@quolu/lattice 0.69.0 → 0.69.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quolu/lattice",
-  "version": "0.69.0",
+  "version": "0.69.1",
   "description": "Schedulability compiler for multi-agent development: observe real code boundaries, refactor the conflicting seam, recompile the plan for parallel execution",
   "author": {
     "name": "Quo / クオ at kitepon.dev",

package/src/runtime-os-observation.mjs

@@ -3,6 +3,8 @@ import { realpath } from 'node:fs/promises';
 import { promisify } from 'node:util';
 
 const execFileAsync = promisify(execFile);
+const WINDOWS_UNIX_EPOCH_TICKS = 621_355_968_000_000_000n;
+const WINDOWS_TICKS_PER_MILLISECOND = 10_000n;
 
 // OS観測はobserverのlocaleへ依存させない。psのlstart書式（LC_TIME）と非ASCII argvの
 // エスケープ有無（LC_CTYPE）はlocaleで変わり、同じprocessでも観測者ごとにidentity digestが
@@ -25,6 +27,23 @@ export async function observeStartIdentityRaw(pid) {
   return stdout.trim();
 }
 
+/** OS固有のstart identityをUnix epoch millisecondsへ正規化する。raw identityの契約は変えない。 */
+export function processStartIdentityEpochMs(value) {
+  if (typeof value !== 'string') return null;
+  const raw = value.trim();
+  const parsed = Date.parse(raw);
+  if (Number.isFinite(parsed)) return parsed;
+  if (!/^[0-9]+$/u.test(raw)) return null;
+  const epochMs = (BigInt(raw) - WINDOWS_UNIX_EPOCH_TICKS) / WINDOWS_TICKS_PER_MILLISECOND;
+  if (epochMs < BigInt(Number.MIN_SAFE_INTEGER) || epochMs > BigInt(Number.MAX_SAFE_INTEGER)) return null;
+  return Number(epochMs);
+}
+
+/** processのstart identityをOS差のないUnix epoch millisecondsで返す。解釈不能ならnull。 */
+export async function observeStartIdentityEpochMs(pid) {
+  return processStartIdentityEpochMs(await observeStartIdentityRaw(pid));
+}
+
 /** processのargv（`ps -o command=`）の生文字列を返す。 */
 export async function observeArgv(pid) {
   const { stdout } = await execFileAsync('/bin/ps', ['-o', 'command=', '-p', String(pid)], { encoding: 'utf8', env: osObservationEnvironment() });

package/src/todo-dashboard-registry.mjs

@@ -8,6 +8,7 @@ import path from 'node:path';
 
 import packageJson from '../package.json' with { type: 'json' };
 import { isAuditPendingPhaseStatus } from './todo-audit-pending.mjs';
+import { observeStartIdentityEpochMs } from './runtime-os-observation.mjs';
 
 /**
  * The version of the code in THIS process. A daemon loads its modules once at
@@ -313,6 +314,24 @@ function processIsAlive(pid) {
   }
 }
 
+/**
+ * descriptorはdaemonが起動してから書かれるため、同じdaemonならOSが観測したbirthは
+ * descriptorのstarted_atより後にならない。後ならpidは別processへ再利用済みである。
+ * macOS/Linuxのlstartは秒精度だが、丸められたbirthが同じdaemonのdescriptor時刻を後回る
+ * ことはない。比較はstrict greaterだけにし、同じ秒のPID再利用は確定不能として拒否する。
+ * OS adapterがbirthを時刻として解釈できない時は不明のままにし、health遅延中daemonを
+ * 重複起動しない従来の拒否へ戻す。
+ */
+async function descriptorPidWasReused(descriptor, { observeProcessStartEpochMs }) {
+  try {
+    const observedAt = await observeProcessStartEpochMs(descriptor.pid);
+    const recordedAt = Date.parse(descriptor.started_at);
+    return Number.isFinite(observedAt) && Number.isFinite(recordedAt) && observedAt > recordedAt;
+  } catch {
+    return false;
+  }
+}
+
 function daemonRecordRef(refs, pid) {
   return path.join(refs.daemons, `${pid}.json`);
 }
@@ -508,7 +527,8 @@ export async function forgetTodoDashboardDaemonRecord({ env = process.env } = {}
 export async function ensureTodoDashboardDaemon({ env = process.env, spawnDaemon = spawn,
   signalProcess = process.kill, isProcessAlive = processIsAlive, startupTimeoutMs = 120_000,
   legacyStopTimeoutMs = 3_000, replacementIsProcessAlive = processIsAlive,
-  attestationTimeoutMs = 2_000, strayStopTimeoutMs = 3_000 } = {}) {
+  attestationTimeoutMs = 2_000, strayStopTimeoutMs = 3_000,
+  observeProcessStartEpochMs = observeStartIdentityEpochMs } = {}) {
   const refs = paths(env);
   await mkdir(refs.root, { recursive: true, mode: 0o700 });
   // 掃除と孤児の始末の機会はここしかない。daemonの起動は全daemonが必ず通る一点であり、
@@ -523,7 +543,8 @@ export async function ensureTodoDashboardDaemon({ env = process.env, spawnDaemon
       return existing;
     }
     if (validDaemonDescriptor(existing) && existingAttestation === null
-      && await isProcessAlive(existing.pid)) {
+      && await isProcessAlive(existing.pid)
+      && !await descriptorPidWasReused(existing, { observeProcessStartEpochMs })) {
       const error = new Error('dashboard daemon is alive but temporarily unresponsive');
       error.code = 'DASHBOARD_DAEMON_UNRESPONSIVE';
       throw error;