ci(packaging): time-box the Snap and Flatpak embedded MPV runtime probes

Wrap the three packaged `--embedded-mpv-runtime-probe` launches in GNU
`timeout -k 10 300`, report exit 124 as a distinct `::error::` that says
the packaged app never exited, capture and print the hostile-environment
Snap probe output like the other two probes, and set
ELECTRON_ENABLE_LOGGING=1 so main-process exceptions reach the step log.
A main process that throws before app ready (seen in #1696 with "Cannot
find module './main.app.js'") blocks on Electron's uncaught-exception
dialog under xvfb and previously held the job until its 120-minute
limit with no useful output.

The probe's JSON verdict is still one stdout line, so the exact
`grep -Fx` match on the disconnected Snap probe is unchanged; verified
locally with the workspace Electron binary.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

.github/workflows/build-and-make.yaml

@@ -1099,14 +1099,24 @@ jobs:
                   sudo snap disconnect iptvnator:graphics-core22 mesa-core22:graphics-core22
                   snap connections iptvnator | awk \
                       '$2 == "iptvnator:graphics-core22" && $3 == "-" { found=1 } END { exit !found }'
+                  # GNU timeout kills a packaged app that never exits, for example when the
+                  # main process throws before app ready and Electron's uncaught-exception
+                  # dialog blocks under xvfb. ELECTRON_ENABLE_LOGGING routes Chromium and
+                  # main-process stderr into the captured output; the probe's JSON verdict is
+                  # still a single stdout line that grep -Fx matches.
                   set +e
                   disconnected_probe="$(
-                      xvfb-run -a env LIBGL_ALWAYS_SOFTWARE=1 \
+                      xvfb-run -a env LIBGL_ALWAYS_SOFTWARE=1 ELECTRON_ENABLE_LOGGING=1 \
+                          timeout -k 10 300 \
                           snap run iptvnator --embedded-mpv-runtime-probe 2>&1
                   )"
                   disconnected_status=$?
                   set -e
                   printf '%s\n' "${disconnected_probe}"
+                  if [ "${disconnected_status}" -eq 124 ]; then
+                      echo "::error::The packaged Snap app did not exit within 300 seconds during the disconnected graphics runtime probe and was killed; inspect the probe output above for main-process startup errors."
+                      exit 1
+                  fi
                   test "${disconnected_status}" -eq 1
                   printf '%s\n' "${disconnected_probe}" | \
                       grep -Fx '{"usable":false,"reason":"snap-graphics-provider-unavailable"}'
@@ -1117,27 +1127,43 @@ jobs:
                       '$2 == "iptvnator:gnome-3-28-1804" && $3 == "gnome-3-28-1804:gnome-3-28-1804" { found=1 } END { exit !found }'
                   snap connections iptvnator | awk \
                       '$1 == "shared-memory" && $2 == "iptvnator:shared-memory" && $3 == ":shared-memory" { found=1 } END { exit !found }'
-                  xvfb-run -a env \
-                      LIBGL_ALWAYS_SOFTWARE=1 \
-                      IPTVNATOR_TRACE_PLAYER=1 \
-                      EGL_LOG_LEVEL=debug \
-                      LIBGL_DEBUG=verbose \
-                      __EGL_VENDOR_LIBRARY_FILENAMES=/tmp/hostile-egl-vendor.json \
-                      GBM_BACKEND=/tmp/hostile-gbm \
-                      MESA_LOADER_DRIVER_OVERRIDE=/tmp/hostile-dri \
-                      LIBVA_DRIVER_NAME=/tmp/hostile-va \
-                      VDPAU_DRIVER_PATH=/tmp/hostile-vdpau \
-                      VK_DRIVER_FILES=/tmp/hostile-vulkan-driver.json \
-                      VK_ICD_FILENAMES=/tmp/hostile-vulkan-icd.json \
-                      VK_ADD_DRIVER_FILES=/tmp/hostile-vulkan-add-driver.json \
-                      VK_ADD_LAYER_PATH=/tmp/hostile-vulkan-layers \
-                      VK_IMPLICIT_LAYER_PATH=/tmp/hostile-vulkan-implicit-layers \
-                      VK_ADD_IMPLICIT_LAYER_PATH=/tmp/hostile-vulkan-add-implicit-layers \
-                      XDG_CONFIG_HOME=/tmp/hostile-xdg-config-home \
-                      XDG_CONFIG_DIRS=/tmp/hostile-xdg-config-dirs \
-                      XDG_DATA_HOME=/tmp/hostile-xdg-data-home \
-                      XDG_DATA_DIRS=/tmp/hostile-xdg-data-dirs \
-                      snap run iptvnator --embedded-mpv-runtime-probe
+                  set +e
+                  hostile_probe="$(
+                      xvfb-run -a env \
+                          LIBGL_ALWAYS_SOFTWARE=1 \
+                          ELECTRON_ENABLE_LOGGING=1 \
+                          IPTVNATOR_TRACE_PLAYER=1 \
+                          EGL_LOG_LEVEL=debug \
+                          LIBGL_DEBUG=verbose \
+                          __EGL_VENDOR_LIBRARY_FILENAMES=/tmp/hostile-egl-vendor.json \
+                          GBM_BACKEND=/tmp/hostile-gbm \
+                          MESA_LOADER_DRIVER_OVERRIDE=/tmp/hostile-dri \
+                          LIBVA_DRIVER_NAME=/tmp/hostile-va \
+                          VDPAU_DRIVER_PATH=/tmp/hostile-vdpau \
+                          VK_DRIVER_FILES=/tmp/hostile-vulkan-driver.json \
+                          VK_ICD_FILENAMES=/tmp/hostile-vulkan-icd.json \
+                          VK_ADD_DRIVER_FILES=/tmp/hostile-vulkan-add-driver.json \
+                          VK_ADD_LAYER_PATH=/tmp/hostile-vulkan-layers \
+                          VK_IMPLICIT_LAYER_PATH=/tmp/hostile-vulkan-implicit-layers \
+                          VK_ADD_IMPLICIT_LAYER_PATH=/tmp/hostile-vulkan-add-implicit-layers \
+                          XDG_CONFIG_HOME=/tmp/hostile-xdg-config-home \
+                          XDG_CONFIG_DIRS=/tmp/hostile-xdg-config-dirs \
+                          XDG_DATA_HOME=/tmp/hostile-xdg-data-home \
+                          XDG_DATA_DIRS=/tmp/hostile-xdg-data-dirs \
+                          timeout -k 10 300 \
+                          snap run iptvnator --embedded-mpv-runtime-probe 2>&1
+                  )"
+                  hostile_status=$?
+                  set -e
+                  printf '%s\n' "${hostile_probe}"
+                  if [ "${hostile_status}" -eq 124 ]; then
+                      echo "::error::The packaged Snap app did not exit within 300 seconds during the hostile-environment runtime probe and was killed; inspect the probe output above for main-process startup errors."
+                      exit 1
+                  fi
+                  if [ "${hostile_status}" -ne 0 ]; then
+                      echo "::error::Snap hostile-environment runtime probe failed with status ${hostile_status}."
+                      exit "${hostile_status}"
+                  fi
 
             - name: Run packaged x64 frame-copy and fallback smoke
               if: matrix.os == 'linux' && matrix.linux_profile == 'portable'
@@ -1223,10 +1249,15 @@ jobs:
                       ELF_MAGIC="$(od -An -tx1 -N4 "${LAUNCHER_PATH}" | tr -d "[:space:]")"
                       test "${ELF_MAGIC}" = "7f454c46"
                   '
+                  # GNU timeout kills a packaged app that never exits, for example when the
+                  # main process throws before app ready and Electron's uncaught-exception
+                  # dialog blocks under xvfb. ELECTRON_ENABLE_LOGGING routes Chromium and
+                  # main-process stderr into the captured output.
                   set +e
                   PROBE_OUTPUT="$(
-                      xvfb-run -a dbus-run-session -- flatpak run \
+                      xvfb-run -a dbus-run-session -- timeout -k 10 300 flatpak run \
                           --env=LIBGL_ALWAYS_SOFTWARE=1 \
+                          --env=ELECTRON_ENABLE_LOGGING=1 \
                           com.fourgray.iptvnator \
                           --embedded-mpv-runtime-probe 2>&1
                   )"
@@ -1243,6 +1274,10 @@ jobs:
                       echo "::error::Flatpak launched a wrapper instead of the Electron ELF."
                       exit 1
                   fi
+                  if [ "${PROBE_STATUS}" -eq 124 ]; then
+                      echo "::error::The packaged Flatpak app did not exit within 300 seconds during the application runtime probe and was killed; inspect the probe output above for main-process startup errors."
+                      exit 1
+                  fi
                   if [ "${PROBE_STATUS}" -ne 0 ]; then
                       echo "::error::Flatpak application runtime probe failed with status ${PROBE_STATUS}."
                       exit "${PROBE_STATUS}"

docs/development/electron-debugging.md

@@ -91,6 +91,12 @@ exit. The retained handle still provides the actual exit code and signal.
 The Linux portable build uploads `packaged-frame-copy-smoke` reports and traces
 even when the smoke fails. Check the paused-frame screenshot and trace before
 classifying a zero rendered-frame signal as an infrastructure flake.
+The Snap and Flatpak `--embedded-mpv-runtime-probe` launches in
+`build-and-make.yaml` run under GNU `timeout -k 10 300` with
+`ELECTRON_ENABLE_LOGGING=1`, so a main process that throws before app ready
+and blocks on Electron's uncaught-exception dialog under xvfb fails within
+five minutes with a distinct `::error::` for exit 124 and its stderr in the
+step log, instead of holding the job until the 120-minute limit.
 
 ## Main-process ownership
 

tools/packaging/configure-linux-frame-copy-build.test.mjs

@@ -544,7 +544,7 @@ test('Linux CI verifies every package family and exercises intended environments
     );
     assert.match(
         flatpakVerificationStep,
-        /flatpak run\s+\\\s+--env=LIBGL_ALWAYS_SOFTWARE=1\s+\\\s+com\.fourgray\.iptvnator\s+\\\s+--embedded-mpv-runtime-probe/
+        /flatpak run\s+\\\s+--env=LIBGL_ALWAYS_SOFTWARE=1\s+\\\s+--env=ELECTRON_ENABLE_LOGGING=1\s+\\\s+com\.fourgray\.iptvnator\s+\\\s+--embedded-mpv-runtime-probe/
     );
     assert.doesNotMatch(
         flatpakVerificationStep,
@@ -561,7 +561,7 @@ test('Flatpak application runtime probe runs under an isolated D-Bus session', (
 
     assert.match(
         flatpakVerificationStep,
-        /xvfb-run -a dbus-run-session -- flatpak run\s+\\\s+--env=LIBGL_ALWAYS_SOFTWARE=1\s+\\\s+com\.fourgray\.iptvnator\s+\\\s+--embedded-mpv-runtime-probe/
+        /xvfb-run -a dbus-run-session -- timeout -k 10 300 flatpak run\s+\\\s+--env=LIBGL_ALWAYS_SOFTWARE=1\s+\\\s+--env=ELECTRON_ENABLE_LOGGING=1\s+\\\s+com\.fourgray\.iptvnator\s+\\\s+--embedded-mpv-runtime-probe/
     );
     assert.match(installStep, /^\s+dbus-daemon\s+\\$/m);
     assert.match(
@@ -602,7 +602,7 @@ test('Flatpak CI verifies the direct Zypak ELF and preserves probe status', () =
 
     assert.match(
         flatpakVerificationStep,
-        /set \+e[\s\S]*PROBE_OUTPUT="\$\([\s\S]*xvfb-run -a dbus-run-session -- flatpak run[\s\S]*--embedded-mpv-runtime-probe 2>&1[\s\S]*\)"[\s\S]*PROBE_STATUS=\$\?[\s\S]*set -e/
+        /set \+e[\s\S]*PROBE_OUTPUT="\$\([\s\S]*xvfb-run -a dbus-run-session -- timeout -k 10 300 flatpak run[\s\S]*--embedded-mpv-runtime-probe 2>&1[\s\S]*\)"[\s\S]*PROBE_STATUS=\$\?[\s\S]*set -e/
     );
     assert.match(
         flatpakVerificationStep,
@@ -616,6 +616,72 @@ test('Flatpak CI verifies the direct Zypak ELF and preserves probe status', () =
     );
 });
 
+test('packaged runtime probes are time-boxed and report a hung app distinctly', () => {
+    const snapStep = workflowStep(
+        'Verify Snap payloads and strict-confinement runtime'
+    );
+    const flatpakVerificationStep = workflowStep(
+        'Verify Flatpak payload, launcher, and sandboxed runtime'
+    );
+    const probeInvocation =
+        /timeout -k 10 300 \\\s+snap run iptvnator --embedded-mpv-runtime-probe 2>&1/g;
+    const timeoutFailure =
+        /if \[ "\$\{(\w+)\}" -eq 124 \]; then\s+echo "::error::[^"]*did not exit within 300 seconds[^"]*"\s+exit 1\s+fi/g;
+
+    // Every `snap run` probe is wrapped by GNU timeout and captured, so a
+    // blocked uncaught-exception dialog cannot hold the job until its
+    // 120-minute limit and the output still reaches the log.
+    assert.equal(
+        snapStep.match(/snap run iptvnator --embedded-mpv-runtime-probe/g)
+            .length,
+        2
+    );
+    assert.equal(snapStep.match(probeInvocation).length, 2);
+    assert.match(
+        snapStep,
+        /disconnected_probe="\$\([\s\S]*ELECTRON_ENABLE_LOGGING=1[\s\S]*timeout -k 10 300[\s\S]*\)"\s+disconnected_status=\$\?\s+set -e\s+printf '%s\\n' "\$\{disconnected_probe\}"/
+    );
+    assert.match(
+        snapStep,
+        /hostile_probe="\$\([\s\S]*ELECTRON_ENABLE_LOGGING=1[\s\S]*timeout -k 10 300[\s\S]*\)"\s+hostile_status=\$\?\s+set -e\s+printf '%s\\n' "\$\{hostile_probe\}"/
+    );
+    assert.deepEqual(
+        [...snapStep.matchAll(timeoutFailure)].map(([, variable]) => variable),
+        ['disconnected_status', 'hostile_status']
+    );
+    assert.ok(
+        snapStep.indexOf('-eq 124') <
+            snapStep.indexOf('test "${disconnected_status}" -eq 1'),
+        'the disconnected probe must reject a timeout before asserting exit 1'
+    );
+    assert.match(
+        snapStep,
+        /if \[ "\$\{hostile_status\}" -ne 0 \]; then[\s\S]*exit "\$\{hostile_status\}"/
+    );
+    assert.ok(
+        snapStep.includes(
+            `grep -Fx '{"usable":false,"reason":"snap-graphics-provider-unavailable"}'`
+        ),
+        'logging must not relax the exact JSON verdict line match'
+    );
+
+    assert.equal(
+        flatpakVerificationStep.match(/timeout -k 10 300 flatpak run/g).length,
+        1
+    );
+    assert.deepEqual(
+        [...flatpakVerificationStep.matchAll(timeoutFailure)].map(
+            ([, variable]) => variable
+        ),
+        ['PROBE_STATUS']
+    );
+    assert.ok(
+        flatpakVerificationStep.indexOf('-eq 124') <
+            flatpakVerificationStep.indexOf('if [ "${PROBE_STATUS}" -ne 0 ]'),
+        'the timeout verdict must precede the generic non-zero status handling'
+    );
+});
+
 test('foreign DEB CI explicitly selects both marker-only ARM architectures', () => {
     const foreignDebStep = workflowStep(
         'Make marker-only foreign-architecture DEB packages'