fix(exec): 同步 1.0.x 的 stdin 管道竞态修复——执行器总是即时关闭子进程 stdin；替身脚本排空 stdin；commons-exec 1.4.0→1.6.0（对齐 easy4j 依赖矩阵）

Author: loong10k

pom.xml

@@ -47,7 +47,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <!-- Dependency versions -->
         <additionalparam>-Xdoclint:none</additionalparam>
-        <commons-exec.version>1.4.0</commons-exec.version>
+        <commons-exec.version>1.6.0</commons-exec.version>
         <jackson-bom.version>2.22.1</jackson-bom.version>
         <junit.version>5.11.4</junit.version>
         <junit-jupiter.version>6.1.0</junit-jupiter.version>

src/main/java/io/github/easy4j/codex/cli/CodexCliExecutor.java

@@ -120,12 +120,12 @@ private CodexCliResult runProcess(String stdin, String... args) {
         DefaultExecutor executor = new DefaultExecutor();
         ByteArrayOutputStream stdout = new ByteArrayOutputStream();
         ByteArrayOutputStream stderr = new ByteArrayOutputStream();
-        if (stdin != null && !stdin.isEmpty()) {
-            executor.setStreamHandler(new org.apache.commons.exec.PumpStreamHandler(stdout, stderr,
-                    new ByteArrayInputStream(stdin.getBytes(StandardCharsets.UTF_8))));
-        } else {
-            executor.setStreamHandler(new org.apache.commons.exec.PumpStreamHandler(stdout, stderr));
-        }
+        // Always hand the child a (possibly empty) stdin pipe that closes
+        // right after the payload: consumers like `codex login --with-api-key`
+        // read to EOF, and a closed pipe cannot race the input pump.
+        byte[] stdinBytes = stdin == null ? new byte[0] : stdin.getBytes(StandardCharsets.UTF_8);
+        executor.setStreamHandler(new org.apache.commons.exec.PumpStreamHandler(stdout, stderr,
+                new ByteArrayInputStream(stdinBytes)));
 
         long timeoutMs = config.getLocalTimeoutSeconds() * 1000L;
         ExecuteWatchdog watchdog = new ExecuteWatchdog(timeoutMs);

src/test/resources/echo-args.sh

@@ -6,4 +6,8 @@
 # coreutils echo (Linux) interprets --version/--help as flags while BSD echo
 # (macOS) prints them literally.
 #
+# Drain piped stdin first: real `codex login --with-api-key` consumes its
+# stdin payload; reading to EOF also keeps the executor's input pump race-free
+# (an immediately-closed pipe yields instant EOF here).
+cat > /dev/null 2>/dev/null
 printf '%s\n' "$*"