gina 0.7.0 → 0.7.1

package/framework/{v0.7.0 → v0.7.1}/lib/cmd/framework/status.js

@@ -1,9 +1,12 @@
 var fs          = require('fs');
 const {spawn}       = require('child_process');
-const {execSync}    = require('child_process');
+// #B665 S2 (2026-09-27) — no shell: the daemons are listed through inc/ps-titles.js, and a pid's
+// liveness is checked with process.kill(pid, 0).
+// const {execSync}    = require('child_process');
 //const { debug } = require('console');
 
 var CmdHelper   = require('./../helper');
+var psTitles    = require('./inc/ps-titles');
 var console     = lib.logger;
 /**
  * @module gina/lib/cmd/framework/status
@@ -46,41 +49,43 @@ function Status(opt, cmd) {
     }
 
     /**
-     * Discovers processes matching `gina-v*` that are not tracked by PID files
-     * and writes PID files for them, or kills any zombie processes.
+     * Discovers the current user's framework daemons (`gina-v<version>` titles)
+     * that are not tracked by PID files and writes PID files for them, or kills
+     * any zombie processes. The listing comes from `inc/ps-titles.js`, which runs
+     * `ps` without a shell and accepts only a daemon title (#B677).
      * @inner
      * @private
      * @param {string[]} pidFiles - Array of PID filenames already found in GINA_RUNDIR
      */
     var checkUnregistered = function(pidFiles) {
         // Those not in file
-        var list = execSync("ps -ef | grep -v grep | grep 'gina-v' | awk '{print $2\" \"$8\" \"$9}'").toString().replace(/\n$/, '').split(/\n/g);
-
-
-        if (!list.length || list[0] == "") {
-            return;
-        }
+        // #B677 (2026-09-27) — the current user's processes only, and a daemon title only:
+        // `ps -ef` listed every user's processes, and any `gina-`-titled process's title became
+        // a pid-file name that `_()` normalises, so `gina-v/../../x` wrote outside the run
+        // directory. `ps` runs from an argument vector (#B665 S2).
+        // was: var list = execSync("ps -ef | grep -v grep | grep 'gina-v' | awk '{print $2\" \"$8\" \"$9}'").toString().replace(/\n$/, '').split(/\n/g);
+        var list = psTitles.listOwnDaemons();
 
         // console.debug('pids list ', list);
         for (let p=0, len=list.length; p<len; p++) {
-            if ( !/^\d+\s+gina\-/.test(list[p]) ) {
-                continue;
-            }
-
-            let pidArr = list[p].split(/\s/);
-            let pid = pidArr[0];
-            let title = pidArr[1];
-            let isZombie = ( typeof(pidArr[2]) != 'undefined' && /defunct/.test(pidArr[2]) ) ? true : false;
+            let pid = list[p].pid;
+            let title = list[p].title;
 
             // remove defunct process
-            if (isZombie) {
-                execSync("kill -9 "+ pid);
+            if (list[p].zombie) {
+                // was: execSync("kill -9 "+ pid);
+                try {
+                    process.kill(pid, 'SIGKILL');
+                } catch (killErr) {
+                    console.debug('Could not signal defunct process '+ pid +': '+ killErr.message);
+                }
                 continue;
             }
 
             let file = title +'.pid';
             if ( pidFiles.indexOf( file ) < 0) {
-                fs.writeFileSync( _(GINA_RUNDIR +'/'+ file, true), pid );
+                // a string: writeFileSync refuses a number
+                fs.writeFileSync( _(GINA_RUNDIR +'/'+ file, true), ''+ pid );
                 pidFiles.push(title +'.pid');
             }
         }
@@ -88,7 +93,9 @@ function Status(opt, cmd) {
     }
 
     /**
-     * Reads PID files and prints running framework versions to the logger.
+     * Reads PID files and prints running framework versions to the logger. On
+     * macOS and Linux a pid is running when `process.kill(pid, 0)` succeeds or
+     * fails with EPERM; any other pid file is removed.
      * @inner
      * @private
      * @param {object} opt
@@ -116,12 +123,24 @@ function Status(opt, cmd) {
             }
 
             if ( !isWin32() ) {
+                // #B665 S2 (2026-09-27) — liveness in-process, as framework:init's checkRunningPids:
+                // the pid file's content reached `ps -a <content>` through sh, and on a host
+                // without `ps` (a slim container image) every live framework pid file was
+                // removed. EPERM means alive (another user's process); ESRCH, or content that is
+                // not a pid, removes the file, as a failing `ps -a` did.
+                // was: let found = execSync("ps -a "+ pid).toString().replace(/\n$/, '').split(/\n/g);
+                var n = psTitles.parsePid(pid);
                 try {
-                    let found = execSync("ps -a "+ pid).toString().replace(/\n$/, '').split(/\n/g);
+                    if (n === null) {
+                        throw new Error('not a pid: '+ pid);
+                    }
+                    process.kill(n, 0);
                 } catch (err) {
-                    console.debug('file to remove: '+ _(GINA_RUNDIR +'/'+ file));
-                    fs.unlinkSync(_(GINA_RUNDIR +'/'+ file));
-                    continue;
+                    if ( !err || err.code !== 'EPERM' ) {
+                        console.debug('file to remove: '+ _(GINA_RUNDIR +'/'+ file));
+                        fs.unlinkSync(_(GINA_RUNDIR +'/'+ file));
+                        continue;
+                    }
                 }
             }
 

package/framework/{v0.7.0 → v0.7.1}/lib/cmd/framework/tail.js

@@ -41,7 +41,7 @@ function Tail(opt, cmd) {
     process.title = 'gina-tail';
     var self        = {};
     var nIntervId   = null;
-    var mqPortFile  = _(getTmpDir() +'/mq-listener-v'+ GINA_VERSION +'.port', true);
+    var mqPortFile  = _(getArgvDir() +'/mq-listener-v'+ GINA_VERSION +'.port', true); // #B704 — the framework home's run dir, never the shared tmp dir
     // To allow auto restart on: JavaScript heap out of memory
     var cmdUsedToStart = null;
 

package/framework/{v0.7.0 → v0.7.1}/lib/cmd/helper.js

@@ -1,4 +1,6 @@
 const { execSync } = require('child_process');
+// #B665 (2026-09-27) — execFileSync: the auto-link children run from argument vectors.
+const { execFileSync } = require('child_process');
 var fs          = require('fs');
 var os          = require('os');
 const { promisify } = require('util');
@@ -7,6 +9,7 @@ var merge       = lib.merge;
 var inherits    = lib.inherits;
 var Collection  = lib.Collection;
 var helpers     = require( getPath('gina').helpers);
+var escapeRegex = require('./bundle/inc/name-rewrite').escapeRegex;
 /**
  * @module gina/lib/cmd/helper
  */
@@ -67,6 +70,9 @@ function CmdHelper(cmd, client, debug) {
         // Params forward: when a command line is running another command line
         // E.g: gina link or gina link-node-modules
         paramsStringified: '',
+        // The same params as a list, one argument each: the argument vector the
+        // link and link-node-modules children run from, without a shell (#B665)
+        paramsArgv: [],
         nodeParams : [],
         debugPort: debug.port,
         debugBrkEnabled: debug.brkEnabled,
@@ -136,7 +142,10 @@ function CmdHelper(cmd, client, debug) {
     /**
      * Parses process.argv for `--key[=value]` tokens.
      * Tokens listed in the command group's arguments.json are stored in
-     * cmd.params; all other `--` tokens go to cmd.nodeParams (forwarded to Node).
+     * cmd.params, and forwarded as `--key=value` both in cmd.paramsStringified
+     * (a string, for display) and in cmd.paramsArgv (one list entry per token:
+     * the argument vector of the auto-link children, #B665); all other `--`
+     * tokens go to cmd.nodeParams (forwarded to Node).
      * Also detects --inspect-brk and sets cmd.debugBrkEnabled accordingly.
      *
      * @inner
@@ -203,6 +212,7 @@ function CmdHelper(cmd, client, debug) {
                 if ( cmdArguments.indexOf('--' + arr[0]) > -1 ) {
                     cmd.params[arr[0]] = arr[1];
                     cmd.paramsStringified += ' --' + arr[0] +'='+ arr[1];
+                    cmd.paramsArgv.push('--' + arr[0] +'='+ arr[1]);
                 } else {
                     cmd.nodeParams.push('--' + arr[0] +'='+ arr[1]);
                 }
@@ -212,6 +222,7 @@ function CmdHelper(cmd, client, debug) {
                 if ( cmdArguments.indexOf(process.argv[a]) > -1 ) {
                     cmd.params[ process.argv[a].replace(/--/, '') ] = true;
                     cmd.paramsStringified += ' '+process.argv[a] +'='+ true;
+                    cmd.paramsArgv.push(process.argv[a] +'='+ true);
                 } else {
                     cmd.nodeParams.push(process.argv[a]);
                 }
@@ -440,19 +451,27 @@ function CmdHelper(cmd, client, debug) {
                                 return false;
                             }
                             cmd.projects[cmd.projectName].def_prefix = realGinaPrefix;
+                            // #B665 — the old paths are matched literally and the new ones
+                            // inserted verbatim: a path holding `(` or `[` failed its own prefix
+                            // test, a `.` matched any character, and a `$&` in the new path
+                            // expanded to the matched text.
                             let oldHomedir          = cmd.projects[cmd.projectName].homedir;
-                            let reOldHomedir        = new RegExp('^'+ oldHomedir);
+                            // was: let reOldHomedir        = new RegExp('^'+ oldHomedir);
+                            let reOldHomedir        = new RegExp('^' + escapeRegex(oldHomedir));
                             let oldProjectPath      = cmd.projects[cmd.projectName].path;
-                            let reOldProjectPath    = new RegExp('^'+ oldProjectPath);
+                            // was: let reOldProjectPath    = new RegExp('^'+ oldProjectPath);
+                            let reOldProjectPath    = new RegExp('^' + escapeRegex(oldProjectPath));
                             for ( let p in cmd.projects[cmd.projectName] ) {
                                 if ( typeof(cmd.projects[cmd.projectName][p]) == 'string' ) {
                                     if ( reOldHomedir.test(cmd.projects[cmd.projectName][p]) ) {
-                                        cmd.projects[cmd.projectName][p] = cmd.projects[cmd.projectName][p].replace(reOldHomedir, newHomeDir);
+                                        // was: cmd.projects[cmd.projectName][p] = cmd.projects[cmd.projectName][p].replace(reOldHomedir, newHomeDir);
+                                        cmd.projects[cmd.projectName][p] = cmd.projects[cmd.projectName][p].replace(reOldHomedir, function() { return newHomeDir; });
                                         continue;
                                     }
 
                                     if ( reOldProjectPath.test(cmd.projects[cmd.projectName][p]) ) {
-                                        cmd.projects[cmd.projectName][p] = cmd.projects[cmd.projectName][p].replace(reOldProjectPath, pathValue);
+                                        // was: cmd.projects[cmd.projectName][p] = cmd.projects[cmd.projectName][p].replace(reOldProjectPath, pathValue);
+                                        cmd.projects[cmd.projectName][p] = cmd.projects[cmd.projectName][p].replace(reOldProjectPath, function() { return pathValue; });
                                         continue;
                                     }
                                 }
@@ -511,7 +530,10 @@ function CmdHelper(cmd, client, debug) {
                 if  ( isValidName(cmd.bundles[0]) ) {
                     cmd.name = cmd.bundles[0]
                 } else {
-                    console.error('[ ' + cmd.name + ' ] is not a valid bundle name.');
+                    // #B665 — name the rejected bundle: `cmd.name` is set only on success,
+                    // so the message read `[ undefined ]`.
+                    // was: console.error('[ ' + cmd.name + ' ] is not a valid bundle name.');
+                    console.error('[ ' + cmd.bundles[0] + ' ] is not a valid bundle name.');
                     process.exit(1)
                 }
             } // else, might be a bulk operation: look for `isBulkOperation`
@@ -1174,7 +1196,11 @@ function CmdHelper(cmd, client, debug) {
             //console.debug('[ ConfigAssetsLoaderHelper ] Loaded bundles list\n'+ JSON.stringify(cmd.bundles, null, 4));
 
             // protocols & schemes list: for the project
-            re = new RegExp('\@' + cmd.projectName, '');
+            // #B665 — the project name is matched literally and must end at the `/` that
+            // follows it in a `<bundle>@<project>/<env>` value: `@shop` matched the ports
+            // of `@shopping/...`, which then counted as this project's.
+            // was: re = new RegExp('\@' + cmd.projectName, '');
+            re = new RegExp('@' + escapeRegex(cmd.projectName) + '/', '');
 
             for (let protocol in ports) {
                 if ( typeof(cmd.portsData[protocol]) == 'undefined')
@@ -1235,7 +1261,11 @@ function CmdHelper(cmd, client, debug) {
                     var _linkEnv = Object.assign({}, process.env, { GINA_HOMEDIR: GINA_HOMEDIR });
                     console.info('[helper] Running: '+ process.execPath +' '+ selfCli +' link-node-modules @'+cmd.projectName +cmd.paramsStringified);
                     try {
-                        execSync('"'+ process.execPath +'" "'+ selfCli +'" link-node-modules @'+cmd.projectName +cmd.paramsStringified, { env: _linkEnv });// +' --inspect-gina'
+                        // #B665 (2026-09-27) — an argument vector, without a shell: the project name
+                        // and every forwarded flag reached `sh` unquoted, so a value holding a space
+                        // was split and shell syntax in a flag ran.
+                        // was: execSync('"'+ process.execPath +'" "'+ selfCli +'" link-node-modules @'+cmd.projectName +cmd.paramsStringified, …);
+                        execFileSync(process.execPath, [selfCli, 'link-node-modules', '@' + cmd.projectName].concat(cmd.paramsArgv), { env: _linkEnv });
                     } catch (linkErr) {
                         var linkErrOutput = (linkErr.stderr) ? linkErr.stderr.toString().trim() : (linkErr.message || linkErr.stack);
                         console.error(linkErrOutput);
@@ -1244,7 +1274,9 @@ function CmdHelper(cmd, client, debug) {
 
                     console.info('[helper] Running: '+ process.execPath +' '+ selfCli +' link @'+cmd.projectName +cmd.paramsStringified);
                     try {
-                        console.debug(execSync('"'+ process.execPath +'" "'+ selfCli +'" link @'+cmd.projectName +cmd.paramsStringified, { env: _linkEnv }).toString().trim());// +' --inspect-gina'
+                        // #B665 (2026-09-27) — the same argument vector as link-node-modules above.
+                        // was: console.debug(execSync('"'+ process.execPath +'" "'+ selfCli +'" link @'+cmd.projectName +cmd.paramsStringified, …).toString().trim());
+                        console.debug(execFileSync(process.execPath, [selfCli, 'link', '@' + cmd.projectName].concat(cmd.paramsArgv), { env: _linkEnv }).toString().trim());
                     } catch (err) {
                         var errOutput = (err.stderr) ? err.stderr.toString().trim() : (err.message || err.stack);
                         console.emerg(errOutput);
@@ -1325,10 +1357,14 @@ function CmdHelper(cmd, client, debug) {
         var hasProject = false, re = null;
         if ( cmd.projectName != null && typeof(cmd.projects[cmd.projectName]) != 'undefined' ) {
             hasProject = true;
-            re = new RegExp('\@'+ cmd.projectName +'\/', '');
+            // #B665 — the names are matched literally, and a bundle's from the start of the
+            // value: `api@shop/` matched `myapi@shop/dev`.
+            // was: re = new RegExp('\@'+ cmd.projectName +'\/', '');
+            re = new RegExp('@' + escapeRegex(cmd.projectName) + '/', '');
 
             if ( cmd.name != null ) {
-                re = new RegExp(cmd.name + '\@'+ cmd.projectName +'\/', '');
+                // was: re = new RegExp(cmd.name + '\@'+ cmd.projectName +'\/', '');
+                re = new RegExp('^' + escapeRegex(cmd.name + '@' + cmd.projectName + '/'), '');
             }
         }
 
@@ -1981,14 +2017,21 @@ function CmdHelper(cmd, client, debug) {
 
 
                     let stringifiedScheme = JSON.stringify(ports[protocol][scheme]);
-                    let patt = new RegExp(bundle +'@'+ cmd.projectName +'/'+ env);
+                    // #B665 — the assignment is matched as one whole JSON string of the
+                    // scheme's text: unescaped and unanchored, `api@shop/dev` was found
+                    // inside `"api@shop/devel"` or `"myapi@shop/dev"`, and the port of the
+                    // first such value in the text was taken over for this one.
+                    // was: let patt = new RegExp(bundle +'@'+ cmd.projectName +'/'+ env);
+                    let patt = new RegExp(escapeRegex(JSON.stringify(bundle +'@'+ cmd.projectName +'/'+ env)));
                     let found = false;
                     let portToAssign = null;
                     // do not override if existing
                     if ( patt.test(stringifiedScheme) ) { // there can multiple matches
                         found = true;
                         // reusing the same for portsReverse
-                        let re = new RegExp('([0-9]+)\"\:(|\s+)\"('+ bundle +'\@'+ cmd.projectName +'\/'+ env +')', 'g');
+                        // was: let re = new RegExp('([0-9]+)\"\:(|\s+)\"('+ bundle +'\@'+ cmd.projectName +'\/'+ env +')', 'g');
+                        // (`\s` in that string literal is a plain `s`)
+                        let re = new RegExp('([0-9]+)":(|\\s+)(' + escapeRegex(JSON.stringify(bundle +'@'+ cmd.projectName +'/'+ env)) + ')', 'g');
                         let m;
                         while ((m = re.exec(stringifiedScheme)) !== null) {
                             // This is necessary to avoid infinite loops with zero-width matches

package/framework/{v0.7.0 → v0.7.1}/lib/cmd/inspector/help.txt

@@ -9,7 +9,8 @@
 
     <bundle>                    Registered bundle name; resolved to http://localhost:<port>
     <http|https URL>            Full URL used as the target origin directly
-                                (e.g. bundles running on Docker or a remote env)
+                                (e.g. bundles running on Docker or a remote env);
+                                its query string and fragment are dropped
 
   Options:
 

package/framework/{v0.7.0 → v0.7.1}/lib/cmd/inspector/open.js

@@ -197,8 +197,11 @@ function detectDarwin() {
 
         if (!fs.existsSync(plistPath)) return 'safari';
 
-        var raw = child.execSync(
-            'plutil -convert json -o - "' + plistPath + '"'
+        // #B665 S2 (2026-09-27) — an argument vector: the path reaches plutil whole.
+        // was: var raw = child.execSync(
+        // was:     'plutil -convert json -o - "' + plistPath + '"'
+        var raw = child.execFileSync(
+            'plutil', ['-convert', 'json', '-o', '-', plistPath]
           , { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }
         );
         var plist    = JSON.parse(raw);
@@ -225,8 +228,11 @@ function detectDarwin() {
  */
 function detectLinux() {
     try {
-        var desktop = child.execSync(
-            'xdg-settings get default-web-browser 2>/dev/null'
+        // #B665 S2 (2026-09-27) — no shell; stderr is piped, as `2>/dev/null` discarded it.
+        // was: var desktop = child.execSync(
+        // was:     'xdg-settings get default-web-browser 2>/dev/null'
+        var desktop = child.execFileSync(
+            'xdg-settings', ['get', 'default-web-browser']
           , { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }
         ).trim().toLowerCase();
         for (var prefix in DESKTOP_MAP) {
@@ -283,10 +289,17 @@ function detectDefaultBrowser() {
  */
 function hasBin(bin) {
     try {
-        var cmd = (os.platform() === 'win32')
-            ? 'where ' + bin + ' 2>nul'
-            : 'which ' + bin + ' 2>/dev/null';
-        child.execSync(cmd, { stdio: ['pipe', 'pipe', 'pipe'] });
+        // #B665 S2 (2026-09-27) — `which` from an argument vector on macOS and Linux; Windows
+        // keeps `where` through cmd.exe (#B694).
+        // var cmd = (os.platform() === 'win32')
+        //     ? 'where ' + bin + ' 2>nul'
+        //     : 'which ' + bin + ' 2>/dev/null';
+        // child.execSync(cmd, { stdio: ['pipe', 'pipe', 'pipe'] });
+        if (os.platform() === 'win32') {
+            child.execSync('where ' + bin + ' 2>nul', { stdio: ['pipe', 'pipe', 'pipe'] });
+        } else {
+            child.execFileSync('which', [bin], { stdio: ['pipe', 'pipe', 'pipe'] });
+        }
         return true;
     } catch (e) { return false; }
 }
@@ -320,12 +333,14 @@ function resolveWindowsPath(winDef) {
 }
 
 /**
- * Build the shell command to open a URL in a specific browser.
+ * Build the launch that opens a URL in a specific browser: an argument vector
+ * (`bin` + `args`, run without a shell) on macOS and Linux, and a `start`
+ * command line (`cmd`, run through cmd.exe) on Windows (#B665, #B694).
  *
  * @inner
  * @param {string} shortName - Browser short name from BROWSERS
  * @param {string} url - The URL to open
- * @returns {{ cmd: string, appMode: boolean }|null}
+ * @returns {{ bin: string, args: string[], appMode: boolean }|{ cmd: string, appMode: boolean }|null}
  */
 function buildLaunchCmd(shortName, url) {
     var browser  = BROWSERS[shortName];
@@ -345,14 +360,19 @@ function buildLaunchCmd(shortName, url) {
             // regular navigation, ignoring --app=.
             var binPath = '/Applications/' + platDef.app + '.app/Contents/MacOS/' + platDef.app;
             if (!fs.existsSync(binPath)) return null;
+            // #B665 S2 (2026-09-27) — an argument vector: the URL reaches the browser whole.
+            // was: cmd     : '"' + binPath + '" --app="' + url + '"'
             return {
-                cmd     : '"' + binPath + '" --app="' + url + '"'
+                bin     : binPath
+              , args    : ['--app=' + url]
               , appMode : true
             };
         }
         // Non-app-mode browsers (Firefox, Safari): use `open -a`
+        // was: cmd     : 'open -a "' + platDef.app + '" "' + url + '"'
         return {
-            cmd     : 'open -a "' + platDef.app + '" "' + url + '"'
+            bin     : 'open'
+          , args    : ['-a', platDef.app, url]
           , appMode : false
         };
     }
@@ -364,10 +384,12 @@ function buildLaunchCmd(shortName, url) {
             if (hasBin(bins[i])) { bin = bins[i]; break; }
         }
         if (!bin) return null;
-        var linuxArgs = browser.appMode
-            ? bin + ' --app="' + url + '"'
-            : bin + ' "' + url + '"';
-        return { cmd: linuxArgs, appMode: browser.appMode };
+        // #B665 S2 (2026-09-27) — an argument vector: the URL reaches the browser whole.
+        // var linuxArgs = browser.appMode
+        //     ? bin + ' --app="' + url + '"'
+        //     : bin + ' "' + url + '"';
+        // return { cmd: linuxArgs, appMode: browser.appMode };
+        return { bin: bin, args: browser.appMode ? ['--app=' + url] : [url], appMode: browser.appMode };
     }
 
     if (platform === 'win32') {
@@ -383,6 +405,28 @@ function buildLaunchCmd(shortName, url) {
     return null;
 }
 
+/**
+ * Opens a URL in the system default browser: `open` on macOS and `xdg-open`
+ * elsewhere, each from an argument vector, and `start` through cmd.exe on
+ * Windows (#B665, #B694). Used by both fallbacks of `inspector:open`.
+ *
+ * @inner
+ * @param {string} url - The URL to open
+ * @returns {void}
+ * @example
+ * openInDefaultBrowser('http://localhost:3100/_gina/inspector/');
+ */
+function openInDefaultBrowser(url) {
+    var platform = os.platform();
+    if (platform === 'win32') {
+        child.exec('start "" "' + url + '"');
+    } else if (platform === 'darwin') {
+        child.execFile('open', [url]);
+    } else {
+        child.execFile('xdg-open', [url]);
+    }
+}
+
 
 /**
  * Reads `inspector.url` from `~/.gina/${shortVersion}/settings.json`
@@ -527,6 +571,9 @@ function Open(opt, cmd) {
             } else if (/^https?:\/\//i.test(arg)) {
                 // Positional URL → target origin for cross-origin inspection
                 // (Inspector on host, bundles on Docker, remote envs, …).
+                // #B719 — drop a query string or fragment first: the SPA appends
+                // `/_gina/...` to the target, which would otherwise land in the query.
+                arg = arg.replace(/[?#].*$/, '');
                 // Strip trailing slashes so the SPA can append `/_gina/...` cleanly.
                 targetOverride = arg.replace(/\/+$/, '');
             } else if (!/^--/.test(arg) && !/^@/.test(arg)) {
@@ -613,12 +660,14 @@ function Open(opt, cmd) {
                 'No app-mode browser found. '
                 + 'Opening in system default browser.'
             );
-            var fallbackCmd = (os.platform() === 'win32')
-                ? 'start "" "' + url + '"'
-                : (os.platform() === 'darwin')
-                    ? 'open "' + url + '"'
-                    : 'xdg-open "' + url + '"';
-            child.exec(fallbackCmd);
+            // #B665 S2 (2026-09-27) — openInDefaultBrowser(): an argument vector on macOS and Linux
+            // var fallbackCmd = (os.platform() === 'win32')
+            //     ? 'start "" "' + url + '"'
+            //     : (os.platform() === 'darwin')
+            //         ? 'open "' + url + '"'
+            //         : 'xdg-open "' + url + '"';
+            // child.exec(fallbackCmd);
+            openInDefaultBrowser(url);
             process.exit(0);
             return;
         }
@@ -630,18 +679,32 @@ function Open(opt, cmd) {
         );
         console.log(url);
 
-        child.exec(launch.cmd, function (err) {
+        // #B665 S2 (2026-09-27) — the launch runs from an argument vector on macOS and Linux;
+        // Windows keeps its `start` command line (#B694).
+        // child.exec(launch.cmd, function (err) {
+        //     if (err) {
+        //         console.warn('Browser launch failed, trying system default.');
+        //         var fallback = (os.platform() === 'win32')
+        //             ? 'start "" "' + url + '"'
+        //             : (os.platform() === 'darwin')
+        //                 ? 'open "' + url + '"'
+        //                 : 'xdg-open "' + url + '"';
+        //         child.exec(fallback);
+        //     }
+        //     process.exit(0);
+        // });
+        var onLaunched = function (err) {
             if (err) {
                 console.warn('Browser launch failed, trying system default.');
-                var fallback = (os.platform() === 'win32')
-                    ? 'start "" "' + url + '"'
-                    : (os.platform() === 'darwin')
-                        ? 'open "' + url + '"'
-                        : 'xdg-open "' + url + '"';
-                child.exec(fallback);
+                openInDefaultBrowser(url);
             }
             process.exit(0);
-        });
+        };
+        if (launch.cmd) {
+            child.exec(launch.cmd, onLaunched);
+        } else {
+            child.execFile(launch.bin, launch.args, onLaunched);
+        }
     };
 
     init();

package/framework/{v0.7.0 → v0.7.1}/lib/cmd/minion/kill.js

@@ -1,9 +1,13 @@
-const { execSync } = require('child_process');
+// #B665 (2026-09-27) — execFileSync: the ps sweep lists processes without a shell.
+// const { execSync } = require('child_process');
+const { execFileSync } = require('child_process');
 var fs      = require('fs');
 var console = lib.logger;
 var fmt     = lib.cmdStatusFormat;
 
 var CmdHelper = require('./../helper');
+// #B665 (2026-09-27) — the ps sweep matches the project name as literal text
+var escapeRegex = require('./../bundle/inc/name-rewrite').escapeRegex;
 
 /**
  * Grace period (ms) between the first SIGTERM and the follow-up SIGKILL for
@@ -15,6 +19,17 @@ var CmdHelper = require('./../helper');
  */
 var KILL_GRACE_MS = 1500;
 
+/**
+ * Output cap for the `ps -ef` listing of the orphan sweep, which is read whole
+ * since the shell pipeline that filtered it is gone: Node's 1 MB default could
+ * be exceeded on a host running many processes with long command lines (#B665).
+ *
+ * @constant
+ * @inner
+ * @type {number}
+ */
+var PS_MAX_BUFFER = 64 * 1024 * 1024;
+
 /**
  * @module gina/lib/cmd/minion/kill
  */
@@ -116,7 +131,8 @@ function Kill(opt, cmd) {
     /**
      * Builds the kill set for the project by unioning two sources:
      *   1. run-dir pidfiles (`<bundle>@<project>.pid`) whose process is alive;
-     *   2. a `ps` sweep for live `gina: <bundle>@<project>` titles (orphans).
+     *   2. a `ps` sweep for live `gina: <bundle>@<project>` titles (orphans):
+     *      `ps -ef` run without a shell, its lines filtered here (#B665).
      * Targets are keyed by PID so a process tracked by both sources is counted
      * once. Stale pidfiles (file present, process gone) are collected separately
      * for clean-up. The handler's own PID / parent PID are never targeted.
@@ -168,31 +184,42 @@ function Kill(opt, cmd) {
 
         // --- ps pass (POSIX only) ---
         if ( !isWin32() ) {
+            // Match `gina: <bundle>@<project>` precisely: the trailing
+            // (\s|$) boundary stops `@foo` matching project `foobar`.
+            // #B665 (2026-09-27) — `ps` runs from an argument vector, without a shell, and its
+            // listing is filtered here: the project name reached a single-quoted `grep -E`
+            // command line unescaped, so a `'` in it broke out into the shell and a `.` in it
+            // matched any character. Lines naming `grep` are skipped as `grep -v grep` did;
+            // column 2 of `ps -ef` is the PID, its last column the `<bundle>@<project>` title.
+            // was: var psCmd = "ps -ef | grep -v grep | grep -E 'gina: [^ ]+@" + self.projectName + "([[:space:]]|$)' | awk '{print $2\"|\"$NF}'";
+            // was: var out   = execSync(psCmd).toString().replace(/\n$/, '');
+            var titleRe = new RegExp('gina: [^ ]+@' + escapeRegex(self.projectName) + '(\\s|$)');
+            var out     = '';
             try {
-                // Match `gina: <bundle>@<project>` precisely: the trailing
-                // ([[:space:]]|$) boundary stops `@foo` matching project `foobar`.
-                var psCmd = "ps -ef | grep -v grep | grep -E 'gina: [^ ]+@" + self.projectName + "([[:space:]]|$)' | awk '{print $2\"|\"$NF}'";
-                var out   = execSync(psCmd).toString().replace(/\n$/, '');
-                if ( out.length > 0 ) {
-                    var lines = out.split(/\n/);
-                    for (var j = 0; j < lines.length; j++) {
-                        var parts = lines[j].split(/\|/);
-                        var pid   = ~~parts[0];
-                        if ( !pid || pid === process.pid || pid === process.ppid ) {
-                            continue;
-                        }
-                        var titleTail = parts[1] || '';        // <bundle>@<project>
-                        var psAt      = titleTail.lastIndexOf('@');
-                        var psBundle  = (psAt > 0) ? titleTail.substring(0, psAt) : titleTail;
-                        if ( targets[pid] ) {
-                            targets[pid].sources.push('ps');
-                        } else {
-                            targets[pid] = { bundle: psBundle, pid: pid, sources: ['ps'] };
-                        }
-                    }
-                }
+                out = execFileSync('ps', ['-ef'], { maxBuffer: PS_MAX_BUFFER }).toString();
             } catch (e) {
-                // grep exits non-zero when nothing matches -> no orphans, fine.
+                // no `ps` (a slim container image) -> no orphans, fine; a `ps` that failed
+                // after printing keeps what it printed, as the pipeline did
+                out = (e && e.stdout) ? e.stdout.toString() : '';
+            }
+            var lines = out.split(/\n/);
+            for (var j = 0; j < lines.length; j++) {
+                if ( lines[j].indexOf('grep') > -1 || !titleRe.test(lines[j]) ) {
+                    continue;
+                }
+                var cols      = lines[j].trim().split(/\s+/);
+                var pid       = ~~cols[1];
+                if ( !pid || pid === process.pid || pid === process.ppid ) {
+                    continue;
+                }
+                var titleTail = cols[cols.length - 1] || '';        // <bundle>@<project>
+                var psAt      = titleTail.lastIndexOf('@');
+                var psBundle  = (psAt > 0) ? titleTail.substring(0, psAt) : titleTail;
+                if ( targets[pid] ) {
+                    targets[pid].sources.push('ps');
+                } else {
+                    targets[pid] = { bundle: psBundle, pid: pid, sources: ['ps'] };
+                }
             }
         }