@bybrawe/opencode-loop 0.6.7 → 0.6.8

package/CHANGELOG.md

@@ -4,6 +4,14 @@
 
 No unreleased changes yet.
 
+## 0.6.8 - 2026-10-13
+
+- Fix #172: fall back to exclusive `wx` lock claims where exFAT/FAT or other volumes reject `fs.link()`, including the reported `EISDIR` error.
+- Preserve live-owner exclusion, dead-owner cleanup elections, crash-safe state updates and fail-closed corrupted locks.
+- Exercise simulated unsupported hard-link errors across independent workers, merged writes, recovered dead owners and unexpected errors.
+- Pair the new release with independently installed Goal 1.3.49 and require Windows/Linux and native OpenCode 2 release gates.
+- The reported physical Windows exFAT case still needs re-testing on its actual disk.
+
 ## 0.6.7 - 2026-10-09
 
 - Recover the native Loop+Goal coexistence canary's cold Windows server bootstrap with bounded read-only session polling and distinguish server startup hangs from actual autonomous-ownership conflicts.

package/README.md

@@ -1,6 +1,6 @@
 # OpenCode Loop
 
-## Native OpenCode 2 (0.6.7)
+## Native OpenCode 2 (0.6.8)
 
 The npm and V2 entrypoints use the official `@opencode/plugin` `Plugin.define()` contract. The installer now registers the exact `@bybrawe/opencode-loop` package in OpenCode's plural `plugins` configuration instead of copying a loose global plugin directory. OpenCode therefore resolves `@opencode/plugin` from Loop's own production dependency graph; explicit `--legacy-v1` remains a separate compatibility path.
 
@@ -17,7 +17,7 @@ Prompt/command timers, watch and stop conditions, verification, preflight/postru
 
 OpenCode Loop adds `/loop`, scheduled prompt/command/shell jobs, compact scheduling, verification/checkpoints, and the `opencode-loopd` background daemon.
 
-> **Current stable release: `0.6.7`.**
+> **Current stable release: `0.6.8`.**
 
 ## Install or update
 

package/examples/OPENCODE2-0.6.8.md

@@ -0,0 +1,18 @@
+# OpenCode Loop 0.6.8
+
+## exFAT/FAT project volume lock compatibility (#172)
+
+When `fs.link()` cannot claim a Loop session lock because hard links are unsupported (`EISDIR` on the reported Windows exFAT case, or `ENOTSUP`/`EOPNOTSUPP`/`ENOSYS`/`EPERM`/`EACCES`), Loop attempts an atomic `wx` exclusive-file claim instead.
+
+The fallback also applies to dead-owner cleanup elections. A different live owner always wins; malformed lock owner metadata remains fail-closed, and unexpected I/O errors are not ignored. Short empty-owner publication windows get bounded retries instead of false corruption reports.
+
+Tests exercise synthetic exFAT-style errors in independent Node processes, concurrent updates, abandoned locks and broken metadata. Windows/Linux, real OpenCode 2 and production artifact validation remain release gates. **Physical Windows exFAT and Desktop GUI behavior require separate field verification.**
+
+## Independent installation
+
+```powershell
+npx -y @bybrawe/opencode-loop@0.6.8
+npx -y @bybrawe/opencode-goal@1.3.49
+```
+
+Fully exit and restart OpenCode. From the affected exFAT project, verify `/loop-status`, `/loop-doctor`, a short `/loop` job, and `/goal status`. Dedicated Goal remains a separately installed plugin; `/loop-goal*` compatibility commands are opt-in.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bybrawe/opencode-loop",
-  "version": "0.6.7",
+  "version": "0.6.8",
   "description": "Idle-safe /loop scheduling and background automation for OpenCode, with optional legacy Loop Goal compatibility and a separately installable OpenCode Goal companion.",
   "type": "module",
   "main": "src/plugin.js",
@@ -24,8 +24,8 @@
     "build:plugin": "bun build src/source/v1.js --outfile=src/index.js --target=bun --format=esm --external=@opencode-ai/plugin/tool && bun build src/source/server.js --outfile=src/server.js --target=bun --format=esm --external=@opencode-ai/plugin/tool && bun build src/source/native.js --outfile=src/native.js --target=bun --format=esm",
     "build:plugin:npm": "npm run build:plugin",
     "prepack": "node --check src/plugin.js && node --check src/v2.js && node --check src/index.js && node --check src/server.js && node --check src/native.js",
-    "check": "node --check src/source/v1.js && node --check src/source/core/args.js && node --check src/source/core/continuation.js && node --check src/source/core/schedule-syntax.js && node --check src/source/core/state.js && node --check src/source/core/jobs.js && node --check src/source/core/process.js && node --check src/source/opencode/sdk.js && node --check src/source/opencode/session-context.js && node --check src/source/opencode/command-router.js && node --check src/source/opencode/goal-commands.js && node --check src/source/opencode/loop-commands.js && node --check src/source/opencode/loop-registration.js && node --check src/source/runtime/session-activity.js && node --check src/source/runtime/session-status.js && node --check src/source/runtime/schedule-policy.js && node --check src/source/runtime/scheduler-diagnostics.js && node --check src/source/runtime/companion-goal.js && node --check src/source/runtime/loop-diagnostics.js && node --check src/source/runtime/compaction.js && node --check src/source/runtime/action-dispatch.js && node --check src/source/runtime/network-recovery.js && node --check src/source/runtime/empty-turn.js && node --check src/source/runtime/terminal-guard.js && node --check src/source/runtime/run-finalization.js && node --check src/source/runtime/run-admission.js && node --check src/source/runtime/executor.js && node --check src/source/runtime/scheduler.js && node --check src/source/runtime/goal-prompt.js && node --check src/source/runtime/goal-report.js && node --check src/source/runtime/goal-evidence.js && node --check src/source/runtime/goal-runtime.js && node --check src/source/runtime/goal-policy.js && node --check src/source/runtime/goal-steering.js && node --check src/source/runtime/job-workspace.js && node --check src/source/opencode2/prompt-runtime.js && node --check src/source/opencode2/diagnostics.js && node --check src/source/opencode2/logging.js && node --check src/source/server.js && node --check src/source/legacy-v1.js && node --check src/index.js && node --check src/server.js && node --check scripts/install-node.mjs && node --check scripts/install-with-goals.mjs && node --check scripts/loopd.mjs && node --check scripts/pulse-check.mjs && node --check scripts/state-process-test.mjs && node --check scripts/state-integrity-test.mjs && node --check scripts/install-test.mjs && node --check scripts/desktop-command-diagnostics.mjs && node --check scripts/desktop-command-diagnostics-test.mjs && node --check scripts/goal-companion-test.mjs && node --check scripts/loopd-test.mjs && node --check scripts/smoke-test.mjs && node --check scripts/host-adapter-contract-test.mjs && node --check scripts/server-entry-test.mjs && node --check scripts/command-router-test.mjs && node --check scripts/goal-command-handlers-test.mjs && node --check scripts/loop-command-handlers-test.mjs && node --check scripts/loop-registration-test.mjs && node --check scripts/schedule-syntax-test.mjs && node --check scripts/schedule-policy-test.mjs && node --check scripts/session-activity-test.mjs && node --check scripts/session-status-test.mjs && node --check scripts/session-status-idle-recovery-test.mjs && node --check scripts/session-error-recovery-test.mjs && node --check scripts/empty-turn-recovery-test.mjs && node --check scripts/network-recovery-test.mjs && node --check scripts/compaction-runtime-test.mjs && node --check scripts/executor-runtime-test.mjs && node --check scripts/scheduler-runtime-test.mjs && node --check scripts/goal-runtime-test.mjs && node --check scripts/goal-policy-test.mjs && node --check scripts/goal-steering-test.mjs && node --check scripts/job-workspace-test.mjs && node --check scripts/v2-prompt-runtime-test.mjs && node --check scripts/v2-prompt-interval-test.mjs && node --check scripts/v2-command-runtime-test.mjs && node --check scripts/v2-command-adapter-test.mjs && node --check scripts/v2-diagnostics-test.mjs && node --check scripts/v2-logging-test.mjs && node --check scripts/comprehensive-watchdog.mjs && node --check scripts/comprehensive-test.mjs && node --check scripts/host-goal-bootstrap.mjs && node --check scripts/host-goal-bootstrap-test.mjs && node --check scripts/host-loop-canary.mjs && node --check scripts/host-goal-steering-canary.mjs && node --check scripts/publish-workflow-test.mjs && node --check scripts/goal-compaction-safety-test.mjs && node --check src/source/native.js && node --check src/source/opencode2/native-plugin.js && node --check src/source/opencode2/native-runtime.js && node --check src/source/opencode2/native-policy.js && node --check src/native.js && node --check scripts/native-entry-test.mjs && node --check scripts/package-native-smoke.mjs && node --check src/v1.js && node --check scripts/native-cli-io-test.mjs && node --check scripts/native-lifecycle-test.mjs && node --check scripts/native-plugin-lifetime-test.mjs && node --check src/source/core/progress.js && node --check scripts/native-presets-test.mjs && node --check scripts/control-plane-until-test.mjs && node --check src/source/opencode2/session-location.js && node --check scripts/native-session-location-test.mjs && node --check src/plugin.js && node --check src/v2.js",
-    "test": "node --test scripts/native-session-location-test.mjs && node --test scripts/control-plane-until-test.mjs && node --test scripts/native-presets-test.mjs && node --test scripts/native-plugin-lifetime-test.mjs && node --test scripts/native-cli-io-test.mjs scripts/native-lifecycle-test.mjs && node scripts/native-entry-test.mjs && node scripts/native-coexistence-test.mjs && node scripts/native-shell-test.mjs && node scripts/native-install-test.mjs && node scripts/native-v2-test.mjs && node scripts/goal-compaction-safety-test.mjs && node scripts/publish-workflow-test.mjs && node scripts/server-entry-test.mjs && node scripts/command-router-test.mjs && node scripts/goal-command-handlers-test.mjs && node scripts/loop-command-handlers-test.mjs && node scripts/loop-registration-test.mjs && node scripts/schedule-syntax-test.mjs && node scripts/schedule-policy-test.mjs && node scripts/session-activity-test.mjs && node scripts/session-status-test.mjs && node scripts/session-status-idle-recovery-test.mjs && node scripts/session-error-recovery-test.mjs && node scripts/empty-turn-recovery-test.mjs && node scripts/network-recovery-test.mjs && node scripts/compaction-runtime-test.mjs && node scripts/action-dispatch-test.mjs && node scripts/run-finalization-test.mjs && node scripts/run-admission-test.mjs && node scripts/executor-runtime-test.mjs && node scripts/scheduler-runtime-test.mjs && node scripts/goal-runtime-test.mjs && node scripts/goal-policy-test.mjs && node scripts/goal-steering-test.mjs && node scripts/job-workspace-test.mjs && node scripts/v2-prompt-runtime-test.mjs && node scripts/v2-prompt-interval-test.mjs && node scripts/v2-command-runtime-test.mjs && node scripts/v2-command-adapter-test.mjs && node scripts/v2-diagnostics-test.mjs && node scripts/v2-logging-test.mjs && node scripts/state-process-test.mjs && node scripts/state-integrity-test.mjs && node scripts/install-test.mjs && node --test scripts/desktop-command-diagnostics-test.mjs && node scripts/goal-companion-test.mjs && node scripts/loopd-test.mjs && node scripts/smoke-test.mjs && node --test scripts/host-goal-bootstrap-test.mjs && node scripts/host-adapter-contract-test.mjs && node scripts/comprehensive-watchdog.mjs",
+    "check": "node --check src/source/v1.js && node --check src/source/core/args.js && node --check src/source/core/continuation.js && node --check src/source/core/schedule-syntax.js && node --check src/source/core/state.js && node --check src/source/core/jobs.js && node --check src/source/core/process.js && node --check src/source/opencode/sdk.js && node --check src/source/opencode/session-context.js && node --check src/source/opencode/command-router.js && node --check src/source/opencode/goal-commands.js && node --check src/source/opencode/loop-commands.js && node --check src/source/opencode/loop-registration.js && node --check src/source/runtime/session-activity.js && node --check src/source/runtime/session-status.js && node --check src/source/runtime/schedule-policy.js && node --check src/source/runtime/scheduler-diagnostics.js && node --check src/source/runtime/companion-goal.js && node --check src/source/runtime/loop-diagnostics.js && node --check src/source/runtime/compaction.js && node --check src/source/runtime/action-dispatch.js && node --check src/source/runtime/network-recovery.js && node --check src/source/runtime/empty-turn.js && node --check src/source/runtime/terminal-guard.js && node --check src/source/runtime/run-finalization.js && node --check src/source/runtime/run-admission.js && node --check src/source/runtime/executor.js && node --check src/source/runtime/scheduler.js && node --check src/source/runtime/goal-prompt.js && node --check src/source/runtime/goal-report.js && node --check src/source/runtime/goal-evidence.js && node --check src/source/runtime/goal-runtime.js && node --check src/source/runtime/goal-policy.js && node --check src/source/runtime/goal-steering.js && node --check src/source/runtime/job-workspace.js && node --check src/source/opencode2/prompt-runtime.js && node --check src/source/opencode2/diagnostics.js && node --check src/source/opencode2/logging.js && node --check src/source/server.js && node --check src/source/legacy-v1.js && node --check src/index.js && node --check src/server.js && node --check scripts/install-node.mjs && node --check scripts/install-with-goals.mjs && node --check scripts/loopd.mjs && node --check scripts/pulse-check.mjs && node --check scripts/state-process-test.mjs && node --check scripts/state-exfat-lock-test.mjs && node --check scripts/state-integrity-test.mjs && node --check scripts/install-test.mjs && node --check scripts/desktop-command-diagnostics.mjs && node --check scripts/desktop-command-diagnostics-test.mjs && node --check scripts/goal-companion-test.mjs && node --check scripts/loopd-test.mjs && node --check scripts/smoke-test.mjs && node --check scripts/host-adapter-contract-test.mjs && node --check scripts/server-entry-test.mjs && node --check scripts/command-router-test.mjs && node --check scripts/goal-command-handlers-test.mjs && node --check scripts/loop-command-handlers-test.mjs && node --check scripts/loop-registration-test.mjs && node --check scripts/schedule-syntax-test.mjs && node --check scripts/schedule-policy-test.mjs && node --check scripts/session-activity-test.mjs && node --check scripts/session-status-test.mjs && node --check scripts/session-status-idle-recovery-test.mjs && node --check scripts/session-error-recovery-test.mjs && node --check scripts/empty-turn-recovery-test.mjs && node --check scripts/network-recovery-test.mjs && node --check scripts/compaction-runtime-test.mjs && node --check scripts/executor-runtime-test.mjs && node --check scripts/scheduler-runtime-test.mjs && node --check scripts/goal-runtime-test.mjs && node --check scripts/goal-policy-test.mjs && node --check scripts/goal-steering-test.mjs && node --check scripts/job-workspace-test.mjs && node --check scripts/v2-prompt-runtime-test.mjs && node --check scripts/v2-prompt-interval-test.mjs && node --check scripts/v2-command-runtime-test.mjs && node --check scripts/v2-command-adapter-test.mjs && node --check scripts/v2-diagnostics-test.mjs && node --check scripts/v2-logging-test.mjs && node --check scripts/comprehensive-watchdog.mjs && node --check scripts/comprehensive-test.mjs && node --check scripts/host-goal-bootstrap.mjs && node --check scripts/host-goal-bootstrap-test.mjs && node --check scripts/host-loop-canary.mjs && node --check scripts/host-goal-steering-canary.mjs && node --check scripts/publish-workflow-test.mjs && node --check scripts/goal-compaction-safety-test.mjs && node --check src/source/native.js && node --check src/source/opencode2/native-plugin.js && node --check src/source/opencode2/native-runtime.js && node --check src/source/opencode2/native-policy.js && node --check src/native.js && node --check scripts/native-entry-test.mjs && node --check scripts/package-native-smoke.mjs && node --check src/v1.js && node --check scripts/native-cli-io-test.mjs && node --check scripts/native-lifecycle-test.mjs && node --check scripts/native-plugin-lifetime-test.mjs && node --check src/source/core/progress.js && node --check scripts/native-presets-test.mjs && node --check scripts/control-plane-until-test.mjs && node --check src/source/opencode2/session-location.js && node --check scripts/native-session-location-test.mjs && node --check src/plugin.js && node --check src/v2.js",
+    "test": "node --test scripts/native-session-location-test.mjs && node --test scripts/control-plane-until-test.mjs && node --test scripts/native-presets-test.mjs && node --test scripts/native-plugin-lifetime-test.mjs && node --test scripts/native-cli-io-test.mjs scripts/native-lifecycle-test.mjs && node scripts/native-entry-test.mjs && node scripts/native-coexistence-test.mjs && node scripts/native-shell-test.mjs && node scripts/native-install-test.mjs && node scripts/native-v2-test.mjs && node scripts/goal-compaction-safety-test.mjs && node scripts/publish-workflow-test.mjs && node scripts/server-entry-test.mjs && node scripts/command-router-test.mjs && node scripts/goal-command-handlers-test.mjs && node scripts/loop-command-handlers-test.mjs && node scripts/loop-registration-test.mjs && node scripts/schedule-syntax-test.mjs && node scripts/schedule-policy-test.mjs && node scripts/session-activity-test.mjs && node scripts/session-status-test.mjs && node scripts/session-status-idle-recovery-test.mjs && node scripts/session-error-recovery-test.mjs && node scripts/empty-turn-recovery-test.mjs && node scripts/network-recovery-test.mjs && node scripts/compaction-runtime-test.mjs && node scripts/action-dispatch-test.mjs && node scripts/run-finalization-test.mjs && node scripts/run-admission-test.mjs && node scripts/executor-runtime-test.mjs && node scripts/scheduler-runtime-test.mjs && node scripts/goal-runtime-test.mjs && node scripts/goal-policy-test.mjs && node scripts/goal-steering-test.mjs && node scripts/job-workspace-test.mjs && node scripts/v2-prompt-runtime-test.mjs && node scripts/v2-prompt-interval-test.mjs && node scripts/v2-command-runtime-test.mjs && node scripts/v2-command-adapter-test.mjs && node scripts/v2-diagnostics-test.mjs && node scripts/v2-logging-test.mjs && node scripts/state-process-test.mjs && node scripts/state-exfat-lock-test.mjs && node scripts/state-integrity-test.mjs && node scripts/install-test.mjs && node --test scripts/desktop-command-diagnostics-test.mjs && node scripts/goal-companion-test.mjs && node scripts/loopd-test.mjs && node scripts/smoke-test.mjs && node --test scripts/host-goal-bootstrap-test.mjs && node scripts/host-adapter-contract-test.mjs && node scripts/comprehensive-watchdog.mjs",
     "canary:host": "node scripts/host-loop-canary.mjs && node scripts/host-goal-steering-canary.mjs",
     "install:global": "node scripts/install-with-goals.mjs",
     "pack:zip": "node scripts/make-zip.mjs",

package/scripts/native-release.mjs

@@ -7,12 +7,12 @@ export function validateRelease(request, pkg, env) {
   assert.equal(env.GITHUB_REPOSITORY, "ByBrawe/opencode-loop", "wrong release repository")
   assert.equal(env.GITHUB_REF, "refs/heads/main", "npm release must come from main")
   assert.match(env.GITHUB_SHA ?? "", /^[a-f0-9]{40}$/, "immutable release SHA required")
-  assert.equal(request?.version, "0.6.7", "release version is not authorized")
+  assert.equal(request?.version, "0.6.8", "release version is not authorized")
   assert.equal(request?.name, "@bybrawe/opencode-loop")
   assert.equal(pkg.name, request.name)
   assert.equal(pkg.version, request.version)
-  assert.equal(request.predecessor, "0.6.6")
-  assert.equal(request.goal?.version, "1.3.48")
+  assert.equal(request.predecessor, "0.6.7")
+  assert.equal(request.goal?.version, "1.3.49")
   assert.match(request.goal?.sha ?? "", /^[a-f0-9]{40}$/)
   return request
 }

package/scripts/publish-workflow-test.mjs

@@ -48,14 +48,14 @@ assert.ok(workflow.includes('--prefer-online --cache "$VERIFY_DIR/npm-cache-$att
 assert.ok(workflow.includes("Published Loop+Goal clean-install validation did not converge"), "clean consumer must remain a hard release gate")
 
 const sha = "a".repeat(40)
-const request = { name: "@bybrawe/opencode-loop", version: "0.6.7", predecessor: "0.6.6", goal: { version: "1.3.48", sha: "b".repeat(40) } }
+const request = { name: "@bybrawe/opencode-loop", version: "0.6.8", predecessor: "0.6.7", goal: { version: "1.3.49", sha: "b".repeat(40) } }
 const pkg = { name: request.name, version: request.version }
 const env = { GITHUB_REPOSITORY: "ByBrawe/opencode-loop", GITHUB_REF: "refs/heads/main", GITHUB_SHA: sha }
 assert.strictEqual(validateRelease(request, pkg, env), request)
 for (const change of [{ GITHUB_REPOSITORY: "someone/fork" }, { GITHUB_REF: "refs/heads/release" }, { GITHUB_SHA: "main" }]) assert.throws(() => validateRelease(request, pkg, { ...env, ...change }))
 assert.throws(() => validateRelease({ ...request, version: "9.0.0" }, pkg, env))
 assert.throws(() => validateRelease(request, { ...pkg, version: "0.6.5" }, env))
-assert.equal(releaseDecision(404, null, request, sha, "0.6.6"), true)
+assert.equal(releaseDecision(404, null, request, sha, "0.6.7"), true)
 for (const status of [401, 403, 429, 500, 503]) assert.throws(() => releaseDecision(status, null, request, sha, "0.6.0"))
 assert.throws(() => releaseDecision(404, null, request, sha, "0.7.0"))
 const manifest = { ...pkg, gitHead: sha }

package/scripts/state-exfat-lock-test.mjs

@@ -0,0 +1,99 @@
+import assert from "node:assert/strict"
+import { spawn, spawnSync } from "node:child_process"
+import { randomUUID } from "node:crypto"
+import { promises as fs } from "node:fs"
+import os from "node:os"
+import path from "node:path"
+import { fileURLToPath } from "node:url"
+import { readState, writeState, stateDir } from "../src/source/core/state.js"
+
+const source = fileURLToPath(import.meta.url)
+const originalLink = fs.link
+const linkError = (code) => Object.assign(new Error(`synthetic unsupported hard link: ${code}`), { code })
+const wait = (ms) => new Promise((resolve) => setTimeout(resolve, ms))
+async function exists(file) { try { await fs.access(file); return true } catch (error) { if (error?.code === "ENOENT") return false; throw error } }
+async function until(fn) { for (let i = 0; i < 500; i++) { if (await fn()) return; await wait(20) } throw new Error("worker barrier timeout") }
+
+if (process.argv[2] === "--worker") {
+  fs.link = async () => { throw linkError("EISDIR") }
+  try {
+    const [, , , root, sessionID, label, gate] = process.argv
+    const snapshot = await readState(root, sessionID)
+    await fs.writeFile(`${gate}.${label}.ready`, "ready")
+    await until(() => exists(gate))
+    snapshot.jobs[0][label] = label
+    await writeState(root, sessionID, snapshot)
+  } finally { fs.link = originalLink }
+} else {
+  const root = await fs.mkdtemp(path.join(os.tmpdir(), "loop-exfat-lock-"))
+  const sessionID = "exfat-session"
+  const canonical = path.join(stateDir(root), `${sessionID}.json.lock`)
+  fs.link = async () => { throw linkError("EISDIR") }
+  try {
+    const original = await readState(root, sessionID)
+    original.jobs = [{ id: "one", round: 1 }]
+    await writeState(root, sessionID, original)
+
+    // Workers each simulate an exFAT runtime: independent Node processes with
+    // no usable hard-link support must still merge their distinct writes.
+    const gate = path.join(root, "go")
+    const workers = []
+    for (let i = 0; i < 4; i++) {
+      const label = `worker${i}`
+      const child = spawn(process.execPath, [source, "--worker", root, sessionID, label, gate], { stdio: ["ignore", "ignore", "pipe"] })
+      let stderr = ""
+      child.stderr.on("data", (chunk) => { stderr += chunk.toString() })
+      workers.push({
+        label,
+        done: new Promise((resolve, reject) => {
+          child.once("error", reject)
+          child.once("close", (code) => code === 0 ? resolve() : reject(new Error(`exFAT worker ${label} failed: ${stderr}`)))
+        }),
+      })
+    }
+    await until(async () => (await Promise.all(workers.map(w => exists(`${gate}.${w.label}.ready`)))).every(Boolean))
+    await fs.writeFile(gate, "go")
+    await Promise.all(workers.map(w => w.done))
+    const saved = (await readState(root, sessionID)).jobs[0]
+    for (const w of workers) assert.equal(saved[w.label], w.label)
+    assert.equal(await exists(canonical), false)
+
+    // Simulate an abandoned primary lock and an orphaned cleanup election,
+    // both written without hard links. Neither may prevent dead-PID recovery.
+    const dead = spawnSync(process.execPath, ["-e", "process.exit(0)"])
+    assert.equal(dead.status, 0)
+    const deadOwner = () => {
+      const token = randomUUID()
+      return { schemaVersion: 1, pid: dead.pid, token, acquiredAt: Date.now(),
+        candidateName: `.loop-lock-${dead.pid}-${token}.json` }
+    }
+    for (const suffix of ["", ".cleanup"]) {
+      const owner = deadOwner()
+      await fs.writeFile(path.join(stateDir(root), owner.candidateName), JSON.stringify(owner))
+      await fs.writeFile(`${canonical}${suffix}`, JSON.stringify(owner))
+    }
+    const revived = await readState(root, sessionID)
+    revived.jobs[0].recovered = true
+    await writeState(root, sessionID, revived)
+    assert.equal((await readState(root, sessionID)).jobs[0].recovered, true)
+    assert.equal(await exists(canonical), false)
+    assert.equal(await exists(`${canonical}.cleanup`), false)
+
+    await fs.writeFile(canonical, "invalid owner")
+    const corrupt = await readState(root, sessionID)
+    corrupt.jobs[0].forbidden = "never commit"
+    await assert.rejects(writeState(root, sessionID, corrupt), /state lock invalid_owner/)
+    assert.equal((await readState(root, sessionID)).jobs[0].forbidden, undefined)
+    await fs.rm(canonical)
+
+    // Unexpected failures must not be turned into 'contention' or ignored.
+    fs.link = async () => { throw linkError("ENOSPC") }
+    await assert.rejects(writeState(root, sessionID, await readState(root, sessionID)), { code: "ENOSPC" })
+    assert.equal(await exists(canonical), false)
+
+    console.log("Loop exFAT-style exclusive lock, process merge, dead-owner election and corrupt-state protections passed")
+  } finally {
+    fs.link = originalLink
+    await fs.rm(root, { recursive: true, force: true, maxRetries: 5, retryDelay: 50 })
+  }
+}

package/src/index.js

@@ -459,6 +459,18 @@ async function readStateProcessOwner(file) {
       await delay(10 * (attempt + 1));
     }
   }
+  if (raw.length === 0) {
+    for (let attempt = 0;attempt < 8 && raw.length === 0; attempt++) {
+      await delay(10 * (attempt + 1));
+      try {
+        raw = await fs.readFile(file, "utf8");
+      } catch (error) {
+        if (error?.code === "ENOENT")
+          return null;
+        throw error;
+      }
+    }
+  }
   let owner;
   try {
     owner = JSON.parse(raw);
@@ -499,6 +511,26 @@ async function claimStateProcessLock(candidate, canonical) {
     } catch (error) {
       if (error?.code === "EEXIST")
         return false;
+      if (["EISDIR", "ENOTSUP", "EOPNOTSUPP", "ENOSYS", "EPERM", "EACCES"].includes(error?.code)) {
+        const contents = await fs.readFile(candidate);
+        let handle;
+        try {
+          handle = await fs.open(canonical, "wx", 384);
+        } catch (failure) {
+          if (failure?.code === "EEXIST")
+            return false;
+          throw failure;
+        }
+        try {
+          await handle.writeFile(contents);
+        } catch (failure) {
+          await handle.close().catch(() => {});
+          await removeStateProcessFile(canonical).catch(() => {});
+          throw failure;
+        }
+        await handle.close();
+        return true;
+      }
       if (process.platform !== "win32" || !["EPERM", "EACCES", "EBUSY"].includes(error?.code) || attempt >= 5)
         throw error;
       await delay(10 * (attempt + 1));

package/src/native.js

@@ -612,6 +612,18 @@ async function readStateProcessOwner(file) {
       await delay(10 * (attempt + 1));
     }
   }
+  if (raw.length === 0) {
+    for (let attempt = 0;attempt < 8 && raw.length === 0; attempt++) {
+      await delay(10 * (attempt + 1));
+      try {
+        raw = await fs.readFile(file, "utf8");
+      } catch (error) {
+        if (error?.code === "ENOENT")
+          return null;
+        throw error;
+      }
+    }
+  }
   let owner;
   try {
     owner = JSON.parse(raw);
@@ -652,6 +664,26 @@ async function claimStateProcessLock(candidate, canonical) {
     } catch (error) {
       if (error?.code === "EEXIST")
         return false;
+      if (["EISDIR", "ENOTSUP", "EOPNOTSUPP", "ENOSYS", "EPERM", "EACCES"].includes(error?.code)) {
+        const contents = await fs.readFile(candidate);
+        let handle;
+        try {
+          handle = await fs.open(canonical, "wx", 384);
+        } catch (failure) {
+          if (failure?.code === "EEXIST")
+            return false;
+          throw failure;
+        }
+        try {
+          await handle.writeFile(contents);
+        } catch (failure) {
+          await handle.close().catch(() => {});
+          await removeStateProcessFile(canonical).catch(() => {});
+          throw failure;
+        }
+        await handle.close();
+        return true;
+      }
       if (process.platform !== "win32" || !["EPERM", "EACCES", "EBUSY"].includes(error?.code) || attempt >= 5)
         throw error;
       await delay(10 * (attempt + 1));

package/src/server.js

@@ -612,6 +612,18 @@ async function readStateProcessOwner(file) {
       await delay(10 * (attempt + 1));
     }
   }
+  if (raw.length === 0) {
+    for (let attempt = 0;attempt < 8 && raw.length === 0; attempt++) {
+      await delay(10 * (attempt + 1));
+      try {
+        raw = await fs.readFile(file, "utf8");
+      } catch (error) {
+        if (error?.code === "ENOENT")
+          return null;
+        throw error;
+      }
+    }
+  }
   let owner;
   try {
     owner = JSON.parse(raw);
@@ -652,6 +664,26 @@ async function claimStateProcessLock(candidate, canonical) {
     } catch (error) {
       if (error?.code === "EEXIST")
         return false;
+      if (["EISDIR", "ENOTSUP", "EOPNOTSUPP", "ENOSYS", "EPERM", "EACCES"].includes(error?.code)) {
+        const contents = await fs.readFile(candidate);
+        let handle;
+        try {
+          handle = await fs.open(canonical, "wx", 384);
+        } catch (failure) {
+          if (failure?.code === "EEXIST")
+            return false;
+          throw failure;
+        }
+        try {
+          await handle.writeFile(contents);
+        } catch (failure) {
+          await handle.close().catch(() => {});
+          await removeStateProcessFile(canonical).catch(() => {});
+          throw failure;
+        }
+        await handle.close();
+        return true;
+      }
       if (process.platform !== "win32" || !["EPERM", "EACCES", "EBUSY"].includes(error?.code) || attempt >= 5)
         throw error;
       await delay(10 * (attempt + 1));

package/src/source/core/state.js

@@ -68,6 +68,19 @@ async function readStateProcessOwner(file) {
       await delay(10 * (attempt + 1))
     }
   }
+  // An exclusive-file fallback publishes an empty lock briefly before
+  // writing its owner. Allow a bounded read retry; stale empty locks still
+  // fail closed rather than being taken over.
+  if (raw.length === 0) {
+    for (let attempt = 0; attempt < 8 && raw.length === 0; attempt++) {
+      await delay(10 * (attempt + 1))
+      try { raw = await fs.readFile(file, "utf8") }
+      catch (error) {
+        if (error?.code === "ENOENT") return null
+        throw error
+      }
+    }
+  }
   let owner
   try { owner = JSON.parse(raw) }
   catch { throw stateLockError("invalid_owner", `corrupt lock metadata at ${file}`) }
@@ -91,11 +104,31 @@ async function removeStateProcessFile(file) {
   }
 }
 
+// Keep atomic hard links on capable volumes. FAT/exFAT and some remote volumes
+// reject them, so fall back to exclusive creation (O_EXCL) without overwriting
+// any existing live lock or stale-owner cleanup election.
 async function claimStateProcessLock(candidate, canonical) {
   for (let attempt = 0; ; attempt++) {
     try { await fs.link(candidate, canonical); return true }
     catch (error) {
       if (error?.code === "EEXIST") return false
+      if (["EISDIR", "ENOTSUP", "EOPNOTSUPP", "ENOSYS", "EPERM", "EACCES"].includes(error?.code)) {
+        const contents = await fs.readFile(candidate)
+        let handle
+        try { handle = await fs.open(canonical, "wx", 0o600) }
+        catch (failure) {
+          if (failure?.code === "EEXIST") return false
+          throw failure
+        }
+        try { await handle.writeFile(contents) }
+        catch (failure) {
+          await handle.close().catch(() => {})
+          await removeStateProcessFile(canonical).catch(() => {})
+          throw failure
+        }
+        await handle.close()
+        return true
+      }
       if (process.platform !== "win32" || !["EPERM", "EACCES", "EBUSY"].includes(error?.code) || attempt >= 5) throw error
       await delay(10 * (attempt + 1))
     }