@gtkx/utils 2.0.0-beta.1 → 2.0.0-beta.3

package/dist/process/index.d.ts

@@ -1,5 +1,6 @@
 export { exitCodeForSignal } from "./exit-code-for-signal.ts";
 export { installGracefulShutdown } from "./install-graceful-shutdown.ts";
+export { killProcessGroup, type ProcessGroupIdentity, processGroupIdentity, } from "./kill-process-group.ts";
 export { resolveExecutable, tryResolveExecutable } from "./resolve-executable.ts";
-export { spawnWithParentDeathSignal } from "./spawn-with-parent-death-signal.ts";
+export { spawnWithParentDeathSignal, spawnWithParentDeathSupervisor, } from "./spawn-with-parent-death-signal.ts";
 //# sourceMappingURL=index.d.ts.map

package/dist/process/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/process/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/process/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EACH,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,oBAAoB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EACH,0BAA0B,EAC1B,8BAA8B,GACjC,MAAM,qCAAqC,CAAC"}

package/dist/process/index.js

@@ -1,5 +1,6 @@
 export { exitCodeForSignal } from "./exit-code-for-signal.js";
 export { installGracefulShutdown } from "./install-graceful-shutdown.js";
+export { killProcessGroup, processGroupIdentity, } from "./kill-process-group.js";
 export { resolveExecutable, tryResolveExecutable } from "./resolve-executable.js";
-export { spawnWithParentDeathSignal } from "./spawn-with-parent-death-signal.js";
+export { spawnWithParentDeathSignal, spawnWithParentDeathSupervisor, } from "./spawn-with-parent-death-signal.js";
 //# sourceMappingURL=index.js.map

package/dist/process/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/process/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC","sourcesContent":["export { exitCodeForSignal } from \"./exit-code-for-signal.ts\";\nexport { installGracefulShutdown } from \"./install-graceful-shutdown.ts\";\nexport { resolveExecutable, tryResolveExecutable } from \"./resolve-executable.ts\";\nexport { spawnWithParentDeathSignal } from \"./spawn-with-parent-death-signal.ts\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/process/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EACH,gBAAgB,EAEhB,oBAAoB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EACH,0BAA0B,EAC1B,8BAA8B,GACjC,MAAM,qCAAqC,CAAC","sourcesContent":["export { exitCodeForSignal } from \"./exit-code-for-signal.ts\";\nexport { installGracefulShutdown } from \"./install-graceful-shutdown.ts\";\nexport {\n    killProcessGroup,\n    type ProcessGroupIdentity,\n    processGroupIdentity,\n} from \"./kill-process-group.ts\";\nexport { resolveExecutable, tryResolveExecutable } from \"./resolve-executable.ts\";\nexport {\n    spawnWithParentDeathSignal,\n    spawnWithParentDeathSupervisor,\n} from \"./spawn-with-parent-death-signal.ts\";\n"]}

package/dist/process/kill-marked-processes.d.ts

@@ -1,4 +1,5 @@
 declare const PROCESS_MARKER = "GTKX_PROCESS_GUARD";
-declare function killMarkedProcesses(prefix: string): void;
-export { PROCESS_MARKER, killMarkedProcesses };
+declare const killMarkedProcesses: (marker: string) => void;
+declare const killMarkedProcessRun: (runPrefix: string) => void;
+export { PROCESS_MARKER, killMarkedProcessRun, killMarkedProcesses };
 //# sourceMappingURL=kill-marked-processes.d.ts.map

package/dist/process/kill-marked-processes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kill-marked-processes.d.ts","sourceRoot":"","sources":["../../src/process/kill-marked-processes.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,cAAc,uBAAuB,CAAC;AA2B5C,iBAAS,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAYjD;AAED,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC"}
+{"version":3,"file":"kill-marked-processes.d.ts","sourceRoot":"","sources":["../../src/process/kill-marked-processes.ts"],"names":[],"mappings":"AAUA,QAAA,MAAM,cAAc,uBAAuB,CAAC;AAwE5C,QAAA,MAAM,mBAAmB,GAAI,QAAQ,MAAM,KAAG,IAE7C,CAAC;AAEF,QAAA,MAAM,oBAAoB,GAAI,WAAW,MAAM,KAAG,IAIjD,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/process/kill-marked-processes.js

@@ -1,38 +1,69 @@
 import { readdirSync, readFileSync } from "node:fs";
 const PROCESS_MARKER = "GTKX_PROCESS_GUARD";
 const MAX_KILL_PASSES = 8;
-const isMarked = (pid, prefix) => {
+const JOB_ID_PATTERN = /^[0-9a-f]{8}$/;
+const processIdentity = (pid) => {
+    try {
+        const stat = readFileSync(`/proc/${String(pid)}/stat`, "utf8");
+        const fields = stat.slice(stat.lastIndexOf(") ") + 2).split(" ");
+        const sessionId = Number(fields[3]);
+        const startTime = fields[19];
+        return startTime !== undefined && Number.isSafeInteger(sessionId)
+            ? { pid, sessionId, startTime }
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+const isMarked = (pid, isMatch) => {
     try {
         return readFileSync(`/proc/${String(pid)}/environ`, "utf8")
             .split("\0")
-            .some((assignment) => assignment.startsWith(prefix));
+            .some((assignment) => isMatch(assignment));
     }
     catch {
         return false;
     }
 };
-const markedPids = (prefix) => readdirSync("/proc")
+const markedProcesses = (isMatch) => readdirSync("/proc")
     .map(Number)
     .filter((pid) => Number.isSafeInteger(pid) && pid > 1 && pid !== process.pid)
-    .filter((pid) => isMarked(pid, prefix));
-const killPid = (pid) => {
+    .filter((pid) => isMarked(pid, isMatch))
+    .map((pid) => processIdentity(pid))
+    .filter((identity) => identity !== undefined);
+const killProcess = (identity, isMatch) => {
+    if (!isMarked(identity.pid, isMatch)) {
+        return;
+    }
+    const current = processIdentity(identity.pid);
+    if (current?.sessionId !== identity.sessionId ||
+        current.startTime !== identity.startTime) {
+        return;
+    }
     try {
-        process.kill(pid, "SIGKILL");
+        process.kill(identity.pid, "SIGKILL");
     }
     catch {
         return;
     }
 };
-function killMarkedProcesses(prefix) {
+const killMatchingProcesses = (isMatch) => {
     for (let pass = 0; pass < MAX_KILL_PASSES; pass += 1) {
-        const pids = markedPids(prefix);
-        if (pids.length === 0) {
+        const processes = markedProcesses(isMatch);
+        if (processes.length === 0) {
             return;
         }
-        for (const pid of pids) {
-            killPid(pid);
+        for (const identity of processes) {
+            killProcess(identity, isMatch);
         }
     }
-}
-export { PROCESS_MARKER, killMarkedProcesses };
+};
+const killMarkedProcesses = (marker) => {
+    killMatchingProcesses((assignment) => assignment === marker);
+};
+const killMarkedProcessRun = (runPrefix) => {
+    killMatchingProcesses((assignment) => assignment.startsWith(runPrefix) && JOB_ID_PATTERN.test(assignment.slice(runPrefix.length)));
+};
+export { PROCESS_MARKER, killMarkedProcessRun, killMarkedProcesses };
 //# sourceMappingURL=kill-marked-processes.js.map

package/dist/process/kill-marked-processes.js.map

@@ -1 +1 @@
-{"version":3,"file":"kill-marked-processes.js","sourceRoot":"","sources":["../../src/process/kill-marked-processes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEpD,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAC5C,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,MAAc,EAAW,EAAE;IACtD,IAAI,CAAC;QACD,OAAO,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC;aACtD,KAAK,CAAC,IAAI,CAAC;aACX,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,MAAc,EAAY,EAAE,CAC5C,WAAW,CAAC,OAAO,CAAC;KACf,GAAG,CAAC,MAAM,CAAC;KACX,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC;KAC5E,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhD,MAAM,OAAO,GAAG,CAAC,GAAW,EAAQ,EAAE;IAClC,IAAI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO;IACX,CAAC;AACL,CAAC,CAAC;AAEF,SAAS,mBAAmB,CAAC,MAAc;IACvC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,eAAe,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO;QACX,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACL,CAAC;AACL,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC","sourcesContent":["import { readdirSync, readFileSync } from \"node:fs\";\n\nconst PROCESS_MARKER = \"GTKX_PROCESS_GUARD\";\nconst MAX_KILL_PASSES = 8;\n\nconst isMarked = (pid: number, prefix: string): boolean => {\n    try {\n        return readFileSync(`/proc/${String(pid)}/environ`, \"utf8\")\n            .split(\"\\0\")\n            .some((assignment) => assignment.startsWith(prefix));\n    } catch {\n        return false;\n    }\n};\n\nconst markedPids = (prefix: string): number[] =>\n    readdirSync(\"/proc\")\n        .map(Number)\n        .filter((pid) => Number.isSafeInteger(pid) && pid > 1 && pid !== process.pid)\n        .filter((pid) => isMarked(pid, prefix));\n\nconst killPid = (pid: number): void => {\n    try {\n        process.kill(pid, \"SIGKILL\");\n    } catch {\n        return;\n    }\n};\n\nfunction killMarkedProcesses(prefix: string): void {\n    for (let pass = 0; pass < MAX_KILL_PASSES; pass += 1) {\n        const pids = markedPids(prefix);\n\n        if (pids.length === 0) {\n            return;\n        }\n\n        for (const pid of pids) {\n            killPid(pid);\n        }\n    }\n}\n\nexport { PROCESS_MARKER, killMarkedProcesses };\n"]}
+{"version":3,"file":"kill-marked-processes.js","sourceRoot":"","sources":["../../src/process/kill-marked-processes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAUpD,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAC5C,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC,MAAM,eAAe,GAAG,CAAC,GAAW,EAA+B,EAAE;IACjE,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QAE7B,OAAO,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;YAC7D,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE;YAC/B,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,OAAsB,EAAW,EAAE;IAC9D,IAAI,CAAC;QACD,OAAO,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC;aACtD,KAAK,CAAC,IAAI,CAAC;aACX,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,OAAsB,EAAqB,EAAE,CAClE,WAAW,CAAC,OAAO,CAAC;KACf,GAAG,CAAC,MAAM,CAAC;KACX,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC;KAC5E,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;KACvC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;KAClC,MAAM,CAAC,CAAC,QAAQ,EAA+B,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;AAEnF,MAAM,WAAW,GAAG,CAAC,QAAyB,EAAE,OAAsB,EAAQ,EAAE;IAC5E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO;IACX,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE9C,IACI,OAAO,EAAE,SAAS,KAAK,QAAQ,CAAC,SAAS;QACzC,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EAC1C,CAAC;QACC,OAAO;IACX,CAAC;IAED,IAAI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO;IACX,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,OAAsB,EAAQ,EAAE;IAC3D,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,eAAe,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAE3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;QACX,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YAC/B,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;IACL,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAQ,EAAE;IACjD,qBAAqB,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,SAAiB,EAAQ,EAAE;IACrD,qBAAqB,CAAC,CAAC,UAAU,EAAE,EAAE,CACjC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAC9F,CAAC;AACN,CAAC,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,CAAC","sourcesContent":["import { readdirSync, readFileSync } from \"node:fs\";\n\ntype ProcessIdentity = {\n    pid: number;\n    sessionId: number;\n    startTime: string;\n};\n\ntype MarkerMatcher = (assignment: string) => boolean;\n\nconst PROCESS_MARKER = \"GTKX_PROCESS_GUARD\";\nconst MAX_KILL_PASSES = 8;\nconst JOB_ID_PATTERN = /^[0-9a-f]{8}$/;\n\nconst processIdentity = (pid: number): ProcessIdentity | undefined => {\n    try {\n        const stat = readFileSync(`/proc/${String(pid)}/stat`, \"utf8\");\n        const fields = stat.slice(stat.lastIndexOf(\") \") + 2).split(\" \");\n        const sessionId = Number(fields[3]);\n        const startTime = fields[19];\n\n        return startTime !== undefined && Number.isSafeInteger(sessionId)\n            ? { pid, sessionId, startTime }\n            : undefined;\n    } catch {\n        return undefined;\n    }\n};\n\nconst isMarked = (pid: number, isMatch: MarkerMatcher): boolean => {\n    try {\n        return readFileSync(`/proc/${String(pid)}/environ`, \"utf8\")\n            .split(\"\\0\")\n            .some((assignment) => isMatch(assignment));\n    } catch {\n        return false;\n    }\n};\n\nconst markedProcesses = (isMatch: MarkerMatcher): ProcessIdentity[] =>\n    readdirSync(\"/proc\")\n        .map(Number)\n        .filter((pid) => Number.isSafeInteger(pid) && pid > 1 && pid !== process.pid)\n        .filter((pid) => isMarked(pid, isMatch))\n        .map((pid) => processIdentity(pid))\n        .filter((identity): identity is ProcessIdentity => identity !== undefined);\n\nconst killProcess = (identity: ProcessIdentity, isMatch: MarkerMatcher): void => {\n    if (!isMarked(identity.pid, isMatch)) {\n        return;\n    }\n\n    const current = processIdentity(identity.pid);\n\n    if (\n        current?.sessionId !== identity.sessionId ||\n        current.startTime !== identity.startTime\n    ) {\n        return;\n    }\n\n    try {\n        process.kill(identity.pid, \"SIGKILL\");\n    } catch {\n        return;\n    }\n};\n\nconst killMatchingProcesses = (isMatch: MarkerMatcher): void => {\n    for (let pass = 0; pass < MAX_KILL_PASSES; pass += 1) {\n        const processes = markedProcesses(isMatch);\n\n        if (processes.length === 0) {\n            return;\n        }\n\n        for (const identity of processes) {\n            killProcess(identity, isMatch);\n        }\n    }\n};\n\nconst killMarkedProcesses = (marker: string): void => {\n    killMatchingProcesses((assignment) => assignment === marker);\n};\n\nconst killMarkedProcessRun = (runPrefix: string): void => {\n    killMatchingProcesses((assignment) =>\n        assignment.startsWith(runPrefix) && JOB_ID_PATTERN.test(assignment.slice(runPrefix.length)),\n    );\n};\n\nexport { PROCESS_MARKER, killMarkedProcessRun, killMarkedProcesses };\n"]}

package/dist/process/kill-process-group.d.ts

@@ -0,0 +1,16 @@
+type ProcessGroupIdentity = {
+    processGroupId: number;
+    leaderStartTime: string;
+};
+type CleanupDirectoryIdentity = {
+    path: string;
+    device: string;
+    inode: string;
+    userId: string;
+};
+declare const processGroupIdentity: (processGroupId: number) => ProcessGroupIdentity | undefined;
+declare const killProcessGroup: (identity: ProcessGroupIdentity, signal?: NodeJS.Signals) => void;
+declare const cleanupDirectoryIdentity: (path: string) => CleanupDirectoryIdentity | undefined;
+declare const removeCleanupDirectory: (identity: CleanupDirectoryIdentity) => void;
+export { type CleanupDirectoryIdentity, cleanupDirectoryIdentity, killProcessGroup, type ProcessGroupIdentity, processGroupIdentity, removeCleanupDirectory, };
+//# sourceMappingURL=kill-process-group.d.ts.map

package/dist/process/kill-process-group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-process-group.d.ts","sourceRoot":"","sources":["../../src/process/kill-process-group.ts"],"names":[],"mappings":"AAGA,KAAK,oBAAoB,GAAG;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAIF,QAAA,MAAM,oBAAoB,GAAI,gBAAgB,MAAM,KAAG,oBAAoB,GAAG,SAkB7E,CAAC;AAQF,QAAA,MAAM,gBAAgB,GAAI,UAAU,oBAAoB,EAAE,SAAQ,MAAM,CAAC,OAAmB,KAAG,IAU9F,CAAC;AAEF,QAAA,MAAM,wBAAwB,GAAI,MAAM,MAAM,KAAG,wBAAwB,GAAG,SAqB3E,CAAC;AAEF,QAAA,MAAM,sBAAsB,GAAI,UAAU,wBAAwB,KAAG,IAgBpE,CAAC;AAEF,OAAO,EACH,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,sBAAsB,GACzB,CAAC"}

package/dist/process/kill-process-group.js

@@ -0,0 +1,72 @@
+import { lstatSync, readFileSync, rmSync } from "node:fs";
+import { isAbsolute, resolve } from "node:path";
+const isProcessGroupId = (value) => Number.isSafeInteger(value) && value > 1;
+const processGroupIdentity = (processGroupId) => {
+    if (!isProcessGroupId(processGroupId)) {
+        return undefined;
+    }
+    try {
+        const stat = readFileSync(`/proc/${String(processGroupId)}/stat`, "utf8");
+        const fields = stat.slice(stat.lastIndexOf(") ") + 2).split(" ");
+        const actualProcessGroupId = Number(fields[2]);
+        const sessionId = Number(fields[3]);
+        const leaderStartTime = fields[19];
+        return actualProcessGroupId === processGroupId && sessionId === processGroupId && leaderStartTime !== undefined
+            ? { processGroupId, leaderStartTime }
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+const isCurrentProcessGroup = (identity) => {
+    const current = processGroupIdentity(identity.processGroupId);
+    return current?.leaderStartTime === identity.leaderStartTime;
+};
+const killProcessGroup = (identity, signal = "SIGKILL") => {
+    if (!isCurrentProcessGroup(identity)) {
+        return;
+    }
+    try {
+        process.kill(-identity.processGroupId, signal);
+    }
+    catch {
+        return;
+    }
+};
+const cleanupDirectoryIdentity = (path) => {
+    const absolutePath = resolve(path);
+    if (absolutePath === "/" || !isAbsolute(path)) {
+        return undefined;
+    }
+    try {
+        const entry = lstatSync(absolutePath, { bigint: true });
+        return entry.isDirectory()
+            ? {
+                path: absolutePath,
+                device: entry.dev.toString(),
+                inode: entry.ino.toString(),
+                userId: entry.uid.toString(),
+            }
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+const removeCleanupDirectory = (identity) => {
+    const current = cleanupDirectoryIdentity(identity.path);
+    if (current?.device !== identity.device ||
+        current.inode !== identity.inode ||
+        current.userId !== identity.userId) {
+        return;
+    }
+    try {
+        rmSync(identity.path, { recursive: true, force: true });
+    }
+    catch {
+        return;
+    }
+};
+export { cleanupDirectoryIdentity, killProcessGroup, processGroupIdentity, removeCleanupDirectory, };
+//# sourceMappingURL=kill-process-group.js.map

package/dist/process/kill-process-group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-process-group.js","sourceRoot":"","sources":["../../src/process/kill-process-group.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAchD,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAE9F,MAAM,oBAAoB,GAAG,CAAC,cAAsB,EAAoC,EAAE;IACtF,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QAEnC,OAAO,oBAAoB,KAAK,cAAc,IAAI,SAAS,KAAK,cAAc,IAAI,eAAe,KAAK,SAAS;YAC3G,CAAC,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE;YACrC,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,QAA8B,EAAW,EAAE;IACtE,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAE9D,OAAO,OAAO,EAAE,eAAe,KAAK,QAAQ,CAAC,eAAe,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,QAA8B,EAAE,SAAyB,SAAS,EAAQ,EAAE;IAClG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,OAAO;IACX,CAAC;IAED,IAAI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO;IACX,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAAC,IAAY,EAAwC,EAAE;IACpF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,IAAI,YAAY,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAExD,OAAO,KAAK,CAAC,WAAW,EAAE;YACtB,CAAC,CAAC;gBACM,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC5B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC3B,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;aAC/B;YACL,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,QAAkC,EAAQ,EAAE;IACxE,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAExD,IACI,OAAO,EAAE,MAAM,KAAK,QAAQ,CAAC,MAAM;QACnC,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAChC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EACpC,CAAC;QACC,OAAO;IACX,CAAC;IAED,IAAI,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACL,OAAO;IACX,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,EAEH,wBAAwB,EACxB,gBAAgB,EAEhB,oBAAoB,EACpB,sBAAsB,GACzB,CAAC","sourcesContent":["import { lstatSync, readFileSync, rmSync } from \"node:fs\";\nimport { isAbsolute, resolve } from \"node:path\";\n\ntype ProcessGroupIdentity = {\n    processGroupId: number;\n    leaderStartTime: string;\n};\n\ntype CleanupDirectoryIdentity = {\n    path: string;\n    device: string;\n    inode: string;\n    userId: string;\n};\n\nconst isProcessGroupId = (value: number): boolean => Number.isSafeInteger(value) && value > 1;\n\nconst processGroupIdentity = (processGroupId: number): ProcessGroupIdentity | undefined => {\n    if (!isProcessGroupId(processGroupId)) {\n        return undefined;\n    }\n\n    try {\n        const stat = readFileSync(`/proc/${String(processGroupId)}/stat`, \"utf8\");\n        const fields = stat.slice(stat.lastIndexOf(\") \") + 2).split(\" \");\n        const actualProcessGroupId = Number(fields[2]);\n        const sessionId = Number(fields[3]);\n        const leaderStartTime = fields[19];\n\n        return actualProcessGroupId === processGroupId && sessionId === processGroupId && leaderStartTime !== undefined\n            ? { processGroupId, leaderStartTime }\n            : undefined;\n    } catch {\n        return undefined;\n    }\n};\n\nconst isCurrentProcessGroup = (identity: ProcessGroupIdentity): boolean => {\n    const current = processGroupIdentity(identity.processGroupId);\n\n    return current?.leaderStartTime === identity.leaderStartTime;\n};\n\nconst killProcessGroup = (identity: ProcessGroupIdentity, signal: NodeJS.Signals = \"SIGKILL\"): void => {\n    if (!isCurrentProcessGroup(identity)) {\n        return;\n    }\n\n    try {\n        process.kill(-identity.processGroupId, signal);\n    } catch {\n        return;\n    }\n};\n\nconst cleanupDirectoryIdentity = (path: string): CleanupDirectoryIdentity | undefined => {\n    const absolutePath = resolve(path);\n\n    if (absolutePath === \"/\" || !isAbsolute(path)) {\n        return undefined;\n    }\n\n    try {\n        const entry = lstatSync(absolutePath, { bigint: true });\n\n        return entry.isDirectory()\n            ? {\n                    path: absolutePath,\n                    device: entry.dev.toString(),\n                    inode: entry.ino.toString(),\n                    userId: entry.uid.toString(),\n                }\n            : undefined;\n    } catch {\n        return undefined;\n    }\n};\n\nconst removeCleanupDirectory = (identity: CleanupDirectoryIdentity): void => {\n    const current = cleanupDirectoryIdentity(identity.path);\n\n    if (\n        current?.device !== identity.device ||\n        current.inode !== identity.inode ||\n        current.userId !== identity.userId\n    ) {\n        return;\n    }\n\n    try {\n        rmSync(identity.path, { recursive: true, force: true });\n    } catch {\n        return;\n    }\n};\n\nexport {\n    type CleanupDirectoryIdentity,\n    cleanupDirectoryIdentity,\n    killProcessGroup,\n    type ProcessGroupIdentity,\n    processGroupIdentity,\n    removeCleanupDirectory,\n};\n"]}

package/dist/process/process-guard.js

@@ -1,13 +1,91 @@
-import { killMarkedProcesses } from "./kill-marked-processes.js";
+import { killMarkedProcesses, killMarkedProcessRun } from "./kill-marked-processes.js";
+import { killProcessGroup, removeCleanupDirectory, } from "./kill-process-group.js";
 const GUARD_PREFIX = process.argv[2] ?? "";
 const WATCHED_SIGNALS = ["SIGTERM", "SIGINT", "SIGHUP"];
+const state = {
+    bufferedCommands: "",
+    isSweeping: false,
+    jobs: new Map(),
+};
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isProcessGroupIdentity = (value) => isRecord(value) &&
+    typeof value.processGroupId === "number" &&
+    Number.isSafeInteger(value.processGroupId) &&
+    value.processGroupId > 1 &&
+    typeof value.leaderStartTime === "string" &&
+    /^\d+$/.test(value.leaderStartTime);
+const isCleanupDirectoryIdentity = (value) => isRecord(value) &&
+    typeof value.path === "string" &&
+    typeof value.device === "string" &&
+    typeof value.inode === "string" &&
+    typeof value.userId === "string";
+const isGuardJob = (value) => isRecord(value) &&
+    typeof value.marker === "string" &&
+    isProcessGroupIdentity(value.processGroup) &&
+    Array.isArray(value.cleanupDirectories) &&
+    value.cleanupDirectories.every(isCleanupDirectoryIdentity) &&
+    (value.signal === "SIGKILL" || value.signal === "SIGCONT");
+const applyCommand = (command) => {
+    const operation = command[0];
+    let value;
+    try {
+        value = JSON.parse(command.slice(1));
+    }
+    catch {
+        return;
+    }
+    if (!isGuardJob(value)) {
+        return;
+    }
+    if (operation === "+") {
+        state.jobs.set(value.marker, value);
+    }
+    else if (operation === "-") {
+        state.jobs.delete(value.marker);
+    }
+};
+const receiveCommands = (chunk) => {
+    state.bufferedCommands += chunk.toString();
+    const commands = state.bufferedCommands.split("\n");
+    state.bufferedCommands = commands.pop() ?? "";
+    for (const command of commands) {
+        applyCommand(command);
+    }
+};
+const killJobs = () => {
+    for (const job of state.jobs.values()) {
+        killProcessGroup(job.processGroup, job.signal);
+        if (job.signal === "SIGKILL") {
+            killMarkedProcesses(job.marker);
+        }
+    }
+};
+const removeCleanupDirectories = () => {
+    const cleanupDirectories = new Map();
+    for (const job of state.jobs.values()) {
+        for (const identity of job.cleanupDirectories) {
+            cleanupDirectories.set(`${identity.device}:${identity.inode}`, identity);
+        }
+    }
+    for (const identity of cleanupDirectories.values()) {
+        removeCleanupDirectory(identity);
+    }
+};
 const sweep = () => {
+    if (state.isSweeping) {
+        return;
+    }
+    state.isSweeping = true;
+    applyCommand(state.bufferedCommands);
+    killJobs();
+    removeCleanupDirectories();
     if (GUARD_PREFIX.length > 0) {
-        killMarkedProcesses(GUARD_PREFIX);
+        killMarkedProcessRun(GUARD_PREFIX);
     }
     process.exit(0);
 };
 process.stdin.resume();
+process.stdin.on("data", receiveCommands);
 process.stdin.on("end", sweep);
 process.stdin.on("error", sweep);
 for (const signal of WATCHED_SIGNALS) {

package/dist/process/process-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"process-guard.js","sourceRoot":"","sources":["../../src/process/process-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAqC,CAAC;AAE5F,MAAM,KAAK,GAAG,GAAS,EAAE;IACrB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC,CAAC;AAEF,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AACvB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC/B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAEjC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;IACnC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import { killMarkedProcesses } from \"./kill-marked-processes.ts\";\n\nconst GUARD_PREFIX = process.argv[2] ?? \"\";\nconst WATCHED_SIGNALS = [\"SIGTERM\", \"SIGINT\", \"SIGHUP\"] as const satisfies NodeJS.Signals[];\n\nconst sweep = (): void => {\n    if (GUARD_PREFIX.length > 0) {\n        killMarkedProcesses(GUARD_PREFIX);\n    }\n\n    process.exit(0);\n};\n\nprocess.stdin.resume();\nprocess.stdin.on(\"end\", sweep);\nprocess.stdin.on(\"error\", sweep);\n\nfor (const signal of WATCHED_SIGNALS) {\n    process.on(signal, sweep);\n}\n"]}
+{"version":3,"file":"process-guard.js","sourceRoot":"","sources":["../../src/process/process-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvF,OAAO,EAEH,gBAAgB,EAEhB,sBAAsB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAqC,CAAC;AAQ5F,MAAM,KAAK,GAAmF;IAC1F,gBAAgB,EAAE,EAAE;IACpB,UAAU,EAAE,KAAK;IACjB,IAAI,EAAE,IAAI,GAAG,EAAE;CAClB,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEzE,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAiC,EAAE,CAC7E,QAAQ,CAAC,KAAK,CAAC;IACf,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;IACxC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;IAC1C,KAAK,CAAC,cAAc,GAAG,CAAC;IACxB,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;IACzC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AAExC,MAAM,0BAA0B,GAAG,CAAC,KAAc,EAAqC,EAAE,CACrF,QAAQ,CAAC,KAAK,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;IAC9B,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;IAChC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;IAC/B,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;AAErC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAqB,EAAE,CACrD,QAAQ,CAAC,KAAK,CAAC;IACf,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;IAChC,sBAAsB,CAAC,KAAK,CAAC,YAAY,CAAC;IAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,0BAA0B,CAAC;IAC1D,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;AAE/D,MAAM,YAAY,GAAG,CAAC,OAAe,EAAQ,EAAE;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAc,CAAC;IAEnB,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO;IACX,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;IACX,CAAC;IAED,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;SAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAsB,EAAQ,EAAE;IACrD,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,KAAK,CAAC,gBAAgB,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAE9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC7B,YAAY,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,GAAS,EAAE;IACxB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAE/C,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,GAAS,EAAE;IACxC,MAAM,kBAAkB,GAA0C,IAAI,GAAG,EAAE,CAAC;IAE5E,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAC5C,kBAAkB,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC7E,CAAC;IACL,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,GAAS,EAAE;IACrB,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACnB,OAAO;IACX,CAAC;IAED,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrC,QAAQ,EAAE,CAAC;IACX,wBAAwB,EAAE,CAAC;IAE3B,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC,CAAC;AAEF,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AACvB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAC1C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC/B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAEjC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;IACnC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import { killMarkedProcesses, killMarkedProcessRun } from \"./kill-marked-processes.ts\";\nimport {\n    type CleanupDirectoryIdentity,\n    killProcessGroup,\n    type ProcessGroupIdentity,\n    removeCleanupDirectory,\n} from \"./kill-process-group.ts\";\n\nconst GUARD_PREFIX = process.argv[2] ?? \"\";\nconst WATCHED_SIGNALS = [\"SIGTERM\", \"SIGINT\", \"SIGHUP\"] as const satisfies NodeJS.Signals[];\ntype GuardJob = {\n    marker: string;\n    processGroup: ProcessGroupIdentity;\n    cleanupDirectories: CleanupDirectoryIdentity[];\n    signal: NodeJS.Signals;\n};\n\nconst state: { bufferedCommands: string; isSweeping: boolean; jobs: Map<string, GuardJob> } = {\n    bufferedCommands: \"\",\n    isSweeping: false,\n    jobs: new Map(),\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n    typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst isProcessGroupIdentity = (value: unknown): value is ProcessGroupIdentity =>\n    isRecord(value) &&\n    typeof value.processGroupId === \"number\" &&\n    Number.isSafeInteger(value.processGroupId) &&\n    value.processGroupId > 1 &&\n    typeof value.leaderStartTime === \"string\" &&\n    /^\\d+$/.test(value.leaderStartTime);\n\nconst isCleanupDirectoryIdentity = (value: unknown): value is CleanupDirectoryIdentity =>\n    isRecord(value) &&\n    typeof value.path === \"string\" &&\n    typeof value.device === \"string\" &&\n    typeof value.inode === \"string\" &&\n    typeof value.userId === \"string\";\n\nconst isGuardJob = (value: unknown): value is GuardJob =>\n    isRecord(value) &&\n    typeof value.marker === \"string\" &&\n    isProcessGroupIdentity(value.processGroup) &&\n    Array.isArray(value.cleanupDirectories) &&\n    value.cleanupDirectories.every(isCleanupDirectoryIdentity) &&\n    (value.signal === \"SIGKILL\" || value.signal === \"SIGCONT\");\n\nconst applyCommand = (command: string): void => {\n    const operation = command[0];\n    let value: unknown;\n\n    try {\n        value = JSON.parse(command.slice(1));\n    } catch {\n        return;\n    }\n\n    if (!isGuardJob(value)) {\n        return;\n    }\n\n    if (operation === \"+\") {\n        state.jobs.set(value.marker, value);\n    } else if (operation === \"-\") {\n        state.jobs.delete(value.marker);\n    }\n};\n\nconst receiveCommands = (chunk: Buffer | string): void => {\n    state.bufferedCommands += chunk.toString();\n    const commands = state.bufferedCommands.split(\"\\n\");\n    state.bufferedCommands = commands.pop() ?? \"\";\n\n    for (const command of commands) {\n        applyCommand(command);\n    }\n};\n\nconst killJobs = (): void => {\n    for (const job of state.jobs.values()) {\n        killProcessGroup(job.processGroup, job.signal);\n\n        if (job.signal === \"SIGKILL\") {\n            killMarkedProcesses(job.marker);\n        }\n    }\n};\n\nconst removeCleanupDirectories = (): void => {\n    const cleanupDirectories: Map<string, CleanupDirectoryIdentity> = new Map();\n\n    for (const job of state.jobs.values()) {\n        for (const identity of job.cleanupDirectories) {\n            cleanupDirectories.set(`${identity.device}:${identity.inode}`, identity);\n        }\n    }\n\n    for (const identity of cleanupDirectories.values()) {\n        removeCleanupDirectory(identity);\n    }\n};\n\nconst sweep = (): void => {\n    if (state.isSweeping) {\n        return;\n    }\n\n    state.isSweeping = true;\n    applyCommand(state.bufferedCommands);\n    killJobs();\n    removeCleanupDirectories();\n\n    if (GUARD_PREFIX.length > 0) {\n        killMarkedProcessRun(GUARD_PREFIX);\n    }\n    process.exit(0);\n};\n\nprocess.stdin.resume();\nprocess.stdin.on(\"data\", receiveCommands);\nprocess.stdin.on(\"end\", sweep);\nprocess.stdin.on(\"error\", sweep);\n\nfor (const signal of WATCHED_SIGNALS) {\n    process.on(signal, sweep);\n}\n"]}

package/dist/process/spawn-with-parent-death-signal.d.ts

@@ -2,7 +2,12 @@ import { type ChildProcess, type StdioOptions } from "node:child_process";
 type ParentDeathSpawnOptions = {
     stdio?: StdioOptions;
     env?: NodeJS.ProcessEnv;
+    cleanupDirectories?: string[];
+};
+type ParentDeathSupervisorOptions = Omit<ParentDeathSpawnOptions, "cleanupDirectories"> & {
+    cleanupDirectory: string;
 };
 declare function spawnWithParentDeathSignal(command: string, args: string[], options?: ParentDeathSpawnOptions): ChildProcess;
-export { spawnWithParentDeathSignal };
+declare const spawnWithParentDeathSupervisor: (command: string, args: string[], options: ParentDeathSupervisorOptions) => ChildProcess;
+export { spawnWithParentDeathSignal, spawnWithParentDeathSupervisor };
 //# sourceMappingURL=spawn-with-parent-death-signal.d.ts.map

package/dist/process/spawn-with-parent-death-signal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spawn-with-parent-death-signal.d.ts","sourceRoot":"","sources":["../../src/process/spawn-with-parent-death-signal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAQjF,KAAK,uBAAuB,GAAG;IAC3B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAC3B,CAAC;AAuCF,iBAAS,0BAA0B,CAC/B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,uBAA4B,GACtC,YAAY,CAiBd;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC"}
+{"version":3,"file":"spawn-with-parent-death-signal.d.ts","sourceRoot":"","sources":["../../src/process/spawn-with-parent-death-signal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAiBjF,KAAK,uBAAuB,GAAG;IAC3B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC,CAAC;AAEF,KAAK,4BAA4B,GAAG,IAAI,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,GAAG;IACtF,gBAAgB,EAAE,MAAM,CAAC;CAC5B,CAAC;AA0MF,iBAAS,0BAA0B,CAC/B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,uBAA4B,GACtC,YAAY,CAOd;AAED,QAAA,MAAM,8BAA8B,GAChC,SAAS,MAAM,EACf,MAAM,MAAM,EAAE,EACd,SAAS,4BAA4B,KACtC,YAkCF,CAAC;AAEF,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,CAAC"}

package/dist/process/spawn-with-parent-death-signal.js

@@ -1,15 +1,60 @@
 import { spawn } from "node:child_process";
 import { randomBytes } from "node:crypto";
+import { readFileSync } from "node:fs";
 import { Socket } from "node:net";
 import { dirname, extname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { killMarkedProcesses, PROCESS_MARKER } from "./kill-marked-processes.js";
+import { cleanupDirectoryIdentity, killProcessGroup, processGroupIdentity, removeCleanupDirectory, } from "./kill-process-group.js";
 import { resolveExecutable } from "./resolve-executable.js";
 const MODULE_PATH = fileURLToPath(import.meta.url);
 const GUARD_PATH = join(dirname(MODULE_PATH), `process-guard${extname(MODULE_PATH)}`);
 const RUN_ID = randomBytes(8).toString("hex");
 const RUN_PREFIX = `${PROCESS_MARKER}=${RUN_ID}/`;
-const guard = {};
+const guard = { jobs: new Map() };
+const SUPERVISOR_NAME = "gtkx-process-supervisor";
+const SUPERVISOR_SCRIPT = [
+    "runtime=$1",
+    "identity=$2",
+    "expected_parent=$3",
+    "expected_parent_start=$4",
+    "stat_command=$5",
+    "rm_command=$6",
+    "shift 6",
+    "matches_directory() {",
+    '    [ "$("$stat_command" -c "%d:%i:%u" -- "$runtime" 2>/dev/null)" = "$identity" ]',
+    "}",
+    "matches_parent() {",
+    "    parent_stat=",
+    '    IFS= read -r parent_stat < "/proc/$expected_parent/stat" || return 1',
+    "    parent_tail=${parent_stat##*) }",
+    "    set -- $parent_tail",
+    '    [ "${20}" = "$expected_parent_start" ]',
+    "}",
+    "terminate() {",
+    '    trap "" CONT TERM INT HUP',
+    '    if matches_directory; then "$rm_command" -rf -- "$runtime"; fi',
+    '    kill -KILL "-$$" 2>/dev/null',
+    "    exit 1",
+    "}",
+    "trap terminate CONT TERM INT HUP",
+    "if ! matches_parent; then terminate; fi",
+    '"$@" &',
+    "child=$!",
+    'wait "$child"',
+    "exit $?",
+].join("\n");
+const processStartTime = (pid) => {
+    const stat = readFileSync(`/proc/${String(pid)}/stat`, "utf8");
+    const start = stat.slice(stat.lastIndexOf(") ") + 2).split(" ", 20)[19];
+    if (start === undefined) {
+        throw new Error(`Failed to identify process ${String(pid)}`);
+    }
+    return start;
+};
+const writeGuardCommand = (child, operation, job) => {
+    child.stdin?.write(`${operation}${JSON.stringify(job)}\n`);
+};
 const releaseGuard = (child) => {
     child.unref();
     const { stdin } = child;
@@ -26,25 +71,112 @@ const startGuard = () => {
         stdio: ["pipe", "ignore", "ignore"],
     });
     child.on("error", () => {
-        guard.child = undefined;
+        if (guard.child === child) {
+            guard.child = undefined;
+        }
+    });
+    child.on("exit", () => {
+        if (guard.child === child) {
+            guard.child = undefined;
+        }
+    });
+    child.stdin.on("error", () => {
+        if (guard.child === child) {
+            guard.child = undefined;
+        }
     });
     guard.child = child;
+    for (const job of guard.jobs.values()) {
+        writeGuardCommand(child, "+", job);
+    }
     releaseGuard(child);
 };
-function spawnWithParentDeathSignal(command, args, options = {}) {
+const registerJob = (job) => {
+    guard.jobs.set(job.marker, job);
+    if (guard.child) {
+        writeGuardCommand(guard.child, "+", job);
+    }
+};
+const unregisterJob = (job) => {
+    guard.jobs.delete(job.marker);
+    if (guard.child) {
+        writeGuardCommand(guard.child, "-", job);
+    }
+};
+const rollbackSpawn = ({ child, marker, processGroup, cleanupDirectories = [] }) => {
+    if (processGroup === undefined) {
+        child.kill("SIGKILL");
+    }
+    else {
+        killProcessGroup(processGroup);
+    }
+    killMarkedProcesses(marker);
+    for (const identity of cleanupDirectories) {
+        removeCleanupDirectory(identity);
+    }
+};
+const captureCleanupDirectories = (command, paths) => {
+    const identities = paths.map((path) => cleanupDirectoryIdentity(path));
+    if (identities.includes(undefined)) {
+        throw new Error(`Failed to identify a cleanup directory for ${command}`);
+    }
+    return identities.filter((identity) => identity !== undefined);
+};
+const spawnGuarded = (command, options, signal, launchArguments) => {
     const executable = resolveExecutable(command);
     const setpriv = resolveExecutable("setpriv");
     const jobValue = `${RUN_ID}/${randomBytes(4).toString("hex")}`;
+    const marker = `${PROCESS_MARKER}=${jobValue}`;
+    const cleanupDirectories = captureCleanupDirectories(command, options.cleanupDirectories ?? []);
     startGuard();
-    const child = spawn(setpriv, ["--pdeathsig", "SIGKILL", executable, ...args], {
+    const child = spawn(setpriv, launchArguments(executable, cleanupDirectories), {
         detached: true,
         stdio: options.stdio ?? "ignore",
         env: { ...(options.env ?? process.env), [PROCESS_MARKER]: jobValue },
     });
+    const processGroupId = child.pid;
+    const group = processGroupId === undefined ? undefined : processGroupIdentity(processGroupId);
+    if (group === undefined) {
+        rollbackSpawn({ child, marker, cleanupDirectories });
+        throw new Error(`Failed to identify process group for ${command}`);
+    }
+    const job = { marker, processGroup: group, cleanupDirectories, signal };
+    registerJob(job);
     child.on("exit", () => {
-        killMarkedProcesses(`${PROCESS_MARKER}=${jobValue}`);
+        killMarkedProcesses(job.marker);
+        unregisterJob(job);
     });
     return child;
+};
+function spawnWithParentDeathSignal(command, args, options = {}) {
+    return spawnGuarded(command, options, "SIGKILL", (executable) => ["--pdeathsig", "SIGKILL", executable, ...args]);
 }
-export { spawnWithParentDeathSignal };
+const spawnWithParentDeathSupervisor = (command, args, options) => {
+    const shell = resolveExecutable("sh");
+    const stat = resolveExecutable("stat");
+    const rm = resolveExecutable("rm");
+    return spawnGuarded(command, { ...options, cleanupDirectories: [options.cleanupDirectory] }, "SIGCONT", (executable, cleanupDirectories) => {
+        const identity = cleanupDirectories[0];
+        if (identity === undefined) {
+            throw new Error(`Failed to identify a cleanup directory for ${command}`);
+        }
+        return [
+            "--pdeathsig",
+            "SIGCONT",
+            shell,
+            "-c",
+            SUPERVISOR_SCRIPT,
+            SUPERVISOR_NAME,
+            identity.path,
+            `${identity.device}:${identity.inode}:${identity.userId}`,
+            String(process.pid),
+            processStartTime(process.pid),
+            stat,
+            rm,
+            executable,
+            ...args,
+        ];
+    });
+};
+export { spawnWithParentDeathSignal, spawnWithParentDeathSupervisor };
 //# sourceMappingURL=spawn-with-parent-death-signal.js.map

package/dist/process/spawn-with-parent-death-signal.js.map

@@ -1 +1 @@
-{"version":3,"file":"spawn-with-parent-death-signal.js","sourceRoot":"","sources":["../../src/process/spawn-with-parent-death-signal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAW5D,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,gBAAgB,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACtF,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9C,MAAM,UAAU,GAAG,GAAG,cAAc,IAAI,MAAM,GAAG,CAAC;AAClD,MAAM,KAAK,GAAe,EAAE,CAAC;AAE7B,MAAM,YAAY,GAAG,CAAC,KAAmB,EAAQ,EAAE;IAC/C,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAExB,IAAI,KAAK,YAAY,MAAM,EAAE,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,GAAS,EAAE;IAC1B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO;IACX,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE;QAC5D,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;KACtC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,YAAY,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC,CAAC;AAEF,SAAS,0BAA0B,CAC/B,OAAe,EACf,IAAc,EACd,UAAmC,EAAE;IAErC,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/D,UAAU,EAAE,CAAC;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE;QAC1E,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;QAChC,GAAG,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE;KACvE,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QAClB,mBAAmB,CAAC,GAAG,cAAc,IAAI,QAAQ,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC","sourcesContent":["import { type ChildProcess, spawn, type StdioOptions } from \"node:child_process\";\nimport { randomBytes } from \"node:crypto\";\nimport { Socket } from \"node:net\";\nimport { dirname, extname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { killMarkedProcesses, PROCESS_MARKER } from \"./kill-marked-processes.ts\";\nimport { resolveExecutable } from \"./resolve-executable.ts\";\n\ntype ParentDeathSpawnOptions = {\n    stdio?: StdioOptions;\n    env?: NodeJS.ProcessEnv;\n};\n\ntype GuardState = {\n    child?: ChildProcess | undefined;\n};\n\nconst MODULE_PATH = fileURLToPath(import.meta.url);\nconst GUARD_PATH = join(dirname(MODULE_PATH), `process-guard${extname(MODULE_PATH)}`);\nconst RUN_ID = randomBytes(8).toString(\"hex\");\nconst RUN_PREFIX = `${PROCESS_MARKER}=${RUN_ID}/`;\nconst guard: GuardState = {};\n\nconst releaseGuard = (child: ChildProcess): void => {\n    child.unref();\n    const { stdin } = child;\n\n    if (stdin instanceof Socket) {\n        stdin.unref();\n    }\n};\n\nconst startGuard = (): void => {\n    if (guard.child) {\n        return;\n    }\n\n    const child = spawn(process.execPath, [GUARD_PATH, RUN_PREFIX], {\n        detached: true,\n        stdio: [\"pipe\", \"ignore\", \"ignore\"],\n    });\n\n    child.on(\"error\", () => {\n        guard.child = undefined;\n    });\n\n    guard.child = child;\n    releaseGuard(child);\n};\n\nfunction spawnWithParentDeathSignal(\n    command: string,\n    args: string[],\n    options: ParentDeathSpawnOptions = {},\n): ChildProcess {\n    const executable = resolveExecutable(command);\n    const setpriv = resolveExecutable(\"setpriv\");\n    const jobValue = `${RUN_ID}/${randomBytes(4).toString(\"hex\")}`;\n    startGuard();\n\n    const child = spawn(setpriv, [\"--pdeathsig\", \"SIGKILL\", executable, ...args], {\n        detached: true,\n        stdio: options.stdio ?? \"ignore\",\n        env: { ...(options.env ?? process.env), [PROCESS_MARKER]: jobValue },\n    });\n\n    child.on(\"exit\", () => {\n        killMarkedProcesses(`${PROCESS_MARKER}=${jobValue}`);\n    });\n\n    return child;\n}\n\nexport { spawnWithParentDeathSignal };\n"]}
+{"version":3,"file":"spawn-with-parent-death-signal.js","sourceRoot":"","sources":["../../src/process/spawn-with-parent-death-signal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAEH,wBAAwB,EACxB,gBAAgB,EAEhB,oBAAoB,EACpB,sBAAsB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAmC5D,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,gBAAgB,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACtF,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9C,MAAM,UAAU,GAAG,GAAG,cAAc,IAAI,MAAM,GAAG,CAAC;AAClD,MAAM,KAAK,GAAe,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAC9C,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAClD,MAAM,iBAAiB,GAAG;IACtB,YAAY;IACZ,aAAa;IACb,oBAAoB;IACpB,0BAA0B;IAC1B,iBAAiB;IACjB,eAAe;IACf,SAAS;IACT,uBAAuB;IACvB,oFAAoF;IACpF,GAAG;IACH,oBAAoB;IACpB,kBAAkB;IAClB,0EAA0E;IAC1E,qCAAqC;IACrC,yBAAyB;IACzB,4CAA4C;IAC5C,GAAG;IACH,eAAe;IACf,+BAA+B;IAC/B,oEAAoE;IACpE,kCAAkC;IAClC,YAAY;IACZ,GAAG;IACH,kCAAkC;IAClC,yCAAyC;IACzC,QAAQ;IACR,UAAU;IACV,eAAe;IACf,SAAS;CACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAU,EAAE;IAC7C,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAExE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAmB,EAAE,SAAoB,EAAE,GAAa,EAAQ,EAAE;IACzF,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAmB,EAAQ,EAAE;IAC/C,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAExB,IAAI,KAAK,YAAY,MAAM,EAAE,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,GAAS,EAAE;IAC1B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO;IACX,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE;QAC5D,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;KACtC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QAC5B,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QAClB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QAC5B,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACzB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QAC5B,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,YAAY,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,GAAa,EAAQ,EAAE;IACxC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEhC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,GAAa,EAAQ,EAAE;IAC1C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE9B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,GAAG,EAAE,EAAiB,EAAQ,EAAE;IACpG,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;SAAM,CAAC;QACJ,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAED,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAE5B,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QACxC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,OAAe,EAAE,KAAe,EAA8B,EAAE;IAC/F,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvE,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAwC,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;AACzG,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACjB,OAAe,EACf,OAAgC,EAChC,MAAmB,EACnB,eAAgC,EACpB,EAAE;IACd,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,GAAG,cAAc,IAAI,QAAQ,EAAE,CAAC;IAC/C,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAChG,UAAU,EAAE,CAAC;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE;QAC1E,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;QAChC,GAAG,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE;KACvE,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC;IACjC,MAAM,KAAK,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;IAE9F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,GAAG,GAAa,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAClF,WAAW,CAAC,GAAG,CAAC,CAAC;IAEjB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QAClB,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,aAAa,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAEF,SAAS,0BAA0B,CAC/B,OAAe,EACf,IAAc,EACd,UAAmC,EAAE;IAErC,OAAO,YAAY,CACf,OAAO,EACP,OAAO,EACP,SAAS,EACT,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,CAClE,CAAC;AACN,CAAC;AAED,MAAM,8BAA8B,GAAG,CACnC,OAAe,EACf,IAAc,EACd,OAAqC,EACzB,EAAE;IACd,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAEnC,OAAO,YAAY,CACf,OAAO,EACP,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAC9D,SAAS,EACT,CAAC,UAAU,EAAE,kBAAkB,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAEvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO;YACH,aAAa;YACb,SAAS;YACT,KAAK;YACL,IAAI;YACJ,iBAAiB;YACjB,eAAe;YACf,QAAQ,CAAC,IAAI;YACb,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE;YACzD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YACnB,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;YAC7B,IAAI;YACJ,EAAE;YACF,UAAU;YACV,GAAG,IAAI;SACV,CAAC;IACN,CAAC,CACJ,CAAC;AACN,CAAC,CAAC;AAEF,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,CAAC","sourcesContent":["import { type ChildProcess, spawn, type StdioOptions } from \"node:child_process\";\nimport { randomBytes } from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\nimport { Socket } from \"node:net\";\nimport { dirname, extname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { killMarkedProcesses, PROCESS_MARKER } from \"./kill-marked-processes.ts\";\nimport {\n    type CleanupDirectoryIdentity,\n    cleanupDirectoryIdentity,\n    killProcessGroup,\n    type ProcessGroupIdentity,\n    processGroupIdentity,\n    removeCleanupDirectory,\n} from \"./kill-process-group.ts\";\nimport { resolveExecutable } from \"./resolve-executable.ts\";\n\ntype ParentDeathSpawnOptions = {\n    stdio?: StdioOptions;\n    env?: NodeJS.ProcessEnv;\n    cleanupDirectories?: string[];\n};\n\ntype ParentDeathSupervisorOptions = Omit<ParentDeathSpawnOptions, \"cleanupDirectories\"> & {\n    cleanupDirectory: string;\n};\n\ntype GuardSignal = \"SIGKILL\" | \"SIGCONT\";\n\ntype LaunchArguments = (executable: string, cleanupDirectories: CleanupDirectoryIdentity[]) => string[];\n\ntype GuardJob = {\n    marker: string;\n    processGroup: ProcessGroupIdentity;\n    cleanupDirectories: CleanupDirectoryIdentity[];\n    signal: GuardSignal;\n};\n\ntype GuardState = {\n    child?: ChildProcess | undefined;\n    jobs: Map<string, GuardJob>;\n};\n\ntype SpawnRollback = {\n    child: ChildProcess;\n    marker: string;\n    processGroup?: ProcessGroupIdentity;\n    cleanupDirectories?: CleanupDirectoryIdentity[];\n};\n\nconst MODULE_PATH = fileURLToPath(import.meta.url);\nconst GUARD_PATH = join(dirname(MODULE_PATH), `process-guard${extname(MODULE_PATH)}`);\nconst RUN_ID = randomBytes(8).toString(\"hex\");\nconst RUN_PREFIX = `${PROCESS_MARKER}=${RUN_ID}/`;\nconst guard: GuardState = { jobs: new Map() };\nconst SUPERVISOR_NAME = \"gtkx-process-supervisor\";\nconst SUPERVISOR_SCRIPT = [\n    \"runtime=$1\",\n    \"identity=$2\",\n    \"expected_parent=$3\",\n    \"expected_parent_start=$4\",\n    \"stat_command=$5\",\n    \"rm_command=$6\",\n    \"shift 6\",\n    \"matches_directory() {\",\n    '    [ \"$(\"$stat_command\" -c \"%d:%i:%u\" -- \"$runtime\" 2>/dev/null)\" = \"$identity\" ]',\n    \"}\",\n    \"matches_parent() {\",\n    \"    parent_stat=\",\n    '    IFS= read -r parent_stat < \"/proc/$expected_parent/stat\" || return 1',\n    \"    parent_tail=${parent_stat##*) }\",\n    \"    set -- $parent_tail\",\n    '    [ \"${20}\" = \"$expected_parent_start\" ]',\n    \"}\",\n    \"terminate() {\",\n    '    trap \"\" CONT TERM INT HUP',\n    '    if matches_directory; then \"$rm_command\" -rf -- \"$runtime\"; fi',\n    '    kill -KILL \"-$$\" 2>/dev/null',\n    \"    exit 1\",\n    \"}\",\n    \"trap terminate CONT TERM INT HUP\",\n    \"if ! matches_parent; then terminate; fi\",\n    '\"$@\" &',\n    \"child=$!\",\n    'wait \"$child\"',\n    \"exit $?\",\n].join(\"\\n\");\n\nconst processStartTime = (pid: number): string => {\n    const stat = readFileSync(`/proc/${String(pid)}/stat`, \"utf8\");\n    const start = stat.slice(stat.lastIndexOf(\") \") + 2).split(\" \", 20)[19];\n\n    if (start === undefined) {\n        throw new Error(`Failed to identify process ${String(pid)}`);\n    }\n\n    return start;\n};\n\nconst writeGuardCommand = (child: ChildProcess, operation: \"+\" | \"-\", job: GuardJob): void => {\n    child.stdin?.write(`${operation}${JSON.stringify(job)}\\n`);\n};\n\nconst releaseGuard = (child: ChildProcess): void => {\n    child.unref();\n    const { stdin } = child;\n\n    if (stdin instanceof Socket) {\n        stdin.unref();\n    }\n};\n\nconst startGuard = (): void => {\n    if (guard.child) {\n        return;\n    }\n\n    const child = spawn(process.execPath, [GUARD_PATH, RUN_PREFIX], {\n        detached: true,\n        stdio: [\"pipe\", \"ignore\", \"ignore\"],\n    });\n\n    child.on(\"error\", () => {\n        if (guard.child === child) {\n            guard.child = undefined;\n        }\n    });\n\n    child.on(\"exit\", () => {\n        if (guard.child === child) {\n            guard.child = undefined;\n        }\n    });\n\n    child.stdin.on(\"error\", () => {\n        if (guard.child === child) {\n            guard.child = undefined;\n        }\n    });\n\n    guard.child = child;\n\n    for (const job of guard.jobs.values()) {\n        writeGuardCommand(child, \"+\", job);\n    }\n\n    releaseGuard(child);\n};\n\nconst registerJob = (job: GuardJob): void => {\n    guard.jobs.set(job.marker, job);\n\n    if (guard.child) {\n        writeGuardCommand(guard.child, \"+\", job);\n    }\n};\n\nconst unregisterJob = (job: GuardJob): void => {\n    guard.jobs.delete(job.marker);\n\n    if (guard.child) {\n        writeGuardCommand(guard.child, \"-\", job);\n    }\n};\n\nconst rollbackSpawn = ({ child, marker, processGroup, cleanupDirectories = [] }: SpawnRollback): void => {\n    if (processGroup === undefined) {\n        child.kill(\"SIGKILL\");\n    } else {\n        killProcessGroup(processGroup);\n    }\n\n    killMarkedProcesses(marker);\n\n    for (const identity of cleanupDirectories) {\n        removeCleanupDirectory(identity);\n    }\n};\n\nconst captureCleanupDirectories = (command: string, paths: string[]): CleanupDirectoryIdentity[] => {\n    const identities = paths.map((path) => cleanupDirectoryIdentity(path));\n\n    if (identities.includes(undefined)) {\n        throw new Error(`Failed to identify a cleanup directory for ${command}`);\n    }\n\n    return identities.filter((identity): identity is CleanupDirectoryIdentity => identity !== undefined);\n};\n\nconst spawnGuarded = (\n    command: string,\n    options: ParentDeathSpawnOptions,\n    signal: GuardSignal,\n    launchArguments: LaunchArguments,\n): ChildProcess => {\n    const executable = resolveExecutable(command);\n    const setpriv = resolveExecutable(\"setpriv\");\n    const jobValue = `${RUN_ID}/${randomBytes(4).toString(\"hex\")}`;\n    const marker = `${PROCESS_MARKER}=${jobValue}`;\n    const cleanupDirectories = captureCleanupDirectories(command, options.cleanupDirectories ?? []);\n    startGuard();\n\n    const child = spawn(setpriv, launchArguments(executable, cleanupDirectories), {\n        detached: true,\n        stdio: options.stdio ?? \"ignore\",\n        env: { ...(options.env ?? process.env), [PROCESS_MARKER]: jobValue },\n    });\n\n    const processGroupId = child.pid;\n    const group = processGroupId === undefined ? undefined : processGroupIdentity(processGroupId);\n\n    if (group === undefined) {\n        rollbackSpawn({ child, marker, cleanupDirectories });\n        throw new Error(`Failed to identify process group for ${command}`);\n    }\n\n    const job: GuardJob = { marker, processGroup: group, cleanupDirectories, signal };\n    registerJob(job);\n\n    child.on(\"exit\", () => {\n        killMarkedProcesses(job.marker);\n        unregisterJob(job);\n    });\n\n    return child;\n};\n\nfunction spawnWithParentDeathSignal(\n    command: string,\n    args: string[],\n    options: ParentDeathSpawnOptions = {},\n): ChildProcess {\n    return spawnGuarded(\n        command,\n        options,\n        \"SIGKILL\",\n        (executable) => [\"--pdeathsig\", \"SIGKILL\", executable, ...args],\n    );\n}\n\nconst spawnWithParentDeathSupervisor = (\n    command: string,\n    args: string[],\n    options: ParentDeathSupervisorOptions,\n): ChildProcess => {\n    const shell = resolveExecutable(\"sh\");\n    const stat = resolveExecutable(\"stat\");\n    const rm = resolveExecutable(\"rm\");\n\n    return spawnGuarded(\n        command,\n        { ...options, cleanupDirectories: [options.cleanupDirectory] },\n        \"SIGCONT\",\n        (executable, cleanupDirectories) => {\n            const identity = cleanupDirectories[0];\n\n            if (identity === undefined) {\n                throw new Error(`Failed to identify a cleanup directory for ${command}`);\n            }\n\n            return [\n                \"--pdeathsig\",\n                \"SIGCONT\",\n                shell,\n                \"-c\",\n                SUPERVISOR_SCRIPT,\n                SUPERVISOR_NAME,\n                identity.path,\n                `${identity.device}:${identity.inode}:${identity.userId}`,\n                String(process.pid),\n                processStartTime(process.pid),\n                stat,\n                rm,\n                executable,\n                ...args,\n            ];\n        },\n    );\n};\n\nexport { spawnWithParentDeathSignal, spawnWithParentDeathSupervisor };\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gtkx/utils",
-  "version": "2.0.0-beta.1",
+  "version": "2.0.0-beta.3",
   "description": "Shared utilities for the GTK toolchain: logging, errors, strings.",
   "keywords": [
     "gtkx",

package/src/process/index.ts

@@ -1,4 +1,12 @@
 export { exitCodeForSignal } from "./exit-code-for-signal.ts";
 export { installGracefulShutdown } from "./install-graceful-shutdown.ts";
+export {
+    killProcessGroup,
+    type ProcessGroupIdentity,
+    processGroupIdentity,
+} from "./kill-process-group.ts";
 export { resolveExecutable, tryResolveExecutable } from "./resolve-executable.ts";
-export { spawnWithParentDeathSignal } from "./spawn-with-parent-death-signal.ts";
+export {
+    spawnWithParentDeathSignal,
+    spawnWithParentDeathSupervisor,
+} from "./spawn-with-parent-death-signal.ts";

package/src/process/kill-marked-processes.ts

@@ -1,44 +1,93 @@
 import { readdirSync, readFileSync } from "node:fs";
 
+type ProcessIdentity = {
+    pid: number;
+    sessionId: number;
+    startTime: string;
+};
+
+type MarkerMatcher = (assignment: string) => boolean;
+
 const PROCESS_MARKER = "GTKX_PROCESS_GUARD";
 const MAX_KILL_PASSES = 8;
+const JOB_ID_PATTERN = /^[0-9a-f]{8}$/;
 
-const isMarked = (pid: number, prefix: string): boolean => {
+const processIdentity = (pid: number): ProcessIdentity | undefined => {
+    try {
+        const stat = readFileSync(`/proc/${String(pid)}/stat`, "utf8");
+        const fields = stat.slice(stat.lastIndexOf(") ") + 2).split(" ");
+        const sessionId = Number(fields[3]);
+        const startTime = fields[19];
+
+        return startTime !== undefined && Number.isSafeInteger(sessionId)
+            ? { pid, sessionId, startTime }
+            : undefined;
+    } catch {
+        return undefined;
+    }
+};
+
+const isMarked = (pid: number, isMatch: MarkerMatcher): boolean => {
     try {
         return readFileSync(`/proc/${String(pid)}/environ`, "utf8")
             .split("\0")
-            .some((assignment) => assignment.startsWith(prefix));
+            .some((assignment) => isMatch(assignment));
     } catch {
         return false;
     }
 };
 
-const markedPids = (prefix: string): number[] =>
+const markedProcesses = (isMatch: MarkerMatcher): ProcessIdentity[] =>
     readdirSync("/proc")
         .map(Number)
         .filter((pid) => Number.isSafeInteger(pid) && pid > 1 && pid !== process.pid)
-        .filter((pid) => isMarked(pid, prefix));
+        .filter((pid) => isMarked(pid, isMatch))
+        .map((pid) => processIdentity(pid))
+        .filter((identity): identity is ProcessIdentity => identity !== undefined);
+
+const killProcess = (identity: ProcessIdentity, isMatch: MarkerMatcher): void => {
+    if (!isMarked(identity.pid, isMatch)) {
+        return;
+    }
+
+    const current = processIdentity(identity.pid);
+
+    if (
+        current?.sessionId !== identity.sessionId ||
+        current.startTime !== identity.startTime
+    ) {
+        return;
+    }
 
-const killPid = (pid: number): void => {
     try {
-        process.kill(pid, "SIGKILL");
+        process.kill(identity.pid, "SIGKILL");
     } catch {
         return;
     }
 };
 
-function killMarkedProcesses(prefix: string): void {
+const killMatchingProcesses = (isMatch: MarkerMatcher): void => {
     for (let pass = 0; pass < MAX_KILL_PASSES; pass += 1) {
-        const pids = markedPids(prefix);
+        const processes = markedProcesses(isMatch);
 
-        if (pids.length === 0) {
+        if (processes.length === 0) {
             return;
         }
 
-        for (const pid of pids) {
-            killPid(pid);
+        for (const identity of processes) {
+            killProcess(identity, isMatch);
         }
     }
-}
+};
+
+const killMarkedProcesses = (marker: string): void => {
+    killMatchingProcesses((assignment) => assignment === marker);
+};
+
+const killMarkedProcessRun = (runPrefix: string): void => {
+    killMatchingProcesses((assignment) =>
+        assignment.startsWith(runPrefix) && JOB_ID_PATTERN.test(assignment.slice(runPrefix.length)),
+    );
+};
 
-export { PROCESS_MARKER, killMarkedProcesses };
+export { PROCESS_MARKER, killMarkedProcessRun, killMarkedProcesses };

package/src/process/kill-process-group.ts

@@ -0,0 +1,104 @@
+import { lstatSync, readFileSync, rmSync } from "node:fs";
+import { isAbsolute, resolve } from "node:path";
+
+type ProcessGroupIdentity = {
+    processGroupId: number;
+    leaderStartTime: string;
+};
+
+type CleanupDirectoryIdentity = {
+    path: string;
+    device: string;
+    inode: string;
+    userId: string;
+};
+
+const isProcessGroupId = (value: number): boolean => Number.isSafeInteger(value) && value > 1;
+
+const processGroupIdentity = (processGroupId: number): ProcessGroupIdentity | undefined => {
+    if (!isProcessGroupId(processGroupId)) {
+        return undefined;
+    }
+
+    try {
+        const stat = readFileSync(`/proc/${String(processGroupId)}/stat`, "utf8");
+        const fields = stat.slice(stat.lastIndexOf(") ") + 2).split(" ");
+        const actualProcessGroupId = Number(fields[2]);
+        const sessionId = Number(fields[3]);
+        const leaderStartTime = fields[19];
+
+        return actualProcessGroupId === processGroupId && sessionId === processGroupId && leaderStartTime !== undefined
+            ? { processGroupId, leaderStartTime }
+            : undefined;
+    } catch {
+        return undefined;
+    }
+};
+
+const isCurrentProcessGroup = (identity: ProcessGroupIdentity): boolean => {
+    const current = processGroupIdentity(identity.processGroupId);
+
+    return current?.leaderStartTime === identity.leaderStartTime;
+};
+
+const killProcessGroup = (identity: ProcessGroupIdentity, signal: NodeJS.Signals = "SIGKILL"): void => {
+    if (!isCurrentProcessGroup(identity)) {
+        return;
+    }
+
+    try {
+        process.kill(-identity.processGroupId, signal);
+    } catch {
+        return;
+    }
+};
+
+const cleanupDirectoryIdentity = (path: string): CleanupDirectoryIdentity | undefined => {
+    const absolutePath = resolve(path);
+
+    if (absolutePath === "/" || !isAbsolute(path)) {
+        return undefined;
+    }
+
+    try {
+        const entry = lstatSync(absolutePath, { bigint: true });
+
+        return entry.isDirectory()
+            ? {
+                    path: absolutePath,
+                    device: entry.dev.toString(),
+                    inode: entry.ino.toString(),
+                    userId: entry.uid.toString(),
+                }
+            : undefined;
+    } catch {
+        return undefined;
+    }
+};
+
+const removeCleanupDirectory = (identity: CleanupDirectoryIdentity): void => {
+    const current = cleanupDirectoryIdentity(identity.path);
+
+    if (
+        current?.device !== identity.device ||
+        current.inode !== identity.inode ||
+        current.userId !== identity.userId
+    ) {
+        return;
+    }
+
+    try {
+        rmSync(identity.path, { recursive: true, force: true });
+    } catch {
+        return;
+    }
+};
+
+export {
+    type CleanupDirectoryIdentity,
+    cleanupDirectoryIdentity,
+    killProcessGroup,
+    type ProcessGroupIdentity,
+    processGroupIdentity,
+    removeCleanupDirectory,
+};

package/src/process/process-guard.ts

@@ -1,17 +1,125 @@
-import { killMarkedProcesses } from "./kill-marked-processes.ts";
+import { killMarkedProcesses, killMarkedProcessRun } from "./kill-marked-processes.ts";
+import {
+    type CleanupDirectoryIdentity,
+    killProcessGroup,
+    type ProcessGroupIdentity,
+    removeCleanupDirectory,
+} from "./kill-process-group.ts";
 
 const GUARD_PREFIX = process.argv[2] ?? "";
 const WATCHED_SIGNALS = ["SIGTERM", "SIGINT", "SIGHUP"] as const satisfies NodeJS.Signals[];
+type GuardJob = {
+    marker: string;
+    processGroup: ProcessGroupIdentity;
+    cleanupDirectories: CleanupDirectoryIdentity[];
+    signal: NodeJS.Signals;
+};
+
+const state: { bufferedCommands: string; isSweeping: boolean; jobs: Map<string, GuardJob> } = {
+    bufferedCommands: "",
+    isSweeping: false,
+    jobs: new Map(),
+};
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+    typeof value === "object" && value !== null && !Array.isArray(value);
+
+const isProcessGroupIdentity = (value: unknown): value is ProcessGroupIdentity =>
+    isRecord(value) &&
+    typeof value.processGroupId === "number" &&
+    Number.isSafeInteger(value.processGroupId) &&
+    value.processGroupId > 1 &&
+    typeof value.leaderStartTime === "string" &&
+    /^\d+$/.test(value.leaderStartTime);
+
+const isCleanupDirectoryIdentity = (value: unknown): value is CleanupDirectoryIdentity =>
+    isRecord(value) &&
+    typeof value.path === "string" &&
+    typeof value.device === "string" &&
+    typeof value.inode === "string" &&
+    typeof value.userId === "string";
+
+const isGuardJob = (value: unknown): value is GuardJob =>
+    isRecord(value) &&
+    typeof value.marker === "string" &&
+    isProcessGroupIdentity(value.processGroup) &&
+    Array.isArray(value.cleanupDirectories) &&
+    value.cleanupDirectories.every(isCleanupDirectoryIdentity) &&
+    (value.signal === "SIGKILL" || value.signal === "SIGCONT");
+
+const applyCommand = (command: string): void => {
+    const operation = command[0];
+    let value: unknown;
+
+    try {
+        value = JSON.parse(command.slice(1));
+    } catch {
+        return;
+    }
+
+    if (!isGuardJob(value)) {
+        return;
+    }
+
+    if (operation === "+") {
+        state.jobs.set(value.marker, value);
+    } else if (operation === "-") {
+        state.jobs.delete(value.marker);
+    }
+};
+
+const receiveCommands = (chunk: Buffer | string): void => {
+    state.bufferedCommands += chunk.toString();
+    const commands = state.bufferedCommands.split("\n");
+    state.bufferedCommands = commands.pop() ?? "";
+
+    for (const command of commands) {
+        applyCommand(command);
+    }
+};
+
+const killJobs = (): void => {
+    for (const job of state.jobs.values()) {
+        killProcessGroup(job.processGroup, job.signal);
+
+        if (job.signal === "SIGKILL") {
+            killMarkedProcesses(job.marker);
+        }
+    }
+};
+
+const removeCleanupDirectories = (): void => {
+    const cleanupDirectories: Map<string, CleanupDirectoryIdentity> = new Map();
+
+    for (const job of state.jobs.values()) {
+        for (const identity of job.cleanupDirectories) {
+            cleanupDirectories.set(`${identity.device}:${identity.inode}`, identity);
+        }
+    }
+
+    for (const identity of cleanupDirectories.values()) {
+        removeCleanupDirectory(identity);
+    }
+};
 
 const sweep = (): void => {
-    if (GUARD_PREFIX.length > 0) {
-        killMarkedProcesses(GUARD_PREFIX);
+    if (state.isSweeping) {
+        return;
     }
 
+    state.isSweeping = true;
+    applyCommand(state.bufferedCommands);
+    killJobs();
+    removeCleanupDirectories();
+
+    if (GUARD_PREFIX.length > 0) {
+        killMarkedProcessRun(GUARD_PREFIX);
+    }
     process.exit(0);
 };
 
 process.stdin.resume();
+process.stdin.on("data", receiveCommands);
 process.stdin.on("end", sweep);
 process.stdin.on("error", sweep);
 

package/src/process/spawn-with-parent-death-signal.ts

@@ -1,25 +1,105 @@
 import { type ChildProcess, spawn, type StdioOptions } from "node:child_process";
 import { randomBytes } from "node:crypto";
+import { readFileSync } from "node:fs";
 import { Socket } from "node:net";
 import { dirname, extname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { killMarkedProcesses, PROCESS_MARKER } from "./kill-marked-processes.ts";
+import {
+    type CleanupDirectoryIdentity,
+    cleanupDirectoryIdentity,
+    killProcessGroup,
+    type ProcessGroupIdentity,
+    processGroupIdentity,
+    removeCleanupDirectory,
+} from "./kill-process-group.ts";
 import { resolveExecutable } from "./resolve-executable.ts";
 
 type ParentDeathSpawnOptions = {
     stdio?: StdioOptions;
     env?: NodeJS.ProcessEnv;
+    cleanupDirectories?: string[];
+};
+
+type ParentDeathSupervisorOptions = Omit<ParentDeathSpawnOptions, "cleanupDirectories"> & {
+    cleanupDirectory: string;
+};
+
+type GuardSignal = "SIGKILL" | "SIGCONT";
+
+type LaunchArguments = (executable: string, cleanupDirectories: CleanupDirectoryIdentity[]) => string[];
+
+type GuardJob = {
+    marker: string;
+    processGroup: ProcessGroupIdentity;
+    cleanupDirectories: CleanupDirectoryIdentity[];
+    signal: GuardSignal;
 };
 
 type GuardState = {
     child?: ChildProcess | undefined;
+    jobs: Map<string, GuardJob>;
+};
+
+type SpawnRollback = {
+    child: ChildProcess;
+    marker: string;
+    processGroup?: ProcessGroupIdentity;
+    cleanupDirectories?: CleanupDirectoryIdentity[];
 };
 
 const MODULE_PATH = fileURLToPath(import.meta.url);
 const GUARD_PATH = join(dirname(MODULE_PATH), `process-guard${extname(MODULE_PATH)}`);
 const RUN_ID = randomBytes(8).toString("hex");
 const RUN_PREFIX = `${PROCESS_MARKER}=${RUN_ID}/`;
-const guard: GuardState = {};
+const guard: GuardState = { jobs: new Map() };
+const SUPERVISOR_NAME = "gtkx-process-supervisor";
+const SUPERVISOR_SCRIPT = [
+    "runtime=$1",
+    "identity=$2",
+    "expected_parent=$3",
+    "expected_parent_start=$4",
+    "stat_command=$5",
+    "rm_command=$6",
+    "shift 6",
+    "matches_directory() {",
+    '    [ "$("$stat_command" -c "%d:%i:%u" -- "$runtime" 2>/dev/null)" = "$identity" ]',
+    "}",
+    "matches_parent() {",
+    "    parent_stat=",
+    '    IFS= read -r parent_stat < "/proc/$expected_parent/stat" || return 1',
+    "    parent_tail=${parent_stat##*) }",
+    "    set -- $parent_tail",
+    '    [ "${20}" = "$expected_parent_start" ]',
+    "}",
+    "terminate() {",
+    '    trap "" CONT TERM INT HUP',
+    '    if matches_directory; then "$rm_command" -rf -- "$runtime"; fi',
+    '    kill -KILL "-$$" 2>/dev/null',
+    "    exit 1",
+    "}",
+    "trap terminate CONT TERM INT HUP",
+    "if ! matches_parent; then terminate; fi",
+    '"$@" &',
+    "child=$!",
+    'wait "$child"',
+    "exit $?",
+].join("\n");
+
+const processStartTime = (pid: number): string => {
+    const stat = readFileSync(`/proc/${String(pid)}/stat`, "utf8");
+    const start = stat.slice(stat.lastIndexOf(") ") + 2).split(" ", 20)[19];
+
+    if (start === undefined) {
+        throw new Error(`Failed to identify process ${String(pid)}`);
+    }
+
+    return start;
+};
+
+const writeGuardCommand = (child: ChildProcess, operation: "+" | "-", job: GuardJob): void => {
+    child.stdin?.write(`${operation}${JSON.stringify(job)}\n`);
+};
 
 const releaseGuard = (child: ChildProcess): void => {
     child.unref();
@@ -41,34 +121,161 @@ const startGuard = (): void => {
     });
 
     child.on("error", () => {
-        guard.child = undefined;
+        if (guard.child === child) {
+            guard.child = undefined;
+        }
+    });
+
+    child.on("exit", () => {
+        if (guard.child === child) {
+            guard.child = undefined;
+        }
+    });
+
+    child.stdin.on("error", () => {
+        if (guard.child === child) {
+            guard.child = undefined;
+        }
     });
 
     guard.child = child;
+
+    for (const job of guard.jobs.values()) {
+        writeGuardCommand(child, "+", job);
+    }
+
     releaseGuard(child);
 };
 
-function spawnWithParentDeathSignal(
+const registerJob = (job: GuardJob): void => {
+    guard.jobs.set(job.marker, job);
+
+    if (guard.child) {
+        writeGuardCommand(guard.child, "+", job);
+    }
+};
+
+const unregisterJob = (job: GuardJob): void => {
+    guard.jobs.delete(job.marker);
+
+    if (guard.child) {
+        writeGuardCommand(guard.child, "-", job);
+    }
+};
+
+const rollbackSpawn = ({ child, marker, processGroup, cleanupDirectories = [] }: SpawnRollback): void => {
+    if (processGroup === undefined) {
+        child.kill("SIGKILL");
+    } else {
+        killProcessGroup(processGroup);
+    }
+
+    killMarkedProcesses(marker);
+
+    for (const identity of cleanupDirectories) {
+        removeCleanupDirectory(identity);
+    }
+};
+
+const captureCleanupDirectories = (command: string, paths: string[]): CleanupDirectoryIdentity[] => {
+    const identities = paths.map((path) => cleanupDirectoryIdentity(path));
+
+    if (identities.includes(undefined)) {
+        throw new Error(`Failed to identify a cleanup directory for ${command}`);
+    }
+
+    return identities.filter((identity): identity is CleanupDirectoryIdentity => identity !== undefined);
+};
+
+const spawnGuarded = (
     command: string,
-    args: string[],
-    options: ParentDeathSpawnOptions = {},
-): ChildProcess {
+    options: ParentDeathSpawnOptions,
+    signal: GuardSignal,
+    launchArguments: LaunchArguments,
+): ChildProcess => {
     const executable = resolveExecutable(command);
     const setpriv = resolveExecutable("setpriv");
     const jobValue = `${RUN_ID}/${randomBytes(4).toString("hex")}`;
+    const marker = `${PROCESS_MARKER}=${jobValue}`;
+    const cleanupDirectories = captureCleanupDirectories(command, options.cleanupDirectories ?? []);
     startGuard();
 
-    const child = spawn(setpriv, ["--pdeathsig", "SIGKILL", executable, ...args], {
+    const child = spawn(setpriv, launchArguments(executable, cleanupDirectories), {
         detached: true,
         stdio: options.stdio ?? "ignore",
         env: { ...(options.env ?? process.env), [PROCESS_MARKER]: jobValue },
     });
 
+    const processGroupId = child.pid;
+    const group = processGroupId === undefined ? undefined : processGroupIdentity(processGroupId);
+
+    if (group === undefined) {
+        rollbackSpawn({ child, marker, cleanupDirectories });
+        throw new Error(`Failed to identify process group for ${command}`);
+    }
+
+    const job: GuardJob = { marker, processGroup: group, cleanupDirectories, signal };
+    registerJob(job);
+
     child.on("exit", () => {
-        killMarkedProcesses(`${PROCESS_MARKER}=${jobValue}`);
+        killMarkedProcesses(job.marker);
+        unregisterJob(job);
     });
 
     return child;
+};
+
+function spawnWithParentDeathSignal(
+    command: string,
+    args: string[],
+    options: ParentDeathSpawnOptions = {},
+): ChildProcess {
+    return spawnGuarded(
+        command,
+        options,
+        "SIGKILL",
+        (executable) => ["--pdeathsig", "SIGKILL", executable, ...args],
+    );
 }
 
-export { spawnWithParentDeathSignal };
+const spawnWithParentDeathSupervisor = (
+    command: string,
+    args: string[],
+    options: ParentDeathSupervisorOptions,
+): ChildProcess => {
+    const shell = resolveExecutable("sh");
+    const stat = resolveExecutable("stat");
+    const rm = resolveExecutable("rm");
+
+    return spawnGuarded(
+        command,
+        { ...options, cleanupDirectories: [options.cleanupDirectory] },
+        "SIGCONT",
+        (executable, cleanupDirectories) => {
+            const identity = cleanupDirectories[0];
+
+            if (identity === undefined) {
+                throw new Error(`Failed to identify a cleanup directory for ${command}`);
+            }
+
+            return [
+                "--pdeathsig",
+                "SIGCONT",
+                shell,
+                "-c",
+                SUPERVISOR_SCRIPT,
+                SUPERVISOR_NAME,
+                identity.path,
+                `${identity.device}:${identity.inode}:${identity.userId}`,
+                String(process.pid),
+                processStartTime(process.pid),
+                stat,
+                rm,
+                executable,
+                ...args,
+            ];
+        },
+    );
+};
+
+export { spawnWithParentDeathSignal, spawnWithParentDeathSupervisor };