@mono-agent/agent-runtime 0.19.1 → 0.20.1

package/src/agent/tools/shared/process-runner.js

@@ -4,6 +4,129 @@ import { spawn } from "node:child_process";
 
 export const DEFAULT_PROCESS_BUFFER_BYTES = 8 * 1024 * 1024;
 const KILL_GRACE_MS = 1_000;
+const KILL_EXIT_CONFIRM_MS = 1_000;
+const PROCESS_GROUP_REATTEST_POLL_MS = 25;
+const PROCESS_GROUP_REATTEST_MAX_GAP_MS = 250;
+const PROCESS_JOB_LAUNCH_PAYLOAD_BYTES = 8 * 1024 * 1024;
+const PROCESS_JOB_STATUS_BYTES = 64 * 1024;
+
+// Background jobs start this command-agnostic group leader first. The actual
+// target crosses fd 3 only after the host has durably recorded the leader's
+// PID, PGID, and incarnation. If the host exits before that release, fd 3
+// closes empty and no target is ever spawned. Raw argv/environment values are
+// therefore absent from both durable state and the gate's process arguments.
+const PROCESS_JOB_LAUNCH_GATE_SOURCE = String.raw`
+"use strict";
+const { spawn } = require("node:child_process");
+const { createReadStream, createWriteStream } = require("node:fs");
+const MAX_PAYLOAD_BYTES = 8 * 1024 * 1024;
+const input = createReadStream(null, { fd: 3, autoClose: true });
+const chunks = [];
+let bytes = 0;
+let finished = false;
+let target;
+let groupTerminationSignal = null;
+
+function finish(value) {
+  if (finished) return;
+  finished = true;
+  const output = createWriteStream(null, { fd: 4, autoClose: true });
+  output.once("error", () => { process.exitCode = 1; });
+  output.end(JSON.stringify(value), () => { process.exitCode = 0; });
+}
+
+function spawnFailure(code) {
+  finish({
+    code: null,
+    signal: null,
+    spawnError: {
+      message: "The gated target process could not be spawned.",
+      ...(typeof code === "string" ? { code } : {}),
+    },
+  });
+}
+
+// Group-wide SIGTERM also reaches this command-agnostic leader. Keep it alive
+// while its direct target settles. Before release there cannot be a target, so
+// close the gate and exit promptly instead of manufacturing a later spawn.
+process.on("SIGTERM", () => {
+  groupTerminationSignal = "SIGTERM";
+  if (target !== undefined) return;
+  input.destroy();
+  finish({ code: null, signal: "SIGTERM", spawnError: null });
+});
+
+function forwardOutput(source, destination) {
+  let destinationOpen = true;
+  const resume = () => source.resume();
+  const discard = () => {
+    destinationOpen = false;
+    source.resume();
+  };
+  destination.on("drain", resume);
+  // If the owning host crashes, its pipe readers disappear. Keep the gate
+  // alive as the attestable group leader and drain target output instead of
+  // crashing on EPIPE and stranding descendants without a leader.
+  destination.on("error", discard);
+  source.on("data", (chunk) => {
+    if (!destinationOpen) return;
+    try {
+      if (!destination.write(chunk)) source.pause();
+    } catch {
+      discard();
+    }
+  });
+}
+
+input.on("data", (chunk) => {
+  bytes += chunk.length;
+  if (bytes > MAX_PAYLOAD_BYTES) {
+    input.destroy();
+    spawnFailure("PROCESS_JOB_LAUNCH_PAYLOAD_TOO_LARGE");
+    return;
+  }
+  chunks.push(chunk);
+});
+input.once("error", (error) => spawnFailure(error && error.code));
+input.once("end", () => {
+  if (finished) return;
+  if (bytes === 0) {
+    process.exitCode = 0;
+    return;
+  }
+  let spec;
+  try {
+    spec = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+  } catch {
+    spawnFailure("PROCESS_JOB_LAUNCH_PAYLOAD_INVALID");
+    return;
+  }
+  if (!spec || typeof spec.command !== "string" || !Array.isArray(spec.args)
+    || spec.args.some((argument) => typeof argument !== "string")
+    || (spec.cwd !== undefined && typeof spec.cwd !== "string")
+    || !spec.env || typeof spec.env !== "object" || Array.isArray(spec.env)) {
+    spawnFailure("PROCESS_JOB_LAUNCH_PAYLOAD_INVALID");
+    return;
+  }
+  try {
+    target = spawn(spec.command, spec.args, {
+      cwd: spec.cwd,
+      detached: false,
+      env: spec.env,
+      stdio: ["ignore", "pipe", "pipe"],
+    });
+  } catch (error) {
+    spawnFailure(error && error.code);
+    return;
+  }
+  forwardOutput(target.stdout, process.stdout);
+  forwardOutput(target.stderr, process.stderr);
+  target.once("error", (error) => spawnFailure(error && error.code));
+  target.once("close", (code, signal) => {
+    finish({ code, signal: signal || groupTerminationSignal, spawnError: null });
+  });
+});
+`;
 
 /**
  * Run one already-prepared executable without adding a shell.
@@ -13,7 +136,7 @@ const KILL_GRACE_MS = 1_000;
  * or exceeds that cap.
  *
  * @param {{command: string, args?: string[], cwd?: string, env?: Record<string, string|undefined>}} commandSpec
- * @param {{timeoutMs?: number, signal?: AbortSignal, maxBufferBytes?: number}} [options]
+ * @param {{timeoutMs?: number, signal?: AbortSignal, maxBufferBytes?: number, input?: string|Buffer}} [options]
  */
 export function runPreparedProcess(
   commandSpec,
@@ -21,19 +144,84 @@ export function runPreparedProcess(
     timeoutMs,
     signal,
     maxBufferBytes = DEFAULT_PROCESS_BUFFER_BYTES,
+    input,
+  } = {},
+) {
+  return startPreparedProcess(commandSpec, {
+    timeoutMs,
+    signal,
+    maxBufferBytes,
+    input,
+  }).completion;
+}
+
+/**
+ * Start one already-prepared executable and expose its process-group handle.
+ *
+ * `waitForProcessGroup` is deliberately opt-in so existing foreground tools
+ * retain their exact leader/stdio completion semantics. Process jobs enable it
+ * through their bound launcher: sandbox cleanup must not run while a detached
+ * descendant in the owned group is still alive.
+ *
+ * @param {{command: string, args?: string[], cwd?: string, env?: Record<string, string|undefined>}} commandSpec
+ * @param {{timeoutMs?: number, signal?: AbortSignal, maxBufferBytes?: number, input?: string|Buffer, waitForProcessGroup?: boolean, exactEnvironment?: boolean, onStdout?: (chunk: Buffer) => void, onStderr?: (chunk: Buffer) => void}} [options]
+ * For process jobs, `release()` is the persistence fence: the target cannot
+ * spawn until the host has durably recorded the returned ownership metadata.
+ * Foreground handles expose a harmless no-op release for one structural shape.
+ *
+ * @returns {{pid: number|null, pgid: number|null, startedAt: string, completion: Promise<any>, release: () => Promise<void>, cancel: () => void}}
+ */
+export function startPreparedProcess(
+  commandSpec,
+  {
+    timeoutMs,
+    signal,
+    maxBufferBytes = DEFAULT_PROCESS_BUFFER_BYTES,
+    input,
+    waitForProcessGroup = false,
+    exactEnvironment = false,
+    onStdout,
+    onStderr,
   } = {},
 ) {
   const startedAt = Date.now();
-  return new Promise((resolve) => {
-    let child;
+  const gated = waitForProcessGroup && process.platform !== "win32";
+  const targetEnvironment = exactEnvironment
+    ? exactProcessEnv(commandSpec.env)
+    : commandSpec.env
+      ? mergedProcessEnv(commandSpec.env)
+      : { ...process.env };
+  const launchPayload = gated
+    ? Buffer.from(JSON.stringify({
+      command: commandSpec.command,
+      args: commandSpec.args || [],
+      ...(commandSpec.cwd === undefined ? {} : { cwd: commandSpec.cwd }),
+      env: targetEnvironment,
+    }), "utf8")
+    : null;
+  if (launchPayload !== null && launchPayload.byteLength > PROCESS_JOB_LAUNCH_PAYLOAD_BYTES) {
+    throw new RangeError("Process-job launch payload exceeds the safe in-memory gate limit.");
+  }
+  /** @type {import("node:child_process").ChildProcess|null} */
+  let child = null;
+  let cancel = () => {};
+  let release = async () => {};
+  const completion = new Promise((resolve) => {
     try {
-      const env = commandSpec.env ? mergedProcessEnv(commandSpec.env) : process.env;
-      child = spawn(commandSpec.command, commandSpec.args || [], {
-        cwd: commandSpec.cwd,
+      child = spawn(
+        gated ? process.execPath : commandSpec.command,
+        gated
+          ? ["--input-type=commonjs", "--eval", PROCESS_JOB_LAUNCH_GATE_SOURCE]
+          : (commandSpec.args || []),
+        {
+        ...(gated ? {} : { cwd: commandSpec.cwd }),
         detached: process.platform !== "win32",
-        env,
-        stdio: ["ignore", "pipe", "pipe"],
-      });
+        env: gated ? {} : targetEnvironment,
+        stdio: gated
+          ? ["ignore", "pipe", "pipe", "pipe", "pipe"]
+          : [input === undefined ? "ignore" : "pipe", "pipe", "pipe"],
+      },
+      );
     } catch (error) {
       resolve({
         code: null,
@@ -52,6 +240,11 @@ export function runPreparedProcess(
       return;
     }
 
+    if (!gated && input !== undefined) {
+      child.stdin?.on("error", () => undefined);
+      child.stdin?.end(input);
+    }
+
     const stdout = [];
     const stderr = [];
     const state = {
@@ -63,20 +256,189 @@ export function runPreparedProcess(
       timedOut: false,
       truncated: false,
     };
+    let targetStatus = null;
+    let statusInvalid = false;
+    const statusChunks = [];
+    let statusBytes = 0;
     let killTimer = null;
+    let killExitTimer = null;
+    let groupProbeTimer = null;
     let timeoutTimer = null;
     let settled = false;
+    let childClosed = false;
+    let closeCode = null;
+    let closeSignal = null;
+    let groupAbsentObserved = false;
+    let terminationRequested = false;
+    let terminationFailure = null;
+    const ownedGroup = gated && child.pid ? createOwnedProcessGroupAttestation(child.pid) : null;
+
+    const finish = (groupExitConfirmed = true) => {
+      if (settled) return;
+      settled = true;
+      if (timeoutTimer !== null) clearTimeout(timeoutTimer);
+      if (killTimer !== null) clearTimeout(killTimer);
+      if (killExitTimer !== null) clearTimeout(killExitTimer);
+      if (groupProbeTimer !== null) clearTimeout(groupProbeTimer);
+      signal?.removeEventListener?.("abort", onAbort);
+      if (!childClosed) {
+        child?.stdout?.destroy();
+        child?.stderr?.destroy();
+        for (const stream of child?.stdio ?? []) stream?.destroy?.();
+        child?.unref?.();
+      }
+      const statusSpawnError = targetStatus?.spawnError
+        ? processSpawnError(targetStatus.spawnError)
+        : null;
+      const missingTargetStatus = gated
+        && targetStatus === null
+        && closeSignal === null
+        && closeCode !== 0
+        && !state.timedOut
+        && !state.bufferExceeded;
+      resolve({
+        code: targetStatus?.code ?? closeCode,
+        signal: targetStatus?.signal ?? closeSignal,
+        stdout: Buffer.concat(stdout).toString("utf8"),
+        stderr: Buffer.concat(stderr).toString("utf8"),
+        ...state,
+        spawnError: state.spawnError
+          ?? statusSpawnError
+          ?? (terminationFailure !== null
+            ? new Error(terminationFailure)
+            : statusInvalid || missingTargetStatus
+              ? new Error("The process-job launch gate exited without a valid target result.")
+              : null),
+        groupExitConfirmed,
+        durationMs: Date.now() - startedAt,
+      });
+    };
+
+    const probeOwnedGroup = () => {
+      groupProbeTimer = null;
+      if (settled || !child?.pid || !waitForProcessGroup || process.platform === "win32") return;
+      // A definitely live, unreaped self-led ChildProcess prevents its numeric
+      // PGID from being reused. Start continuity polling only after that exact
+      // leader reports exit; long-running jobs need no periodic re-attestation.
+      if (ownedGroup !== null && !ownedGroup.leaderExited) return;
+      const presence = ownedProcessGroupPresence(child.pid);
+      if (presence === "absent") {
+        groupAbsentObserved = true;
+        if (ownedGroup !== null) ownedGroup.ownershipLost = true;
+        if (childClosed) finish(true);
+        return;
+      }
+      if (ownedGroup !== null) {
+        if (presence === "present") {
+          const observedAt = Date.now();
+          if (ownedGroup.lastObservedAt === null
+            || observedAt - ownedGroup.lastObservedAt > PROCESS_GROUP_REATTEST_MAX_GAP_MS) {
+            // A missed observation window can hide group disappearance and
+            // numeric reuse. Once continuity is lost, later presence can never
+            // restore authority over that PGID.
+            ownedGroup.ownershipLost = true;
+          } else if (!ownedGroup.ownershipLost) {
+            if (ownedGroup.leaderExited) ownedGroup.observedAfterLeaderExit = true;
+            ownedGroup.lastObservedAt = observedAt;
+          }
+        } else {
+          // An indeterminate probe cannot extend numeric PGID authority.
+          ownedGroup.ownershipLost = true;
+        }
+      }
+      groupProbeTimer = setTimeout(probeOwnedGroup, PROCESS_GROUP_REATTEST_POLL_MS);
+      groupProbeTimer.unref?.();
+    };
 
     function terminate() {
-      killProcessGroup(child, "SIGTERM");
-      if (killTimer === null) {
-        killTimer = setTimeout(() => killProcessGroup(child, "SIGKILL"), KILL_GRACE_MS);
-        killTimer.unref?.();
+      if (settled || terminationRequested) return;
+      terminationRequested = true;
+      const term = signalAttestedProcessGroup(child, ownedGroup, "SIGTERM");
+      if (term === "absent") {
+        finish(true);
+        return;
+      }
+      if (term === "unproven") {
+        terminationFailure = "Owned process-group termination was withheld because its surviving identity could not be re-attested.";
       }
+      killTimer = setTimeout(() => {
+        const kill = signalAttestedProcessGroup(child, ownedGroup, "SIGKILL");
+        if (kill === "absent") {
+          finish(true);
+          return;
+        }
+        if (kill === "unproven") {
+          terminationFailure = "Owned process-group escalation was withheld because its surviving identity could not be re-attested.";
+        }
+        // SIGKILL should make the group disappear promptly, but a kernel/OS
+        // anomaly or lost ownership proof must still settle explicitly. The
+        // caller can then withhold sandbox cleanup instead of hanging forever.
+        killExitTimer = setTimeout(() => {
+          const absent = child?.pid
+            ? ownedProcessGroupPresence(child.pid) === "absent"
+            : true;
+          if (!absent && terminationFailure === null) {
+            terminationFailure = "Owned process-group exit could not be confirmed after SIGKILL.";
+          }
+          finish(absent);
+        }, KILL_EXIT_CONFIRM_MS);
+        killExitTimer.unref?.();
+      }, KILL_GRACE_MS);
+      killTimer.unref?.();
     }
+    cancel = terminate;
 
-    function append(target, chunk) {
+    if (gated) {
+      const gate = /** @type {import("node:stream").Writable|undefined} */ (child.stdio?.[3]);
+      const status = /** @type {import("node:stream").Readable|undefined} */ (child.stdio?.[4]);
+      let releasePromise;
+      release = async () => {
+        releasePromise ??= new Promise((resolveRelease, rejectRelease) => {
+          if (!gate || typeof gate.end !== "function" || launchPayload === null) {
+            rejectRelease(new Error("Process-job launch gate is unavailable."));
+            return;
+          }
+          let released = false;
+          const rejectOnce = () => {
+            if (released) return;
+            released = true;
+            rejectRelease(new Error("Process-job launch gate closed before release."));
+          };
+          gate.once("error", rejectOnce);
+          gate.end(launchPayload, () => {
+            if (released) return;
+            released = true;
+            gate.off("error", rejectOnce);
+            resolveRelease();
+          });
+        });
+        await releasePromise;
+      };
+      status?.on("data", (chunk) => {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        statusBytes += buffer.length;
+        if (statusBytes > PROCESS_JOB_STATUS_BYTES) {
+          statusInvalid = true;
+          return;
+        }
+        statusChunks.push(buffer);
+      });
+      status?.once("error", () => { statusInvalid = true; });
+      status?.once("end", () => {
+        if (statusInvalid || statusBytes === 0) return;
+        try {
+          const parsed = JSON.parse(Buffer.concat(statusChunks).toString("utf8"));
+          if (validTargetStatus(parsed)) targetStatus = parsed;
+          else statusInvalid = true;
+        } catch {
+          statusInvalid = true;
+        }
+      });
+    }
+
+    function append(target, chunk, observe) {
       const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+      try { observe?.(buffer); } catch { /* observers cannot break process ownership */ }
       state.bytes += buffer.length;
       const remaining = Math.max(0, maxBufferBytes - state.storedBytes);
       if (remaining > 0) {
@@ -106,27 +468,157 @@ export function runPreparedProcess(
     if (signal?.aborted) onAbort();
     else signal?.addEventListener?.("abort", onAbort, { once: true });
 
-    child.stdout?.on("data", (chunk) => append(stdout, chunk));
-    child.stderr?.on("data", (chunk) => append(stderr, chunk));
+    child.stdout?.on("data", (chunk) => append(stdout, chunk, onStdout));
+    child.stderr?.on("data", (chunk) => append(stderr, chunk, onStderr));
     child.once("error", (error) => {
       state.spawnError = error;
     });
-    child.once("close", (code, closeSignal) => {
+    // Refresh the continuity proof at the kernel exit notification, not
+    // `close`: inherited stdio can delay `close` while an in-group descendant
+    // survives.
+    child.once("exit", (code, childExitSignal) => {
+      closeCode = code;
+      closeSignal = childExitSignal;
+      if (ownedGroup !== null) {
+        ownedGroup.leaderExited = true;
+        // The reuse hazard begins only when the exact self-led ChildProcess
+        // exits. Spawn-to-exit event-loop gaps cannot revoke live authority.
+        ownedGroup.lastObservedAt = Date.now();
+      }
+      if (groupProbeTimer !== null) clearTimeout(groupProbeTimer);
+      groupProbeTimer = null;
+      probeOwnedGroup();
+    });
+    child.once("close", (code, childCloseSignal) => {
       if (settled) return;
-      settled = true;
-      if (timeoutTimer !== null) clearTimeout(timeoutTimer);
-      if (killTimer !== null) clearTimeout(killTimer);
-      signal?.removeEventListener?.("abort", onAbort);
-      resolve({
-        code,
-        signal: closeSignal,
-        stdout: Buffer.concat(stdout).toString("utf8"),
-        stderr: Buffer.concat(stderr).toString("utf8"),
-        ...state,
-        durationMs: Date.now() - startedAt,
-      });
+      childClosed = true;
+      closeCode = code;
+      closeSignal = childCloseSignal;
+      if (!waitForProcessGroup || process.platform === "win32" || !child?.pid) {
+        finish(true);
+        return;
+      }
+      if (groupAbsentObserved) finish(true);
+      else if (groupProbeTimer === null) probeOwnedGroup();
     });
   });
+  return {
+    pid: child?.pid ?? null,
+    pgid: process.platform === "win32" ? null : (child?.pid ?? null),
+    startedAt: new Date(startedAt).toISOString(),
+    completion,
+    release: () => release(),
+    cancel: () => cancel(),
+  };
+}
+
+function validTargetStatus(value) {
+  if (!value || typeof value !== "object") return false;
+  if (value.code !== null && !Number.isInteger(value.code)) return false;
+  if (value.signal !== null && typeof value.signal !== "string") return false;
+  if (value.spawnError === null) return true;
+  return typeof value.spawnError === "object"
+    && typeof value.spawnError.message === "string"
+    && (value.spawnError.code === undefined || typeof value.spawnError.code === "string");
+}
+
+function processSpawnError(value) {
+  return Object.assign(
+    new Error(value.message),
+    typeof value.code === "string" ? { code: value.code } : {},
+  );
+}
+
+function createOwnedProcessGroupAttestation(pgid) {
+  return {
+    pgid,
+    leaderExited: false,
+    observedAfterLeaderExit: false,
+    ownershipLost: false,
+    /** @type {number|null} */
+    lastObservedAt: null,
+  };
+}
+
+function reattestOwnedProcessGroup(attestation) {
+  if (attestation.ownershipLost
+    || !attestation.leaderExited
+    || !attestation.observedAfterLeaderExit
+    || attestation.lastObservedAt === null) return false;
+  if (Date.now() - attestation.lastObservedAt > PROCESS_GROUP_REATTEST_MAX_GAP_MS) {
+    attestation.ownershipLost = true;
+    return false;
+  }
+  const presence = ownedProcessGroupPresence(attestation.pgid);
+  if (presence === "absent") {
+    attestation.ownershipLost = true;
+    return false;
+  }
+  if (presence !== "present") {
+    // An indeterminate observation is itself a continuity gap. A later
+    // successful probe must never restore authority over the numeric PGID.
+    attestation.ownershipLost = true;
+    return false;
+  }
+  // POSIX cannot reuse the numeric PGID while any member of that exact group
+  // survives. Continuous polling begins when the exact detached leader exits
+  // and permanently revokes authority on an observation gap or the first
+  // observed absence; a later group using the number is never signalled.
+  attestation.observedAfterLeaderExit = true;
+  attestation.lastObservedAt = Date.now();
+  return true;
+}
+
+function signalAttestedProcessGroup(child, attestation, signal) {
+  if (!child?.pid) return "absent";
+  // While the exact self-led ChildProcess is definitely live and unreaped,
+  // POSIX cannot recycle its PID/PGID. Event-loop stalls do not weaken that
+  // kernel-backed authority, so signal the negative PGID directly.
+  if (!processLeaderExited(child)) {
+    try {
+      process.kill(process.platform === "win32" ? child.pid : -child.pid, signal);
+      return "signalled";
+    } catch (error) {
+      if (error?.code === "ESRCH") return "absent";
+      return "unproven";
+    }
+  }
+  if (process.platform === "win32") return "absent";
+  if (attestation === null || !attestation.leaderExited) return "unproven";
+  const continuityExpired = attestation.lastObservedAt === null
+    || Date.now() - attestation.lastObservedAt > PROCESS_GROUP_REATTEST_MAX_GAP_MS;
+  if (continuityExpired) attestation.ownershipLost = true;
+  if (attestation.ownershipLost) {
+    // After leader exit, a lost observation window can hide disappearance and
+    // numeric reuse. Only observed absence can now confirm completion.
+    return ownedProcessGroupPresence(attestation.pgid) === "absent"
+      ? "absent"
+      : "unproven";
+  }
+  const presence = ownedProcessGroupPresence(child.pid);
+  if (presence === "absent") return "absent";
+  if (presence !== "present") {
+    if (attestation !== null) attestation.ownershipLost = true;
+    return "unproven";
+  }
+  if (!reattestOwnedProcessGroup(attestation)) return "unproven";
+  try {
+    process.kill(-child.pid, signal);
+    return "signalled";
+  } catch (error) {
+    if (error?.code === "ESRCH") return "absent";
+    return "unproven";
+  }
+}
+
+function ownedProcessGroupPresence(pgid) {
+  try {
+    process.kill(-pgid, 0);
+    return "present";
+  } catch (error) {
+    if (error?.code === "ESRCH") return "absent";
+    return "unknown";
+  }
 }
 
 function mergedProcessEnv(overrides) {
@@ -138,19 +630,38 @@ function mergedProcessEnv(overrides) {
   return env;
 }
 
+function exactProcessEnv(values = {}) {
+  /** @type {Record<string, string>} */
+  const env = {};
+  for (const [key, value] of Object.entries(values)) {
+    if (value !== undefined) env[key] = value;
+  }
+  return env;
+}
+
 /**
  * @param {import("node:child_process").ChildProcess} child
  * @param {NodeJS.Signals} signal
+ * @param {{fallbackToChildPid?: boolean}} [options]
  */
-export function killProcessGroup(child, signal) {
+export function killProcessGroup(child, signal, { fallbackToChildPid = false } = {}) {
   if (!child?.pid) return;
   try {
     process.kill(process.platform === "win32" ? child.pid : -child.pid, signal);
   } catch {
+    // Node REPL owns an exact, still-live ChildProcess and opts into the
+    // legacy single-PID fallback. Attested process jobs never use this helper.
+    if (!fallbackToChildPid || process.platform === "win32" || processLeaderExited(child)) return;
     try { process.kill(child.pid, signal); } catch { /* already gone */ }
   }
 }
 
+function processLeaderExited(child) {
+  return !child?.pid
+    || (child.exitCode !== null && child.exitCode !== undefined)
+    || (child.signalCode !== null && child.signalCode !== undefined);
+}
+
 /**
  * @param {{stdout?: string, stderr?: string}} result
  */