create-kudzu 0.1.159 → 0.1.160

package/README.md

@@ -16,7 +16,7 @@ Use `--no-install` to create the files without installing dependencies.
 
 ## Optional AI authoring guidance
 
-`create-kudzu@0.1.159` provides optional local AI developer tools with managed check cancellation:
+`create-kudzu@0.1.160` provides optional local AI developer tools with managed check cancellation:
 
 ```bash
 npm create kudzu@latest my-app -- --ai
@@ -55,9 +55,11 @@ npm run ai -- check --timeout-ms 600000
   process group on Unix or process tree on Windows and reports failure.
   Under the existing `KUDZU_AI_DELIVERY_GROUP=1` managed-runner contract, Unix
   checks inherit their outer group so a hard group cancellation also reaches
-  their ordinary descendants. A check-local timeout or interruption uses native
-  `ps` PID/parent-PID inspection to stop only that check's descendant snapshot,
-  preserving sibling work; inspection errors are reported as failures.
+  their ordinary descendants. On Linux, a check-local timeout or interruption
+  reads only that check's `/proc` subtree, including worker-thread children.
+  Other Unix hosts use bounded `ps` PID/parent-PID inspection. Both stop only
+  the check's descendant snapshot, preserve sibling work, and report inspection
+  errors as failures.
 - Full stdout/stderr are retained in a unique `.kudzu-ai/check-*/output.log`.
   Long successful checks return only the last 512 bytes. Failed checks return
   bounded head/tail excerpts and the first recognized diagnostic in the first

package/ai.mjs

@@ -1,4 +1,5 @@
 import { spawn, spawnSync } from "node:child_process"
+import { readFileSync, readdirSync } from "node:fs"
 import { mkdir, mkdtemp, open, readFile, realpath } from "node:fs/promises"
 import { dirname, join } from "node:path"
 import { fileURLToPath } from "node:url"
@@ -56,7 +57,24 @@ export async function check(root, timeoutMs = 300000) {
           if (killed.status !== 0) error = killed.error?.message ?? killed.stderr ?? "Could not terminate check tree"
         } else {
           const pids = [managed ? child.pid : -child.pid]
-          if (managed) {
+          if (managed && process.platform === "linux") {
+            // Inspect only this subtree; worker threads can also own child processes.
+            for (let index = 0; index < pids.length; index++) {
+              let tasks
+              try { tasks = readdirSync(`/proc/${pids[index]}/task`) } catch (failure) {
+                if (failure.code !== "ENOENT") error = failure.message
+                continue
+              }
+              for (const task of tasks) try {
+                const text = readFileSync(`/proc/${pids[index]}/task/${task}/children`, "utf8").trim()
+                const children = text ? text.split(/\s+/).map(Number) : []
+                if (children.some(pid => !Number.isSafeInteger(pid) || pid <= 1 || pid === process.pid)) throw new Error("Invalid managed check process children")
+                for (const pid of children) if (!pids.includes(pid)) pids.push(pid)
+              } catch (failure) {
+                if (failure.code !== "ENOENT") error = failure.message
+              }
+            }
+          } else if (managed) {
             // Keep the outer group alive on this tool's timeout; stop only its ordinary descendants.
             const table = spawnSync("ps", ["-A", "-o", "pid=", "-o", "ppid="], { encoding: "utf8", timeout: 5000, maxBuffer: 1024 * 1024 })
             if (table.status !== 0) error = table.error?.message || table.stderr?.trim() || "Could not inspect managed check descendants"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-kudzu",
-  "version": "0.1.159",
+  "version": "0.1.160",
   "description": "Create a Kudzu project",
   "type": "module",
   "license": "MIT",