@neta-art/cohub-cli 8.0.0 → 8.0.1

package/dist/commands/runtime.js

@@ -13,23 +13,23 @@ import { RuntimeSessionStore } from "../runtime/session-store.js";
 import { readRuntimeDiagnosticEvents, RuntimeDiagnosticReader, runtimeDiagnosticsDirectory, serializeDiagnosticError } from "../runtime/diagnostics.js";
 export { resolveLocalSpaceName, parseRuntimeHarnesses } from "../runtime/launch.js";
 const reportFailure = (cause) => {
-    process.stderr.write(`Runtime failed / Runtime 失败: ${serializeDiagnosticError(cause).message}\n`);
+    process.stderr.write(`Runtime failed: ${serializeDiagnosticError(cause).message}\n`);
     process.exitCode = 1;
 };
 export function registerRuntime(program) {
-    const runtime = program.command("runtime").description("Connect a local workspace / 连接本地工作区");
+    const runtime = program.command("runtime").description("Connect a local workspace");
     runtime.command("up [dir]")
-        .description("Connect local Harnesses and files / 连接本地 Harness 和文件")
-        .option("-s, --space <id>", "Target Space / 目标 Space")
-        .option("-n, --new", "Create a new Space / 创建新 Space")
-        .option("--name <name>", "New Space name / 新 Space 名称")
-        .option("-d, --detach", "Run in the background / 后台运行")
-        .option("--harness <name>", "Pi or Codex; repeatable / 可重复指定", (value, previous) => [...previous, value], [])
-        .option("--pi <path>", "Pi executable / Pi 可执行文件")
-        .option("--codex <path>", "Codex executable / Codex 可执行文件")
-        .option("-y, --yes", "Accept defaults and local execution / 接受默认选择并授权本地执行")
-        .option("--verbose", "Show diagnostic details / 显示诊断详情")
-        .option("--json", "JSON output / JSON 输出")
+        .description("Connect local Harnesses and files")
+        .option("-s, --space <id>", "Target Space")
+        .option("-n, --new", "Create a new Space")
+        .option("--name <name>", "New Space name")
+        .option("-d, --detach", "Run in the background")
+        .option("--harness <name>", "Pi or Codex; repeatable", (value, previous) => [...previous, value], [])
+        .option("--pi <path>", "Pi executable")
+        .option("--codex <path>", "Codex executable")
+        .option("-y, --yes", "Accept defaults and authorize local execution")
+        .option("--verbose", "Show diagnostic details")
+        .option("--json", "JSON output")
         .action(async (dir, options) => {
         try {
             await runtimeUp(program, dir, { ...options, json: jsonRequested(options) });
@@ -40,36 +40,36 @@ export function registerRuntime(program) {
     });
     for (const action of ["attach", "detach"])
         runtime.command(action)
-            .description(action === "attach" ? "Sync native Pi / Codex Turns / 同步原生 Pi / Codex 对话" : "Pause native sync; retain all receipts / 暂停原生同步，保留所有回执")
-            .option("-s, --space <id>", "Target Space / 目标 Space")
-            .option("--harness <name>", "Pi or Codex; repeatable / 可重复指定", (value, previous) => [...previous, value], [])
-            .option("--pi <path>", "Pi executable for capability checks / 用于能力检查的 Pi 路径")
-            .option("--codex <path>", "Codex executable for capability checks / 用于能力检查的 Codex 路径")
-            .option("-y, --yes", "Authorize project conversation and native archive uploads / 授权上传项目对话及原生归档")
-            .option("--json", "JSON output / JSON 输出")
+            .description(action === "attach" ? "Sync native Pi / Codex Turns" : "Pause native sync; retain all receipts")
+            .option("-s, --space <id>", "Target Space")
+            .option("--harness <name>", "Pi or Codex; repeatable", (value, previous) => [...previous, value], [])
+            .option("--pi <path>", "Pi executable for capability checks")
+            .option("--codex <path>", "Codex executable for capability checks")
+            .option("-y, --yes", "Authorize project conversation and native archive uploads")
+            .option("--json", "JSON output")
             .action(async (options) => {
             try {
                 const spaceId = await resolveRuntimeTarget(program, options.space);
                 const identity = currentIdentityKey();
                 if (!identity)
-                    throw new Error("Sign in first / 请先登录");
+                    throw new Error("Sign in first");
                 const root = await canonicalRuntimeRoot(process.cwd());
                 if (action === "attach" && (await getRuntimeSpaceBinding(root, identity))?.spaceId !== spaceId)
-                    throw new Error("Bind this directory with runtime up --space first / 请先使用 runtime up --space 绑定当前目录");
+                    throw new Error("Bind this directory with runtime up --space first");
                 const instance = await requestRuntimeInstance(runtimeInstanceDirectory(identity, spaceId));
                 if (action === "attach" && (!instance || instance.root !== root))
-                    throw new Error("Start this directory's Runtime first: cohub runtime up -d / 请先启动当前目录的 Runtime");
+                    throw new Error("Start this directory's Runtime first: cohub runtime up -d");
                 if (action === "attach" && !instance?.nativeSync)
-                    throw new Error("Restart the Runtime with this CLI before attaching / 请先使用新版 CLI 重启 Runtime，再接入原生客户端");
+                    throw new Error("Restart the Runtime with this CLI before attaching");
                 const harnesses = parseRuntimeHarnesses(options.harness.length ? options.harness : instance?.harnesses ?? ["pi", "codex"]);
                 if (action === "attach" && harnesses.some((harness) => !instance?.harnesses.includes(harness)))
-                    throw new Error("Enable these Harnesses with runtime up first / 请先通过 runtime up 启用对应 Harness");
+                    throw new Error("Enable these Harnesses with runtime up first");
                 if (action === "attach" && !options.yes) {
                     if (!process.stdin.isTTY)
-                        throw new Error("Use --yes to authorize native sync / 请使用 --yes 授权原生同步");
+                        throw new Error("Use --yes to authorize native sync");
                     const rl = createInterface({ input: process.stdin, output: process.stderr });
                     try {
-                        const answer = await rl.question(`Install user-level ${harnesses.join(" / ")} integration and upload this project's opened conversations, tool output and raw archives to this Space? History may contain secrets. [y/N]\n安装用户级原生集成，并将当前项目打开的对话、工具输出和原始归档上传至此 Space？历史可能包含敏感信息。[y/N] `);
+                        const answer = await rl.question(`Install user-level ${harnesses.join(" / ")} integration and upload this project's opened conversations, tool output and raw archives to this Space? History may contain secrets. [y/N] `);
                         if (!/^y(es)?$/i.test(answer.trim()))
                             return;
                     }
@@ -82,23 +82,23 @@ export function registerRuntime(program) {
                     outJson(result);
                 else
                     process.stdout.write(action === "attach"
-                        ? `Native sync enabled. Reload Pi or restart Codex and review its hook trust prompt. / 原生同步已启用。请重载 Pi 或重启 Codex，并审核 Hook 信任提示。\n${result.configPath}\n`
-                        : "Native sync paused; all local records retained / 原生同步已暂停，所有本地记录已保留\n");
+                        ? `Native sync enabled. Reload Pi or restart Codex and review its hook trust prompt.\n${result.configPath}\n`
+                        : "Native sync paused; all local records retained\n");
             }
             catch (cause) {
                 reportFailure(cause);
             }
         });
-    runtime.command("status").description("Local and server status / 本地与服务端状态")
-        .option("-s, --space <id>", "Target Space / 目标 Space")
-        .option("--json", "JSON output / JSON 输出")
+    runtime.command("status").description("Local and server status")
+        .option("-s, --space <id>", "Target Space")
+        .option("--json", "JSON output")
         .action(async (options) => {
         try {
             const spaceId = await resolveRuntimeTarget(program, options.space);
             const identity = currentIdentityKey();
             const local = identity ? await requestRuntimeInstance(runtimeInstanceDirectory(identity, spaceId)) : null;
             const space = createClient().space(spaceId);
-            const store = new RuntimeSessionStore(spaceId, { projectionSource: space });
+            const store = new RuntimeSessionStore(spaceId, { projectionSource: space, archiveTransport: null });
             const [remote, pendingLocalArchives, failedLocalArchives, nativeStores] = await Promise.all([
                 space.getRuntime(undefined, { signal: AbortSignal.timeout(5000) }).then((value) => ({ value, error: null })).catch((error) => ({ value: null, error: serializeDiagnosticError(error).message })),
                 store.archives.pendingCount(), store.archives.failedCaptureCount(),
@@ -112,26 +112,26 @@ export function registerRuntime(program) {
                 if (local)
                     printRuntimeSummary(local);
                 else
-                    process.stdout.write(`Local process / 本地进程  Not running / 未运行\nSpace / 空间  ${spaceId}\nLogs / 日志  ${result.diagnosticsPath}\n`);
-                process.stdout.write(`Server / 服务端  ${remote.error ? `Unknown / 未知 — ${remote.error}` : remote.value?.online ? "Harness connected / Harness 已连接" : "Offline / 离线"}\nArchives / 归档  ${pendingLocalArchives} pending / 待同步 · ${failedLocalArchives} failed / 失败\n`);
+                    process.stdout.write(`Local process  Not running\nSpace  ${spaceId}\nLogs  ${result.diagnosticsPath}\n`);
+                process.stdout.write(`Server  ${remote.error ? `Unknown — ${remote.error}` : remote.value?.online ? "Harness connected" : "Offline"}\nArchives  ${pendingLocalArchives} pending · ${failedLocalArchives} failed\n`);
                 if (nativeSessions.length)
-                    process.stdout.write(`Native chats / 原生对话  ${nativeSessions.length} · ${nativeSessions.reduce((sum, session) => sum + session.pendingTurns, 0)} Turns pending / Turn 待同步 · ${nativeSessions.reduce((sum, session) => sum + session.pendingArchives, 0)} archives pending / 归档待同步\n`);
+                    process.stdout.write(`Native chats  ${nativeSessions.length} · ${nativeSessions.reduce((sum, session) => sum + session.pendingTurns, 0)} Turns pending · ${nativeSessions.reduce((sum, session) => sum + session.pendingArchives, 0)} archives pending\n`);
             }
         }
         catch (cause) {
             reportFailure(cause);
         }
     });
-    runtime.command("down").description("Stop this local Runtime; retain all data / 停止本地 Runtime，保留所有数据")
-        .option("-s, --space <id>", "Target Space / 目标 Space")
-        .option("-y, --yes", "Stop even with unconfirmed executions / 确认停止包含未确认执行的 Runtime")
-        .option("--json", "JSON output / JSON 输出")
+    runtime.command("down").description("Stop this local Runtime; retain all data")
+        .option("-s, --space <id>", "Target Space")
+        .option("-y, --yes", "Stop even with unconfirmed executions")
+        .option("--json", "JSON output")
         .action(async (options) => {
         try {
             const spaceId = await resolveRuntimeTarget(program, options.space);
             const identity = currentIdentityKey();
             if (!identity)
-                throw new Error("Sign in to the Runtime account / 请登录 Runtime 所属账号");
+                throw new Error("Sign in to the Runtime account");
             const directory = runtimeInstanceDirectory(identity, spaceId);
             const local = await requestRuntimeInstance(directory, "stop", Boolean(options.yes));
             const until = Date.now() + 15_000;
@@ -146,33 +146,33 @@ export function registerRuntime(program) {
                 } // An unreachable control socket does not prove the process stopped.
             }
             if (running)
-                throw new Error("Runtime is still stopping; inspect logs / Runtime 仍在停止，请检查日志");
+                throw new Error("Runtime is still stopping; inspect logs");
             if (jsonRequested(options))
                 outJson({ spaceId, stopped: true });
             else
-                process.stdout.write("Runtime stopped; data retained / Runtime 已停止，数据已保留\n");
+                process.stdout.write("Runtime stopped; data retained\n");
         }
         catch (cause) {
             reportFailure(cause);
         }
     });
-    runtime.command("logs").description("Read local Runtime diagnostics / 查看本地 Runtime 日志")
-        .option("-s, --space <id>", "Target Space / 目标 Space")
-        .option("-l, --limit <count>", "Number of events / 事件数量", "100")
-        .option("--level <level>", "Minimum level: debug, info, warn, error / 最低级别", "info")
-        .option("-f, --follow", "Keep watching / 持续查看")
-        .option("--json", "Raw diagnostic events / 原始诊断事件")
+    runtime.command("logs").description("Read local Runtime diagnostics")
+        .option("-s, --space <id>", "Target Space")
+        .option("-l, --limit <count>", "Number of events", "100")
+        .option("--level <level>", "Minimum level: debug, info, warn, error", "info")
+        .option("-f, --follow", "Keep watching")
+        .option("--json", "Raw diagnostic events")
         .action(async (options) => {
         const controller = new AbortController();
         const stop = () => controller.abort();
         try {
             const spaceId = await resolveRuntimeTarget(program, options.space);
-            const store = new RuntimeSessionStore(spaceId, { projectionSource: createClient().space(spaceId) });
+            const store = new RuntimeSessionStore(spaceId, { projectionSource: createClient().space(spaceId), archiveTransport: null });
             const limit = Number(options.limit);
             if (!Number.isSafeInteger(limit) || limit < 1 || limit > 10_000)
-                throw new Error("Use a limit from 1 to 10000 / 数量范围为 1 到 10000");
+                throw new Error("Use a limit from 1 to 10000");
             if (!diagnosticLevels.includes(options.level))
-                throw new Error("Use debug, info, warn or error / 请使用有效日志级别");
+                throw new Error("Use debug, info, warn or error");
             const asJson = jsonRequested(options);
             const reader = new RuntimeDiagnosticReader(store.root);
             process.once("SIGINT", stop);
@@ -187,7 +187,7 @@ export function registerRuntime(program) {
                         process.stdout.write(asJson ? `${JSON.stringify(event)}\n` : formatDiagnostic(event, true));
                 if (!options.follow) {
                     if (!asJson && !events.length)
-                        process.stdout.write("No matching diagnostics / 未找到匹配日志\n");
+                        process.stdout.write("No matching diagnostics\n");
                     break;
                 }
                 await delay(1000, undefined, { signal: controller.signal }).catch(() => undefined);

package/dist/commands/sandboxd-binary.d.ts

@@ -1,4 +1,4 @@
-export declare const SANDBOXD_VERSION = "v2.54.0";
+export declare const SANDBOXD_VERSION = "v2.54.1";
 export declare class SandboxdDownloadError extends Error {
     name: string;
 }

package/dist/commands/sandboxd-binary.js

@@ -21,7 +21,13 @@ import { Readable } from "node:stream";
 // carries the optional workspace-search runner download. v2.53.1 already has
 // the native FSEvents backends and the `runtimeId` control frame, and older
 // releases stay usable through the compatibility readiness/restart path.
-export const SANDBOXD_VERSION = "v2.54.0";
+//
+// v2.54.1 keeps the same wire protocol and adds relay diagnostics: data-channel
+// pairing outlives the runner's dial timeout, dial failures distinguish a
+// timeout from an explicit rejection, and teardown-time websocket write
+// failures log at debug instead of warn. No new capability is required, so this
+// pin is a diagnostics upgrade only.
+export const SANDBOXD_VERSION = "v2.54.1";
 const BINARY_NAME = "cohub-sandboxd";
 // Public CDN prefix hosting the release archives (the repo is private, so the
 // GitHub Release assets are not publicly downloadable). Overridable for staging

package/dist/runtime/archive-store.d.ts

@@ -24,7 +24,9 @@ export declare class RuntimeArchiveStore {
     private flushing;
     private readonly capturing;
     private errorReporter;
-    constructor(root: string, transport?: ArchiveTransport | undefined);
+    constructor(root: string, transport?: ArchiveTransport | null | undefined);
+    /** Distinguishes "no transport configured" from transient upload failures. */
+    get hasTransport(): boolean;
     setErrorReporter(reporter: ((error: unknown, index?: HarnessArchiveIndex) => void) | null): void;
     pendingCount(): Promise<number>;
     failedCaptureCount(): Promise<number>;

package/dist/runtime/archive-store.js

@@ -49,6 +49,8 @@ export class RuntimeArchiveStore {
         this.root = root;
         this.transport = transport;
     }
+    /** Distinguishes "no transport configured" from transient upload failures. */
+    get hasTransport() { return this.transport != null; }
     setErrorReporter(reporter) {
         this.errorReporter = reporter;
     }

package/dist/runtime/connection.js

@@ -56,7 +56,7 @@ export async function serveRuntime(options) {
             if (options.signal.aborted)
                 return;
             if (outcome === "fatal")
-                throw new Error("Runtime connection rejected / Runtime 连接被拒绝，请检查权限或升级 CLI");
+                throw new Error("Runtime connection rejected; check permissions or upgrade the CLI");
             if (readyAt && Date.now() - readyAt >= 60_000) {
                 backoff = 500;
                 attempt = 0;
@@ -139,10 +139,11 @@ async function connect(options) {
         }
         socket.send(data);
     };
-    const stop = () => {
+    const closeTransport = () => socket.close();
+    const shutdown = () => {
         for (const execution of active.values())
             execution.controller.abort();
-        socket.close();
+        closeTransport();
     };
     const sendNative = (event) => new Promise((resolve, reject) => {
         if (!nativeChannelReady || !connectionId) {
@@ -161,7 +162,7 @@ async function connect(options) {
             reject(error instanceof Error ? error : new Error(String(error)));
         }
     });
-    options.signal.addEventListener("abort", stop, { once: true });
+    options.signal.addEventListener("abort", shutdown, { once: true });
     const heartbeat = setInterval(() => {
         const heartbeatAgeMs = Date.now() - lastHeartbeat;
         if (heartbeatAgeMs > 30_000) {
@@ -169,12 +170,7 @@ async function connect(options) {
                 ageMs: heartbeatAgeMs,
                 activeExecutions: active.size,
             }, { connectionId });
-            for (const execution of active.values()) {
-                log("error", "runtime.execution_heartbeat_timeout", {
-                    ageMs: heartbeatAgeMs,
-                }, executionContext(connectionId, execution));
-            }
-            stop();
+            closeTransport();
         }
         else if (connectionId) {
             try {
@@ -184,7 +180,7 @@ async function connect(options) {
                 log("warn", "runtime.heartbeat_send_failed", {
                     error: serializeDiagnosticError(error),
                 }, { connectionId });
-                stop();
+                closeTransport();
             }
             void options.token().then((next) => {
                 if (next !== currentToken) {
@@ -197,12 +193,12 @@ async function connect(options) {
                         log("warn", "runtime.auth_refresh_send_failed", {
                             error: serializeDiagnosticError(error),
                         }, { connectionId });
-                        stop();
+                        closeTransport();
                     }
                 }
             }).catch((error) => {
                 log("warn", "runtime.auth_refresh_failed", { error: serializeDiagnosticError(error) }, { connectionId });
-                stop();
+                closeTransport();
             });
         }
     }, 10_000);
@@ -227,12 +223,14 @@ async function connect(options) {
             }
             nativePending.clear();
             options.onDisconnected?.();
+            const executionMustStop = options.signal.aborted || fatal || conflict;
             for (const execution of active.values()) {
-                log("error", "runtime.execution_transport_lost", {
+                log(executionMustStop ? "error" : "warn", executionMustStop ? "runtime.execution_transport_invalidated" : "runtime.execution_transport_detached", {
                     code: event.code,
                     reason: event.reason,
                 }, executionContext(connectionId, execution));
-                execution.controller.abort();
+                if (executionMustStop)
+                    execution.controller.abort();
             }
             resolve();
         }, { once: true });
@@ -261,7 +259,7 @@ async function connect(options) {
         }
         catch (error) {
             log("error", "runtime.hello_failed", { error: serializeDiagnosticError(error) });
-            stop();
+            closeTransport();
         }
     });
     socket.addEventListener("message", (event) => {
@@ -274,6 +272,8 @@ async function connect(options) {
                 log("error", "runtime.protocol.invalid_json", { error: serializeDiagnosticError(error) }, { connectionId });
                 throw error;
             }
+            // Any inbound frame proves the transport is live; heartbeat frames are one case.
+            lastHeartbeat = Date.now();
             if (raw.type === "runtime.ready") {
                 const frame = runtimeReadySchema.parse(raw);
                 if (connectionId === frame.connectionId)
@@ -303,7 +303,6 @@ async function connect(options) {
             if (!connectionId)
                 throw new Error("Runtime handshake is incomplete");
             if (raw.type === "runtime.heartbeat") {
-                lastHeartbeat = Date.now();
                 return;
             }
             if (raw.type === "runtime.native.result") {
@@ -508,7 +507,17 @@ async function connect(options) {
             const emit = (value) => {
                 if (value.type === "message.commit")
                     durableEvents.push(value);
-                send({ type: "runtime.event", requestId: frame.requestId, event: value });
+                // Streaming is best-effort. A detached transport must not cancel local model or tool work;
+                // durable commits and the final result are replayed after reconnect.
+                if (disconnected.signal.aborted || socket.readyState !== WebSocket.OPEN || socket.bufferedAmount > RUNTIME_MAX_FRAME_BYTES)
+                    return;
+                try {
+                    send({ type: "runtime.event", requestId: frame.requestId, event: value });
+                }
+                catch (error) {
+                    if (!disconnected.signal.aborted && socket.readyState === WebSocket.OPEN)
+                        throw error;
+                }
             };
             execution.promise = (async () => {
                 try {
@@ -541,7 +550,10 @@ async function connect(options) {
                             frame.input.context = await requestContext(controller.signal);
                         }
                     }
-                    await options.store.recordResult(execution.result.state, frame.requestId, [...durableEvents, execution.result.event]);
+                    await options.store.recordResult(execution.result.state, frame.requestId, [...durableEvents, execution.result.event], execution.result.uncertainCleanup ? { uncertainCleanup: execution.result.uncertainCleanup } : undefined);
+                    if (execution.result.uncertainCleanup) {
+                        log("warn", "runtime.turn_cleanup_pending", { cleanup: execution.result.uncertainCleanup.error }, context);
+                    }
                     emit(execution.result.event);
                 }
                 catch (error) {
@@ -560,7 +572,7 @@ async function connect(options) {
             })();
         })().catch((error) => {
             log("error", "runtime.protocol_error", { error: serializeDiagnosticError(error) }, { connectionId });
-            stop();
+            closeTransport();
         });
     });
     readyTimer = setTimeout(() => {
@@ -568,7 +580,7 @@ async function connect(options) {
         socket.close(4408, "Runtime handshake timed out");
     }, 15_000);
     if (options.signal.aborted)
-        stop();
+        shutdown();
     try {
         await closed;
         await Promise.allSettled([...active.values()].map((entry) => entry.promise));
@@ -576,7 +588,7 @@ async function connect(options) {
     finally {
         clearTimeout(readyTimer);
         clearInterval(heartbeat);
-        options.signal.removeEventListener("abort", stop);
+        options.signal.removeEventListener("abort", shutdown);
     }
     if (unauthorized && !options.signal.aborted)
         await options.token(true);

package/dist/runtime/harness.d.ts

@@ -14,6 +14,10 @@ export type HarnessResult = {
     event: Extract<RuntimeExecutionEvent, {
         type: "turn.end";
     }>;
+    uncertainCleanup?: {
+        processGroupId: number;
+        error: string;
+    };
 };
 export declare function piContent(value: unknown): ContentBlock[];
 export declare function promptText(content: ContentBlock[]): string;

package/dist/runtime/harness.js

@@ -2,6 +2,7 @@ import { access, stat } from "node:fs/promises";
 import { constants } from "node:fs";
 import { delimiter, join, resolve, win32 } from "node:path";
 import { JsonRpcProcess, record } from "./json-rpc.js";
+import { ProcessCleanupUncertainError } from "./process-group.js";
 import { codexModelCatalog } from "./model-catalog.js";
 import { codexTokenTotals, codexUsage, subtractCodexTokens } from "./codex-usage.js";
 import { downloadPublicImage } from "../safe-remote-image.js";
@@ -85,6 +86,16 @@ async function finishHarnessTurn(store, state, message, resume, turnId, diagnost
     const archive = await store.archive(state, turnId, diagnosticContext).catch(() => null);
     return { state, event: { type: "turn.end", message, resume, archive } };
 }
+/** Close the RPC process. An unconfirmable cleanup degrades the result to uncertain, never masks it. */
+async function closeHarness(rpc, executionError) {
+    return rpc.close().then(() => undefined, (cleanupError) => {
+        const processGroupId = rpc.processGroupId;
+        if (!(cleanupError instanceof ProcessCleanupUncertainError) || processGroupId == null)
+            throw cleanupError;
+        const detail = executionError ? `; execution error: ${executionError}` : "";
+        return { processGroupId, error: `${cleanupError.message}${detail}` };
+    });
+}
 export async function discoverHarnesses(harnesses, options, cwd) {
     const models = [];
     await Promise.all(harnesses.map(async (harness) => {
@@ -133,6 +144,7 @@ export async function executePi(input, options, cwd, store, emit, signal, diagno
     let currentContent = [];
     let last = { ordinal: 0, content: [] };
     const abortEscalation = createAbortEscalation(rpc, signal, () => { void rpc.request("abort").catch(() => undefined); });
+    let uncertainCleanup;
     const stopFailureLogging = diagnostics
         ? rpc.onFailure((error) => diagnostics.log("error", "harness.rpc_process_failed", { error: serializeDiagnosticError(error) }, { ...diagnosticContext, component: "harness" }))
         : () => undefined;
@@ -235,17 +247,17 @@ export async function executePi(input, options, cwd, store, emit, signal, diagno
         abortEscalation.clear();
         stopFailureLogging();
         stopTimeoutLogging();
-        await rpc.close();
+        uncertainCleanup = await closeHarness(rpc, last.errorMessage);
     }
     if (signal.aborted)
         last = { ...last, stopReason: "aborted" };
-    return finishHarnessTurn(store, state, last, resume, input.turnId, {
-        component: "harness",
-        sessionId: input.sessionId,
-        turnId: input.turnId,
-        harness: "pi",
-        traceContext: input.traceContext,
-    });
+    return { ...await finishHarnessTurn(store, state, last, resume, input.turnId, {
+            component: "harness",
+            sessionId: input.sessionId,
+            turnId: input.turnId,
+            harness: "pi",
+            traceContext: input.traceContext,
+        }), ...(uncertainCleanup ? { uncertainCleanup } : {}) };
 }
 export function codexItemContent(item) {
     if (item.type === "agentMessage" || item.type === "plan")
@@ -295,6 +307,7 @@ export async function executeCodex(input, options, cwd, store, emit, signal, dia
         if (nativeTurnId)
             void rpc.request("turn/interrupt", { threadId: state.nativeSessionId, turnId: nativeTurnId }).catch(() => undefined);
     });
+    let uncertainCleanup;
     try {
         await initializeCodex(rpc);
         const threadOptions = {
@@ -451,17 +464,17 @@ export async function executeCodex(input, options, cwd, store, emit, signal, dia
         abortEscalation.clear();
         stopFailureLogging();
         stopTimeoutLogging();
-        await rpc.close();
+        uncertainCleanup = await closeHarness(rpc, final.errorMessage);
     }
     if (signal.aborted)
         final = { ...final, stopReason: "aborted" };
     if (usage)
         final = { ...final, usage };
-    return finishHarnessTurn(store, state, final, resume, input.turnId, {
-        component: "harness",
-        sessionId: input.sessionId,
-        turnId: input.turnId,
-        harness: "codex",
-        traceContext: input.traceContext,
-    });
+    return { ...await finishHarnessTurn(store, state, final, resume, input.turnId, {
+            component: "harness",
+            sessionId: input.sessionId,
+            turnId: input.turnId,
+            harness: "codex",
+            traceContext: input.traceContext,
+        }), ...(uncertainCleanup ? { uncertainCleanup } : {}) };
 }

package/dist/runtime/instance.js

@@ -23,7 +23,7 @@ async function readRecord(directory) {
     try {
         const value = JSON.parse(await readFile(join(directory, "owner.json"), "utf8"));
         if (!Number.isSafeInteger(value.pid) || typeof value.nonce !== "string" || typeof value.socket !== "string")
-            throw new Error("Invalid Runtime instance record / Runtime 实例记录无效");
+            throw new Error("Invalid Runtime instance record");
         return value;
     }
     catch (error) {
@@ -35,7 +35,7 @@ async function readRecord(directory) {
 function request(record, action, force = false) {
     return new Promise((resolve, reject) => {
         const socket = createConnection(record.socket);
-        const timer = setTimeout(() => { socket.destroy(); reject(new Error("Runtime control timed out / Runtime 控制连接超时")); }, 3000);
+        const timer = setTimeout(() => { socket.destroy(); reject(new Error("Runtime control timed out")); }, 3000);
         let buffer = "";
         let settled = false;
         const finish = (error, value) => {
@@ -51,7 +51,7 @@ function request(record, action, force = false) {
         };
         socket.on("connect", () => socket.write(`${JSON.stringify({ nonce: record.nonce, action, force })}\n`));
         socket.on("error", (error) => finish(error));
-        socket.on("close", () => finish(new Error("Runtime control closed / Runtime 控制连接已关闭")));
+        socket.on("close", () => finish(new Error("Runtime control closed")));
         socket.on("data", (chunk) => {
             buffer += chunk.toString();
             if (buffer.length > 64 * 1024) {
@@ -65,7 +65,7 @@ function request(record, action, force = false) {
                 if (response.error)
                     finish(new Error(response.error));
                 else if (response.nonce !== record.nonce || response.status?.pid !== record.pid)
-                    finish(new Error("Runtime identity changed / Runtime 身份已变化"));
+                    finish(new Error("Runtime identity changed"));
                 else
                     finish(undefined, response.status);
             }
@@ -95,7 +95,7 @@ export async function ownRuntimeInstance(directory, status, stop) {
     await mkdir(directory, { recursive: true, mode: 0o700 });
     return withRuntimeSpaceBindingsLock(async () => {
         if (await requestRuntimeInstance(directory))
-            throw new Error("Runtime already running; use status / Runtime 已在运行，请使用 status");
+            throw new Error("Runtime already running; use status");
         const socketPath = process.platform === "win32"
             ? `\\\\.\\pipe\\cohub-${createHash("sha256").update(directory).digest("hex").slice(0, 24)}`
             : join(directory, "control.sock");

package/dist/runtime/json-rpc.d.ts

@@ -17,6 +17,8 @@ export declare function harnessEnvironment(): NodeJS.ProcessEnv;
 export declare class JsonRpcProcess {
     private mode;
     private child;
+    /** Process-group id of the harness process, for deferred cleanup confirmation. */
+    get processGroupId(): number | null;
     private pending;
     private listeners;
     private failureListeners;

package/dist/runtime/json-rpc.js

@@ -50,6 +50,8 @@ export function harnessEnvironment() {
 export class JsonRpcProcess {
     mode;
     child;
+    /** Process-group id of the harness process, for deferred cleanup confirmation. */
+    get processGroupId() { return this.child.pid ?? null; }
     pending = new Map();
     listeners = new Set();
     failureListeners = new Set();