Kill signals a command only while it runs, and only the pane it was meant for

A signal effect carried only a slot, so a Kill followed in the same step by
the pane's closing and its slot's reuse signalled the new pane's child; and a
command pane whose child had exited and been reaped kept a process group id
another process could take. The effect now carries the pane's serial, checked
as it is performed, and a host signals no command whose exit it has recorded;
the core already sends Kill only to a command it has not been told is done.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

1 files changed, 2 insertions, 1 deletions

diff --git a/src/macos.zig b/src/macos.zig
index 1327b064..d6ceb535 100644
--- a/src/macos.zig
+++ b/src/macos.zig
@@ -2481,7 +2481,8 @@ fn ptyResize(ctx: ?*anyopaque, pane: u8, cols: u16, rows: u16) void {
 
 fn ptySignal(ctx: ?*anyopaque, pane: u8, sig: pardes.PtySignal) void {
     const st = hostState(ctx);
-    if (st.ptys[pane]) |pt| host_io.signalTty(pt.pid, pt.file.handle, sig);
+    // A command whose exit is recorded is reaped: its group may be another's.
+    if (st.ptys[pane]) |pt| if (!pt.cmd.exited) host_io.signalTty(pt.pid, pt.file.handle, sig);
 }
 
 fn ttyTaken(ctx: ?*anyopaque, pane: u8) bool {