@akira-tl/forgerelay 0.4.6 → 0.4.7

package/dist/server.js

@@ -469,15 +469,19 @@ async function readWorkspaceAppResource(config, requestedUri, transportSessionId
 function processResult(snapshot) {
     const status = snapshot.running
         ? `Process running with process ID ${snapshot.processId}.`
-        : snapshot.signal
-            ? `Process exited after signal ${snapshot.signal}.`
-            : `Process exited with code ${snapshot.exitCode ?? "unknown"}.`;
+        : snapshot.timedOut
+            ? "Process timed out and was terminated."
+            : snapshot.signal
+                ? `Process exited after signal ${snapshot.signal}.`
+                : `Process exited with code ${snapshot.exitCode ?? "unknown"}.`;
     return snapshot.output ? `${snapshot.output.replace(/\n$/, "")}\n${status}` : status;
 }
 function completedProcessResult(snapshot) {
-    const status = snapshot.signal
-        ? `Background process ${snapshot.processId} exited after signal ${snapshot.signal}.`
-        : `Background process ${snapshot.processId} exited with code ${snapshot.exitCode ?? "unknown"}.`;
+    const status = snapshot.timedOut
+        ? `Background process ${snapshot.processId} timed out and was terminated.`
+        : snapshot.signal
+            ? `Background process ${snapshot.processId} exited after signal ${snapshot.signal}.`
+            : `Background process ${snapshot.processId} exited with code ${snapshot.exitCode ?? "unknown"}.`;
     const command = `Command: ${snapshot.command}`;
     const output = snapshot.output ? `\n${snapshot.output.replace(/\n$/, "")}` : "";
     return `${status}\n${command}${output}`;
@@ -524,6 +528,7 @@ function processOutputSchema() {
         running: z.boolean(),
         exitCode: z.number().int().optional(),
         signal: z.string().optional(),
+        timedOut: z.boolean(),
         wallTimeMs: z.number().nonnegative(),
         outputTruncated: z.boolean(),
     });
@@ -556,6 +561,7 @@ function processToolResponse(tool, workspaceId, snapshot, summary) {
             running: snapshot.running,
             exitCode: snapshot.exitCode,
             signal: snapshot.signal,
+            timedOut: snapshot.timedOut,
             wallTimeMs: snapshot.wallTimeMs,
             outputTruncated: snapshot.outputTruncated,
         },
@@ -613,9 +619,16 @@ function registerProcessTools(server, config, workspaces, processSessions, hooks
                     .number()
                     .int()
                     .min(0)
-                    .max(30_000)
+                    .max(300_000)
+                    .optional()
+                    .describe("Feedback window before returning a processId. Use 0 for immediate background handoff. Defaults to 10000ms."),
+                timeoutMs: z
+                    .number()
+                    .int()
+                    .min(1)
+                    .max(86_400_000)
                     .optional()
-                    .describe("Milliseconds to wait before returning a running process. Defaults to 10000."),
+                    .describe("Total execution timeout from process start. On expiry ForgeRelay terminates the process. Omit for no ForgeRelay execution deadline."),
                 maxOutputTokens: z
                     .number()
                     .int()
@@ -627,49 +640,64 @@ function registerProcessTools(server, config, workspaces, processSessions, hooks
             outputSchema: processOutputSchema(),
             ...toolWidgetDescriptorMeta(config, "shell"),
             annotations: SHELL_TOOL_ANNOTATIONS,
-        }, async ({ workspaceId, cmd, tty, columns, rows, workingDirectory, yieldTimeMs, maxOutputTokens }, extra) => {
+        }, async ({ workspaceId, cmd, tty, columns, rows, workingDirectory, yieldTimeMs, timeoutMs, maxOutputTokens }, extra) => {
             const workspace = workspaces.getWorkspace(workspaceId);
-            return runToolWithHooks(hooks, {
-                tool: "exec_command",
-                invocation: workspaceHookInvocation(workspace),
-                payload: { command: cmd, workingDirectory: workingDirectory ?? "." },
-                operation: async () => {
-                    const startedAt = performance.now();
-                    const cwd = workspaces.resolveWorkingDirectory(workspace, workingDirectory);
-                    await assertWorkspaceInstructionsLoadedBeforeSideEffect(workspaces, workspace, [cwd]);
-                    const snapshot = await processSessions.start({
-                        workspaceId,
-                        command: cmd,
-                        cwd,
-                        workspaceRoot: workspace.root,
-                        tty,
-                        columns,
-                        rows,
-                        yieldTimeMs,
-                        maxOutputTokens,
-                        codexCi: true,
-                    });
-                    logToolCall(config, {
-                        tool: "exec_command",
-                        ...workspaceLogContext(workspace, extra.sessionId),
-                        workingDirectory: workingDirectory ?? ".",
-                        command: cmd,
-                        commandLength: cmd.length,
-                        exitCode: snapshot.exitCode,
-                        running: snapshot.running,
-                        processId: snapshot.processId,
-                        success: snapshot.running || snapshot.exitCode === 0,
-                        durationMs: Math.round(performance.now() - startedAt),
-                    });
-                    return processToolResponse("exec_command", workspaceId, snapshot, {
-                        command: cmd,
-                        workingDirectory: workingDirectory ?? ".",
-                        running: snapshot.running,
-                        exitCode: snapshot.exitCode,
-                        wallTimeMs: snapshot.wallTimeMs,
-                    });
-                },
-            });
+            let undeliveredProcessId;
+            try {
+                const result = await runToolWithHooks(hooks, {
+                    signal: extra.signal,
+                    tool: "exec_command",
+                    invocation: workspaceHookInvocation(workspace),
+                    payload: { command: cmd, workingDirectory: workingDirectory ?? "." },
+                    operation: async () => {
+                        const startedAt = performance.now();
+                        const cwd = workspaces.resolveWorkingDirectory(workspace, workingDirectory);
+                        await assertWorkspaceInstructionsLoadedBeforeSideEffect(workspaces, workspace, [cwd]);
+                        const snapshot = await processSessions.start({
+                            workspaceId,
+                            command: cmd,
+                            cwd,
+                            workspaceRoot: workspace.root,
+                            tty,
+                            columns,
+                            rows,
+                            yieldTimeMs,
+                            timeoutMs,
+                            maxOutputTokens,
+                            codexCi: true,
+                            signal: extra.signal,
+                        });
+                        undeliveredProcessId = snapshot.running ? snapshot.processId : undefined;
+                        logToolCall(config, {
+                            tool: "exec_command",
+                            ...workspaceLogContext(workspace, extra.sessionId),
+                            workingDirectory: workingDirectory ?? ".",
+                            command: cmd,
+                            commandLength: cmd.length,
+                            exitCode: snapshot.exitCode,
+                            running: snapshot.running,
+                            processId: snapshot.processId,
+                            success: snapshot.running || snapshot.exitCode === 0,
+                            durationMs: Math.round(performance.now() - startedAt),
+                        });
+                        return processToolResponse("exec_command", workspaceId, snapshot, {
+                            command: cmd,
+                            workingDirectory: workingDirectory ?? ".",
+                            running: snapshot.running,
+                            exitCode: snapshot.exitCode,
+                            wallTimeMs: snapshot.wallTimeMs,
+                        });
+                    },
+                });
+                extra.signal.throwIfAborted();
+                return result;
+            }
+            catch (error) {
+                if (undeliveredProcessId !== undefined) {
+                    processSessions.discardUndelivered(workspaceId, undeliveredProcessId);
+                }
+                throw error;
+            }
         });
     }
     if (config.toolMode !== "codex")
@@ -706,6 +734,7 @@ function registerProcessTools(server, config, workspaces, processSessions, hooks
         const workspace = workspaces.getWorkspace(workspaceId);
         const resolvedProcessId = resolveProcessId(processId, sessionId);
         return runToolWithHooks(hooks, {
+            signal: extra.signal,
             tool: "write_stdin",
             invocation: workspaceHookInvocation(workspace),
             payload: {
@@ -724,6 +753,7 @@ function registerProcessTools(server, config, workspaces, processSessions, hooks
                     rows,
                     yieldTimeMs,
                     maxOutputTokens,
+                    signal: extra.signal,
                 });
                 logToolCall(config, {
                     tool: "write_stdin",
@@ -1258,6 +1288,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
         const workspace = workspaces.getWorkspace(workspaceId);
         let changedPaths = [];
         return runToolWithHooks(hooks, {
+            signal: extra.signal,
             tool: toolNames.capability,
             invocation: workspaceHookInvocation(workspace),
             payload: { name, action },
@@ -1345,7 +1376,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
     });
     registerAppTool(server, toolNames.closeWorkspace, {
         title: "Close workspace",
-        description: "Close one workspace after the user chooses cleanup. Checkout-backed workspaces release only the logical handle. Managed-worktree-backed workspaces finalize the existing safe worktree lifecycle, including hooks, commit/integration, and cleanup; provide commitMessage for that mode. Running or unconsumed processes prevent closure.",
+        description: "Close one workspace after the user chooses cleanup. Checkout-backed workspaces release only the logical handle. Managed-worktree-backed workspaces finalize the existing safe worktree lifecycle, including hooks, commit/integration, and cleanup; provide commitMessage for that mode. Running processes prevent closure; completed background results are delivered with the close response when available.",
         inputSchema: {
             workspaceId: z.string().describe("Workspace identifier to close."),
             commitMessage: z
@@ -1370,6 +1401,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
     }, async ({ workspaceId, commitMessage }, extra) => {
         const workspace = workspaces.getWorkspace(workspaceId);
         return runToolWithHooks(hooks, {
+            signal: extra.signal,
             tool: toolNames.closeWorkspace,
             invocation: workspaceHookInvocation(workspace),
             payload: { workspaceId, commitMessage, mode: workspace.mode },
@@ -1386,7 +1418,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
                     const busyWorkspaceIds = physicalWorkspaceIds
                         .filter((id) => processSessions.activeWorkspaceIds().has(id));
                     if (busyWorkspaceIds.length > 0) {
-                        throw new Error(`Cannot close this worktree-backed workspace while logical workspace processes are still running or awaiting completion delivery: ${busyWorkspaceIds.join(", ")}.`);
+                        throw new Error(`Cannot close this worktree-backed workspace while logical workspace processes are still running: ${busyWorkspaceIds.join(", ")}.`);
                     }
                     const startedAt = performance.now();
                     const retirement = await codeIntelligence.retireWorkspaceRoot(workspace.root);
@@ -1434,7 +1466,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
                     throw new Error("close_workspace commitMessage is only valid for managed-worktree-backed workspaces.");
                 }
                 if (processSessions.activeWorkspaceIds().has(workspaceId)) {
-                    throw new Error(`Workspace ${workspaceId} still owns a running process or an unconsumed process completion. Poll or consume it before closing this workspace.`);
+                    throw new Error(`Workspace ${workspaceId} still owns a running process. Poll, interrupt, or wait for it before closing this workspace.`);
                 }
                 workspaces.closeWorkspace(workspaceId);
                 await reviewCheckpoints.releaseWorkspace(workspaceId);
@@ -1479,6 +1511,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
     }, async ({ workspaceId, ...input }, extra) => {
         const workspace = workspaces.getWorkspace(workspaceId);
         return runToolWithHooks(hooks, {
+            signal: extra.signal,
             tool: toolNames.read,
             invocation: workspaceHookInvocation(workspace),
             payload: { path: input.path, offset: input.offset, limit: input.limit },
@@ -1565,6 +1598,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
         }, async ({ workspaceId, ...input }, extra) => {
             const workspace = workspaces.getWorkspace(workspaceId);
             return runToolWithHooks(hooks, {
+                signal: extra.signal,
                 tool: toolNames.write,
                 invocation: workspaceHookInvocation(workspace),
                 payload: { path: input.path },
@@ -1648,6 +1682,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
         }, async ({ workspaceId, ...input }, extra) => {
             const workspace = workspaces.getWorkspace(workspaceId);
             return runToolWithHooks(hooks, {
+                signal: extra.signal,
                 tool: toolNames.edit,
                 invocation: workspaceHookInvocation(workspace),
                 payload: { path: input.path, editCount: input.edits.length },
@@ -1724,6 +1759,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
     }, async ({ workspaceId, path, newPath }, extra) => {
         const workspace = workspaces.getWorkspace(workspaceId);
         return runToolWithHooks(hooks, {
+            signal: extra.signal,
             tool: toolNames.rename,
             invocation: workspaceHookInvocation(workspace),
             payload: { path, newPath, paths: [path, newPath] },
@@ -1796,6 +1832,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
     }, async ({ workspaceId, path, recursive }, extra) => {
         const workspace = workspaces.getWorkspace(workspaceId);
         return runToolWithHooks(hooks, {
+            signal: extra.signal,
             tool: toolNames.delete,
             invocation: workspaceHookInvocation(workspace),
             payload: { path, recursive: recursive ?? false },
@@ -1876,6 +1913,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
         }, async ({ workspaceId, patch }, extra) => {
             const workspace = workspaces.getWorkspace(workspaceId);
             return runToolWithHooks(hooks, {
+                signal: extra.signal,
                 tool: "apply_patch",
                 invocation: workspaceHookInvocation(workspace),
                 payload: { patchBytes: Buffer.byteLength(patch) },
@@ -1982,7 +2020,14 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
                     .min(0)
                     .max(300_000)
                     .optional()
-                    .describe("Milliseconds to wait before returning. Run preserves the existing 300000ms default; process polling defaults to 5000ms and interaction to 250ms."),
+                    .describe("Feedback window before returning. For action=run, use 0 for immediate background handoff; otherwise defaults to 10000ms. For action=process, polling defaults to 5000ms and interaction to 250ms."),
+                timeoutMs: z
+                    .number()
+                    .int()
+                    .min(1)
+                    .max(86_400_000)
+                    .optional()
+                    .describe("For action=run, total execution timeout from process start. On expiry ForgeRelay terminates the process. Omit for no ForgeRelay execution deadline."),
                 maxOutputTokens: z
                     .number()
                     .int()
@@ -1994,7 +2039,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
             outputSchema: processOutputSchema(),
             ...toolWidgetDescriptorMeta(config, "shell"),
             annotations: SHELL_TOOL_ANNOTATIONS,
-        }, async ({ workspaceId, action = "run", command, processId, input, interrupt, tty, columns, rows, workingDirectory, yieldTimeMs, maxOutputTokens, }, extra) => {
+        }, async ({ workspaceId, action = "run", command, processId, input, interrupt, tty, columns, rows, workingDirectory, yieldTimeMs, timeoutMs, maxOutputTokens, }, extra) => {
             const workspace = workspaces.getWorkspace(workspaceId);
             if (action === "run") {
                 if (!command)
@@ -2002,58 +2047,73 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
                 if (processId !== undefined || input !== undefined || interrupt !== undefined) {
                     throw new Error("bash action=run does not accept processId, input, or interrupt.");
                 }
-                return runToolWithHooks(hooks, {
-                    tool: toolNames.shell,
-                    invocation: workspaceHookInvocation(workspace),
-                    payload: {
-                        action,
-                        command,
-                        workingDirectory: workingDirectory ?? ".",
-                    },
-                    isFailure: toolResultIsError,
-                    operation: async () => {
-                        const startedAt = performance.now();
-                        const cwd = workspaces.resolveWorkingDirectory(workspace, workingDirectory);
-                        await assertWorkspaceInstructionsLoadedBeforeSideEffect(workspaces, workspace, [cwd]);
-                        const snapshot = await processSessions.start({
-                            workspaceId,
-                            command,
-                            cwd,
-                            workspaceRoot: workspace.root,
-                            tty,
-                            columns,
-                            rows,
-                            yieldTimeMs: yieldTimeMs ?? 300_000,
-                            maxOutputTokens,
-                        });
-                        logToolCall(config, {
-                            tool: toolNames.shell,
-                            ...workspaceLogContext(workspace, extra.sessionId),
-                            workingDirectory: workingDirectory ?? ".",
-                            command,
-                            commandLength: command.length,
-                            exitCode: snapshot.exitCode,
-                            running: snapshot.running,
-                            processId: snapshot.processId,
-                            success: snapshot.running || (snapshot.exitCode === 0 && !snapshot.signal),
-                            durationMs: Math.round(performance.now() - startedAt),
-                        });
-                        const response = processToolResponse(toolNames.shell, workspaceId, snapshot, {
+                let undeliveredProcessId;
+                try {
+                    const result = await runToolWithHooks(hooks, {
+                        signal: extra.signal,
+                        tool: toolNames.shell,
+                        invocation: workspaceHookInvocation(workspace),
+                        payload: {
                             action,
                             command,
                             workingDirectory: workingDirectory ?? ".",
-                            running: snapshot.running,
-                            exitCode: snapshot.exitCode,
-                            wallTimeMs: snapshot.wallTimeMs,
-                        });
-                        return !snapshot.running && (snapshot.signal || snapshot.exitCode !== 0)
-                            ? { ...response, isError: true }
-                            : response;
-                    },
-                });
+                        },
+                        isFailure: toolResultIsError,
+                        operation: async () => {
+                            const startedAt = performance.now();
+                            const cwd = workspaces.resolveWorkingDirectory(workspace, workingDirectory);
+                            await assertWorkspaceInstructionsLoadedBeforeSideEffect(workspaces, workspace, [cwd]);
+                            const snapshot = await processSessions.start({
+                                workspaceId,
+                                command,
+                                cwd,
+                                workspaceRoot: workspace.root,
+                                tty,
+                                columns,
+                                rows,
+                                yieldTimeMs,
+                                timeoutMs,
+                                maxOutputTokens,
+                                signal: extra.signal,
+                            });
+                            undeliveredProcessId = snapshot.running ? snapshot.processId : undefined;
+                            logToolCall(config, {
+                                tool: toolNames.shell,
+                                ...workspaceLogContext(workspace, extra.sessionId),
+                                workingDirectory: workingDirectory ?? ".",
+                                command,
+                                commandLength: command.length,
+                                exitCode: snapshot.exitCode,
+                                running: snapshot.running,
+                                processId: snapshot.processId,
+                                success: snapshot.running || (snapshot.exitCode === 0 && !snapshot.signal),
+                                durationMs: Math.round(performance.now() - startedAt),
+                            });
+                            const response = processToolResponse(toolNames.shell, workspaceId, snapshot, {
+                                action,
+                                command,
+                                workingDirectory: workingDirectory ?? ".",
+                                running: snapshot.running,
+                                exitCode: snapshot.exitCode,
+                                wallTimeMs: snapshot.wallTimeMs,
+                            });
+                            return !snapshot.running && (snapshot.signal || snapshot.exitCode !== 0)
+                                ? { ...response, isError: true }
+                                : response;
+                        },
+                    });
+                    extra.signal.throwIfAborted();
+                    return result;
+                }
+                catch (error) {
+                    if (undeliveredProcessId !== undefined) {
+                        processSessions.discardUndelivered(workspaceId, undeliveredProcessId);
+                    }
+                    throw error;
+                }
             }
-            if (command !== undefined || workingDirectory !== undefined || tty !== undefined) {
-                throw new Error("bash action=process does not accept command, workingDirectory, or tty.");
+            if (command !== undefined || workingDirectory !== undefined || tty !== undefined || timeoutMs !== undefined) {
+                throw new Error("bash action=process does not accept command, workingDirectory, tty, or timeoutMs.");
             }
             if (processId === undefined)
                 throw new Error("bash action=process requires processId.");
@@ -2061,6 +2121,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
                 throw new Error("bash action=process cannot combine interrupt with input.");
             }
             return runToolWithHooks(hooks, {
+                signal: extra.signal,
                 tool: toolNames.shell,
                 invocation: workspaceHookInvocation(workspace),
                 payload: {
@@ -2082,6 +2143,7 @@ export function createMcpServer(config, workspaces, reviewCheckpoints, processSe
                         rows,
                         yieldTimeMs,
                         maxOutputTokens,
+                        signal: extra.signal,
                     });
                     logToolCall(config, {
                         tool: toolNames.shell,

package/docs/chatgpt-coding-workflow.md

@@ -264,11 +264,16 @@ capability
 
 In minimal mode, normal shell inspection commands such as `rg`, `find`, and `ls`
 can be used rather than dedicated MCP search tools. `bash(action="run")` (or plain
-`bash`, since `run` is the default) waits in the foreground for at most 300 seconds.
-If the command is still running, ForgeRelay returns a canonical `processId` without
-killing it. Reuse `bash(action="process", processId=...)` to poll/wait, send input,
-resize a PTY, or interrupt the existing process; or continue other work and consume
-the one-shot completion notice from a later result in the same workspace.
+`bash`, since `run` is the default) separates feedback from execution lifetime:
+`yieldTimeMs` controls how long to wait before returning a canonical `processId`
+(default 10 seconds; use `0` when intentionally starting background work), while
+optional `timeoutMs` independently caps total process runtime. A routine command can
+use a longer feedback window such as 60 seconds when that remains below the Host
+request deadline. Reuse `bash(action="process", processId=...)` to poll incremental
+output/wait, send input, resize a PTY, or interrupt the existing process; or continue
+other work and consume the one-shot completion notice from a later result in the same
+workspace. Full completed output is retained for five minutes and then compacted to a
+bounded completion record that remains deliverable for up to 24 hours.
 
 `FORGERELAY_TOOL_MODE=full` is retained as a compatibility value and exposes the
 same canonical 9-tool surface as `minimal`; use `bash` for search and directory

package/docs/configuration.md

@@ -305,16 +305,25 @@ context-delivery checkpoints, and other semantic state transitions remain immedi
 persistent writes. A hard process crash may therefore lose only the most recent
 activity timestamp window, not the existence or closed/open state of a workspace.
 
-Regular `bash` has no execution-timeout input. `action="run"` (the default) waits
-in the foreground for at most 300 seconds; if the process is still alive, the
-result contains `running: true` and a canonical `processId`. Reuse the same `bash`
-with `action="process"` to poll/wait, send `input`, resize a PTY, or set
-`interrupt:true`; each wait can be up to 300 seconds. ForgeRelay does not kill a
-process merely because a wait window expires. Completed background processes are
-delivered once with a later tool result for the same logical workspace ID. An
-unconsumed completed-process notice is retained for at most five minutes, and
-ForgeRelay also bounds active and completed process counts so repeated background
-commands cannot grow server memory without limit.
+Regular `bash` separates the **feedback window** from the **execution deadline**. For
+`action="run"`, `yieldTimeMs` controls how long the current MCP request waits before
+returning `running: true` plus a canonical `processId`; it defaults to 10 seconds and
+`0` is the intentional-background form. `timeoutMs` is independent: when explicitly
+set it limits total runtime from process start and ForgeRelay terminates the process
+on expiry; when omitted ForgeRelay imposes no execution deadline. Reuse the same
+`bash` with `action="process"` to poll incremental output, wait, send `input`, resize
+a PTY, or set `interrupt:true`; each poll wait can be up to 300 seconds and does not
+kill the process merely because the feedback window expires. Host cancellation of
+the initial run request terminates a not-yet-handed-off process so ForgeRelay does
+not leave an orphan process whose `processId` the Agent never received.
+
+Completed background processes are delivered once with a later tool result for the
+same logical workspace ID. Full buffered completion output is retained for five
+minutes; after that ForgeRelay compacts the completion to a bounded head/tail record
+and keeps it deliverable for up to 24 hours, still subject to the global completed
+process count bound. Completed processes no longer prevent `close_workspace`; the
+close response itself delivers any available completion notice. Running processes
+continue to block close until they finish or are interrupted.
 
 Codex mode retains `write_stdin` only as an experimental compatibility adapter;
 regular Agent workflows should use the single `bash` process lifecycle.
@@ -358,13 +367,13 @@ Hooks v1 是自动生命周期规则。规则由用户或 Agent 主动写入；
     "tool": "bash",
     "commandRegex": "git\\s+push\\s+origin\\s+v\\d+\\.\\d+\\.\\d+"
   },
-  "command": "npm run release:verify",
-  "timeoutSeconds": 300,
+  "command": "node scripts/release-proof.mjs check-hook",
+  "timeoutSeconds": 30,
   "report": true
 }
 ```
 
-这个例子可以保存为 `.forgerelay/hooks/release-tag-local-ci.json`。Agent 通过 ForgeRelay `bash` 请求推送稳定版本 tag 时，Hook 先跑本地发布检查；成功后才执行原始 `git push`，失败则直接阻断并把 `release-tag-local-ci` 的失败报告返回给 Agent。
+这个例子可以保存为 `.forgerelay/hooks/release-tag-local-ci.json`。耗时的 `npm run release:verify` 应在已提交的 release-ready HEAD 上提前运行，并在 `.git/forgerelay/` 写入 release proof。Agent 之后通过 ForgeRelay `bash` 请求推送稳定版本 tag 时，Hook 只快速校验 proof、当前 HEAD/package version、clean working tree（含 untracked）与本地 tag 指向；全部一致才执行原始 `git push`。因此发布 gate 不再依赖一个持续数分钟的单次 MCP request，同时任何验证后的代码变化都会使 proof 失效并阻断推送。
 
 独立 Hook 文件支持这些顶层字段：
 
@@ -423,7 +432,7 @@ Matcher 匹配 ForgeRelay 收到的那次 tool request，不会窥探该命令
 | `SubagentStart` | 本地 subagent worker 进入执行时触发。 |
 | `SubagentStop` | subagent 完成或进入 error 状态时触发。 |
 
-`BeforeTool` 与 `BeforeWorktreeClose` 是 blocking 事件。其他事件是 observational：失败会被记录并报告，但不会回滚已经完成的文件、Git、进程或网络副作用。Blocking 同样不是事务；Hook 命令自己已经产生的副作用不会因 exit code 非零而撤销。
+`BeforeTool` 与 `BeforeWorktreeClose` 是 blocking 事件。其他事件是 observational：失败会被记录并报告，但不会回滚已经完成的文件、Git、进程或网络副作用。Blocking 同样不是事务；Hook 命令自己已经产生的副作用不会因 exit code 非零而撤销。Host 在 blocking Hook 仍运行时取消 MCP request，会终止该 Hook 并阻止原始 tool operation 开始，因此不会出现 Host 已放弃请求后 Hook 又放行后续原始副作用的情况。
 
 ### Agent 可见报告
 
@@ -431,7 +440,7 @@ Matcher 匹配 ForgeRelay 收到的那次 tool request，不会窥探该命令
 
 ```text
 Hook results:
-✓ release-tag-local-ci (BeforeTool, project) passed in 38124ms
+✓ release-tag-local-ci (BeforeTool, project) passed in 42ms
 ```
 
 阻断失败会明确显示 `failed`。ForgeRelay 的 server instructions 要求 Agent 在出现 Hook results 时，向用户说明有意义的 Hook 是否通过或阻断了操作。异步 subagent 的 `SubagentStart` / `SubagentStop` 报告会随 session 持久化，并由 `forgerelay agents show` 展示。

package/docs/roadmap.md

@@ -238,7 +238,10 @@ and verify publication before work begins on the next boundary:
 - **0.4.5** — cancellation, deadlines, crash recovery/config invalidation, concurrency,
   and full Language-service resource/lifecycle hardening;
 - **0.4.6** — optional real-server interoperability, cross-platform checks, fresh Host
-  acceptance, documentation, and final LSP v1 closure.
+  acceptance, documentation, and final LSP v1 closure;
+- **0.4.7** — post-acceptance Hook/process lifecycle hardening: independent bash feedback
+  and execution deadlines, Host cancellation propagation, longer bounded completion delivery,
+  and proof-based release Hooks that do not hold a multi-minute MCP request open.
 
 The shipping 0.4 LSP v1 contract keeps the canonical nine Core MCP tools unchanged
 and exposes semantic operations only through `code.intelligence`. Deterministic

package/docs/versioning.md

@@ -85,8 +85,10 @@ Run the full local release gate with:
 npm run release:verify
 ```
 
-`release:verify` checks the current development runtime and then runs a focused
-`release:parity` gate in an isolated Node 22.19.0 sandbox. The parity sandbox
+`release:verify` checks the current committed release-ready runtime and then runs a focused
+`release:parity` gate in an isolated Node 22.19.0 sandbox. After every check passes it
+records a local release proof under `.git/forgerelay/`, binding that verification to
+current HEAD and the package version. The parity sandbox
 performs its own `npm ci` so native addons use the same Node ABI as cloud CI,
 then reruns the LSP/release tests most sensitive to event-loop timing, process
 lifecycle, path canonicalization, executable discovery, and cleanup behavior.
@@ -169,11 +171,11 @@ npm publishing token.
 2. Run `npm run release:check`.
 3. Run the appropriate `release:patch`, `release:minor`, or `release:major`
    command.
-4. Review the generated version and changelog diff.
-5. Run `npm run release:verify` locally. This full local gate includes the isolated
-   Node 22.19.0 parity sandbox and is a release-time operation; ordinary development
+4. Review the generated version and changelog diff, then commit the release-ready code and metadata.
+5. Run `npm run release:verify` locally on that clean committed HEAD. This full local gate includes the isolated
+   Node 22.19.0 parity sandbox and records the local release proof consumed by the tag-push Hook; ordinary development
    pushes do not need to run the full release gate.
-6. Commit the release-ready code and metadata and push `main`.
+6. Push the verified `main` commit without changing it afterward.
 7. Create the exact version tag, for example:
 
    ```bash
@@ -183,7 +185,7 @@ npm publishing token.
 
 The tag push is the publication action. The release workflow publishes npm only after cloud CI passes, then extracts the matching `CHANGELOG.md` release section as the GitHub Release body. Keep `Unreleased` user-facing and structured (`Added`, `Changed`, `Fixed`, `Security`) because those notes are what users see on the Release page.
 
-Project release Hooks match the stable tag-push command as a substring of the ForgeRelay shell request. A compound command is allowed: when `commandRegex` matches `git push origin vX.Y.Z`, the Hook receives that matched command as `FORGERELAY_HOOK_PAYLOAD.command` and retains the complete shell request as `originalCommand` when they differ.
+Project release Hooks match the stable tag-push command as a substring of the ForgeRelay shell request. A compound command is allowed: when `commandRegex` matches `git push origin vX.Y.Z`, the Hook receives that matched command as `FORGERELAY_HOOK_PAYLOAD.command` and retains the complete shell request as `originalCommand` when they differ. The release Hook does **not** rerun the multi-minute local gate inside the tag-push MCP request. Instead it quickly verifies the proof written by `release:verify`, requires a clean working tree including untracked files, requires the proof HEAD/package version to equal the current release state, and requires the local tag to resolve to that same verified HEAD. Any change after verification invalidates the proof and blocks the push until `release:verify` is rerun.
 
 ## Attribution guardrails
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akira-tl/forgerelay",
-  "version": "0.4.6",
+  "version": "0.4.7",
   "description": "Local development control plane for MCP coding agents.",
   "type": "module",
   "homepage": "https://github.com/Akira-TL/forgerelay#readme",
@@ -44,7 +44,7 @@
     "release:parity": "node scripts/release-parity.mjs",
     "postinstall": "node scripts/fix-node-pty-permissions.mjs",
     "start": "node dist/cli.js serve",
-    "test": "tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/local-agent-runtime.test.ts && tsx src/local-agent-adapters.test.ts && tsx src/local-agent-availability.test.ts && tsx src/local-agent-profiles.test.ts && tsx src/local-agent-targets.test.ts && tsx src/local-agent-store.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/skills.test.ts && tsx src/workspace-store.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
+    "test": "node --test scripts/release-proof.test.mjs && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/local-agent-runtime.test.ts && tsx src/local-agent-adapters.test.ts && tsx src/local-agent-availability.test.ts && tsx src/local-agent-profiles.test.ts && tsx src/local-agent-targets.test.ts && tsx src/local-agent-store.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/skills.test.ts && tsx src/workspace-store.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "release:check": "node scripts/release-version.mjs check",
     "release:tag-check": "node scripts/release-version.mjs tag",
@@ -52,7 +52,7 @@
     "release:patch": "node scripts/release-version.mjs next patch",
     "release:minor": "node scripts/release-version.mjs next minor",
     "release:major": "node scripts/release-version.mjs next major",
-    "release:verify": "npm run release:check && npm run typecheck && npm test && npm run build && npm run lsp:interop && npm run release:parity"
+    "release:verify": "npm run release:check && npm run typecheck && npm test && npm run build && npm run lsp:interop && npm run release:parity && node scripts/release-proof.mjs write"
   },
   "keywords": [
     "mcp",

package/scripts/debug/accept.mjs

@@ -164,6 +164,7 @@ try {
   assert.equal(bashTool?.inputSchema?.properties?.timeout, undefined);
   assert.match(bashTool?.description ?? "", /action=process/);
   assert.equal(bashTool?.inputSchema?.properties?.yieldTimeMs?.maximum, 300000);
+  assert.equal(bashTool?.inputSchema?.properties?.timeoutMs?.maximum, 86400000);
   assert.match(bashTool?.inputSchema?.properties?.processId?.description ?? "", /action=process/);
   assert.match(bashTool?.inputSchema?.properties?.interrupt?.description ?? "", /SIGINT/);
   const openWorkspaceTool = tools.find((tool) => tool.name === "open_workspace");