@chorus-aidlc/chorus 0.18.0 → 0.18.1

package/.next/standalone/public/chorus-plugin/skills/proposal/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Proposal workflow — create proposals with document and tas
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/chorus-plugin/skills/quick-dev/SKILL.md

@@ -4,7 +4,7 @@ description: Quick Task workflow — skip Idea→Proposal, create tasks directly
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/chorus-plugin/skills/review/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Review workflow — approve/reject proposals, verify tasks,
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/chorus-plugin/skills/spec-lite/SKILL.md

@@ -4,7 +4,7 @@ description: Lightweight, Chorus-native local specs for Chorus PM workflows —
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/chorus-plugin/skills/yolo/SKILL.md

@@ -4,7 +4,7 @@ description: Full-auto AI-DLC pipeline — from prompt to done. Automates the en
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-brainstorm/SKILL.md

@@ -4,7 +4,7 @@ description: Optional divergent-then-convergent dialogue for fuzzy ideas. Invoke
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-cli/SKILL.md

@@ -4,7 +4,7 @@ description: How to install, configure, and use the `chorus` CLI — install it,
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-develop/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Development workflow — claim tasks, report work, manage se
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-docs/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus documentation router — consult the live Chorus docs site t
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-idea/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Idea workflow — claim ideas, run elaboration rounds, and p
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-openspec-aware/SKILL.md

@@ -4,7 +4,7 @@ description: OpenSpec-mode authoring for Chorus PM workflows in Kiro CLI. The de
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-orchestrate/SKILL.md

@@ -4,7 +4,7 @@ description: Multi-agent orchestration playbook — coordinate OTHER agents and
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-proposal/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Proposal workflow — create proposals with document and tas
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-quick-dev/SKILL.md

@@ -4,7 +4,7 @@ description: Quick Task workflow — skip Idea→Proposal, create tasks directly
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-review/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Review workflow — approve/reject proposals, verify tasks,
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-spec-lite/SKILL.md

@@ -4,7 +4,7 @@ description: Lightweight, Chorus-native local specs for Chorus PM workflows in K
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/.kiro/skills/chorus-yolo/SKILL.md

@@ -4,7 +4,7 @@ description: Full-auto AI-DLC pipeline — from prompt to done. Automates the en
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.18.0"
+  version: "0.18.1"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/kiro-plugin/bin/chorus-api.sh

@@ -283,7 +283,7 @@ cmd_mcp_tool() {
     # Step 1: Initialize MCP session
     local init_payload
     init_payload=$(cat <<JSONEOF
-{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"chorus-hook","version":"0.18.0"}}}
+{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"chorus-hook","version":"0.18.1"}}}
 JSONEOF
 )
 

package/README.ja.md

@@ -63,7 +63,7 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 2 つのコマンドだけです — データベースも Docker も設定ファイルも不要です。
 
 ```bash
-npm install -g @chorus-aidlc/chorus@0.18.0
+npm install -g @chorus-aidlc/chorus@0.18.1
 chorus
 ```
 

package/README.ko.md

@@ -63,7 +63,7 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 두 개의 명령이면 됩니다. 데이터베이스도, Docker도, 설정 파일도 필요 없습니다.
 
 ```bash
-npm install -g @chorus-aidlc/chorus@0.18.0
+npm install -g @chorus-aidlc/chorus@0.18.1
 chorus
 ```
 

package/README.md

@@ -63,7 +63,7 @@ The labels under each stage are the **permissions** an actor needs there — gra
 Two commands. No database, no Docker, no config files.
 
 ```bash
-npm install -g @chorus-aidlc/chorus@0.18.0
+npm install -g @chorus-aidlc/chorus@0.18.1
 chorus
 ```
 

package/README.zh.md

@@ -54,7 +54,7 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 两条命令即可，无需数据库、无需 Docker、无需配置文件。
 
 ```bash
-npm install -g @chorus-aidlc/chorus@0.18.0
+npm install -g @chorus-aidlc/chorus@0.18.1
 chorus
 ```
 

package/chorus.mjs

@@ -315,11 +315,39 @@ function isPortOccupied(host, tcpPort, timeoutMs = 1000) {
   });
 }
 
+// Publicly known placeholder secrets (GitHub #559). Must stay identical to
+// KNOWN_INSECURE_SECRETS in src/lib/secret-check.ts and
+// CHORUS_KNOWN_INSECURE_SECRETS in docker/ensure-secret.sh (parity-tested).
+const KNOWN_INSECURE_SECRETS = [
+  "chorus-docker-secret-change-in-production",
+  "chorus-local-secret",
+  "your-secret-key-change-in-production",
+  "change-me-to-a-random-secret",
+];
+
 function ensureSecret() {
   const secretPath = join(dataDir, ".secret");
-  if (process.env.NEXTAUTH_SECRET) return;
+  const fromEnv = process.env.NEXTAUTH_SECRET;
+  if (fromEnv) {
+    if (!KNOWN_INSECURE_SECRETS.includes(fromEnv.trim())) return;
+    // A pasted placeholder is treated exactly like "unset": fall through to the
+    // persisted / generated secret instead of signing JWTs with a public value.
+    console.error(
+      "WARNING: NEXTAUTH_SECRET is set to a publicly known placeholder (GitHub #559); ignoring it and using the persisted secret in " +
+        secretPath
+    );
+  }
   if (existsSync(secretPath)) {
-    process.env.NEXTAUTH_SECRET = readFileSync(secretPath, "utf8").trim();
+    // Fail closed, matching docker/ensure-secret.sh: a persisted file that is
+    // empty or holds a publicly known placeholder must never be exported.
+    const persisted = readFileSync(secretPath, "utf8").trim();
+    if (!persisted || KNOWN_INSECURE_SECRETS.includes(persisted)) {
+      console.error(
+        `ERROR: the secret persisted at ${secretPath} is ${persisted ? "a publicly known placeholder" : "empty"} (GitHub #559); refusing to start — delete the file to regenerate, or set NEXTAUTH_SECRET explicitly.`
+      );
+      process.exit(1);
+    }
+    process.env.NEXTAUTH_SECRET = persisted;
     return;
   }
   const secret = createHash("sha256")

package/cli/child-exit.mjs

@@ -0,0 +1,77 @@
+// cli/child-exit.mjs
+// One shared settlement path for every spawner's child process, so the five
+// backends (pi / claude / codex / kiro / dsh) cannot drift on "when is the wake
+// over?".
+//
+// WHY THIS EXISTS — `close` is not the same event as "the agent finished".
+// Node emits `exit` when the child process itself is reaped, but `close` only
+// once every stdio stream the child was given has been closed. A child that
+// leaves a DETACHED DESCENDANT behind (a backgrounded server, a `nohup`'d
+// helper) hands that descendant the SAME inherited pipes, so the pipes stay
+// open after the child is long gone and `close` may never fire. A spawner that
+// waits only for `close` therefore keeps reporting a finished wake as still
+// `running` — the phantom `running` turn. Settling on `exit` fixes that.
+//
+// !!! THE GRACE IS NOT A WAKE TIMEOUT AND NOT A WATCHDOG !!!
+// `stdioGraceMs` only starts counting AFTER the child process has ALREADY
+// EXITED, and it bounds one thing only: how long we wait for that dead
+// process's pipes to drain so a final stdout chunk is still parsed. It places
+// no limit whatsoever on how long an agent may run — a wake that runs for
+// hours is never interrupted, cancelled or "timed out" by this module. No
+// wake-duration limit is introduced anywhere here; do not repurpose this timer
+// into one.
+
+/** Grace for an already-exited process's pipes to drain. NOT a wake timeout. */
+export const DEFAULT_STDIO_GRACE_MS = 2000;
+
+/**
+ * Resolve once with the child's exit code as soon as the process is KNOWN to be gone.
+ *
+ *  • `close` first  → resolve immediately (today's behaviour, zero regression).
+ *  • `exit` first   → wait up to `stdioGraceMs` for `close` (so a last stdout chunk
+ *                     is still parsed), then resolve with the exit code anyway.
+ *
+ * Settles exactly once and NEVER rejects. The grace timer is `unref`'d so it can
+ * never hold the daemon's event loop open.
+ *
+ * @param {import("node:child_process").ChildProcess} child
+ * @param {{ stdioGraceMs?: number, logger?: { warn?: (msg: string) => void }, label?: string }} [options]
+ * @returns {Promise<number | null>} the exit code (`null` when the child was signalled)
+ */
+export function awaitChildSettled(child, options = {}) {
+  const { stdioGraceMs = DEFAULT_STDIO_GRACE_MS, logger, label = "child" } = options;
+
+  return new Promise((resolve) => {
+    let settled = false;
+    let timer = null;
+
+    const settle = (code) => {
+      if (settled) return;
+      settled = true;
+      if (timer) {
+        clearTimeout(timer);
+        timer = null;
+      }
+      resolve(code ?? null);
+    };
+
+    child.on?.("close", (code) => settle(code));
+
+    child.on?.("exit", (code) => {
+      if (settled || timer) return;
+      // The process is gone; give its (possibly descendant-held) pipes a bounded
+      // moment to drain, then settle regardless. See the header: not a timeout.
+      timer = setTimeout(() => {
+        timer = null;
+        if (settled) return;
+        logger?.warn?.(
+          `[Chorus] ${label} exited (code ${code ?? null}) but stdio stayed open for ` +
+            `${stdioGraceMs}ms; settling on exit`
+        );
+        settle(code);
+      }, stdioGraceMs);
+      // Never keep the daemon's event loop alive for a dead process's pipes.
+      timer?.unref?.();
+    });
+  });
+}

package/cli/claude-spawner.mjs

@@ -28,6 +28,7 @@ import { validateAgentCliConfig, overlayAgentEnv, getAgentEnv, assertConfiguredS
 import { existsSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { win32 as pathWin32, posix as pathPosix, join as pathJoin } from "node:path";
+import { awaitChildSettled } from "./child-exit.mjs";
 
 const NOOP_LOGGER = { info() {}, warn() {}, error() {} };
 
@@ -447,7 +448,9 @@ export class ClaudeSpawner {
         resolve({ sessionId: observedSessionId, backendSessionId: id, exitCode: null, isNew });
       });
 
-      child.on("close", (code) => {
+      // Settle on process exit, not only on stdio close: a detached descendant can
+      // inherit the pipes and keep `close` from ever firing (see cli/child-exit.mjs).
+      awaitChildSettled(child, { logger: this.logger, label: "claude" }).then((code) => {
         if (code !== 0) {
           this.logger.warn(`[Chorus] claude exited with code ${code}`);
         }

package/cli/codex-spawner.mjs

@@ -33,6 +33,7 @@ import { readFileSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { join, win32 as pathWin32, posix as pathPosix } from "node:path";
 import { parseNdjsonChunk } from "./claude-spawner.mjs";
+import { awaitChildSettled } from "./child-exit.mjs";
 import { getThreadId as defaultGetThreadId, setThreadId as defaultSetThreadId } from "./codex-session-map.mjs";
 import {
   getCodexUsageSnapshot as defaultGetUsageSnapshot,
@@ -370,7 +371,9 @@ export class CodexSpawner {
         resolve({ sessionId: anchor, backendSessionId: observedThreadId, exitCode: null, isNew });
       });
 
-      child.on("close", (code) => {
+      // Settle on process exit, not only on stdio close: a detached descendant can
+      // inherit the pipes and keep `close` from ever firing (see cli/child-exit.mjs).
+      awaitChildSettled(child, { logger: this.logger, label: "codex" }).then((code) => {
         if (code !== 0) {
           this.logger.warn(`[Chorus] codex exited with code ${code}`);
         }

package/cli/control-handler.mjs

@@ -12,6 +12,17 @@
 // so a stale / recycled connection uuid can never make the daemon kill the wrong
 // subprocess (Tech Design "Risks": mis-kill after a reconnect).
 //
+// When Check-2 fails for an `interrupt` (no live child here) the command is NOT
+// silently dropped (fix-phantom-running-turn, Tech Design "D — a no-child interrupt
+// reports the truth"): the handler logs the miss AND fire-and-forgets one
+// `advanceTurn({ status: "interrupted", interruptedReason: "user" })` so a server-side
+// `running` turn with no daemon child behind it converges instead of hanging forever.
+// The session business key is derived without any lookup, and therefore only for the
+// two control entity types where the derivation is an identity (`idea`,
+// `daemon_session` → sessionId === entityUuid). `task` / `proposal` / `document` keep
+// the pure-log behaviour: their session is anchored on the resource's DIRECT idea,
+// which the daemon cannot resolve locally, and guessing would converge the wrong turn.
+//
 // On a verified match it (a) sets a per-entity "interrupting" flag on the waker so
 // the waker reports the resulting exit as interrupted(reason="user") rather than a
 // crash, then (b) invokes the injected killer (process-killer.killProcessTree) on
@@ -25,6 +36,16 @@ import { killProcessTree } from "./process-killer.mjs";
 
 const NOOP_LOGGER = { info() {}, warn() {}, error() {} };
 
+/**
+ * Control entity types whose session business key is the entityUuid itself, so a
+ * no-child interrupt can report the turn terminal WITHOUT any REST lookup:
+ *   • `idea`           — the session anchor IS the direct idea uuid.
+ *   • `daemon_session` — the ad-hoc session's own business id.
+ * Every other member of CONTROL_ENTITY_TYPES (`task`, `proposal`, `document`) is
+ * anchored on that resource's DIRECT idea, which is not derivable locally.
+ */
+const SELF_ANCHORED_ENTITY_TYPES = new Set(["idea", "daemon_session"]);
+
 /**
  * Build the `onControl(event)` callback the SseListener invokes for a
  * `type:"control"` event.
@@ -56,6 +77,15 @@ const NOOP_LOGGER = { info() {}, warn() {}, error() {} };
  *                                            other still-pending turn along. Injected by the
  *                                            daemon (`backfill.pendingTurnsOnly`); the
  *                                            arg-less form (reconnect) still sweeps all.
+ *   advanceTurn?: (params: { sessionId: string, status: string, interruptedReason?: string,
+ *                            entityType?: string|null, entityUuid?: string|null }) => any,
+ *                                            The SAME `createTurnReporter(...)` instance the
+ *                                            waker uses (injected by `cli/daemon.mjs`; no
+ *                                            second transport, no new endpoint). Invoked
+ *                                            fire-and-forget ONLY when an `interrupt` finds no
+ *                                            live child for a self-anchored entity type, to
+ *                                            close a server-side `running` turn that nothing
+ *                                            else would ever close.
  *   logger?: { info(m:string):void, warn(m:string):void, error(m:string):void },
  * }} deps
  * @returns {(event: any) => void}  The onControl callback (synchronous, non-throwing).
@@ -67,6 +97,7 @@ export function createControlHandler(deps) {
   const sigintTimeoutMs = deps.sigintTimeoutMs;
   const redispatchResume = deps.redispatchResume;
   const deliverTurn = deps.deliverTurn;
+  const advanceTurn = deps.advanceTurn;
   const handleDirectoryRequest = deps.handleDirectoryRequest;
   const reportDirectoryRequest = deps.reportDirectoryRequest;
   const logger = deps.logger ?? NOOP_LOGGER;
@@ -202,11 +233,76 @@ export function createControlHandler(deps) {
       }
 
       // --- interrupt path: Check 2 — in-memory entity ownership (running child) ---
+      //
+      // The registry is keyed by the WAKE's own resource (`task:T`), while a
+      // conversation's control key is its session anchor (`idea:A`). A wake on a CHILD
+      // resource of idea A runs on session A (waker: `sessionId = directIdeaUuid`), so an
+      // `idea:A` interrupt must also find a running `task:T` / `proposal:P` / `document:D`
+      // entry whose `directIdeaUuid` is A — the same rule the UI's `executionMatchesSession`
+      // applies. Without this the exact-key lookup misses, we report a turn miss, the
+      // server's FIFO resolution grabs the SIBLING wake's `running` turn, and NOTHING is
+      // killed: the UI would say interrupted while the agent keeps working.
       const key = execKey(entityType, entityUuid);
-      const entry = waker?.executions?.get(key);
+      let entry = waker?.executions?.get(key);
+      // The entity the kill actually targets — normally the command's own, but a sibling
+      // wake when the match below re-points it.
+      let killEntityType = entityType;
+      let killEntityUuid = entityUuid;
+      let killKey = key;
+      if ((!entry || entry.status !== "running" || !entry.child) && entityType === "idea") {
+        for (const candidate of waker?.executions?.values() ?? []) {
+          if (
+            candidate.status === "running" &&
+            candidate.child &&
+            candidate.directIdeaUuid === entityUuid
+          ) {
+            killEntityType = candidate.entityType;
+            killEntityUuid = candidate.entityUuid;
+            killKey = execKey(killEntityType, killEntityUuid);
+            logger.info(
+              `[Chorus] control: no direct child for ${key}, but sibling wake ${killKey} ` +
+                `runs on this session; interrupting that instead`
+            );
+            entry = candidate;
+            break;
+          }
+        }
+      }
       if (!entry || entry.status !== "running" || !entry.child) {
         // Either we never ran this entity, it's only queued (no child yet), or the
-        // wake already finished (race: interrupt arrived after exit). Safe no-op.
+        // wake already finished (race: interrupt arrived after exit). There is nothing
+        // to kill — but the SERVER may still hold a `running` turn for this session
+        // that nothing else will ever close (the phantom-running-turn bug). Report it
+        // terminal so the UI converges. Only for the self-anchored entity types; for
+        // the rest we cannot know the session locally, so keep the old pure log.
+        if (SELF_ANCHORED_ENTITY_TYPES.has(entityType)) {
+          logger.info(
+            `[Chorus] control: no running subprocess for ${key} on this daemon; ` +
+              `reporting the turn as interrupted(user)`
+          );
+          // Fire-and-forget: createTurnReporter never throws and logs its own
+          // failures, but guard both the synchronous throw and the rejection so
+          // nothing escapes into the SSE loop. A server with no `running` turn
+          // answers not_found — a harmless no-op (losing race).
+          try {
+            Promise.resolve(
+              advanceTurn?.({
+                sessionId: entityUuid,
+                status: "interrupted",
+                interruptedReason: "user",
+                entityType,
+                entityUuid,
+              })
+            ).catch((err) => {
+              logger.warn(
+                `[Chorus] control: interrupted-turn report rejected for ${key}: ${err}`
+              );
+            });
+          } catch (err) {
+            logger.warn(`[Chorus] control: interrupted-turn report failed for ${key}: ${err}`);
+          }
+          return;
+        }
         logger.info(
           `[Chorus] control: no running subprocess for ${key} on this daemon; ignoring interrupt`
         );
@@ -215,18 +311,20 @@ export function createControlHandler(deps) {
 
       // --- Both checks passed: mark interrupting (so the waker reports reason=user),
       //     then kill the tree. ---
-      logger.info(`[Chorus] control: interrupting running subprocess for ${key} (pid=${entry.child.pid})`);
+      logger.info(`[Chorus] control: interrupting running subprocess for ${killKey} (pid=${entry.child.pid})`);
       try {
-        waker.markInterrupting?.(entityType, entityUuid);
+        // Flag the entity whose wake we are actually killing — a sibling re-point must
+        // mark THAT wake interrupting, or its exit would be reported as a crash.
+        waker.markInterrupting?.(killEntityType, killEntityUuid);
       } catch (err) {
-        logger.warn(`[Chorus] control: markInterrupting failed for ${key}: ${err}`);
+        logger.warn(`[Chorus] control: markInterrupting failed for ${killKey}: ${err}`);
       }
 
       // Fire-and-forget the kill: the waker observes the child's exit and reports
       // the interrupted state. The killer never throws, but guard the promise
       // anyway so a rejection can't surface as an unhandled rejection.
       Promise.resolve(killer(entry.child, { sigintTimeoutMs, logger })).catch((err) => {
-        logger.warn(`[Chorus] control: killProcessTree rejected for ${key}: ${err}`);
+        logger.warn(`[Chorus] control: killProcessTree rejected for ${killKey}: ${err}`);
       });
     } catch (err) {
       // Absolute backstop — a control event must never crash the SSE loop.