factory-factory 0.3.21 → 0.4.0

package/dist/src/backend/lib/request-trust.test.js

@@ -0,0 +1,64 @@
+import { describe, expect, it } from 'vitest';
+import { isLoopbackRemoteAddress, isOriginAllowed, isTrustedLocalAddress } from './request-trust.js';
+describe('request trust helpers', () => {
+    describe('isLoopbackRemoteAddress', () => {
+        it('accepts IPv4, IPv4-mapped IPv6, and IPv6 loopback addresses', () => {
+            expect(isLoopbackRemoteAddress('127.0.0.1')).toBe(true);
+            expect(isLoopbackRemoteAddress('127.42.0.9')).toBe(true);
+            expect(isLoopbackRemoteAddress('::ffff:127.0.0.1')).toBe(true);
+            expect(isLoopbackRemoteAddress('::1')).toBe(true);
+        });
+        it('rejects non-loopback addresses', () => {
+            expect(isLoopbackRemoteAddress('172.17.0.1')).toBe(false);
+            expect(isLoopbackRemoteAddress('203.0.113.10')).toBe(false);
+            expect(isLoopbackRemoteAddress(undefined)).toBe(false);
+        });
+    });
+    describe('isTrustedLocalAddress', () => {
+        it('accepts loopback addresses without extra CIDR configuration', () => {
+            expect(isTrustedLocalAddress('127.0.0.1')).toBe(true);
+        });
+        it('accepts addresses covered by configured trusted local CIDRs', () => {
+            expect(isTrustedLocalAddress('172.17.0.1', ['172.17.0.1/32'])).toBe(true);
+            expect(isTrustedLocalAddress('172.18.0.42', ['172.18.0.0/16'])).toBe(true);
+        });
+        it('rejects addresses outside configured trusted local CIDRs', () => {
+            expect(isTrustedLocalAddress('172.18.0.42', ['172.17.0.1/32'])).toBe(false);
+            expect(isTrustedLocalAddress('203.0.113.10', ['172.17.0.1/32'])).toBe(false);
+            expect(isTrustedLocalAddress('172.17.0.1', ['not-a-cidr'])).toBe(false);
+        });
+    });
+    describe('isOriginAllowed', () => {
+        it('accepts exact allowed origins', () => {
+            expect(isOriginAllowed('https://example.com', ['https://example.com'])).toBe(true);
+        });
+        it('treats loopback host aliases as equivalent for the same scheme and port', () => {
+            expect(isOriginAllowed('http://127.0.0.1:3000', ['http://localhost:3000'])).toBe(true);
+            expect(isOriginAllowed('http://localhost:3000', ['http://127.0.0.1:3000'])).toBe(true);
+            expect(isOriginAllowed('http://127.42.0.9:3000', ['http://localhost:3000'])).toBe(true);
+        });
+        it('treats explicit default ports as canonical loopback origins', () => {
+            expect(isOriginAllowed('http://127.0.0.1:80', ['http://localhost'])).toBe(true);
+            expect(isOriginAllowed('http://localhost', ['http://127.0.0.1:80'])).toBe(true);
+            expect(isOriginAllowed('https://127.0.0.1:443', ['https://localhost'])).toBe(true);
+            expect(isOriginAllowed('https://localhost', ['https://127.0.0.1:443'])).toBe(true);
+        });
+        it('does not match loopback aliases across schemes or ports', () => {
+            expect(isOriginAllowed('http://127.0.0.1:3001', ['http://localhost:3000'])).toBe(false);
+            expect(isOriginAllowed('https://127.0.0.1:3000', ['http://localhost:3000'])).toBe(false);
+        });
+        it('does not normalize non-loopback hosts', () => {
+            expect(isOriginAllowed('https://app.example.com', ['https://example.com'])).toBe(false);
+            expect(isOriginAllowed('not a url', ['http://localhost:3000'])).toBe(false);
+        });
+        it('rejects loopback aliases with URL credentials or extra components', () => {
+            expect(isOriginAllowed('http://evil@localhost:3000', ['http://localhost:3000'])).toBe(false);
+            expect(isOriginAllowed('http://localhost:3000/path', ['http://127.0.0.1:3000'])).toBe(false);
+            expect(isOriginAllowed('http://localhost:3000?x=1', ['http://127.0.0.1:3000'])).toBe(false);
+            expect(isOriginAllowed('http://localhost:3000#hash', ['http://127.0.0.1:3000'])).toBe(false);
+            expect(isOriginAllowed('http://localhost:3000/', ['http://127.0.0.1:3000'])).toBe(false);
+            expect(isOriginAllowed('http://localhost:80/', ['http://127.0.0.1'])).toBe(false);
+        });
+    });
+});
+//# sourceMappingURL=request-trust.test.js.map

package/dist/src/backend/lib/request-trust.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-trust.test.js","sourceRoot":"","sources":["../../../../src/backend/lib/request-trust.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAElG,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5D,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,CAAC,qBAAqB,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,CAAC,qBAAqB,CAAC,aAAa,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,CAAC,qBAAqB,CAAC,aAAa,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,CAAC,qBAAqB,CAAC,cAAc,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7E,MAAM,CAAC,qBAAqB,CAAC,YAAY,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,CAAC,eAAe,CAAC,qBAAqB,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;YACjF,MAAM,CAAC,eAAe,CAAC,uBAAuB,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvF,MAAM,CAAC,eAAe,CAAC,uBAAuB,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvF,MAAM,CAAC,eAAe,CAAC,wBAAwB,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,CAAC,eAAe,CAAC,qBAAqB,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChF,MAAM,CAAC,eAAe,CAAC,kBAAkB,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChF,MAAM,CAAC,eAAe,CAAC,uBAAuB,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnF,MAAM,CAAC,eAAe,CAAC,mBAAmB,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,CAAC,eAAe,CAAC,uBAAuB,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxF,MAAM,CAAC,eAAe,CAAC,wBAAwB,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,eAAe,CAAC,yBAAyB,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxF,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;YAC3E,MAAM,CAAC,eAAe,CAAC,4BAA4B,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7F,MAAM,CAAC,eAAe,CAAC,4BAA4B,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7F,MAAM,CAAC,eAAe,CAAC,2BAA2B,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5F,MAAM,CAAC,eAAe,CAAC,4BAA4B,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7F,MAAM,CAAC,eAAe,CAAC,wBAAwB,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzF,MAAM,CAAC,eAAe,CAAC,sBAAsB,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/backend/lib/session-model.js

@@ -1,4 +1,4 @@
-const CLAUDE_MODEL_ALIASES = new Set(['opus', 'sonnet', 'haiku']);
+const CLAUDE_MODEL_ALIASES = new Set(['opus', 'sonnet', 'haiku', 'fable']);
 export const DEFAULT_SESSION_MODEL_BY_PROVIDER = {
     CLAUDE: 'sonnet',
     CODEX: 'default',

package/dist/src/backend/lib/session-model.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-model.js","sourceRoot":"","sources":["../../../../src/backend/lib/session-model.ts"],"names":[],"mappings":"AAEA,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,iCAAiC,GAAoC;IAChF,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,SAAS;CACjB,CAAC;AAEF,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,CACL,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACxB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CACxB,CAAC;AACJ,CAAC;AAKD,MAAM,UAAU,gCAAgC,CAC9C,KAAgC,EAChC,QAAyB;IAEzB,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAgC,EAChC,QAAyB,EACzB,aAA6B;IAE7B,OAAO,CACL,gCAAgC,CAAC,KAAK,EAAE,QAAQ,CAAC;QACjD,gCAAgC,CAAC,aAAa,EAAE,QAAQ,CAAC;QACzD,iCAAiC,CAAC,QAAQ,CAAC,CAC5C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"session-model.js","sourceRoot":"","sources":["../../../../src/backend/lib/session-model.ts"],"names":[],"mappings":"AAEA,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,iCAAiC,GAAoC;IAChF,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,SAAS;CACjB,CAAC;AAEF,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,CACL,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACxB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CACxB,CAAC;AACJ,CAAC;AAKD,MAAM,UAAU,gCAAgC,CAC9C,KAAgC,EAChC,QAAyB;IAEzB,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAgC,EAChC,QAAyB,EACzB,aAA6B;IAE7B,OAAO,CACL,gCAAgC,CAAC,KAAK,EAAE,QAAQ,CAAC;QACjD,gCAAgC,CAAC,aAAa,EAAE,QAAQ,CAAC;QACzD,iCAAiC,CAAC,QAAQ,CAAC,CAC5C,CAAC;AACJ,CAAC"}

package/dist/src/backend/lib/shell.d.ts

@@ -3,6 +3,12 @@ export interface ExecResult {
     stdout: string;
     stderr: string;
     code: number;
+    signal?: NodeJS.Signals | null;
+    timedOut?: boolean;
+    aborted?: boolean;
+    maxBufferExceeded?: boolean;
+    stdoutOverflowed?: boolean;
+    stderrOverflowed?: boolean;
 }
 export interface ExecShellOptions {
     cwd?: string;
@@ -10,11 +16,17 @@ export interface ExecShellOptions {
     env?: NodeJS.ProcessEnv;
     maxBuffer?: number;
 }
+export interface ExecCommandOptions extends SpawnOptions {
+    maxBuffer?: number;
+    timeout?: number;
+    killSignal?: NodeJS.Signals | number;
+    forceKillAfterTimeout?: number;
+}
 export declare function escapeShellArg(arg: string): string;
 export declare function escapeForOsascript(str: string): string;
 export declare function validateBranchName(name: string): string;
 export declare function validateSessionName(name: string): string;
-export declare function execCommand(command: string, args: string[], options?: SpawnOptions): Promise<ExecResult>;
+export declare function execCommand(command: string, args: string[], options?: ExecCommandOptions): Promise<ExecResult>;
 export declare function execShell(command: string, options?: ExecShellOptions): Promise<{
     stdout: string;
     stderr: string;

package/dist/src/backend/lib/shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../../src/backend/lib/shell.ts"],"names":[],"mappings":"AAaA,OAAO,EAAQ,KAAK,YAAY,EAAS,MAAM,oBAAoB,CAAC;AAWpE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAkBD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAMD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOtD;AAmBD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKvD;AAaD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKxD;AAgBD,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,UAAU,CAAC,CA6BrB;AAWD,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAQ7C;AAaD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAE3E;AASD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAEjF;AAaD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAGpF;AASD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAUf;AAKD,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzF"}
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../../src/backend/lib/shell.ts"],"names":[],"mappings":"AAaA,OAAO,EAAQ,KAAK,YAAY,EAAS,MAAM,oBAAoB,CAAC;AAWpE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC;IACrC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAkBD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAMD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOtD;AAmBD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKvD;AAaD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKxD;AAgBD,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,UAAU,CAAC,CAiKrB;AAWD,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAQ7C;AAaD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAE3E;AASD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAEjF;AAaD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAGpF;AASD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAUf;AAKD,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzF"}

package/dist/src/backend/lib/shell.js

@@ -34,25 +34,136 @@ export function validateSessionName(name) {
 }
 export function execCommand(command, args, options) {
     return new Promise((resolve, reject) => {
-        const proc = spawn(command, args, { ...options, shell: false });
-        let stdout = '';
-        let stderr = '';
-        const stdoutDecoder = new StringDecoder('utf8');
-        const stderrDecoder = new StringDecoder('utf8');
-        proc.stdout?.on('data', (data) => {
-            stdout += stdoutDecoder.write(data);
-        });
-        proc.stderr?.on('data', (data) => {
-            stderr += stderrDecoder.write(data);
+        const { forceKillAfterTimeout = 5000, killSignal = 'SIGTERM', maxBuffer = LIB_LIMITS.execCommandDefaultMaxBufferBytes, signal, timeout = LIB_LIMITS.execCommandDefaultTimeoutMs, ...spawnOptions } = options ?? {};
+        const proc = spawn(command, args, { ...spawnOptions, shell: false });
+        let timedOut = false;
+        let aborted = false;
+        let maxBufferExceeded = false;
+        let settled = false;
+        let forceKillTimeout;
+        const stdoutOutput = {
+            text: '',
+            bytes: 0,
+            overflowed: false,
+            decoder: new StringDecoder('utf8'),
+        };
+        const stderrOutput = {
+            text: '',
+            bytes: 0,
+            overflowed: false,
+            decoder: new StringDecoder('utf8'),
+        };
+        const maxBufferEnabled = typeof maxBuffer === 'number' && maxBuffer > 0;
+        const cleanupCallbacks = [];
+        const terminate = () => {
+            if (proc.exitCode === null && proc.signalCode === null) {
+                proc.kill(killSignal);
+                if (killSignal !== 'SIGKILL' && forceKillAfterTimeout > 0 && !forceKillTimeout) {
+                    forceKillTimeout = setTimeout(() => {
+                        if (proc.exitCode === null && proc.signalCode === null) {
+                            proc.kill('SIGKILL');
+                        }
+                    }, forceKillAfterTimeout);
+                    forceKillTimeout.unref?.();
+                }
+            }
+        };
+        const appendOutput = (output, data) => {
+            if (output.overflowed) {
+                return;
+            }
+            if (!(maxBufferEnabled && output.bytes + data.length > maxBuffer)) {
+                output.text += output.decoder.write(data);
+                output.bytes += data.length;
+                return;
+            }
+            const remainingBytes = Math.max(maxBuffer - output.bytes, 0);
+            if (remainingBytes > 0) {
+                output.text += output.decoder.write(data.subarray(0, remainingBytes));
+            }
+            output.bytes = maxBuffer;
+            output.overflowed = true;
+            maxBufferExceeded = true;
+            terminate();
+        };
+        cleanupCallbacks.push(() => {
+            if (forceKillTimeout) {
+                clearTimeout(forceKillTimeout);
+            }
         });
+        if (typeof timeout === 'number' && timeout > 0) {
+            const timeoutId = setTimeout(() => {
+                if (proc.exitCode !== null || proc.signalCode !== null) {
+                    return;
+                }
+                timedOut = true;
+                terminate();
+            }, timeout);
+            timeoutId.unref?.();
+            cleanupCallbacks.push(() => clearTimeout(timeoutId));
+        }
+        if (signal) {
+            if (signal.aborted) {
+                aborted = true;
+                terminate();
+            }
+            else {
+                const abortHandler = () => {
+                    aborted = true;
+                    terminate();
+                };
+                signal.addEventListener('abort', abortHandler, { once: true });
+                cleanupCallbacks.push(() => signal.removeEventListener('abort', abortHandler));
+            }
+        }
+        proc.stdout?.on('data', (data) => appendOutput(stdoutOutput, data));
+        proc.stderr?.on('data', (data) => appendOutput(stderrOutput, data));
         proc.on('error', (error) => {
+            for (const cleanup of cleanupCallbacks) {
+                cleanup();
+            }
+            if (settled) {
+                return;
+            }
+            settled = true;
             reject(new Error(`Failed to execute ${command}: ${error.message}`));
         });
-        proc.on('close', (code) => {
+        proc.on('close', (code, signalCode) => {
+            for (const cleanup of cleanupCallbacks) {
+                cleanup();
+            }
+            if (settled) {
+                return;
+            }
+            settled = true;
+            const finalStdout = stdoutOutput.text + stdoutOutput.decoder.end();
+            let finalStderr = stderrOutput.text + stderrOutput.decoder.end();
+            if (timedOut) {
+                finalStderr = [finalStderr, `${command} timed out after ${timeout}ms`]
+                    .filter(Boolean)
+                    .join('\n');
+            }
+            else if (maxBufferExceeded) {
+                finalStderr = [
+                    finalStderr,
+                    `${command} exceeded maxBuffer of ${maxBuffer} bytes; output was truncated`,
+                ]
+                    .filter(Boolean)
+                    .join('\n');
+            }
+            else if (aborted) {
+                finalStderr = [finalStderr, `${command} was aborted`].filter(Boolean).join('\n');
+            }
             resolve({
-                stdout: stdout + stdoutDecoder.end(),
-                stderr: stderr + stderrDecoder.end(),
+                stdout: finalStdout,
+                stderr: finalStderr,
                 code: code ?? -1,
+                signal: signalCode,
+                timedOut,
+                aborted,
+                maxBufferExceeded,
+                stdoutOverflowed: stdoutOutput.overflowed,
+                stderrOverflowed: stderrOutput.overflowed,
             });
         });
     });

package/dist/src/backend/lib/shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../../../src/backend/lib/shell.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,IAAI,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAmClC,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC;AAMD,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,GAAG;SACP,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,wBAAwB,CAAC;SAC7C,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAUD,SAAS,iBAAiB,CAAC,IAAY;IAGrC,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACrF,CAAC;AAKD,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAMD,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAKD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAgBD,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,IAAc,EACd,OAAsB;IAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QAEhD,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,CAAC;gBACN,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE;gBACpC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE;gBACpC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC;aACjB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,OAA0B;IAE1B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE;QAClD,GAAG,EAAE,OAAO,EAAE,GAAG;QACjB,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,GAAG,EAAE,OAAO,EAAE,GAAG;QACjB,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,UAAU,CAAC,0BAA0B;KACvE,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAaD,MAAM,UAAU,UAAU,CAAC,IAAc,EAAE,GAAW;IACpD,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AAC3C,CAAC;AASD,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,IAAc;IAC1D,OAAO,WAAW,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAaD,MAAM,UAAU,WAAW,CAAC,IAAc,EAAE,UAAmB;IAC7D,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,OAAO,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,OAAe,EACf,KAAc;IAEd,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAEnD,IAAI,MAAM,GAAG,yBAAyB,cAAc,iBAAiB,YAAY,GAAG,CAAC;IACrF,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,CAAC,iBAAiB,MAAM,GAAG,CAAC,CAAC;AAC9C,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa,EAAE,OAAe;IACxE,MAAM,WAAW,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../../../src/backend/lib/shell.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,IAAI,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAgDlC,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC;AAMD,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,GAAG;SACP,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,wBAAwB,CAAC;SAC7C,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAUD,SAAS,iBAAiB,CAAC,IAAY;IAGrC,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACrF,CAAC;AAKD,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAMD,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAKD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAgBD,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,IAAc,EACd,OAA4B;IAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,EACJ,qBAAqB,GAAG,IAAI,EAC5B,UAAU,GAAG,SAAS,EACtB,SAAS,GAAG,UAAU,CAAC,gCAAgC,EACvD,MAAM,EACN,OAAO,GAAG,UAAU,CAAC,2BAA2B,EAChD,GAAG,YAAY,EAChB,GAAG,OAAO,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAErE,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,gBAA4C,CAAC;QACjD,MAAM,YAAY,GAAG;YACnB,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,CAAC;YACR,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC;SACnC,CAAC;QACF,MAAM,YAAY,GAAG;YACnB,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,CAAC;YACR,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC;SACnC,CAAC;QACF,MAAM,gBAAgB,GAAG,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,CAAC,CAAC;QAExE,MAAM,gBAAgB,GAAsB,EAAE,CAAC;QAE/C,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACvD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtB,IAAI,UAAU,KAAK,SAAS,IAAI,qBAAqB,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC/E,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;wBACjC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;4BACvD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACvB,CAAC;oBACH,CAAC,EAAE,qBAAqB,CAAC,CAAC;oBAC1B,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,CACnB,MAKC,EACD,IAAY,EACN,EAAE;YACR,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YAED,IAAI,CAAC,CAAC,gBAAgB,IAAI,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1C,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC7D,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;YACzB,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;YACzB,iBAAiB,GAAG,IAAI,CAAC;YACzB,SAAS,EAAE,CAAC;QACd,CAAC,CAAC;QACF,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE;YACzB,IAAI,gBAAgB,EAAE,CAAC;gBACrB,YAAY,CAAC,gBAAgB,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;oBACvD,OAAO;gBACT,CAAC;gBACD,QAAQ,GAAG,IAAI,CAAC;gBAChB,SAAS,EAAE,CAAC;YACd,CAAC,EAAE,OAAO,CAAC,CAAC;YACZ,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACpB,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS,EAAE,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,GAAG,EAAE;oBACxB,OAAO,GAAG,IAAI,CAAC;oBACf,SAAS,EAAE,CAAC;gBACd,CAAC,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;QAE5E,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;QAE5E,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;gBACvC,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE;YACpC,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;gBACvC,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YAEf,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACnE,IAAI,WAAW,GAAG,YAAY,CAAC,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjE,IAAI,QAAQ,EAAE,CAAC;gBACb,WAAW,GAAG,CAAC,WAAW,EAAE,GAAG,OAAO,oBAAoB,OAAO,IAAI,CAAC;qBACnE,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;iBAAM,IAAI,iBAAiB,EAAE,CAAC;gBAC7B,WAAW,GAAG;oBACZ,WAAW;oBACX,GAAG,OAAO,0BAA0B,SAAS,8BAA8B;iBAC5E;qBACE,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;iBAAM,IAAI,OAAO,EAAE,CAAC;gBACnB,WAAW,GAAG,CAAC,WAAW,EAAE,GAAG,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnF,CAAC;YAED,OAAO,CAAC;gBACN,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,WAAW;gBACnB,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC;gBAChB,MAAM,EAAE,UAAU;gBAClB,QAAQ;gBACR,OAAO;gBACP,iBAAiB;gBACjB,gBAAgB,EAAE,YAAY,CAAC,UAAU;gBACzC,gBAAgB,EAAE,YAAY,CAAC,UAAU;aAC1C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,OAA0B;IAE1B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE;QAClD,GAAG,EAAE,OAAO,EAAE,GAAG;QACjB,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,GAAG,EAAE,OAAO,EAAE,GAAG;QACjB,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,UAAU,CAAC,0BAA0B;KACvE,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAaD,MAAM,UAAU,UAAU,CAAC,IAAc,EAAE,GAAW;IACpD,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AAC3C,CAAC;AASD,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,IAAc;IAC1D,OAAO,WAAW,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAaD,MAAM,UAAU,WAAW,CAAC,IAAc,EAAE,UAAmB;IAC7D,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,OAAO,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,OAAe,EACf,KAAc;IAEd,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAEnD,IAAI,MAAM,GAAG,yBAAyB,cAAc,iBAAiB,YAAY,GAAG,CAAC;IACrF,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,CAAC,iBAAiB,MAAM,GAAG,CAAC,CAAC;AAC9C,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa,EAAE,OAAe;IACxE,MAAM,WAAW,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/src/backend/lib/shell.test.js

@@ -29,6 +29,78 @@ describe('execCommand', () => {
         const result = await execCommand(process.execPath, ['-e', script]);
         expect(result.code).not.toBe(0);
     });
+    it('kills the process and marks the result when timeout expires', async () => {
+        const result = await execCommand(process.execPath, ['-e', 'setTimeout(() => {}, 5000);'], {
+            timeout: 25,
+        });
+        expect(result.code).not.toBe(0);
+        expect(result.timedOut).toBe(true);
+        expect(result.stderr).toContain('timed out after 25ms');
+    });
+    it('does not mark a successful process timed out while waiting for stdio close', async () => {
+        const script = `
+      const { spawn } = require('node:child_process');
+      const child = spawn(process.execPath, ['-e', 'setTimeout(() => {}, 500);'], {
+        detached: true,
+        stdio: ['ignore', 'inherit', 'inherit'],
+      });
+      child.unref();
+      process.exit(0);
+    `;
+        const result = await execCommand(process.execPath, ['-e', script], {
+            timeout: 200,
+        });
+        expect(result.code).toBe(0);
+        expect(result.timedOut).toBe(false);
+        expect(result.stderr).not.toContain('timed out after 200ms');
+    });
+    it('force-kills the process when it ignores the timeout signal', async () => {
+        const script = "process.on('SIGTERM', () => {}); setTimeout(() => {}, 5000);";
+        const result = await execCommand(process.execPath, ['-e', script], {
+            forceKillAfterTimeout: 25,
+            timeout: 100,
+        });
+        expect(result.code).not.toBe(0);
+        expect(result.signal).toBe('SIGKILL');
+        expect(result.timedOut).toBe(true);
+    });
+    it('kills the process and marks the result when the abort signal fires', async () => {
+        const controller = new AbortController();
+        const promise = execCommand(process.execPath, ['-e', 'setTimeout(() => {}, 5000);'], {
+            signal: controller.signal,
+        });
+        setTimeout(() => controller.abort(), 25).unref();
+        const result = await promise;
+        expect(result.code).not.toBe(0);
+        expect(result.aborted).toBe(true);
+        expect(result.stderr).toContain('was aborted');
+    });
+    it('kills the process and truncates stdout when maxBuffer is exceeded', async () => {
+        const script = `
+      process.stdout.write('a'.repeat(1024));
+      setTimeout(() => {}, 5000);
+    `;
+        const result = await execCommand(process.execPath, ['-e', script], { maxBuffer: 16 });
+        expect(result.code).not.toBe(0);
+        expect(result.stdout).toBe('a'.repeat(16));
+        expect(result.maxBufferExceeded).toBe(true);
+        expect(result.stdoutOverflowed).toBe(true);
+        expect(result.stderrOverflowed).toBe(false);
+        expect(result.stderr).toContain('exceeded maxBuffer of 16 bytes');
+    });
+    it('kills the process and truncates stderr when maxBuffer is exceeded', async () => {
+        const script = `
+      process.stderr.write('b'.repeat(1024));
+      setTimeout(() => {}, 5000);
+    `;
+        const result = await execCommand(process.execPath, ['-e', script], { maxBuffer: 16 });
+        expect(result.code).not.toBe(0);
+        expect(result.stderr).toContain('b'.repeat(16));
+        expect(result.maxBufferExceeded).toBe(true);
+        expect(result.stdoutOverflowed).toBe(false);
+        expect(result.stderrOverflowed).toBe(true);
+        expect(result.stderr).toContain('exceeded maxBuffer of 16 bytes');
+    });
 });
 describe('escapeForOsascript', () => {
     it('does not leave a dangling backslash when truncation boundary ends with a quote', () => {

package/dist/src/backend/lib/shell.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell.test.js","sourceRoot":"","sources":["../../../../src/backend/lib/shell.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE1D,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,GAAG;;;;;KAKd,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAEnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,GAAG;;;;;KAKd,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAEnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAG,uCAAuC,CAAC;QAEvD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAEnE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,GAAG,CAAC,CAAC,GAAG,CAAC;QAExE,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;QAEzE,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"shell.test.js","sourceRoot":"","sources":["../../../../src/backend/lib/shell.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE1D,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,GAAG;;;;;KAKd,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAEnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,GAAG;;;;;KAKd,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAEnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAG,uCAAuC,CAAC;QAEvD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAEnE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,6BAA6B,CAAC,EAAE;YACxF,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,MAAM,GAAG;;;;;;;;KAQd,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACjE,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAG,8DAA8D,CAAC;QAE9E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACjE,qBAAqB,EAAE,EAAE;YACzB,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,6BAA6B,CAAC,EAAE;YACnF,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;QAE7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,GAAG;;;KAGd,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,GAAG;;;KAGd,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,GAAG,CAAC,CAAC,GAAG,CAAC;QAExE,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;QAEzE,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/backend/lib/topic-broadcaster.d.ts

@@ -0,0 +1,18 @@
+import type { WebSocket } from 'ws';
+interface BroadcastLogger {
+    error(message: string, error: Error): void;
+}
+export declare class TopicBroadcaster<TKey = string> {
+    private readonly logger;
+    private readonly defaultDescription;
+    private readonly topics;
+    constructor(logger: BroadcastLogger, defaultDescription?: string);
+    subscribe(topic: TKey, ws: WebSocket, onEmpty?: () => void): () => void;
+    subscriberCount(topic: TKey): number;
+    hasSubscribers(topic: TKey): boolean;
+    subscribers(topic: TKey): ReadonlySet<WebSocket>;
+    broadcast(topic: TKey, payload: unknown): number;
+    clear(): void;
+}
+export {};
+//# sourceMappingURL=topic-broadcaster.d.ts.map

package/dist/src/backend/lib/topic-broadcaster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-broadcaster.d.ts","sourceRoot":"","sources":["../../../../src/backend/lib/topic-broadcaster.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAGpC,UAAU,eAAe;IACvB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CAC5C;AAID,qBAAa,gBAAgB,CAAC,IAAI,GAAG,MAAM;IAIvC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAJrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;gBAGvC,MAAM,EAAE,eAAe,EACvB,kBAAkB,SAAsB;IAa3D,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAoBvE,eAAe,CAAC,KAAK,EAAE,IAAI,GAAG,MAAM;IAIpC,cAAc,CAAC,KAAK,EAAE,IAAI,GAAG,OAAO;IAQpC,WAAW,CAAC,KAAK,EAAE,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC;IAShD,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM;IAiBhD,KAAK,IAAI,IAAI;CAGd"}

package/dist/src/backend/lib/topic-broadcaster.js

@@ -0,0 +1,56 @@
+import { safeSend } from './websocket-send.js';
+const EMPTY_SET = new Set();
+export class TopicBroadcaster {
+    logger;
+    defaultDescription;
+    topics = new Map();
+    constructor(logger, defaultDescription = 'WebSocket message') {
+        this.logger = logger;
+        this.defaultDescription = defaultDescription;
+    }
+    subscribe(topic, ws, onEmpty) {
+        let sockets = this.topics.get(topic);
+        if (!sockets) {
+            sockets = new Set();
+            this.topics.set(topic, sockets);
+        }
+        sockets.add(ws);
+        return () => {
+            const current = this.topics.get(topic);
+            if (!current?.delete(ws)) {
+                return;
+            }
+            if (current.size === 0) {
+                this.topics.delete(topic);
+                onEmpty?.();
+            }
+        };
+    }
+    subscriberCount(topic) {
+        return this.topics.get(topic)?.size ?? 0;
+    }
+    hasSubscribers(topic) {
+        return this.subscriberCount(topic) > 0;
+    }
+    subscribers(topic) {
+        return this.topics.get(topic) ?? EMPTY_SET;
+    }
+    broadcast(topic, payload) {
+        const sockets = this.topics.get(topic);
+        if (!sockets || sockets.size === 0) {
+            return 0;
+        }
+        const message = typeof payload === 'string' ? payload : JSON.stringify(payload);
+        let sent = 0;
+        for (const ws of sockets) {
+            if (safeSend(ws, message, this.logger, this.defaultDescription)) {
+                sent++;
+            }
+        }
+        return sent;
+    }
+    clear() {
+        this.topics.clear();
+    }
+}
+//# sourceMappingURL=topic-broadcaster.js.map

package/dist/src/backend/lib/topic-broadcaster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-broadcaster.js","sourceRoot":"","sources":["../../../../src/backend/lib/topic-broadcaster.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAM5C,MAAM,SAAS,GAA2B,IAAI,GAAG,EAAE,CAAC;AAEpD,MAAM,OAAO,gBAAgB;IAIR;IACA;IAJF,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE1D,YACmB,MAAuB,EACvB,qBAAqB,mBAAmB;QADxC,WAAM,GAAN,MAAM,CAAiB;QACvB,uBAAkB,GAAlB,kBAAkB,CAAsB;IACxD,CAAC;IAYJ,SAAS,CAAC,KAAW,EAAE,EAAa,EAAE,OAAoB;QACxD,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,OAAO,GAAG,EAAE;YACV,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1B,OAAO,EAAE,EAAE,CAAC;YACd,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,KAAW;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,cAAc,CAAC,KAAW;QACxB,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAMD,WAAW,CAAC,KAAW;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IAC7C,CAAC;IAOD,SAAS,CAAC,KAAW,EAAE,OAAgB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChF,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAChE,IAAI,EAAE,CAAC;YACT,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF"}

package/dist/src/backend/lib/topic-broadcaster.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=topic-broadcaster.test.d.ts.map

package/dist/src/backend/lib/topic-broadcaster.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-broadcaster.test.d.ts","sourceRoot":"","sources":["../../../../src/backend/lib/topic-broadcaster.test.ts"],"names":[],"mappings":""}

package/dist/src/backend/lib/topic-broadcaster.test.js

@@ -0,0 +1,126 @@
+import { describe, expect, it, vi } from 'vitest';
+import { WS_READY_STATE } from '../../backend/constants/websocket.js';
+import { TopicBroadcaster } from './topic-broadcaster.js';
+class MockWebSocket {
+    readyState = WS_READY_STATE.OPEN;
+    send = vi.fn();
+    asWebSocket() {
+        return this;
+    }
+}
+function createBroadcaster() {
+    return new TopicBroadcaster({ error: vi.fn() });
+}
+describe('TopicBroadcaster', () => {
+    describe('subscribe', () => {
+        it('tracks subscribers per topic', () => {
+            const broadcaster = createBroadcaster();
+            const ws = new MockWebSocket();
+            broadcaster.subscribe('topic-a', ws.asWebSocket());
+            expect(broadcaster.subscriberCount('topic-a')).toBe(1);
+            expect(broadcaster.subscriberCount('topic-b')).toBe(0);
+            expect(broadcaster.hasSubscribers('topic-a')).toBe(true);
+        });
+        it('removes the subscription when the disposer runs', () => {
+            const broadcaster = createBroadcaster();
+            const ws = new MockWebSocket();
+            const dispose = broadcaster.subscribe('topic-a', ws.asWebSocket());
+            dispose();
+            expect(broadcaster.subscriberCount('topic-a')).toBe(0);
+            expect(broadcaster.hasSubscribers('topic-a')).toBe(false);
+        });
+        it('fires onEmpty only when the last subscriber leaves', () => {
+            const broadcaster = createBroadcaster();
+            const onEmpty = vi.fn();
+            const ws1 = new MockWebSocket();
+            const ws2 = new MockWebSocket();
+            const dispose1 = broadcaster.subscribe('topic-a', ws1.asWebSocket(), onEmpty);
+            const dispose2 = broadcaster.subscribe('topic-a', ws2.asWebSocket(), onEmpty);
+            dispose1();
+            expect(onEmpty).not.toHaveBeenCalled();
+            dispose2();
+            expect(onEmpty).toHaveBeenCalledTimes(1);
+        });
+        it('is safe to dispose twice', () => {
+            const broadcaster = createBroadcaster();
+            const onEmpty = vi.fn();
+            const ws = new MockWebSocket();
+            const dispose = broadcaster.subscribe('topic-a', ws.asWebSocket(), onEmpty);
+            dispose();
+            dispose();
+            expect(onEmpty).toHaveBeenCalledTimes(1);
+        });
+        it('keeps distinct topics independent', () => {
+            const broadcaster = createBroadcaster();
+            const ws1 = new MockWebSocket();
+            const ws2 = new MockWebSocket();
+            broadcaster.subscribe('topic-a', ws1.asWebSocket());
+            broadcaster.subscribe('topic-b', ws2.asWebSocket());
+            broadcaster.broadcast('topic-a', { hello: 'a' });
+            expect(ws1.send).toHaveBeenCalledWith(JSON.stringify({ hello: 'a' }));
+            expect(ws2.send).not.toHaveBeenCalled();
+        });
+    });
+    describe('broadcast', () => {
+        it('sends the serialized payload to every subscriber of the topic', () => {
+            const broadcaster = createBroadcaster();
+            const ws1 = new MockWebSocket();
+            const ws2 = new MockWebSocket();
+            broadcaster.subscribe('topic-a', ws1.asWebSocket());
+            broadcaster.subscribe('topic-a', ws2.asWebSocket());
+            const sent = broadcaster.broadcast('topic-a', { type: 'test' });
+            expect(sent).toBe(2);
+            expect(ws1.send).toHaveBeenCalledWith(JSON.stringify({ type: 'test' }));
+            expect(ws2.send).toHaveBeenCalledWith(JSON.stringify({ type: 'test' }));
+        });
+        it('passes string payloads through without re-serializing', () => {
+            const broadcaster = createBroadcaster();
+            const ws = new MockWebSocket();
+            broadcaster.subscribe('topic-a', ws.asWebSocket());
+            broadcaster.broadcast('topic-a', 'raw-message');
+            expect(ws.send).toHaveBeenCalledWith('raw-message');
+        });
+        it('skips sockets that are not OPEN', () => {
+            const broadcaster = createBroadcaster();
+            const closed = new MockWebSocket();
+            closed.readyState = WS_READY_STATE.CLOSED;
+            const open = new MockWebSocket();
+            broadcaster.subscribe('topic-a', closed.asWebSocket());
+            broadcaster.subscribe('topic-a', open.asWebSocket());
+            const sent = broadcaster.broadcast('topic-a', { type: 'test' });
+            expect(sent).toBe(1);
+            expect(closed.send).not.toHaveBeenCalled();
+            expect(open.send).toHaveBeenCalled();
+        });
+        it('continues past a socket whose send throws', () => {
+            const logger = { error: vi.fn() };
+            const broadcaster = new TopicBroadcaster(logger);
+            const throwing = new MockWebSocket();
+            throwing.send.mockImplementation(() => {
+                throw new Error('socket closing');
+            });
+            const healthy = new MockWebSocket();
+            broadcaster.subscribe('topic-a', throwing.asWebSocket());
+            broadcaster.subscribe('topic-a', healthy.asWebSocket());
+            const sent = broadcaster.broadcast('topic-a', { type: 'test' });
+            expect(sent).toBe(1);
+            expect(healthy.send).toHaveBeenCalled();
+            expect(logger.error).toHaveBeenCalled();
+        });
+        it('returns 0 for a topic with no subscribers', () => {
+            const broadcaster = createBroadcaster();
+            expect(broadcaster.broadcast('missing', { type: 'test' })).toBe(0);
+        });
+    });
+    describe('subscribers', () => {
+        it('exposes a live view for per-socket fan-out decisions', () => {
+            const broadcaster = createBroadcaster();
+            const ws = new MockWebSocket();
+            broadcaster.subscribe('topic-a', ws.asWebSocket());
+            const view = broadcaster.subscribers('topic-a');
+            expect([...view]).toEqual([ws.asWebSocket()]);
+            expect([...broadcaster.subscribers('missing')]).toEqual([]);
+        });
+    });
+});
+//# sourceMappingURL=topic-broadcaster.test.js.map