rho-coding-agent 1.26.1

use std::{fs::File, path::Path};

#[cfg(not(any(target_os = "linux", target_os = "android")))]
use super::secure_fs::identity_drift;
#[cfg(not(any(target_os = "linux", target_os = "android")))]
use super::WorkflowError;
use super::WorkflowResult;

pub(crate) fn verified_handle_path(
    file: &File,
    _fallback: &Path,
) -> WorkflowResult<std::path::PathBuf> {
    #[cfg(any(target_os = "linux", target_os = "android"))]
    {
        use std::os::fd::AsRawFd as _;
        Ok(std::path::PathBuf::from(format!(
            "/proc/self/fd/{}",
            file.as_raw_fd()
        )))
    }
    #[cfg(not(any(target_os = "linux", target_os = "android")))]
    {
        let _ = file;
        Err(WorkflowError::Corrupt {
            path: _fallback.to_owned(),
            reason: "frozen workflow launch requires handle-based executable and working-directory support on this platform".to_owned(),
        })
    }
}

#[cfg(any(target_os = "linux", target_os = "android"))]
pub(crate) fn configure_handle_inheritance(
    command: &mut tokio::process::Command,
    files: &[&File],
) -> WorkflowResult<()> {
    use std::os::fd::AsRawFd as _;
    use std::os::unix::process::CommandExt as _;

    let descriptors = files
        .iter()
        .map(|file| file.as_raw_fd())
        .collect::<Vec<_>>();
    // SAFETY: the closure runs after fork and before exec. It only calls
    // async-signal-safe fcntl operations on descriptors kept alive by `files`'
    // owners. Any failure aborts the spawn before exec.
    unsafe {
        command.as_std_mut().pre_exec(move || {
            for &fd in &descriptors {
                let flags = libc::fcntl(fd, libc::F_GETFD);
                if flags == -1 {
                    return Err(std::io::Error::last_os_error());
                }
                if libc::fcntl(fd, libc::F_SETFD, flags & !libc::FD_CLOEXEC) == -1 {
                    return Err(std::io::Error::last_os_error());
                }
            }
            Ok(())
        });
    }
    Ok(())
}

#[cfg(not(any(target_os = "linux", target_os = "android")))]
pub(crate) fn configure_handle_inheritance(
    _command: &mut tokio::process::Command,
    _files: &[&File],
) -> WorkflowResult<()> {
    Err(identity_drift(
        Path::new("<handle>"),
        "handle inheritance is unavailable on this platform",
    ))
}

#[cfg(all(test, any(target_os = "linux", target_os = "android")))]
#[path = "secure_fs_spawn_tests.rs"]
mod tests;