@stacksjs/actions 0.75.279 → 0.75.283

package/dist/pantry-toolchain.d.ts

@@ -11,6 +11,7 @@ export declare function resolvePantryToolchain(options: PantryToolchainOptions):
 export declare interface PantryToolchainOptions {
   cwd: string
   env?: Record<string, string | undefined>
+  allowOverride?: boolean
   probe?: (bin: string) => { exitCode: number, stdout: string }
 }
 export type PantryToolchain = | { ok: true, bin: string, version: string, declared?: string, declaredIn?: string }

package/dist/pantry-toolchain.js

@@ -1 +1 @@
-import{existsSync,readFileSync}from"node:fs";import{join}from"node:path";export function parsePantryVersion(output){return/\bpantry\s+v?(\d+\.\d+\.\d+(?:-[\w.]+)?)/i.exec(output)?.[1]}export function declaredPantryRange(cwd){for(const file of["storage/framework/core/buddy/package.json","package.json"]){const path=join(cwd,file);if(!existsSync(path))continue;try{const manifest=JSON.parse(readFileSync(path,"utf8")),range=manifest.dependencies?.["ts-pantry"]??manifest.devDependencies?.["ts-pantry"];if(range)return{range,file}}catch{}}return}function probeVersion(bin){try{const result=Bun.spawnSync([bin,"--version"],{stdout:"pipe",stderr:"pipe"});return{exitCode:result.exitCode??1,stdout:`${result.stdout.toString()}${result.stderr.toString()}`}}catch{return{exitCode:127,stdout:""}}}export function resolvePantryToolchain(options){const bin=(options.env??process.env).PANTRY_BIN?.trim()||"pantry",result=(options.probe??probeVersion)(bin),version=result.exitCode===0?parsePantryVersion(result.stdout):void 0;if(!version)return{ok:!1,bin,message:`Release aborted: could not run \`${bin} --version\`, so the Pantry that would regenerate pantry.lock is unknown. Install the declared Pantry, or set PANTRY_BIN to it, then re-run.`};const declared=declaredPantryRange(options.cwd);if(declared&&!Bun.semver.satisfies(version,declared.range))return{ok:!1,bin,message:`Release aborted before any file changed: \`${bin}\` is Pantry ${version}, but ${declared.file} declares ts-pantry ${declared.range}. A different Pantry writes a different pantry.lock than the one CI validates. Set PANTRY_BIN to a Pantry that satisfies the declared range (or put one first on PATH), then re-run.`};return{ok:!0,bin,version,declared:declared?.range,declaredIn:declared?.file}}
+import{existsSync,readFileSync}from"node:fs";import{join}from"node:path";export function parsePantryVersion(output){return/\bpantry\s+v?(\d+\.\d+\.\d+(?:-[\w.]+)?)/i.exec(output)?.[1]}export function declaredPantryRange(cwd){for(const file of["storage/framework/core/buddy/package.json","package.json"]){const path=join(cwd,file);if(!existsSync(path))continue;try{const manifest=JSON.parse(readFileSync(path,"utf8")),range=manifest.dependencies?.["ts-pantry"]??manifest.devDependencies?.["ts-pantry"];if(range)return{range,file}}catch{}}return}function probeVersion(bin){try{const result=Bun.spawnSync([bin,"--version"],{stdout:"pipe",stderr:"pipe"});return{exitCode:result.exitCode??1,stdout:`${result.stdout.toString()}${result.stderr.toString()}`}}catch{return{exitCode:127,stdout:""}}}export function resolvePantryToolchain(options){const env=options.env??process.env,allowOverride=options.allowOverride!==!1,bin=allowOverride&&env.PANTRY_BIN?.trim()||"pantry",result=(options.probe??probeVersion)(bin),version=result.exitCode===0?parsePantryVersion(result.stdout):void 0;if(!version)return{ok:!1,bin,message:`Release aborted: could not run \`${bin} --version\`, so the Pantry that would regenerate pantry.lock is unknown. `+(allowOverride?"Install the declared Pantry, or set PANTRY_BIN to it, then re-run.":"Install the declared Pantry and put it first on PATH, then re-run.")};const declared=declaredPantryRange(options.cwd);if(declared&&!Bun.semver.satisfies(version,declared.range))return{ok:!1,bin,message:`Release aborted before any file changed: \`${bin}\` is Pantry ${version}, but ${declared.file} declares ts-pantry ${declared.range}. A different Pantry writes a different pantry.lock than the one CI validates. `+(allowOverride?"Set PANTRY_BIN to a Pantry that satisfies the declared range (or put one first on PATH), then re-run.":"Install a Pantry that satisfies the declared range and put it first on PATH, then re-run.")};return{ok:!0,bin,version,declared:declared?.range,declaredIn:declared?.file}}

package/dist/project-scripts.d.ts

@@ -1,5 +1,3 @@
-/** Internal Bun owner source; exported for real IPC completion-race tests. */
-export declare function windowsCheckHost(command: string[], windowsTaskkill: string): string;
 /** Execute declared project checks with the installed Bun and owned cleanup. */
 export declare function runProjectScripts(options: ProjectScriptOptions): Promise<ProjectScriptReceipt>;
 export declare interface ProjectScriptOptions {

package/dist/project-scripts.js

@@ -1,286 +1,147 @@
-import{createHash}from"node:crypto";import{readFileSync}from"node:fs";import{join}from"node:path";function fail(message){throw Error(message)}function windowsCheckCommand(powershell,bun,script){const source=`
-$ErrorActionPreference = 'Stop'
-$ProgressPreference = 'SilentlyContinue'
-Add-Type -TypeDefinition @'
-using System;
-using System.ComponentModel;
-using System.Runtime.InteropServices;
-using System.Text;
-using System.Threading;
-public static class StacksOwnedCheck {
-  [StructLayout(LayoutKind.Sequential)] struct BasicLimits {
-    public long ProcessTime, JobTime;
-    public uint Flags;
-    public UIntPtr MinimumWorkingSet, MaximumWorkingSet;
-    public uint ActiveProcessLimit;
-    public UIntPtr Affinity;
-    public uint Priority, Scheduling;
-  }
-  [StructLayout(LayoutKind.Sequential)] struct ExtendedLimits {
-    public BasicLimits Basic;
-    public ulong ReadOperations, WriteOperations, OtherOperations, ReadBytes, WriteBytes, OtherBytes;
-    public UIntPtr ProcessMemory, JobMemory, PeakProcessMemory, PeakJobMemory;
-  }
-  [StructLayout(LayoutKind.Sequential)] struct Accounting {
-    public long UserTime, KernelTime, PeriodUserTime, PeriodKernelTime;
-    public uint PageFaults, TotalProcesses, ActiveProcesses, TerminatedProcesses;
-  }
-  [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] struct Startup {
-    public uint Size;
-    public IntPtr Reserved, Desktop, Title;
-    public uint X, Y, XSize, YSize, XChars, YChars, Fill, Flags;
-    public ushort Show, ReservedSize;
-    public IntPtr ReservedBytes, Input, Output, Error;
-  }
-  [StructLayout(LayoutKind.Sequential)] struct ProcessInfo {
-    public IntPtr Process, Thread;
-    public uint ProcessId, ThreadId;
-  }
-  [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-  static extern IntPtr CreateJobObjectW(IntPtr attributes, string name);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  static extern bool SetInformationJobObject(IntPtr job, int kind, ref ExtendedLimits limits, uint size);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  static extern bool QueryInformationJobObject(IntPtr job, int kind, out Accounting info, uint size, IntPtr returned);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  static extern bool AssignProcessToJobObject(IntPtr job, IntPtr process);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  static extern bool TerminateJobObject(IntPtr job, uint code);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  static extern bool DuplicateHandle(IntPtr sourceProcess, IntPtr source, IntPtr targetProcess,
-    out IntPtr target, uint access, bool inherit, uint options);
-  [DllImport("kernel32.dll")] static extern IntPtr GetCurrentProcess();
-  [DllImport("kernel32.dll")] static extern IntPtr GetStdHandle(int kind);
-  [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-  static extern IntPtr CreateFileW(string name, uint access, uint share, IntPtr security,
-    uint disposition, uint flags, IntPtr template);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  static extern bool PeekNamedPipe(IntPtr pipe, IntPtr buffer, uint size, IntPtr read,
-    out uint available, IntPtr remaining);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  static extern bool ReadFile(IntPtr pipe, byte[] buffer, uint count, out uint read, IntPtr overlapped);
-  [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-  static extern bool CreateProcessW(string application, StringBuilder command, IntPtr processSecurity,
-    IntPtr threadSecurity, bool inherit, uint flags, IntPtr environment, string directory,
-    ref Startup startup, out ProcessInfo process);
-  [DllImport("kernel32.dll", SetLastError = true)] static extern uint ResumeThread(IntPtr thread);
-  [DllImport("kernel32.dll", SetLastError = true)] static extern uint WaitForSingleObject(IntPtr handle, uint timeout);
-  [DllImport("kernel32.dll", SetLastError = true)] static extern bool GetExitCodeProcess(IntPtr process, out uint code);
-  [DllImport("kernel32.dll", SetLastError = true)] static extern bool TerminateProcess(IntPtr process, uint code);
-  [DllImport("kernel32.dll", SetLastError = true)] static extern bool CloseHandle(IntPtr handle);
-  static void Require(bool success) { if (!success) throw new Win32Exception(Marshal.GetLastWin32Error()); }
-  static IntPtr InheritableStandardHandle(int kind) {
-    IntPtr source = GetStdHandle(kind);
-    if (source == IntPtr.Zero || source == new IntPtr(-1)) return IntPtr.Zero;
-    IntPtr inherited;
-    Require(DuplicateHandle(GetCurrentProcess(), source, GetCurrentProcess(), out inherited, 0, true, 2));
-    return inherited;
+import{createHash}from"node:crypto";import{mkdtempSync,readFileSync,rmSync,writeFileSync}from"node:fs";import{tmpdir}from"node:os";import{join}from"node:path";function fail(message){throw Error(message)}function windowsCheckHost(bun,script){return`
+import { dlopen, FFIType as f, ptr } from 'bun:ffi'
+setInterval(() => {}, 60_000)
+let stopRequested = false
+let permit
+const permitted = new Promise(resolve => { permit = resolve })
+process.on('message', message => {
+  if (message?.stop) { stopRequested = true; permit() }
+  else if (message?.start) permit()
+})
+let api
+let lifetime = 0n
+let job = 0n
+let childProcess = 0n
+let childThread = 0n
+let failure = ''
+let exitCode = 1
+const wide = value => Uint16Array.from({ length: value.length + 1 }, (_, i) => i === value.length ? 0 : value.charCodeAt(i))
+const must = (condition, operation) => {
+  if (!condition) throw new Error('Native Windows ' + operation + ' failed (Win32 ' + api.GetLastError() + ')')
+}
+const makeJob = () => {
+  const handle = api.CreateJobObjectW(null, null)
+  must(handle !== 0n, 'job creation')
+  const limits = new BigUint64Array(18) // JOBOBJECT_EXTENDED_LIMIT_INFORMATION, Win64.
+  new DataView(limits.buffer).setUint32(16, 0x2000, true) // KILL_ON_JOB_CLOSE.
+  if (!api.SetInformationJobObject(handle, 9, ptr(limits), limits.byteLength)) {
+    api.CloseHandle(handle)
+    must(false, 'job limits')
   }
-  static IntPtr ConsumerInput() {
-    IntPtr source = CreateFileW("NUL", 0x80000000, 3, IntPtr.Zero, 3, 0, IntPtr.Zero);
-    Require(source != new IntPtr(-1));
+  return handle
+}
+const inherited = source => {
+  const result = new BigUint64Array(1)
+  const current = api.GetCurrentProcess()
+  must(api.DuplicateHandle(current, source, current, ptr(result), 0, 1, 2), 'standard handle inheritance')
+  return result[0]
+}
+try {
+  api = dlopen('kernel32.dll', {
+    GetLastError: { args: [], returns: f.u32 },
+    GetCurrentProcess: { args: [], returns: f.u64 },
+    GetStdHandle: { args: [f.u32], returns: f.u64 },
+    CreateJobObjectW: { args: [f.ptr, f.ptr], returns: f.u64 },
+    SetInformationJobObject: { args: [f.u64, f.i32, f.ptr, f.u32], returns: f.i32 },
+    QueryInformationJobObject: { args: [f.u64, f.i32, f.ptr, f.u32, f.ptr], returns: f.i32 },
+    AssignProcessToJobObject: { args: [f.u64, f.u64], returns: f.i32 },
+    TerminateJobObject: { args: [f.u64, f.u32], returns: f.i32 },
+    DuplicateHandle: { args: [f.u64, f.u64, f.u64, f.ptr, f.u32, f.i32, f.u32], returns: f.i32 },
+    CreateFileW: { args: [f.ptr, f.u32, f.u32, f.ptr, f.u32, f.u32, f.u64], returns: f.u64 },
+    CreateProcessW: { args: [f.ptr, f.ptr, f.ptr, f.ptr, f.i32, f.u32, f.ptr, f.ptr, f.ptr, f.ptr], returns: f.i32 },
+    ResumeThread: { args: [f.u64], returns: f.u32 },
+    WaitForSingleObject: { args: [f.u64, f.u32], returns: f.u32 },
+    GetExitCodeProcess: { args: [f.u64, f.ptr], returns: f.i32 },
+    TerminateProcess: { args: [f.u64, f.u32], returns: f.i32 },
+    CloseHandle: { args: [f.u64], returns: f.i32 },
+  }).symbols
+  // Own the host before it can create a consumer. Parent death closes this
+  // non-inheritable lifetime handle and terminates all remaining descendants.
+  lifetime = makeJob()
+  must(api.AssignProcessToJobObject(lifetime, api.GetCurrentProcess()), 'host ownership')
+  job = makeJob()
+  process.send({ ready: true })
+  await permitted
+  if (!stopRequested) {
+    const startup = new BigUint64Array(13) // STARTUPINFOW, Win64: 104 bytes.
+    const fields = new DataView(startup.buffer)
+    fields.setUint32(0, startup.byteLength, true)
+    fields.setUint32(60, 0x100, true) // STARTF_USESTDHANDLES.
+    const inputName = wide('NUL')
+    const sourceInput = api.CreateFileW(ptr(inputName), 0x80000000, 3, null, 3, 0, 0n)
+    must(sourceInput !== 0xffffffffffffffffn, 'consumer stdin')
+    const handles = []
     try {
-      IntPtr inherited;
-      Require(DuplicateHandle(GetCurrentProcess(), source, GetCurrentProcess(), out inherited, 0, true, 2));
-      return inherited;
-    } finally { CloseHandle(source); }
-  }
-  static bool StopRequested() {
-    uint available;
-    if (PeekNamedPipe(GetStdHandle(-10), IntPtr.Zero, 0, IntPtr.Zero, out available, IntPtr.Zero))
-      return available != 0;
-    int error = Marshal.GetLastWin32Error();
-    if (error == 109 || error == 232) return true; // Closed control pipe.
-    throw new Win32Exception(error);
-  }
-  static bool AwaitStart() {
-    // No consumer can exist until the live Bun host grants permission. It may
-    // safely kill a compiling or waiting helper when cancellation wins first.
-    Console.Out.WriteLine("STACKS_OWNED_CHECK_READY");
-    Console.Out.Flush();
-    while (true) {
-      uint available;
-      if (!PeekNamedPipe(GetStdHandle(-10), IntPtr.Zero, 0, IntPtr.Zero, out available, IntPtr.Zero)) {
-        int error = Marshal.GetLastWin32Error();
-        if (error == 109 || error == 232) return false;
-        throw new Win32Exception(error);
-      }
-      if (available != 0) {
-        byte[] command = new byte[1];
-        uint read;
-        Require(ReadFile(GetStdHandle(-10), command, 1, out read, IntPtr.Zero));
-        return read == 1 && command[0] == 1;
+      handles.push(inherited(sourceInput))
+      handles.push(inherited(api.GetStdHandle(0xfffffff5))) // STD_OUTPUT_HANDLE.
+      handles.push(inherited(api.GetStdHandle(0xfffffff4))) // STD_ERROR_HANDLE.
+      for (let i = 0; i < handles.length; i++) fields.setBigUint64(80 + i * 8, handles[i], true)
+      const processInfo = new BigUint64Array(3) // PROCESS_INFORMATION, Win64.
+      const executable = wide(${JSON.stringify(bun)})
+      const commandLine = wide(${JSON.stringify(`"${bun}" run ${script}`)})
+      const created = api.CreateProcessW(ptr(executable), ptr(commandLine), null, null, 1, 0x08000004, null, null, ptr(startup), ptr(processInfo))
+      childProcess = processInfo[0]
+      childThread = processInfo[1]
+      must(created, 'suspended consumer creation')
+    }
+    finally {
+      api.CloseHandle(sourceInput)
+      for (const handle of handles) api.CloseHandle(handle)
+    }
+    // No user instruction runs until both native ownership jobs contain it.
+    must(api.AssignProcessToJobObject(job, childProcess), 'consumer ownership')
+    must(api.ResumeThread(childThread) !== 0xffffffff, 'consumer startup')
+    while (!stopRequested) {
+      const state = api.WaitForSingleObject(childProcess, 0)
+      if (state === 0) {
+        const code = new Uint32Array(1)
+        must(api.GetExitCodeProcess(childProcess, ptr(code)), 'consumer exit status')
+        exitCode = code[0] | 0
+        break
       }
-      Thread.Sleep(10);
+      must(state === 258, 'consumer wait') // WAIT_TIMEOUT.
+      await Bun.sleep(10)
     }
   }
-  static IntPtr Job() {
-    IntPtr job = CreateJobObjectW(IntPtr.Zero, null);
-    Require(job != IntPtr.Zero);
-    ExtendedLimits limits = new ExtendedLimits();
-    limits.Basic.Flags = 0x2000; // JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE
-    try { Require(SetInformationJobObject(job, 9, ref limits, (uint)Marshal.SizeOf(typeof(ExtendedLimits)))); }
-    catch { CloseHandle(job); throw; }
-    return job;
-  }
-  public static int Run(string bun, string script) {
-    // The control pipe is never inherited as consumer stdin. Prepare both
-    // ownership jobs before reporting readiness or accepting startup permission.
-    if (StopRequested()) return 1;
-    // The outer job owns this host before it creates anything. If cancellation
-    // races suspended-child assignment below, host death still kills that child.
-    // Retain this non-inheritable handle until process exit; closing it earlier
-    // would terminate this host before it can return the command's exit code.
-    IntPtr lifetime = Job();
-    Require(AssignProcessToJobObject(lifetime, GetCurrentProcess()));
-    IntPtr commandJob = Job();
-    ProcessInfo child = new ProcessInfo();
+}
+catch (error) { failure = String(error) }
+try {
+  if (api && job !== 0n) {
     try {
-      if (!AwaitStart() || StopRequested()) return 1;
-      Startup startup = new Startup();
-      startup.Size = (uint)Marshal.SizeOf(typeof(Startup));
-      startup.Flags = 0x100; // STARTF_USESTDHANDLES
-      // Bun can supply non-inheritable standard handles to PowerShell. A
-      // native CreateProcess child needs explicitly inheritable duplicates.
-      // Never execute user code before it belongs to the inner cleanup job.
-      try {
-        startup.Input = ConsumerInput();
-        startup.Output = InheritableStandardHandle(-11);
-        startup.Error = InheritableStandardHandle(-12);
-        Require(CreateProcessW(bun, new StringBuilder("\\"" + bun + "\\" run " + script),
-          IntPtr.Zero, IntPtr.Zero, true, 0x08000004, IntPtr.Zero, null, ref startup, out child));
-      } finally {
-        foreach (IntPtr handle in new[] { startup.Input, startup.Output, startup.Error })
-          if (handle != IntPtr.Zero) CloseHandle(handle);
-      }
-      Require(AssignProcessToJobObject(commandJob, child.Process));
-      bool cancelled = StopRequested();
-      if (!cancelled) Require(ResumeThread(child.Thread) != 0xffffffff);
-      while (!cancelled) {
-        uint state = WaitForSingleObject(child.Process, 10);
-        if (state == 0) break;
-        Require(state == 258); // WAIT_TIMEOUT, otherwise retain the native error.
-        cancelled = StopRequested();
+      if (childProcess !== 0n) {
+        const state = api.WaitForSingleObject(childProcess, 0)
+        must(state === 0 || state === 258, 'final consumer wait')
+        if (state === 258) must(api.TerminateProcess(childProcess, 1), 'suspended consumer disposal')
       }
-      uint code = 1;
-      if (!cancelled) Require(GetExitCodeProcess(child.Process, out code));
-      return unchecked((int)code);
-    } finally {
-      try {
-        // Also dispose a suspended child if assigning its inner job failed.
-        if (child.Process != IntPtr.Zero) {
-          uint state = WaitForSingleObject(child.Process, 0);
-          Require(state == 0 || state == 258);
-          if (state == 258) Require(TerminateProcess(child.Process, 1));
-        }
-        // Membership survives an exited intermediate process, unlike a PID
-        // tree. Query it on every exit path before closing the owning handle.
-        // https://learn.microsoft.com/windows/win32/procthread/job-objects
-        Require(TerminateJobObject(commandJob, 1));
-        var cleanup = System.Diagnostics.Stopwatch.StartNew();
-        while (true) {
-          Accounting info;
-          Require(QueryInformationJobObject(commandJob, 1, out info, (uint)Marshal.SizeOf(typeof(Accounting)), IntPtr.Zero));
-          if (info.ActiveProcesses == 0 && (child.Process == IntPtr.Zero || WaitForSingleObject(child.Process, 0) == 0)) break;
-          if (cleanup.ElapsedMilliseconds >= 1000) throw new TimeoutException("Owned Windows processes did not finish cleanup");
-          Thread.Sleep(10);
-        }
-      } finally {
-        if (child.Thread != IntPtr.Zero) CloseHandle(child.Thread);
-        if (child.Process != IntPtr.Zero) CloseHandle(child.Process);
-        Require(CloseHandle(commandJob));
+      must(api.TerminateJobObject(job, 1), 'owned process termination')
+      const accounting = new BigUint64Array(6)
+      const fields = new DataView(accounting.buffer)
+      const deadline = performance.now() + 1000
+      while (true) {
+        must(api.QueryInformationJobObject(job, 1, ptr(accounting), accounting.byteLength, null), 'owned process accounting')
+        if (fields.getUint32(40, true) === 0 && (childProcess === 0n || api.WaitForSingleObject(childProcess, 0) === 0)) break
+        if (performance.now() >= deadline) throw new Error('Owned Windows processes did not finish cleanup')
+        await Bun.sleep(10)
       }
     }
-  }
-}
-'@
-exit [StacksOwnedCheck]::Run('${bun.replaceAll("'","''")}', '${script}')
-`;return[powershell,"-NoLogo","-NoProfile","-NonInteractive","-OutputFormat","Text","-EncodedCommand",Buffer.from(source,"utf16le").toString("base64")]}export function windowsCheckHost(command,windowsTaskkill){return`
-setInterval(() => {}, 60_000)
-let command
-let stopRequested = false
-let consumerPermitted = false
-let start
-const permitted = new Promise(resolve => { start = resolve })
-process.on('message', async (message) => {
-  if (message?.stop) {
-    stopRequested = true
-    start()
-    if (command) {
-      try {
-        if (!consumerPermitted) {
-          // Retain the Bun host until the preparation helper's native process
-          // handle and output have completed, even when taskkill returns first.
-          const killed = Bun.spawnSync([${JSON.stringify(windowsTaskkill)}, '/PID', String(command.pid), '/T', '/F'], { stdout: 'pipe', stderr: 'pipe', timeout: 2000 })
-          // spawnSync prevents Bun from observing a concurrent helper exit.
-          // A stale exitCode is not evidence of a live process. The completion
-          // below still requires BOTH the native exit and the output drain;
-          // retain taskkill diagnostics only if that bounded cleanup fails.
-          if (killed.exitCode !== 0)
-            process.send({ preparationCleanupError: 'Native preparation cleanup failed (taskkill exit ' + killed.exitCode + '): ' + killed.stdout.toString().trim().slice(0, 1000) + ' ' + killed.stderr.toString().trim().slice(0, 1000) })
-        }
-        else {
-          command.stdin.write(new Uint8Array([2]))
-          await command.stdin.flush()
-        }
-      } catch (error) { process.send({ error: String(error) }) }
+    finally {
+      if (childThread !== 0n) api.CloseHandle(childThread)
+      if (childProcess !== 0n) api.CloseHandle(childProcess)
+      must(api.CloseHandle(job), 'owned job handle disposal')
     }
-  } else if (message?.prepare) start()
-  else if (message?.start && command && !stopRequested) {
-    consumerPermitted = true
-    command.stdin.write(new Uint8Array([1]))
-    await command.stdin.flush()
   }
-})
-process.send({ ready: true })
-await permitted
-if (stopRequested) process.send({ exitCode: 1 })
-else {
+}
+catch (error) { failure += (failure ? '; ' : '') + String(error) }
+// Keep the lifetime job open until the parent disposes this owned Bun process.
+// Closing it here would kill this host before its completion report is sent.
+if (failure) process.send({ error: failure })
+else process.send({ exitCode })
+`}export async function runProjectScripts(options){const timeoutMs=options.timeoutMs??300000;if(!Number.isSafeInteger(timeoutMs)||timeoutMs<=0||!options.scripts.length||options.scripts.some((name)=>!/^[a-z0-9][\w:.-]*$/i.test(name))||new Set(options.scripts).size!==options.scripts.length)fail("Project checks need unique script names and a positive execution budget");const receipt={bunVersion:"",checks:[]},manifestPath=join(options.cwd,"package.json"),originalManifest=readFileSync(manifestPath,"utf8"),manifest=JSON.parse(originalManifest),bun=Bun.which("bun",{cwd:options.cwd});if(!bun)fail("Consumer Bun executable is unavailable");const probe=Bun.spawnSync([bun,"--version"],{cwd:options.cwd,stdout:"pipe",stderr:"pipe",timeout:1e4}),bunVersion=probe.stdout.toString().trim();if(probe.exitCode!==0||!/^\d+\.\d+\.\d+(?:-[\w.-]+)?$/.test(bunVersion)||!Bun.semver.satisfies(bunVersion,manifest.engines?.bun??">=1.3.0"))fail("Consumer Bun executable does not satisfy the declared toolchain");receipt.bunVersion=bunVersion;const hostDirectory=mkdtempSync(join(tmpdir(),"stacks-project-host-"));try{const hostConfig=join(hostDirectory,"bunfig.toml");writeFileSync(hostConfig,`preload = []
+`);for(const script of options.scripts){if(!Object.hasOwn(manifest.scripts??{},script)||typeof manifest.scripts?.[script]!=="string"||!manifest.scripts[script].trim())fail(`Consumer script ${script} is not declared`);options.signal?.throwIfAborted();const windows=process.platform==="win32",command=[bun,"run",script];let reportExit=()=>{},reportFailure=()=>{};const reported=new Promise((resolve,reject)=>{reportExit=resolve;reportFailure=reject});let interrupted=!1;const host=windows?windowsCheckHost(bun,script):`setInterval(() => {}, 60_000)
   try {
-    command = Bun.spawn(${JSON.stringify(command)}, { stdin: 'pipe', stdout: 'pipe', stderr: 'inherit' })
-    process.send({ helperPid: command.pid })
-    const forward = async () => {
-      const reader = command.stdout.getReader()
-      let prefix = Buffer.alloc(0)
-      let ready = false
-      try {
-        while (true) {
-          const next = await reader.read()
-          if (next.done) break
-          if (ready) { await Bun.write(Bun.stdout, next.value); continue }
-          prefix = Buffer.concat([prefix, Buffer.from(next.value)])
-          const line = prefix.indexOf(10)
-          if (line < 0) {
-            if (prefix.length > 128) throw new Error('Native ownership readiness was malformed')
-            continue
-          }
-          if (prefix.subarray(0, line).toString().trimEnd() !== 'STACKS_OWNED_CHECK_READY')
-            throw new Error('Native ownership readiness was malformed')
-          ready = true
-          // The outer owner must observe native readiness before granting
-          // startup. Until then it can dispose only preparation with taskkill.
-          process.send({ nativeReady: true })
-          if (prefix.length > line + 1) await Bun.write(Bun.stdout, prefix.subarray(line + 1))
-          prefix = Buffer.alloc(0)
-        }
-        if (!ready && !stopRequested) throw new Error('Native ownership readiness was not received')
-      } finally { reader.releaseLock() }
-    }
-    const [code] = await Promise.all([command.exited, forward()])
-    process.send({ exitCode: code })
+    const command = Bun.spawn(${JSON.stringify(command)}, { stdin: 'ignore', stdout: 'inherit', stderr: 'inherit' })
+    process.send({ exitCode: await command.exited })
   } catch (error) {
-    if (command && !consumerPermitted) {
-      try { command.kill('SIGKILL'); await command.exited } catch {}
-    }
     process.send({ error: String(error) })
   }
-}
-`}export async function runProjectScripts(options){const timeoutMs=options.timeoutMs??300000;if(!Number.isSafeInteger(timeoutMs)||timeoutMs<=0||!options.scripts.length||options.scripts.some((name)=>!/^[a-z0-9][\w:.-]*$/i.test(name))||new Set(options.scripts).size!==options.scripts.length)fail("Project checks need unique script names and a positive execution budget");const receipt={bunVersion:"",checks:[]},manifestPath=join(options.cwd,"package.json"),originalManifest=readFileSync(manifestPath,"utf8"),manifest=JSON.parse(originalManifest),bun=Bun.which("bun",{cwd:options.cwd});if(!bun)fail("Consumer Bun executable is unavailable");const probe=Bun.spawnSync([bun,"--version"],{cwd:options.cwd,stdout:"pipe",stderr:"pipe",timeout:1e4}),bunVersion=probe.stdout.toString().trim();if(probe.exitCode!==0||!/^\d+\.\d+\.\d+(?:-[\w.-]+)?$/.test(bunVersion)||!Bun.semver.satisfies(bunVersion,manifest.engines?.bun??">=1.3.0"))fail("Consumer Bun executable does not satisfy the declared toolchain");receipt.bunVersion=bunVersion;for(const script of options.scripts){if(!Object.hasOwn(manifest.scripts??{},script)||typeof manifest.scripts?.[script]!=="string"||!manifest.scripts[script].trim())fail(`Consumer script ${script} is not declared`);options.signal?.throwIfAborted();const windowsTaskkill=process.platform==="win32"?Bun.which("taskkill.exe"):void 0,powershell=process.platform==="win32"?Bun.which("powershell.exe")??Bun.which("pwsh.exe"):void 0;if(process.platform==="win32"&&(!windowsTaskkill||!powershell))fail("Windows process ownership requires taskkill.exe and PowerShell with .NET Add-Type");const command=powershell?windowsCheckCommand(powershell,bun,script):[bun,"run",script];let reportExit=()=>{},reportFailure=()=>{};const reported=new Promise((resolve,reject)=>{reportExit=resolve;reportFailure=reject});let interrupted=!1,windowsHelperPid,windowsNativeReady=!1,preparationCleanupError="";const host=powershell?windowsCheckHost(command,windowsTaskkill):`
-setInterval(() => {}, 60_000)
-try {
-  const command = Bun.spawn(${JSON.stringify(command)}, { stdin: 'ignore', stdout: 'inherit', stderr: 'inherit' })
-  process.send({ exitCode: await command.exited })
-} catch (error) {
-  process.send({ error: String(error) })
-}
-`,child=Bun.spawn([bun,"--eval",host],{cwd:options.cwd,env:{...process.env,...options.env},stdin:"ignore",stdout:"pipe",stderr:"pipe",detached:process.platform!=="win32",ipc(message){if(powershell&&message?.ready===!0)try{child.send(interrupted?{stop:!0}:{prepare:!0})}catch(error){reportFailure(Error(`Consumer script ${script} control channel failed: ${String(error)}`))}else if(powershell&&message?.nativeReady===!0){windowsNativeReady=!0;try{child.send(interrupted?{stop:!0}:{start:!0})}catch(error){reportFailure(Error(`Consumer script ${script} native control channel failed: ${String(error)}`))}}else if(powershell&&Number.isSafeInteger(message?.helperPid)&&message.helperPid>0)windowsHelperPid=message.helperPid;else if(powershell&&typeof message?.preparationCleanupError==="string")preparationCleanupError=message.preparationCleanupError;else if(Number.isInteger(message?.exitCode))reportExit(message.exitCode);else reportFailure(Error(`Consumer script ${script} host failed: ${message?.error??"invalid completion report"}`))}}),pipes=[child.stdout,child.stderr].map((stream,index)=>({reader:stream.getReader(),done:!1,source:index===0?"stdout":"stderr"}));let teardown,announceStop=()=>{};const stopped=new Promise((resolve)=>{announceStop=resolve}),waitWithin=async(promise,milliseconds)=>{let timer;try{return await Promise.race([promise,new Promise((_,reject)=>{timer=setTimeout(()=>reject(Error("Process or output cleanup did not finish within its grace period")),milliseconds)})])}finally{if(timer)clearTimeout(timer)}};let draining;const dispose=(preserveOutput)=>{if(teardown)return teardown;teardown=(async()=>{const errors=[];if(windowsTaskkill){if(!preserveOutput)try{child.send({stop:!0});await waitWithin(reported,windowsNativeReady?1000:3000)}catch(error){errors.push(`Native Windows cleanup completion was not confirmed: ${error instanceof Error?error.message:String(error)}${preparationCleanupError?`; ${preparationCleanupError}`:""}`)}try{const result=Bun.spawnSync([windowsTaskkill,"/PID",String(child.pid),"/T","/F"],{stdout:"ignore",stderr:"ignore",timeout:2000});if(result.exitCode!==0)errors.push(`taskkill failed with exit code ${result.exitCode}`)}catch{errors.push("Windows process-tree cleanup could not execute taskkill")}if(windowsHelperPid){const until=performance.now()+1000;let alive=!0;while(alive){try{process.kill(windowsHelperPid,0)}catch(error){if(error.code==="ESRCH")alive=!1;else break}if(!alive||performance.now()>=until)break;await new Promise((resolve)=>setTimeout(resolve,10))}if(alive)errors.push("Native Windows helper disposal was not confirmed")}if(errors.length)try{child.kill("SIGKILL")}catch{errors.push("Direct child cleanup also failed")}}else{const signalGroup=(signal)=>{try{process.kill(-child.pid,signal)}catch(error){if(error.code!=="ESRCH"){const cause=error;errors.push(`Process-group ${signal} failed (code=${cause.code}, errno=${cause.errno}, message=${cause.message})`)}}};signalGroup("SIGTERM");await new Promise((resolve)=>setTimeout(resolve,500));signalGroup("SIGKILL");const until=performance.now()+1000;let pendingError="";while(!0){try{process.kill(-child.pid,0)}catch(error){const cause=error;if(cause.code==="ESRCH")break;pendingError=`signal=0, code=${cause.code}, errno=${cause.errno}, message=${cause.message}`;if(cause.code!=="EPERM"){errors.push(`Process-group disposal could not be confirmed (${pendingError})`);break}}if(performance.now()>=until){errors.push(`Owned process group remained after cleanup${pendingError?` (${pendingError})`:""}`);break}await new Promise((resolve)=>setTimeout(resolve,10))}}if(preserveOutput)try{await waitWithin(draining,1000)}catch{errors.push("Output draining exceeded its cleanup grace period")}const close=Promise.all([...pipes.filter((pipe)=>!pipe.done).map(async(pipe)=>{try{await pipe.reader.cancel()}catch{errors.push("Output reader cancellation failed")}}),child.exited]);try{await waitWithin(close,1000)}catch{errors.push("Process or output cleanup exceeded its grace period")}if(errors.length)fail(`Consumer script ${script} cleanup failed: ${errors.join("; ")}`)})();teardown.catch(()=>{});return teardown},stop=()=>{if(interrupted)return;interrupted=!0;dispose(!1);announceStop()};child.exited.then((code)=>{if(!teardown)reportFailure(Error(`Consumer script ${script} host exited before reporting completion (exit code ${code})`))});const deadline=setTimeout(stop,timeoutMs);options.signal?.addEventListener("abort",stop,{once:!0});if(options.signal?.aborted)stop();const output=createHash("sha256");async function drain(pipe){try{while(!0){const next=await pipe.reader.read();if(next.done)break;output.update(next.value);options.onOutput?.(next.value.slice(),pipe.source)}}finally{pipe.done=!0;pipe.reader.releaseLock()}}let exitCode;try{draining=Promise.all(pipes.map(drain)).then(()=>{});draining.catch(reportFailure);const completion=reported.then((exitCode)=>({kind:"completed",exitCode})),result=await Promise.race([completion,stopped.then(()=>({kind:"interrupted"}))]);if(result.kind==="interrupted"||interrupted){await teardown;fail(`Consumer script ${script} was interrupted or exceeded its execution budget`)}exitCode=result.exitCode;await dispose(!0)}catch(error){const wasInterrupted=interrupted;stop();try{await teardown}catch(cleanupError){if(wasInterrupted)fail(`Consumer script ${script} was interrupted or exceeded its execution budget; ${cleanupError instanceof Error?cleanupError.message:String(cleanupError)}`);throw cleanupError}throw error}finally{clearTimeout(deadline);options.signal?.removeEventListener("abort",stop)}if(interrupted||options.signal?.aborted)fail(`Consumer script ${script} was interrupted or exceeded its execution budget`);if(exitCode!==0)fail(`Consumer script ${script} failed with exit code ${exitCode}`);if(readFileSync(manifestPath,"utf8")!==originalManifest)fail(`Consumer script ${script} changed the project manifest`);receipt.checks.push({script,exitCode:0,outputSha256:output.digest("hex")})}return receipt}
+  `,child=Bun.spawn([bun,`--config=${hostConfig}`,"--eval",host],{cwd:options.cwd,env:{...process.env,...options.env},stdin:"ignore",stdout:"pipe",stderr:"pipe",detached:process.platform!=="win32",ipc(message){if(windows&&message?.ready===!0)try{child.send(interrupted?{stop:!0}:{start:!0})}catch(error){reportFailure(Error(`Consumer script ${script} control channel failed: ${String(error)}`))}else if(Number.isInteger(message?.exitCode))reportExit(message.exitCode);else reportFailure(Error(`Consumer script ${script} host failed: ${message?.error??"invalid completion report"}`))}}),pipes=[child.stdout,child.stderr].map((stream,index)=>({reader:stream.getReader(),done:!1,source:index===0?"stdout":"stderr"}));let teardown,announceStop=()=>{};const stopped=new Promise((resolve)=>{announceStop=resolve}),waitWithin=async(promise,milliseconds)=>{let timer;try{return await Promise.race([promise,new Promise((_,reject)=>{timer=setTimeout(()=>reject(Error("Process or output cleanup did not finish within its grace period")),milliseconds)})])}finally{if(timer)clearTimeout(timer)}};let draining;const dispose=(preserveOutput)=>{if(teardown)return teardown;teardown=(async()=>{const errors=[];if(windows){if(!preserveOutput)try{child.send({stop:!0});await waitWithin(reported,1000)}catch(error){errors.push(`Native Windows cleanup completion was not confirmed: ${error instanceof Error?error.message:String(error)}`)}try{child.kill("SIGKILL")}catch{errors.push("Native Windows owner disposal failed")}}else{const signalGroup=(signal)=>{try{process.kill(-child.pid,signal)}catch(error){if(error.code!=="ESRCH"){const cause=error;errors.push(`Process-group ${signal} failed (code=${cause.code}, errno=${cause.errno}, message=${cause.message})`)}}};signalGroup("SIGTERM");await new Promise((resolve)=>setTimeout(resolve,500));signalGroup("SIGKILL");const until=performance.now()+1000;let pendingError="";while(!0){try{process.kill(-child.pid,0)}catch(error){const cause=error;if(cause.code==="ESRCH")break;pendingError=`signal=0, code=${cause.code}, errno=${cause.errno}, message=${cause.message}`;if(cause.code!=="EPERM"){errors.push(`Process-group disposal could not be confirmed (${pendingError})`);break}}if(performance.now()>=until){errors.push(`Owned process group remained after cleanup${pendingError?` (${pendingError})`:""}`);break}await new Promise((resolve)=>setTimeout(resolve,10))}}if(preserveOutput)try{await waitWithin(draining,1000)}catch{errors.push("Output draining exceeded its cleanup grace period")}const close=Promise.all([...pipes.filter((pipe)=>!pipe.done).map(async(pipe)=>{try{await pipe.reader.cancel()}catch{errors.push("Output reader cancellation failed")}}),child.exited]);try{await waitWithin(close,1000)}catch{errors.push("Process or output cleanup exceeded its grace period")}if(errors.length)fail(`Consumer script ${script} cleanup failed: ${errors.join("; ")}`)})();teardown.catch(()=>{});return teardown},stop=()=>{if(interrupted)return;interrupted=!0;dispose(!1);announceStop()};child.exited.then((code)=>{if(!teardown)reportFailure(Error(`Consumer script ${script} host exited before reporting completion (exit code ${code})`))});const deadline=setTimeout(stop,timeoutMs);options.signal?.addEventListener("abort",stop,{once:!0});if(options.signal?.aborted)stop();const output=createHash("sha256");async function drain(pipe){try{while(!0){const next=await pipe.reader.read();if(next.done)break;output.update(next.value);options.onOutput?.(next.value.slice(),pipe.source)}}finally{pipe.done=!0;pipe.reader.releaseLock()}}let exitCode;try{draining=Promise.all(pipes.map(drain)).then(()=>{});draining.catch(reportFailure);const completion=reported.then((exitCode)=>({kind:"completed",exitCode})),result=await Promise.race([completion,stopped.then(()=>({kind:"interrupted"}))]);if(result.kind==="interrupted"||interrupted){await teardown;fail(`Consumer script ${script} was interrupted or exceeded its execution budget`)}exitCode=result.exitCode;await dispose(!0)}catch(error){const wasInterrupted=interrupted;stop();try{await teardown}catch(cleanupError){if(wasInterrupted)fail(`Consumer script ${script} was interrupted or exceeded its execution budget; ${cleanupError instanceof Error?cleanupError.message:String(cleanupError)}`);throw cleanupError}throw error}finally{clearTimeout(deadline);options.signal?.removeEventListener("abort",stop)}if(interrupted||options.signal?.aborted)fail(`Consumer script ${script} was interrupted or exceeded its execution budget`);if(exitCode!==0)fail(`Consumer script ${script} failed with exit code ${exitCode}`);if(readFileSync(manifestPath,"utf8")!==originalManifest)fail(`Consumer script ${script} changed the project manifest`);receipt.checks.push({script,exitCode:0,outputSha256:output.digest("hex")})}return receipt}finally{rmSync(hostDirectory,{recursive:!0,force:!0})}}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/actions",
   "type": "module",
   "sideEffects": false,
-  "version": "0.75.279",
+  "version": "0.75.283",
   "description": "The Stacks actions.",
   "author": "Chris Breuer",
   "contributors": [
@@ -66,55 +66,55 @@
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@stacksjs/action-runner": "0.75.279",
-    "@stacksjs/ai": "0.75.279",
-    "@stacksjs/analytics": "0.75.279",
-    "@stacksjs/api": "0.75.279",
-    "@stacksjs/auth": "0.75.279",
-    "@stacksjs/build": "0.75.279",
+    "@stacksjs/action-runner": "0.75.283",
+    "@stacksjs/ai": "0.75.283",
+    "@stacksjs/analytics": "0.75.283",
+    "@stacksjs/api": "0.75.283",
+    "@stacksjs/auth": "0.75.283",
+    "@stacksjs/build": "0.75.283",
     "@stacksjs/bumpx": "^0.2.26",
     "@stacksjs/bunpress": "^0.2.15",
-    "@stacksjs/cli": "0.75.279",
-    "@stacksjs/cloud": "0.75.279",
-    "@stacksjs/cms": "0.75.279",
-    "@stacksjs/components": "0.2.671",
-    "@stacksjs/config": "0.75.279",
-    "@stacksjs/database": "0.75.279",
-    "@stacksjs/desktop-build": "0.75.279",
-    "@stacksjs/dns": "0.75.279",
-    "@stacksjs/enums": "0.75.279",
-    "@stacksjs/env": "0.75.279",
-    "@stacksjs/error-handling": "0.75.279",
-    "@stacksjs/github": "0.75.279",
+    "@stacksjs/cli": "0.75.283",
+    "@stacksjs/cloud": "0.75.283",
+    "@stacksjs/cms": "0.75.283",
+    "@stacksjs/components": "0.2.676",
+    "@stacksjs/config": "0.75.283",
+    "@stacksjs/database": "0.75.283",
+    "@stacksjs/desktop-build": "0.75.283",
+    "@stacksjs/dns": "0.75.283",
+    "@stacksjs/enums": "0.75.283",
+    "@stacksjs/env": "0.75.283",
+    "@stacksjs/error-handling": "0.75.283",
+    "@stacksjs/github": "0.75.283",
     "@stacksjs/gitit": "^0.2.5",
-    "@stacksjs/i18n": "0.75.279",
-    "@stacksjs/image": "0.75.279",
-    "@stacksjs/logging": "0.75.279",
+    "@stacksjs/i18n": "0.75.283",
+    "@stacksjs/image": "0.75.283",
+    "@stacksjs/logging": "0.75.283",
     "@stacksjs/logsmith": "^0.2.11",
-    "@stacksjs/mobile": "0.75.279",
-    "@stacksjs/orm": "0.75.279",
-    "@stacksjs/path": "0.75.279",
-    "@stacksjs/payments": "0.75.279",
-    "@stacksjs/queue": "0.75.279",
-    "@stacksjs/registry": "0.75.279",
-    "@stacksjs/router": "0.75.279",
+    "@stacksjs/mobile": "0.75.283",
+    "@stacksjs/orm": "0.75.283",
+    "@stacksjs/path": "0.75.283",
+    "@stacksjs/payments": "0.75.283",
+    "@stacksjs/queue": "0.75.283",
+    "@stacksjs/registry": "0.75.283",
+    "@stacksjs/router": "0.75.283",
     "@stacksjs/rpx": "^0.11.54",
-    "@stacksjs/scheduler": "0.75.279",
-    "@stacksjs/search-engine": "0.75.279",
-    "@stacksjs/security": "0.75.279",
-    "@stacksjs/server": "0.75.279",
-    "@stacksjs/sites": "0.75.279",
-    "@stacksjs/storage": "0.75.279",
-    "@stacksjs/strings": "0.75.279",
-    "@stacksjs/stx": "0.2.671",
+    "@stacksjs/scheduler": "0.75.283",
+    "@stacksjs/search-engine": "0.75.283",
+    "@stacksjs/security": "0.75.283",
+    "@stacksjs/server": "0.75.283",
+    "@stacksjs/sites": "0.75.283",
+    "@stacksjs/storage": "0.75.283",
+    "@stacksjs/strings": "0.75.283",
+    "@stacksjs/stx": "0.2.676",
     "@stacksjs/tlsx": "^0.13.19",
     "@stacksjs/ts-cloud": "^0.16.58",
     "@stacksjs/ts-md": "^0.1.1",
-    "@stacksjs/tunnel": "0.75.279",
-    "@stacksjs/types": "0.75.279",
-    "@stacksjs/utils": "0.75.279",
-    "@stacksjs/whois": "0.75.279",
-    "bun-plugin-stx": "0.2.671"
+    "@stacksjs/tunnel": "0.75.283",
+    "@stacksjs/types": "0.75.283",
+    "@stacksjs/utils": "0.75.283",
+    "@stacksjs/whois": "0.75.283",
+    "bun-plugin-stx": "0.2.676"
   },
   "peerDependencies": {
     "craft-native": ">=0.0.301",
@@ -129,7 +129,7 @@
     }
   },
   "devDependencies": {
-    "@stacksjs/validation": "0.75.279",
+    "@stacksjs/validation": "0.75.283",
     "better-dx": "^0.2.24"
   }
 }