mason4agents 0.1.0

package/README.md

@@ -0,0 +1,290 @@
+# mason4agents
+
+**Mason Registry powered tool installer for coding agents.**
+
+mason4agents downloads and manages LSP servers, formatters, linters, and other development tools from the [Mason Registry](https://github.com/mason-org/mason-registry) — the same registry used by mason.nvim. It installs tools to XDG-compliant directories and makes them available via PATH to coding agents such as [Oh My Pi](https://ohmyPi.com).
+
+v1 supports **Pi CLI** (v0.75.5+). Future versions may add Claude Code, Codex CLI, Copilot, OpenCode, and MCP adapters.
+
+## Features
+
+- **Mason Registry compatible** — consumes the same registry, package schema, and release assets as mason.nvim
+- **No Neovim dependency** — standalone Rust CLI, no shelling out to Neovim
+- **Pi extension** — `/mason` interactive package manager, CLI-equivalent slash subcommands, 7 LLM-callable tools, automatic PATH injection
+- **XDG Base Directory** — data, config, cache, and state follow `$XDG_*` conventions
+- **Safe by default** — no build script execution without `--allow-build-scripts`, zip-slip protection, path traversal rejection, sandboxed temp directories with atomic rename
+- **JSON protocol** — all CLI commands support `--json` for machine-readable output
+- **Cross-platform** — Linux, macOS, Windows (Unix symlinks on \*nix, `.cmd` wrappers on Windows)
+- **No shell profile modification** — `mason4agents env` outputs `export PATH=...` for manual sourcing
+
+## Prerequisites
+
+- **Rust toolchain** (stable, edition 2021) — for building from source
+- **Bun** (v1.x) — for TypeScript Pi adapter
+- **Pi CLI** (v0.75.5+) — for Pi extension integration
+- **External package managers** (optional, per source type):
+  - `npm` — for npm-based packages
+  - `python3` + `pip` — for PyPI packages
+  - `cargo` — for crates.io packages
+  - `go` — for Go packages
+  - `gem` — for Ruby packages
+  - `composer` — for PHP packages
+  - `luarocks` — for Lua packages
+  - `nuget` — for NuGet packages
+
+Run `mason4agents doctor` to check which managers are available on your system.
+
+## Installation
+
+### From source
+
+```bash
+git clone <repo-url>
+cd mason4agents
+cargo build --release
+# binary at target/release/mason4agents
+```
+
+### Via npm / Pi (when published)
+
+```bash
+# Install the package (locally or from npm)
+pi install npm:mason4agents
+
+# Or test locally without publishing
+pi --offline -e dist/pi/extension.js
+```
+
+### Binary resolution order
+
+The npm shim and Pi extension locate the Rust binary by checking (in order):
+
+1. `MASON4AGENTS_BIN` environment variable
+2. Bundled `native/mason4agents-{platform}-{arch}` (built by `bun run build`)
+3. Development `target/debug/mason4agents` (after `cargo build`)
+
+## Quick Start
+
+### CLI
+
+```bash
+# Refresh the Mason Registry cache
+mason4agents refresh
+
+# Search for packages
+mason4agents search lua
+mason4agents search --category LSP --language TypeScript
+
+# Install a package
+mason4agents install stylua
+mason4agents install typescript-language-server
+
+# List installed packages
+mason4agents list --installed
+
+# Check which directory a binary was installed to
+mason4agents which stylua
+
+# Get shell PATH setup
+eval "$(mason4agents env --shell bash)"
+
+# Run diagnostics
+mason4agents doctor
+
+# Uninstall
+mason4agents uninstall stylua
+```
+
+### Pi Extension
+
+Open the interactive package manager in Pi:
+
+```
+/mason
+```
+
+The panel shows command tabs at the top (`search`, `list`, `installed`, `install`, `uninstall`, `update`, `which`, `refresh`, `doctor`, `env`, `bin-dir`) and a formatted output area below. Table views show installed status directly and support `/` local filtering, `↑`/`↓` scrolling, `e` to edit the active command input, and `l` to edit the `search --language` filter.
+
+Run CLI-equivalent slash subcommands directly when you do not need the panel:
+
+```text
+/mason search stylua --language Lua
+/mason installed
+/mason list --outdated
+/mason install stylua
+/mason uninstall stylua
+/mason doctor
+/mason-doctor
+```
+
+Direct slash-command results are rendered as human-readable tables or summaries, not raw JSON.
+
+Use the following tools from Pi (they call the Rust CLI under the hood):
+
+| Tool | Description |
+|---|---|
+| `mason_list` | List installed/outdated packages |
+| `mason_search` | Search registry with query, category, language filters |
+| `mason_install` | Install one or more packages |
+| `mason_uninstall` | Uninstall packages |
+| `mason_update` | Update packages (all or specific) |
+| `mason_which` | Resolve an installed binary path |
+| `mason_env` | Generate shell PATH setup |
+
+### All CLI Commands
+
+```text
+mason4agents refresh [--registry <url|file>]
+mason4agents search [query] [--category LSP|Formatter|Linter] [--language <lang>]
+mason4agents list [--installed|--outdated]
+mason4agents install <pkg[@version]>... [--registry <url|file>] [--allow-build-scripts]
+mason4agents uninstall <pkg>...
+mason4agents update [pkg...] [--registry <url|file>] [--allow-build-scripts]
+mason4agents which <executable>
+mason4agents bin-dir
+mason4agents env --shell bash|zsh|fish|powershell|cmd|json
+mason4agents doctor
+```
+
+By default, all commands output human-readable text. Add `--json` for structured JSON output wrapped in `{"ok": true, "data": ...}`.
+
+Example text output:
+
+```text
+$ mason4agents doctor
+mason4agents doctor
+  Bin dir:         /home/user/.local/share/mason4agents/bin
+  Bin dir exists:  ✓
+  Data writable:   ✓
+  Registry cache:  1200 packages
+  PATH contains:   ✓
+  PATH is first:   ✓
+  Managers:
+    npm           ✓ installed
+    cargo         ✓ installed
+    ...
+  Overall:         ✓ ok
+
+$ mason4agents which stylua
+/home/user/.local/share/mason4agents/bin/stylua
+
+$ mason4agents install stylua
+ ✓ stylua v2.5.2  bins: stylua
+
+$ mason4agents env --shell bash
+export PATH='/home/user/.local/share/mason4agents/bin':"$PATH"
+```
+
+## Building the Plugin
+
+The plugin has two components: the **Rust CLI** (core) and the **Pi extension** (TypeScript).
+
+### Build everything (recommended)
+
+```bash
+bun run build
+```
+
+This runs:
+1. `bun build` to bundle the TypeScript npm shim (`dist/bin/mason4agents.js`)
+2. `bun build` to bundle the Pi extension (`dist/pi/extension.js`)
+3. `cargo build --release` to compile the Rust CLI
+4. Copies the release binary to `native/mason4agents-{platform}-{arch}`
+
+### Build components separately
+
+```bash
+# Rust CLI only
+cargo build --release                          # binary: target/release/mason4agents
+cargo build                                    # debug binary: target/debug/mason4agents
+
+# Pi extension only (TypeScript bundle)
+./node_modules/.bin/tsc --noEmit               # typecheck
+bun build src/pi/extension.ts --outdir dist/pi --target bun
+```
+
+### Output artifacts
+
+| Artifact | Path | Used by |
+|---|---|---|
+| Rust CLI | `target/release/mason4agents` | Direct shell usage |
+| Rust CLI (dev) | `target/debug/mason4agents` | Pi extension dev fallback |
+| Native binary | `native/mason4agents-{platform}-{arch}` | Bundled Pi extension lookup |
+| npm shim | `dist/bin/mason4agents.js` | `npx mason4agents` |
+| Pi extension | `dist/pi/extension.js` | `pi --offline -e dist/pi/extension.js` |
+
+### Package and publish the current platform
+
+```bash
+# Full local publish rehearsal: verify, build, validate npm contents, then npm publish --dry-run
+bun run publish:local
+
+# Build a local tarball for install testing
+bun run pack:local
+
+# Real npm publish
+bun run publish:npm
+```
+
+These commands package the current platform binary as `native/mason4agents-{platform}-{arch}`. For a multi-platform npm package, add the other `native/mason4agents-*` binaries before running the publish command.
+
+## Tests
+
+### Rust
+
+```bash
+cargo test                         # 42 tests (40 unit + 2 integration)
+cargo test cli_fixture             # CLI integration tests only
+cargo test -- --ignored            # including network smoke test
+```
+
+### TypeScript
+
+```bash
+bun test                           # 19 tests
+```
+
+### Full verification
+
+```bash
+cargo fmt --check && cargo clippy --all-targets -- -D warnings && cargo test && ./node_modules/.bin/tsc --noEmit && bun test
+```
+
+## XDG Directory Layout
+
+```text
+~/.config/mason4agents/              # Configuration
+~/.local/share/mason4agents/
+  bin/                               # Symlinks to installed tools (on PATH)
+  packages/<name>/...                # Installed package contents
+  share/                             # Mason share links
+  opt/                               # Mason opt links
+  state/installed.json               # Install state database
+~/.cache/mason4agents/
+  registry/                          # Cached registry index + checksum
+  downloads/                         # Downloaded archives (cacheable)
+  logs/                              # Install logs
+~/.local/state/mason4agents/
+  locks/                             # Install/update lock files
+```
+
+Override any directory via `MASON4AGENTS_CONFIG_HOME`, `MASON4AGENTS_DATA_HOME`, `MASON4AGENTS_CACHE_HOME`, `MASON4AGENTS_STATE_HOME`.
+
+## Unsupported Source Types in v1
+
+The following Mason source types are recognized but require external package managers (`mason4agents doctor` will report them):
+
+- `npm`, `pypi`, `cargo`, `golang`, `gem`, `composer`, `luarocks`, `nuget`
+
+Build scripts (`source.build.run`) are **disabled by default** and require explicit `--allow-build-scripts`.
+
+## What is NOT in v1
+
+- Claude Code, Codex CLI, GitHub Copilot CLI, OpenCode adapters
+- MCP server
+- Automatic shell profile modification
+- Neovim/mason.nvim integration or dependency
+
+## License
+
+Apache-2.0

package/README.zh.md

@@ -0,0 +1,290 @@
+# mason4agents
+
+**基于 Mason Registry 的 coding agent 工具安装器。**
+
+mason4agents 从 [Mason Registry](https://github.com/mason-org/mason-registry)（与 mason.nvim 使用同一 registry）下载和管理 LSP server、formatter、linter 等开发工具。工具安装到符合 XDG 规范的目录，并通过 PATH 注入使 coding agent（如 [Oh My Pi](https://ohmyPi.com)）可直接调用。
+
+v1 支持 **Pi CLI**（v0.75.5+）。后续版本可能增加 Claude Code、Codex CLI、Copilot、OpenCode 及 MCP 适配。
+
+## 功能
+
+- **Mason Registry 兼容** — 使用与 mason.nvim 相同的 registry、包 schema 和 release assets
+- **不依赖 Neovim** — 独立 Rust CLI，无需 shell out 到 Neovim
+- **Pi 扩展** — `/mason` 交互式包管理器、等价 CLI 的 slash 子命令、7 个 LLM 可调用工具、自动 PATH 注入
+- **XDG Base Directory** — data、config、cache、state 遵循 `$XDG_*` 规范
+- **默认安全** — 无 `--allow-build-scripts` 不执行构建脚本、zip-slip 防护、路径穿越拒绝、临时目录原子重命名
+- **JSON 协议** — 所有 CLI 命令支持 `--json` 机器可读输出
+- **跨平台** — Linux、macOS、Windows（\*nix 用符号链接，Windows 用 `.cmd` wrapper）
+- **不修改 shell profile** — `mason4agents env` 输出 `export PATH=...`，用户自行 sourcing
+
+## 前置依赖
+
+- **Rust 工具链**（stable，edition 2021）— 从源码构建
+- **Bun**（v1.x）— TypeScript Pi adapter
+- **Pi CLI**（v0.75.5+）— Pi 扩展集成
+- **外部包管理器**（按 source 类型可选）：
+  - `npm` — npm 源包
+  - `python3` + `pip` — PyPI 源包
+  - `cargo` — crates.io 源包
+  - `go` — Go 源包
+  - `gem` — Ruby 源包
+  - `composer` — PHP 源包
+  - `luarocks` — Lua 源包
+  - `nuget` — NuGet 源包
+
+运行 `mason4agents doctor` 检查系统中可用的管理器。
+
+## 安装
+
+### 从源码安装
+
+```bash
+git clone <repo-url>
+cd mason4agents
+cargo build --release
+# 二进制文件位于 target/release/mason4agents
+```
+
+### 通过 npm / Pi 安装（发布后）
+
+```bash
+# 安装包（从 npm 或本地）
+pi install npm:mason4agents
+
+# 本地测试
+pi --offline -e dist/pi/extension.js
+```
+
+### 二进制文件查找顺序
+
+npm shim 和 Pi 扩展按以下顺序定位 Rust 二进制文件：
+
+1. `MASON4AGENTS_BIN` 环境变量
+2. 内置的 `native/mason4agents-{platform}-{arch}`（由 `bun run build` 构建）
+3. 开发目录 `target/debug/mason4agents`（`cargo build` 后）
+
+## 快速开始
+
+### CLI
+
+```bash
+# 刷新 Mason Registry 缓存
+mason4agents refresh
+
+# 搜索包
+mason4agents search lua
+mason4agents search --category LSP --language TypeScript
+
+# 安装包
+mason4agents install stylua
+mason4agents install typescript-language-server
+
+# 列出已安装的包
+mason4agents list --installed
+
+# 查看二进制安装位置
+mason4agents which stylua
+
+# 获取 shell PATH 设置
+eval "$(mason4agents env --shell bash)"
+
+# 运行诊断
+mason4agents doctor
+
+# 卸载
+mason4agents uninstall stylua
+```
+
+### Pi 扩展
+
+在 Pi 中打开交互式包管理器：
+
+```
+/mason
+```
+
+Panel 顶部展示命令 tabs（`search`、`list`、`installed`、`install`、`uninstall`、`update`、`which`、`refresh`、`doctor`、`env`、`bin-dir`），下方是格式化输出区域。表格视图会直接显示 installed 状态，并支持 `/` 本地过滤、`↑`/`↓` 滚动、`e` 编辑当前命令输入，以及 `l` 编辑 `search --language` 过滤器。
+
+不需要打开 panel 时，可直接运行等价 CLI 的 slash 子命令：
+
+```text
+/mason search stylua --language Lua
+/mason installed
+/mason list --outdated
+/mason install stylua
+/mason uninstall stylua
+/mason doctor
+/mason-doctor
+```
+
+直接 slash 命令结果会渲染为人类可读的表格或摘要，不会输出原始 JSON。
+
+Pi 中可使用以下工具（底层调用 Rust CLI）：
+
+| 工具 | 说明 |
+|---|---|
+| `mason_list` | 列出已安装/过期的包 |
+| `mason_search` | 搜索 registry（支持 query、category、language 过滤） |
+| `mason_install` | 安装一个或多个包 |
+| `mason_uninstall` | 卸载包 |
+| `mason_update` | 更新包（全部或指定） |
+| `mason_which` | 查找已安装的二进制路径 |
+| `mason_env` | 生成 shell PATH 设置 |
+
+### 全部 CLI 命令
+
+```text
+mason4agents refresh [--registry <url|file>]
+mason4agents search [query] [--category LSP|Formatter|Linter] [--language <lang>]
+mason4agents list [--installed|--outdated]
+mason4agents install <pkg[@version]>... [--registry <url|file>] [--allow-build-scripts]
+mason4agents uninstall <pkg>...
+mason4agents update [pkg...] [--registry <url|file>] [--allow-build-scripts]
+mason4agents which <executable>
+mason4agents bin-dir
+mason4agents env --shell bash|zsh|fish|powershell|cmd|json
+mason4agents doctor
+```
+
+默认情况下，所有命令输出人类可读文本。添加 `--json` 可获取结构化的 JSON 输出，包裹在 `{"ok": true, "data": ...}` 中。
+
+示例文本输出：
+
+```text
+$ mason4agents doctor
+mason4agents doctor
+  Bin dir:         /home/user/.local/share/mason4agents/bin
+  Bin dir exists:  ✓
+  Data writable:   ✓
+  Registry cache:  1200 packages
+  PATH contains:   ✓
+  PATH is first:   ✓
+  Managers:
+    npm           ✓ installed
+    cargo         ✓ installed
+    ...
+  Overall:         ✓ ok
+
+$ mason4agents which stylua
+/home/user/.local/share/mason4agents/bin/stylua
+
+$ mason4agents install stylua
+ ✓ stylua v2.5.2  bins: stylua
+
+$ mason4agents env --shell bash
+export PATH='/home/user/.local/share/mason4agents/bin':"$PATH"
+```
+
+## 构建 Plugin
+
+插件包含两个组件：**Rust CLI**（核心）和 **Pi 扩展**（TypeScript）。
+
+### 一键构建（推荐）
+
+```bash
+bun run build
+```
+
+此命令依次执行：
+1. `bun build` 打包 TypeScript npm shim（`dist/bin/mason4agents.js`）
+2. `bun build` 打包 Pi 扩展（`dist/pi/extension.js`）
+3. `cargo build --release` 编译 Rust CLI
+4. 将 release 二进制复制到 `native/mason4agents-{platform}-{arch}`
+
+### 单独构建各组件
+
+```bash
+# 仅 Rust CLI
+cargo build --release                          # 二进制: target/release/mason4agents
+cargo build                                    # 调试二进制: target/debug/mason4agents
+
+# 仅 Pi 扩展（TypeScript 打包）
+./node_modules/.bin/tsc --noEmit               # 类型检查
+bun build src/pi/extension.ts --outdir dist/pi --target bun
+```
+
+### 构建产物
+
+| 产物 | 路径 | 用途 |
+|---|---|---|
+| Rust CLI | `target/release/mason4agents` | 直接命令行使用 |
+| Rust CLI (开发) | `target/debug/mason4agents` | Pi 扩展开发回退 |
+| 原生二进制 | `native/mason4agents-{platform}-{arch}` | Pi 扩展内置查找 |
+| npm shim | `dist/bin/mason4agents.js` | `npx mason4agents` |
+| Pi 扩展 | `dist/pi/extension.js` | `pi --offline -e dist/pi/extension.js` |
+
+### 打包并发布当前平台
+
+```bash
+# 本地完整发布预演：验证、构建、校验 npm 内容，然后执行 npm publish --dry-run
+bun run publish:local
+
+# 构建本地 tarball，用于安装测试
+bun run pack:local
+
+# 真正发布到 npm
+bun run publish:npm
+```
+
+这些命令会把当前平台二进制打包为 `native/mason4agents-{platform}-{arch}`。如果要发布多平台 npm 包，请先补齐其它 `native/mason4agents-*` 二进制，再执行发布命令。
+
+## 测试
+
+### Rust
+
+```bash
+cargo test                         # 42 个测试（40 单元 + 2 集成）
+cargo test cli_fixture             # 仅 CLI 集成测试
+cargo test -- --ignored            # 包含网络 smoke 测试
+```
+
+### TypeScript
+
+```bash
+bun test                           # 19 个测试
+```
+
+### 完整验证
+
+```bash
+cargo fmt --check && cargo clippy --all-targets -- -D warnings && cargo test && ./node_modules/.bin/tsc --noEmit && bun test
+```
+
+## XDG 目录布局
+
+```text
+~/.config/mason4agents/              # 配置文件
+~/.local/share/mason4agents/
+  bin/                               # 已安装工具的符号链接（在 PATH 中）
+  packages/<name>/...                # 已安装包的内容
+  share/                             # Mason share 链接
+  opt/                               # Mason opt 链接
+  state/installed.json               # 安装状态数据库
+~/.cache/mason4agents/
+  registry/                          # Registry 缓存 + 校验和
+  downloads/                         # 下载的归档文件（可清理）
+  logs/                              # 安装日志
+~/.local/state/mason4agents/
+  locks/                             # 安装/更新锁文件
+```
+
+可通过 `MASON4AGENTS_CONFIG_HOME`、`MASON4AGENTS_DATA_HOME`、`MASON4AGENTS_CACHE_HOME`、`MASON4AGENTS_STATE_HOME` 覆盖默认目录。
+
+## v1 不支持的 Source 类型
+
+以下 Mason source 类型已被识别但需要外部包管理器（`mason4agents doctor` 会报告它们的状态）：
+
+- `npm`、`pypi`、`cargo`、`golang`、`gem`、`composer`、`luarocks`、`nuget`
+
+构建脚本（`source.build.run`）**默认禁用**，需显式传递 `--allow-build-scripts`。
+
+## v1 不包含
+
+- Claude Code、Codex CLI、GitHub Copilot CLI、OpenCode 适配
+- MCP server
+- 自动修改 shell profile
+- Neovim/mason.nvim 集成或依赖
+
+## 许可证
+
+Apache-2.0

package/dist/bin/mason4agents.js

@@ -0,0 +1,113 @@
+#!/usr/bin/env bun
+// @bun
+
+// src/bin/mason4agents.ts
+import { spawn } from "child_process";
+
+// src/pi/binary.ts
+import { accessSync, constants, existsSync, statSync } from "fs";
+import { dirname, join, resolve } from "path";
+import { fileURLToPath } from "url";
+function resolveMasonBinary(env = process.env, startUrl = import.meta.url) {
+  return resolveMasonBinaryDetailed(env, startUrl).path;
+}
+function resolveMasonBinaryDetailed(env = process.env, startUrl = import.meta.url) {
+  if (env.MASON4AGENTS_BIN && env.MASON4AGENTS_BIN.length > 0) {
+    const explicit = resolve(env.MASON4AGENTS_BIN);
+    if (!existsSync(explicit)) {
+      throw new Error(`MASON4AGENTS_BIN points to a missing file: ${explicit}`);
+    }
+    const stat = statSync(explicit);
+    if (!stat.isFile()) {
+      throw new Error(`MASON4AGENTS_BIN points to a non-file path: ${explicit}`);
+    }
+    if (process.platform !== "win32" && (stat.mode & 73) === 0) {
+      throw new Error(`MASON4AGENTS_BIN points to a non-executable file: ${explicit}`);
+    }
+    return { path: explicit, source: "env" };
+  }
+  const root = packageRoot(startUrl);
+  for (const candidate of bundledCandidates(root)) {
+    if (existsSync(candidate) && isExecutable(candidate)) {
+      return { path: candidate, source: "bundled" };
+    }
+  }
+  for (const candidate of developmentCandidates(root)) {
+    if (existsSync(candidate) && isExecutable(candidate)) {
+      return { path: candidate, source: "development" };
+    }
+  }
+  throw new Error(`Unable to locate mason4agents native binary. Set MASON4AGENTS_BIN or build crates/mason4agents.`);
+}
+function isExecutable(filePath) {
+  if (process.platform === "win32") {
+    return existsSync(filePath) && statSync(filePath).isFile();
+  }
+  try {
+    return statSync(filePath).isFile() && (accessSync(filePath, constants.X_OK), true);
+  } catch {
+    return false;
+  }
+}
+function packageRoot(startUrl = import.meta.url) {
+  let dir = dirname(fileURLToPath(startUrl));
+  for (let i = 0;i < 8; i += 1) {
+    if (existsSync(join(dir, "package.json"))) {
+      return dir;
+    }
+    const parent = dirname(dir);
+    if (parent === dir) {
+      break;
+    }
+    dir = parent;
+  }
+  return resolve(dirname(fileURLToPath(startUrl)), "..", "..");
+}
+function bundledCandidates(root) {
+  const platform = process.platform;
+  const arch = normalizeArch(process.arch);
+  const exe = platform === "win32" ? ".exe" : "";
+  const candidates = [
+    join(root, "native", `mason4agents-${platform}-${arch}${exe}`),
+    join(root, "native", `mason4agents${exe}`),
+    join(root, "dist", "native", `mason4agents-${platform}-${arch}${exe}`),
+    join(root, "dist", "native", `mason4agents${exe}`)
+  ];
+  if (platform === "win32") {
+    candidates.unshift(join(root, "native", `mason4agents-${platform}-${arch}`), join(root, "dist", "native", `mason4agents-${platform}-${arch}`));
+  }
+  return candidates;
+}
+function developmentCandidates(root) {
+  const exe = process.platform === "win32" ? ".exe" : "";
+  return [
+    join(root, "target", "debug", "mason4agents" + exe),
+    join(root, "target", "release", "mason4agents" + exe),
+    join(root, "..", "target", "debug", "mason4agents" + exe),
+    join(root, "..", "target", "release", "mason4agents" + exe)
+  ];
+}
+function normalizeArch(arch) {
+  if (arch === "x64")
+    return "x64";
+  if (arch === "arm64")
+    return "arm64";
+  return arch;
+}
+
+// src/bin/mason4agents.ts
+var binary = resolveMasonBinary();
+var child = spawn(binary, process.argv.slice(2), { stdio: "inherit", env: process.env });
+for (const signal of ["SIGINT", "SIGTERM"]) {
+  process.on(signal, () => child.kill(signal));
+}
+child.on("exit", (code, signal) => {
+  for (const sig of ["SIGINT", "SIGTERM"]) {
+    process.removeAllListeners(sig);
+  }
+  if (signal) {
+    process.kill(process.pid, signal);
+    return;
+  }
+  process.exit(code ?? 1);
+});