathSupervisor, watchParentProcess };
 //# sourceMappingURL=spawn-with-parent-death-signal.js.map

package/dist/process/spawn-with-parent-death-signal.js.map

@@ -1 +1 @@
-{"version":3,"file":"spawn-with-parent-death-signal.js","sourceRoot":"","sources":["../../src/process/spawn-with-parent-death-signal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAW5D,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,gBAAgB,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACtF,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9C,MAAM,UAAU,GAAG,GAAG,cAAc,IAAI,MAAM,GAAG,CAAC;AAClD,MAAM,KAAK,GAAe,EAAE,CAAC;AAE7B,MAAM,YAAY,GAAG,CAAC,KAAmB,EAAQ,EAAE;IAC/C,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAExB,IAAI,KAAK,YAAY,MAAM,EAAE,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,GAAS,EAAE;IAC1B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO;IACX,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE;QAC5D,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;KACtC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,YAAY,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC,CAAC;AAEF,SAAS,0BAA0B,CAC/B,OAAe,EACf,IAAc,EACd,UAAmC,EAAE;IAErC,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/D,UAAU,EAAE,CAAC;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE;QAC1E,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;QAChC,GAAG,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE;KACvE,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QAClB,mBAAmB,CAAC,GAAG,cAAc,IAAI,QAAQ,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC","sourcesContent":["import { type ChildProcess, spawn, type StdioOptions } from \"node:child_process\";\nimport { randomBytes } from \"node:crypto\";\nimport { Socket } from \"node:net\";\nimport { dirname, extname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { killMarkedProcesses, PROCESS_MARKER } from \"./kill-marked-processes.ts\";\nimport { resolveExecutable } from \"./resolve-executable.ts\";\n\ntype ParentDeathSpawnOptions = {\n    stdio?: StdioOptions;\n    env?: NodeJS.ProcessEnv;\n};\n\ntype GuardState = {\n    child?: ChildProcess | undefined;\n};\n\nconst MODULE_PATH = fileURLToPath(import.meta.url);\nconst GUARD_PATH = join(dirname(MODULE_PATH), `process-guard${extname(MODULE_PATH)}`);\nconst RUN_ID = randomBytes(8).toString(\"hex\");\nconst RUN_PREFIX = `${PROCESS_MARKER}=${RUN_ID}/`;\nconst guard: GuardState = {};\n\nconst releaseGuard = (child: ChildProcess): void => {\n    child.unref();\n    const { stdin } = child;\n\n    if (stdin instanceof Socket) {\n        stdin.unref();\n    }\n};\n\nconst startGuard = (): void => {\n    if (guard.child) {\n        return;\n    }\n\n    const child = spawn(process.execPath, [GUARD_PATH, RUN_PREFIX], {\n        detached: true,\n        stdio: [\"pipe\", \"ignore\", \"ignore\"],\n    });\n\n    child.on(\"error\", () => {\n        guard.child = undefined;\n    });\n\n    guard.child = child;\n    releaseGuard(child);\n};\n\nfunction spawnWithParentDeathSignal(\n    command: string,\n    args: string[],\n    options: ParentDeathSpawnOptions = {},\n): ChildProcess {\n    const executable = resolveExecutable(command);\n    const setpriv = resolveExecutable(\"setpriv\");\n    const jobValue = `${RUN_ID}/${randomBytes(4).toString(\"hex\")}`;\n    startGuard();\n\n    const child = spawn(setpriv, [\"--pdeathsig\", \"SIGKILL\", executable, ...args], {\n        detached: true,\n        stdio: options.stdio ?? \"ignore\",\n        env: { ...(options.env ?? process.env), [PROCESS_MARKER]: jobValue },\n    });\n\n    child.on(\"exit\", () => {\n        killMarkedProcesses(`${PROCESS_MARKER}=${jobValue}`);\n    });\n\n    return child;\n}\n\nexport { spawnWithParentDeathSignal };\n"]}
+{"version":3,"file":"spawn-with-parent-death-signal.js","sourceRoot":"","sources":["../../src/process/spawn-with-parent-death-signal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAEH,wBAAwB,EACxB,gBAAgB,EAEhB,oBAAoB,EACpB,sBAAsB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AA8C5D,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,gBAAgB,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACtF,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9C,MAAM,UAAU,GAAG,GAAG,cAAc,IAAI,MAAM,GAAG,CAAC;AAClD,MAAM,KAAK,GAAe,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAC9C,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAClD,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AACvD,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AACnD,MAAM,0BAA0B,GAAG;IAC/B,cAAc;IACd,sEAAsE;IACtE,4BAA4B;IAC5B,kCAAkC;IAClC,MAAM;CACT,CAAC;AACF,MAAM,8BAA8B,GAAG;IACnC,cAAc;IACd,kCAAkC;QAClC,oFAAoF;IACpF,qCAAqC;IACrC,4BAA4B;IAC5B,kCAAkC;IAClC,MAAM;CACT,CAAC;AACF,MAAM,uBAAuB,GAAG,CAAC,GAAG,0BAA0B,EAAE,GAAG,8BAA8B,CAAC,CAAC;AACnG,MAAM,yBAAyB,GAAG;IAC9B,YAAY;IACZ,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,GAAG,uBAAuB;CAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACb,MAAM,uBAAuB,GAAG;IAC5B,YAAY;IACZ,aAAa;IACb,UAAU;IACV,gBAAgB;IAChB,oBAAoB;IACpB,0BAA0B;IAC1B,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,qBAAqB;IACrB,yBAAyB;IACzB,uBAAuB;IACvB,mBAAmB;IACnB,4EAA4E;IAC5E,uCAAuC;IACvC,0BAA0B;IAC1B,0CAA0C;IAC1C,qCAAqC;IACrC,GAAG;IACH,oBAAoB;IACpB,iEAAiE;IACjE,GAAG;IACH,gBAAgB;IAChB,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1D,GAAG;IACH,aAAa;IACb,0BAA0B;IAC1B,gBAAgB;IAChB,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;IAC9D,YAAY;IACZ,GAAG;IACH,2BAA2B;IAC3B,qEAAqE;IACrE,0BAA0B;IAC1B,MAAM;IACN,YAAY;IACZ,0BAA0B;IAC1B,0BAA0B;IAC1B,MAAM;IACN,SAAS;CACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACb,MAAM,iBAAiB,GAAG;IACtB,YAAY;IACZ,aAAa;IACb,oBAAoB;IACpB,0BAA0B;IAC1B,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,SAAS;IACT,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,SAAS;IACT,mBAAmB;IACnB,mBAAmB;IACnB,6DAA6D;IAC7D,uCAAuC;IACvC,0BAA0B;IAC1B,0CAA0C;IAC1C,yBAAyB;IACzB,GAAG;IACH,oBAAoB;IACpB,kBAAkB;IAClB,0EAA0E;IAC1E,qCAAqC;IACrC,yBAAyB;IACzB,0CAA0C;IAC1C,4CAA4C;IAC5C,GAAG;IACH,eAAe;IACf,+BAA+B;IAC/B,iBAAiB;IACjB,8GAA8G;QAC9G,6EAA6E;IAC7E,oBAAoB;IACpB,qCAAqC;IACrC,gCAAgC;IAChC,UAAU;IACV,GAAG;IACH,2BAA2B;IAC3B,kBAAkB;IAClB,wDAAwD;IACxD,gCAAgC;IAChC,sCAAsC;IACtC,UAAU;IACV,6CAA6C;IAC7C,GAAG;IACH,iCAAiC;IACjC,6BAA6B;IAC7B,uDAAuD;IACvD,kHAAkH;QAClH,mGAAmG;QACnG,+DAA+D;IAC/D,QAAQ;IACR,yCAAyC;IACzC,QAAQ;IACR,UAAU;IACV,aAAa;IACb,mBAAmB;IACnB,eAAe;IACf,wDAAwD;IACxD,oBAAoB;IACpB,MAAM;CACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,eAAe,GAAG,CAAC,GAAW,EAAmB,EAAE;IACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAE/B,IAAI,SAAS,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAmB,EAAE,SAAoB,EAAE,GAAa,EAAQ,EAAE;IACzF,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAmB,EAAQ,EAAE;IAC/C,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAExB,IAAI,KAAK,YAAY,MAAM,EAAE,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,IAAkB,EAAE,KAAmB,EAAW,EAAE,CAC5E,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG;IAClC,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,SAAS;IAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;AAErD,MAAM,qBAAqB,GAAG,CAAC,KAAoB,EAAQ,EAAE;IACzD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO;IACX,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,GAAa,EAAE,CAClC,KAAK,CAAC,KAAK,KAAK,SAAS;IACrB,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC;IAC1B,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAEhE,MAAM,UAAU,GAAG,CAAC,KAAoB,EAAQ,EAAE;IAC9C,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAE7B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO;IACX,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE;QACpD,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;KACtC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QAC5B,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QAClB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QAC5B,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACzB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QAC5B,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,YAAY,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,GAAS,EAAE;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG;QACV,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC;QAChC,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;KACvC,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC9E,CAAC;IAED,UAAU,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,GAAa,EAAQ,EAAE;IACxC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEhC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,GAAa,EAAQ,EAAE;IAC1C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE9B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,GAAG,EAAE,EAAiB,EAAQ,EAAE;IACpG,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;SAAM,CAAC;QACJ,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAED,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAE5B,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QACxC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,OAAe,EAAE,KAAe,EAA8B,EAAE;IAC/F,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvE,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAwC,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;AACzG,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE;IAC1C,IAAI,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,GAAW,EAAE;IACjC,IAAI,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,GAAW,EAAE,CACjC,oBAAoB,eAAe,EAAE,IAAI;IACzC,eAAe,YAAY,CAAC,6BAA6B,CAAC,IAAI,YAAY,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAE5G,MAAM,mBAAmB,GAAG,CAAC,KAAmB,EAAE,OAAe,EAAoC,EAAE;IACnG,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC;IAEjC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,oBAAoB,CAAC,cAAc,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;QAC/C,IAAI,CAAC,gBAAgB,OAAO,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACjB,OAAe,EACf,OAAgC,EAChC,MAAmB,EACnB,eAAgC,EACpB,EAAE;IACd,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,GAAG,cAAc,IAAI,QAAQ,EAAE,CAAC;IAC/C,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAChG,UAAU,EAAE,CAAC;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE;QAC1E,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;QAChC,GAAG,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE;KACvE,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAElD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,mCAAmC,eAAe,EAAE,GAAG,CAAC,CAAC;IACvG,CAAC;IAED,MAAM,GAAG,GAAa,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAClF,WAAW,CAAC,GAAG,CAAC,CAAC;IAEjB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QAClB,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,aAAa,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAEF,SAAS,0BAA0B,CAC/B,OAAe,EACf,IAAc,EACd,UAAmC,EAAE;IAErC,OAAO,YAAY,CACf,OAAO,EACP,OAAO,EACP,SAAS,EACT,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,CAClE,CAAC;AACN,CAAC;AAED,MAAM,8BAA8B,GAAG,CACnC,OAAe,EACf,IAAc,EACd,OAAqC,EACzB,EAAE;IACd,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAEzC,OAAO,YAAY,CACf,OAAO,EACP,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAC9D,SAAS,EACT,CAAC,UAAU,EAAE,kBAAkB,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAEvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO;YACH,aAAa;YACb,SAAS;YACT,KAAK;YACL,IAAI;YACJ,iBAAiB;YACjB,eAAe;YACf,QAAQ,CAAC,IAAI;YACb,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE;YACzD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YACnB,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS;YACtC,IAAI;YACJ,EAAE;YACF,KAAK;YACL,MAAM;YACN,KAAK;YACL,qBAAqB;YACrB,uBAAuB;YACvB,uBAAuB;YACvB,yBAAyB;YACzB,UAAU;YACV,GAAG,IAAI;SACV,CAAC;IACN,CAAC,CACJ,CAAC;AACN,CAAC,CAAC;AAEF,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,kBAAkB,EAAE,CAAC","sourcesContent":["import { type ChildProcess, spawn, type StdioOptions } from \"node:child_process\";\nimport { randomBytes } from \"node:crypto\";\nimport { readdirSync, readFileSync } from \"node:fs\";\nimport { Socket } from \"node:net\";\nimport { dirname, extname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { warn } from \"../log/default-logger.ts\";\nimport { killMarkedProcesses, PROCESS_MARKER } from \"./kill-marked-processes.ts\";\nimport {\n    type CleanupDirectoryIdentity,\n    cleanupDirectoryIdentity,\n    killProcessGroup,\n    type ProcessGroupIdentity,\n    processGroupIdentity,\n    removeCleanupDirectory,\n} from \"./kill-process-group.ts\";\nimport { isReapedState, readProcessStatFields } from \"./process-status.ts\";\nimport { resolveExecutable } from \"./resolve-executable.ts\";\n\ntype ParentDeathSpawnOptions = {\n    stdio?: StdioOptions;\n    env?: NodeJS.ProcessEnv;\n    cleanupDirectories?: string[];\n};\n\ntype ParentDeathSupervisorOptions = Omit<ParentDeathSpawnOptions, \"cleanupDirectories\"> & {\n    cleanupDirectory: string;\n};\n\ntype GuardSignal = \"SIGKILL\" | \"SIGCONT\";\n\ntype ProcessIdentity = {\n    pid: number;\n    startTime: string;\n};\n\ntype ProcessWatch = {\n    owner: ProcessIdentity;\n    target: ProcessIdentity;\n};\n\ntype LaunchArguments = (executable: string, cleanupDirectories: CleanupDirectoryIdentity[]) => string[];\n\ntype GuardJob = {\n    marker: string;\n    processGroup: ProcessGroupIdentity;\n    cleanupDirectories: CleanupDirectoryIdentity[];\n    signal: GuardSignal;\n};\n\ntype GuardState = {\n    child?: ChildProcess | undefined;\n    jobs: Map<string, GuardJob>;\n    watch?: ProcessWatch;\n};\n\ntype SpawnRollback = {\n    child: ChildProcess;\n    marker: string;\n    processGroup?: ProcessGroupIdentity;\n    cleanupDirectories?: CleanupDirectoryIdentity[];\n};\n\nconst MODULE_PATH = fileURLToPath(import.meta.url);\nconst GUARD_PATH = join(dirname(MODULE_PATH), `process-guard${extname(MODULE_PATH)}`);\nconst RUN_ID = randomBytes(8).toString(\"hex\");\nconst RUN_PREFIX = `${PROCESS_MARKER}=${RUN_ID}/`;\nconst guard: GuardState = { jobs: new Map() };\nconst SUPERVISOR_NAME = \"gtkx-process-supervisor\";\nconst SUPERVISOR_CLEANUP_NAME = \"gtkx-process-cleanup\";\nconst SUPERVISOR_WATCH_NAME = \"gtkx-process-watch\";\nconst SUPERVISOR_KILL_GROUP_BODY = [\n    \"remaining=40\",\n    'while [ \"$remaining\" -gt 0 ] && kill -KILL \"-$group\" 2>/dev/null; do',\n    '    \"$sleep_command\" 0.025',\n    \"    remaining=$((remaining - 1))\",\n    \"done\",\n];\nconst SUPERVISOR_REMOVE_RUNTIME_BODY = [\n    \"remaining=40\",\n    'while [ \"$remaining\" -gt 0 ] && ' +\n    '[ \"$(\"$stat_command\" -c \"%d:%i:%u\" -- \"$runtime\" 2>/dev/null)\" = \"$identity\" ]; do',\n    '    \"$rm_command\" -rf -- \"$runtime\"',\n    '    \"$sleep_command\" 0.025',\n    \"    remaining=$((remaining - 1))\",\n    \"done\",\n];\nconst SUPERVISOR_CLEANUP_BODY = [...SUPERVISOR_KILL_GROUP_BODY, ...SUPERVISOR_REMOVE_RUNTIME_BODY];\nconst SUPERVISOR_CLEANUP_SCRIPT = [\n    \"runtime=$1\",\n    \"identity=$2\",\n    \"group=$3\",\n    \"stat_command=$4\",\n    \"rm_command=$5\",\n    \"sleep_command=$6\",\n    ...SUPERVISOR_CLEANUP_BODY,\n].join(\"\\n\");\nconst SUPERVISOR_WATCH_SCRIPT = [\n    \"runtime=$1\",\n    \"identity=$2\",\n    \"group=$3\",\n    \"group_start=$4\",\n    \"expected_parent=$5\",\n    \"expected_parent_start=$6\",\n    \"stat_command=$7\",\n    \"rm_command=$8\",\n    \"sleep_command=$9\",\n    \"matches_process() {\",\n    \"    expected_process=$1\",\n    \"    expected_start=$2\",\n    \"    process_stat=\",\n    '    IFS= read -r process_stat < \"/proc/$expected_process/stat\" || return 1',\n    \"    process_tail=${process_stat##*) }\",\n    \"    set -- $process_tail\",\n    '    case \"$1\" in Z|X|x) return 1 ;; esac',\n    '    [ \"${20}\" = \"$expected_start\" ]',\n    \"}\",\n    \"matches_parent() {\",\n    '    matches_process \"$expected_parent\" \"$expected_parent_start\"',\n    \"}\",\n    \"kill_group() {\",\n    ...SUPERVISOR_KILL_GROUP_BODY.map((line) => `    ${line}`),\n    \"}\",\n    \"cleanup() {\",\n    '    trap \"\" TERM INT HUP',\n    \"    kill_group\",\n    ...SUPERVISOR_REMOVE_RUNTIME_BODY.map((line) => `    ${line}`),\n    \"    exit 0\",\n    \"}\",\n    \"trap cleanup TERM INT HUP\",\n    'while matches_process \"$group\" \"$group_start\" && matches_parent; do',\n    '    \"$sleep_command\" 0.1',\n    \"done\",\n    \"kill_group\",\n    \"while matches_parent; do\",\n    '    \"$sleep_command\" 0.1',\n    \"done\",\n    \"cleanup\",\n].join(\"\\n\");\nconst SUPERVISOR_SCRIPT = [\n    \"runtime=$1\",\n    \"identity=$2\",\n    \"expected_parent=$3\",\n    \"expected_parent_start=$4\",\n    \"stat_command=$5\",\n    \"rm_command=$6\",\n    \"shell_command=$7\",\n    \"setsid_command=$8\",\n    \"sleep_command=$9\",\n    \"shift 9\",\n    \"watch_name=$1\",\n    \"watch_script=$2\",\n    \"cleanup_name=$3\",\n    \"cleanup_script=$4\",\n    \"shift 4\",\n    \"process_start() {\",\n    \"    process_stat=\",\n    '    IFS= read -r process_stat < \"/proc/$1/stat\" || return 1',\n    \"    process_tail=${process_stat##*) }\",\n    \"    set -- $process_tail\",\n    '    case \"$1\" in Z|X|x) return 1 ;; esac',\n    '    printf \"%s\" \"${20}\"',\n    \"}\",\n    \"matches_parent() {\",\n    \"    parent_stat=\",\n    '    IFS= read -r parent_stat < \"/proc/$expected_parent/stat\" || return 1',\n    \"    parent_tail=${parent_stat##*) }\",\n    \"    set -- $parent_tail\",\n    '    case \"$1\" in Z|X|x) return 1 ;; esac',\n    '    [ \"${20}\" = \"$expected_parent_start\" ]',\n    \"}\",\n    \"terminate() {\",\n    '    trap \"\" CONT TERM INT HUP',\n    \"    while :; do\",\n    '        \"$setsid_command\" \"$shell_command\" -c \"$cleanup_script\" \"$cleanup_name\" \"$runtime\" \"$identity\" \"$$\" ' +\n    '\"$stat_command\" \"$rm_command\" \"$sleep_command\" </dev/null >/dev/null 2>&1 &',\n    \"        cleanup=$!\",\n    '        wait \"$cleanup\" 2>/dev/null',\n    '        \"$sleep_command\" 0.025',\n    \"    done\",\n    \"}\",\n    \"continue_or_terminate() {\",\n    \"    remaining=40\",\n    '    while matches_parent && [ \"$remaining\" -gt 0 ]; do',\n    '        \"$sleep_command\" 0.025',\n    \"        remaining=$((remaining - 1))\",\n    \"    done\",\n    \"    if ! matches_parent; then terminate; fi\",\n    \"}\",\n    \"trap continue_or_terminate CONT\",\n    \"trap terminate TERM INT HUP\",\n    \"supervisor_start=$(process_start \\\"$$\\\") || terminate\",\n    '( unset GTKX_PROCESS_GUARD; exec \"$setsid_command\" \"$shell_command\" -c \"$watch_script\" \"$watch_name\" \"$runtime\" ' +\n    '\"$identity\" \"$$\" \"$supervisor_start\" \"$expected_parent\" \"$expected_parent_start\" \"$stat_command\" ' +\n    '\"$rm_command\" \"$sleep_command\" ) </dev/null >/dev/null 2>&1 &',\n    \"child=\",\n    \"if ! matches_parent; then terminate; fi\",\n    '\"$@\" &',\n    \"child=$!\",\n    \"while :; do\",\n    '    wait \"$child\"',\n    \"    status=$?\",\n    '    if kill -0 \"$child\" 2>/dev/null; then continue; fi',\n    '    exit \"$status\"',\n    \"done\",\n].join(\"\\n\");\n\nconst processIdentity = (pid: number): ProcessIdentity => {\n    const fields = readProcessStatFields(pid);\n    const startTime = fields?.[19];\n\n    if (startTime === undefined || isReapedState(fields?.[0])) {\n        throw new Error(`Failed to identify process ${String(pid)}`);\n    }\n\n    return { pid, startTime };\n};\n\nconst writeGuardCommand = (child: ChildProcess, operation: \"+\" | \"-\", job: GuardJob): void => {\n    child.stdin?.write(`${operation}${JSON.stringify(job)}\\n`);\n};\n\nconst releaseGuard = (child: ChildProcess): void => {\n    child.unref();\n    const { stdin } = child;\n\n    if (stdin instanceof Socket) {\n        stdin.unref();\n    }\n};\n\nconst isSameProcessWatch = (left: ProcessWatch, right: ProcessWatch): boolean =>\n    left.owner.pid === right.owner.pid &&\n    left.owner.startTime === right.owner.startTime &&\n    left.target.pid === right.target.pid &&\n    left.target.startTime === right.target.startTime;\n\nconst configureProcessWatch = (watch?: ProcessWatch): void => {\n    if (watch === undefined) {\n        return;\n    }\n\n    if (guard.watch !== undefined && !isSameProcessWatch(guard.watch, watch)) {\n        throw new Error(\"The process guard is already watching another owner\");\n    }\n\n    if (guard.child !== undefined && guard.watch === undefined) {\n        throw new Error(\"The process guard was started before its owner was registered\");\n    }\n\n    guard.watch = watch;\n};\n\nconst guardArguments = (): string[] =>\n    guard.watch === undefined\n        ? [GUARD_PATH, RUN_PREFIX]\n        : [GUARD_PATH, RUN_PREFIX, JSON.stringify(guard.watch)];\n\nconst startGuard = (watch?: ProcessWatch): void => {\n    configureProcessWatch(watch);\n\n    if (guard.child) {\n        return;\n    }\n\n    const child = spawn(process.execPath, guardArguments(), {\n        detached: true,\n        stdio: [\"pipe\", \"ignore\", \"ignore\"],\n    });\n\n    child.on(\"error\", () => {\n        if (guard.child === child) {\n            guard.child = undefined;\n        }\n    });\n\n    child.on(\"exit\", () => {\n        if (guard.child === child) {\n            guard.child = undefined;\n        }\n    });\n\n    child.stdin.on(\"error\", () => {\n        if (guard.child === child) {\n            guard.child = undefined;\n        }\n    });\n\n    guard.child = child;\n\n    for (const job of guard.jobs.values()) {\n        writeGuardCommand(child, \"+\", job);\n    }\n\n    releaseGuard(child);\n};\n\nconst watchParentProcess = (): void => {\n    const parentId = process.ppid;\n    const watch = {\n        owner: processIdentity(parentId),\n        target: processIdentity(process.pid),\n    };\n\n    if (process.ppid !== parentId) {\n        throw new Error(\"The parent process exited while its guard was starting\");\n    }\n\n    startGuard(watch);\n};\n\nconst registerJob = (job: GuardJob): void => {\n    guard.jobs.set(job.marker, job);\n\n    if (guard.child) {\n        writeGuardCommand(guard.child, \"+\", job);\n    }\n};\n\nconst unregisterJob = (job: GuardJob): void => {\n    guard.jobs.delete(job.marker);\n\n    if (guard.child) {\n        writeGuardCommand(guard.child, \"-\", job);\n    }\n};\n\nconst rollbackSpawn = ({ child, marker, processGroup, cleanupDirectories = [] }: SpawnRollback): void => {\n    if (processGroup === undefined) {\n        child.kill(\"SIGKILL\");\n    } else {\n        killProcessGroup(processGroup);\n    }\n\n    killMarkedProcesses(marker);\n\n    for (const identity of cleanupDirectories) {\n        removeCleanupDirectory(identity);\n    }\n};\n\nconst captureCleanupDirectories = (command: string, paths: string[]): CleanupDirectoryIdentity[] => {\n    const identities = paths.map((path) => cleanupDirectoryIdentity(path));\n\n    if (identities.includes(undefined)) {\n        throw new Error(`Failed to identify a cleanup directory for ${command}`);\n    }\n\n    return identities.filter((identity): identity is CleanupDirectoryIdentity => identity !== undefined);\n};\n\nconst readResource = (path: string): string => {\n    try {\n        return readFileSync(path, \"utf8\").trim();\n    } catch {\n        return \"unknown\";\n    }\n};\n\nconst openDescriptors = (): string => {\n    try {\n        return String(readdirSync(\"/proc/self/fd\").length);\n    } catch {\n        return \"unknown\";\n    }\n};\n\nconst resourceSummary = (): string =>\n    `open descriptors ${openDescriptors()}, ` +\n    `cgroup pids ${readResource(\"/sys/fs/cgroup/pids.current\")}/${readResource(\"/sys/fs/cgroup/pids.max\")}`;\n\nconst spawnedProcessGroup = (child: ChildProcess, command: string): ProcessGroupIdentity | undefined => {\n    const processGroupId = child.pid;\n\n    if (processGroupId !== undefined) {\n        return processGroupIdentity(processGroupId);\n    }\n\n    child.on(\"error\", (cause: NodeJS.ErrnoException) => {\n        warn(`Cannot spawn ${command}: ${cause.code ?? cause.message}`);\n    });\n\n    return undefined;\n};\n\nconst spawnGuarded = (\n    command: string,\n    options: ParentDeathSpawnOptions,\n    signal: GuardSignal,\n    launchArguments: LaunchArguments,\n): ChildProcess => {\n    const executable = resolveExecutable(command);\n    const setpriv = resolveExecutable(\"setpriv\");\n    const jobValue = `${RUN_ID}/${randomBytes(4).toString(\"hex\")}`;\n    const marker = `${PROCESS_MARKER}=${jobValue}`;\n    const cleanupDirectories = captureCleanupDirectories(command, options.cleanupDirectories ?? []);\n    startGuard();\n\n    const child = spawn(setpriv, launchArguments(executable, cleanupDirectories), {\n        detached: true,\n        stdio: options.stdio ?? \"ignore\",\n        env: { ...(options.env ?? process.env), [PROCESS_MARKER]: jobValue },\n    });\n\n    const group = spawnedProcessGroup(child, command);\n\n    if (group === undefined) {\n        rollbackSpawn({ child, marker, cleanupDirectories });\n        throw new Error(`Failed to spawn ${command} or identify its process group (${resourceSummary()})`);\n    }\n\n    const job: GuardJob = { marker, processGroup: group, cleanupDirectories, signal };\n    registerJob(job);\n\n    child.on(\"exit\", () => {\n        killMarkedProcesses(job.marker);\n        unregisterJob(job);\n    });\n\n    return child;\n};\n\nfunction spawnWithParentDeathSignal(\n    command: string,\n    args: string[],\n    options: ParentDeathSpawnOptions = {},\n): ChildProcess {\n    return spawnGuarded(\n        command,\n        options,\n        \"SIGKILL\",\n        (executable) => [\"--pdeathsig\", \"SIGKILL\", executable, ...args],\n    );\n}\n\nconst spawnWithParentDeathSupervisor = (\n    command: string,\n    args: string[],\n    options: ParentDeathSupervisorOptions,\n): ChildProcess => {\n    const shell = resolveExecutable(\"sh\");\n    const stat = resolveExecutable(\"stat\");\n    const rm = resolveExecutable(\"rm\");\n    const setsid = resolveExecutable(\"setsid\");\n    const sleep = resolveExecutable(\"sleep\");\n\n    return spawnGuarded(\n        command,\n        { ...options, cleanupDirectories: [options.cleanupDirectory] },\n        \"SIGCONT\",\n        (executable, cleanupDirectories) => {\n            const identity = cleanupDirectories[0];\n\n            if (identity === undefined) {\n                throw new Error(`Failed to identify a cleanup directory for ${command}`);\n            }\n\n            return [\n                \"--pdeathsig\",\n                \"SIGCONT\",\n                shell,\n                \"-c\",\n                SUPERVISOR_SCRIPT,\n                SUPERVISOR_NAME,\n                identity.path,\n                `${identity.device}:${identity.inode}:${identity.userId}`,\n                String(process.pid),\n                processIdentity(process.pid).startTime,\n                stat,\n                rm,\n                shell,\n                setsid,\n                sleep,\n                SUPERVISOR_WATCH_NAME,\n                SUPERVISOR_WATCH_SCRIPT,\n                SUPERVISOR_CLEANUP_NAME,\n                SUPERVISOR_CLEANUP_SCRIPT,\n                executable,\n                ...args,\n            ];\n        },\n    );\n};\n\nexport { spawnWithParentDeathSignal, spawnWithParentDeathSupervisor, watchParentProcess };\n"]}

package/package.json

@@ -1,11 +1,13 @@
 {
   "name": "@gtkx/utils",
-  "version": "1.6.0",
-  "description": "Shared utilities for the GTK toolchain: logging, errors, strings.",
+  "version": "2.0.0-beta.10",
+  "description": "Shared utilities for the GTKX GNOME app toolchain.",
   "keywords": [
     "gtkx",
     "gtk",
     "gtk4",
+    "adwaita",
+    "gnome",
     "utils",
     "linux",
     "desktop"
@@ -26,6 +28,8 @@
     "./package.json": "./package.json",
     ".": {
       "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": null,
       "default": "./dist/index.js"
     }
   },
@@ -45,10 +49,14 @@
     }
   },
   "dependencies": {
-    "picocolors": "^1.1.1"
+    "picocolors": "^1.1.1",
+    "which": "^7.0.0"
+  },
+  "devDependencies": {
+    "@types/which": "^3.0.4"
   },
   "engines": {
-    "node": ">=24"
+    "node": ">=26.7.0"
   },
   "scripts": {
     "release": "tsx ../../scripts/release-package.ts"

package/src/index.ts

@@ -2,8 +2,8 @@ export * from "./array/index.ts";
 export * from "./class/index.ts";
 export * from "./error/index.ts";
 export * from "./log/index.ts";
-export * from "./map/index.ts";
 export * from "./object/index.ts";
+export * from "./path.ts";
 export * from "./predicate/index.ts";
 export * from "./process/index.ts";
 export * from "./set/index.ts";

package/src/path.ts

@@ -0,0 +1,17 @@
+import { isAbsolute, relative, sep } from "node:path";
+
+const isOutsidePath = (path: string): boolean =>
+    path === ".." || path.startsWith(`..${sep}`) || isAbsolute(path);
+
+const isPathInside = (parent: string, candidate: string): boolean => {
+    const path = relative(parent, candidate);
+
+    return path !== "" && !isOutsidePath(path);
+};
+
+const isPathWithin = (parent: string, candidate: string): boolean =>
+    !isOutsidePath(relative(parent, candidate));
+
+const toPosixPath = (path: string): string => path.replaceAll("\\", "/");
+
+export { isPathInside, isPathWithin, toPosixPath };

package/src/process/index.ts

@@ -1,4 +1,17 @@
 export { exitCodeForSignal } from "./exit-code-for-signal.ts";
 export { installGracefulShutdown } from "./install-graceful-shutdown.ts";
+export {
+    type CleanupDirectoryIdentity,
+    cleanupDirectoryIdentity,
+    killProcessGroup,
+    type ProcessGroupIdentity,
+    processGroupIdentity,
+    removeCleanupDirectory,
+} from "./kill-process-group.ts";
+export { isProcessAlive } from "./process-status.ts";
 export { resolveExecutable, tryResolveExecutable } from "./resolve-executable.ts";
-export { spawnWithParentDeathSignal } from "./spawn-with-parent-death-signal.ts";
+export {
+    spawnWithParentDeathSignal,
+    spawnWithParentDeathSupervisor,
+    watchParentProcess,
+} from "./spawn-with-parent-death-signal.ts";

package/src/process/kill-marked-processes.ts

@@ -1,44 +1,89 @@
 import { readdirSync, readFileSync } from "node:fs";
+import { readProcessStatFields } from "./process-status.ts";
+
+type ProcessIdentity = {
+    pid: number;
+    sessionId: number;
+    startTime: string;
+};
+
+type MarkerMatcher = (assignment: string) => boolean;
 
 const PROCESS_MARKER = "GTKX_PROCESS_GUARD";
 const MAX_KILL_PASSES = 8;
+const JOB_ID_PATTERN = /^[0-9a-f]{8}$/;
 
-const isMarked = (pid: number, prefix: string): boolean => {
+const processIdentity = (pid: number): ProcessIdentity | undefined => {
+    const fields = readProcessStatFields(pid);
+    const sessionId = Number(fields?.[3]);
+    const startTime = fields?.[19];
+
+    return startTime !== undefined && Number.isSafeInteger(sessionId)
+        ? { pid, sessionId, startTime }
+        : undefined;
+};
+
+const isMarked = (pid: number, isMatch: MarkerMatcher): boolean => {
     try {
         return readFileSync(`/proc/${String(pid)}/environ`, "utf8")
             .split("\0")
-            .some((assignment) => assignment.startsWith(prefix));
+            .some((assignment) => isMatch(assignment));
     } catch {
         return false;
     }
 };
 
-const markedPids = (prefix: string): number[] =>
+const markedProcesses = (isMatch: MarkerMatcher): ProcessIdentity[] =>
     readdirSync("/proc")
         .map(Number)
         .filter((pid) => Number.isSafeInteger(pid) && pid > 1 && pid !== process.pid)
-        .filter((pid) => isMarked(pid, prefix));
+        .filter((pid) => isMarked(pid, isMatch))
+        .map((pid) => processIdentity(pid))
+        .filter((identity): identity is ProcessIdentity => identity !== undefined);
+
+const killProcess = (identity: ProcessIdentity, isMatch: MarkerMatcher): void => {
+    if (!isMarked(identity.pid, isMatch)) {
+        return;
+    }
+
+    const current = processIdentity(identity.pid);
+
+    if (
+        current?.sessionId !== identity.sessionId ||
+        current.startTime !== identity.startTime
+    ) {
+        return;
+    }
 
-const killPid = (pid: number): void => {
     try {
-        process.kill(pid, "SIGKILL");
+        process.kill(identity.pid, "SIGKILL");
     } catch {
         return;
     }
 };
 
-function killMarkedProcesses(prefix: string): void {
+const killMatchingProcesses = (isMatch: MarkerMatcher): void => {
     for (let pass = 0; pass < MAX_KILL_PASSES; pass += 1) {
-        const pids = markedPids(prefix);
+        const processes = markedProcesses(isMatch);
 
-        if (pids.length === 0) {
+        if (processes.length === 0) {
             return;
         }
 
-        for (const pid of pids) {
-            killPid(pid);
+        for (const identity of processes) {
+            killProcess(identity, isMatch);
         }
     }
-}
+};
+
+const killMarkedProcesses = (marker: string): void => {
+    killMatchingProcesses((assignment) => assignment === marker);
+};
+
+const killMarkedProcessRun = (runPrefix: string): void => {
+    killMatchingProcesses((assignment) =>
+        assignment.startsWith(runPrefix) && JOB_ID_PATTERN.test(assignment.slice(runPrefix.length)),
+    );
+};
 
-export { PROCESS_MARKER, killMarkedProcesses };
+export { PROCESS_MARKER, killMarkedProcessRun, killMarkedProcesses };