@botbuddy/cli 1.40.2 → 1.40.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.40.2",
+  "version": "1.40.3",
   "description": "BotBuddy — Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/wait-checkpoint.mjs

@@ -107,6 +107,20 @@ async function processStartedAt(pid) {
   }
 }
 
+// The real process-instance probe behind the ownership fence. Tests inject a
+// deterministic one instead of spawning `ps` (BOT-2031).
+const systemProcessProbe = Object.freeze({
+  async isAlive(pid) {
+    try { process.kill(pid, 0); }
+    catch (error) {
+      if (error?.code === "ESRCH") return false;
+      return true; // EPERM is deliberately conservative.
+    }
+    return true;
+  },
+  startedAt: processStartedAt,
+});
+
 function installFenceExitHook() {
   if (installedFenceExitHook) return;
   installedFenceExitHook = true;
@@ -120,7 +134,11 @@ function installFenceExitHook() {
   });
 }
 
-export function createWaitCheckpointStore({ root = process.cwd(), now = () => new Date() } = {}) {
+export function createWaitCheckpointStore({
+  root = process.cwd(),
+  now = () => new Date(),
+  processProbe = systemProcessProbe,
+} = {}) {
   const worktree = resolve(root);
   const directory = join(worktree, ".botbuddy", "waits");
   const pathFor = (id) => {
@@ -184,12 +202,8 @@ export function createWaitCheckpointStore({ root = process.cwd(), now = () => ne
     return lock;
   };
   const lockIsLive = async (lock) => {
-    try { process.kill(lock.pid, 0); }
-    catch (error) {
-      if (error?.code === "ESRCH") return false;
-      return true; // EPERM is deliberately conservative.
-    }
-    const startedAt = await processStartedAt(lock.pid);
+    if (!await processProbe.isAlive(lock.pid)) return false;
+    const startedAt = await processProbe.startedAt(lock.pid);
     // A live PID without a matching process-instance identity is never ownership proof.
     return startedAt != null && startedAt === lock.process_started_at;
   };
@@ -310,7 +324,7 @@ export function createWaitCheckpointStore({ root = process.cwd(), now = () => ne
       const localWaitId = safeId(id);
       await ensureDirectory();
       const path = lockPathFor(localWaitId);
-      const processStartedAtValue = await processStartedAt(process.pid);
+      const processStartedAtValue = await processProbe.startedAt(process.pid);
       if (!processStartedAtValue) {
         throw new WaitCheckpointError("wait_owner_unknown", "could not establish this process identity for wait recovery");
       }