rtc: fail fast instead of hanging when FFI is used across fork()

The native runtime (tokio worker/IO threads in liblivekit_ffi) does not
survive fork() and cannot be rebuilt by re-initializing, so a child that
inherited an initialized FfiClient would hang on every request. Guard
request() with the owning pid and raise a clear error instead. The atexit
dispose handler is likewise skipped in fork children (it needs the runtime
and would hang at exit). Also move the drop_handle side effect out of an
assert so it is not stripped under python -O.

Author: theomonnom

livekit-rtc/livekit/rtc/_ffi_client.py

@@ -83,7 +83,8 @@ def disposed(self) -> bool:
     def dispose(self) -> None:
         if self.handle != INVALID_HANDLE and not self._disposed:
             self._disposed = True
-            assert FfiClient.instance._ffi_lib.livekit_ffi_drop_handle(ctypes.c_uint64(self.handle))
+            dropped = FfiClient.instance._ffi_lib.livekit_ffi_drop_handle(ctypes.c_uint64(self.handle))
+            assert dropped
 
     def __repr__(self) -> str:
         return f"FfiHandle({self.handle})"
@@ -218,6 +219,7 @@ def instance(cls) -> "FfiClient":
         return cls._instance
 
     def __init__(self) -> None:
+        self._pid = os.getpid()
         self._lock = threading.RLock()
         self._queue = FfiQueue[proto_ffi.FfiEvent]()
 
@@ -253,16 +255,31 @@ def __init__(self) -> None:
         )
 
         ffi_lib = self._ffi_lib
+        init_pid = self._pid
 
         @atexit.register
         def _dispose_lk_ffi() -> None:
+            # A fork child inherits this handler but not the native runtime
+            # threads; disposing the inherited (dead) FFI would hang or abort at
+            # exit. Only the process that initialized it should dispose.
+            if os.getpid() != init_pid:
+                return
             ffi_lib.livekit_ffi_dispose()
 
     @property
     def queue(self) -> FfiQueue[proto_ffi.FfiEvent]:
         return self._queue
 
     def request(self, req: proto_ffi.FfiRequest) -> proto_ffi.FfiResponse:
+        if self._pid != os.getpid():
+            # The native runtime does not survive fork() and cannot be
+            # reinitialized, so requests from a child that inherited the FFI
+            # would hang. Fail loudly instead.
+            raise RuntimeError(
+                "livekit.rtc was used in a parent process before fork(); the native "
+                "runtime cannot be used across fork(). Do not create or connect a Room "
+                "(or use any livekit.rtc object) before forking child processes."
+            )
         proto_data = req.SerializeToString()
         proto_len = len(proto_data)
         data = (ctypes.c_ubyte * proto_len)(*proto_data)