@loucompanion/forge-bridge 0.1.3-dev.f66395c3ac21 → 0.1.3-dev.fbe15023cdfe

package/dist/session/session.types.js

@@ -2,11 +2,11 @@ import path from "node:path";
 export function parseRunOnceDispatchPacket(value) {
     const packet = asObject(value, "dispatch packet");
     const schemaVersion = requiredNumber(packet, "schemaVersion");
-    if (schemaVersion !== 1) {
+    if (schemaVersion !== 1 && schemaVersion !== 2) {
         throw new Error(`Unsupported dispatch schemaVersion: ${schemaVersion}`);
     }
     return {
-        schemaVersion: 1,
+        schemaVersion,
         userId: requiredString(packet, "userId"),
         workItem: parseWorkItem(packet.workItem),
         repo: parseRepo(packet.repo),
@@ -14,19 +14,163 @@ export function parseRunOnceDispatchPacket(value) {
         session: parseSession(packet.session),
         lease: parseLease(packet.lease),
         execution: parseExecution(packet.execution),
+        runtimeIntent: parseRuntimeIntent(packet.runtimeIntent),
         serverLocal: parseServerLocal(packet.serverLocal),
+        sandbox: parseSandbox(packet.sandbox, schemaVersion),
         pullRequest: parsePullRequest(packet.pullRequest),
         apiKeySecretGrant: parseApiKeySecretGrant(packet.apiKeySecretGrant),
+        apiKeySecretGrantHandle: parseApiKeySecretGrantHandle(packet.apiKeySecretGrantHandle),
         artifacts: parseArtifacts(packet.artifacts),
+        priorPhaseArtifacts: parsePriorPhaseArtifacts(packet.priorPhaseArtifacts),
         warmPathOverrides: parseWarmPathOverrides(packet.warmPathOverrides),
         qaBrowser: parseQaBrowser(packet.qaBrowser),
+        qaScope: parseQaScope(packet.qaScope ?? packet.qa_scope),
         qaRework: parseQaRework(packet.qaRework),
         architectRevision: parseArchitectRevision(packet.architectRevision),
+        architectDependencies: parseArchitectDependencies(packet.architectDependencies),
         storyDevelop: parseStoryDevelop(packet.storyDevelop),
         storyQa: parseStoryQa(packet.storyQa),
+        designerRefs: parseDesignerRefs(packet.designerRefs ?? packet.designer_refs),
         draft: parseDraftPrompt(packet.draft)
     };
 }
+function parseRuntimeIntent(value) {
+    if (value === undefined || value === null) {
+        return { executionClass: "managed_runtime", applicationRuntimeRequired: true };
+    }
+    const intent = asObject(value, "runtimeIntent");
+    const executionClass = requiredString(intent, "executionClass").trim().toLowerCase();
+    if (executionClass !== "analysis_only" && executionClass !== "managed_runtime") {
+        throw new Error("runtimeIntent.executionClass must be analysis_only or managed_runtime.");
+    }
+    const applicationRuntimeRequired = requiredBoolean(intent, "applicationRuntimeRequired");
+    if ((executionClass === "analysis_only") === applicationRuntimeRequired) {
+        throw new Error("runtimeIntent execution class and application runtime requirement are inconsistent.");
+    }
+    return { executionClass, applicationRuntimeRequired };
+}
+function parseSandbox(value, schemaVersion) {
+    if (value === undefined || value === null) {
+        if (schemaVersion === 2) {
+            throw new Error("sandbox is required for dispatch schemaVersion 2.");
+        }
+        return null;
+    }
+    const sandbox = asObject(value, "sandbox");
+    const executionMode = requiredString(sandbox, "executionMode");
+    if (executionMode !== "host" && executionMode !== "docker") {
+        throw new Error("sandbox.executionMode must be host or docker.");
+    }
+    const executionPolicy = requiredString(sandbox, "executionPolicy");
+    if (executionPolicy !== "host_allowed" && executionPolicy !== "sandbox_preferred" && executionPolicy !== "sandbox_required") {
+        throw new Error("sandbox.executionPolicy is invalid.");
+    }
+    return {
+        dispatchAttemptId: requiredString(sandbox, "dispatchAttemptId"),
+        executionLeaseId: requiredString(sandbox, "executionLeaseId"),
+        runnerInstanceId: requiredString(sandbox, "runnerInstanceId"),
+        executionMode,
+        executionPolicy,
+        networkPolicy: parseSandboxNetworkPolicy(sandbox.networkPolicy),
+        requestedResources: parseSandboxResourceRequest(sandbox.requestedResources),
+        runtime: optionalString(sandbox, "runtime"),
+        sandboxConfigCommitSha: optionalString(sandbox, "sandboxConfigCommitSha"),
+        inputCommitSha: optionalString(sandbox, "inputCommitSha"),
+        contractDigest: optionalString(sandbox, "contractDigest"),
+        imageDigest: optionalString(sandbox, "imageDigest"),
+        publicationMode: parsePublicationMode(sandbox.publicationMode),
+        publishGrantHandle: parsePublishGrantHandle(sandbox.publishGrantHandle)
+    };
+}
+function parsePublicationMode(value) {
+    if (value === undefined || value === null)
+        return "shared_filesystem";
+    if (value !== "bridge_push" && value !== "shared_filesystem")
+        throw new Error("sandbox.publicationMode is invalid.");
+    return value;
+}
+function parsePublishGrantHandle(value) {
+    if (value === undefined || value === null)
+        return null;
+    const handle = asObject(value, "sandbox.publishGrantHandle");
+    const grantId = requiredString(handle, "grantId");
+    const branch = requiredString(handle, "branch");
+    const expiresAt = requiredString(handle, "expiresAt");
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu.test(grantId)) {
+        throw new Error("sandbox.publishGrantHandle.grantId is invalid.");
+    }
+    if (branch.length > 240)
+        throw new Error("sandbox.publishGrantHandle.branch is too long.");
+    if (!Number.isFinite(Date.parse(expiresAt)))
+        throw new Error("sandbox.publishGrantHandle.expiresAt is invalid.");
+    return { grantId, branch, expiresAt };
+}
+function parseSandboxResourceRequest(value) {
+    if (value === undefined || value === null) {
+        return {
+            sandboxSlots: 1,
+            cpuMillis: 2000,
+            workerMemoryLimitBytes: 2 * 1024 ** 3,
+            serviceMemoryLimitBytes: 0,
+            runtimeOverheadBytes: 128 * 1024 ** 2,
+            memoryBytes: 2 * 1024 ** 3 + 128 * 1024 ** 2,
+            workspaceBytes: 10 * 1024 ** 3,
+            pids: 512,
+            buildSlots: 1
+        };
+    }
+    const resources = asObject(value, "sandbox.requestedResources");
+    const memoryBytes = boundedInteger(resources, "memoryBytes", 128 * 1024 ** 2, 512 * 1024 ** 3);
+    const hasMemoryBreakdown = ["workerMemoryLimitBytes", "serviceMemoryLimitBytes", "runtimeOverheadBytes"]
+        .some(key => resources[key] !== undefined && resources[key] !== null);
+    const workerMemoryLimitBytes = hasMemoryBreakdown
+        ? boundedInteger(resources, "workerMemoryLimitBytes", 128 * 1024 ** 2, 512 * 1024 ** 3)
+        : memoryBytes;
+    const serviceMemoryLimitBytes = hasMemoryBreakdown
+        ? boundedInteger(resources, "serviceMemoryLimitBytes", 0, 512 * 1024 ** 3)
+        : 0;
+    const runtimeOverheadBytes = hasMemoryBreakdown
+        ? boundedInteger(resources, "runtimeOverheadBytes", 0, 64 * 1024 ** 3)
+        : 0;
+    if (workerMemoryLimitBytes + serviceMemoryLimitBytes + runtimeOverheadBytes !== memoryBytes) {
+        throw new Error("sandbox.requestedResources memory breakdown must equal memoryBytes.");
+    }
+    return {
+        sandboxSlots: boundedInteger(resources, "sandboxSlots", 1, 4),
+        cpuMillis: boundedInteger(resources, "cpuMillis", 100, 64_000),
+        workerMemoryLimitBytes,
+        serviceMemoryLimitBytes,
+        runtimeOverheadBytes,
+        memoryBytes,
+        workspaceBytes: boundedInteger(resources, "workspaceBytes", 1024 ** 3, 10 * 1024 ** 4),
+        pids: boundedInteger(resources, "pids", 32, 65_536),
+        buildSlots: boundedInteger(resources, "buildSlots", 0, 4)
+    };
+}
+function parseSandboxNetworkPolicy(value) {
+    if (value === undefined || value === null)
+        return { mode: "offline", allowedHosts: [] };
+    const policy = asObject(value, "sandbox.networkPolicy");
+    const mode = requiredString(policy, "mode");
+    if (mode !== "offline" && mode !== "public_allowlist" && mode !== "open_public") {
+        throw new Error("sandbox.networkPolicy.mode is invalid.");
+    }
+    const rawHosts = policy.allowedHosts ?? [];
+    if (!Array.isArray(rawHosts) || rawHosts.some((host) => typeof host !== "string")) {
+        throw new Error("sandbox.networkPolicy.allowedHosts must be a string array.");
+    }
+    const allowedHosts = [...new Set(rawHosts.map(host => host.trim().toLowerCase()).filter(Boolean))];
+    if (allowedHosts.length > 128 || allowedHosts.some(host => !/^(?:\*\.)?(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z](?:[a-z0-9-]{0,61}[a-z0-9])?$/u.test(host))) {
+        throw new Error("sandbox.networkPolicy.allowedHosts contains an invalid hostname.");
+    }
+    if (mode !== "public_allowlist" && allowedHosts.length > 0) {
+        throw new Error("sandbox.networkPolicy.allowedHosts requires public_allowlist mode.");
+    }
+    if (mode === "public_allowlist" && allowedHosts.length === 0) {
+        return { mode: "offline", allowedHosts: [] };
+    }
+    return { mode, allowedHosts };
+}
 export function failureResult(summary, events = []) {
     return {
         schemaVersion: 1,
@@ -118,9 +262,45 @@ function parseDraftPrompt(value) {
     return {
         kind: requiredString(draft, "kind"),
         systemPrompt: requiredString(draft, "systemPrompt"),
-        userPrompt: requiredString(draft, "userPrompt")
+        userPrompt: requiredString(draft, "userPrompt"),
+        projectName: optionalString(draft, "projectName"),
+        repoName: optionalString(draft, "repoName"),
+        attachments: parseDraftAttachments(draft.attachments)
     };
 }
+function parseDraftAttachments(value) {
+    if (value === undefined || value === null) {
+        return [];
+    }
+    if (!Array.isArray(value)) {
+        throw new Error("draft.attachments must be an array when provided.");
+    }
+    return value.map((entry, index) => {
+        const attachment = asObject(entry, `draft.attachments[${index}]`);
+        const kind = requiredString(attachment, "kind").trim().toLowerCase();
+        if (kind !== "text" && kind !== "image") {
+            throw new Error(`draft.attachments[${index}].kind must be text or image.`);
+        }
+        const textContent = optionalString(attachment, "textContent");
+        const contentBase64 = optionalString(attachment, "contentBase64");
+        if (kind === "text" && textContent === null) {
+            throw new Error(`draft.attachments[${index}].textContent is required for text attachments.`);
+        }
+        if (kind === "image" && contentBase64 === null) {
+            throw new Error(`draft.attachments[${index}].contentBase64 is required for image attachments.`);
+        }
+        return {
+            index: optionalNonNegativeInteger(attachment, "index") ?? index,
+            fileName: requiredString(attachment, "fileName"),
+            contentType: optionalString(attachment, "contentType") ?? "",
+            kind,
+            byteCount: optionalNonNegativeInteger(attachment, "byteCount") ?? 0,
+            summary: optionalString(attachment, "summary") ?? "",
+            textContent,
+            contentBase64
+        };
+    });
+}
 function parseApiKeySecretGrant(value) {
     if (value === undefined || value === null) {
         return null;
@@ -133,6 +313,16 @@ function parseApiKeySecretGrant(value) {
         expiresAt: requiredString(grant, "expiresAt")
     };
 }
+function parseApiKeySecretGrantHandle(value) {
+    if (value === undefined || value === null)
+        return null;
+    const grant = asObject(value, "apiKeySecretGrantHandle");
+    return {
+        grantId: requiredString(grant, "grantId"),
+        provider: requiredString(grant, "provider"),
+        expiresAt: requiredString(grant, "expiresAt")
+    };
+}
 function parseServerLocal(value) {
     const serverLocal = asObject(value, "serverLocal");
     return {
@@ -197,6 +387,27 @@ function parseQaBrowser(value) {
         missingTargetReason: optionalString(qaBrowser, "missingTargetReason") ?? optionalString(qaBrowser, "missing_target_reason")
     };
 }
+function parseQaScope(value) {
+    if (value === undefined || value === null) {
+        return null;
+    }
+    const qaScope = asObject(value, "qaScope");
+    return {
+        schema_version: requiredNumber(qaScope, "schema_version"),
+        surface: parseOptionalStringArray(qaScope.surface, "qaScope.surface"),
+        required_evidence: parseOptionalStringArray(qaScope.required_evidence, "qaScope.required_evidence"),
+        not_applicable: parseOptionalStringArray(qaScope.not_applicable, "qaScope.not_applicable"),
+        browser_required: optionalBoolean(qaScope, "browser_required") ?? optionalBoolean(qaScope, "browserRequired") ?? false,
+        api_required: optionalBoolean(qaScope, "api_required") ?? optionalBoolean(qaScope, "apiRequired") ?? false,
+        source: optionalString(qaScope, "source"),
+        authority: optionalString(qaScope, "authority"),
+        confidence: optionalString(qaScope, "confidence"),
+        confirmed_by_user: optionalBoolean(qaScope, "confirmed_by_user") ?? optionalBoolean(qaScope, "confirmedByUser"),
+        locked: optionalBoolean(qaScope, "locked"),
+        derived_from: parseOptionalObject(qaScope.derived_from ?? qaScope.derivedFrom, "qaScope.derived_from"),
+        rationale: optionalString(qaScope, "rationale")
+    };
+}
 function parseQaAppLaunchTarget(value) {
     if (value === undefined || value === null) {
         return null;
@@ -211,6 +422,7 @@ function parseQaAppLaunchTarget(value) {
         command: optionalString(launchTarget, "command"),
         working_directory: optionalString(launchTarget, "working_directory"),
         ready_url: optionalString(launchTarget, "ready_url"),
+        managed_runtime_port: optionalString(launchTarget, "managed_runtime_port"),
         routes: Array.isArray(routes)
             ? routes.map((entry, index) => {
                 if (typeof entry !== "string") {
@@ -260,6 +472,34 @@ function parseArchitectRevision(value) {
         feedback: requiredString(revision, "feedback")
     };
 }
+function parseArchitectDependencies(value) {
+    if (value === undefined || value === null) {
+        return null;
+    }
+    const context = asObject(value, "architectDependencies");
+    const prerequisites = context.prerequisites;
+    if (!Array.isArray(prerequisites)) {
+        throw new Error("architectDependencies.prerequisites must be an array.");
+    }
+    return {
+        baseBranch: requiredString(context, "baseBranch").trim(),
+        prerequisites: prerequisites.map((entry, index) => {
+            const prerequisite = asObject(entry, `architectDependencies.prerequisites[${index}]`);
+            return {
+                storyId: requiredString(prerequisite, "storyId").trim(),
+                title: requiredString(prerequisite, "title").trim(),
+                scheduleIndex: optionalNonNegativeInteger(prerequisite, "scheduleIndex"),
+                waveIndex: optionalNonNegativeInteger(prerequisite, "waveIndex"),
+                featureScheduleIndex: optionalNonNegativeInteger(prerequisite, "featureScheduleIndex"),
+                expectedOutput: optionalString(prerequisite, "expectedOutput"),
+                handoffSummary: optionalString(prerequisite, "handoffSummary"),
+                dependencyReason: optionalString(prerequisite, "dependencyReason"),
+                pullRequestNumber: optionalPositiveInteger(prerequisite, "pullRequestNumber"),
+                targetBranch: requiredString(prerequisite, "targetBranch").trim()
+            };
+        })
+    };
+}
 function parseStoryDevelop(value) {
     if (value === undefined || value === null) {
         return null;
@@ -365,6 +605,58 @@ function parseStoryQaDependencies(value) {
         };
     });
 }
+function parseDesignerRefs(value) {
+    if (value === undefined || value === null) {
+        return null;
+    }
+    const context = asObject(value, "designerRefs");
+    const refs = context.refs;
+    if (!Array.isArray(refs)) {
+        throw new Error("designerRefs.refs must be an array.");
+    }
+    return {
+        schemaVersion: requiredNumber(context, "schemaVersion"),
+        kind: requiredString(context, "kind"),
+        ownerType: requiredString(context, "ownerType"),
+        ownerId: requiredString(context, "ownerId"),
+        projectId: requiredString(context, "projectId"),
+        repoId: requiredString(context, "repoId"),
+        title: requiredString(context, "title"),
+        refs: refs.map((entry, index) => parseDesignerRefAttachment(entry, index))
+    };
+}
+function parseDesignerRefAttachment(value, index) {
+    const attachment = asObject(value, `designerRefs.refs[${index}]`);
+    return {
+        ref: parseDesignerRef(attachment.ref, index),
+        reason: optionalString(attachment, "reason") ?? "",
+        required: requiredBoolean(attachment, "required"),
+        source: optionalString(attachment, "source") ?? "",
+        lineageKind: optionalString(attachment, "lineageKind") ?? optionalString(attachment, "lineage_kind") ?? "",
+        inheritedFromItemType: optionalString(attachment, "inheritedFromItemType") ?? optionalString(attachment, "inherited_from_item_type"),
+        inheritedFromItemId: optionalString(attachment, "inheritedFromItemId") ?? optionalString(attachment, "inherited_from_item_id"),
+        inheritedFromDesignerRefId: optionalString(attachment, "inheritedFromDesignerRefId") ?? optionalString(attachment, "inherited_from_designer_ref_id"),
+        addedByLane: optionalString(attachment, "addedByLane") ?? optionalString(attachment, "added_by_lane") ?? "",
+        sortOrder: requiredNumber(attachment, "sortOrder"),
+        createdAt: requiredString(attachment, "createdAt")
+    };
+}
+function parseDesignerRef(value, index) {
+    const designerRef = asObject(value, `designerRefs.refs[${index}].ref`);
+    return {
+        id: requiredString(designerRef, "id"),
+        projectId: requiredString(designerRef, "projectId"),
+        repoId: requiredString(designerRef, "repoId"),
+        refKey: requiredString(designerRef, "refKey"),
+        kind: requiredString(designerRef, "kind"),
+        path: requiredString(designerRef, "path"),
+        anchor: optionalString(designerRef, "anchor"),
+        title: optionalString(designerRef, "title") ?? "",
+        contentHash: requiredString(designerRef, "contentHash"),
+        commitSha: requiredString(designerRef, "commitSha"),
+        createdAt: requiredString(designerRef, "createdAt")
+    };
+}
 function parseStringArray(value, label) {
     if (!Array.isArray(value)) {
         throw new Error(`${label} must be an array.`);
@@ -376,6 +668,18 @@ function parseStringArray(value, label) {
         return entry.trim();
     });
 }
+function parseOptionalStringArray(value, label) {
+    if (value === undefined || value === null) {
+        return [];
+    }
+    return parseStringArray(value, label);
+}
+function parseOptionalObject(value, label) {
+    if (value === undefined || value === null) {
+        return null;
+    }
+    return asObject(value, label);
+}
 function parseArtifacts(value) {
     if (value === undefined || value === null) {
         return [];
@@ -397,6 +701,34 @@ function parseArtifacts(value) {
         };
     });
 }
+function parsePriorPhaseArtifacts(value) {
+    if (value === undefined || value === null) {
+        return [];
+    }
+    if (!Array.isArray(value)) {
+        throw new Error("priorPhaseArtifacts must be an array when provided.");
+    }
+    return value.map((entry, index) => {
+        const artifact = asObject(entry, `priorPhaseArtifacts[${index}]`);
+        const phase = requiredString(artifact, "phase").trim().toLowerCase().replace(/-/g, "_");
+        if (phase !== "implementation" && phase !== "self_review" && phase !== "validation") {
+            throw new Error(`priorPhaseArtifacts[${index}].phase must be implementation, self_review, or validation.`);
+        }
+        return {
+            workItemId: requiredString(artifact, "workItemId"),
+            artifactId: requiredString(artifact, "artifactId"),
+            cycleRunId: requiredString(artifact, "cycleRunId"),
+            phase,
+            status: requiredString(artifact, "status"),
+            producedAt: requiredString(artifact, "producedAt"),
+            sourcePath: requiredString(artifact, "sourcePath"),
+            verdictJson: requiredString(artifact, "verdictJson"),
+            report: optionalString(artifact, "report") ?? "",
+            verdictContentHash: requiredString(artifact, "verdictContentHash").toLowerCase(),
+            reportContentHash: requiredString(artifact, "reportContentHash").toLowerCase()
+        };
+    });
+}
 function asObject(value, label) {
     if (!value || typeof value !== "object" || Array.isArray(value)) {
         throw new Error(`${label} must be an object.`);
@@ -447,6 +779,16 @@ function optionalPositiveInteger(source, key) {
     }
     return value;
 }
+function optionalNonNegativeInteger(source, key) {
+    const value = source[key];
+    if (value === undefined || value === null) {
+        return null;
+    }
+    if (typeof value !== "number" || !Number.isInteger(value) || value < 0) {
+        throw new Error(`${key} must be a non-negative integer when provided.`);
+    }
+    return value;
+}
 function requiredNumber(source, key) {
     const value = source[key];
     if (typeof value !== "number" || !Number.isFinite(value)) {
@@ -454,3 +796,10 @@ function requiredNumber(source, key) {
     }
     return value;
 }
+function boundedInteger(source, key, minimum, maximum) {
+    const value = requiredNumber(source, key);
+    if (!Number.isSafeInteger(value) || value < minimum || value > maximum) {
+        throw new Error(`${key} must be an integer from ${minimum} through ${maximum}.`);
+    }
+    return value;
+}

package/dist/shared/path/path.js

@@ -4,7 +4,9 @@ export function isSubPath(root, candidate) {
     const normalizedRoot = path.resolve(root);
     const normalizedCandidate = path.resolve(candidate);
     const relative = path.relative(normalizedRoot, normalizedCandidate);
-    return relative === "" || (!!relative && !relative.startsWith("..") && !path.isAbsolute(relative));
+    return relative === "" || (relative !== ".."
+        && !relative.startsWith(`..${path.sep}`)
+        && !path.isAbsolute(relative));
 }
 export async function resolveExistingDirectoryPath(inputPath) {
     const stat = await fs.stat(inputPath);

package/dist/shared/process/host-process-recovery.d.ts

@@ -0,0 +1,12 @@
+import type { HostProcessSupervisorMetadata } from "./host-process-supervisor.js";
+export type HostProcessRecoveryOutcome = "absent" | "terminated" | "pid_reused" | "unverifiable";
+export interface HostProcessRecovery {
+    recover(metadata: HostProcessSupervisorMetadata): Promise<HostProcessRecoveryOutcome>;
+}
+/** Exact, birth-marker-fenced recovery for a process tree left by an old bridge. */
+export declare class ExactHostProcessRecovery implements HostProcessRecovery {
+    private readonly platform;
+    private readonly graceMs;
+    constructor(platform?: NodeJS.Platform, graceMs?: number);
+    recover(metadata: HostProcessSupervisorMetadata): Promise<HostProcessRecoveryOutcome>;
+}

package/dist/shared/process/host-process-recovery.js

@@ -0,0 +1,78 @@
+import { captureHostProcessIdentity } from "./host-process-supervisor.js";
+/** Exact, birth-marker-fenced recovery for a process tree left by an old bridge. */
+export class ExactHostProcessRecovery {
+    platform;
+    graceMs;
+    constructor(platform = process.platform, graceMs = 2_000) {
+        this.platform = platform;
+        this.graceMs = graceMs;
+    }
+    async recover(metadata) {
+        if (!processExists(metadata.rootPid))
+            return "absent";
+        if (!metadata.rootIdentity)
+            return "unverifiable";
+        const currentIdentity = captureHostProcessIdentity(metadata.rootPid, this.platform);
+        if (!currentIdentity)
+            return processExists(metadata.rootPid) ? "unverifiable" : "absent";
+        if (currentIdentity !== metadata.rootIdentity)
+            return "pid_reused";
+        if (this.platform === "win32") {
+            signalExactProcess(metadata.rootPid, "SIGTERM");
+        }
+        else {
+            signalExactProcessGroup(metadata.rootPid, "SIGTERM");
+        }
+        await waitForExit(metadata.rootPid, this.graceMs);
+        if (processExists(metadata.rootPid)) {
+            if (captureHostProcessIdentity(metadata.rootPid, this.platform) !== metadata.rootIdentity) {
+                return "pid_reused";
+            }
+            if (this.platform === "win32") {
+                signalExactProcess(metadata.rootPid, "SIGKILL");
+            }
+            else {
+                signalExactProcessGroup(metadata.rootPid, "SIGKILL");
+            }
+            await waitForExit(metadata.rootPid, this.graceMs);
+        }
+        if (processExists(metadata.rootPid)
+            && captureHostProcessIdentity(metadata.rootPid, this.platform) === metadata.rootIdentity) {
+            throw new Error("host_process_recovery_degraded: exact supervised process tree did not stop.");
+        }
+        return "terminated";
+    }
+}
+function processExists(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+function signalExactProcess(pid, signal) {
+    try {
+        process.kill(pid, signal);
+    }
+    catch (error) {
+        if (error.code !== "ESRCH")
+            throw error;
+    }
+}
+function signalExactProcessGroup(pid, signal) {
+    try {
+        process.kill(-pid, signal);
+    }
+    catch (error) {
+        if (error.code !== "ESRCH")
+            throw error;
+    }
+}
+async function waitForExit(pid, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline && processExists(pid)) {
+        await new Promise(resolve => setTimeout(resolve, 25));
+    }
+}

package/dist/shared/process/host-process-supervisor.d.ts

@@ -0,0 +1,57 @@
+import type { ChildProcess } from "node:child_process";
+export type HostProcessSupervisorStrategy = "windows_job_object" | "unix_process_group";
+export interface HostProcessSupervisionRequest {
+    readonly command: string;
+    readonly args: readonly string[];
+    readonly cwd: string;
+    readonly env?: Readonly<Record<string, string>>;
+}
+export interface HostProcessSupervisedLaunch {
+    readonly command: string;
+    readonly args: readonly string[];
+    readonly detached: boolean;
+    readonly supervisorId: string;
+    readonly strategy: HostProcessSupervisorStrategy;
+    readonly metadataPath: string;
+    readonly payloadPath?: string;
+    readonly readyPath?: string;
+    readonly startGrantPath?: string;
+    readonly commandDigest: string;
+}
+export interface HostProcessProviderReady {
+    readonly schemaVersion: 1;
+    readonly supervisorId: string;
+    readonly rootPid?: number;
+    readonly rootIdentity?: string | null;
+    readonly providerPid: number;
+    readonly providerCreatedAt: string;
+    readonly providerIdentity?: string | null;
+    readonly startAttempt: number;
+}
+export interface HostProcessSupervisorMetadata {
+    readonly schemaVersion: 1;
+    readonly supervisorId: string;
+    readonly strategy: HostProcessSupervisorStrategy;
+    readonly rootPid: number;
+    readonly rootCreatedAt: string;
+    readonly rootIdentity?: string | null;
+    readonly commandDigest: string;
+    readonly worktreePath: string;
+    readonly runtimeLeaseId: string;
+    readonly dispatchAttemptId: string;
+    readonly fencingToken: string;
+    readonly bridgePid: number;
+    readonly providerPid?: number;
+    readonly providerCreatedAt?: string;
+    readonly providerIdentity?: string | null;
+    readonly providerStartAttempt?: number;
+}
+export declare function resolveHostProcessSupervisedLaunch(request: HostProcessSupervisionRequest, resolvedCommand: string, resolvedArgs: readonly string[], platform?: NodeJS.Platform): HostProcessSupervisedLaunch | null;
+export declare function persistHostProcessSupervisorMetadata(launch: HostProcessSupervisedLaunch, request: HostProcessSupervisionRequest, rootPid: number, rootCreatedAt: string, providerReady?: HostProcessProviderReady): HostProcessSupervisorMetadata;
+/**
+ * Captures an OS-issued process birth marker. Recovery compares this marker
+ * before signalling a persisted PID so PID reuse can never redirect cleanup
+ * at an unrelated process.
+ */
+export declare function captureHostProcessIdentity(pid: number, platform?: NodeJS.Platform): string | null;
+export declare function terminateHostProcessTree(child: ChildProcess, launch: HostProcessSupervisedLaunch | null, graceMs?: number): Promise<void>;