From 7d86178cf51aeb879923bc7d7aaf2d3bb7890d8e Mon Sep 17 00:00:00 2001 From: teknium1 <127238744+teknium1@users.noreply.github.com> Date: Wed, 17 Jun 2026 21:24:23 -0700 Subject: [PATCH] fix(raft): set stdin=DEVNULL on bridge subprocess Satisfies the repo-wide subprocess-stdin guard (tests/tools/test_subprocess_stdin_guard.py); the long-lived bridge child should not inherit the gateway's stdin. --- plugins/platforms/raft/adapter.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/plugins/platforms/raft/adapter.py b/plugins/platforms/raft/adapter.py index d0f03d56316..5623cef0e5e 100644 --- a/plugins/platforms/raft/adapter.py +++ b/plugins/platforms/raft/adapter.py @@ -533,7 +533,9 @@ class RaftAdapter(BasePlatformAdapter): ] env = {**os.environ, "RAFT_CHANNEL_TOKEN": self._bridge_token} try: - self._bridge_process = subprocess.Popen(cmd, env=env) + self._bridge_process = subprocess.Popen( + cmd, env=env, stdin=subprocess.DEVNULL + ) logger.info("[raft] Spawned bridge pid=%d profile=%s endpoint=%s", self._bridge_process.pid, profile, endpoint) except Exception: logger.exception("[raft] Failed to spawn bridge")