@selesai/code 0.8.3 → 0.8.5

package/dist/extensions/pi-subagents/test/unit/pi-coding-agent-dir.test.ts

@@ -91,12 +91,13 @@ describe("SELESAI_CODING_AGENT_DIR runtime paths", () => {
 
 		process.env.SELESAI_CODING_AGENT_DIR = agentDir;
 		const configPath = path.join(agentDir, "extensions", "subagent", "config.json");
-		writeFile(configPath, JSON.stringify({ asyncByDefault: true, maxSubagentDepth: 3, artifactDir: "session" }));
+		writeFile(configPath, JSON.stringify({ asyncByDefault: true, maxSubagentDepth: 3, artifactDir: "session", artifactConfig: { cleanupDays: 9007199254740991 } }));
 
 		const config = loadConfig();
 		assert.equal(config.asyncByDefault, true);
 		assert.equal(config.maxSubagentDepth, 3);
 		assert.equal(config.artifactDir, "session");
+		assert.equal(config.artifactConfig?.cleanupDays, Number.MAX_SAFE_INTEGER);
 	});
 
 	it("discovers user agents, chains, and settings under the configured agent dir", () => {
@@ -120,7 +121,7 @@ Inspect env.
 		writeFile(settingsPath, JSON.stringify({
 			subagents: {
 				agentOverrides: {
-					builder: { systemPrompt: "Use env-rooted settings." },
+					worker: { systemPrompt: "Use env-rooted settings." },
 				},
 			},
 		}, null, 2));
@@ -132,10 +133,10 @@ Inspect env.
 		assert.ok(discovered.user.find((agent) => agent.name === "env-agent" && agent.filePath === path.join(agentDir, "agents", "env-agent.md")));
 		assert.ok(discovered.chains.find((chain) => chain.name === "env-chain" && chain.filePath === path.join(agentDir, "chains", "env-chain.chain.md")));
 
-		const builder = discovered.builtin.find((agent) => agent.name === "builder");
-		assert.equal(builder?.systemPrompt, "Use env-rooted settings.");
-		assert.equal(builder?.override?.path, settingsPath);
-		assert.equal(builder?.override?.scope, "user");
+		const worker = discovered.builtin.find((agent) => agent.name === "worker");
+		assert.equal(worker?.systemPrompt, "Use env-rooted settings.");
+		assert.equal(worker?.override?.path, settingsPath);
+		assert.equal(worker?.override?.scope, "user");
 
 		const createdName = "created-env-agent";
 		const created = handleCreate(
@@ -181,14 +182,14 @@ Package skill content.
 	});
 
 	it("records private redacted run history and cleans session artifacts under the configured agent dir", () => {
-		const task = "Inspect customer ACME token=SECRET";
+		const task = "PROMPT_AUDIT_SENTINEL_1021 Inspect customer ACME token=SECRET";
 		recordRun("env-agent", task, 0, 42);
 		const historyPath = path.join(agentDir, "run-history.jsonl");
 		assert.equal(fs.existsSync(historyPath), true);
 		assertPrivateHistoryModes(historyPath);
 
 		const rawHistory = fs.readFileSync(historyPath, "utf-8");
-		assert.doesNotMatch(rawHistory, /Inspect customer|ACME|SECRET/);
+		assert.doesNotMatch(rawHistory, /PROMPT_AUDIT_SENTINEL_1021|Inspect customer|ACME|SECRET/);
 		assert.match(rawHistory, /"task":"\[redacted\]"/);
 		assert.match(rawHistory, /"taskHash":"[a-f0-9]{64}"/);
 
@@ -204,6 +205,9 @@ Package skill content.
 		fs.utimesSync(artifactPath, oldTime, oldTime);
 
 		cleanupAllArtifactDirs(0);
+		assert.equal(fs.existsSync(artifactPath), true);
+
+		cleanupAllArtifactDirs(1 / 24 / 60 / 60 / 1000);
 		assert.equal(fs.existsSync(artifactPath), false);
 	});
 
@@ -225,6 +229,18 @@ Package skill content.
 		assert.throws(() => updateConfig((config) => config), /config\.artifactDir must be "project", "session", or "temp"/);
 	});
 
+	it("loads and validates Fleet keybinding config", () => {
+		const configPath = path.join(agentDir, "extensions", "subagent", "config.json");
+		writeFile(configPath, JSON.stringify({ fleetKeybindings: { pageUp: ["u"], pageDown: ["d"] } }));
+		assert.deepEqual(loadConfig().fleetKeybindings, { pageUp: ["u"], pageDown: ["d"] });
+
+		writeFile(configPath, JSON.stringify({ fleetKeybindings: { missing: ["m"] } }));
+		assert.throws(() => updateConfig((config) => config), /config\.fleetKeybindings\.missing is not a supported Fleet action/);
+
+		writeFile(configPath, JSON.stringify({ fleetKeybindings: { pageUp: [""] } }));
+		assert.throws(() => updateConfig((config) => config), /config\.fleetKeybindings\.pageUp entries must be non-empty strings/);
+	});
+
 	it("hardens and redacts existing run history while recording", () => {
 		const historyPath = path.join(agentDir, "run-history.jsonl");
 		fs.mkdirSync(agentDir, { recursive: true, mode: 0o755 });

package/dist/extensions/pi-subagents/test/unit/pi-spawn.test.ts

@@ -70,7 +70,7 @@ describe("getPiSpawnCommand", () => {
 			},
 			env: { SELESAI_SUBAGENT_PI_BINARY: "   " },
 		});
-		assert.deepEqual(result, { command: "selesai", args });
+		assert.deepEqual(result, { command: "pi", args });
 	});
 
 	for (const [platform, execPath] of [
@@ -152,7 +152,7 @@ describe("getPiSpawnCommand", () => {
 		});
 	});
 
-	it("falls back to plain selesai command on POSIX when CLI script cannot be resolved", () => {
+	it("falls back to plain pi command on POSIX when CLI script cannot be resolved", () => {
 		const args = ["--mode", "json", "Task: check output"];
 		const result = getPiSpawnCommand(args, {
 			platform: "darwin",
@@ -163,7 +163,7 @@ describe("getPiSpawnCommand", () => {
 			},
 			env: {},
 		});
-		assert.deepEqual(result, { command: "selesai", args });
+		assert.deepEqual(result, { command: "pi", args });
 	});
 
 	it("ignores embedded host entry points and resolves the Pi package bin on every platform", () => {
@@ -289,7 +289,7 @@ describe("getPiSpawnCommand", () => {
 		assert.equal(result.args[0], cliPath);
 	});
 
-	it("falls back to selesai when Windows CLI script cannot be resolved", () => {
+	it("falls back to pi when Windows CLI script cannot be resolved", () => {
 		const deps = makeDeps({
 			platform: "win32",
 			argv1: "/opt/pi/subagent-runner.ts",
@@ -297,7 +297,7 @@ describe("getPiSpawnCommand", () => {
 		});
 		const args = ["-p", "Task: hello"];
 		const result = getPiSpawnCommand(args, deps);
-		assert.deepEqual(result, { command: "selesai", args });
+		assert.deepEqual(result, { command: "pi", args });
 	});
 
 	it("walks from package main entry to resolve package bin", () => {
@@ -328,7 +328,7 @@ describe("getPiSpawnCommand", () => {
 				platform: "win32",
 				execPath: "/usr/local/bin/node",
 				argv1: "/opt/pi/subagent-runner.ts",
-				resolvePackageEntry: () => entry,
+				resolvePackageJson: () => path.join(packageRoot, "package.json"),
 				env: {},
 			});
 			assert.equal(result.command, "/usr/local/bin/node");

package/dist/extensions/pi-subagents/test/unit/preflight.test.ts

@@ -75,9 +75,9 @@ describe("public launch contract preflight", () => {
 		const cwd = path.join(tempDir, "repo");
 		fs.mkdirSync(cwd, { recursive: true });
 		writeSkill(cwd, "project-skill");
-		writeAgent(path.join(cwd, ".selesai", "agents", "builder.md"), `---
-name: builder
-description: Project builder
+		writeAgent(path.join(cwd, ".selesai", "agents", "worker.md"), `---
+name: worker
+description: Project worker
 tools:
   - read
   - write
@@ -97,7 +97,7 @@ Project prompt.
 		try {
 			const ceiling = resolveSubagentCapabilityCeiling("preflight-session");
 			const result = await resolveSubagentLaunchContract({
-				agent: "builder",
+				agent: "worker",
 				cwd,
 				task: "Inspect the repo",
 				runId: "run-123",
@@ -115,7 +115,7 @@ Project prompt.
 			assert.equal(result.contract.agent.definitionProjectionVersion, 1);
 			assert.match(result.contract.agent.definitionDigest, /^[a-f0-9]{64}$/);
 			assert.match(result.contract.launchContractDigest, /^[a-f0-9]{64}$/);
-			assert.ok(result.contract.agent.shadowedCandidates.some((candidate) => candidate.name === "builder" && candidate.source === "builtin"));
+			assert.ok(result.contract.agent.shadowedCandidates.some((candidate) => candidate.name === "worker" && candidate.source === "builtin"));
 			assert.equal(result.contract.model, "test/primary:high");
 			assert.deepEqual(result.contract.modelCandidates, ["test/primary:high", "test/fallback:high"]);
 			assert.equal(result.contract.thinking, "high");
@@ -133,7 +133,7 @@ Project prompt.
 			assert.notEqual(result.contract.roots.lifecycle?.asyncDir, result.contract.roots.artifactsDir);
 			assert.match(result.contract.digest, /^[a-f0-9]{64}$/);
 			const repeated = await resolveSubagentLaunchContract({
-				agent: "builder",
+				agent: "worker",
 				cwd,
 				task: "Inspect the repo",
 				runId: "run-123",
@@ -156,9 +156,9 @@ Project prompt.
 	it("resolves agent aliases to the canonical launch contract agent", async () => {
 		const cwd = path.join(tempDir, "repo-alias");
 		fs.mkdirSync(cwd, { recursive: true });
-		writeAgent(path.join(cwd, ".selesai", "agents", "builder.md"), `---
-name: builder
-description: Project builder
+		writeAgent(path.join(cwd, ".selesai", "agents", "worker.md"), `---
+name: worker
+description: Project worker
 aliases: developer, coder
 ---
 Project prompt.
@@ -171,22 +171,22 @@ Project prompt.
 		});
 
 		assert.equal(result.ok, true);
-		assert.equal(result.contract.agent.name, "builder");
+		assert.equal(result.contract.agent.name, "worker");
 	});
 
 	it("reports alias collisions as ambiguous agents", async () => {
 		const cwd = path.join(tempDir, "repo-alias-collision");
 		fs.mkdirSync(cwd, { recursive: true });
-		writeAgent(path.join(cwd, ".selesai", "agents", "builder.md"), `---
-name: builder
-description: Project builder
+		writeAgent(path.join(cwd, ".selesai", "agents", "worker.md"), `---
+name: worker
+description: Project worker
 aliases: coder
 ---
 Project prompt.
 `);
-		writeAgent(path.join(cwd, ".selesai", "agents", "commentator.md"), `---
-name: commentator
-description: Project commentator
+		writeAgent(path.join(cwd, ".selesai", "agents", "reviewer.md"), `---
+name: reviewer
+description: Project reviewer
 aliases: coder
 ---
 Review prompt.
@@ -196,32 +196,32 @@ Review prompt.
 
 		assert.equal(result.ok, false);
 		assert.equal(result.code, "ambiguous_agent");
-		assert.match(result.message, /Ambiguous agent alias 'coder': commentator, builder|Ambiguous agent alias 'coder': builder, commentator/);
+		assert.match(result.message, /Ambiguous agent alias 'coder': reviewer, worker|Ambiguous agent alias 'coder': worker, reviewer/);
 	});
 
 	it("changes definition and launch digests when selected agent content changes", async () => {
 		const cwd = path.join(tempDir, "repo");
 		fs.mkdirSync(cwd, { recursive: true });
-		const agentPath = path.join(cwd, ".selesai", "agents", "builder.md");
+		const agentPath = path.join(cwd, ".selesai", "agents", "worker.md");
 		writeAgent(agentPath, `---
-name: digest-builder
-description: Digest builder
+name: digest-worker
+description: Digest worker
 tools:
   - read
 ---
 First prompt.
 `);
-		const before = await resolveSubagentLaunchContract({ agent: "digest-builder", cwd, runId: "digest-test" });
+		const before = await resolveSubagentLaunchContract({ agent: "digest-worker", cwd, runId: "digest-test" });
 		assert.equal(before.ok, true);
 		writeAgent(agentPath, `---
-name: digest-builder
-description: Digest builder
+name: digest-worker
+description: Digest worker
 tools:
   - read
 ---
 Changed prompt.
 `);
-		const after = await resolveSubagentLaunchContract({ agent: "digest-builder", cwd, runId: "digest-test" });
+		const after = await resolveSubagentLaunchContract({ agent: "digest-worker", cwd, runId: "digest-test" });
 		assert.equal(after.ok, true);
 		assert.notEqual(after.contract.agent.definitionDigest, before.contract.agent.definitionDigest);
 		assert.notEqual(after.contract.launchContractDigest, before.contract.launchContractDigest);
@@ -232,9 +232,9 @@ Changed prompt.
 		const cwd = path.join(tempDir, "repo");
 		fs.mkdirSync(cwd, { recursive: true });
 		writeSkill(cwd, "digest-skill");
-		writeAgent(path.join(cwd, ".selesai", "agents", "builder.md"), `---
-name: builder
-description: Project builder
+		writeAgent(path.join(cwd, ".selesai", "agents", "worker.md"), `---
+name: worker
+description: Project worker
 tools:
   - read
 skills:
@@ -242,12 +242,12 @@ skills:
 ---
 Project prompt.
 `);
-		const before = await resolveSubagentLaunchContract({ agent: "builder", cwd, runId: "skill-digest-test" });
+		const before = await resolveSubagentLaunchContract({ agent: "worker", cwd, runId: "skill-digest-test" });
 		assert.equal(before.ok, true);
 		fs.writeFileSync(path.join(cwd, ".selesai", "skills", "digest-skill", "SKILL.md"), "---\ndescription: updated digest-skill\n---\n\nUse digest-skill.\n", "utf-8");
 		clearSkillCache();
 
-		const after = await resolveSubagentLaunchContract({ agent: "builder", cwd, runId: "skill-digest-test" });
+		const after = await resolveSubagentLaunchContract({ agent: "worker", cwd, runId: "skill-digest-test" });
 		assert.equal(after.ok, true);
 		assert.equal(after.contract.agent.definitionDigest, before.contract.agent.definitionDigest);
 		assert.notEqual(after.contract.launchContractDigest, before.contract.launchContractDigest);
@@ -257,9 +257,9 @@ Project prompt.
 	it("returns closed failures for missing agents and missing skills", async () => {
 		const cwd = path.join(tempDir, "repo");
 		fs.mkdirSync(cwd, { recursive: true });
-		writeAgent(path.join(cwd, ".selesai", "agents", "builder.md"), `---
-name: builder
-description: Project builder
+		writeAgent(path.join(cwd, ".selesai", "agents", "worker.md"), `---
+name: worker
+description: Project worker
 skills:
   - missing-skill
 ---
@@ -269,7 +269,7 @@ Project prompt.
 		const missingAgent = await resolveSubagentLaunchContract({ agent: "missing", cwd });
 		assert.deepEqual(missingAgent, { ok: false, code: "missing_agent", message: "Unknown agent: missing", diagnostics: [] });
 
-		const missingSkill = await resolveSubagentLaunchContract({ agent: "builder", cwd });
+		const missingSkill = await resolveSubagentLaunchContract({ agent: "worker", cwd });
 		assert.equal(missingSkill.ok, false);
 		assert.equal(missingSkill.code, "missing_skill");
 		assert.match(missingSkill.message, /missing-skill/);
@@ -278,22 +278,22 @@ Project prompt.
 	it("fails closed for invalid runtime inputs", async () => {
 		const cwd = path.join(tempDir, "repo");
 		fs.mkdirSync(cwd, { recursive: true });
-		writeAgent(path.join(cwd, ".selesai", "agents", "builder.md"), `---
-name: builder
-description: Project builder
+		writeAgent(path.join(cwd, ".selesai", "agents", "worker.md"), `---
+name: worker
+description: Project worker
 ---
 Project prompt.
 `);
 
-		const invalidCwd = await resolveSubagentLaunchContract({ agent: "builder", cwd: path.join(tempDir, "missing") });
+		const invalidCwd = await resolveSubagentLaunchContract({ agent: "worker", cwd: path.join(tempDir, "missing") });
 		assert.equal(invalidCwd.ok, false);
 		assert.equal(invalidCwd.code, "invalid_cwd");
 
-		const unsupportedMode = await resolveSubagentLaunchContract({ agent: "builder", cwd, context: "bogus" as never });
+		const unsupportedMode = await resolveSubagentLaunchContract({ agent: "worker", cwd, context: "bogus" as never });
 		assert.equal(unsupportedMode.ok, false);
 		assert.equal(unsupportedMode.code, "unsupported_mode");
 
-		const invalidArtifactDir = await resolveSubagentLaunchContract({ agent: "builder", cwd, artifactDir: "bogus" as never });
+		const invalidArtifactDir = await resolveSubagentLaunchContract({ agent: "worker", cwd, artifactDir: "bogus" as never });
 		assert.equal(invalidArtifactDir.ok, false);
 		assert.equal(invalidArtifactDir.code, "invalid_artifact_dir");
 	});
@@ -345,9 +345,9 @@ Project prompt.
 		const cwd = path.join(tempDir, "repo");
 		fs.mkdirSync(cwd, { recursive: true });
 		writeSkill(cwd, "project-skill");
-		writeAgent(path.join(cwd, ".selesai", "agents", "builder.md"), `---
-name: builder
-description: Project builder
+		writeAgent(path.join(cwd, ".selesai", "agents", "worker.md"), `---
+name: worker
+description: Project worker
 tools:
   - read
 skills:
@@ -357,7 +357,7 @@ Project prompt.
 `);
 
 		const result = await resolveSubagentLaunchContract({
-			agent: "builder",
+			agent: "worker",
 			cwd,
 			capabilityCeiling: { version: 1, allowedTools: [], denyExtensions: false, sources: ["test"] },
 		});

package/dist/extensions/pi-subagents/test/unit/proactive-skills.test.ts

@@ -29,7 +29,7 @@ function chain(name: string, skills: string[]): ChainConfig {
 		description: `${name} chain`,
 		source: "project",
 		filePath: `/tmp/${name}.chain.md`,
-		steps: [{ agent: "builder", skills }],
+		steps: [{ agent: "worker", skills }],
 	};
 }
 
@@ -37,9 +37,9 @@ describe("proactive skill subagent recommendations", () => {
 	it("recommends available skills referenced by multiple enabled configs", () => {
 		const recommendations = recommendProactiveSkillSubagents({
 			agents: [
-				agent("commentator"),
-				agent("ui-commentator", ["accessibility"]),
-				agent("disabled-commentator", ["accessibility"], true),
+				agent("reviewer"),
+				agent("ui-reviewer", ["accessibility"]),
+				agent("disabled-reviewer", ["accessibility"], true),
 			],
 			chains: [chain("ui-check", ["accessibility"]), chain("cleanup", ["deslop"])],
 			availableSkills: [
@@ -50,31 +50,31 @@ describe("proactive skill subagent recommendations", () => {
 
 		assert.equal(recommendations.length, 1);
 		assert.equal(recommendations[0]?.skill, "accessibility");
-		assert.equal(recommendations[0]?.agent, "commentator");
+		assert.equal(recommendations[0]?.agent, "reviewer");
 		assert.equal(recommendations[0]?.references, 2);
-		assert.deepEqual(recommendations[0]?.sources, ["agent:ui-commentator", "chain:ui-check"]);
+		assert.deepEqual(recommendations[0]?.sources, ["agent:ui-reviewer", "chain:ui-check"]);
 	});
 
 	it("filters unavailable orchestration skills and honors config bounds", () => {
 		const recommendations = recommendProactiveSkillSubagents({
 			agents: [
-				agent("explorer", ["pi-subagents", "alpha", "beta"]),
+				agent("delegate", ["pi-subagents", "alpha", "beta"]),
 				agent("one", ["alpha", "beta"]),
 				agent("two", ["gamma"]),
 				agent("three", ["gamma"]),
 			],
 			availableSkills: [{ name: "alpha" }, { name: "beta" }, { name: "gamma" }],
-			config: { preferredAgent: "explorer", maxRecommendations: 2 },
+			config: { preferredAgent: "delegate", maxRecommendations: 2 },
 		});
 
 		assert.deepEqual(recommendations.map((entry) => entry.skill), ["alpha", "beta"]);
-		assert.ok(recommendations.every((entry) => entry.agent === "explorer"));
+		assert.ok(recommendations.every((entry) => entry.agent === "delegate"));
 	});
 
 	it("can be disabled and formats guardrails for visible suggestions", () => {
 		assert.equal(resolveProactiveSkillSubagentsConfig(false).enabled, false);
 		assert.deepEqual(recommendProactiveSkillSubagents({
-			agents: [agent("commentator", ["deslop"]), agent("cleanup", ["deslop"])],
+			agents: [agent("reviewer", ["deslop"]), agent("cleanup", ["deslop"])],
 			availableSkills: [{ name: "deslop" }],
 			config: false,
 		}), []);
@@ -82,7 +82,7 @@ describe("proactive skill subagent recommendations", () => {
 		const lines = formatProactiveSkillSubagentRecommendations([
 			{
 				skill: "deslop",
-				agent: "commentator",
+				agent: "reviewer",
 				references: 2,
 				sources: ["agent:a", "chain:b"],
 				reason: "referenced by 2 configured agents/chains",
@@ -95,7 +95,7 @@ describe("proactive skill subagent recommendations", () => {
 	it("does not discover skills when disabled and treats discovery failures as no suggestions", () => {
 		let discoveryCalls = 0;
 		const disabledLines = buildProactiveSkillSubagentRecommendationLines({
-			agents: [agent("commentator", ["deslop"]), agent("cleanup", ["deslop"])],
+			agents: [agent("reviewer", ["deslop"]), agent("cleanup", ["deslop"])],
 			config: false,
 			discoverAvailableSkills: () => {
 				discoveryCalls++;
@@ -106,7 +106,7 @@ describe("proactive skill subagent recommendations", () => {
 		assert.equal(discoveryCalls, 0);
 
 		const failedDiscoveryLines = buildProactiveSkillSubagentRecommendationLines({
-			agents: [agent("commentator", ["deslop"]), agent("cleanup", ["deslop"])],
+			agents: [agent("reviewer", ["deslop"]), agent("cleanup", ["deslop"])],
 			discoverAvailableSkills: () => {
 				discoveryCalls++;
 				throw new Error("skill scan failed");

package/dist/extensions/pi-subagents/test/unit/process-terminal.test.ts

@@ -3,6 +3,7 @@ import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
 import test from "node:test";
+import { ACTIVE_RUN_INDEX_DIR, updateActiveRunIndex } from "../../src/runs/background/active-run-index.ts";
 import {
 	finalizeProcessTerminal,
 	processTerminalPath,
@@ -27,10 +28,11 @@ test("process-terminal proof requires the matching runner instance and writer cl
 					closeObservedAt: 10,
 					exitCode: 0,
 					signal: null,
+					processTree: { state: "observed", mechanism: "posix-process-group", processGroupId: 123, verifiedAt: 11 },
 				}],
 			},
 		});
-		fs.writeFileSync(path.join(asyncDir, "status.json"), JSON.stringify({ runId: "run-1", state: "complete", lifecycleArtifactVersion: 3, steps: [{ agent: "builder", status: "complete" }] }));
+		fs.writeFileSync(path.join(asyncDir, "status.json"), JSON.stringify({ runId: "run-1", state: "complete", lifecycleArtifactVersion: 3, steps: [{ agent: "worker", status: "complete" }] }));
 		fs.writeFileSync(path.join(asyncDir, "events.jsonl"), "");
 
 		const mismatch = finalizeProcessTerminal(asyncDir, "run-1", {
@@ -67,7 +69,7 @@ test("process-terminal rejects missing writer close evidence", () => {
 			expectedWriters: { "0": 1 },
 			writers: { "0": [] },
 		});
-		fs.writeFileSync(path.join(asyncDir, "status.json"), JSON.stringify({ runId: "run-missing-writer", state: "complete", lifecycleArtifactVersion: 3, steps: [{ agent: "builder", status: "complete" }] }));
+		fs.writeFileSync(path.join(asyncDir, "status.json"), JSON.stringify({ runId: "run-missing-writer", state: "complete", lifecycleArtifactVersion: 3, steps: [{ agent: "worker", status: "complete" }] }));
 		fs.writeFileSync(path.join(asyncDir, "events.jsonl"), "");
 		const proof = finalizeProcessTerminal(asyncDir, "run-missing-writer", {
 			processInstanceId: "runner-missing-writer",
@@ -82,6 +84,57 @@ test("process-terminal rejects missing writer close evidence", () => {
 	}
 });
 
+test("process-terminal fails closed when process-tree verification is unknown", () => {
+	const asyncDir = fs.mkdtempSync(path.join(os.tmpdir(), "pi-process-terminal-"));
+	try {
+		writeProcessTerminalCandidate(asyncDir, {
+			version: 1,
+			runId: "run-tree-unknown",
+			runnerProcessInstanceId: "runner-tree-unknown",
+			expectedWriters: { "0": 1 },
+			writers: {
+				"0": [{
+					processInstanceId: "writer-tree-unknown",
+					kind: "pi-writer",
+					attempt: 0,
+					closeObservedAt: 10,
+					exitCode: 1,
+					signal: "SIGKILL",
+					processTree: { state: "unknown", reason: "verification-failed", diagnostic: "still live" },
+				}],
+			},
+		});
+		fs.writeFileSync(path.join(asyncDir, "status.json"), JSON.stringify({ runId: "run-tree-unknown", state: "failed", lifecycleArtifactVersion: 3, steps: [{ agent: "worker", status: "failed" }] }));
+		fs.writeFileSync(path.join(asyncDir, "events.jsonl"), "");
+		updateActiveRunIndex(asyncDir, "running");
+		const markerPath = path.join(path.dirname(asyncDir), ACTIVE_RUN_INDEX_DIR, path.basename(asyncDir));
+		const proof = finalizeProcessTerminal(asyncDir, "run-tree-unknown", {
+			processInstanceId: "runner-tree-unknown",
+			closeObservedAt: 20,
+			exitCode: 1,
+			signal: null,
+		});
+		assert.equal(proof.state, "unknown");
+		assert.equal(proof.reason, "process-tree-unverified");
+		assert.equal(fs.existsSync(markerPath), true);
+		fs.rmSync(processTerminalPath(asyncDir), { force: true });
+		const candidatePath = path.join(asyncDir, "process-terminal-candidate.json");
+		const candidate = JSON.parse(fs.readFileSync(candidatePath, "utf-8"));
+		candidate.writers["0"][0].processTree = { state: "observed", mechanism: "posix-process-group", processGroupId: 126, verifiedAt: 21 };
+		fs.writeFileSync(candidatePath, JSON.stringify(candidate));
+		const observed = finalizeProcessTerminal(asyncDir, "run-tree-unknown", {
+			processInstanceId: "runner-tree-unknown",
+			closeObservedAt: 30,
+			exitCode: 1,
+			signal: null,
+		});
+		assert.equal(observed.state, "observed");
+		assert.equal(fs.existsSync(markerPath), false);
+	} finally {
+		fs.rmSync(asyncDir, { recursive: true, force: true });
+	}
+});
+
 test("malformed process-terminal sidecars project unknown instead of throwing", () => {
 	const asyncDir = fs.mkdtempSync(path.join(os.tmpdir(), "pi-process-terminal-"));
 	try {
@@ -112,12 +165,12 @@ test("process-terminal preserves stopped non-resumability and requires lease rel
 			runnerProcessInstanceId: "stopped-runner",
 			expectedWriters: { "0": 1 },
 			writers: {
-				"0": [{ processInstanceId: "stopped-writer", kind: "pi-writer", attempt: 0, closeObservedAt: 10, exitCode: 0, signal: null }],
+				"0": [{ processInstanceId: "stopped-writer", kind: "pi-writer", attempt: 0, closeObservedAt: 10, exitCode: 0, signal: null, processTree: { state: "observed", mechanism: "posix-process-group", processGroupId: 124, verifiedAt: 11 } }],
 			},
 			revivalLeaseToken: "lease-token",
 			revivalLeaseReleaseAcknowledged: false,
 		});
-		fs.writeFileSync(path.join(asyncDir, "status.json"), JSON.stringify({ runId: "stopped-run", state: "stopped", lifecycleArtifactVersion: 3, steps: [{ agent: "builder", status: "stopped" }] }));
+		fs.writeFileSync(path.join(asyncDir, "status.json"), JSON.stringify({ runId: "stopped-run", state: "stopped", lifecycleArtifactVersion: 3, steps: [{ agent: "worker", status: "stopped" }] }));
 		fs.writeFileSync(path.join(asyncDir, "events.jsonl"), "");
 		const unverified = finalizeProcessTerminal(asyncDir, "stopped-run", { processInstanceId: "stopped-runner", closeObservedAt: 20, exitCode: 0, signal: null });
 		assert.equal(unverified.state, "unknown");
@@ -161,10 +214,10 @@ test("process-terminal rejects cross-run observed sidecars and inconsistent expe
 			runnerProcessInstanceId: "runner-1",
 			expectedWriters: { "0": 0 },
 			writers: {
-				"0": [{ processInstanceId: "unexpected-writer", kind: "pi-writer", attempt: 0, closeObservedAt: 10, exitCode: 0, signal: null }],
+				"0": [{ processInstanceId: "unexpected-writer", kind: "pi-writer", attempt: 0, closeObservedAt: 10, exitCode: 0, signal: null, processTree: { state: "observed", mechanism: "posix-process-group", processGroupId: 125, verifiedAt: 11 } }],
 			},
 		});
-		fs.writeFileSync(path.join(asyncDir, "status.json"), JSON.stringify({ runId: "actual-run", state: "complete", lifecycleArtifactVersion: 3, steps: [{ agent: "builder", status: "complete" }] }));
+		fs.writeFileSync(path.join(asyncDir, "status.json"), JSON.stringify({ runId: "actual-run", state: "complete", lifecycleArtifactVersion: 3, steps: [{ agent: "worker", status: "complete" }] }));
 		fs.writeFileSync(path.join(asyncDir, "events.jsonl"), "");
 		const inconsistent = finalizeProcessTerminal(asyncDir, "actual-run", { processInstanceId: "runner-1", closeObservedAt: 30, exitCode: 0, signal: null });
 		assert.equal(inconsistent.state, "unknown");