@quolu/lattice 0.79.2 → 0.79.4

package/LICENSE

@@ -138,7 +138,7 @@ Patent notice: the design implemented by this software is the subject of Japanes
 patent application 特願2026-178950 (filed 2026-07-27).
 
 Commercial use requires a separate commercial license.
-Enquiries: kitepon@gmail.com
+Enquiries: quolu@kitepon.dev
 Whether such a license is granted, and on what terms, is decided case by case.
 
 Third-party components: the bundled structure sensor in `sensor/` is third-party work

package/README.ja.md

@@ -446,7 +446,7 @@ authoring入口と閉じる口の契約は
   中で使う場合を含みます
 
 **商用利用には**、別途の商用ライセンスが必要です。
-問い合わせは[kitepon@gmail.com](mailto:kitepon@gmail.com)へのメールで受け付けます。
+問い合わせは[quolu@kitepon.dev](mailto:quolu@kitepon.dev)へのメールで受け付けます。
 許諾するかどうか、どのような条件にするかは個別に判断します。
 
 同梱の構造sensor（[`sensor/`](sensor/)）は本repositoryへ吸収した第三者成果物で、

package/README.md

@@ -159,8 +159,14 @@ npm install -g @quolu/lattice
 lattice setup --json
 ```
 
-Requires **Node.js 22.13 or newer, except 25.x** (`engines: >=22.13 <25 || >=26`; Node 25's V8
-turboshaft WASM JIT breaks the bundled sensor, so it is blocked with a banner). The structure sensor ships inside the package — there is nothing
+Requires **Node.js 22.13 or newer** with the supported runtime ranges
+`>=22.13 <24.2 || >=24.22 <25 || >=26.10`. Node 24.2–24.21 and 26.0–26.9
+contain the [upstream cppgc Realm lifetime defect](https://github.com/nodejs/node/pull/65778),
+which can corrupt the heap during worker teardown. Use 24.22.0+ or 26.10.0+ on
+those release lines; Node 22 LTS remains supported. Node 25.x remains excluded
+because its V8 WASM JIT can crash while compiling tree-sitter grammars.
+
+The structure sensor ships inside the package — there is nothing
 else to install, and Lattice never falls back to a sensor on your `PATH`.
 
 `lattice setup`は既存のClaude・Codex・Grok・Cursor設定を検出し、LatticeのMCP登録、
@@ -385,7 +391,7 @@ Detailed operational notes (dashboard, bridge, actor environment, store transact
   regardless of whether Lattice itself is redistributed.
 
 **For commercial use**, a separate commercial license is required.
-Enquiries can be made by email at [kitepon@gmail.com](mailto:kitepon@gmail.com). Whether a
+Enquiries can be made by email at [quolu@kitepon.dev](mailto:quolu@kitepon.dev). Whether a
 license is granted, and on what terms, is decided case by case.
 
 The bundled structure sensor in [`sensor/`](sensor/) is third-party work absorbed into this

package/bin/lattice-bridge.mjs

@@ -2,8 +2,8 @@
 
 import { readBridgeConfig } from '../src/bridge-config.mjs';
 import {
-  bridgeDaemonVersionDrifted, readBridgeStopRequest, removeBridgeDaemonActiveMarker,
-  removeBridgeDaemonDescriptor, writeBridgeDaemonDescriptor, writeBridgeStopReceipt,
+  bridgeDaemonVersionDrifted, completeBridgeDaemonStop, readBridgeStopRequest,
+  writeBridgeDaemonDescriptor,
 } from '../src/bridge-daemon.mjs';
 import { createBridgeHubHeartbeatController } from '../src/bridge-hub-heartbeat.mjs';
 import { migrateBridgeToHub, retireBridgeTunnelLaunchAgent } from '../src/bridge-hub-migration.mjs';
@@ -31,25 +31,29 @@ if (typeof instanceToken !== 'string' || !/^[0-9a-f]{64}$/u.test(instanceToken))
 const controller = bridgeRuntimeController({ env, instanceToken,
   heartbeat: () => hubHeartbeat.lastHeartbeatSummary() });
 let timer;
-let closing = false;
+let closing = null;
+let stopping = null;
 let descriptorFingerprint = null;
 let heartbeatBinding = null;
 let checking = false;
 let failClosedError = null;
 let hubHeartbeatError = null;
-const close = async () => {
-  if (closing) return;
-  closing = true;
-  clearInterval(timer);
-  await controller.close();
+const close = () => {
+  if (closing === null) {
+    clearInterval(timer);
+    closing = controller.close();
+  }
+  return closing;
+};
+const stop = () => {
+  if (stopping === null) stopping = completeBridgeDaemonStop({ env, close });
+  return stopping;
 };
 
 try {
   const stopRequest = await readBridgeStopRequest({ env });
   if (stopRequest !== null) {
-    await writeBridgeStopReceipt({ nonce: stopRequest.nonce, env });
-    await removeBridgeDaemonDescriptor({ env });
-    await removeBridgeDaemonActiveMarker({ env });
+    await stop();
     process.exit(0);
   }
   const config = await readBridgeConfig({ env });
@@ -64,15 +68,12 @@ try {
 }
 
 timer = setInterval(async () => {
-  if (checking || closing) return;
+  if (checking || closing !== null || stopping !== null) return;
   checking = true;
   try {
     const stopRequest = await readBridgeStopRequest({ env });
     if (stopRequest !== null) {
-      await close();
-      await writeBridgeStopReceipt({ nonce: stopRequest.nonce, env });
-      await removeBridgeDaemonDescriptor({ env });
-      await removeBridgeDaemonActiveMarker({ env });
+      await stop();
       process.exit(0);
     }
     // A stale-version exit is a clean stop, not a failure: whatever supervises
@@ -83,9 +84,7 @@ timer = setInterval(async () => {
     if (Date.now() - lastVersionCheckAt >= BACKGROUND_CHECK_INTERVAL_MS) {
       lastVersionCheckAt = Date.now();
       if (await bridgeDaemonVersionDrifted({})) {
-        await close();
-        await removeBridgeDaemonDescriptor({ env });
-        await removeBridgeDaemonActiveMarker({ env });
+        await stop();
         process.exit(0);
       }
     }
@@ -122,9 +121,7 @@ timer = setInterval(async () => {
     }
     const config = await readBridgeConfig({ env });
     if (config === null || !config.enabled) {
-      await close();
-      await removeBridgeDaemonDescriptor({ env });
-      await removeBridgeDaemonActiveMarker({ env });
+      await stop();
       process.exit(0);
     }
     const binding = await controller.reconcile();
@@ -169,10 +166,20 @@ timer = setInterval(async () => {
     const fingerprint = JSON.stringify(failure);
     if (fingerprint !== failClosedError) process.stderr.write(`${fingerprint}\n`);
     failClosedError = fingerprint;
+    if (stopping !== null) {
+      // A failed terminal transition cannot be acknowledged or turned into exit 0.
+      clearInterval(timer);
+      process.exit(1);
+    }
     // Public traffic fails closed immediately. Keep only the local control loop alive so an
     // authenticated nonce stop request can still receive a socket-closed receipt.
     await controller.close();
   } finally { checking = false; }
 }, 250);
-process.once('SIGINT', () => close().finally(() => process.exit(0)));
-process.once('SIGTERM', () => close().finally(() => process.exit(0)));
+const stopOnSignal = () => stop().then(() => process.exit(0), (error) => {
+  process.stderr.write(`${JSON.stringify({ schema: 'lattice.bridge_daemon_error.v1',
+    code: error?.code ?? 'BRIDGE_DAEMON_STOP_FAILED', message: 'bridge daemon did not complete shutdown' })}\n`);
+  process.exit(1);
+});
+process.once('SIGINT', stopOnSignal);
+process.once('SIGTERM', stopOnSignal);

package/bin/lattice-dashboard-supervisor.mjs

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import path from 'node:path';
+import { superviseDashboard } from '../src/dashboard-supervisor.mjs';
+
+try {
+  const root = process.env.LATTICE_DASHBOARD_RUNTIME_DIR;
+  if (process.argv.length !== 3 || process.argv[2] !== root || !path.isAbsolute(root)) {
+    throw Object.assign(new Error('invalid supervisor runtime'), { code: 'DASHBOARD_SUPERVISOR_ARGUMENT_INVALID' });
+  }
+  await superviseDashboard({ args: [path.resolve(import.meta.dirname, 'lattice-dashboard.mjs'), '--supervised-runtime', root],
+    env: process.env, root: process.env.LATTICE_DASHBOARD_RUNTIME_DIR,
+    runId: process.env.LATTICE_DASHBOARD_LIFECYCLE_RUN });
+} catch (error) {
+  const code = /^[A-Z_]+$/u.test(error.code ?? '') ? error.code : 'DASHBOARD_SUPERVISOR_FAILED';
+  if (process.connected) process.send({ type: 'supervisor_error', code }, () => process.disconnect());
+  process.stderr.write(`${JSON.stringify({ code })}\n`);
+  process.exitCode = 1;
+}

package/bin/lattice-dashboard.mjs

@@ -14,8 +14,11 @@ import {
   createTodoGanttProjectRegistry,
   startTodoGanttDashboardServer,
 } from '../src/todo-gantt-live.mjs';
+import { dashboardLifecyclePhase } from '../src/dashboard-lifecycle-ipc.mjs';
 
 const args = process.argv.slice(2);
+if (args.length === 2 && args[0] === '--supervised-runtime' && process.connected
+  && args[1] === process.env.LATTICE_DASHBOARD_RUNTIME_DIR) args.splice(0, 2);
 if (args.length === 1 && (args[0] === '--help' || args[0] === '-h')) {
   process.stdout.write('Usage: lattice-dashboard\n');
   process.exit(0);
@@ -40,8 +43,10 @@ const storeCache = createTodoStoreCache();
 const readCachedStore = (repoRoot) => storeCache.read(repoRoot);
 
 async function synchronize() {
+  dashboardLifecyclePhase('registry');
   const active = await readVisibleTodoDashboardProjects({ env,
     projectHasActiveRun: async (entry) => {
+      dashboardLifecyclePhase('store');
       try {
         const store = await readCachedStore(entry.repo_root);
         const active = projectTodoStatus(store, TODO_STATUS_DISPATCH_ONLY).active_set.length > 0
@@ -51,8 +56,10 @@ async function synchronize() {
       } catch (error) {
         if (!reportedStoreReadFailures.has(entry.project_id)) {
           reportedStoreReadFailures.add(entry.project_id);
-          console.error(JSON.stringify({ schema: 'lattice.dashboard_project_store_error.v1',
-            project_id: entry.project_id, message: error instanceof Error ? error.message : String(error) }));
+          // This finite stage survives in the parent's receipt without project/error text.
+          // A lost supervisor leaves no stderr reader; do not create an EPIPE failure
+          // in an otherwise serving daemon by writing to its abandoned pipe.
+          dashboardLifecyclePhase('store_read_failed');
         }
         return false;
       }
@@ -103,28 +110,43 @@ let closing = null;
  */
 function close() {
   if (closing === null) {
+    dashboardLifecyclePhase('close');
     clearInterval(timer);
     closing = (async () => {
-      try { await forgetTodoDashboardDaemonRecord({ env }); } catch {}
-      await dashboard.close();
+      let cleanupFailure = false;
+      try { await forgetTodoDashboardDaemonRecord({ env }); }
+      catch { cleanupFailure = true; dashboardLifecyclePhase('cleanup_failed'); }
+      try { await dashboard.close(); }
+      catch (error) { dashboardLifecyclePhase('close_failed'); throw error; }
+      if (cleanupFailure) throw new Error('dashboard record cleanup failed');
     })();
   }
   return closing;
 }
 
 function exit(code) {
-  close().catch(() => {}).finally(() => process.exit(code));
+  close().then(() => process.exit(code), () => process.exit(code === 0 ? 1 : code));
 }
 
 await synchronize();
+dashboardLifecyclePhase('listen');
 const dashboard = await startTodoGanttDashboardServer({
   registry,
   port,
-  onShutdown: process.platform === 'win32' ? () => exit(0) : null,
+  onShutdown: process.platform === 'win32' ? () => {
+    dashboardLifecyclePhase('shutdown_request'); exit(0);
+  } : null,
 });
 await writeTodoDashboardDaemonRecord({ port: dashboard.port, env });
+dashboardLifecyclePhase('ready');
 const timer = setInterval(() => synchronize().then((count) => {
-  if (count === 0) exit(0);
-}).catch(() => exit(1)), 1_000);
-process.once('SIGINT', () => exit(0));
-process.once('SIGTERM', () => exit(0));
+  dashboardLifecyclePhase('periodic_sync');
+  if (count === 0) { dashboardLifecyclePhase('empty_shutdown'); exit(0); }
+}).catch(() => { dashboardLifecyclePhase('sync_failed'); exit(1); }), 1_000);
+process.on('message', (message) => {
+  if (message?.type === 'dashboard_shutdown') {
+    dashboardLifecyclePhase('shutdown_request'); exit(0);
+  }
+});
+process.once('SIGINT', () => { dashboardLifecyclePhase('shutdown_request'); exit(0); });
+process.once('SIGTERM', () => { dashboardLifecyclePhase('shutdown_request'); exit(0); });

package/docs/bridge-setup.md

@@ -119,6 +119,35 @@ bridgeが無効な間は以下すべてnullで、bridgeを有効にしている
 | `node_path`・`node_version` | そのprocessを実行しているNodeの実体pathと版 |
 | `bridge_path` | そのprocessが実行しているbridge script |
 
+**`dashboard_lifecycle`** — `bridge status --json`の読み取り専用の終了記録。
+`lattice.dashboard_lifecycle_status.v1`の`last_ensure`に起動・再利用・無応答拒否の判断、
+`active`に監視中のrun、`last_termination`に最後の実終了または監督消失を返す。
+読み取りでdaemonを起動したり欠測を補完したりしない。未導入の旧daemonには記録が無い。
+
+通常のdashboard起動は小さいsupervisorが子をwaitし、実終了の観測時刻・codeまたはsignal・最後の段階を
+所有runtimeの`lifecycle/`へ保存する。POSIXはprivate directory/file、Windowsは既存storeの所有境界を使う。
+64run、各16KiB・64段階イベントまでとし、activeや生存中の監視外childは削除しない。閉じた古いrunから
+整理し、満杯なら記録を捨てて起動を続けずtyped容量エラーで止める。stderr本文やproject本文は保存せず、
+byte数と先頭64KiBまでのdigestを残す。中断された一時fileも上限内で扱い、所有writerの死亡確認後に除去する。
+Windowsで記録の置換が一時的に拒否された場合は、所有pathを再検証しながら短い期限内だけ公開を待つ。
+解除されなければ元のfilesystem errorを伴う`DASHBOARD_LIFECYCLE_PUBLISH_FAILED`を返し、旧完全記録を保持する。
+
+Windowsの`observed_exit`は実waitで得たDWORDの`uint32`と`hex`を保持し、signalは`not_applicable`とする。
+`0xC0000005`等の値だけでは例外と外部TerminateProcessを区別できない。`termination_request`は自分のIPC終了要求と、
+FILETIMEで認証したhandleへのTerminateProcess要求・実GetExitCodeProcess結果を別に記録する。
+Nodeの疑似SIGTERMしか残らない場合はraw値を得た扱いにしない。
+
+supervisorだけがKILLなどで消えた場合、childは残して配信を継続する。Windowsではchildをdetachedで起動し、
+supervisorが所有するJobの終了に連動させない。通常の停止要求はIPCで送り、実childの終了をwaitする。
+次の通常ensureはchildのhealthと
+identityを確認し、同じdaemonを再利用する。監督消失後の過去の終了値・終了時刻はunknownのまま残す。
+OS再起動などでsupervisorとchildの両方が消えた場合も、観測できなかった終了値や理由はunknownのまま残す。
+周期LaunchAgentは従来のstableなCLI pathでensureするままで、plist・Node・信用設定の書換えは要らない。
+
+配信失敗のreceiptには、`reason`のtyped codeに加え、許可済みの`failure.stage`と`failure.subreason`が入る。
+段階は`heartbeat_registration`、`hub_listing`、`project_route`、欠測時の`unknown`であり、任意のerror detailや
+messageは写さない。配信確認の失敗は、daemonの死亡を示す判定には使わない。
+
 **`runtime_drift`** — 両者の食い違い。空配列は「差が無い」または「`runtime`が名乗っていないので
 判定できない」のどちらかである。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quolu/lattice",
-  "version": "0.79.2",
+  "version": "0.79.4",
   "description": "Schedulability compiler for multi-agent development: observe real code boundaries, refactor the conflicting seam, recompile the plan for parallel execution",
   "author": {
     "name": "Quo / クオ at kitepon.dev",
@@ -13,7 +13,7 @@
     "url": "git+https://github.com/kitepon/Lattice.git"
   },
   "engines": {
-    "node": ">=22.13 <25 || >=26"
+    "node": ">=22.13 <24.2 || >=24.22 <25 || >=26.10"
   },
   "bin": {
     "lattice": "bin/lattice.mjs",

package/sensor/dist/bin/lattice-sensor.js

@@ -125,32 +125,12 @@ async function loadLatticeSensor() {
 // which fails for ESM-only packages. This bypasses the transformation.
 // eslint-disable-next-line @typescript-eslint/no-implied-eval
 const importESM = new Function('specifier', 'return import(specifier)');
-// Block LatticeSensor on Node.js 25.x — V8's turboshaft WASM JIT has a Zone
-// allocator bug that reliably crashes when compiling tree-sitter
-// grammars (see #54, #81, #140). The previous behaviour was a soft
-// console.warn that scrolls off-screen before the OOM crash 30 seconds
-// later, leading to a steady stream of "what is this OOM" reports.
-// Hard-exit before any WASM work; allow override via env var for users
-// who patched V8 themselves or want to test a future fix.
-const nodeVersion = process.versions.node;
-const nodeMajor = parseInt(nodeVersion.split('.')[0] ?? '0', 10);
-if ((0, node_version_check_1.isNode25Affected)(nodeMajor)) {
-    process.stderr.write((0, node_version_check_1.buildNode25BlockBanner)(nodeVersion) + '\n');
-    if (!process.env.LATTICE_SENSOR_ALLOW_UNSAFE_NODE) {
-        process.exit(1);
-    }
-    // Override active — banner shown for visibility, continuing.
-}
-// Enforce the supported Node floor. `engines` in package.json only *warns* on
-// install (unless engine-strict), so hard-block here to actually keep users off
-// unsupported versions. Mirrors the Node 25 block above. See package.json `engines`.
-if (nodeMajor < node_version_check_1.MIN_NODE_MAJOR) {
-    process.stderr.write((0, node_version_check_1.buildNodeTooOldBanner)(nodeVersion) + '\n');
-    if (!process.env.LATTICE_SENSOR_ALLOW_UNSAFE_NODE) {
-        process.exit(1);
-    }
-    // Override active — banner shown for visibility, continuing.
-}
+// Keep the CLI and MCP bootstrap on the same runtime compatibility policy.
+const runtimeSupport = (0, node_version_check_1.evaluateNodeVersionGuard)(process.versions.node, Boolean(process.env.LATTICE_SENSOR_ALLOW_UNSAFE_NODE));
+if (runtimeSupport.banner !== null)
+    process.stderr.write(runtimeSupport.banner + '\n');
+if (runtimeSupport.blocked)
+    process.exit(1);
 // Re-exec with V8's `--liftoff-only` if it isn't already set, so tree-sitter's
 // large WASM grammars never hit the turboshaft Zone OOM (`Fatal process out of
 // memory: Zone`) on Node >= 22. No-op under the bundled launcher, which already

package/sensor/dist/bin/node-version-check.d.ts

@@ -1,5 +1,6 @@
 /**
- * Node.js version compatibility check.
+ * Shared Node.js compatibility policy for CLI and MCP bootstrap.
+ * Includes the Node cppgc Realm lifetime repair and the existing Node25 exclusion.
  *
  * Node 25.x has a V8 turboshaft WASM JIT Zone allocator bug that
  * reliably crashes LatticeSensor with `Fatal process out of memory: Zone`
@@ -36,4 +37,12 @@ export declare const MIN_NODE_MAJOR = 20;
  * (see ../ui/glyphs.ts for the rationale).
  */
 export declare function buildNodeTooOldBanner(nodeVersion: string): string;
+/** Node's cppgc Realm lifetime repair: nodejs/node#65778 (24.x backport#83b3431c). */
+export declare function isNodeRealmLifetimeAffected(nodeVersion: string): boolean;
+export declare function buildNodeRealmLifetimeBanner(nodeVersion: string): string;
+/** Shared bootstrap policy for the sensor CLI and the packaged MCP entry. */
+export declare function evaluateNodeVersionGuard(nodeVersion: string, overrideActive: boolean): {
+    blocked: boolean;
+    banner: string | null;
+};
 //# sourceMappingURL=node-version-check.d.ts.map

package/sensor/dist/bin/node-version-check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-version-check.d.ts","sourceRoot":"","sources":["../../src/bin/node-version-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAmBlE;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAkBjE"}
+{"version":3,"file":"node-version-check.d.ts","sourceRoot":"","sources":["../../src/bin/node-version-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAmBlE;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAkBjE;AAED,sFAAsF;AACtF,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAMxE;AAED,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAiBxE;AAED,6EAA6E;AAC7E,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAOlI"}

package/sensor/dist/bin/node-version-check.js

@@ -1,6 +1,7 @@
 "use strict";
 /**
- * Node.js version compatibility check.
+ * Shared Node.js compatibility policy for CLI and MCP bootstrap.
+ * Includes the Node cppgc Realm lifetime repair and the existing Node25 exclusion.
  *
  * Node 25.x has a V8 turboshaft WASM JIT Zone allocator bug that
  * reliably crashes LatticeSensor with `Fatal process out of memory: Zone`
@@ -13,6 +14,9 @@ exports.MIN_NODE_MAJOR = void 0;
 exports.buildNode25BlockBanner = buildNode25BlockBanner;
 exports.isNode25Affected = isNode25Affected;
 exports.buildNodeTooOldBanner = buildNodeTooOldBanner;
+exports.isNodeRealmLifetimeAffected = isNodeRealmLifetimeAffected;
+exports.buildNodeRealmLifetimeBanner = buildNodeRealmLifetimeBanner;
+exports.evaluateNodeVersionGuard = evaluateNodeVersionGuard;
 /**
  * Build the bordered banner shown when LatticeSensor detects an
  * unsupported Node.js major version (Node 25.x). Pinned via unit
@@ -81,4 +85,42 @@ function buildNodeTooOldBanner(nodeVersion) {
         sep,
     ].join('\n');
 }
+/** Node's cppgc Realm lifetime repair: nodejs/node#65778 (24.x backport#83b3431c). */
+function isNodeRealmLifetimeAffected(nodeVersion) {
+    const parts = nodeVersion.split('.');
+    const major = Number(parts[0]);
+    const minor = Number(parts[1]);
+    return (major === 24 && minor >= 2 && minor < 22)
+        || (major === 26 && minor < 10);
+}
+function buildNodeRealmLifetimeBanner(nodeVersion) {
+    const sep = '-'.repeat(72);
+    return [
+        sep,
+        `[LatticeSensor] Unsupported Node.js version: ${nodeVersion}`,
+        sep,
+        'This Node.js release has a cppgc wrapper/Realm lifetime defect.',
+        'Worker teardown can write to freed memory and corrupt the native heap.',
+        'Upstream repair: https://github.com/nodejs/node/pull/65778',
+        '',
+        'Fix: use Node.js 24.22.0+ on the 24.x line or 26.10.0+ on the 26.x line.',
+        'Supported Node.js 22 LTS is also outside this affected implementation.',
+        '',
+        'For a custom patched runtime only, the existing override is:',
+        '  LATTICE_SENSOR_ALLOW_UNSAFE_NODE=1 lattice sensor ...',
+        sep,
+    ].join('\n');
+}
+/** Shared bootstrap policy for the sensor CLI and the packaged MCP entry. */
+function evaluateNodeVersionGuard(nodeVersion, overrideActive) {
+    const nodeMajor = parseInt(nodeVersion.split('.')[0] ?? '0', 10);
+    let banner = null;
+    if (isNode25Affected(nodeMajor))
+        banner = buildNode25BlockBanner(nodeVersion);
+    else if (nodeMajor < exports.MIN_NODE_MAJOR)
+        banner = buildNodeTooOldBanner(nodeVersion);
+    else if (isNodeRealmLifetimeAffected(nodeVersion))
+        banner = buildNodeRealmLifetimeBanner(nodeVersion);
+    return { blocked: banner !== null && !overrideActive, banner };
+}
 //# sourceMappingURL=node-version-check.js.map

package/sensor/dist/bin/node-version-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-version-check.js","sourceRoot":"","sources":["../../src/bin/node-version-check.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAWH,wDAmBC;AAGD,4CAEC;AAmBD,sDAkBC;AAtED;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,gDAAgD,WAAW,EAAE;QAC7D,GAAG;QACH,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,wEAAwE;QACxE,EAAE;QACF,8BAA8B;QAC9B,+DAA+D;QAC/D,6EAA6E;QAC7E,EAAE;QACF,sDAAsD;QACtD,yDAAyD;QACzD,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,wDAAwD;AACxD,SAAgB,gBAAgB,CAAC,SAAiB;IAChD,OAAO,SAAS,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACU,QAAA,cAAc,GAAG,EAAE,CAAC;AAEjC;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,WAAmB;IACvD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,gDAAgD,WAAW,EAAE;QAC7D,GAAG;QACH,kCAAkC,sBAAc,gCAAgC;QAChF,yEAAyE;QACzE,sBAAsB;QACtB,EAAE;QACF,8BAA8B;QAC9B,+DAA+D;QAC/D,6EAA6E;QAC7E,EAAE;QACF,8CAA8C;QAC9C,yDAAyD;QACzD,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"node-version-check.js","sourceRoot":"","sources":["../../src/bin/node-version-check.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAWH,wDAmBC;AAGD,4CAEC;AAmBD,sDAkBC;AAGD,kEAMC;AAED,oEAiBC;AAGD,4DAOC;AA5GD;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,gDAAgD,WAAW,EAAE;QAC7D,GAAG;QACH,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,wEAAwE;QACxE,EAAE;QACF,8BAA8B;QAC9B,+DAA+D;QAC/D,6EAA6E;QAC7E,EAAE;QACF,sDAAsD;QACtD,yDAAyD;QACzD,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,wDAAwD;AACxD,SAAgB,gBAAgB,CAAC,SAAiB;IAChD,OAAO,SAAS,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACU,QAAA,cAAc,GAAG,EAAE,CAAC;AAEjC;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,WAAmB;IACvD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,gDAAgD,WAAW,EAAE;QAC7D,GAAG;QACH,kCAAkC,sBAAc,gCAAgC;QAChF,yEAAyE;QACzE,sBAAsB;QACtB,EAAE;QACF,8BAA8B;QAC9B,+DAA+D;QAC/D,6EAA6E;QAC7E,EAAE;QACF,8CAA8C;QAC9C,yDAAyD;QACzD,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,sFAAsF;AACtF,SAAgB,2BAA2B,CAAC,WAAmB;IAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;WAC5C,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,4BAA4B,CAAC,WAAmB;IAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,gDAAgD,WAAW,EAAE;QAC7D,GAAG;QACH,iEAAiE;QACjE,wEAAwE;QACxE,4DAA4D;QAC5D,EAAE;QACF,0EAA0E;QAC1E,wEAAwE;QACxE,EAAE;QACF,8DAA8D;QAC9D,yDAAyD;QACzD,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,SAAgB,wBAAwB,CAAC,WAAmB,EAAE,cAAuB;IACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,gBAAgB,CAAC,SAAS,CAAC;QAAE,MAAM,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;SACzE,IAAI,SAAS,GAAG,sBAAc;QAAE,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;SAC5E,IAAI,2BAA2B,CAAC,WAAW,CAAC;QAAE,MAAM,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;IACtG,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;AACjE,CAAC"}

package/sensor/dist/extraction/parse-pool.d.ts

@@ -105,6 +105,10 @@ export declare class ParseWorkerPool {
     private nextId;
     private totalCrashes;
     private destroyed;
+    private readonly lifecycle;
+    private readonly retiring;
+    private readonly retirement;
+    private destroying?;
     private readonly languages;
     private readonly maxSize;
     private readonly recycleInterval;
@@ -161,7 +165,10 @@ export declare class ParseWorkerPool {
      * this before its retry pass so crash-on-memory files get the cleanest heap.
      */
     recycleAll(): void;
-    /** Terminate all workers and reject any outstanding parses. */
+    /** Request natural exit once grammars have loaded; force only a wedged worker. */
+    private stopWorker;
+    private waitForShutdown;
+    /** Close all workers and reject outstanding parses. Also join prior recycling. */
     destroy(): Promise<void>;
 }
 //# sourceMappingURL=parse-pool.d.ts.map

package/sensor/dist/extraction/parse-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parse-pool.d.ts","sourceRoot":"","sources":["../../src/extraction/parse-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACpC,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;IACrD,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,GAAG,IAAI,CAAC;IACjD,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;CACrD;AAED;uFACuF;AACvF,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAuCD;;;;;;;GAOG;AACH;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAMxE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAGlF;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CASzF;AAyBD,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wFAAwF;IACxF,YAAY,CAAC,EAAE,MAAM,eAAe,CAAC;IACrC,wEAAwE;IACxE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CAC7C;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,IAAI,CAAyB;IACrC,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,QAAQ,CAAwC;IACxD,OAAO,CAAC,OAAO,CAA8B;IAG7C,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,SAAS,CAAS;IAE1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwB;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAwB;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAA6B;gBAEjD,IAAI,EAAE,sBAAsB;IAwBxC;;;;;;OAMG;IACH,OAAO,IAAI,IAAI;IAQf,mCAAmC;IACnC,IAAI,IAAI,IAAI,MAAM,CAAyB;IAE3C,qCAAqC;IACrC,IAAI,WAAW,IAAI,MAAM,CAA8B;IAEvD,mEAAmE;IACnE,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQxD,OAAO,CAAC,QAAQ;IAqBhB,OAAO,CAAC,SAAS;IAwCjB;4EACwE;IACxE,OAAO,CAAC,YAAY;IAYpB;yDACqD;IACrD,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,QAAQ;IAmBhB;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;IASjB,6EAA6E;IAC7E,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,KAAK;IA8Bb,OAAO,CAAC,MAAM;IASd;;;OAGG;IACH,UAAU,IAAI,IAAI;IAIlB,+DAA+D;IACzD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAe/B"}
+{"version":3,"file":"parse-pool.d.ts","sourceRoot":"","sources":["../../src/extraction/parse-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACpC,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;IACrD,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,GAAG,IAAI,CAAC;IACjD,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;CACrD;AAED;uFACuF;AACvF,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAiDD;;;;;;;GAOG;AACH;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAMxE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAGlF;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CASzF;AAyBD,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wFAAwF;IACxF,YAAY,CAAC,EAAE,MAAM,eAAe,CAAC;IACrC,wEAAwE;IACxE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CAC7C;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,IAAI,CAAyB;IACrC,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,QAAQ,CAAwC;IACxD,OAAO,CAAC,OAAO,CAA8B;IAG7C,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmD;IAC7E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiD;IAC5E,OAAO,CAAC,UAAU,CAAC,CAAgB;IAEnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwB;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAwB;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAA6B;gBAEjD,IAAI,EAAE,sBAAsB;IAwBxC;;;;;;OAMG;IACH,OAAO,IAAI,IAAI;IAQf,mCAAmC;IACnC,IAAI,IAAI,IAAI,MAAM,CAAyB;IAE3C,qCAAqC;IACrC,IAAI,WAAW,IAAI,MAAM,CAA8B;IAEvD,mEAAmE;IACnE,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQxD,OAAO,CAAC,QAAQ;IAkChB,OAAO,CAAC,SAAS;IAyCjB;4EACwE;IACxE,OAAO,CAAC,YAAY;IAYpB;yDACqD;IACrD,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,QAAQ;IAmBhB;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;IASjB,6EAA6E;IAC7E,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,KAAK;IA8Bb,OAAO,CAAC,MAAM;IASd;;;OAGG;IACH,UAAU,IAAI,IAAI;IAIlB,kFAAkF;IAClF,OAAO,CAAC,UAAU;YAUJ,eAAe;IA4B7B,kFAAkF;IAClF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAiBzB"}

package/sensor/dist/extraction/parse-pool.js

@@ -69,6 +69,8 @@ const MAX_CONCURRENT_SPAWN = 2;
  * orchestrator's retry pass and shouldn't trip this on a merely-crashy repo.
  */
 const CRASH_BUDGET = 100;
+/** Startup plus orderly shutdown deadline; wedged workers still have a backstop. */
+const SHUTDOWN_TIMEOUT_MS = 15_000;
 /**
  * Resolve the pool size from the `LATTICE_SENSOR_PARSE_WORKERS` override and the
  * machine's core count.
@@ -122,6 +124,10 @@ class ParseWorkerPool {
     nextId = 1;
     totalCrashes = 0;
     destroyed = false;
+    lifecycle = new WeakMap();
+    retiring = new Set();
+    retirement = new WeakMap();
+    destroying;
     languages;
     maxSize;
     recycleInterval;
@@ -204,10 +210,23 @@ class ParseWorkerPool {
         this.workers.add(w);
         this.pending.add(w);
         this.parseCounts.set(w, 0);
+        let started;
+        let gone;
+        const life = {
+            ready: new Promise((resolve) => { started = resolve; }),
+            exited: new Promise((resolve) => { gone = resolve; }),
+            started: () => started(), gone: () => gone(), didExit: false,
+        };
+        this.lifecycle.set(w, life);
         w.on('message', (m) => this.onMessage(w, (m ?? {})));
         w.on('error', (e) => this.onWorkerGone(w, `Worker error: ${e?.message ?? 'unknown'}`));
-        w.on('exit', (code) => { if (code !== 0)
-            this.onWorkerGone(w, `Worker exited with code ${code}`); });
+        w.on('exit', (code) => {
+            life.didExit = true;
+            life.started();
+            life.gone();
+            if (code !== 0)
+                this.onWorkerGone(w, `Worker exited with code ${code}`);
+        });
         // Load grammars; the worker replies 'grammars-loaded' and only then is idle.
         // Pre-read WASM bytes (when the orchestrator provided them) make this a
         // memory load instead of a per-spawn disk read.
@@ -215,6 +234,7 @@ class ParseWorkerPool {
     }
     onMessage(w, m) {
         if (m.type === 'grammars-loaded') {
+            this.lifecycle.get(w)?.started();
             if (!this.workers.has(w))
                 return; // recycled/destroyed before ready
             this.pending.delete(w);
@@ -279,11 +299,9 @@ class ParseWorkerPool {
     recycle(w) {
         this.log(`Recycling worker after ${this.parseCounts.get(w)} parses (heap: ${Math.round(process.memoryUsage().rss / 1024 / 1024)}MB RSS)`);
         this.removeWorker(w);
-        // Fire-and-forget: worker.terminate() can hang if WASM is wedged.
-        try {
-            void w.terminate();
-        }
-        catch { /* already gone */ }
+        // An idle worker can close its port and let Node finish outstanding native
+        // work. Windows crash captures coincide with forced V8 teardown here.
+        void this.stopWorker(w);
         if (this.healthy && !this.destroyed)
             this.spawnOne();
     }
@@ -399,10 +417,60 @@ class ParseWorkerPool {
         for (const w of [...this.idle])
             this.recycle(w);
     }
-    /** Terminate all workers and reject any outstanding parses. */
-    async destroy() {
-        if (this.destroyed)
-            return;
+    /** Request natural exit once grammars have loaded; force only a wedged worker. */
+    stopWorker(w) {
+        const existing = this.retirement.get(w);
+        if (existing)
+            return existing;
+        const stopping = this.waitForShutdown(w);
+        this.retirement.set(w, stopping);
+        this.retiring.add(stopping);
+        void stopping.finally(() => this.retiring.delete(stopping));
+        return stopping;
+    }
+    async waitForShutdown(w) {
+        const life = this.lifecycle.get(w);
+        let timer;
+        const force = async () => {
+            if (!life.didExit) {
+                try {
+                    await w.terminate();
+                }
+                catch { /* already gone */ }
+            }
+        };
+        const orderly = life.ready.then(async () => {
+            if (!life.didExit) {
+                try {
+                    w.postMessage({ type: 'shutdown' });
+                }
+                catch {
+                    await force();
+                    return;
+                }
+            }
+            await life.exited;
+        });
+        try {
+            await Promise.race([
+                orderly,
+                new Promise((resolve) => {
+                    timer = setTimeout(() => {
+                        this.log(`Parse worker did not exit after ${SHUTDOWN_TIMEOUT_MS}ms — forcing termination`);
+                        void force().then(resolve);
+                    }, SHUTDOWN_TIMEOUT_MS);
+                }),
+            ]);
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+    /** Close all workers and reject outstanding parses. Also join prior recycling. */
+    destroy() {
+        if (this.destroying)
+            return this.destroying;
         this.destroyed = true;
         const ws = [...this.workers];
         this.workers.clear();
@@ -414,7 +482,10 @@ class ParseWorkerPool {
         }
         this.inflight.clear();
         this.queue = [];
-        await Promise.all(ws.map((w) => Promise.resolve(w.terminate()).catch(() => { })));
+        for (const w of ws)
+            this.stopWorker(w);
+        this.destroying = Promise.all([...this.retiring]).then(() => { });
+        return this.destroying;
     }
 }
 exports.ParseWorkerPool = ParseWorkerPool;