l0ng-ai fd100f0e95 refactor(duplex): own the dup'd descriptors, so a failed redirect cannot leak one ...

`StdioDuplex::take` dup'd stdin and stdout, redirected both to /dev/null, and
only then wrapped the raw descriptors in `File`. Any of the four `?`s between
the first `dup` and the wrap returned without closing what it already held —
a descriptor leak on the error path.

`dup_fd` now hands back an `OwnedFd`. `dup` returns a fresh descriptor nothing
else holds, which is exactly that type's contract, and ownership from the
moment it exists is what makes the early returns safe. `take` drops two
`unsafe` blocks in the process: `File::from(OwnedFd)` is the safe conversion.

Immaterial in production — `take` is called once in tty7-server's main and the
`?` there exits the process — but it is unsafe-adjacent code where the correct
version is also the shorter one.

Exercised by the 55 `stdio_conformance` tests, which drive
`tty7-server --stdio` through this constructor. 2934 pass.

2026-08-15 18:11:17 +08:00

..

tty7-cli

fix(cli): machine ls --json was missing the machine it runs on

2026-08-15 18:11:17 +08:00

tty7-core

refactor(duplex): own the dup'd descriptors, so a failed redirect cannot leak one

2026-08-15 18:11:17 +08:00

tty7-server

fix(resize): defer the reflow to the daemon's Size echo on remote routes too (#632)

2026-08-14 16:02:04 +08:00