rust-pty 0.5.0

//! Unix platform implementation for PTY operations.
//!
//! This module provides the Unix-specific PTY implementation, including:
//!
//! - PTY master/slave pair allocation via openpt/grantpt/unlockpt
//! - Async I/O through tokio's `AsyncFd`
//! - Child process management with proper session/controlling terminal setup
//! - Signal handling for SIGWINCH and SIGCHLD
//!
//! # Platform Support
//!
//! This implementation works on:
//! - Linux (using /dev/ptmx)
//! - macOS (using /dev/ptmx)
//! - FreeBSD and other Unix-like systems
//!
//! # Example
//!
//! ```no_run
//! use rust_pty::unix::UnixPtySystem;
//! use rust_pty::{PtySystem, PtyConfig};
//!
//! # async fn run() -> Result<(), Box<dyn std::error::Error>> {
//! let config = PtyConfig::default();
//! let args: [&str; 0] = [];
//! let (master, child) = UnixPtySystem::spawn("/bin/bash", args, &config).await?;
//! # let _ = (master, child);
//! # Ok(()) }
//! ```

mod buffer;
mod child;
mod pty;
mod signals;

use std::ffi::OsStr;
use std::io;

pub use buffer::PtyBuffer;
pub use child::{UnixPtyChild, spawn_child};
pub use pty::{UnixPtyMaster, open_slave};
pub use signals::{
    PtySignalEvent, SignalHandle, is_sigchld, is_sigwinch, on_window_change, sigchld, sigwinch,
    start_signal_handler,
};

use crate::config::PtyConfig;
use crate::error::{PtyError, Result};
use crate::traits::PtySystem;

/// Allocate a PTY master, retrying briefly on transient allocation failure.
///
/// macOS caps the system-wide PTY count at `kern.tty.ptmx_max` (511 by
/// default), far below Linux's dynamic `/dev/pts`. Under heavy concurrent
/// spawning `openpt` can momentarily fail (the BSD exhaustion code is `ENXIO`,
/// "Device not configured") even though a slot frees moments later as other
/// sessions are torn down. A short bounded backoff (~10 attempts, ~90ms worst
/// case) turns those intermittent failures into reliable spawns; a genuinely
/// permanent failure still surfaces promptly, carrying the underlying error.
async fn open_master_with_retry() -> Result<(UnixPtyMaster, String)> {
    const ATTEMPTS: u32 = 10;

    let mut last_err = PtyError::Create(io::Error::other("openpt was never attempted"));
    for attempt in 0..ATTEMPTS {
        match UnixPtyMaster::open() {
            Ok(pair) => return Ok(pair),
            Err(e) => {
                last_err = e;
                if attempt + 1 < ATTEMPTS {
                    // Non-blocking backoff so other sessions can release PTYs.
                    tokio::time::sleep(std::time::Duration::from_millis(
                        2 * u64::from(attempt + 1),
                    ))
                    .await;
                }
            }
        }
    }
    Err(last_err)
}

/// Unix PTY system implementation.
///
/// This struct provides the factory methods for creating PTY sessions on Unix.
#[derive(Debug, Clone, Copy, Default)]
pub struct UnixPtySystem;

impl PtySystem for UnixPtySystem {
    type Master = UnixPtyMaster;
    type Child = UnixPtyChild;

    async fn spawn<S, I>(
        program: S,
        args: I,
        config: &PtyConfig,
    ) -> Result<(Self::Master, Self::Child)>
    where
        S: AsRef<OsStr> + Send,
        I: IntoIterator + Send,
        I::Item: AsRef<OsStr>,
    {
        // Open master PTY (retrying briefly on transient macOS ptmx exhaustion)
        let (master, slave_path) = open_master_with_retry().await?;

        // macOS (#40): start draining the master into userspace *before* the
        // child is spawned, so its output is captured the instant it is written
        // and cannot be discarded when a fast-exiting child exits. Only macOS
        // needs this (see `UnixPtyMaster::start_read_drain`).
        #[cfg(target_os = "macos")]
        let master = {
            let mut master = master;
            master.start_read_drain()?;
            master
        };

        // Open slave for child.
        //
        // This must precede `set_window_size`: on macOS, `TIOCSWINSZ` on the
        // master fails with `ENOTTY` ("Inappropriate ioctl for device") until
        // the slave side has been opened. On Linux the order is immaterial.
        let slave_fd = open_slave(&slave_path)?;

        // Set initial window size (W1) now that the slave is open.
        let window_size = config.window_size.into();
        master.set_window_size(window_size)?;

        // Spawn child process
        let child = spawn_child(slave_fd, program, args, config).await?;

        Ok((master, child))
    }
}

/// Convenience type alias for the default PTY system on Unix.
pub type NativePtySystem = UnixPtySystem;

#[cfg(test)]
mod tests {
    use super::*;

    #[tokio::test]
    async fn spawn_shell() {
        let config = PtyConfig::default();
        let result = UnixPtySystem::spawn_shell(&config).await;

        // This may fail in some test environments, but the logic should be correct
        if let Ok((mut master, mut child)) = result {
            assert!(master.is_open());
            assert!(child.is_running());

            // Clean up
            child.kill().ok();
            master.close().ok();
        }
    }

    #[tokio::test]
    async fn spawn_echo() {
        let config = PtyConfig::default();
        let result = UnixPtySystem::spawn("echo", ["hello"], &config).await;

        if let Ok((mut master, mut child)) = result {
            // Wait for child to exit
            let status = child.wait().await;
            assert!(status.is_ok());

            master.close().ok();
        }
    }

    /// Regression: the default config sets both `new_session` and
    /// `controlling_terminal`. Previously `spawn_child` called
    /// `process_group(0)` (making the child a group leader) *and* `setsid()` in
    /// the `pre_exec` hook, so `setsid()` failed with EPERM and the default spawn
    /// errored. Unlike `spawn_echo`/`spawn_shell` above (which swallow spawn
    /// failure via `if let Ok`), this asserts the spawn actually succeeds.
    #[tokio::test]
    async fn spawn_succeeds_with_default_config() {
        let config = PtyConfig::default();
        let (mut master, mut child) = UnixPtySystem::spawn("/bin/sh", ["-c", "exit 0"], &config)
            .await
            .expect("default-config spawn must succeed (EPERM regression)");

        let status = child.wait().await.expect("wait");
        assert_eq!(status, crate::traits::ExitStatus::Exited(0));
        master.close().ok();
    }

    /// The allocation-retry wrapper succeeds on a healthy system (happy path;
    /// the exhaustion-retry path itself is environmental and not unit-testable
    /// without destabilizing the whole test run).
    #[tokio::test]
    async fn allocation_retry_happy_path() {
        let (master, _slave_path) = open_master_with_retry().await.expect("allocate");
        assert!(master.is_open());
    }

    /// `try_wait` must report the child's real exit status without erroring,
    /// under a multi-threaded runtime (the scenario where a raw `waitpid` in
    /// `try_wait` could race tokio's own child reaper).
    #[tokio::test(flavor = "multi_thread", worker_threads = 4)]
    async fn try_wait_reports_real_exit_status_under_multi_thread() {
        let config = PtyConfig::default();
        let (mut master, mut child) = UnixPtySystem::spawn("/bin/sh", ["-c", "exit 7"], &config)
            .await
            .expect("spawn");

        let mut status = None;
        for _ in 0..500 {
            match child.try_wait() {
                Ok(Some(s)) => {
                    status = Some(s);
                    break;
                }
                Ok(None) => tokio::time::sleep(std::time::Duration::from_millis(10)).await,
                Err(e) => panic!("try_wait errored (reaper race?): {e:?}"),
            }
        }
        assert_eq!(
            status,
            Some(crate::traits::ExitStatus::Exited(7)),
            "try_wait did not report the real exit status"
        );
        master.close().ok();
    }
}