@dzhechkov/harness-core 0.8.44 → 0.8.46

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f80660a868b436e0ae7b3a23d5b104a8e882bf9f9fc7bfc22f7c0023ec76f2d6"
+          "content": "9f7d650284101fe8b3bd2f4a9dd0de795bd5a0baedfa98b36fbfbc77ccd296d1"
         }
       ]
     },
@@ -315,7 +315,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5ee09fa3e1ac4271b420a93d0972b3dd3844ced3757c60dcb1da95015f68554a"
+          "content": "bb74bc4c0bc8ef6b41bd6ad0c8fb51c8da5b3fe228170374f0f85aa3ebdc5004"
         }
       ]
     },
@@ -325,7 +325,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "126a8beddf9f7bf8a8056dc67d63d3c335fc89c993bb0478ac30a4ddd5c8e21e"
+          "content": "df06c273af29833e2c7f5ff7d0f7abd31f130155d912b41a3890b185a619bc61"
         }
       ]
     },
@@ -335,7 +335,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1095a9a8b66ba60e64123e28eb47873079e015c82b61d211acf02b394fe6006b"
+          "content": "1480a03f6202aeb1b8ed6caa26d129159c46108b60d5e76cc2946252f1093098"
         }
       ]
     },
@@ -345,7 +345,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "10cdd827f805919af93aefc4876da422b84fbb3a30a686627b74a908a9332410"
+          "content": "942d14725e1aec75af18822d65378a2d02d3601383b6a4d887bf8642b366f7d9"
         }
       ]
     },
@@ -2915,7 +2915,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c18f5b65c615b023a3c3f576b2619692bf9a2862f44ba8acb06b5a4e025077e0"
+          "content": "c4ceaf00e0ded6d5e802b8867871bd8bbf25029a6a93895f4086313d5b2175c2"
         }
       ]
     },
@@ -2925,7 +2925,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ddd45dd0f6cdd8c83fe98a3a78ccfb85da04b2c9df1e52973a65f2526900d418"
+          "content": "911eee2810a4dbb9f28e6bff26a274d198cff03a2d3e28b47753f300014419e6"
         }
       ]
     },
@@ -2935,7 +2935,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1ff621602e84ea254c7c865fd8420ced42570345c8e099ee098e5d25f5c5a9db"
+          "content": "2c48457eb75559dd7f9ef76c82a67b09bacde134511ba2f537920f39a29299d2"
         }
       ]
     },
@@ -2945,7 +2945,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a7879e54955ef542d3cda7884d3eac9a362f3f2c2b1dbc8d03f190e479df47c3"
+          "content": "d9179260cecee61509eb746b4ac88ed9e6e8947197db4b52c1773ffa9d41564a"
         }
       ]
     },
@@ -3405,7 +3405,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b4a01fd697d785c473d9b66689c8d140211fc09f8379ca7fa32e41fbd36ca940"
+          "content": "e8dcc3bd0e0b7dca766b9ed8e77c3b33d349349b809ee625890f327aa62ebc77"
         }
       ]
     },
@@ -3415,7 +3415,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "87ad202b5bb3e1f6295d18a997201c1d2303343b42953843d852d2b83f9451e8"
+          "content": "d1ab2c60cc400cf9be5e2d6352eae67d9a3142808fd741ca6103a83b35afb655"
         }
       ]
     },
@@ -3425,7 +3425,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b7ef829dc678254bacf001e1ffe968b1619cb0000179362d159d46362a451b8d"
+          "content": "dd03c47fb197c268f28a39bd65ce0c571ae7ffb546edef88d1dc460654f174cc"
         }
       ]
     },
@@ -4195,7 +4195,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "02ca8a9c3e379fd9f53f534f69fc4f64ee55db3fda0b4ea9689f060ccbf438b8"
+          "content": "7dbbcb06f5b075cb2bf7d1eec8d1c3fe3312a39bfcaaf26ff8ae7daa4943c4fb"
         }
       ]
     },
@@ -4205,7 +4205,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "be6e65fe1cb9f2af632fe0f30cfb06ebcce873c06a794cea8df6a549f206e182"
+          "content": "f952a2cc0939988c7c388de4c8e206932cb92641c02e4666ec226e3123d5b9c1"
         }
       ]
     },
@@ -4215,7 +4215,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "dc633ef207f8cbd90f1d9961bb8696c5cf63072ead09dd48929923ccfe3f0184"
+          "content": "c19eb4375e6d42f4f732bcffc2925735c3c6a7270fe1cca4c5dc1075e7311de2"
         }
       ]
     },
@@ -4225,7 +4225,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f0e121375dd12272ed7c9c5f61dc2d6df7fb19b9e6756de19820dbc460f86204"
+          "content": "1fb4a012594e28a604f2240ea091dc3b6a0b5f705ed485f0e36f6be8c196d856"
         }
       ]
     },
@@ -5669,6 +5669,46 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "dist/round-exec-claim.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "5a2b0cb0f7f6e63afd415313f196c83b58ba235b84c0abe38e5bb0077a24e2ab"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/round-exec-claim.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "96f400965d180c6f388ffa9e47bf1836f6081bcb6f5c26188e15e067eb1960be"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/round-exec-claim.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "c71a6d227665151d7ab3de4be94174b63cb4589b0029759ea324a77de8f6d022"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/round-exec-claim.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "1c57b9f563db38679572d1ddbc9aa33a25f6100e975ddc683c35f87ccfc094cd"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "dist/round-exec.d.ts",
@@ -6035,7 +6075,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ae652668bcff0fd5846e63fda6f1ffb38155459e1ad563d549ab72f4f1f5d32d"
+          "content": "48a74602b20dd51467ab48a09886e876bee6821dfa89255d0100e5147595d744"
         }
       ]
     },
@@ -6045,7 +6085,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6119e91d2af673e5583e0f6ad117af62fd92799f6d8f671332e134f978f7ffe0"
+          "content": "d2f2685f09be7823be59ffdb3bb24efef865a62987a638c029f4c3452f061a09"
         }
       ]
     },
@@ -6055,7 +6095,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "878a9dd6db7d369edaf7acb1ae6e00dd994ece247e6123980cd4dba0d7c54949"
+          "content": "5d869d3a224d52964b296d9224933f6ecb2f4edf573a946888d9166f1489ce92"
         }
       ]
     },
@@ -6065,7 +6105,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6eb19cab2cac968a063a7615e7fccb2a9ca4ac1b3fcf16bfd0f4c0c1506f1f5e"
+          "content": "f4744745a940e18d9591cbfcafc81cbc029c31e0c450918a4957fbdc87ba2070"
         }
       ]
     },
@@ -6085,7 +6125,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3b8f5dc584a26b53be9f1e68cb8fffaaf68decbe1cf4b634f78c8ec0f3725b3d"
+          "content": "3ecf9110097001cba535095de5a78cd9ca2703cfed15d921f368673b08ef6374"
         }
       ]
     },
@@ -6095,7 +6135,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8644f836c6236867d8f238cf48465506361647f11bc58b50134a7a862b7e711a"
+          "content": "ffab1105dd844f20d5f8a6c385901f9bb6c714148a2f61a4e51afab0254021b2"
         }
       ]
     },
@@ -6105,7 +6145,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3bafd2f8eb1c3305be28c42d59365dc58751d199b5e702b69c581c5df7b97560"
+          "content": "363fa3f4e716a6e450a49f9f11b9c871baad68b30c825f3cdd4b27f471731572"
         }
       ]
     },
@@ -6155,7 +6195,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "22608f3928716385fdb0cb53c7d64ef585ed4326060352af4f849a1d1621c66e"
+          "content": "8f63cf60067ec33ec3bdd86be8ea860ae6db442edd32fcabdba2a9f9c876a21d"
         }
       ]
     },
@@ -6165,7 +6205,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "565f680d49303935f12cf2b4bcb9c465320d259ac38cada8e5256b45b4bf8119"
+          "content": "375655033485f9b4cbdaca4c371581cfaa3a0b757d9d0d4309d75ecbc1c9a5e3"
         }
       ]
     },
@@ -6175,7 +6215,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b6712fc5a3e867a22c740ad05f782dba4c84267e0b74e3dd0bf796dd623e32e5"
+          "content": "0938e8399eb90c45520d1a544d3f7e741a9569f7e42d6cd36e2569f831f010d7"
         }
       ]
     },
@@ -6185,7 +6225,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "059760d62fa63c6f45e47a31d17f3bedd926ef2076c7ac1a7f7e687021cf7f13"
+          "content": "bfc1acdb5b4b3dec2f6fe4eb2fe27e4133c574f693d3a34a1ae2f7cc26730262"
         }
       ]
     },
@@ -6549,6 +6589,46 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "dist/stamped-path.d.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "2bab16b2083b6771343aaf6e674661cd8b7e00851933caa7abb0b5129757851f"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/stamped-path.d.ts.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "0cae7683e286b6028c3fa170386609ec8b84f4a2b71ad159f0285fc1402bd6a3"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/stamped-path.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "95f90efd72d5068247b778cc2b740562b263ba3ae9bd8793811d9b58d02524c4"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "dist/stamped-path.js.map",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "862c33d8a76abc76ef47987b1ec499ef46d73af109205c1cb0be3aeb75fe6350"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "dist/statusline.d.ts",
@@ -7679,7 +7759,7 @@
         },
         {
           "name": "dz:canonical-json-sha256-v2",
-          "value": "0b881348f6c4b203b10ec7331e8cb5e0a44f6b4fd661e9340cba4e60a7042edb"
+          "value": "567d35d6959a019cb066d731a8b2c691c86b8a8853561af4b4af583b1a1391c6"
         }
       ]
     },
@@ -7759,7 +7839,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c130c9ce4f4829ee4c494a1863574d407cec61f63309dea0454a6ee2794476e6"
+          "content": "ee116c44eb3d1793e369bb684f2ff020957f351f1c2de1351e736de45b5dcab5"
         }
       ]
     },
@@ -8419,7 +8499,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ecbd56d2a04ff6a7fda5bff402bfd7f978db91a1b9559b33e5dfbe20da92390f"
+          "content": "6708ea6071d81233d17a132024ecc34059e954c9bfb19af7222d2d839b200d39"
         }
       ]
     },
@@ -8539,7 +8619,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bec4f95a59f3f1bcdafaddcc10135581ff2828f6f0b4eac02559e77f339111dd"
+          "content": "a3754701f00eba282d95ed944cdf0e88b2018bdd0713a305e220759f0f0b1202"
         }
       ]
     },
@@ -8739,7 +8819,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "27aad0694431ab6f7261f4f33a2b3c8500662d555c4d6c6f0700c4979dce23b5"
+          "content": "c731312962d631f985414a44111ee51ec4afc56f1dabb3adc088fd43b55f2620"
         }
       ]
     },
@@ -9103,6 +9183,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "src/round-exec-claim.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "349ed3905cc29230a0cb67a2c0c2c10948aebb6c8f5d3c9c3ad59ec1f862e23b"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "src/round-exec.ts",
@@ -9199,7 +9289,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "191c5a88e35cb4d1e142cd1a60faa1f397c6a49b5e7d24690a5ea61d722c73de"
+          "content": "9c27223147bed72c41c80723a87123662200b72700a05f44714aaaa1d7fa5dc5"
         }
       ]
     },
@@ -9209,7 +9299,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0f44ef0d05c0ffabffe5e0f4fb4539b67fd72f62b42206d68bc98199ea718dcd"
+          "content": "9041565e0c4f79a66edd8fed57e5e75029d1bd0c9b276fc86cbd2718b2fec6d8"
         }
       ]
     },
@@ -9229,7 +9319,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "02772313e7c6fd4e7f5d2354fd11eb4234baba7a64e9972d0b4136be9bd98ae6"
+          "content": "c9b2ee366049793eb25e93cbcfce1037d8c24c19ddc24a3dc6e496ee8cac6fe9"
         }
       ]
     },
@@ -9333,6 +9423,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "src/stamped-path.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "bfb3729e414745a2d40694a244baedc56c4c2eaa6f42287e77b968d211bc54ed"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "src/statusline.ts",

package/src/apply-leg.ts

@@ -209,7 +209,7 @@ export function probeRecallEngine(socketPath: string, timeoutMs = 1000): Promise
  * either failure mode degrades to the SAME honest `cosine-fallback` reply shape as every other
  * failure, never a bare protocol `{error}`.
  */
-export const APPLY_LEG_VERSION = 12;
+export const APPLY_LEG_VERSION = 13;
 
 /**
  * Parse the `dz-apply-leg-version` stamp from a deployed helper file. Unlike
@@ -442,19 +442,34 @@ async function loadPolicy() {
 
 /**
  * Retro admission-debt directive (feature narrated-error-must-be-taught, ADR-001 D2/D3). The Stop
- * hook's scan-tail arms \`.dz/retro-pending.json\` when the assistant admitted an error without a
- * teach; THIS hook confronts the assistant on the very next prompt. Contract:
+ * hook's scan-tail arms \`.dz/retro/<session>/pending.json\` when the assistant admitted an error
+ * without a teach; THIS hook confronts the assistant on the very next prompt. Contract:
+ *  - no string session_id in the payload ⇒ '' BEFORE any fs call (the hook guesses no session);
  *  - sentinel absent ⇒ '' and ZERO extra work beyond one existsSync (the no-noise pin — output
  *    stays byte-identical to a build without this feature);
  *  - stale / other-session sentinel ⇒ '' (the debt belongs to a dead session; retro collected it);
  *  - core module absent or old (no directive exports) ⇒ '' — inert, NEVER-BLOCK.
  */
 // AM-7 (fix round 1): SESSION_ROOT, not PROJECT — the sentinel is a per-session artifact (see the
-// SESSION_ROOT comment above).
-const RETRO_PENDING = path.join(SESSION_ROOT, '.dz', 'retro-pending.json');
+// SESSION_ROOT comment above). retro-debt-sentinel-per-session: per-session by PATH now too — the
+// root is the session's, and the file is under \`.dz/retro/<safeId>/\`, so two sessions in one
+// worktree can no longer read (or clear) each other's debt through one shared flat file.
+// TWIN of safeSessionDirName in session-retro.ts — duplicated inline because this hook must stay
+// dependency-free; pinned to equal outputs by test retro-sentinel-per-session.test.ts (AC-6/twin).
+const SAFE_SESSION_ID_RE = /^[A-Za-z0-9._-]{1,128}$/;
+function safeSessionDirName(sessionId) {
+  if (SAFE_SESSION_ID_RE.test(sessionId) && sessionId !== '.' && sessionId !== '..') return sessionId;
+  return crypto.createHash('sha256').update(sessionId).digest('hex').slice(0, 32);
+}
+function retroPendingPathFor(sessionId) {
+  return path.join(SESSION_ROOT, '.dz', 'retro', safeSessionDirName(sessionId), 'pending.json');
+}
 async function retroDebtDirective(payload) {
-  if (!fs.existsSync(RETRO_PENDING)) return '';
-  const sentinel = safe(() => JSON.parse(fs.readFileSync(RETRO_PENDING, 'utf-8')), undefined);
+  const sessionId = payload && typeof payload.session_id === 'string' ? payload.session_id : '';
+  if (sessionId === '') return '';
+  const pendingPath = retroPendingPathFor(sessionId);
+  if (!fs.existsSync(pendingPath)) return '';
+  const sentinel = safe(() => JSON.parse(fs.readFileSync(pendingPath, 'utf-8')), undefined);
   if (!sentinel || typeof sentinel.snippet !== 'string' || sentinel.snippet === '') return '';
   const mod = await loadCoreModule(
     'session-retro.js',

package/src/index.ts

@@ -137,6 +137,7 @@ export { planLedgerBackfill, LEDGER_FILL_SOURCE, AMBIGUOUS, resolveLedgerRunId }
 export { projectSkillsOneRoot, projectSkillsProbeCommand } from './project-skills-root.js';
 export { isRepoBoundary } from './repo-boundary.js';
 export type { RepoBoundaryIo } from './repo-boundary.js';
+export { uniqueStampedPath, writeUniqueStampedFile } from './stamped-path.js';
 export type { LedgerBackfillPlan, LedgerBackfillRow, RunCostFacts } from './ledger-backfill.js';
 export type { SweepResult, DriftedSkill, SyncResult, SyncCanonicalOptions, CanonicalDefect, CanonicalDefectKind } from './skill-drift.js';
 export { benchmarkSkill, benchmarkSkills, compareSkills } from './benchmark.js';
@@ -1367,6 +1368,10 @@ export { parseQeBridgeStdoutCost } from './review-cost.js';
 export type { QeBridgeCost, QeBridgeCostTokens } from './review-cost.js';
 export { parseCodexTokens, classifyRoundExecOutcome, buildRoundExecRow } from './round-exec.js';
 export type { RoundExecOutcome, RoundExecLedgerRow } from './round-exec.js';
+// round-exec-claim-takeover FR-1: the pure verdict `dz round exec` consults before refusing a
+// standing exec claim (held / stale-dead / unknown); the pid probe itself stays in run-registry.
+export { decideExecClaimTakeover } from './round-exec-claim.js';
+export type { ExecClaimVerdict, ExecClaimTakeoverInput } from './round-exec-claim.js';
 export * from './run-cleanup.js';
 
 export * from './cross-family-control.js';

package/src/lesson-payoff.ts

@@ -38,6 +38,7 @@ import { join } from 'node:path';
 
 import { LessonBandit, type ArmStats, type SerializedBanditState } from './lesson-bandit.js';
 import { withProjectLockSync } from './named-lock.js';
+import { uniqueStampedPath } from './stamped-path.js';
 import { readMemoryLearningConfig, type MemoryLearningConfig } from './patterns.js';
 
 // ── Paths and constants ─────────────────────────────────────────────────────────────────────────
@@ -383,7 +384,8 @@ function mutateBanditState(
         // Preserve the evidence before overwriting it — never delete, never "repair". This is the
         // ONE place a corrupt file is touched, and it is under the lock.
         const target = banditStatePath(projectRoot);
-        try { renameSync(target, `${target}.corrupt-${new Date().toISOString().replace(/[:.]/g, '-')}`); } catch { /* best-effort */ }
+        const stamp = new Date().toISOString().replace(/[:.]/g, '-');
+        try { renameSync(target, uniqueStampedPath(`${target}.corrupt-`, stamp, existsSync)); } catch { /* best-effort */ }
         logBanditEvent(projectRoot, { event: 'bandit-error', ts: new Date().toISOString(), op, reason });
       }
       const bandit = LessonBandit.deserialize(state.bandit);

package/src/pack-inventory.ts

@@ -36,6 +36,26 @@ export interface PublishSecretSeams {
   readonly tgzPathFor?: (dir: string) => string | undefined;
 }
 
+/**
+ * Share of NUL bytes above which a sample is binary. MEASURED 2026-09-21 (backlog d3841a3b): one NUL in
+ * 19 628 bytes of TypeScript made the old `includes(0)` sniff skip a packed TEXT file from the no-secrets scan.
+ */
+export const NUL_RATIO = 0.01;
+
+/**
+ * PURE binary sniff over the first bytes of a file: `true` iff NUL bytes exceed `NUL_RATIO` of the sample length.
+ * Empty ⇒ text. ONLY NULs count (fix round 1, F1): the rule this replaces skipped on a NUL and nothing else, so a
+ * criterion over other control bytes or UTF-8 validity would SKIP files the old rule SCANNED — a latin-1 source with
+ * a secret, a text with \x01 separators — and that is a fail-open regression. One NUL in 8 KiB is text and gets
+ * scanned; UTF-16 (about half NULs) is binary as before; a PNG with few NULs is scanned — harmless, the scan is read-only.
+ */
+export function looksBinarySample(sample: Buffer): boolean {
+  if (sample.length === 0) return false;
+  let nuls = 0;
+  for (const byte of sample) if (byte === 0) nuls++;
+  return nuls > NUL_RATIO * sample.length;
+}
+
 /** Scan the publish inventory as streams, retaining every coverage gap by name. */
 export function gatherPublishSecretFacts(root: string, packageDirs: readonly string[], seams: PublishSecretSeams = {}):
   { readonly secretFindings: readonly { label: string; name: string }[];
@@ -74,7 +94,7 @@ export function gatherPublishSecretFacts(root: string, packageDirs: readonly str
           let first = true;
           try {
             for (const chunk of reader(absolute, 1024 * 1024)) {
-              if (first && chunk.subarray(0, 8 * 1024).includes(0)) { binary = true; return; }
+              if (first && looksBinarySample(chunk.subarray(0, 8 * 1024))) { binary = true; return; }
               first = false;
               yield chunk;
             }

package/src/round-exec-claim.ts

@@ -0,0 +1,43 @@
+/**
+ * round-exec-claim-takeover (FR-1): the pure verdict behind `dz round exec`'s claim transaction.
+ *
+ * A round claimed by an `exec` whose process died (SIGTERM, OOM, reboot) used to refuse every later
+ * `exec` forever (backlog 280e914607397474). This decides — from facts the caller measured under the
+ * state lock — whether the standing claim is held, provably stale-dead, or unknowable:
+ *
+ * - `pidAlive === true`  ⇒ `held`, regardless of age (a live owner is never taken over);
+ * - `pidAlive === null`  ⇒ `unknown` (the probe was inconclusive — refusal is the safe side);
+ * - `pid` not a positive safe integer ⇒ `unknown` («no pid recorded») — nothing to probe;
+ * - `execClaimedAt` unparsable ⇒ `unknown` («claim time unreadable») — no age to debounce on;
+ * - `pidAlive === false` and age ≥ `staleMinutes` ⇒ `stale-dead` with the floored age;
+ * - `pidAlive === false` but younger ⇒ `held` — a just-died claim may be a restart in flight, and
+ *   the threshold is the debounce.
+ *
+ * Pure: no clock, no process table — `now` and `pidAlive` are inputs so the caller keeps the
+ * critical section short (`process.kill(pid, 0)`, NFR-1) and tests need no real processes.
+ */
+export type ExecClaimVerdict =
+  | { kind: 'held' }
+  | { kind: 'stale-dead'; ageMinutes: number }
+  | { kind: 'unknown'; reason: string };
+
+export type ExecClaimTakeoverInput = {
+  readonly execClaimedAt?: string | undefined;
+  readonly pid?: number | undefined;
+  readonly pidAlive: boolean | null;
+  readonly now: number;
+  readonly staleMinutes: number;
+};
+
+export function decideExecClaimTakeover(input: ExecClaimTakeoverInput): ExecClaimVerdict {
+  if (input.pidAlive === true) return { kind: 'held' };
+  if (input.pid === undefined || !Number.isSafeInteger(input.pid) || input.pid <= 0) {
+    return { kind: 'unknown', reason: 'no pid recorded' };
+  }
+  if (input.pidAlive === null) return { kind: 'unknown', reason: 'PID probe inconclusive' };
+  const claimedMs = input.execClaimedAt === undefined ? Number.NaN : Date.parse(input.execClaimedAt);
+  if (!Number.isFinite(claimedMs)) return { kind: 'unknown', reason: 'claim time unreadable' };
+  const ageMinutes = Math.floor((input.now - claimedMs) / 60_000);
+  if (ageMinutes >= input.staleMinutes) return { kind: 'stale-dead', ageMinutes };
+  return { kind: 'held' };
+}