qq-cli 0.1.0

A modular Rust QQ task interface for coding agents
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

//! Explicit maintenance only. Query handles and inherited handles never gain termination rights.
use super::{Job, JobId, OwnedHandle, QUERY, unavailable};
use crate::core::error::{AppError, Result};
use std::time::Instant;
use windows::{
    Win32::System::JobObjects::{OpenJobObjectW, TerminateJobObject},
    core::PCWSTR,
};
#[cfg(test)]
mod tests;

pub(crate) struct StopJob {
    job: Job,
}
impl StopJob {
    /// Caller must first validate the original signed run and hold the lifecycle lock.
    pub(crate) fn reopen(id: &JobId, deadline: Instant) -> Result<Self> {
        crate::core::deadline::check(deadline)?;
        let name = id.wide()?;
        // SAFETY: validated NUL-terminated private job name; unique noninheritable handle.
        // No assign/set-attributes rights are requested. DACL enforces the same owner boundary.
        let handle = unsafe { OpenJobObjectW(QUERY | 0x0008, false, PCWSTR(name.as_ptr())) }
            .map_err(|_| unavailable())?;
        let job = Job {
            id: id.clone(),
            handle: OwnedHandle(handle),
            creator: false,
        };
        job.check_limits(deadline)?;
        Ok(Self { job })
    }
    pub(crate) fn empty(&self, deadline: Instant) -> Result<bool> {
        Ok(self.job.members(deadline)?.is_empty())
    }
    /// Exactly one native call; successful return alone does not certify full process exit.
    pub(crate) fn request(&self, deadline: Instant) -> Result<()> {
        self.job.check_limits(deadline)?;
        // SAFETY: uniquely held QUERY|TERMINATE handle of the authenticated original job.
        // Explicit maintenance owns this whole job; no global PID/name matching or reassignment occurs.
        unsafe { TerminateJobObject(self.job.handle.0, 0x51434c49) }.map_err(|_| {
            AppError::new(
                "STOP_REQUEST_FAILED",
                "Native termination request failed; completion is unverified.",
                5,
            )
        })
    }
}