File size: 2,407 Bytes
d197cf3 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 | /** Native service control/inspection only; payload launchers own their full environment. */
import { extractErrorCode } from "../infra/errors.js";
import { createSanitizedCommandError } from "../process/exec-result.js";
import { runCommandWithTimeout, type SpawnResult } from "../process/exec.js";
import { resolveServiceManagerEnv } from "./service-process-env.js";
import { assertGatewayServiceUpdateCurrent } from "./service-update-authority.js";
export type ExecResult = Pick<SpawnResult, "stdout" | "stderr"> & {
code: number;
termination: SpawnResult["termination"] | "error";
errorCode?: string;
};
/** Runs a child process as UTF-8 and returns exit data instead of throwing on nonzero exit. */
export async function execFileUtf8(
command: string,
args: string[],
options: {
cwd?: string;
env?: NodeJS.ProcessEnv;
timeout?: number;
killSignal?: NodeJS.Signals | number;
windowsHide?: boolean;
} = {},
): Promise<ExecResult> {
assertGatewayServiceUpdateCurrent();
try {
const { stdout, stderr, code, termination, signal } = await runCommandWithTimeout(
[command, ...args],
{
baseEnv: resolveServiceManagerEnv(options.env),
// sudo -u can inherit an operator directory the service account cannot enter.
cwd: options.cwd ?? (process.platform === "win32" ? undefined : "/"),
killSignal: options.killSignal,
maxOutputBytes: 1024 * 1024,
timeoutMs: options.timeout,
},
);
const diagnostic =
termination === "exit"
? ""
: createSanitizedCommandError({
timedOut: termination === "timeout" || termination === "no-output-timeout",
isTerminated: true,
signal,
}).message;
// A child can exit zero while handling termination; daemon actions must still fail.
return {
stdout,
stderr: [stderr, diagnostic].filter(Boolean).join("\n"),
code: termination === "exit" ? (code ?? 1) : code || 1,
termination,
};
} catch (error) {
const message = error instanceof Error ? error.message : String(error);
const errorCode = extractErrorCode(error);
// Launch diagnostics omit argv; preserve errno separately so daemon owners
// never have to recover execution failures from sanitized prose.
return { stdout: "", stderr: message, code: 1, termination: "error", errorCode };
}
}
|