mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-23 09:07:46 +02:00
## Thinking Path > - Paperclip lets people manage agents that do useful work. > - Users need complete tasks, clear questions, retained context, and dependable recovery. > - Separate run tests do not prove that the complete user experience works. > - Successful retries can hide earlier failures and missing evidence. > - This PR extends the existing Product E2E harness with three explicit journeys. > - It adds a qualification checkpoint over the full retained result pool. > - Independent artifacts, state, rendered conversations, and delivery receipts establish each outcome. ## Linked Issues or Issue Description Refs #17088, #17089, and #17046. This PR repairs two Stop lifecycle defects and combines the qualification changes previously reviewed in #17095, #17090, and #17099. Daily operations remain with #17051. It adds no second scheduler or recovery engine. **What happened?** A completed run can still leave a user without useful output, an understandable question, or a working continuation. Existing isolated tests and best-attempt reports do not establish the combined behavior. **Expected behavior** A necessary question includes its explanation and resumes once after an answer. Stop prevents automatic continuation until the user resumes. Restart during finalization preserves the accepted provider result and delivers it once. Qualification requires independent evidence for six journeys on both agents through Slack and Paperclip. **Steps to reproduce** List the necessary-question, followup-stop-resume, and finalization-recovery suites using the documented selectors. Run one exact cell with the configured model and target. Supply a private qualification manifest to the existing report command to grade all retained attempts. Missing proof and incomplete coverage must fail. ## What Changed - Wake existing accounting in the same committed native Stop closure. A receipt that arrives before closure must still settle once; incomplete receipts remain held. - Require a later user message before native Stop can promote earlier saved input. Preserve those earlier messages for the authorized resumption. - Add explicit necessary-question cells. Verify the actual prompt and context, answer, one bound continuation, and the delivered document link and revision. - Add explicit follow-up, Stop, and later resumption cells. Verify a live owned provider turn, cancellation acknowledgement, at least five seconds without an automatic path, retained direction and workspace context, and an actual browser download. - Add explicit Daytona finalization-recovery cells. Stop the owned controller after public result acceptance and during workspace finalization. Require the original result, restored file hash, resumed operation, one provider turn, and one receipt-bound delivery. - Share the receipt-based delivery observer across both recovery journeys. Keep model prose separate from the authoritative delivered comment identity. - Add a 24-cell qualification checkpoint over every retained attempt. Require three fresh candidate passes per cell and later staging proof with exact source, runtime, model, settings, instructions, and independent evidence. - Reject absent or unsafe manifest evidence. Preserve failed attempts and incomplete observations in the normal reports. - Provide four explicit rotating daily selections. Refuse daily selection until all required live drivers exist. Keep scheduling and spending with the existing operations owner. - Document the exact selectors, evidence contract, limitations, and remaining staging work. ## Verification - Local Product E2E support: 3,554 passed with two existing skips; source prerequisites: 128 passed. E2E typecheck passes. The actual file-chip and Download-control browser regression passes. - Two real-database regressions fail before the production repair. The stopped coordinator leaves accounting asleep after a complete receipt; the saved queue can restart from pre-Stop input. The repaired settlement and cancellation cohort passes 66 checks. The complete 256-case continuation suite passes with stronger two-phase Stop expectations, and 66 native executor accounting/Stop safety cases pass. Server typecheck passes. - All required CI, repository build/typecheck/tests, and fresh Greptile 5/5 pass at the final head232d3c52d0, with no unresolved findings. - Both actual-model necessary-question development cells passed on the earlier recordedc4e409d819source. This is supporting evidence for that revision, not current qualification. - Both fresh Stop development cells at6036cee2f4stopped, remained idle, resumed once, reached Done, and settled original and successor accounting. Their original machine grades remain failed: the observer counted the generated file-preparation carrier as another final reply. The corrected observer independently correlates the applied preparation receipt with the actual attachment/comment binding. Retained-wire diagnostic replay finds one final delivery for each model without changing either grade. Those original failures remain retained: https://github.com/paperclipai/paperclip/actions/runs/39644220458. - Both fresh actual-model Stop/resume cells pass all five checks at232d3c52d0: https://github.com/paperclipai/paperclip/actions/runs/39647010372. Independent inspection confirms exactly one cancelled original and one committed successor on the same task, 5.091/5.513-second quiet intervals before the user resumes, retained workspace/instructions/tool identities, and one receipt-bound final response. Each visible JSON chip opens in a tab and its Download control yields verified bytes. The rendered reference and changed label independently reconstruct the registered file hash and the original context hash. Both cleanups pass. These remain local API-key/per-turn development results, not the required staging/Slack qualification. - Other retained Stop failures include missed active boundaries, the real accounting admission failure, and a preparation observer that required nativeIssueId before runtime selection. They remain recorded at https://github.com/paperclipai/paperclip/actions/runs/39636796645 and https://github.com/paperclipai/paperclip/actions/runs/39642060165. The preparation observer now validates all present task IDs and still requires selected native execution at the active checkpoint. - The remote finalization attempt failed during image export with no disk space before a provider started. Remote crash acceptance remains unverified. - Negative calibration rejects wrong or absent ownership/evidence, stale settings, unsafe files, repeated admissions, unacknowledged Stop, premature resumption, incomplete receipts, lost context, genuine duplicate final replies, and missing delivery. A prepared-looking body cannot suppress a comment; absent, rejected, foreign, or mismatched file receipts and attachment bindings also cannot suppress it. - Core staging/Slack drivers, 72 fresh candidate passes, deployed staging proof, and recovery of the original user-visible task remain incomplete. No measured reliability percentage or completed qualification is claimed. ## Risks These are explicit development cells. Their API-key and per-turn runs do not qualify deployed subscription authentication, warm reuse, or Slack. A fast provider can miss the Stop boundary; that attempt fails. The remote crash boundary depends on independently observed public state and an owned controller. The checkpoint is opt-in through a private manifest and cannot replace the missing live observers. The two production changes affect native Stop settlement and saved-input promotion. They use the existing transaction signals and admission path. A complete receipt can settle without another provider turn. Partial accounting and all ownership, cleanup, pause, and budget gates remain authoritative. ## Model Used OpenAI Codex, GPT-6 family, with repository tools and code execution. The runtime does not expose its exact deployment ID or context-window size. Those values are not inferred. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used (with version and capability details) - [x] I have checked ROADMAP.md and confirmed this PR does not duplicate planned core work - [x] I have searched GitHub for duplicate or related PRs and linked them above - [x] I have either (a) linked existing issues with `Fixes: #` / `Closes #` / `Refs #` OR (b) described the issue in-PR following the relevant issue template - [x] I have not referenced internal/instance-local Paperclip issues or links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip` URLs) - [x] My branch name describes the change (e.g. `docs/...`, `fix/...`) and contains no internal Paperclip ticket id or instance-derived details - [x] I have run tests locally and they pass - [x] I have added or updated tests where applicable - [x] I have updated relevant documentation to reflect my changes - [x] I have considered and documented any risks above - [x] All Paperclip CI gates are green - [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups - [x] I will address all Greptile and reviewer comments before requesting merge --------- Co-authored-by: Paperclip <noreply@paperclip.ing> Co-authored-by: Paperclip <paperclip@paperclip.ing>
376 lines
17 KiB
TypeScript
376 lines
17 KiB
TypeScript
import { spawn, type ChildProcess } from "node:child_process";
|
|
import { once } from "node:events";
|
|
import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
|
|
import os from "node:os";
|
|
import path from "node:path";
|
|
import { afterEach, expect, it } from "vitest";
|
|
import { createRunnerE2EServerStopper, runnerE2EServerDetached } from "./server-stop.js";
|
|
import { readProcessTable } from "./process-tree.js";
|
|
import { createProcessTreeOwner, stopOwnedProcessTree } from "./process-tree-owner.js";
|
|
import { runnerE2ETypeScriptProcessArgs } from "./web-server-command.js";
|
|
|
|
const children: ChildProcess[] = [];
|
|
const directories: string[] = [];
|
|
const worker = `
|
|
process.once('SIGTERM', () => {
|
|
process.send('stopping');
|
|
process.once('message', () => {
|
|
process.send('close-complete', () => process.exit(0));
|
|
});
|
|
});
|
|
process.send('ready');
|
|
setInterval(() => {}, 1000);
|
|
`;
|
|
async function fixture(source = worker) {
|
|
const root = await mkdtemp(path.join(os.tmpdir(), "paperclip-server-stop-"));
|
|
directories.push(root);
|
|
const entry = path.join(root, "worker.cjs");
|
|
await writeFile(entry, source);
|
|
return { root, entry };
|
|
}
|
|
function start(entry: string) {
|
|
const child = spawn(process.execPath, [entry], {
|
|
detached: runnerE2EServerDetached,
|
|
stdio: ["ignore", "pipe", "pipe", "ipc"],
|
|
});
|
|
children.push(child);
|
|
return child;
|
|
}
|
|
function stopper(gracefulTimeoutMs = 2_000) {
|
|
const logs: string[] = [];
|
|
const errors = new WeakSet<ChildProcess>();
|
|
const stop = createRunnerE2EServerStopper({
|
|
gracefulTimeoutMs, forcedTimeoutMs: 2_000,
|
|
hasSpawnError: child => errors.has(child),
|
|
markExpectedStop: () => {}, log: line => logs.push(line),
|
|
});
|
|
return { stop, logs, errors };
|
|
}
|
|
function expectSuccessfulWrapperReceipt(wrapper: ChildProcess, messages: unknown[], diagnostics = "") {
|
|
expect([wrapper.exitCode, wrapper.signalCode], diagnostics).toEqual([0, null]);
|
|
expect(messages, diagnostics).toContainEqual({ exitCode: 0, signalCode: null });
|
|
}
|
|
afterEach(async () => {
|
|
for (const child of children.splice(0)) {
|
|
if (child.exitCode !== null || child.signalCode !== null) continue;
|
|
const exited = once(child, "exit").catch(() => {});
|
|
try {
|
|
if (runnerE2EServerDetached && child.pid) process.kill(-child.pid, "SIGKILL");
|
|
else child.kill("SIGKILL");
|
|
} catch { child.kill("SIGKILL"); }
|
|
await exited;
|
|
}
|
|
for (const directory of directories.splice(0)) await rm(directory, { recursive: true, force: true });
|
|
});
|
|
|
|
it.skipIf(process.platform === "win32")("joins signal, final cleanup and repeated calls while a once-handler finishes asynchronous close", async () => {
|
|
const { entry } = await fixture();
|
|
const child = start(entry);
|
|
expect((await once(child, "message"))[0]).toBe("ready");
|
|
const { stop, logs } = stopper();
|
|
const stopping = once(child, "message");
|
|
const first = stop(child);
|
|
expect((await stopping)[0]).toBe("stopping");
|
|
// The server supervisor reaches final cleanup after its 200ms poll.
|
|
await new Promise(resolve => setTimeout(resolve, 250));
|
|
const messages: unknown[] = [];
|
|
child.on("message", message => messages.push(message));
|
|
const finalCleanup = stop(child);
|
|
const repeated = stop(child, "SIGINT");
|
|
// Give an erroneous repeated signal time to interrupt the held close before
|
|
// releasing it. A behavioral failure must not depend on promise identity.
|
|
await new Promise(resolve => setTimeout(resolve, 50));
|
|
if (child.connected) child.send("finish");
|
|
await Promise.all([first, finalCleanup, repeated]);
|
|
expect(messages).toContain("close-complete");
|
|
expect([child.exitCode, child.signalCode]).toEqual([0, null]);
|
|
expect(finalCleanup).toBe(first);
|
|
expect(repeated).toBe(first);
|
|
expect(stop(child)).toBe(first);
|
|
await stop(child);
|
|
expect(logs).toEqual([]);
|
|
});
|
|
|
|
it.skipIf(process.platform === "win32")("bounds an unresponsive child and reaps it with one escalation", async () => {
|
|
const { entry } = await fixture(`process.on('SIGTERM', () => {}); process.send('ready'); setInterval(() => {}, 1000);`);
|
|
const child = start(entry);
|
|
await once(child, "message");
|
|
const { stop, logs } = stopper(50);
|
|
await Promise.all([stop(child), stop(child), stop(child)]);
|
|
expect(child.signalCode).toBe("SIGKILL");
|
|
expect(logs).toHaveLength(1);
|
|
expect(() => process.kill(child.pid!, 0)).toThrow();
|
|
});
|
|
|
|
it("settles an already-exited child without signals or escalation", async () => {
|
|
const { entry } = await fixture("process.exit(0)");
|
|
const child = start(entry);
|
|
await once(child, "exit");
|
|
const { stop, logs } = stopper();
|
|
await stop(child);
|
|
expect([child.exitCode, child.signalCode, logs]).toEqual([0, null, []]);
|
|
});
|
|
|
|
it("settles a failed spawn without attempting escalation", async () => {
|
|
const { root } = await fixture();
|
|
const child = spawn(path.join(root, "missing-server-executable"));
|
|
const { stop, logs, errors } = stopper();
|
|
child.once("error", () => errors.add(child));
|
|
await new Promise<void>(resolve => child.once("error", () => resolve()));
|
|
await stop(child);
|
|
expect(logs).toEqual([]);
|
|
});
|
|
|
|
it.skipIf(process.platform === "win32")("lets launcher cancellation join wrapper shutdown without signaling the server twice", async () => {
|
|
const { root, entry } = await fixture();
|
|
const supervisor = path.join(root, "supervisor.mts");
|
|
const helper = path.join(import.meta.dirname, "server-stop.ts");
|
|
await writeFile(supervisor, `
|
|
import { spawn } from 'node:child_process';
|
|
import { createRunnerE2EServerStopper, runnerE2EServerDetached } from ${JSON.stringify(helper)};
|
|
const child = spawn(process.execPath, [${JSON.stringify(entry)}], {
|
|
detached: runnerE2EServerDetached, stdio: ['ignore', 'ignore', 'ignore', 'ipc'],
|
|
});
|
|
const stop = createRunnerE2EServerStopper({ gracefulTimeoutMs: 2000, forcedTimeoutMs: 2000,
|
|
hasSpawnError: () => false, markExpectedStop: () => {}, log: () => {} });
|
|
const finish = () => { void stop(child).then(() => {
|
|
process.send!({ exitCode: child.exitCode, signalCode: child.signalCode }, () => process.exit(0));
|
|
}); };
|
|
process.on('SIGTERM', finish);
|
|
process.on('message', message => { if (message === 'stop') finish(); else child.send('finish'); });
|
|
child.on('message', message => process.send!({ message, pid: child.pid }));
|
|
`);
|
|
const wrapper = spawn(process.execPath, runnerE2ETypeScriptProcessArgs(path.resolve(import.meta.dirname, "../.."), supervisor), {
|
|
detached: true, stdio: ["ignore", "pipe", "pipe", "ipc"],
|
|
});
|
|
children.push(wrapper);
|
|
let wrapperErrors = "";
|
|
wrapper.stderr?.on("data", chunk => { wrapperErrors += chunk; });
|
|
let workerPid: number | undefined;
|
|
const owner = createProcessTreeOwner(wrapper);
|
|
try {
|
|
workerPid = (await once(wrapper, "message"))[0].pid;
|
|
const stopping = once(wrapper, "message");
|
|
wrapper.send("stop");
|
|
expect((await stopping)[0].message).toBe("stopping");
|
|
// If Paperclip shared the wrapper group, this would kill its once-handler
|
|
// during the async close even though the helper sends only one signal.
|
|
const messages: unknown[] = [];
|
|
wrapper.on("message", message => messages.push(message));
|
|
// Process exit is not IPC completion. Register both barriers before
|
|
// cancellation so the final worker receipt is drained before asserting it.
|
|
const closed = once(wrapper, "close");
|
|
const disconnected = once(wrapper, "disconnect");
|
|
await owner.observe();
|
|
const cancellation = stopOwnedProcessTree(wrapper, owner, 2_000, 2_000);
|
|
await new Promise(resolve => setTimeout(resolve, 250));
|
|
if (wrapper.connected) wrapper.send("finish");
|
|
await Promise.all([closed, disconnected]);
|
|
await cancellation;
|
|
const diagnostics = `${wrapperErrors}\nwrapper exit=${wrapper.exitCode} signal=${wrapper.signalCode} connected=${wrapper.connected}`;
|
|
expect(messages, diagnostics).toContainEqual({ message: "close-complete", pid: workerPid });
|
|
expectSuccessfulWrapperReceipt(wrapper, messages, diagnostics);
|
|
expect(() => process.kill(workerPid!, 0)).toThrow();
|
|
} finally {
|
|
owner.stopObserving();
|
|
if (workerPid) { try { process.kill(-workerPid, "SIGKILL"); } catch { /* reaped */ } }
|
|
}
|
|
});
|
|
|
|
it.each(["failed", "missing"] as const)("rejects a %s worker receipt even when the wrapper closes successfully", async receipt => {
|
|
const { entry } = await fixture(receipt === "failed"
|
|
? "process.send({ exitCode: 23, signalCode: null }, () => process.exit(0));"
|
|
: "process.exit(0);");
|
|
const wrapper = start(entry);
|
|
const messages: unknown[] = [];
|
|
wrapper.on("message", message => messages.push(message));
|
|
const closed = once(wrapper, "close");
|
|
const disconnected = once(wrapper, "disconnect");
|
|
await Promise.all([closed, disconnected]);
|
|
expect([wrapper.exitCode, wrapper.signalCode]).toEqual([0, null]);
|
|
expect(messages).toEqual(receipt === "failed" ? [{ exitCode: 23, signalCode: null }] : []);
|
|
expect(() => expectSuccessfulWrapperReceipt(wrapper, messages)).toThrow();
|
|
});
|
|
|
|
|
|
it.skipIf(process.platform === "win32")("escalates the owned server group so a hung descendant cannot remain", async () => {
|
|
const { entry } = await fixture(`
|
|
const { spawn } = require('node:child_process');
|
|
const descendant = spawn(process.execPath, ['-e', 'setInterval(() => {}, 1000)'], { stdio: 'ignore' });
|
|
process.on('SIGTERM', () => {});
|
|
process.send({ pid: descendant.pid });
|
|
setInterval(() => {}, 1000);
|
|
`);
|
|
const child = start(entry);
|
|
const pid = (await once(child, "message"))[0].pid as number;
|
|
try {
|
|
await stopper(50).stop(child);
|
|
expect(child.signalCode).toBe("SIGKILL");
|
|
// A stopped orphan may remain a zombie until the host's init reaps it.
|
|
const table = await readProcessTable();
|
|
expect(table).not.toBeNull();
|
|
expect(table!.some(row => row.pid === pid && !row.state?.startsWith("Z"))).toBe(false);
|
|
} finally {
|
|
try { process.kill(pid, "SIGKILL"); } catch { /* reaped */ }
|
|
}
|
|
});
|
|
|
|
|
|
it.skipIf(process.platform === "win32")("retires observed descendants after the server leader exits early", async () => {
|
|
const { root, entry } = await fixture();
|
|
const marker = path.join(root, "descendant-closed");
|
|
const descendant = `
|
|
process.once('SIGTERM', () => setTimeout(() => {
|
|
require('node:fs').writeFileSync(${JSON.stringify(marker)}, 'closed'); process.exit(0);
|
|
}, 50));
|
|
process.send('ready'); setInterval(() => {}, 1000);
|
|
`;
|
|
await writeFile(entry, `
|
|
const child = require('node:child_process').spawn(process.execPath, ['-e', ${JSON.stringify(descendant)}], {
|
|
stdio: ['ignore', 'ignore', 'ignore', 'ipc'],
|
|
});
|
|
child.once('message', () => process.send({ pid: child.pid }));
|
|
process.once('message', () => process.exit(1));
|
|
`);
|
|
const child = start(entry);
|
|
const pid = (await once(child, "message"))[0].pid as number;
|
|
const { stop } = stopper();
|
|
try {
|
|
await stop.watch(child);
|
|
const exited = once(child, "exit");
|
|
child.send("crash");
|
|
await exited;
|
|
await stop(child);
|
|
expect(await readFile(marker, "utf8")).toBe("closed");
|
|
const table = await readProcessTable();
|
|
expect(table).not.toBeNull();
|
|
expect(table!.some(row => row.pid === pid && !row.state?.startsWith("Z"))).toBe(false);
|
|
} finally { try { process.kill(pid, "SIGKILL"); } catch { /* stopped */ } }
|
|
});
|
|
|
|
it.skipIf(process.platform === "win32")("recovers a failed cleanup without repeating the graceful signal", async () => {
|
|
const { entry } = await fixture();
|
|
const child = start(entry);
|
|
await once(child, "message");
|
|
let failInspection = false;
|
|
let markInspectionFailed!: () => void;
|
|
const inspectionFailed = new Promise<void>(resolve => { markInspectionFailed = resolve; });
|
|
let owner: ReturnType<typeof createProcessTreeOwner> | undefined;
|
|
const messages: unknown[] = [];
|
|
child.on("message", message => {
|
|
messages.push(message);
|
|
if (message === "stopping") failInspection = true;
|
|
});
|
|
const stop = createRunnerE2EServerStopper({
|
|
gracefulTimeoutMs: 2_000, forcedTimeoutMs: 2_000,
|
|
hasSpawnError: () => false, markExpectedStop: () => {}, log: () => {},
|
|
createOwner: candidate => {
|
|
owner = createProcessTreeOwner(candidate);
|
|
return { ...owner, observe: async () => {
|
|
if (failInspection) {
|
|
failInspection = false;
|
|
markInspectionFailed();
|
|
throw new Error("transient inspection failure");
|
|
}
|
|
await owner!.observe();
|
|
} };
|
|
},
|
|
});
|
|
try {
|
|
const failed = expect(stop(child)).rejects.toThrow("transient inspection failure");
|
|
// Hold the child until the one-shot failure is actually injected. A fixed
|
|
// delay can let it exit during the preceding successful inspection.
|
|
await inspectionFailed;
|
|
if (child.connected) child.send("finish");
|
|
await failed;
|
|
const recovery = stop(child);
|
|
// A second graceful signal would terminate this child's once-handler.
|
|
await new Promise(resolve => setTimeout(resolve, 50));
|
|
if (child.connected) child.send("finish");
|
|
await recovery;
|
|
expect(messages).toEqual(["stopping", "close-complete"]);
|
|
expect([child.exitCode, child.signalCode]).toEqual([0, null]);
|
|
} finally { owner?.stopObserving(); }
|
|
});
|
|
|
|
it.skipIf(process.platform === 'win32').each([['launcher', 'null'], ['server', 'null'], ['launcher', 'throw'], ['server', 'throw']] as const)(
|
|
'bounds the known %s child when inspection fails with %s', async (kind, failure) => {
|
|
const { entry } = await fixture(`process.on('SIGTERM', () => {}); process.send('ready'); setInterval(() => {}, 1000);`);
|
|
const child = start(entry);
|
|
await once(child, 'message');
|
|
const groupSignals: number[] = [];
|
|
const owner = createProcessTreeOwner(child, {
|
|
readTable: async () => { if (failure === "throw") throw new Error("inspection failed"); return null; },
|
|
signalGroup: pid => { groupSignals.push(pid); },
|
|
});
|
|
try {
|
|
const stopping = kind === 'launcher'
|
|
? stopOwnedProcessTree(child, owner, 50, 500)
|
|
: createRunnerE2EServerStopper({ gracefulTimeoutMs: 50, forcedTimeoutMs: 500,
|
|
hasSpawnError: () => false, markExpectedStop: () => {}, log: () => {}, createOwner: () => owner })(child);
|
|
await expect(stopping).rejects.toThrow(/inspect|incomplete/i);
|
|
expect(child.signalCode).toBe('SIGKILL');
|
|
expect(groupSignals).toEqual([]);
|
|
} finally { owner.stopObserving(); }
|
|
},
|
|
);
|
|
|
|
it.skipIf(process.platform === 'win32')('does not re-signal a server after its graceful wrapper forwards and exits', async () => {
|
|
const { root, entry } = await fixture();
|
|
const marker = path.join(root, 'async-close-finished');
|
|
await writeFile(entry, `
|
|
const child = require('node:child_process').spawn(process.execPath, ['-e', ${JSON.stringify(`
|
|
process.once('SIGTERM', () => setTimeout(() => {
|
|
require('node:fs').writeFileSync(${JSON.stringify(marker)}, 'closed'); process.exit(0);
|
|
}, 300));
|
|
process.send('ready'); setInterval(() => {}, 1000);
|
|
`)}], { detached: true, stdio: ['ignore', 'ignore', 'ignore', 'ipc'] });
|
|
child.once('message', () => process.send({ pid: child.pid }));
|
|
process.once('SIGTERM', () => { child.kill('SIGTERM'); process.exit(0); });
|
|
`);
|
|
const wrapper = start(entry);
|
|
const pid = (await once(wrapper, 'message'))[0].pid as number;
|
|
const owner = createProcessTreeOwner(wrapper);
|
|
try {
|
|
await owner.observe();
|
|
await stopOwnedProcessTree(wrapper, owner, 2_000, 500);
|
|
expect(await readFile(marker, 'utf8')).toBe('closed');
|
|
expect(wrapper.exitCode).toBe(0);
|
|
} finally {
|
|
owner.stopObserving();
|
|
try { process.kill(-pid, 'SIGKILL'); } catch { /* already stopped */ }
|
|
}
|
|
});
|
|
|
|
it.skipIf(process.platform === "win32")("crashes the owned controller and detached descendant without graceful drain or touching a neighboring process", async () => {
|
|
const { root } = await fixture();
|
|
const marker = path.join(root, "graceful-drain.txt"), descendantEntry = path.join(root, "descendant.cjs");
|
|
await writeFile(descendantEntry, `
|
|
process.on('SIGTERM', () => require('node:fs').writeFileSync(${JSON.stringify(marker)}, 'descendant drained'));
|
|
process.send('ready'); setInterval(() => {}, 1000);
|
|
`);
|
|
const { entry } = await fixture(`
|
|
const child = require('node:child_process').fork(${JSON.stringify(descendantEntry)}, [], { detached: true, stdio: ['ignore', 'ignore', 'ignore', 'ipc'] });
|
|
process.on('SIGTERM', () => require('node:fs').writeFileSync(${JSON.stringify(marker)}, 'controller drained'));
|
|
child.once('message', () => process.send({ ready: true, descendantPid: child.pid }));
|
|
setInterval(() => {}, 1000);
|
|
`);
|
|
const controller = start(entry), controllerReady = once(controller, "message");
|
|
const { stop } = stopper();
|
|
await stop.watch(controller);
|
|
try {
|
|
const neighborFixture = await fixture(), neighbor = start(neighborFixture.entry);
|
|
await once(neighbor, "message");
|
|
const [ready] = await controllerReady;
|
|
await stop.crashForRestart(controller);
|
|
expect(controller.signalCode).toBe("SIGKILL");
|
|
await expect(readFile(marker)).rejects.toMatchObject({ code: "ENOENT" });
|
|
const table = await readProcessTable();
|
|
expect(table).not.toBeNull();
|
|
expect(table!.some(row => row.pid === ready.descendantPid && !row.state?.startsWith("Z"))).toBe(false);
|
|
expect(() => process.kill(neighbor.pid!, 0)).not.toThrow();
|
|
await stop.stopAll();
|
|
expect(() => process.kill(neighbor.pid!, 0)).not.toThrow();
|
|
} finally { await stop.stopAll(); }
|
|
});
|