@oneie/claude 0.8.0 → 0.10.0

package/scripts/factory-repo.sh

@@ -57,6 +57,16 @@ head_() { printf '\n== %s\n' "$*"; }
 #                  that degrade to no-ops when absent             → ships
 #   monorepo-only  hard-asserts against THIS tree; refuses
 #                  without it                                     → never ships
+#
+# Why gc-content-check.sh is `needs-env` and not `portable`: it builds its own
+# sandbox and never reaches into this tree, so it is portable by behaviour — but
+# it must spell `one.ie/web/.astro` literally, because that path is hardcoded in
+# lib/gc-finished.sh's GC_EPHEMERAL default and a sandbox that used a neutral
+# name would stop exercising the filter it exists to test. Rather than teach the
+# matcher an exemption that would also silence a real reach (`$ROOT/one.ie/ai`
+# in close-owner.sh is the same shape), the bucket is the answer: needs-env
+# ships identically and claims less. /vespio § 0 — a misbehaving bucket is a
+# reclassification, not a bug.
 # ---------------------------------------------------------------------------
 manifest() {
   cat <<'MANIFEST'
@@ -64,29 +74,49 @@ portable       browser-check.mjs
 portable       chrome.mjs
 portable       do-analyze.sh
 portable       gate-reaper.sh
+portable       gate-watchdog.sh
+portable       health.sh
 portable       govern-bound-check.sh
 portable       factory-width.sh
+portable       factory-executor-check.mjs
+portable       factory-peak.sh
 portable       do-learn-loop.sh
 portable       do-promise-lint.sh
+portable       do-world-check.sh
 portable       do-recon-cache.sh
 portable       do-cycle-shape-check.sh
 portable       do-next.sh
 portable       do-plan-json.sh
 portable       do-test-gate.sh
 portable       do-tick.sh
+portable       do-prove-selftest.sh
 portable       do-validate-armed.py
+portable       factory-brief-check.sh
 portable       fixtures/triage-dupe.md
 portable       gate-run.sh
+portable       memory-index-budget.sh
+portable       gate-reaper-check.sh
 portable       govern-mem-check.sh
 portable       governor-escape-check.sh
+portable       lib/gc-finished.sh
 portable       lib/govern.sh
 portable       lib/govern.ts
 portable       package.json
 portable       w1-recon.ts
 portable       wf-check.mjs
 needs-env      cc-connect.sh
+needs-env      download-stats.sh
+needs-env      gh-traffic-capture.sh
+needs-env      verify-board-doors.sh
+needs-env      blocks-manifest-cached.sh
+needs-env      close-metrics.sh
+needs-env      close-owner.sh
+needs-env      do-close.sh
+needs-env      do-decide.sh
+needs-env      gc-content-check.sh
 needs-env      do-accept.sh
 needs-env      do-auto.sh
+needs-env      do-board.sh
 needs-env      do-derives-check.sh
 needs-env      do-fleet.sh
 needs-env      do-folder.sh
@@ -125,7 +155,16 @@ needs-env      reconcile-allow.txt
 needs-env      rubric-weights.json
 needs-env      w4-rubric.ts
 needs-env      govern-claims-check.sh
+needs-env      govern-order-check.sh
 needs-env      signal-watch.sh
+monorepo-only  thread-name-backfill.ts
+monorepo-only  signal-meta-backfill.ts
+monorepo-only  task-titles-dump.ts
+monorepo-only  CLAUDE.md
+monorepo-only  agent-actor-parity.sh
+monorepo-only  chat-context-check.sh
+monorepo-only  triage-shape-check.sh
+monorepo-only  deploy-ready.sh
 monorepo-only  substrate-env-parity.mjs
 monorepo-only  typedb-flake-check.sh
 monorepo-only  env-sync.sh
@@ -137,14 +176,24 @@ monorepo-only  orphan-modules.mjs
 needs-env      worktree-preview.sh
 needs-env      factory-walk.sh
 needs-env      factory-turn.sh
+needs-env      factory-emit.sh
+needs-env      factory-close-check.sh
+needs-env      preview-fd-check.sh
+portable       factory-review-check.mjs
+portable       pr-body.sh
+monorepo-only  deploy-record.sh
+monorepo-only  deploy-emit.sh
+needs-env      fixtures/factory-brief-real.md
 monorepo-only  agentverse-audit.sh
 monorepo-only  asi-walk.sh
 monorepo-only  cc-events-proof.sh
+monorepo-only  db-sync-lock-check.sh
 monorepo-only  skills-publish.sh
 monorepo-only  deploy.sh
 monorepo-only  factory-ship.sh
 monorepo-only  blocks-ratchet.sh
 monorepo-only  blocks-manifest.mjs
+monorepo-only  id-inventory.mjs
 monorepo-only  fleet-manifest.mjs
 monorepo-only  one-agents.mjs
 monorepo-only  blocks-render-probe.mjs
@@ -171,7 +220,9 @@ monorepo-only  livekit-ratchet.sh
 monorepo-only  outcome-pull.ts
 monorepo-only  promise-manifest.mjs
 monorepo-only  roles-check.sh
+monorepo-only  ad-copy-lint.sh
 monorepo-only  spine-canary.sh
+monorepo-only  worktree-up.sh
 monorepo-only  subdomains-proof.sh
 monorepo-only  sync-claude-mirror.sh
 monorepo-only  tg-listen.sh
@@ -179,10 +230,12 @@ monorepo-only  typedb-cluster-status.sh
 monorepo-only  typedb-env.sh
 monorepo-only  typedb-flap-recorder.sh
 monorepo-only  typedb-scratch.sh
+monorepo-only  deploy-schema-check.sh
 monorepo-only  typedb-probes/containment-probe.py
 monorepo-only  typedb-probes/panic-probe-version.py
 monorepo-only  typedb-probes/panic-probe.py
 monorepo-only  urls-lint.sh
+monorepo-only  redirect-lint.sh
 monorepo-only  deploy-dev.sh
 monorepo-only  fleet-status.sh
 monorepo-only  gen-dev-config.py
@@ -193,6 +246,8 @@ monorepo-only  tasks-claim-race.mjs
 monorepo-only  tasks-loop.sh
 monorepo-only  verify-fast.sh
 monorepo-only  vespio-sync.sh
+monorepo-only  sweep.sh
+monorepo-only  incident.sh
 MANIFEST
 }
 
@@ -302,6 +357,22 @@ build() {
     echo "refusing: $TARGET exists and is not empty" >&2; return 2
   fi
 
+  # RUN FROM THE MAIN TREE. ROOT derives from BASH_SOURCE and WS from its
+  # parent, so invoked as .claude/worktrees/<x>/.claude/scripts/factory-repo.sh
+  # both are wrong: ROOT names the worktree and WS names `worktrees/`. The
+  # scrub in portabilise() is written against those two strings, so every
+  # literal /Users/<you>/Server/one-ie in a tracked file survives it. Measured
+  # 2026-09-14 from .claude/worktrees/dev: the emit refused naming 10 files and
+  # 5 paths, NONE of them real — a false RED, and had the scrub been laxer it
+  # would have emitted a tree with the maintainer's disk in it. Same trap as
+  # land.sh and release.sh, one directory over.
+  if [ -f "$ROOT/.git" ]; then
+    echo "refusing: $ROOT is a linked worktree, not the main checkout." >&2
+    echo "  ROOT and WS would both be wrong and the scrub would miss every" >&2
+    echo "  absolute path. Run the MAIN tree's copy of this script." >&2
+    return 2
+  fi
+
   local STAGE; STAGE="$(mktemp -d)"
   # No RETURN trap: bash keeps a RETURN trap set inside a function as the
   # shell's trap, so it fires again (with STAGE unbound) on every later

package/scripts/factory-review-check.mjs

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+// classification: portable
+// Red proof for factory-executor.js's Review predicate — and it READS THE FILE.
+//
+// The first version of this checker defined OLD and NEW as two inline lambdas
+// and never opened the executor. It stayed green through two merges on
+// 2026-09-06 while the executor's own line was fail-open (`0*2 > 1` = false
+// for zero survivors). A checker that cannot see its subject proves nothing;
+// this one lifts the predicate out of the source with new Function, drives it
+// over the jury table beside the OLD shape, and fails closed if the lines it
+// expects are not in the file.
+import { readFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { dirname, join } from 'node:path'
+
+const here = dirname(fileURLToPath(import.meta.url))
+const file = process.argv[2] || join(here, '..', 'workflows', 'factory-executor.js')
+const src = readFileSync(file, 'utf8')
+
+// Lift the two lines that ARE the predicate. Anchored on the const names, not
+// on the arithmetic, so a wrong formula is caught by the table, not by the regex.
+const mAgainst = src.match(/^\s*const against = (.+)$/m)
+const mRefuted = src.match(/^\s*const refuted = (.+)$/m)
+if (!mRefuted) {
+  console.log(`RED  could not lift the Review predicate from ${file} — expected a \`const refuted = …\` line`)
+  process.exit(1)
+}
+// A pre-fix file has no `against` line; derive it so the OLD shape is DRIVEN and
+// fails on the table (a wrong verdict), rather than tripping the regex (a miss).
+const againstExpr = mAgainst ? mAgainst[1] : 'votes.filter((v) => v.refuted).length'
+let LIFTED
+try {
+  LIFTED = new Function('votes', `const against = ${againstExpr}; return ${mRefuted[1]};`)
+} catch (e) {
+  console.log(`RED  lifted predicate does not parse: ${e.message}`); process.exit(1)
+}
+const OLD = (v) => v.filter(x => x.refuted).length * 2 > Math.max(1, v.length)
+
+const R = { refuted: true }, A = { refuted: false }
+const cases = [
+  ['zero survivors (every lens threw)', [],            true,  'THE BUG: nobody voted, so nobody objected'],
+  ['1 lens, refutes',                   [R],           true,  'lone lens must bite'],
+  ['1 lens, approves',                  [A],           false, 'lone lens approves'],
+  ['2 lenses split 1-1',                [R, A],        true,  'a split jury is not an acquittal'],
+  ['2 lenses both refute',              [R, R],        true,  'unanimous against'],
+  ['2 lenses both approve',             [A, A],        false, 'unanimous for'],
+  ['3 lenses, 1 refutes',               [R, A, A],     false, 'a lone dissenter is not a majority'],
+  ['3 lenses, 2 refute',                [R, R, A],     true,  'majority against'],
+]
+let oldFails = 0, fileFails = 0
+console.log(`predicate lifted from ${file}\n  against = ${againstExpr}${mAgainst ? '' : '  (derived — file has no against line)'}\n  refuted = ${mRefuted[1]}\n`)
+console.log('case                                  want   OLD    FILE')
+for (const [name, votes, want, why] of cases) {
+  const o = OLD(votes), f = LIFTED(votes)
+  if (o !== want) oldFails++
+  if (f !== want) fileFails++
+  console.log(`${name.padEnd(36)} ${String(want).padEnd(6)} ${o === want ? ' ok  ' : 'RED  '} ${f === want ? ' ok' : 'RED'}   ${f !== want ? '<- FILE WRONG: ' + why : ''}`)
+}
+console.log(`\nOLD shape: ${oldFails} failure(s)  <- must be > 0 or this proof is worthless`)
+console.log(`FILE:      ${fileFails} failure(s)  <- must be 0`)
+process.exit(oldFails > 0 && fileFails === 0 ? 0 : 1)

package/scripts/factory-tasks-check.sh

@@ -22,6 +22,23 @@
 # pointed at production writes fabricated rungs into the graph the board reads.
 set -uo pipefail
 
+# _GATE — route a heavy compute through the machine governor. A gate_lock only
+# dedupes IDENTICAL work; a SLOT is what bounds N worktrees each running one of
+# these at once (measured 2026-09-07: three concurrent 2.5GB typecheckers, every
+# lock uncontended, load 171). Empty when already inside a gate, so a nested call
+# inherits the outer slot rather than taking a second one.
+#
+# Resolves gate-run.sh from its OWN directory, deliberately: an earlier version
+# keyed off $ROOT and got inserted above the line that sets it, so _GATE was
+# silently empty and every call ran ungoverned -- a fail-OPEN, which is the exact
+# defect this preamble exists to close.
+_GATE=()
+if [ "${GOVERN_IN_GATE:-0}" != "1" ]; then
+  _GR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/gate-run.sh"
+  [ -f "$_GR" ] && _GATE=( bash "$_GR" "compute:$(basename "${BASH_SOURCE[0]}")" -- )
+fi
+
+
 ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
 MODE="${1:-ladder-live}"
 
@@ -59,7 +76,7 @@ check_ladder_live() {
         TYPEDB_USERNAME="$TYPEDB_USERNAME" \
         TYPEDB_PASSWORD="$TYPEDB_PASSWORD" \
         TYPEDB_TEST_DB="$TYPEDB_TEST_DB" \
-        bunx vitest run src/lib/resolvers/factory-ladder-live.test.ts 2>&1)
+        "${_GATE[@]}" bunx vitest run src/lib/resolvers/factory-ladder-live.test.ts 2>&1)
 
   # An empty scratch db answers "Type label 'thing' not found" — the schema was never
   # loaded there. That is an environment gap, not a broken ladder.

package/scripts/fixtures/factory-brief-real.md

@@ -0,0 +1,44 @@
+You are the hand. Build task task:01a07591e5c350a306c93933: "In pages/components add a button > add this component to a page — it shows a list of pages in the workspace, you select the page to add the component, then edit the page or continue adding components".
+Notes from the board:
+SPEC (the title is the whole spec; the row's notes were empty — this brief was assembled by the launching session from a real read of the tree on 2026-09-06, every file:line verified).
+
+WHAT TO BUILD
+On /components (the Component Library gallery, ComponentBrowser.tsx), give every block an 'Add to page' affordance. Clicking it opens a picker listing the workspace's pages; choosing one appends that block to that page; after the write, offer two exits — 'Edit page' (link to the page editor) and 'Continue adding components' (dismiss the picker, stay in the gallery).
+
+BOTH RECEIVERS ALREADY EXIST — DO NOT WRITE A NEW ONE, DO NOT ADD AN API ROUTE.
+- pages:list — one.ie/web/src/lib/resolvers/pages.ts:670. Request { slug }. Returns { pages: [{ slug, title, status, updated_at }] } ordered by updated_at DESC. This is the picker's list. Returns { pages: [] } on any auth denial.
+- pages:add-block — one.ie/web/src/lib/resolvers/pages.ts:630. Request { slug, page, section: { component, props }, atIndex? }. atIndex omitted = append to end, which is what this feature wants. It already runs normalizeBlockProps(BLOCK_SCHEMA, ...) server-side, so send the block's defaultProps verbatim — do NOT normalize on the client.
+
+EXACT CALL-SITE PRECEDENT — copy this shape:
+one.ie/web/src/components/chat/BlockFrame.tsx:112-125. It is the same feature one surface over ('Add to page' from chat). Note its gate: `const canAddToPage = addToPage && !!slug && !!page`, its pending/added state machine, and `emitClick('ui:chat:add-to-page', { component })` before the call. Use `ask` from '@/lib/in/ask'. Emit a sibling signal name, e.g. 'ui:component-browser:add-to-page'.
+
+THE ONE DESIGN DECISION, ALREADY SETTLED — DO NOT RE-OPEN IT.
+/components is a genuinely PUBLIC route. pages/components.astro mounts <ComponentBrowser client:only="react" /> with a plain Layout and passes NO props, and ComponentBrowser takes none. It is NOT one of the slugless console pages: those (see pages/tasks.astro) call resolveRoom() and rewrite to /u/[slug]/..., and components.astro does neither. There is also no workspace-scoped mount — ComponentBrowser appears only in pages/components.astro and is referenced by components/puck/BlockFinder.tsx.
+
+So: derive the workspace slug SERVER-SIDE in pages/components.astro (from Astro.locals.workspaceContext?.workspace ?? Astro.locals.slug — verify which is right against how another workspace-aware page reads it) and pass it down as an optional `slug` prop to ComponentBrowser. When there is no session there is no slug, and the 'Add to page' button MUST NOT RENDER — same gate shape as BlockFrame's canAddToPage. An anonymous visitor keeps exactly today's public gallery, unchanged. Do NOT invent a client-side workspace read, do NOT add a new route, do NOT make /components members-only.
+
+WHERE THE BUTTON GOES
+ComponentBrowser.tsx has two surfaces for a block: the grid card (article, ~line 250) and PreviewModal (~line 143). Put the affordance in the PreviewModal footer at minimum — the modal is the block's detail view and already has a footer row. A card-level quick-add is welcome but must not swallow the card's existing onClick (which opens the preview).
+
+DONE LOOKS LIKE
+1. Signed in, /components → open any block → 'Add to page' → picker lists this workspace's real pages → pick one → success state → 'Edit page' and 'Continue adding components' both present and both work.
+2. The block actually lands: re-open that page in the editor and the block is there, rendered, at the end.
+3. Signed out, /components renders exactly as before with no 'Add to page' button anywhere.
+4. `cd one.ie/web && bun run verify:fast` green. Add a unit test for the picker gate (no slug ⇒ no button).
+
+CONSTRAINTS
+- 6-token palette only (hook:design-check blocks otherwise) — follow the existing var(--color-border) / text-font / bg-foreground idiom in this very file.
+- Do not regress the IntersectionObserver lazy-mount or the PreviewErrorBoundary; the gallery renders ~376 blocks.
+- Edit in a worktree, never on shared main.
+
+RULES, each one a recorded outage (text/factory-do.md § Concurrency):
+1. Work in YOUR OWN worktree, never the shared main tree. Slug: task-task:01a07591e5c350a306c93933.
+   UI task — run:  bash .claude/scripts/worktree-preview.sh up task-task:01a07591e5c350a306c93933 --route /components
+   It cuts the worktree from main, links node_modules CONTENTS (never the dir), copies .env, allocates a port (never sweeps), and hands you a URL only after 3 consecutive 200s. Use the path and URL it prints.
+2. NEVER `bun install` inside the worktree. NEVER symlink node_modules itself.
+3. Make the change the task describes — minimal, in the worktree. Write or extend the test that names the concrete failure this change prevents (input → wrong result). No test that guards a shape.
+4. Run only YOUR test file(s) in the worktree:  cd <wt>/one.ie/web && bunx vitest related --run <files>  — through bash ../../.claude/scripts/gate-run.sh doer -- … . Do NOT run the suite; factory-walk.sh runs the tier's lane after you.
+5. Commit in the worktree by EXPLICIT PATH (git add <file>...), message: "task(task:01a07591e5c350a306c93933): <what was measured>". Never git add -A.
+6. Report files from `git status --porcelain` / `git show --stat` in the worktree, never from memory.
+7. THE BRAIN AND THE EDGE (root CLAUDE.md, LOCKED): if the change adds or touches a receiver, it reads KV / BrainDO JSON — never typedbQuery — and writes to the brain fire-and-forget or via sync/. resolvers/factory.ts is the one exception. Prove the door: bash .claude/scripts/signal-watch.sh --local (with your preview as SIGNAL_WATCH_LOCAL) — a door over budget or reaching for the brain is red, and red closes nothing.
+If the task cannot be done as written, do the part that can, say exactly what you left out and why, and return committed:false rather than inventing scope.

package/scripts/flywheel-outcome.sh

@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+# flywheel-outcome.sh — the kill-switch for text/flywheel-todo.md.
+#
+# manifest: needs-env  (reads GATEWAY_API_KEY from one.ie/web/.dev.vars; read-only probes)
+#
+# Exits 0 only when the flywheel plan's goal is TRUE in production:
+#   1. a child's plan is not readable without auth        (rung 0)
+#   2. the router warms on the one shape it has learned    (read edge)
+#   3. the world routes tagged work to a head, not a model (namespace)
+#   4. a fresh caller with only the workspace key can recall a memory (memory IN)
+#   5. a second promise has settled-kept                   (the circuit)
+# Every probe is one HTTP call. Each prints its own line; the first red stops nothing —
+# all five run so the report shows which are still owed. Measured RED on 2026-09-15.
+set -u
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+K="$(grep -m1 '^GATEWAY_API_KEY' "$ROOT/one.ie/web/.dev.vars" | cut -d= -f2- | tr -d '"' | tr -d "'" | tr -d ' ')"
+[ -n "$K" ] || { echo "flywheel-outcome: no GATEWAY_API_KEY in one.ie/web/.dev.vars"; exit 2; }
+BASE="${ONE_API_URL:-https://one.ie}"
+ask() { curl -s -m 40 -X POST "$BASE/api/ask/$1" -H "Authorization: Bearer $K" -H 'Content-Type: application/json' -H 'User-Agent: flywheel-outcome/1' -d "$2"; }
+red=0
+say() { printf '  %-4s %s\n' "$1" "$2"; [ "$1" = "RED" ] && red=$((red+1)); }
+
+# 1 · rung 0
+code="$(curl -s -o /dev/null -w '%{http_code}' -m 30 -H 'User-Agent: flywheel-outcome/1' "$BASE/ehc/cyp-005/plan?as=cyp-voice")"
+if [ "$code" != "200" ]; then say OK "rung 0: /ehc/cyp-005/plan?as=cyp-voice → $code without auth"; else say RED "rung 0: /ehc/cyp-005/plan?as=cyp-voice → 200 without auth"; fi
+
+# 2 · router read edge
+r="$(ask world:pick-model '{"data":{"shape":"do:complex"}}')"
+reason="$(printf '%s' "$r" | python3 -c 'import json,sys
+try:
+  d=json.load(sys.stdin); r=d.get("result") or d; print(r.get("reason") or d.get("reason") or "?")
+except Exception: print("?")')"
+if [ "$reason" = "warmed" ]; then say OK "router: world:pick-model do:complex → warmed"; else say RED "router: world:pick-model do:complex → $reason"; fi
+
+# 3 · namespace
+a="$(ask world:route '{"data":{"tags":["engineering"],"workspace":"one"}}' | python3 -c 'import json,sys
+try:
+  d=json.load(sys.stdin); r=d.get("result") or d; print(r.get("actor") or "?")
+except Exception: print("?")')"
+# world:route is not deterministic across calls (measured 2026-09-15: `chairman` once, `model:sonnet` three
+# times in the same minute), so the actor read alone cannot be the gate. The deterministic half is the
+# count of tag→model rows in the store the verbs write to: 50 rows / 207.5 strength today, must be 0.
+tm="$(cd "$ROOT/one.ie/web" && npx wrangler d1 execute one-owners --remote --json --command "SELECT count(*) AS n FROM claw_paths WHERE source LIKE 'tag:%' AND target LIKE 'model:%'" 2>/dev/null | python3 -c 'import json,sys
+try: print(json.load(sys.stdin)[0]["results"][0]["n"])
+except Exception: print("?")')"
+case "$a" in model:*|factory-turn|"?") say RED "namespace: world:route engineering → $a; tag→model rows = $tm" ;;
+  *) if [ "$tm" = "0" ]; then say OK "namespace: world:route engineering → $a; tag→model rows = 0"; else say RED "namespace: world:route engineering → $a, but tag→model rows = $tm (need 0)"; fi ;; esac
+
+# 4 · memory IN
+n="$(ask meta:recall '{"data":{"match":"STRIPE_MODE"}}' | python3 -c 'import json,sys
+try:
+  d=json.load(sys.stdin); r=d.get("result") or d; print(len(r.get("hypotheses") or []))
+except Exception: print(0)')"
+if [ "${n:-0}" -ge 1 ]; then say OK "memory: meta:recall STRIPE_MODE → $n"; else say RED "memory: meta:recall STRIPE_MODE → ${n:-0}"; fi
+
+# 5 · the circuit — promises settled-kept (D1, read-only)
+kept="$(cd "$ROOT/one.ie/web" && npx wrangler d1 execute one-owners --remote --json --command "SELECT count(*) AS n FROM promises WHERE state='settled-kept'" 2>/dev/null | python3 -c 'import json,sys
+try: print(json.load(sys.stdin)[0]["results"][0]["n"])
+except Exception: print("?")')"
+if [ "$kept" != "?" ] && [ "$kept" -ge 2 ] 2>/dev/null; then say OK "circuit: promises settled-kept = $kept"; else say RED "circuit: promises settled-kept = $kept (need ≥ 2)"; fi
+
+echo "flywheel-outcome: $red of 5 RED"
+[ "$red" -eq 0 ]

package/scripts/gate-reaper-check.sh

@@ -0,0 +1,98 @@
+#!/usr/bin/env bash
+# gate-reaper-check.sh — what gate-reaper.sh reaps, and what it must never touch.
+#
+# manifest: portable
+#
+# WHY THIS EXISTS (measured 2026-09-05). Five `workerd` processes left behind by
+# dead `astro dev` sessions sat at ppid=1 for 33-63 minutes holding ~196MB, while
+# BOTH gate-reaper and machine-check printed "orphans: none". The reaper keys on
+# a gate SHAPE, and `workerd serve` was not one of the shapes, so nothing in the
+# harness could see them. They had to be found and killed by hand.
+#
+# The reaper's danger is symmetric, and this checker holds both ends:
+#   C1  an abandoned workerd under node_modules IS reaped
+#   C2  a LIVE workerd (parent alive) is NEVER reaped
+#   C3  a freshly reparented workerd is spared — the age floor still applies
+#   C4  a long-lived ppid=1 daemon that merely NAMES a gate word is spared
+#   C5  the pre-existing gate shapes still reap — no regression
+#   C6  a workerd outside node_modules is spared — not ours to kill
+#   R1  RED-PROOF: drop the workerd arm and C1 must FAIL
+#
+# Drives the REAL script with --once --dry-run against a STUBBED `ps`, so it
+# never reads the live process table and never signals anything.
+#
+#   bash .claude/scripts/gate-reaper-check.sh
+set -uo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+REAPER="$ROOT/.claude/scripts/gate-reaper.sh"
+SANDBOX="$(mktemp -d "${TMPDIR:-/tmp}/gate-reaper-check.XXXXXX")"
+trap 'rm -rf "$SANDBOX"' EXIT
+
+fails=0
+ok()  { printf '  \033[32mPASS\033[0m  %s\n' "$1"; }
+bad() { printf '  \033[31mFAIL\033[0m  %s\n' "$1"; fails=$((fails + 1)); }
+
+WD='node_modules/@cloudflare/workerd-darwin-arm64/bin/workerd serve --binary --experimental'
+
+# The fixture process table. Columns match `ps -Ao pid=,ppid=,etime=,command=`.
+cat > "$SANDBOX/table" <<EOF
+1001 1 45:00 /repo/someapp/web/$WD
+1002 29457 45:00 /repo/someapp/web/$WD
+1003 1 01:00 /repo/someapp/web/$WD
+1004 1 45:00 /repo/bin/cc-connect.sh daemon run verify
+1005 1 45:00 /usr/local/bin/workerd serve --binary --experimental
+1006 1 45:00 bash /repo/.claude/scripts/gate-run.sh verify -- bun run verify
+EOF
+
+# Stub `ps`: serve the fixture for the sweep's -Ao read, and a pgid for lookups.
+mkdir -p "$SANDBOX/bin"
+cat > "$SANDBOX/bin/ps" <<EOF
+#!/usr/bin/env bash
+for a in "\$@"; do case "\$a" in pgid=) echo "  9999"; exit 0 ;; esac; done
+cat "$SANDBOX/table"
+EOF
+chmod +x "$SANDBOX/bin/ps"
+
+run_reaper() { PATH="$SANDBOX/bin:$PATH" bash "$1" --once --dry-run 2>&1; }
+
+echo "── gate-reaper: reaps the abandoned, spares the live ──"
+out="$(run_reaper "$REAPER")"
+
+reaped() { grep -q "WOULD reap pid=$1 " <<<"$out"; }
+
+if reaped 1001; then ok "C1 abandoned workerd under node_modules is reaped"
+else bad "C1 abandoned workerd NOT reaped — the orphan shape is still invisible: $out"; fi
+
+if ! reaped 1002; then ok "C2 live workerd (parent alive) spared"
+else bad "C2 LIVE workerd would be reaped — this kills a running dev server"; fi
+
+if ! reaped 1003; then ok "C3 freshly reparented workerd spared by the age floor"
+else bad "C3 age floor not applied to workerd"; fi
+
+if ! reaped 1004; then ok "C4 ppid=1 daemon naming a gate word is spared"
+else bad "C4 cc-connect daemon would be reaped — exclusions broken"; fi
+
+if reaped 1006; then ok "C5 pre-existing gate-run.sh shape still reaps"
+else bad "C5 REGRESSION — gate-run.sh shape no longer reaped: $out"; fi
+
+if ! reaped 1005; then ok "C6 workerd outside node_modules spared"
+else bad "C6 would reap a workerd this tree did not spawn"; fi
+
+# ── R1  RED-PROOF: without the workerd arm, C1 must fail ─────────────────────
+GUTTED="$SANDBOX/gutted.sh"
+grep -v 'node_modules\*workerd" serve"\*) ;;' "$REAPER" > "$GUTTED"
+if [ "$(wc -l < "$GUTTED")" -eq "$(wc -l < "$REAPER")" ]; then
+  bad "R1 could not remove the workerd arm — anchor moved, this checker is blind"
+else
+  gout="$(run_reaper "$GUTTED")"
+  if grep -q "WOULD reap pid=1001 " <<<"$gout"; then
+    bad "R1 gutted reaper STILL reaped 1001 — C1 is not testing the new arm"
+  else
+    ok "R1 red-proof: without the arm 1001 is missed, so C1 has teeth"
+  fi
+fi
+
+echo
+if [ $fails -eq 0 ]; then echo "ALL GREEN — the reaper sees orphaned workerd and still spares live work"; exit 0; fi
+echo "RED — $fails check(s) failed"; exit 1

package/scripts/gate-reaper.sh

@@ -82,6 +82,15 @@ sweep() {
       *"tsc --noEmit"*) ;;
       *"astro check"*) ;;
       *"run verify"*|*"run test"*|*"run typecheck"*) ;;
+      # An `astro dev` / `wrangler dev` that dies leaves its workerd child behind,
+      # reparented and holding ~40MB for as long as the box is up. FIVE of them
+      # accumulated in one hour on 2026-09-05 (ages 33-63min, ~196MB) while both
+      # this reaper and machine-check reported "orphans: none" -- neither knew the
+      # shape, so nothing in the harness could see them. A LIVE workerd always has
+      # a live parent (astro dev, or wrangler), so the ppid==1 test above already
+      # spares it; the node_modules anchor keeps this to runtimes THIS tree spawned
+      # and away from any workerd a user runs by hand.
+      *node_modules*workerd" serve"*) ;;
       *) continue ;;
     esac
     # Belt and braces: never a daemon, an editor, or anything system-owned, even