ace-runtime 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1a5a447921ab8d6b478e41a38e6b56866977accc8a75250e394c89c6fa0ac658
-  data.tar.gz: efe75a6544cb3284a9bf544deaaa30975b60971a5c821799666502240442ec7f
+  metadata.gz: 95299eb06854907e2402041c388ca25b234b24e220acf2c13911c746b84f3c6b
+  data.tar.gz: 9e6cf1b53df631d5a2e764b5deff50d5a34b0d2491d3f5be1fc2ec17ff6b30db
 SHA512:
-  metadata.gz: 46343d278d6041fcd7f41c859207ee0303e28811d156b923bc195b88cf73aef852d3f44b50df62a90425f0cec8a942984504ca9a7c52e4cd9152ffc77679d87a
-  data.tar.gz: b61c518fb64562ddb1975be5b6b71242134f013ec80de029bf259c5d92acdd2572b428f60788e4e4578e7f5f2a59abb3e50ec8664eaa462ceb65482ce3b6857e
+  metadata.gz: cfe0a30fdcb212c43d6e9633877aaf3ae35ddb115819066ca3c7b6f30205f916bf33f22afdf9087d4395d595a192807fa3c98ce922ddf1f912bf35a3550048f6
+  data.tar.gz: a2e00a11a779cfc017e782617a5823a315ff379f6b3c6f434720df0d252e7dd086b8abf73dd491b4e16dbb7223055773181370def9f5ffcf618f718563e9ec67

data/CHANGELOG.md

@@ -6,6 +6,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [0.4.0] - 2026-10-16
+
+### Added
+
+- Distinguish positively ended process generations from inaccessible observations for explicit coordinator adoption; retain conservative unknown liveness for existing recovery observers.
+
 ## [0.3.0] - 2026-10-10
 
 - Ship the protected task-context/worker entry and readiness source used by the current consumers; these required modules were absent from published 0.2.0. Ordinary agent execution remains the ace-llm terminal CLI, with no additional Codex service.

data/lib/ace/runtime/molecules/owned_child_scope.rb

@@ -0,0 +1,81 @@
+# frozen_string_literal: true
+
+require "fiddle"
+
+module Ace
+  module Runtime
+    module Molecules
+      # One ephemeral single-thread helper owns every child in this scope.
+      # Linux reparents detached orphans to this subreaper, not container PID1.
+      # Unreaped direct children pin their PIDs until this owner reaps them.
+      class OwnedChildScope
+        class CleanupUncertain < StandardError; end
+
+        def initialize
+          unless RUBY_PLATFORM.include?("linux") && Thread.list.count(&:alive?) == 1
+            raise CleanupUncertain, "child scope requires a sole Linux helper thread"
+          end
+          @owner = Process.pid
+          raise CleanupUncertain, "child scope has preexisting children" unless children.empty?
+          # An inherited ignore/custom reaper could discard a child's wait
+          # status and unpin its PID. This sole ephemeral helper owns the
+          # disposition; establish it while the verified child set is empty.
+          Signal.trap("CHLD", "DEFAULT")
+          prctl = Fiddle::Function.new(Fiddle::Handle::DEFAULT["prctl"],
+            [Fiddle::TYPE_INT, Fiddle::TYPE_LONG, Fiddle::TYPE_LONG, Fiddle::TYPE_LONG, Fiddle::TYPE_LONG], Fiddle::TYPE_INT)
+          raise CleanupUncertain, "cannot establish child subreaper" unless prctl.call(36, 1, 0, 0, 0).zero?
+        end
+
+        # Preserve the leader's wait status for the executor. Kill/reap only
+        # kernel-owned direct children; adoption closes setsid/double-fork escape.
+        def cleanup!(leader:, timeout: 5)
+          unless Process.pid == @owner && Thread.list.count(&:alive?) == 1 &&
+              timeout.is_a?(Numeric) && timeout.finite? && timeout.positive? && timeout <= 5
+            raise CleanupUncertain, "child scope ownership is unavailable"
+          end
+          deadline = monotonic + timeout
+          owned = children
+          raise CleanupUncertain, "original child is no longer owned" unless owned.include?(leader)
+          signal("TERM", -leader)
+          loop do
+            owned = children
+            raise CleanupUncertain, "original child was reaped outside its scope" unless owned.include?(leader)
+            owned.each do |pid|
+              signal("KILL", pid)
+              Process.waitpid(pid, Process::WNOHANG) unless pid == leader
+            end
+            remaining = children
+            return if remaining == [leader] && zombie?(leader)
+            raise CleanupUncertain, "owned child cleanup deadline elapsed" if monotonic >= deadline
+            IO.select(nil, nil, nil, 0.01)
+          end
+        rescue Errno::ECHILD, Errno::ENOENT, IOError
+          raise CleanupUncertain, "owned child cleanup cannot be confirmed"
+        end
+
+        private
+
+        def children
+          File.open("/proc/self/task/#{@owner}/children", "r") do |file|
+            bytes = file.read(65_537) || ""
+            raise CleanupUncertain, "owned child inventory exceeds bound" if bytes.bytesize > 65_536
+            values = bytes.split.map { |value| Integer(value, 10) }
+            unless values.uniq == values && values.all?(&:positive?)
+              raise CleanupUncertain, "owned child inventory is invalid"
+            end
+            values.sort
+          end
+        end
+
+        def signal(name, pid)
+          Process.kill(name, pid)
+        rescue Errno::ESRCH
+          nil
+        end
+
+        def zombie?(pid) = File.read("/proc/#{pid}/stat").rpartition(")").last.split.first == "Z"
+        def monotonic = Process.clock_gettime(Process::CLOCK_MONOTONIC)
+      end
+    end
+  end
+end

data/lib/ace/runtime/molecules/process_identity.rb

@@ -3,6 +3,7 @@
 require "open3"
 require "socket"
 require "fiddle"
+require "time"
 
 module Ace
   module Runtime
@@ -117,6 +118,33 @@ module Ace
             {"liveness" => "unknown", "observed_at" => at, "reason" => "process identity no longer observable"}
           end
         end
+
+        # Positive evidence that this exact historical generation ended. A
+        # failed capture alone says nothing: EPERM/inaccessible probes remain
+        # unknown. PID reuse is conclusive only when the exact birth differs.
+        def generation_status(identity, process: Process)
+          at = Time.now.utc.iso8601
+          unknown = {"liveness" => "unknown", "observed_at" => at}
+          unless identity.is_a?(Hash) && identity.keys.sort == %w[host pid started_at uid] &&
+              identity["host"] == @hostname && identity["pid"].is_a?(Integer) && identity["pid"].positive? &&
+              identity["uid"].is_a?(Integer) && identity["uid"] >= 0 &&
+              identity["started_at"].is_a?(String) && !identity["started_at"].empty?
+            return unknown.merge("reason" => "verified process generation unavailable")
+          end
+          current = capture(identity.fetch("pid"))
+          return {"liveness" => "live", "observed_at" => at, "identity" => current} if current == identity
+          if current && current.fetch("started_at") != identity.fetch("started_at")
+            return {"liveness" => "ended", "observed_at" => at, "reason" => "pid generation replaced", "identity" => current}
+          end
+          begin
+            process.kill(0, identity.fetch("pid"))
+            unknown.merge("reason" => "process address exists but generation is unobservable")
+          rescue Errno::ESRCH
+            {"liveness" => "ended", "observed_at" => at, "reason" => "kernel reports no process at address"}
+          rescue SystemCallError
+            unknown.merge("reason" => "kernel process presence is unavailable")
+          end
+        end
       end
     end
   end

data/lib/ace/runtime/version.rb

@@ -2,6 +2,6 @@
 
 module Ace
   module Runtime
-    VERSION = "0.3.0"
+    VERSION = "0.4.0"
   end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: ace-runtime
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Michal Czyz
 bindir: exe
 cert_chain: []
-date: 2026-10-10 00:00:00.000000000 Z
+date: 2026-10-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: fiddle
@@ -208,6 +208,7 @@ files:
 - lib/ace/runtime/molecules/kernel_view_topology.rb
 - lib/ace/runtime/molecules/linux_mount_info.rb
 - lib/ace/runtime/molecules/network_installation_evidence.rb
+- lib/ace/runtime/molecules/owned_child_scope.rb
 - lib/ace/runtime/molecules/process_identity.rb
 - lib/ace/runtime/molecules/protected_artifact_set.rb
 - lib/ace/runtime/molecules/protected_linux.rb