nx 23.2.0-beta.4 → 23.2.0-beta.6

package/dist/src/core/graph/styles.js

@@ -1 +1 @@
-"use strict";(self.webpackChunk_nx_graph_client=self.webpackChunk_nx_graph_client||[]).push([[869],{8027(){}},e=>{var n;n=8027,e(e.s=n)}]);
+"use strict";(self.webpackChunk_nx_graph_client=self.webpackChunk_nx_graph_client||[]).push([[869],{946(){}},e=>{var n;n=946,e(e.s=n)}]);

package/dist/src/daemon/client/client.d.ts

@@ -8,6 +8,11 @@ import { ConfigurationSourceMaps } from '../../project-graph/utils/project-confi
 import type { FlushSyncGeneratorChangesResult, SyncGeneratorRunResult } from '../../utils/sync-generators';
 import { type ConfigureAiAgentsStatusResponse } from '../message-types/configure-ai-agents';
 import { type NxConsoleStatusResponse, type SetNxConsolePreferenceAndInstallResponse } from '../message-types/nx-console';
+/** A refused connect: the errno, and the path it was made against. */
+type ConnectRefusal = {
+    error: NodeJS.ErrnoException;
+    socketPath: string;
+};
 export type UnregisterCallback = () => void;
 export type ChangedFile = {
     path: string;
@@ -93,6 +98,12 @@ export declare class DaemonClient {
     resetConfigureAiAgentsStatus(): Promise<{
         success: boolean;
     }>;
+    /**
+     * The pre-start probe, returning why it failed rather than leaving it on the
+     * instance: `_daemonStatus` does not serialize `isServerAvailable`'s five
+     * public callers against `startDaemonIfNecessary`.
+     */
+    private probeServer;
     isServerAvailable(): Promise<boolean>;
     private startDaemonIfNecessary;
     private sendToDaemonViaQueue;
@@ -108,8 +119,41 @@ export declare class DaemonClient {
     private sendMessageToDaemon;
     private registerDaemonProcessWithMetricsService;
     private handleMessage;
-    startInBackground(): Promise<ChildProcess['pid']>;
+    /**
+     * @param probeRefusal what the caller's pre-start probe saw. The only evidence
+     *        when a daemon refuses us and then exits — the poll cannot reproduce it
+     *        once the process json is gone. `nx daemon --start` passes nothing.
+     */
+    startInBackground(probeRefusal?: ConnectRefusal): Promise<ChildProcess['pid']>;
     stop(): Promise<void>;
 }
 export declare const daemonClient: DaemonClient;
 export declare function isDaemonEnabled(): boolean;
+/**
+ * EACCES and EPERM are the two errnos that mean the OS refused us rather than
+ * that nothing was listening. They need opposite remedies — a socket owned by
+ * someone else versus a sandbox refusing the connect syscall — but they share
+ * the property that retrying cannot change the answer.
+ */
+export declare function isPermissionErrno(error: NodeJS.ErrnoException): boolean;
+/**
+ * The operating system refused the connection. Most often the socket belongs to
+ * another user, which is the guarantee the owner-only socket directory buys —
+ * but a sandbox that denies unix-socket connects produces the same errno, so the
+ * message does not assert which. Either way it is an environment condition
+ * rather than a defect in Nx, and it deliberately does not
+ * carry `internalDaemonError`: that tag tells the user to file an issue and
+ * disables the daemon until `nx reset`, which would outlast the stale socket
+ * that caused it.
+ *
+ * It also skips the daemon log that `daemonProcessException` appends. The log
+ * belongs to *our* daemon; the process holding this socket is someone else's, so
+ * quoting it would describe an unrelated run.
+ */
+export declare function daemonPermissionException(socketPath: string, cause: string): Error;
+/**
+ * Exported for testing: the `internalDaemonError` tag decides whether a daemon
+ * failure degrades to a daemonless graph build or aborts the command.
+ */
+export declare function daemonProcessException(message: string): Error;
+export {};

package/dist/src/daemon/client/client.js

@@ -2,6 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.daemonClient = exports.DaemonClient = void 0;
 exports.isDaemonEnabled = isDaemonEnabled;
+exports.isPermissionErrno = isPermissionErrno;
+exports.daemonPermissionException = daemonPermissionException;
+exports.daemonProcessException = daemonProcessException;
 const child_process_1 = require("child_process");
 const net_1 = require("net");
 const node_fs_1 = require("node:fs");
@@ -276,9 +279,9 @@ class DaemonClient {
         // Wait for daemon server to be available before trying to reconnect
         let serverAvailable;
         try {
-            serverAvailable = await this.waitForServerToBeAvailable({
+            ({ available: serverAvailable } = await this.waitForServerToBeAvailable({
                 ignoreVersionMismatch: false,
-            });
+            }));
         }
         catch (err) {
             // Version mismatch - pass error to callbacks so they can handle it
@@ -428,9 +431,9 @@ class DaemonClient {
         // Wait for daemon server to be available before trying to reconnect
         let serverAvailable;
         try {
-            serverAvailable = await this.waitForServerToBeAvailable({
+            ({ available: serverAvailable } = await this.waitForServerToBeAvailable({
                 ignoreVersionMismatch: false,
-            });
+            }));
         }
         catch (err) {
             // Version mismatch - pass error to callbacks so they can handle it
@@ -665,30 +668,40 @@ class DaemonClient {
         };
         return this.sendToDaemonViaQueue(message);
     }
-    async isServerAvailable() {
+    /**
+     * The pre-start probe, returning why it failed rather than leaving it on the
+     * instance: `_daemonStatus` does not serialize `isServerAvailable`'s five
+     * public callers against `startDaemonIfNecessary`.
+     */
+    async probeServer() {
         return new Promise((resolve, reject) => {
             try {
                 const socketPath = this.getSocketPath();
                 if (!socketPath) {
-                    resolve(false);
+                    resolve({ available: false });
                     return;
                 }
                 const socket = (0, net_1.connect)(socketPath, () => {
                     socket.destroy();
-                    resolve(true);
+                    resolve({ available: true });
                 });
-                socket.once('error', () => {
-                    resolve(false);
+                socket.once('error', (err) => {
+                    // The only place the errno for "the socket is there but refuses us"
+                    // is produced, and the only thing separating it from "no daemon yet".
+                    resolve({ available: false, refusal: { error: err, socketPath } });
                 });
             }
             catch (err) {
                 if (err instanceof daemon_socket_messenger_1.VersionMismatchError) {
                     reject(err); // Let version mismatch bubble up
                 }
-                resolve(false);
+                resolve({ available: false });
             }
         });
     }
+    async isServerAvailable() {
+        return (await this.probeServer()).available;
+    }
     async startDaemonIfNecessary() {
         if (this._daemonStatus == DaemonStatus.CONNECTED) {
             return;
@@ -697,21 +710,22 @@ class DaemonClient {
         if (this._daemonStatus == DaemonStatus.DISCONNECTED) {
             this._daemonStatus = DaemonStatus.CONNECTING;
             let daemonPid = null;
-            let serverAvailable;
+            let probe;
             try {
-                serverAvailable = await this.isServerAvailable();
+                probe = await this.probeServer();
             }
             catch (err) {
                 // Version mismatch - treat as server not available, start new one
                 if (err instanceof daemon_socket_messenger_1.VersionMismatchError) {
-                    serverAvailable = false;
+                    probe = { available: false };
                 }
                 else {
                     throw err;
                 }
             }
-            if (!serverAvailable) {
-                daemonPid = await this.startInBackground();
+            if (!probe.available) {
+                // Carried as a value so no other caller's probe can substitute for it.
+                daemonPid = await this.startInBackground(probe.refusal);
             }
             this.setUpConnection();
             this._daemonStatus = DaemonStatus.CONNECTED;
@@ -762,6 +776,11 @@ class DaemonClient {
             if (err.message.startsWith('connect ENOENT')) {
                 error = daemonProcessException('The Daemon Server is not running');
             }
+            else if (isPermissionErrno(err)) {
+                // The 0700 dir and 0600 socket mean the OS refuses this rather than the
+                // connect silently succeeding.
+                error = daemonPermissionException(socketPath, err.message);
+            }
             else if (err.message.startsWith('connect ECONNREFUSED')) {
                 error = daemonProcessException(`A server instance had not been fully shut down. Please try running the command again.`);
             }
@@ -782,9 +801,9 @@ class DaemonClient {
         this._daemonStatus = DaemonStatus.CONNECTING;
         let serverAvailable;
         try {
-            serverAvailable = await this.waitForServerToBeAvailable({
+            ({ available: serverAvailable } = await this.waitForServerToBeAvailable({
                 ignoreVersionMismatch: false,
-            });
+            }));
         }
         catch (err) {
             if (err instanceof daemon_socket_messenger_1.VersionMismatchError) {
@@ -830,6 +849,11 @@ class DaemonClient {
      */
     async waitForServerToBeAvailable(options) {
         logger_1.clientLogger.log(`[Client] Waiting for server (max: ${WAIT_FOR_SERVER_CONFIG.maxAttempts} attempts, ${WAIT_FOR_SERVER_CONFIG.delayMs}ms interval)`);
+        // Poll-scoped, not instance state: reconnect paths have their own flags, so
+        // several attempts can be in flight and a shared slot would let one report
+        // another's socket.
+        let stoppedOnRefusal = false;
+        let refusal;
         const socket = await (0, wait_for_socket_connection_1.waitForSocketConnection)(() => {
             try {
                 return this.getSocketPath();
@@ -846,14 +870,29 @@ class DaemonClient {
         }, {
             maxAttempts: WAIT_FOR_SERVER_CONFIG.maxAttempts,
             delayMs: WAIT_FOR_SERVER_CONFIG.delayMs,
+            onConnectError: (error, socketPath) => {
+                refusal = { error, socketPath };
+                // A refusal is not expected to become an acceptance, so polling the
+                // full 60s budget only delays the same answer. Not absolute:
+                // `server.ts` binds before it chmods to 0600, so under a umask that
+                // strips owner write a same-user connect can lose a microsecond race
+                // and see EACCES. That costs a specific error rather than a retry — a
+                // better trade than a 60s hang.
+                return (stoppedOnRefusal = isPermissionErrno(error));
+            },
         });
         if (socket) {
             socket.destroy();
             logger_1.clientLogger.log(`[Client] Server available`);
-            return true;
+            return { available: true };
         }
-        logger_1.clientLogger.log(`[Client] Server not available after ${WAIT_FOR_SERVER_CONFIG.maxAttempts} attempts`);
-        return false;
+        // Keyed on the early exit taken, not on whether an errno was recorded:
+        // every failed connect records one, including an ordinary cold start's
+        // ENOENT.
+        logger_1.clientLogger.log(stoppedOnRefusal
+            ? `[Client] Server refused the connection (${refusal?.error.code}), stopped polling`
+            : `[Client] Server not available after ${WAIT_FOR_SERVER_CONFIG.maxAttempts} attempts`);
+        return { available: false, refusal };
     }
     async sendMessageToDaemon(message, force) {
         // the first message sent to the daemon includes an env prop
@@ -935,7 +974,12 @@ class DaemonClient {
             ].join('\n')));
         }
     }
-    async startInBackground() {
+    /**
+     * @param probeRefusal what the caller's pre-start probe saw. The only evidence
+     *        when a daemon refuses us and then exits — the poll cannot reproduce it
+     *        once the process json is gone. `nx daemon --start` passes nothing.
+     */
+    async startInBackground(probeRefusal) {
         if (global.NX_PLUGIN_WORKER) {
             throw new Error('Fatal Error: Something unexpected has occurred. Plugin Workers should not start a new daemon process. Please report this issue.');
         }
@@ -973,14 +1017,25 @@ class DaemonClient {
         /**
          * Ensure the server is actually available to connect to via IPC before resolving
          */
-        const serverAvailable = await this.waitForServerToBeAvailable({
-            ignoreVersionMismatch: true,
-        });
-        if (serverAvailable) {
+        const { available, refusal: polled } = await this.waitForServerToBeAvailable({ ignoreVersionMismatch: true });
+        if (available) {
             logger_1.clientLogger.log(`[Client] Daemon server started, pid=${backgroundProcess.pid}`);
             return backgroundProcess.pid;
         }
         else {
+            // A permission refusal from either source wins, then the poll's errno,
+            // then the probe's. Recency alone would report a daemon's ENOENT over the
+            // EACCES the probe saw a moment earlier, losing the diagnosis.
+            const refusal = [polled, probeRefusal].find((r) => r && isPermissionErrno(r.error)) ??
+                polled ??
+                probeRefusal;
+            if (refusal && isPermissionErrno(refusal.error)) {
+                // Reported here rather than as a generic startup failure, so it degrades
+                // without disabling the daemon until `nx reset`. Both operands come from
+                // the refusal: resolving a path here instead would throw once a daemon
+                // that failed to bind has unlinked its process json.
+                throw daemonPermissionException(refusal.socketPath, refusal.error.message);
+            }
             throw daemonProcessException('Failed to start or connect to the Nx Daemon process.');
         }
     }
@@ -1023,24 +1078,65 @@ function isDocker() {
 function nxJsonIsNotPresent() {
     return !(0, nx_json_1.hasNxJson)(workspace_root_1.workspaceRoot);
 }
+/**
+ * EACCES and EPERM are the two errnos that mean the OS refused us rather than
+ * that nothing was listening. They need opposite remedies — a socket owned by
+ * someone else versus a sandbox refusing the connect syscall — but they share
+ * the property that retrying cannot change the answer.
+ */
+function isPermissionErrno(error) {
+    return error?.code === 'EACCES' || error?.code === 'EPERM';
+}
+/**
+ * The operating system refused the connection. Most often the socket belongs to
+ * another user, which is the guarantee the owner-only socket directory buys —
+ * but a sandbox that denies unix-socket connects produces the same errno, so the
+ * message does not assert which. Either way it is an environment condition
+ * rather than a defect in Nx, and it deliberately does not
+ * carry `internalDaemonError`: that tag tells the user to file an issue and
+ * disables the daemon until `nx reset`, which would outlast the stale socket
+ * that caused it.
+ *
+ * It also skips the daemon log that `daemonProcessException` appends. The log
+ * belongs to *our* daemon; the process holding this socket is someone else's, so
+ * quoting it would describe an unrelated run.
+ */
+function daemonPermissionException(socketPath, cause) {
+    const error = new Error([
+        `The operating system refused the connection to the Nx Daemon socket (${cause}).`,
+        '',
+        `Socket: ${socketPath}`,
+        '',
+        'Most often the socket belongs to a different user: a daemon left behind by running Nx under `sudo`, a different uid inside a container, or a working copy shared between accounts. If the socket is your own, a sandbox is refusing the connection instead.',
+        'If it belongs to another user, delete the socket above or set NX_SOCKET_DIR to a directory only your user can reach. If you are in a sandbox, allow unix sockets under the Nx socket root — in Claude Code a scoped `allowUnixSockets` only permits connecting, so starting a daemon there needs `allowAllUnixSockets: true`. See https://nx.dev/docs/kb/nx-sandbox-unix-sockets',
+    ].join('\n'));
+    error.daemonPermissionError = true;
+    return error;
+}
+/**
+ * Exported for testing: the `internalDaemonError` tag decides whether a daemon
+ * failure degrades to a daemonless graph build or aborts the command.
+ */
 function daemonProcessException(message) {
+    // The log is an enrichment, not the classifier: it is absent on a first run,
+    // which is exactly when the daemon is most likely to fail to start.
+    let body = message;
     try {
         let log = (0, node_fs_1.readFileSync)(tmp_dir_1.DAEMON_OUTPUT_LOG_FILE).toString().split('\n');
         if (log.length > 20) {
             log = log.slice(log.length - 20);
         }
-        const error = new Error([
+        body = [
             message,
             '',
             'Messages from the log:',
             ...log,
             '\n',
             `More information: ${tmp_dir_1.DAEMON_OUTPUT_LOG_FILE}`,
-        ].join('\n'));
-        error.internalDaemonError = true;
-        return error;
-    }
-    catch (e) {
-        return new Error(message);
+        ].join('\n');
     }
+    catch { }
+    const error = new Error(body);
+    error.internalDaemonError = true;
+    return error;
 }

package/dist/src/daemon/client/daemon-socket-messenger.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DaemonSocketMessenger = exports.VersionMismatchError = void 0;
 const perf_hooks_1 = require("perf_hooks");
 const consume_messages_from_socket_1 = require("../../utils/consume-messages-from-socket");
+const workspace_root_1 = require("../../utils/workspace-root");
 const logger_1 = require("../logger");
 const socket_utils_1 = require("../socket-utils");
 class VersionMismatchError extends Error {
@@ -21,6 +22,9 @@ class DaemonSocketMessenger {
         if (!this.socket) {
             throw new Error('Socket not initialized.');
         }
+        // Stamp every message with the sending workspace's root so the daemon can
+        // reject messages from a different workspace (e.g. a shared NX_SOCKET_DIR).
+        messageToDaemon.workspaceRoot = workspace_root_1.workspaceRoot;
         logger_1.clientLogger.log('[Messenger] Sending message type:', messageToDaemon.type);
         perf_hooks_1.performance.mark('daemon-message-serialization-start-' + messageToDaemon.type);
         const serialized = (0, socket_utils_1.serialize)(messageToDaemon, force);

package/dist/src/daemon/message-types/daemon-message.d.ts

@@ -1,6 +1,38 @@
 export type DaemonMessage = {
     type: string;
     env?: Record<string, string>;
+    /**
+     * Stamped centrally by `DaemonSocketMessenger.sendMessage`, not by the ~30
+     * sites that construct messages — hence optional. It can also be absent on a
+     * message that predates the field, which is why `isForeignWorkspaceMessage`
+     * treats `undefined` as "not foreign".
+     */
+    workspaceRoot?: string;
     data?: any;
 };
 export declare function isDaemonMessage(msg: unknown): msg is DaemonMessage;
+/**
+ * Any message carrying the sender's workspace root. Structural so the checks
+ * below serve the daemon and the plugin worker without either importing the
+ * other's message type. `type` is required only so the type is not all-optional,
+ * which would accept `{}`.
+ */
+type WorkspaceScopedMessage = {
+    type: string;
+    workspaceRoot?: string;
+};
+/**
+ * A message from a different workspace — two sharing an NX_SOCKET_DIR — must not
+ * be processed. Compared directly; both come from the same resolution.
+ */
+export declare function isForeignWorkspaceMessage(msg: WorkspaceScopedMessage, receiverWorkspaceRoot: string): boolean;
+/**
+ * Throws on a message this receiver must not act on. The daemon catches it and
+ * responds with the mismatch; the plugin worker catches it and drops the
+ * message. `receiverDescription` names whichever raised it.
+ *
+ * An unstamped message is deliberately accepted: this is accident detection,
+ * not a control.
+ */
+export declare function assertNotForeignWorkspaceMessage(msg: WorkspaceScopedMessage, receiverWorkspaceRoot: string, receiverDescription?: string): void;
+export {};

package/dist/src/daemon/message-types/daemon-message.js

@@ -1,6 +1,31 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.isDaemonMessage = isDaemonMessage;
+exports.isForeignWorkspaceMessage = isForeignWorkspaceMessage;
+exports.assertNotForeignWorkspaceMessage = assertNotForeignWorkspaceMessage;
 function isDaemonMessage(msg) {
     return typeof msg === 'object' && msg && 'type' in msg;
 }
+/**
+ * A message from a different workspace — two sharing an NX_SOCKET_DIR — must not
+ * be processed. Compared directly; both come from the same resolution.
+ */
+function isForeignWorkspaceMessage(msg, receiverWorkspaceRoot) {
+    if (msg.workspaceRoot === undefined) {
+        return false;
+    }
+    return msg.workspaceRoot !== receiverWorkspaceRoot;
+}
+/**
+ * Throws on a message this receiver must not act on. The daemon catches it and
+ * responds with the mismatch; the plugin worker catches it and drops the
+ * message. `receiverDescription` names whichever raised it.
+ *
+ * An unstamped message is deliberately accepted: this is accident detection,
+ * not a control.
+ */
+function assertNotForeignWorkspaceMessage(msg, receiverWorkspaceRoot, receiverDescription = `The Nx Daemon for '${receiverWorkspaceRoot}'`) {
+    if (isForeignWorkspaceMessage(msg, receiverWorkspaceRoot)) {
+        throw new Error(`${receiverDescription} received a message from a different workspace ('${msg.workspaceRoot}') and refused to process it. This usually means multiple workspaces are sharing a socket directory; ensure NX_SOCKET_DIR (or NX_DAEMON_SOCKET_DIR) is not set to a shared location.`);
+    }
+}

package/dist/src/daemon/server/latest-nx.js

@@ -2,7 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getLatestNxTmpPath = getLatestNxTmpPath;
 exports.cleanupLatestNx = cleanupLatestNx;
-const devkit_internals_1 = require("../../devkit-internals");
+// Import from the defining module, not the devkit-internals barrel: the barrel
+// eagerly pulls in the task-execution subsystem and instantiates a daemon
+// client, all of which would stay resident for the daemon server's lifetime.
+const package_json_1 = require("../../utils/package-json");
 const package_manager_1 = require("../../utils/package-manager");
 const provenance_1 = require("../../utils/provenance");
 const workspace_root_1 = require("../../utils/workspace-root");
@@ -28,7 +31,7 @@ async function getLatestNxTmpPath() {
         try {
             logger_1.serverLogger.log('[LATEST-NX]: Pulling latest Nx...');
             await (0, provenance_1.ensurePackageHasProvenance)('nx', 'latest');
-            const result = await (0, devkit_internals_1.installPackageToTmpAsync)('nx', 'latest', (0, package_manager_1.detectPackageManager)(workspace_root_1.workspaceRoot));
+            const result = await (0, package_json_1.installPackageToTmpAsync)('nx', 'latest', (0, package_manager_1.detectPackageManager)(workspace_root_1.workspaceRoot));
             latestNxTmpPath = result.tempDir;
             cleanupFn = result.cleanup;
             logger_1.serverLogger.log('[LATEST-NX]: Successfully pulled latest Nx to', latestNxTmpPath);

package/dist/src/daemon/server/server.js

@@ -119,6 +119,17 @@ async function handleMessage(socket, data) {
         await (0, shutdown_utils_1.respondWithErrorAndExit)(socket, `Invalid payload from the client`, new Error(`Unsupported payload sent to daemon server: ${unparsedPayload}`));
     }
     logger_1.serverLogger.log(`Received ${mode} message of type ${payload.type}`);
+    // A mismatch means the client reached the wrong daemon (e.g. a shared
+    // NX_SOCKET_DIR). Respond, but stay alive for our own workspace.
+    if ((0, daemon_message_1.isDaemonMessage)(payload)) {
+        try {
+            (0, daemon_message_1.assertNotForeignWorkspaceMessage)(payload, workspace_root_1.workspaceRoot);
+        }
+        catch (e) {
+            await (0, shutdown_utils_1.respondWithError)(socket, `Workspace root mismatch`, e);
+            return;
+        }
+    }
     if ((0, daemon_message_1.isDaemonMessage)(payload) && payload.env) {
         const changedEnvKeys = (0, daemon_environment_1.applyDaemonEnvFromClient)(payload.env);
         if (changedEnvKeys.length > 0) {
@@ -423,6 +434,17 @@ async function startServer() {
             server.listen(socketPath, async () => {
                 try {
                     logger_1.serverLogger.log(`Started listening on: ${socketPath}`);
+                    // Linux gates connect() on write permission to the socket file; macOS/BSD gate
+                    // on the directory, which is already 0700. Done after listen because
+                    // net.Server.listen takes no mode and umask is process-global.
+                    if (!socket_utils_1.isWindows) {
+                        try {
+                            (0, fs_1.chmodSync)(socketPath, 0o600);
+                        }
+                        catch {
+                            // Best effort; the 0700 socket directory is the primary control.
+                        }
+                    }
                     // this triggers the storage of the lock file hash
                     daemonIsOutdated();
                     if (!(0, shutdown_utils_1.getOutputWatcherInstance)()) {

package/dist/src/daemon/server/shutdown-utils.d.ts

@@ -14,5 +14,10 @@ export declare function handleServerProcessTermination({ server, reason, sockets
 export declare function handleServerProcessTerminationWithRestart({ server, reason, sockets, }: HandleServerProcessTerminationParams): Promise<void>;
 export declare function resetInactivityTimeout(cb: () => void): void;
 export declare function respondToClient(socket: Socket, response: string, description: string): Promise<unknown>;
+/**
+ * Send an error to the client without terminating the daemon. Use this when the
+ * daemon should keep running for other clients after refusing a request.
+ */
+export declare function respondWithError(socket: Socket, description: string, error: Error): Promise<void>;
 export declare function respondWithErrorAndExit(socket: Socket, description: string, error: Error): Promise<void>;
 export {};

package/dist/src/daemon/server/shutdown-utils.js

@@ -9,6 +9,7 @@ exports.handleServerProcessTermination = handleServerProcessTermination;
 exports.handleServerProcessTerminationWithRestart = handleServerProcessTerminationWithRestart;
 exports.resetInactivityTimeout = resetInactivityTimeout;
 exports.respondToClient = respondToClient;
+exports.respondWithError = respondWithError;
 exports.respondWithErrorAndExit = respondWithErrorAndExit;
 const workspace_root_1 = require("../../utils/workspace-root");
 const logger_1 = require("../logger");
@@ -135,9 +136,12 @@ function respondToClient(socket, response, description) {
         });
     });
 }
-async function respondWithErrorAndExit(socket, description, error) {
-    const isProjectGraphError = error instanceof error_types_1.DaemonProjectGraphError;
-    const normalizedError = isProjectGraphError
+/**
+ * Send an error to the client without terminating the daemon. Use this when the
+ * daemon should keep running for other clients after refusing a request.
+ */
+async function respondWithError(socket, description, error) {
+    const normalizedError = error instanceof error_types_1.DaemonProjectGraphError
         ? error_types_1.ProjectGraphError.fromDaemonProjectGraphError(error)
         : error;
     // print some extra stuff in the error message
@@ -145,8 +149,11 @@ async function respondWithErrorAndExit(socket, description, error) {
     console.error(normalizedError.stack);
     // Respond with the original error
     await respondToClient(socket, (0, socket_utils_1.serializeResult)(error, null, null), null);
+}
+async function respondWithErrorAndExit(socket, description, error) {
+    await respondWithError(socket, description, error);
     // Project Graph errors are okay. Restarting the daemon won't help with this.
-    if (!isProjectGraphError) {
+    if (!(error instanceof error_types_1.DaemonProjectGraphError)) {
         process.exit(1);
     }
 }

package/dist/src/daemon/socket-utils.d.ts

@@ -8,6 +8,7 @@ export declare const isWindows: boolean;
 export declare const getFullOsSocketPath: () => string;
 export declare const getForkedProcessOsSocketPath: (id: string) => string;
 export declare const getPluginOsSocketPath: (id: string) => string;
+export declare function getPluginSocketFileName(id: string): string;
 export declare function killSocketOrPath(): void;
 export declare function serializeResult(error: Error | null, serializedProjectGraph: string | null, serializedSourceMaps: string | null): string | null;
 /**

package/dist/src/daemon/socket-utils.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getPluginOsSocketPath = exports.getForkedProcessOsSocketPath = exports.getFullOsSocketPath = exports.isWindows = void 0;
+exports.getPluginSocketFileName = getPluginSocketFileName;
 exports.killSocketOrPath = killSocketOrPath;
 exports.serializeResult = serializeResult;
 exports.serialize = serialize;
@@ -31,18 +32,38 @@ const getForkedProcessOsSocketPath = (id) => {
 };
 exports.getForkedProcessOsSocketPath = getForkedProcessOsSocketPath;
 const getPluginOsSocketPath = (id) => {
-    let path = (0, path_1.resolve)((0, path_1.join)((0, tmp_dir_1.getSocketDir)(true), 'plugin' + id + '.sock'));
+    let path = (0, path_1.resolve)((0, path_1.join)((0, tmp_dir_1.getPluginSocketDir)(), getPluginSocketFileName(id)));
     assertValidSocketPath(path);
     return exports.isWindows ? '\\\\.\\pipe\\nx\\' + path : path;
 };
 exports.getPluginOsSocketPath = getPluginOsSocketPath;
+function getPluginSocketFileName(id) {
+    return `p${id}.sock`;
+}
 function assertValidSocketPath(path) {
     if (path.length > 95) {
+        const fallbackCause = (0, tmp_dir_1.getSocketDirFallbackCause)();
+        const refusedConfiguredSocketDir = (0, tmp_dir_1.getRefusedConfiguredSocketDir)();
         throw new Error([
             'Attempted to open socket that exceeds the maximum socket length.',
+            ...(fallbackCause === undefined
+                ? []
+                : [
+                    `Nx fell back to ${(0, path_1.dirname)(path)} because the default socket directory could not be used.`,
+                    'Run the command with --verbose to see why the default directory was rejected.',
+                ]),
             '',
-            `Set NX_SOCKET_DIR to a shorter path (e.g. ${exports.isWindows ? '%TMP%/nx-tmp' : '/tmp/nx-tmp'}) to avoid this issue.`,
-        ].join('\n'));
+            ...(refusedConfiguredSocketDir === undefined
+                ? [
+                    `Set NX_SOCKET_DIR to a shorter path (e.g. ${exports.isWindows ? '%TMP%/nx-tmp' : '/tmp/nx-tmp'}) to avoid this issue.`,
+                ]
+                : [
+                    // Saying "set a shorter path" here would be advice they already
+                    // followed: they set one, and it was refused for another reason.
+                    `The directory set in NX_SOCKET_DIR (${refusedConfiguredSocketDir}) could not be used — see the warning above — so Nx fell back to a longer path.`,
+                    'Point NX_SOCKET_DIR at a short directory your user owns.',
+                ]),
+        ].join('\n'), fallbackCause === undefined ? undefined : { cause: fallbackCause });
     }
 }
 function killSocketOrPath() {