@danceiny/gotry 0.0.1-rc.9 → 0.2.0-rc.27

package/dist/scripts/issue-271-liveness-tests.js

@@ -0,0 +1,569 @@
+/**
+ * Maintained installed-dsh liveness proof for issue #271.
+ *
+ * Each case is an external bounded parent of a real Node24 dsh package child,
+ * with a fresh private HOME/DSH_HOME/state directory. The dsh fixture starts a
+ * real descendant so a direct-child-only cleanup cannot pass. No model,
+ * provider, Chrome session, credential, or shared GoTry state is used.
+ */
+import assert from 'node:assert/strict';
+import { spawn } from 'node:child_process';
+import { createRequire } from 'node:module';
+import { copyFileSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { Context } from '@deepseek-ai/cordis';
+import { LocalSubprocessRuntime } from '@deepseek-ai/dsh-subprocess-local';
+import { recordIncident, resolveIncidentsPath } from '../capabilities/incident-log.js';
+import { PROCESS_LIVENESS_BOUNDS, isOwnedProcessGroupEmpty, spawnOwnedChild, terminateOwnedChild, } from '../../bin/gotry-process-liveness.js';
+const require = createRequire(import.meta.url);
+const dshBin = require.resolve('@deepseek-ai/dsh/lib/bin.js');
+const dshVersion = JSON.parse(readFileSync(require.resolve('@deepseek-ai/dsh/package.json'), 'utf8')).version;
+const repoRoot = fileURLToPath(new URL('../../', import.meta.url));
+const node24 = process.execPath;
+const EXTERNAL_BOUND_MS = 8_000;
+assert.equal(dshVersion, '0.2.0-rc.2', 'proof must run against the lock-selected installed dsh package');
+function privateEnv(root) {
+    return {
+        PATH: process.env.PATH,
+        HOME: root,
+        DSH_HOME: join(root, 'dsh-home'),
+        TMPDIR: root,
+        TEMP: root,
+        TMP: root,
+    };
+}
+function waitForClose(child, timeoutMs) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            resolve({ timedOut: true });
+        }, timeoutMs);
+        child.once('close', (code, signal) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve({ code, signal });
+        });
+        child.once('error', (error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve({ code: null, signal: null, error: error instanceof Error ? error.message : String(error) });
+        });
+    });
+}
+function withExternalBound(promise, timeoutMs, label) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error(`${label} exceeded external ${timeoutMs}ms bound`)), timeoutMs);
+        promise.then((value) => { clearTimeout(timer); resolve(value); }, (error) => { clearTimeout(timer); reject(error); });
+    });
+}
+async function waitForFile(path, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (existsSync(path))
+            return;
+        await new Promise((resolve) => setTimeout(resolve, 20));
+    }
+    throw new Error(`fixture readiness timeout: ${path}`);
+}
+function pidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function incidentLines(stateRoot) {
+    const path = resolveIncidentsPath(stateRoot);
+    if (!existsSync(path))
+        return [];
+    return readFileSync(path, 'utf8').trim().split(/\r?\n/).filter(Boolean);
+}
+function writeFailureFixture(root, name, marker, pidFile) {
+    const trigger = name === 'child-crash'
+        ? "throw new Error('issue271-child-crash')"
+        : "Promise.reject(new Error('issue271-rejected-promise'))";
+    const plugin = join(root, `${name}.mjs`);
+    writeFileSync(plugin, [
+        "import { spawn } from 'node:child_process'",
+        "import { writeFileSync } from 'node:fs'",
+        `export const name = 'issue271-${name}'`,
+        'export const inject = []',
+        'export function apply() {',
+        `  const descendant = spawn(process.execPath, ['-e', 'setInterval(() => {}, 60000)'], { stdio: 'ignore' })`,
+        `  writeFileSync(${JSON.stringify(pidFile)}, String(descendant.pid))`,
+        `  setTimeout(() => writeFileSync(${JSON.stringify(marker)}, 'unsafe-continuation'), 250)`,
+        `  ${trigger}`,
+        '}',
+        '',
+    ].join('\n'));
+    const patch = join(root, `${name}.patch.yml`);
+    writeFileSync(patch, `- insert:\n    - id: issue271-${name}\n      name: '${plugin}'\n`);
+    return patch;
+}
+async function runDshFailureCase(name) {
+    const root = mkdtempSync(join(tmpdir(), `gotry-271-${name}-`));
+    const marker = join(root, 'unsafe.marker');
+    const pidFile = join(root, 'descendant.pid');
+    const patch = writeFailureFixture(root, name, marker, pidFile);
+    const owned = spawnOwnedChild(node24, [dshBin, '--profile', 'sdk-minimal', '--patch', patch], {
+        cwd: root,
+        env: privateEnv(root),
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    let stderr = '';
+    owned.child.stderr?.setEncoding('utf8');
+    owned.child.stderr?.on('data', (chunk) => { stderr += chunk.toString(); });
+    // 0.2.0-rc.2 起可选插件 apply 失败是 fail-soft:宿主保持存活,错误留在 stderr
+    // (`dsh: warning: N entry did not activate` + 插件错误栈),由宿主的监督者
+    // (spawnOwnedChild 的进程组)负责清收;0.1.5-rc.1 是 fail-loud 自行 exit 1。
+    // 两条路径都证明同一契约:错误有 stderr 证据 + 受控树被完整清收,不假设宿主必须自尽。
+    const evidencePattern = new RegExp(`issue271-${name.replace('-', '[- ]')}`);
+    let selfExit;
+    const deadline = Date.now() + EXTERNAL_BOUND_MS;
+    while (Date.now() < deadline) {
+        if (evidencePattern.test(stderr))
+            break;
+        const probe = await waitForClose(owned.child, 200);
+        if (!('timedOut' in probe)) {
+            selfExit = probe;
+            break;
+        }
+    }
+    const sawEvidence = evidencePattern.test(stderr);
+    if (!sawEvidence && !selfExit)
+        throw new Error(`${name} exceeded external ${EXTERNAL_BOUND_MS}ms bound`);
+    const cleanup = await terminateOwnedChild({ child: owned.child, groupPid: owned.groupPid, ...PROCESS_LIVENESS_BOUNDS });
+    const closeAfterCleanup = await waitForClose(owned.child, 2_000);
+    await new Promise((resolve) => setTimeout(resolve, 350));
+    const descendantPid = Number(readFileSync(pidFile, 'utf8'));
+    if (selfExit && !sawEvidence) {
+        // fail-loud 自退路径必须仍是 exit 1 且未执行失败后续标记(0.1.5 行为回归栅栏)。
+        assert.equal(selfExit.code, 1, `${name} dsh child must exit 1: ${JSON.stringify(selfExit)}`);
+        assert.equal(selfExit.signal, null, `${name} dsh child must not report a signal: ${JSON.stringify(selfExit)}`);
+        assert.equal(existsSync(marker), false, `${name} must not execute the post-failure marker`);
+    }
+    assert.match(stderr, evidencePattern, `${name} must preserve dsh stderr evidence`);
+    assert.equal(pidAlive(descendantPid), false, `${name} descendant ${descendantPid} must be gone after bounded cleanup`);
+    assert.equal(isOwnedProcessGroupEmpty(owned.groupPid), true, `${name} process group must be empty`);
+    const finalOutcome = selfExit
+        ?? ('timedOut' in closeAfterCleanup ? { code: null, signal: null } : closeAfterCleanup);
+    const stateRoot = join(root, 'state');
+    assert.equal(recordIncident({
+        ts: new Date().toISOString(),
+        kind: 'plugin_error',
+        message: `issue271 ${name}: child exit=${finalOutcome.code} signal=${finalOutcome.signal}`,
+        source: 'issue-271-liveness-test',
+    }, stateRoot), true);
+    const lines = incidentLines(stateRoot);
+    assert.equal(lines.length, 1, `${name} incident evidence must be append-only and single-line`);
+    assert.match(lines[0], new RegExp(`"message":"issue271 ${name}: child exit=`));
+    const result = { case: name, dshVersion, externalBoundMs: EXTERNAL_BOUND_MS, child: finalOutcome, failSoft: sawEvidence && !selfExit, stderr: stderr.slice(-4_000), incidentLines: lines, descendantPid, cleanup };
+    rmSync(root, { recursive: true, force: true });
+    return result;
+}
+async function runSpawnErrorCase() {
+    const root = mkdtempSync(join(tmpdir(), 'gotry-271-spawn-error-'));
+    const ctx = new Context();
+    const fiber = ctx.plugin(LocalSubprocessRuntime);
+    await fiber;
+    const stateRoot = join(root, 'state');
+    try {
+        const handle = ctx.subprocess.spawn({
+            argv: [join(root, 'missing-executable')],
+            cwd: root,
+            stdio: { stdin: 'ignore', stdout: { maxBytes: 1_024 }, stderr: { maxBytes: 4_096 } },
+            graceMs: 100,
+        });
+        let errorMessage = '';
+        await assert.rejects(withExternalBound(handle.done, EXTERNAL_BOUND_MS, 'spawn-error done'), (error) => {
+            errorMessage = error instanceof Error ? error.message : String(error);
+            return /ENOENT/.test(errorMessage);
+        }, 'installed subprocess provider must preserve spawn ENOENT as a rejected done promise');
+        assert.equal(await handle.waitForExit(AbortSignal.timeout(EXTERNAL_BOUND_MS)), true, 'spawn-error managed range must be empty');
+        assert.equal(recordIncident({
+            ts: new Date().toISOString(),
+            kind: 'plugin_error',
+            message: `issue271 spawn-error: ${errorMessage}`,
+            source: 'issue271-liveness-test',
+        }, stateRoot), true);
+        const lines = incidentLines(stateRoot);
+        assert.equal(lines.length, 1);
+        assert.match(lines[0], /issue271 spawn-error: spawn .* ENOENT/);
+        const result = { case: 'spawn-error', dshVersion, externalBoundMs: EXTERNAL_BOUND_MS, child: { exitCode: null, signal: null, doneRejected: true }, stderr: errorMessage, incidentLines: lines, managedRangeEmpty: true };
+        await ctx.fiber.dispose();
+        rmSync(root, { recursive: true, force: true });
+        return result;
+    }
+    catch (error) {
+        await ctx.fiber.dispose().catch(() => { });
+        rmSync(root, { recursive: true, force: true });
+        throw error;
+    }
+}
+function writeSignalHost(root, signal, marker, pidFile) {
+    const helperUrl = pathToFileURL(join(repoRoot, 'bin/gotry-process-liveness.js')).href;
+    const host = join(root, `signal-host-${signal}.mjs`);
+    writeFileSync(host, [
+        `import { spawnOwnedChild, terminateOwnedChild, PROCESS_LIVENESS_BOUNDS } from ${JSON.stringify(helperUrl)}`,
+        "import { existsSync, writeFileSync } from 'node:fs'",
+        `const dsh = spawnOwnedChild(process.execPath, [${JSON.stringify(dshBin)}, '--profile', 'sdk-minimal', '--patch', ${JSON.stringify(join(root, 'signal.patch.yml'))}], { cwd: ${JSON.stringify(root)}, env: process.env, stdio: ['pipe', 'ignore', 'pipe'] })`,
+        "dsh.child.stderr?.resume()",
+        `let stopping = false; const onSignal = () => { if (stopping) return; stopping = true; void (async () => { await terminateOwnedChild({ child: dsh.child, groupPid: dsh.groupPid, signal: ${JSON.stringify(signal)}, ...PROCESS_LIVENESS_BOUNDS }); process.off(${JSON.stringify(signal)}, onSignal); process.kill(process.pid, ${JSON.stringify(signal)}) })() }; process.on(${JSON.stringify(signal)}, onSignal)`,
+        `const deadline = Date.now() + ${EXTERNAL_BOUND_MS}`,
+        `const ready = setInterval(() => { if (Date.now() > deadline) { clearInterval(ready); process.exit(124) }; try { if (existsSync(${JSON.stringify(pidFile)})) { clearInterval(ready); process.stdout.write('READY\\n'); setTimeout(() => writeFileSync(${JSON.stringify(marker)}, 'unsafe-continuation'), 300) } } catch {} }, 20)`,
+        '',
+    ].join('\n'));
+    return host;
+}
+async function runParentSignalCase(signal) {
+    const root = mkdtempSync(join(tmpdir(), `gotry-271-${signal}-`));
+    const marker = join(root, 'unsafe.marker');
+    const pidFile = join(root, 'descendant.pid');
+    const plugin = join(root, 'signal-plugin.mjs');
+    writeFileSync(plugin, [
+        "import { spawn } from 'node:child_process'",
+        "import { writeFileSync } from 'node:fs'",
+        "export const name = 'issue271-parent-signal'",
+        'export const inject = []',
+        'export function apply() {',
+        `  const descendant = spawn(process.execPath, ['-e', 'setInterval(() => {}, 60000)'], { stdio: 'ignore' })`,
+        `  writeFileSync(${JSON.stringify(pidFile)}, String(descendant.pid))`,
+        '}',
+        '',
+    ].join('\n'));
+    writeFileSync(join(root, 'signal.patch.yml'), `- insert:\n    - id: issue271-parent-signal\n      name: '${plugin}'\n`);
+    const host = writeSignalHost(root, signal, marker, pidFile);
+    const parent = spawn(node24, [host], { cwd: root, env: privateEnv(root), stdio: ['ignore', 'pipe', 'pipe'] });
+    let stdout = '';
+    let stderr = '';
+    parent.stdout?.setEncoding('utf8');
+    parent.stdout?.on('data', (chunk) => { stdout += chunk; });
+    parent.stderr?.setEncoding('utf8');
+    parent.stderr?.on('data', (chunk) => { stderr += chunk; });
+    await waitForFile(pidFile, EXTERNAL_BOUND_MS);
+    process.kill(parent.pid, signal);
+    const outcome = await waitForClose(parent, EXTERNAL_BOUND_MS);
+    if ('timedOut' in outcome)
+        throw new Error(`${signal} parent exceeded external ${EXTERNAL_BOUND_MS}ms bound`);
+    const descendantPid = Number(readFileSync(pidFile, 'utf8'));
+    assert.equal(outcome.code, null, `${signal} parent must preserve signal termination: ${JSON.stringify(outcome)}`);
+    assert.equal(outcome.signal, signal, `${signal} parent must report its original signal: ${JSON.stringify(outcome)}`);
+    assert.match(stdout, /READY/, `${signal} case must observe a ready real dsh child`);
+    assert.equal(existsSync(marker), false, `${signal} must not execute the post-failure marker`);
+    assert.equal(pidAlive(descendantPid), false, `${signal} descendant ${descendantPid} must be gone`);
+    const stateRoot = join(root, 'state');
+    assert.equal(recordIncident({
+        ts: new Date().toISOString(),
+        kind: 'plugin_error',
+        message: `issue271 parent signal=${signal}; parent exit=${outcome.code} signal=${outcome.signal}`,
+        source: 'issue271-liveness-test',
+    }, stateRoot), true);
+    const lines = incidentLines(stateRoot);
+    assert.equal(lines.length, 1);
+    assert.match(lines[0], new RegExp(`parent signal=${signal}`));
+    const result = { case: signal, dshVersion, externalBoundMs: EXTERNAL_BOUND_MS, parent: outcome, stdout, stderr: stderr.slice(-4_000), incidentLines: lines, descendantPid, processGroupEmpty: true };
+    rmSync(root, { recursive: true, force: true });
+    return result;
+}
+const PRODUCT_EXTERNAL_BOUND_MS = 8_000;
+function forceKillGroup(pid) {
+    if (!pid || process.platform === 'win32')
+        return;
+    try {
+        process.kill(-pid, 'SIGKILL');
+    }
+    catch { /* already gone */ }
+}
+function writeProductFixture(root, options = { writeTerminalOutput: false, mode: 'web' }) {
+    const binDir = join(root, 'bin');
+    const tsSrcDir = join(root, 'ts', 'src');
+    const tsCapabilitiesDir = join(root, 'ts', 'capabilities');
+    const dshDir = join(root, 'node_modules', '@deepseek-ai', 'dsh');
+    mkdirSync(binDir, { recursive: true });
+    mkdirSync(tsSrcDir, { recursive: true });
+    mkdirSync(tsCapabilitiesDir, { recursive: true });
+    mkdirSync(join(dshDir, 'lib'), { recursive: true });
+    for (const file of ['gotry-inner.js', 'gotry-bootstrap.js', 'gotry-runtime-resolution.js', 'gotry-process-liveness.js']) {
+        copyFileSync(join(repoRoot, 'bin', file), join(binDir, file));
+    }
+    copyFileSync(join(repoRoot, 'ts', 'capabilities', 'incident-log.ts'), join(tsCapabilitiesDir, 'incident-log.ts'));
+    copyFileSync(join(repoRoot, 'ts', 'src', 'tool-packet.ts'), join(tsSrcDir, 'tool-packet.ts'));
+    copyFileSync(join(repoRoot, 'cordis.gotry-patch.yml'), join(root, 'cordis.gotry-patch.yml'));
+    // Symlink dist so benchmark mode loads its bridge/diagnostic/conformance modules
+    // without needing a tsx loader inside the fixture (gotry-inner spawns node directly).
+    // The fixture is a fresh private stateRoot; only the read-only built JS is reused.
+    try {
+        symlinkSync(join(repoRoot, 'dist'), join(root, 'dist'), 'dir');
+    }
+    catch { /* dist already present or unsupported */ }
+    writeFileSync(join(tsSrcDir, 'index.ts'), 'export {}\n');
+    writeFileSync(join(root, 'package.json'), JSON.stringify({ name: 'gotry-issue271-fixture', type: 'module', version: '0.0.0' }) + '\n');
+    writeFileSync(join(dshDir, 'package.json'), JSON.stringify({ name: '@deepseek-ai/dsh', type: 'module', version: dshVersion }) + '\n');
+    let configPath;
+    if (options.writeTerminalOutput) {
+        const lookupInputSchema = { type: 'object', properties: { city: { type: 'string', description: 'A city name' } }, required: ['city'], additionalProperties: false };
+        const terminalBodySchema = { type: 'object', properties: { status: { type: 'string' }, payload: { type: 'string' } }, required: [], additionalProperties: false };
+        const benchmarkConfig = {
+            schema_version: 'gotry_benchmark_environment_bridge_v4',
+            enabled: true,
+            executable: process.execPath,
+            cwd: root,
+            argv_prefix: ['true'],
+            tools: [{
+                    name: 'lookup',
+                    description: 'Stub lookup tool for inherited-pipe liveness proof',
+                    input_schema: lookupInputSchema,
+                    output_keys: ['marker', 'leaked'],
+                    domain_outcomes: [{ status: 'miss', code: 'NOT_FOUND', recovery: 'none' }],
+                }],
+            timeout_ms: 10_000,
+            max_output_bytes: 4_096,
+            terminal_output: { tag: 'benchmark_terminal', max_bytes: 4_096, body_schema: terminalBodySchema },
+            isolation: { mode: 'host-enforced', writes: 'forbidden', network: 'denied' },
+        };
+        configPath = join(root, 'benchmark-env-config.json');
+        writeFileSync(configPath, JSON.stringify(benchmarkConfig) + '\n');
+    }
+    const leaderPid = join(root, 'dsh-leader.pid');
+    const leaderExit = join(root, 'dsh-leader.exit');
+    const ready = join(root, 'fixture.ready');
+    const descendantPid = join(root, 'descendant.pid');
+    const marker = join(root, 'unsafe.marker');
+    const descendantCode = [
+        "import { writeFileSync } from 'node:fs'",
+        `const marker = ${JSON.stringify(marker)}`,
+        "if (process.env.GOTRY_271_RESIST_TERM === '1') { process.on('SIGTERM', () => {}); process.on('SIGINT', () => {}) }",
+        "setTimeout(() => writeFileSync(marker, 'unsafe-continuation'), Number(process.env.GOTRY_271_MARKER_DELAY_MS ?? '300'))",
+        'setInterval(() => {}, 60_000)',
+    ].join(';');
+    writeFileSync(join(dshDir, 'lib', 'bin.js'), [
+        "import { spawn } from 'node:child_process'",
+        "import { writeFileSync } from 'node:fs'",
+        `const leaderPid = ${JSON.stringify(leaderPid)}`,
+        `const leaderExit = ${JSON.stringify(leaderExit)}`,
+        `const ready = ${JSON.stringify(ready)}`,
+        `const descendantPid = ${JSON.stringify(descendantPid)}`,
+        `const descendant = spawn(process.execPath, ['--input-type=module', '-e', ${JSON.stringify(descendantCode)}], { stdio: 'inherit', env: process.env })`,
+        options.writeTerminalOutput
+            ? "if (process.env.GOTRY_271_LEADER_TERMINAL === '1') process.stdout.write('<benchmark_terminal>{\\\"status\\\":\\\"succeeded\\\"}</benchmark_terminal>\\n')"
+            : '',
+        'writeFileSync(leaderPid, String(process.pid))',
+        'writeFileSync(descendantPid, String(descendant.pid))',
+        'writeFileSync(ready, \'ready\')',
+        "process.on('exit', () => writeFileSync(leaderExit, 'exit'))",
+        "setTimeout(() => { writeFileSync(leaderExit, 'exit'); process.exit(Number(process.env.GOTRY_271_LEADER_EXIT ?? '1')) }, 60)",
+        '',
+    ].filter(Boolean).join('\n'));
+    return { entrypoint: join(binDir, 'gotry-inner.js'), leaderPid, leaderExit, ready, descendantPid, marker, configPath };
+}
+async function runProductEntrypointCase(name, exitCode, resistant) {
+    const root = mkdtempSync(join(tmpdir(), `gotry-271-followup-${name}-`));
+    const fixture = writeProductFixture(root);
+    const parent = spawn(node24, [fixture.entrypoint, 'web', '--no-open'], {
+        cwd: root,
+        env: {
+            ...privateEnv(root),
+            GOTRY_ONBOARDING_SKIP: '1',
+            GOTRY_SESSION_LIVE: '0',
+            GOTRY_HBCLI_LIVE: '0',
+            GOTRY_HOTELBYTE_SKILLS_LIVE: '0',
+            GOTRY_271_LEADER_EXIT: String(exitCode),
+            GOTRY_271_RESIST_TERM: resistant ? '1' : '0',
+            GOTRY_271_MARKER_DELAY_MS: resistant ? '7000' : '300',
+        },
+        detached: process.platform !== 'win32',
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    let stdout = '';
+    let stderr = '';
+    parent.stdout?.setEncoding('utf8');
+    parent.stdout?.on('data', (chunk) => { stdout += chunk; });
+    parent.stderr?.setEncoding('utf8');
+    parent.stderr?.on('data', (chunk) => { stderr += chunk; });
+    const startedAt = Date.now();
+    const deadline = startedAt + PRODUCT_EXTERNAL_BOUND_MS;
+    const remainingBound = () => Math.max(1, deadline - Date.now());
+    let outcome;
+    let before = {};
+    try {
+        await waitForFile(fixture.ready, remainingBound());
+        await waitForFile(fixture.leaderExit, remainingBound());
+        const leader = Number(readFileSync(fixture.leaderPid, 'utf8'));
+        const descendant = Number(readFileSync(fixture.descendantPid, 'utf8'));
+        before = {
+            leaderExitObserved: true,
+            leaderPid: leader,
+            descendantPid: descendant,
+            descendantAlive: pidAlive(descendant),
+            processGroupEmpty: isOwnedProcessGroupEmpty(leader),
+            closeDelayedBoundary: pidAlive(descendant),
+        };
+        outcome = await waitForClose(parent, remainingBound());
+        if ('timedOut' in outcome) {
+            const snapshot = {
+                case: name,
+                externalBoundMs: PRODUCT_EXTERNAL_BOUND_MS,
+                parent: outcome,
+                before,
+                marker: existsSync(fixture.marker),
+                incidentLines: incidentLines(root),
+                stderr: stderr.slice(-4_000),
+            };
+            throw new Error(`product entrypoint liveness regression: ${JSON.stringify(snapshot)}`);
+        }
+        await new Promise((resolve) => setTimeout(resolve, 350));
+        const afterLeader = Number(readFileSync(fixture.leaderPid, 'utf8'));
+        const afterDescendant = Number(readFileSync(fixture.descendantPid, 'utf8'));
+        const lines = incidentLines(root);
+        const after = {
+            parentAlive: pidAlive(parent.pid ?? -1),
+            leader: { code: exitCode, signal: null },
+            descendantAlive: pidAlive(afterDescendant),
+            processGroupEmpty: isOwnedProcessGroupEmpty(afterLeader),
+            marker: existsSync(fixture.marker),
+        };
+        assert.equal(outcome.code, exitCode, `${name} product must preserve leader exit code: ${JSON.stringify(outcome)}`);
+        assert.equal(outcome.signal, null, `${name} product must preserve a normal leader exit: ${JSON.stringify(outcome)}`);
+        assert.equal(after.parentAlive, false, `${name} product parent must be gone within the external bound`);
+        assert.equal(after.descendantAlive, false, `${name} must reap the inherited-pipe descendant`);
+        assert.equal(after.processGroupEmpty, true, `${name} owned dsh group must be empty`);
+        assert.equal(after.marker, false, `${name} must not run the post-failure marker`);
+        if (exitCode !== 0) {
+            assert.equal(lines.length, 1, `${name} product must append exactly one incident`);
+            assert.match(lines[0], new RegExp(`gotry spawn exit: web code=${exitCode} signal=null`));
+        }
+        else {
+            assert.equal(lines.length, 0, `${name} clean exit must not invent an incident`);
+        }
+        return {
+            case: name,
+            productEntrypoint: fixture.entrypoint,
+            externalBoundMs: PRODUCT_EXTERNAL_BOUND_MS,
+            elapsedMs: Date.now() - startedAt,
+            parent: outcome,
+            stderr: stderr.slice(-4_000),
+            incidentLines: lines,
+            before,
+            after,
+        };
+    }
+    finally {
+        forceKillGroup(parent.pid ?? null);
+        forceKillGroup(Number(existsSync(fixture.leaderPid) ? readFileSync(fixture.leaderPid, 'utf8') : 0));
+        rmSync(root, { recursive: true, force: true });
+    }
+}
+async function runBenchmarkSuccessCase(name, resistant) {
+    const root = mkdtempSync(join(tmpdir(), `gotry-271-followup-${name}-`));
+    const fixture = writeProductFixture(root, { writeTerminalOutput: true, mode: 'headless' });
+    if (!fixture.configPath)
+        throw new Error('benchmark fixture must produce a config path');
+    const parent = spawn(node24, [fixture.entrypoint, 'bridge smoke'], {
+        cwd: root,
+        env: {
+            ...privateEnv(root),
+            GOTRY_BENCHMARK_ENV_CONFIG: fixture.configPath,
+            GOTRY_271_LEADER_EXIT: '0',
+            GOTRY_271_LEADER_TERMINAL: '1',
+            GOTRY_271_RESIST_TERM: resistant ? '1' : '0',
+            GOTRY_271_MARKER_DELAY_MS: resistant ? '7000' : '300',
+        },
+        detached: process.platform !== 'win32',
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    let stdout = '';
+    let stderr = '';
+    parent.stdout?.setEncoding('utf8');
+    parent.stdout?.on('data', (chunk) => { stdout += chunk; });
+    parent.stderr?.setEncoding('utf8');
+    parent.stderr?.on('data', (chunk) => { stderr += chunk; });
+    const startedAt = Date.now();
+    const deadline = startedAt + PRODUCT_EXTERNAL_BOUND_MS;
+    const remainingBound = () => Math.max(1, deadline - Date.now());
+    let outcome;
+    let before = {};
+    try {
+        await waitForFile(fixture.ready, remainingBound());
+        await waitForFile(fixture.leaderExit, remainingBound());
+        const leader = Number(readFileSync(fixture.leaderPid, 'utf8'));
+        const descendant = Number(readFileSync(fixture.descendantPid, 'utf8'));
+        before = {
+            leaderExitObserved: true,
+            leaderPid: leader,
+            descendantPid: descendant,
+            descendantAlive: pidAlive(descendant),
+            processGroupEmpty: isOwnedProcessGroupEmpty(leader),
+            closeDelayedBoundary: pidAlive(descendant),
+        };
+        outcome = await waitForClose(parent, remainingBound());
+        if ('timedOut' in outcome) {
+            const snapshot = {
+                case: name,
+                externalBoundMs: PRODUCT_EXTERNAL_BOUND_MS,
+                parent: outcome,
+                before,
+                marker: existsSync(fixture.marker),
+                stdoutTail: stdout.slice(-2_000),
+                stderr: stderr.slice(-4_000),
+            };
+            throw new Error(`benchmark success liveness regression: ${JSON.stringify(snapshot)}`);
+        }
+        await new Promise((resolve) => setTimeout(resolve, 350));
+        const afterLeader = Number(readFileSync(fixture.leaderPid, 'utf8'));
+        const afterDescendant = Number(readFileSync(fixture.descendantPid, 'utf8'));
+        const after = {
+            parentAlive: pidAlive(parent.pid ?? -1),
+            leader: { code: 0, signal: null },
+            descendantAlive: pidAlive(afterDescendant),
+            processGroupEmpty: isOwnedProcessGroupEmpty(afterLeader),
+            marker: existsSync(fixture.marker),
+        };
+        assert.equal(outcome.code, 0, `${name} benchmark must preserve leader exit 0: ${JSON.stringify(outcome)}`);
+        assert.equal(outcome.signal, null, `${name} benchmark must preserve a normal leader exit: ${JSON.stringify(outcome)}`);
+        assert.equal(after.parentAlive, false, `${name} product parent must be gone within the external bound`);
+        assert.equal(after.descendantAlive, false, `${name} must reap the inherited-pipe descendant`);
+        assert.equal(after.processGroupEmpty, true, `${name} owned dsh group must be empty`);
+        assert.equal(after.marker, false, `${name} must not run the post-failure marker`);
+        assert.match(stdout, /<benchmark_terminal>/, `${name} must surface the captured terminal tag on parent stdout`);
+        return {
+            case: name,
+            productEntrypoint: fixture.entrypoint,
+            configPath: fixture.configPath,
+            externalBoundMs: PRODUCT_EXTERNAL_BOUND_MS,
+            elapsedMs: Date.now() - startedAt,
+            parent: outcome,
+            stdoutTail: stdout.slice(-2_000),
+            stderr: stderr.slice(-4_000),
+            before,
+            after,
+        };
+    }
+    finally {
+        forceKillGroup(parent.pid ?? null);
+        forceKillGroup(Number(existsSync(fixture.leaderPid) ? readFileSync(fixture.leaderPid, 'utf8') : 0));
+        rmSync(root, { recursive: true, force: true });
+    }
+}
+const results = [
+    await runDshFailureCase('child-crash'),
+    await runDshFailureCase('rejected-promise'),
+    await runSpawnErrorCase(),
+    await runParentSignalCase('SIGINT'),
+    await runParentSignalCase('SIGTERM'),
+    await runProductEntrypointCase('failure-inherited-pipe', 7, false),
+    await runProductEntrypointCase('normal-zero-inherited-pipe', 0, false),
+    await runProductEntrypointCase('term-resistant-inherited-pipe', 7, true),
+    await runBenchmarkSuccessCase('benchmark-inherited-pipe-resist-term', true),
+];
+console.log(`ISSUE 271 LIVENESS: ${JSON.stringify(results)}`);