mirror of
https://github.com/morluto/rea
synced 2026-10-26 22:28:27 -04:00
郭立 Guo Li
7590b50801
Construct integer formats directly while preserving bounds, refinements, metadata and current shared schema owners. Keep Incur-dependent CLI numeric coercion declarations unchanged. Verify canonical advertisements, 126 numeric boundary cases, 974 actual CLI parser cases, broad source tests and real public-artifact SDK workflows. Record 72 normal tasks and 12 separate owned-inspector heap diagnostics with whole-family resource bounds; distinguish SDK spans and asymmetric audit overhead. Generate numerical report sections from receipts and reject stale tables through documentation conformance checks. Closes #6236. Current-head CI and Greptile pass; actionable review findings are addressed. Codex review was unavailable due repository usage limits.
795 lines
28 KiB
TypeScript
795 lines
28 KiB
TypeScript
import { mkdir, mkdtemp, rm } from "node:fs/promises";
|
|
import { rmSync } from "node:fs";
|
|
import { tmpdir } from "node:os";
|
|
import { isAbsolute, join } from "node:path";
|
|
import { fileURLToPath } from "node:url";
|
|
import { z } from "zod";
|
|
|
|
import {
|
|
DEFAULT_SWIFTC_COMPILE_TIMEOUT_MS,
|
|
MAX_PROVIDER_STARTUP_TIMEOUT_MS,
|
|
providerStartupTimeoutSchema,
|
|
} from "../config/providerStartupTimeout.js";
|
|
import { err, ok, type Result } from "../domain/result.js";
|
|
import { ProviderCleanupError } from "../domain/providerCleanupError.js";
|
|
import type {
|
|
AnalysisCapturedOutput,
|
|
AnalysisError,
|
|
} from "../domain/analysisErrorBase.js";
|
|
import { analysisErrorWithCleanupFailure } from "../domain/analysisErrorCleanup.js";
|
|
import { safeParseJson } from "../domain/safeJson.js";
|
|
import { boundedUtf8Text } from "./boundedUtf8Text.js";
|
|
import { execFileOutput, execFileOutputFailure } from "./ExecFileOutput.js";
|
|
import type {
|
|
ProcessIdentityObservation,
|
|
ProcessRunTokenObservation,
|
|
ProcessTableEntry,
|
|
} from "./ProcessOwnership.js";
|
|
|
|
const responseSchema = z.strictObject({
|
|
results: z.array(
|
|
z.discriminatedUnion("state", [
|
|
z.strictObject({
|
|
pid: z.int().positive(),
|
|
state: z.literal("readable"),
|
|
run_id: z.string().optional(),
|
|
reason: z.null().optional(),
|
|
}),
|
|
z.strictObject({
|
|
pid: z.int().positive(),
|
|
state: z.literal("unavailable"),
|
|
run_id: z.union([z.string(), z.null()]).optional(),
|
|
reason: z.string().min(1),
|
|
}),
|
|
]),
|
|
),
|
|
});
|
|
const identityResponseSchema = z.strictObject({
|
|
results: z.array(
|
|
z.discriminatedUnion("state", [
|
|
z.strictObject({
|
|
pid: z.int().positive(),
|
|
state: z.literal("absent"),
|
|
identity: z.null().optional(),
|
|
reason: z.literal("not-in-snapshot"),
|
|
}),
|
|
z.strictObject({
|
|
pid: z.int().positive(),
|
|
state: z.literal("readable"),
|
|
identity: z.string().min(1),
|
|
effective_uid: z.int().nonnegative().optional(),
|
|
lifecycle: z.enum(["non-zombie", "zombie"]).optional(),
|
|
relation: z
|
|
.strictObject({
|
|
state: z.literal("observed"),
|
|
parent_pid: z.int().nonnegative(),
|
|
process_group_id: z.int().nonnegative(),
|
|
})
|
|
.optional(),
|
|
reason: z.null().optional(),
|
|
}),
|
|
z.strictObject({
|
|
pid: z.int().positive(),
|
|
state: z.literal("unavailable"),
|
|
identity: z.null().optional(),
|
|
reason: z.string().min(1),
|
|
}),
|
|
]),
|
|
),
|
|
});
|
|
|
|
const sourceFiles = [
|
|
fileURLToPath(
|
|
new URL(
|
|
"../../bridge/process/ProcessRunTokenReader.swift",
|
|
import.meta.url,
|
|
),
|
|
),
|
|
fileURLToPath(
|
|
new URL(
|
|
"../../bridge/process/ProcessRunTokenReaderMain.swift",
|
|
import.meta.url,
|
|
),
|
|
),
|
|
];
|
|
|
|
/**
|
|
* swift-driver runs each frontend job in its own process group. On SIGINT it
|
|
* stops those jobs and deletes their objects before exiting; on SIGTERM it
|
|
* exits while a job can still write objects under TMPDIR.
|
|
*/
|
|
export const SWIFTC_INTERRUPT = "SIGINT";
|
|
|
|
/**
|
|
* Resolve the Darwin ownership-helper compile deadline from an explicit option
|
|
* or `REA_SWIFTC_COMPILE_TIMEOUT_MS`. The default matches the measured fresh
|
|
* Swift SDK cache on the supported Intel macOS VM (about 88s), so compilation
|
|
* stays bounded independently of short provider version probes. Invalid ambient
|
|
* values fall back to the default; `parseConfig` still rejects them at CLI/MCP
|
|
* admission. The resolved value is captured when the reader is created.
|
|
* Production creates that reader from the launch environment at process start,
|
|
* so a change applies after REA restarts, on the next ownership-helper compile.
|
|
*/
|
|
export const resolveSwiftcCompileTimeoutMs = (
|
|
options: {
|
|
readonly compileTimeoutMs?: number;
|
|
readonly environment?: Readonly<Record<string, string | undefined>>;
|
|
} = {},
|
|
): number => {
|
|
if (options.compileTimeoutMs !== undefined) return options.compileTimeoutMs;
|
|
const raw = (options.environment ?? process.env)
|
|
.REA_SWIFTC_COMPILE_TIMEOUT_MS;
|
|
if (raw === undefined) return DEFAULT_SWIFTC_COMPILE_TIMEOUT_MS;
|
|
const parsed = providerStartupTimeoutSchema.safeParse(raw);
|
|
return parsed.success ? parsed.data : DEFAULT_SWIFTC_COMPILE_TIMEOUT_MS;
|
|
};
|
|
|
|
/** Name the existing swiftc deadline when a helper compile times out. */
|
|
export const swiftcCompileTimeoutRecovery = (timeoutMs: number): string =>
|
|
`The effective REA_SWIFTC_COMPILE_TIMEOUT_MS value is ${String(timeoutMs)} ms (integer range 1..${String(MAX_PROVIDER_STARTUP_TIMEOUT_MS)}; omitted default ${String(DEFAULT_SWIFTC_COMPILE_TIMEOUT_MS)} ms). Set it in the environment that starts REA and restart REA; the next ownership-helper compile uses the new value.`;
|
|
|
|
/** Bound on compiler diagnostics embedded in the inspection failure text. */
|
|
const STDERR_EXCERPT_LIMIT = 512;
|
|
|
|
/** The native Darwin process-ownership reader could not be prepared. */
|
|
export class DarwinProcessOwnershipInspectionError extends Error {
|
|
readonly #cleanupOwner: { close(): Promise<void> } | undefined;
|
|
get cleanupOwner(): { close(): Promise<void> } | undefined {
|
|
return this.#cleanupOwner;
|
|
}
|
|
constructor(
|
|
message: string,
|
|
options?: ErrorOptions & {
|
|
readonly compilerOutcome?: DarwinCompilerOutcome;
|
|
readonly capturedOutput?: AnalysisCapturedOutput;
|
|
readonly cleanupOwner?: { close(): Promise<void> } | undefined;
|
|
readonly cleanupFailure?: AnalysisError;
|
|
readonly cancellation?: { readonly reason: unknown };
|
|
},
|
|
) {
|
|
const {
|
|
compilerOutcome,
|
|
capturedOutput,
|
|
cleanupFailure,
|
|
cleanupOwner,
|
|
cancellation,
|
|
...errorOptions
|
|
} = options ?? {};
|
|
super(message, errorOptions);
|
|
this.name = "DarwinProcessOwnershipInspectionError";
|
|
this.compilerOutcome = compilerOutcome;
|
|
this.capturedOutput = capturedOutput;
|
|
this.#cleanupOwner = cleanupOwner;
|
|
this.cleanupFailure = cleanupFailure;
|
|
this.cancellation = cancellation;
|
|
}
|
|
|
|
readonly compilerOutcome: DarwinCompilerOutcome | undefined;
|
|
readonly capturedOutput: AnalysisCapturedOutput | undefined;
|
|
readonly cleanupFailure: AnalysisError | undefined;
|
|
readonly cancellation: { readonly reason: unknown } | undefined;
|
|
|
|
/** Preserve the physical preparation failure while following the exact cleanup owner. */
|
|
withCleanupFailure(
|
|
cleanup: AnalysisError,
|
|
owner?: { close(): Promise<void> },
|
|
): DarwinProcessOwnershipInspectionError {
|
|
const combined =
|
|
this.cleanupFailure === undefined || this.cleanupFailure === cleanup
|
|
? cleanup
|
|
: analysisErrorWithCleanupFailure(
|
|
this.cleanupFailure,
|
|
cleanup,
|
|
).bindCleanupDependencies([this.cleanupFailure, cleanup]);
|
|
return new DarwinProcessOwnershipInspectionError(this.message, {
|
|
...(Object.hasOwn(this, "cause") ? { cause: this.cause } : {}),
|
|
...(this.compilerOutcome === undefined
|
|
? {}
|
|
: { compilerOutcome: this.compilerOutcome }),
|
|
...(this.capturedOutput === undefined
|
|
? {}
|
|
: { capturedOutput: this.capturedOutput }),
|
|
cleanupFailure: combined,
|
|
cleanupOwner: owner ?? this.cleanupOwner,
|
|
...(this.cancellation === undefined
|
|
? {}
|
|
: { cancellation: this.cancellation }),
|
|
});
|
|
}
|
|
}
|
|
|
|
/** Explicit, bounded outcome from compiling REA's Darwin ownership helper. */
|
|
export interface DarwinCompilerOutcome {
|
|
readonly outcome:
|
|
| "exited"
|
|
| "signaled"
|
|
| "timed_out"
|
|
| "spawn_failed"
|
|
| "failed";
|
|
readonly code: string | number | null;
|
|
readonly signal: string | null;
|
|
readonly stderr: string;
|
|
readonly stderrBytes?: number;
|
|
readonly stderrTruncated: boolean;
|
|
readonly outputTruncated: boolean;
|
|
readonly killed: boolean;
|
|
readonly timeoutMs?: number;
|
|
}
|
|
|
|
const MAX_COMPILER_OUTPUT_BYTES = 8 * 1024;
|
|
|
|
const compilerFailureFacts = (
|
|
cause: unknown,
|
|
timeoutMs: number,
|
|
):
|
|
| {
|
|
readonly outcome: DarwinCompilerOutcome;
|
|
readonly capturedOutput: AnalysisCapturedOutput;
|
|
}
|
|
| undefined => {
|
|
const failure = execFileOutputFailure(cause);
|
|
if (failure === undefined) return undefined;
|
|
const stderr = boundedUtf8Text(failure.stderr, MAX_COMPILER_OUTPUT_BYTES);
|
|
const stdout = boundedUtf8Text(failure.stdout, MAX_COMPILER_OUTPUT_BYTES);
|
|
const outcome =
|
|
failure.code === "ETIMEDOUT"
|
|
? "timed_out"
|
|
: typeof failure.code === "number"
|
|
? "exited"
|
|
: failure.signal !== null
|
|
? "signaled"
|
|
: failure.code === "ENOENT"
|
|
? "spawn_failed"
|
|
: "failed";
|
|
return {
|
|
outcome: {
|
|
outcome,
|
|
code: failure.code,
|
|
signal: failure.signal,
|
|
stderr: stderr.text,
|
|
...(failure.stderrBytes === undefined
|
|
? {}
|
|
: { stderrBytes: failure.stderrBytes }),
|
|
stderrTruncated: stderr.truncated,
|
|
outputTruncated: failure.outputTruncated,
|
|
killed: failure.killed,
|
|
...(outcome === "timed_out" ? { timeoutMs } : {}),
|
|
},
|
|
capturedOutput: {
|
|
stdout: stdout.text,
|
|
stderr: stderr.text,
|
|
truncated:
|
|
stdout.truncated || stderr.truncated || failure.outputTruncated,
|
|
...(failure.stdoutBytes === undefined
|
|
? {}
|
|
: { stdout_bytes: failure.stdoutBytes }),
|
|
...(failure.stderrBytes === undefined
|
|
? {}
|
|
: { stderr_bytes: failure.stderrBytes }),
|
|
exit_code: typeof failure.code === "number" ? failure.code : null,
|
|
signal: failure.signal,
|
|
},
|
|
};
|
|
};
|
|
|
|
const compilerOutcomeDescription = (
|
|
outcome: DarwinCompilerOutcome | undefined,
|
|
fallbackCode: string | number,
|
|
): string => {
|
|
if (outcome === undefined) return `compiler result: ${String(fallbackCode)}`;
|
|
if (outcome.outcome === "exited")
|
|
return `compiler result: exit code ${String(outcome.code)}`;
|
|
if (outcome.outcome === "timed_out") {
|
|
if (outcome.timeoutMs === undefined)
|
|
return "compiler result: timed out. The effective REA_SWIFTC_COMPILE_TIMEOUT_MS value was not reported.";
|
|
return `compiler result: timed out after ${String(outcome.timeoutMs)} ms. ${swiftcCompileTimeoutRecovery(outcome.timeoutMs)}`;
|
|
}
|
|
if (outcome.outcome === "signaled")
|
|
return `compiler result: stopped by signal ${outcome.signal ?? "an unknown signal"}`;
|
|
return `compiler result: ${String(outcome.code)}`;
|
|
};
|
|
|
|
const compilerInspectionError = (
|
|
cause: unknown,
|
|
timeoutMs: number,
|
|
compiler: DarwinProcessReaderCompiler,
|
|
): DarwinProcessOwnershipInspectionError => {
|
|
const facts = compilerFailureFacts(cause, timeoutMs);
|
|
const outcome = facts?.outcome;
|
|
const code = outcome?.code ?? "unknown";
|
|
const description = compilerOutcomeDescription(outcome, code);
|
|
const launcher =
|
|
compiler.kind === "xcrun"
|
|
? "xcrun"
|
|
: "the selected Swift compiler (REA_DARWIN_SWIFTC_PATH)";
|
|
const prefix =
|
|
code === "ENOENT"
|
|
? `macOS process ownership inspection requires the Apple Swift compiler via ${launcher}`
|
|
: `macOS process ownership helper compilation failed via ${launcher}`;
|
|
const stderr = boundedUtf8Text(outcome?.stderr ?? "", STDERR_EXCERPT_LIMIT);
|
|
const diagnostics = stderr.text.trim();
|
|
const truncated =
|
|
stderr.truncated ||
|
|
outcome?.stderrTruncated === true ||
|
|
outcome?.outputTruncated === true;
|
|
const truncationNote = !truncated
|
|
? ""
|
|
: stderr.truncated
|
|
? `… [diagnostics truncated at ${String(STDERR_EXCERPT_LIMIT)} bytes; this release has no runtime override]`
|
|
: "… [diagnostics truncated; this release has no runtime override]";
|
|
const suffix = diagnostics
|
|
? `: ${diagnostics}${truncationNote}`
|
|
: outcome === undefined
|
|
? `: ${cause instanceof Error ? cause.message : String(cause)}`
|
|
: ": no compiler diagnostics were captured";
|
|
return new DarwinProcessOwnershipInspectionError(
|
|
`${prefix} (${description})${suffix}`,
|
|
{
|
|
cause,
|
|
...(facts === undefined
|
|
? {}
|
|
: {
|
|
compilerOutcome: facts.outcome,
|
|
capturedOutput: facts.capturedOutput,
|
|
}),
|
|
},
|
|
);
|
|
};
|
|
|
|
/** One allocated helper root, including its shared finalization and live cleanup status. */
|
|
interface ProcessReaderRoot {
|
|
readonly path: string;
|
|
cleanupPromise?: Promise<void> | undefined;
|
|
cleanupAnchor?: ProviderCleanupError | undefined;
|
|
}
|
|
|
|
interface ProcessReaderCompilation {
|
|
readonly controller: AbortController;
|
|
promise: Promise<Result<string, unknown>>;
|
|
primaryFailure?: { readonly cause: unknown };
|
|
waiters: number;
|
|
aborting: boolean;
|
|
settled: boolean;
|
|
}
|
|
|
|
const abortReason = (signal: AbortSignal): unknown => {
|
|
if (signal.reason !== undefined) return signal.reason;
|
|
const error = new Error("The operation was aborted");
|
|
error.name = "AbortError";
|
|
return error;
|
|
};
|
|
|
|
const isExpectedAbort = (cause: unknown, signal: AbortSignal): boolean =>
|
|
signal.aborted &&
|
|
(cause === signal.reason ||
|
|
(cause instanceof Error && cause.name === "AbortError"));
|
|
|
|
type CompilationWaitOutcome =
|
|
| { readonly kind: "completed"; readonly result: Result<string, unknown> }
|
|
| { readonly kind: "cancelled"; readonly reason: unknown };
|
|
|
|
const waitForCompilation = async (
|
|
operation: ProcessReaderCompilation,
|
|
signal: AbortSignal | undefined,
|
|
): Promise<CompilationWaitOutcome> => {
|
|
if (signal === undefined)
|
|
return { kind: "completed", result: await operation.promise };
|
|
return new Promise((resolve) => {
|
|
let completed = false;
|
|
const finish = (outcome: CompilationWaitOutcome) => {
|
|
if (completed) return;
|
|
completed = true;
|
|
signal.removeEventListener("abort", onAbort);
|
|
resolve(outcome);
|
|
};
|
|
const onAbort = () => {
|
|
// Finalization belongs to an already observed physical failure.
|
|
if (operation.primaryFailure !== undefined) return;
|
|
finish({ kind: "cancelled", reason: signal.reason });
|
|
};
|
|
signal.addEventListener("abort", onAbort, { once: true });
|
|
void operation.promise.then((result) =>
|
|
finish({ kind: "completed", result }),
|
|
);
|
|
if (signal.aborted) onAbort();
|
|
});
|
|
};
|
|
|
|
/** Explicit tool selection; direct Swift compilation also needs its matching SDK. */
|
|
export type DarwinProcessReaderCompiler =
|
|
| { readonly kind: "xcrun"; readonly executable: string }
|
|
| {
|
|
readonly kind: "swiftc";
|
|
readonly executable: string;
|
|
readonly sdkRoot: string;
|
|
};
|
|
|
|
/** Compile and retain the narrow Darwin sysctl reader for this REA process. */
|
|
export const createDarwinProcessRunTokenReader = (
|
|
options: {
|
|
readonly compiler?: DarwinProcessReaderCompiler;
|
|
/** Deadline for helper compilation, independent of provider execution. */
|
|
readonly compileTimeoutMs?: number;
|
|
/** Environment consulted when `compileTimeoutMs` is omitted. */
|
|
readonly environment?: Readonly<Record<string, string | undefined>>;
|
|
/**
|
|
* Caller-owned directory holding the compiler's module cache. Unset keeps
|
|
* Swift's reusable default cache; a supplied directory outlives this
|
|
* reader because cleanup only removes the per-run helper root.
|
|
*/
|
|
readonly moduleCachePath?: string;
|
|
} = {},
|
|
) => {
|
|
const compiler = options.compiler ?? {
|
|
kind: "xcrun",
|
|
executable: "/usr/bin/xcrun",
|
|
};
|
|
const compilerTimeoutMs = resolveSwiftcCompileTimeoutMs(options);
|
|
const moduleCachePath = options.moduleCachePath ?? "";
|
|
let root: ProcessReaderRoot | undefined;
|
|
let executable: string | undefined;
|
|
let compilation: ProcessReaderCompilation | undefined;
|
|
let closePromise: Promise<void> | undefined;
|
|
let closed = false;
|
|
let exitCleanupInstalled = false;
|
|
const activeCommands = new Set<Promise<string>>();
|
|
|
|
const cleanupAtExit = () => {
|
|
if (root !== undefined) rmSync(root.path, { recursive: true, force: true });
|
|
};
|
|
const cleanupRoot = (target = root): Promise<void> => {
|
|
if (target === undefined) return Promise.resolve();
|
|
target.cleanupPromise ??= Promise.resolve()
|
|
.then(async () => {
|
|
try {
|
|
await rm(target.path, { recursive: true, force: true });
|
|
} catch (cause: unknown) {
|
|
const failure = new ProviderCleanupError(
|
|
"process-ownership",
|
|
[target.path],
|
|
{
|
|
reason:
|
|
"The Darwin ownership helper root remains owned until removal succeeds.",
|
|
},
|
|
{ cause, operation: "prepare_owned_process" },
|
|
);
|
|
if (target.cleanupAnchor === undefined)
|
|
target.cleanupAnchor = failure;
|
|
else failure.bindCleanupDependencies([target.cleanupAnchor]);
|
|
throw failure;
|
|
}
|
|
target.cleanupAnchor?.resolveCleanup();
|
|
target.cleanupAnchor = undefined;
|
|
if (root !== target) return;
|
|
root = undefined;
|
|
executable = undefined;
|
|
if (exitCleanupInstalled) process.removeListener("exit", cleanupAtExit);
|
|
exitCleanupInstalled = false;
|
|
})
|
|
.catch((cause: unknown) => {
|
|
target.cleanupPromise = undefined;
|
|
throw cause;
|
|
});
|
|
return target.cleanupPromise;
|
|
};
|
|
const runCompilation = async (
|
|
operation: ProcessReaderCompilation,
|
|
): Promise<string> => {
|
|
const signal = operation.controller.signal;
|
|
let operationRoot: ProcessReaderRoot | undefined;
|
|
try {
|
|
if (
|
|
compiler.kind === "swiftc" &&
|
|
(!isAbsolute(compiler.executable) || !isAbsolute(compiler.sdkRoot))
|
|
) {
|
|
throw new DarwinProcessOwnershipInspectionError(
|
|
"Direct Darwin helper compilation requires absolute REA_DARWIN_SWIFTC_PATH and SDKROOT paths selecting a compatible installed Swift compiler and macOS SDK.",
|
|
);
|
|
}
|
|
operationRoot = {
|
|
path: await mkdtemp(join(tmpdir(), "rea-process-token-")),
|
|
};
|
|
root = operationRoot;
|
|
process.once("exit", cleanupAtExit);
|
|
exitCleanupInstalled = true;
|
|
if (signal.aborted || closed) throw abortReason(signal);
|
|
const output = join(operationRoot.path, "reader");
|
|
// swiftc keeps intermediate objects under TMPDIR, so keep them inside
|
|
// the root that cleanup removes.
|
|
const compilerTemporary = join(operationRoot.path, "tmp");
|
|
await mkdir(compilerTemporary);
|
|
const compilerEnvironment: NodeJS.ProcessEnv = {
|
|
...process.env,
|
|
TMPDIR: compilerTemporary,
|
|
};
|
|
const compilerArguments =
|
|
compiler.kind === "xcrun" ? ["swiftc"] : ["-sdk", compiler.sdkRoot];
|
|
if (compiler.kind === "swiftc")
|
|
compilerEnvironment.SDKROOT = compiler.sdkRoot;
|
|
if (moduleCachePath === "") {
|
|
// Use Swift's reusable default cache for REA's internal helper compilation.
|
|
delete compilerEnvironment.CLANG_MODULE_CACHE_PATH;
|
|
} else {
|
|
await mkdir(moduleCachePath, { recursive: true });
|
|
compilerArguments.push("-module-cache-path", moduleCachePath);
|
|
compilerEnvironment.CLANG_MODULE_CACHE_PATH = moduleCachePath;
|
|
}
|
|
compilerArguments.push(...sourceFiles, "-o", output);
|
|
try {
|
|
await execFileOutput(compiler.executable, compilerArguments, {
|
|
timeout: compilerTimeoutMs,
|
|
maxBuffer: 1024 * 1024,
|
|
signal,
|
|
stopSignal: SWIFTC_INTERRUPT,
|
|
env: compilerEnvironment,
|
|
});
|
|
} catch (cause: unknown) {
|
|
if (isExpectedAbort(cause, signal)) throw cause;
|
|
throw compilerInspectionError(cause, compilerTimeoutMs, compiler);
|
|
}
|
|
if (signal.aborted || closed) throw abortReason(signal);
|
|
executable = output;
|
|
return output;
|
|
} catch (cause: unknown) {
|
|
operation.primaryFailure = { cause };
|
|
if (operationRoot !== undefined) {
|
|
// execFileOutput has settled, so inherited compiler pipes are closed.
|
|
// That is not proof for a child that did not inherit them; this owner
|
|
// does not signal processes it did not launch.
|
|
try {
|
|
await cleanupRoot(operationRoot);
|
|
} catch (cleanup: unknown) {
|
|
if (!(cleanup instanceof ProviderCleanupError)) throw cleanup;
|
|
const primary =
|
|
cause instanceof DarwinProcessOwnershipInspectionError
|
|
? cause
|
|
: new DarwinProcessOwnershipInspectionError(
|
|
"Darwin process ownership helper preparation failed",
|
|
{ cause },
|
|
);
|
|
throw primary.withCleanupFailure(cleanup, {
|
|
close: () => cleanupRoot(operationRoot),
|
|
});
|
|
}
|
|
}
|
|
throw cause;
|
|
}
|
|
};
|
|
|
|
const beginCompilation = (): ProcessReaderCompilation => {
|
|
const controller = new AbortController();
|
|
const operation: ProcessReaderCompilation = {
|
|
controller,
|
|
promise: Promise.resolve()
|
|
.then(() => runCompilation(operation))
|
|
.then(ok, err)
|
|
.finally(() => {
|
|
operation.settled = true;
|
|
if (compilation === operation) compilation = undefined;
|
|
}),
|
|
waiters: 0,
|
|
aborting: false,
|
|
settled: false,
|
|
};
|
|
compilation = operation;
|
|
return operation;
|
|
};
|
|
|
|
const compile = async (signal?: AbortSignal): Promise<string> => {
|
|
if (closed) throw new Error("Darwin process token reader is closed");
|
|
signal?.throwIfAborted();
|
|
while (true) {
|
|
if (closed) throw new Error("Darwin process token reader is closed");
|
|
signal?.throwIfAborted();
|
|
if (executable !== undefined) return executable;
|
|
if (compilation === undefined && root !== undefined) {
|
|
await cleanupRoot();
|
|
continue;
|
|
}
|
|
let operation = compilation;
|
|
if (operation?.aborting === true) {
|
|
const waited = await waitForCompilation(operation, signal);
|
|
if (waited.kind === "cancelled") throw waited.reason;
|
|
if (
|
|
!waited.result.ok &&
|
|
waited.result.error instanceof
|
|
DarwinProcessOwnershipInspectionError &&
|
|
waited.result.error.cleanupFailure !== undefined
|
|
)
|
|
throw waited.result.error;
|
|
continue;
|
|
}
|
|
operation ??= beginCompilation();
|
|
operation.waiters += 1;
|
|
const waited = await waitForCompilation(operation, signal);
|
|
operation.waiters -= 1;
|
|
if (
|
|
operation.waiters === 0 &&
|
|
!operation.settled &&
|
|
!operation.aborting
|
|
) {
|
|
operation.aborting = true;
|
|
operation.controller.abort();
|
|
const finalized = await operation.promise;
|
|
if (
|
|
waited.kind === "cancelled" &&
|
|
!finalized.ok &&
|
|
finalized.error instanceof DarwinProcessOwnershipInspectionError &&
|
|
finalized.error.cleanupFailure !== undefined
|
|
) {
|
|
throw new DarwinProcessOwnershipInspectionError(
|
|
"Darwin process ownership helper preparation was cancelled",
|
|
{
|
|
cause: waited.reason,
|
|
cancellation: { reason: waited.reason },
|
|
cleanupFailure: finalized.error.cleanupFailure,
|
|
cleanupOwner: finalized.error.cleanupOwner,
|
|
},
|
|
);
|
|
}
|
|
}
|
|
if (waited.kind === "cancelled") throw waited.reason;
|
|
if (!waited.result.ok) throw waited.result.error;
|
|
return waited.result.value;
|
|
}
|
|
};
|
|
|
|
const runHelper = (
|
|
arguments_: readonly string[],
|
|
signal?: AbortSignal,
|
|
): Promise<string> => {
|
|
if (closed)
|
|
return Promise.reject(new Error("Darwin process token reader is closed"));
|
|
const pending = (async () => {
|
|
const binary = await compile(signal);
|
|
const { stdout } = await execFileOutput(binary, arguments_, {
|
|
timeout: 15_000,
|
|
stopSignal: "SIGTERM",
|
|
...(signal === undefined ? {} : { signal }),
|
|
});
|
|
signal?.throwIfAborted();
|
|
return stdout;
|
|
})();
|
|
activeCommands.add(pending);
|
|
return pending.finally(() => {
|
|
activeCommands.delete(pending);
|
|
});
|
|
};
|
|
|
|
const read = async (
|
|
processes: readonly ProcessTableEntry[],
|
|
signal?: AbortSignal,
|
|
): Promise<ReadonlyMap<number, ProcessRunTokenObservation>> => {
|
|
signal?.throwIfAborted();
|
|
if (processes.length === 0) return new Map();
|
|
const pids = processes.map(({ pid }) => String(pid));
|
|
const stdout = await runHelper(pids, signal);
|
|
const decoded = safeParseJson(stdout);
|
|
if (!decoded.ok)
|
|
throw new Error(
|
|
`macOS process token helper returned invalid JSON: ${decoded.error}`,
|
|
{ cause: decoded.cause },
|
|
);
|
|
const parsed = responseSchema.safeParse(decoded.value);
|
|
if (!parsed.success)
|
|
throw new Error(
|
|
"macOS process token helper returned an invalid response",
|
|
{
|
|
cause: parsed.error,
|
|
},
|
|
);
|
|
const requested = new Set(processes.map(({ pid }) => pid));
|
|
const observations = new Map<number, ProcessRunTokenObservation>();
|
|
for (const result of parsed.data.results) {
|
|
if (!requested.has(result.pid) || observations.has(result.pid))
|
|
throw new Error(
|
|
"macOS process token helper returned an unexpected PID set",
|
|
);
|
|
observations.set(
|
|
result.pid,
|
|
result.state === "readable"
|
|
? { state: "readable", runId: result.run_id }
|
|
: {
|
|
state: "unavailable",
|
|
reason:
|
|
result.reason ?? "process token observation is unavailable",
|
|
},
|
|
);
|
|
}
|
|
if (observations.size !== requested.size)
|
|
throw new Error(
|
|
"macOS process token helper returned an incomplete PID set",
|
|
);
|
|
return observations;
|
|
};
|
|
|
|
const identities = async (
|
|
processes: readonly ProcessTableEntry[],
|
|
signal?: AbortSignal,
|
|
): Promise<ReadonlyMap<number, ProcessIdentityObservation>> => {
|
|
if (processes.length === 0) return new Map();
|
|
const pids = processes.map(({ pid }) => String(pid));
|
|
const stdout = await runHelper(["--identities", ...pids], signal);
|
|
const decoded = safeParseJson(stdout);
|
|
if (!decoded.ok)
|
|
throw new Error(
|
|
`macOS process identity helper returned invalid JSON: ${decoded.error}`,
|
|
{ cause: decoded.cause },
|
|
);
|
|
const parsed = identityResponseSchema.safeParse(decoded.value);
|
|
if (!parsed.success)
|
|
throw new Error(
|
|
"macOS process identity helper returned an invalid response",
|
|
{
|
|
cause: parsed.error,
|
|
},
|
|
);
|
|
const requested = new Set(processes.map(({ pid }) => pid));
|
|
const observations = new Map<number, ProcessIdentityObservation>();
|
|
for (const result of parsed.data.results) {
|
|
if (!requested.has(result.pid) || observations.has(result.pid))
|
|
throw new Error(
|
|
"macOS process identity helper returned an unexpected PID set",
|
|
);
|
|
observations.set(
|
|
result.pid,
|
|
result.state === "readable"
|
|
? {
|
|
state: "readable",
|
|
identity: result.identity,
|
|
...(result.effective_uid === undefined
|
|
? {}
|
|
: { effectiveUid: result.effective_uid }),
|
|
...(result.lifecycle === undefined
|
|
? {}
|
|
: {
|
|
lifecycle: {
|
|
state: "observed" as const,
|
|
lifecycle: result.lifecycle,
|
|
},
|
|
}),
|
|
...(result.relation === undefined
|
|
? {}
|
|
: {
|
|
relation: {
|
|
state: "observed" as const,
|
|
parentPid: result.relation.parent_pid,
|
|
processGroupId: result.relation.process_group_id,
|
|
},
|
|
}),
|
|
}
|
|
: result.state === "absent"
|
|
? { state: "absent", reason: result.reason }
|
|
: { state: "unavailable", reason: result.reason },
|
|
);
|
|
}
|
|
if (observations.size !== requested.size)
|
|
throw new Error(
|
|
"macOS process identity helper returned an incomplete PID set",
|
|
);
|
|
return observations;
|
|
};
|
|
|
|
const close = (): Promise<void> => {
|
|
if (closePromise !== undefined) return closePromise;
|
|
closed = true;
|
|
const pendingClose = (async () => {
|
|
const operation = compilation;
|
|
if (operation !== undefined && !operation.settled) {
|
|
operation.aborting = true;
|
|
operation.controller.abort();
|
|
await operation.promise;
|
|
}
|
|
await Promise.allSettled(activeCommands);
|
|
await cleanupRoot();
|
|
})().catch((cause: unknown) => {
|
|
if (closePromise === pendingClose) closePromise = undefined;
|
|
throw cause;
|
|
});
|
|
closePromise = pendingClose;
|
|
return closePromise;
|
|
};
|
|
|
|
return { read, identities, prepare: compile, close };
|
|
};
|