fix(macos): drain subprocess pipes before wait (#1081)

Thanks @thesash.

Co-authored-by: Sash Catanzarite <sashcatanzarite@Sash-MacBook-Pro-14in-3.local>

CHANGELOG.md

@@ -44,6 +44,7 @@
 - Plugins: add zip installs and `--link` to avoid copying local paths.
 
 ### Fixes
+- macOS: drain subprocess pipes before waiting to avoid deadlocks. (#1081) — thanks @thesash.
 - Telegram: accept tg/group/telegram prefixes + topic targets for inline button validation. (#1072) — thanks @danielz1z.
 - Sub-agents: normalize announce delivery origin + queue bucketing by accountId to keep multi-account routing stable. (#1061, #1058) — thanks @adam91holt.
 - Sessions: include deliveryContext in sessions.list and reuse normalized delivery routing for announce/restart fallbacks. (#1058)

apps/macos/Sources/Clawdbot/GatewayEnvironment.swift

@@ -279,6 +279,8 @@ enum GatewayEnvironment {
         process.standardError = pipe
         do {
             try process.run()
+            // Read pipe before waitUntilExit to avoid potential deadlock
+            let data = pipe.fileHandleForReading.readToEndSafely()
             process.waitUntilExit()
             let elapsedMs = Int(Date().timeIntervalSince(start) * 1000)
             if elapsedMs > 500 {
@@ -294,7 +296,6 @@ enum GatewayEnvironment {
                     bin=\(binary, privacy: .public)
                     """)
             }
-            let data = pipe.fileHandleForReading.readToEndSafely()
             let raw = String(data: data, encoding: .utf8)?
                 .trimmingCharacters(in: .whitespacesAndNewlines)
             return Semver.parse(raw)

apps/macos/Sources/Clawdbot/Launchctl.swift

@@ -17,8 +17,11 @@ enum Launchctl {
             process.standardError = pipe
             do {
                 try process.run()
-                process.waitUntilExit()
+                // Read pipe output BEFORE waitUntilExit to avoid deadlock.
+                // If the process writes enough to fill the pipe buffer (~64KB),
+                // it will block until someone reads. Reading first prevents this.
                 let data = pipe.fileHandleForReading.readToEndSafely()
+                process.waitUntilExit()
                 let output = String(data: data, encoding: .utf8) ?? ""
                 return Result(status: process.terminationStatus, output: output)
             } catch {

apps/macos/Sources/Clawdbot/PortGuardian.swift

@@ -204,14 +204,15 @@ actor PortGuardian {
         proc.standardError = Pipe()
         do {
             try proc.run()
+            // Read pipe before waitUntilExit to avoid potential deadlock
+            let data = pipe.fileHandleForReading.readToEndSafely()
             proc.waitUntilExit()
+            guard !data.isEmpty else { return nil }
+            return String(data: data, encoding: .utf8)?
+                .trimmingCharacters(in: .whitespacesAndNewlines)
         } catch {
             return nil
         }
-        let data = pipe.fileHandleForReading.readToEndSafely()
-        guard !data.isEmpty else { return nil }
-        return String(data: data, encoding: .utf8)?
-            .trimmingCharacters(in: .whitespacesAndNewlines)
     }
 
     private static func parseListeners(from text: String) -> [Listener] {

apps/macos/Sources/Clawdbot/RuntimeLocator.swift

@@ -134,6 +134,8 @@ enum RuntimeLocator {
 
         do {
             try process.run()
+            // Read pipe before waitUntilExit to avoid potential deadlock
+            let data = pipe.fileHandleForReading.readToEndSafely()
             process.waitUntilExit()
             let elapsedMs = Int(Date().timeIntervalSince(start) * 1000)
             if elapsedMs > 500 {
@@ -149,7 +151,6 @@ enum RuntimeLocator {
                     bin=\(binary, privacy: .public)
                     """)
             }
-            let data = pipe.fileHandleForReading.readToEndSafely()
             return String(data: data, encoding: .utf8)?.trimmingCharacters(in: .whitespacesAndNewlines)
         } catch {
             let elapsedMs = Int(Date().timeIntervalSince(start) * 1000)