tryRestart is the auto-restart path invoked from the fetch loop; it consults Config.ShouldRestart and defers if the predicate returns false.

info backs the exported MasterInfo() function.

Scan returns a goroutine snapshot if b contains a Go panic or runtime crash (e.g. SIGSEGV/SIGABRT with a goroutine dump). If logf is non-nil, parse er

Bytes returns a copy of the bytes currently buffered, in write order.

NewTailWriter returns a TailWriter that retains the last `size` bytes. A non-positive size yields a no-op writer.

forceNextRestart marks the next restart attempt to skip ShouldRestart; backs the exported ForceNextRestart() function.

triggerRestart is the manual-restart path invoked from the signal handler and the exported Restart() function; it bypasses Config.ShouldRestart.

Best-effort cleanup: the leaker prints the grandchild PID to its stdout before exec'ing into sleep, so we can target only the process this test actual

sanityCheck returns true if a check was performed

startRestart atomically claims ownership of the restart and, if claimed, performs the graceful shutdown handshake. When checkShouldRestart is true the

Fetch should check if there is an updated binary to fetch, and then stream it back the form of an io.Reader. If io.Reader is nil, then it is assumed t

ForceNextRestart marks the next restart attempt — typically the one following the next successful fetch — to proceed even if Config.ShouldRestart retu

Init should perform validation on fields. For example, ensure the appropriate URLs or keys are defined or ensure there is connectivity to the appropri

MasterInfo returns a snapshot of the master's upgrade and restart state. Valid in the master process; in the worker (or before Run) it returns a zero

Run executes overseer, if an error is encountered, overseer fallsback to running the program directly (unless Required is set).

buildPanicker compiles testdata/panicker into the test's temp dir and returns the resulting binary path.

On Windows, include the .exe extension, noop otherwise.

fetchLoop is run in a goroutine

not a real fork

non-blocking trigger close

blocking wait for close

Fetch the binary from S3

Fetch the binary from the provided URL

Fetch the binary from the provided Repository

Fetch file from the specified Path

Func converts a fetch function into the fetcher interface

Init validates the provided config

Init validates the provided config

Init validates the provided config

Init sets the Path and Interval options

IsSupported returns whether overseer is supported on the current OS.

Restart programmatically triggers a graceful restart. If NoRestart is enabled, then this will essentially be a graceful shutdown.

RunErr allows manual handling of any overseer errors.

SanityCheck manually runs the check to ensure this binary is compatible with overseer. This tries to ensure that a restart is never performed against

Reproduces the master-hang bug: a worker subprocess inherits the worker's fd 2 (the pipe to its MultiWriter parent) and outlives the worker. Without W

Same scenario without WaitDelay: cmd.Wait blocks past a short timeout, proving the bug is real before the fix. We don't wait long — just enough to ver

Exercises the new force/info paths from many goroutines so `go test -race` catches any regression in their locking.

forceNextRestart makes the next auto-restart attempt skip ShouldRestart; the mark is consumed by the attempt.

a force latched while ShouldRestart is deferring must release the already-pending restart on the next retry tick.

Regression: when startRestart times out, mp.restarting stays true, so the next fork()'s "notify success" path tried to send on the unbuffered mp.resta

When startRestart is actually parked on its receive, the send must reach the receiver — non-blocking is for the timeout-path-receiver-gone case only.

Exercises the mutex-guarded state transitions from many goroutines so `go test -race` catches any regression in pendingRestart/restarting.

Exercises the end-to-end pipeline: a real child process panics, its stderr flows through TailWriter, and Scan extracts a snapshot.

triggerRestart is the manual path; it must bypass ShouldRestart and must never leave pendingRestart set.