gencow 0.1.222 → 0.1.223

package/lib/app-command.mjs

@@ -17,6 +17,7 @@ import {
 import { pollAppDeleteOperation } from "./app-delete-operation.mjs";
 import { appResponseError } from "./app-response-error.mjs";
 import { readJsonObjectResponse, readJsonValueResponse } from "./http-response-json.mjs";
+import { runWithAbortDeadline } from "./request-deadline.mjs";
 import { BOLD, CYAN, DIM, GREEN, RED, RESET, error, info, log, success, warn } from "./output.mjs";
 import { loadCreds, rpcMutation, rpcQuery, saveCreds, requireCreds } from "./platform-client.mjs";
 import { resolveProjectMetadataPath, resolveProjectSelection } from "./project-context.mjs";
@@ -27,6 +28,7 @@ import { updateEnvLocalUrl } from "./cli-project-runtime.mjs";
 const DEFAULT_DELETE_POLL_ATTEMPTS = 120;
 const DELETE_POLL_INTERVAL_MS = 1_000;
 const DEFAULT_APP_CREATE_TIMEOUT_MS = 60_000;
+const DEFAULT_APP_DELETE_REQUEST_TIMEOUT_MS = 20_000;
 
 function resolveAppCreateTimeoutMs(value) {
   const parsed = Number(value);
@@ -35,6 +37,13 @@ function resolveAppCreateTimeoutMs(value) {
     : DEFAULT_APP_CREATE_TIMEOUT_MS;
 }
 
+function resolveAppDeleteRequestTimeoutMs(value) {
+  const parsed = Number(value);
+  return Number.isSafeInteger(parsed) && parsed >= 100 && parsed <= 600_000
+    ? parsed
+    : DEFAULT_APP_DELETE_REQUEST_TIMEOUT_MS;
+}
+
 function appResponseStatus(response) {
   return Number.isSafeInteger(response?.status) ? `HTTP ${response.status}` : "unknown HTTP status";
 }
@@ -137,6 +146,9 @@ async function confirmDelete(name) {
 
 export function createAppCommand({
   appCreateTimeoutMs = resolveAppCreateTimeoutMs(process.env.GENCOW_APP_CREATE_TIMEOUT_MS),
+  appDeleteRequestTimeoutMs = resolveAppDeleteRequestTimeoutMs(
+    process.env.GENCOW_APP_DELETE_REQUEST_TIMEOUT_MS,
+  ),
   clearTimeoutImpl = clearTimeout,
   confirmDeleteImpl = confirmDelete,
   createAbortControllerImpl = () => new AbortController(),
@@ -159,28 +171,38 @@ export function createAppCommand({
   warnImpl = warn,
 }) {
   const boundedAppCreateTimeoutMs = resolveAppCreateTimeoutMs(appCreateTimeoutMs);
+  const boundedAppDeleteRequestTimeoutMs = resolveAppDeleteRequestTimeoutMs(appDeleteRequestTimeoutMs);
 
   async function requestAppCreate(creds, name) {
-    const controller = createAbortControllerImpl();
     const timeoutError = new Error(
       `App creation request timed out after ${boundedAppCreateTimeoutMs}ms. Please try again.`,
     );
-    let timeoutHandle;
-    const timeoutPromise = new Promise((_resolve, reject) => {
-      timeoutHandle = setTimeoutImpl(() => {
-        controller.abort(timeoutError);
-        reject(timeoutError);
-      }, boundedAppCreateTimeoutMs);
+    return runWithAbortDeadline({
+      clearTimeoutImpl,
+      createAbortControllerImpl,
+      request: async (signal) => {
+        const response = await rpcMutationImpl(creds, "apps.create", { name }, { signal });
+        return { response, data: await readJsonObjectResponse(response) };
+      },
+      setTimeoutImpl,
+      timeoutError,
+      timeoutMs: boundedAppCreateTimeoutMs,
     });
-    try {
-      const request = (async () => {
-        const response = await rpcMutationImpl(creds, "apps.create", { name }, { signal: controller.signal });
+  }
+
+  async function requestAppDelete(creds, name, requestId) {
+    const timeoutError = new Error("App deletion request timed out");
+    return runWithAbortDeadline({
+      clearTimeoutImpl,
+      createAbortControllerImpl,
+      request: async (signal) => {
+        const response = await rpcMutationImpl(creds, "apps.delete", { name, requestId }, { signal });
         return { response, data: await readJsonObjectResponse(response) };
-      })();
-      return await Promise.race([request, timeoutPromise]);
-    } finally {
-      clearTimeoutImpl(timeoutHandle);
-    }
+      },
+      setTimeoutImpl,
+      timeoutError,
+      timeoutMs: boundedAppDeleteRequestTimeoutMs,
+    });
   }
 
   return async function app(subcmd, ...rest) {
@@ -342,8 +364,16 @@ ${dashboardLine}
 
       infoImpl(`Deleting app "${name}"...`);
       const requestId = createDeleteRequestIdImpl();
-      const delRes = await rpcMutationImpl(creds, "apps.delete", { name, requestId });
-      let delData = await readJsonObjectResponse(delRes);
+      let delRes;
+      let delData;
+      try {
+        ({ response: delRes, data: delData } = await requestAppDelete(creds, name, requestId));
+      } catch {
+        errorImpl(
+          "App deletion request did not complete. Its operation outcome is unknown; retry the same app delete to inspect it.\nCode: APP_DELETE_REQUEST_UNAVAILABLE",
+        );
+        return 1;
+      }
       if (!isExactAppDeleteResponse(delData, name)) {
         const operationResult = await pollAppDeleteOperation({
           creds,

package/lib/app-delete-operation.mjs

@@ -1,6 +1,7 @@
 import { isExactAppDeleteResponse } from "./app-response-contract.mjs";
 import { APP_DELETE_OPERATION_PATTERN } from "./app-response-error.mjs";
 import { readJsonObjectResponse } from "./http-response-json.mjs";
+import { runWithAbortDeadline } from "./request-deadline.mjs";
 
 const APP_DELETE_ACTIVE_STATES = new Set([
   "accepted",
@@ -26,6 +27,38 @@ const APP_DELETE_RESPONSE_STATES = new Set([
 const CORRELATION_ID_PATTERN = /^[A-Za-z0-9_-]{8,128}$/u;
 const DIAGNOSTIC_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9_]{2,127}$/u;
 const APP_ID_PATTERN = /^(?=.{3,63}$)[a-z][a-z0-9]*(?:-[a-z0-9]+){2,7}$/u;
+const DEFAULT_DELETE_OPERATION_TIMEOUT_MS = 120_000;
+const DEFAULT_DELETE_STATUS_REQUEST_TIMEOUT_MS = 10_000;
+
+function resolveTimeoutMs(value, fallback) {
+  const parsed = Number(value);
+  return Number.isSafeInteger(parsed) && parsed >= 1 && parsed <= 600_000 ? parsed : fallback;
+}
+
+async function requestDeleteStatus({
+  clearTimeoutImpl,
+  createAbortControllerImpl,
+  creds,
+  name,
+  operationId,
+  requestTimeoutMs,
+  rpcQueryImpl,
+  setTimeoutImpl,
+}) {
+  const timeoutError = new Error("App deletion status request timed out");
+  timeoutError.name = "AbortError";
+  return runWithAbortDeadline({
+    clearTimeoutImpl,
+    createAbortControllerImpl,
+    request: async (signal) => {
+      const statusRes = await rpcQueryImpl(creds, "apps.deleteStatus", { name, operationId }, { signal });
+      return { statusRes, statusData: await readJsonObjectResponse(statusRes) };
+    },
+    setTimeoutImpl,
+    timeoutError,
+    timeoutMs: requestTimeoutMs,
+  });
+}
 
 function isAllowedStatusPath(value, operationId, expectedAppId) {
   if (value === undefined) return true;
@@ -104,12 +137,18 @@ function isMatchingTerminalFailureResponse(value, accepted, expectedAppId) {
 }
 
 export async function pollAppDeleteOperation({
+  clearTimeoutImpl = clearTimeout,
+  createAbortControllerImpl = () => new AbortController(),
   creds,
   initialBody,
   name,
+  nowImpl = Date.now,
+  operationTimeoutMs = DEFAULT_DELETE_OPERATION_TIMEOUT_MS,
   pollAttempts,
   pollIntervalMs,
+  requestTimeoutMs = DEFAULT_DELETE_STATUS_REQUEST_TIMEOUT_MS,
   rpcQueryImpl,
+  setTimeoutImpl = setTimeout,
   sleepImpl,
 }) {
   const accepted = parseAppDeleteOperationEnvelope(initialBody, name);
@@ -121,13 +160,25 @@ export async function pollAppDeleteOperation({
   let latest = accepted;
   let successfulPollResponses = 0;
   let transportFailures = 0;
+  const deadlineAt = nowImpl() + resolveTimeoutMs(operationTimeoutMs, DEFAULT_DELETE_OPERATION_TIMEOUT_MS);
+  const boundedRequestTimeoutMs = resolveTimeoutMs(
+    requestTimeoutMs,
+    DEFAULT_DELETE_STATUS_REQUEST_TIMEOUT_MS,
+  );
   for (let attempt = 0; attempt < pollAttempts; attempt += 1) {
+    const remainingMs = deadlineAt - nowImpl();
+    if (remainingMs <= 0) break;
     try {
-      const statusRes = await rpcQueryImpl(creds, "apps.deleteStatus", {
+      const { statusData, statusRes } = await requestDeleteStatus({
+        clearTimeoutImpl,
+        createAbortControllerImpl,
+        creds,
         name,
         operationId: accepted.operationId,
+        requestTimeoutMs: Math.min(boundedRequestTimeoutMs, remainingMs),
+        rpcQueryImpl,
+        setTimeoutImpl,
       });
-      const statusData = await readJsonObjectResponse(statusRes);
       // A lifecycle operation is durable.  A transient 5xx while the status
       // query is being served must not turn that durable receipt into a client
       // contract failure or abandon the operation's correlation identity.
@@ -157,7 +208,10 @@ export async function pollAppDeleteOperation({
       transportFailures += 1;
       // The durable receipt remains authoritative across transient polling failures.
     }
-    if (attempt + 1 < pollAttempts) await sleepImpl(pollIntervalMs);
+    if (attempt + 1 < pollAttempts) {
+      const remainingAfterRequestMs = deadlineAt - nowImpl();
+      if (remainingAfterRequestMs > 0) await sleepImpl(Math.min(pollIntervalMs, remainingAfterRequestMs));
+    }
   }
 
   const pollingUnavailable = successfulPollResponses === 0 && transportFailures > 0;

package/lib/platform-client.mjs

@@ -96,10 +96,11 @@ export async function platformFetch(creds, path, opts = {}) {
   });
 }
 
-export async function rpcQuery(creds, queryName, args = {}) {
+export async function rpcQuery(creds, queryName, args = {}, requestOptions = {}) {
   return platformFetch(creds, "/api/query", {
+    ...requestOptions,
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers: { ...requestOptions.headers, "Content-Type": "application/json" },
     body: JSON.stringify({ name: queryName, args }),
   });
 }

package/lib/request-deadline.mjs

@@ -0,0 +1,22 @@
+export async function runWithAbortDeadline({
+  clearTimeoutImpl = clearTimeout,
+  createAbortControllerImpl = () => new AbortController(),
+  request,
+  setTimeoutImpl = setTimeout,
+  timeoutError,
+  timeoutMs,
+}) {
+  const controller = createAbortControllerImpl();
+  let timeoutHandle;
+  const deadline = new Promise((_resolve, reject) => {
+    timeoutHandle = setTimeoutImpl(() => {
+      controller.abort(timeoutError);
+      reject(timeoutError);
+    }, timeoutMs);
+  });
+  try {
+    return await Promise.race([request(controller.signal), deadline]);
+  } finally {
+    clearTimeoutImpl(timeoutHandle);
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gencow",
-  "version": "0.1.222",
+  "version": "0.1.223",
   "description": "Gencow — AI Backend Engine",
   "type": "module",
   "bin": {

package/runtime/server.mjs

@@ -6640,17 +6640,17 @@ var require_compose_node = __commonJS({
       return node;
     }
     function composeAlias({ options }, { offset, source, end }, onError) {
-      const alias = new Alias.Alias(source.substring(1));
-      if (alias.source === "")
+      const alias2 = new Alias.Alias(source.substring(1));
+      if (alias2.source === "")
         onError(offset, "BAD_ALIAS", "Alias cannot be an empty string");
-      if (alias.source.endsWith(":"))
+      if (alias2.source.endsWith(":"))
         onError(offset + source.length - 1, "BAD_ALIAS", "Alias ending in : is ambiguous", true);
       const valueEnd = offset + source.length;
       const re3 = resolveEnd.resolveEnd(end, valueEnd, options.strict, onError);
-      alias.range = [offset, valueEnd, re3.offset];
+      alias2.range = [offset, valueEnd, re3.offset];
       if (re3.comment)
-        alias.comment = re3.comment;
-      return alias;
+        alias2.comment = re3.comment;
+      return alias2;
     }
     exports2.composeEmptyNode = composeEmptyNode;
     exports2.composeNode = composeNode;
@@ -143454,8 +143454,8 @@ var require_ALIASADD = __commonJS({
     exports2.default = {
       NOT_KEYED_COMMAND: true,
       IS_READ_ONLY: true,
-      parseCommand(parser, alias, index22) {
-        parser.push("FT.ALIASADD", alias, index22);
+      parseCommand(parser, alias2, index22) {
+        parser.push("FT.ALIASADD", alias2, index22);
       },
       transformReply: void 0
     };
@@ -143470,8 +143470,8 @@ var require_ALIASDEL = __commonJS({
     exports2.default = {
       NOT_KEYED_COMMAND: true,
       IS_READ_ONLY: true,
-      parseCommand(parser, alias) {
-        parser.push("FT.ALIASDEL", alias);
+      parseCommand(parser, alias2) {
+        parser.push("FT.ALIASDEL", alias2);
       },
       transformReply: void 0
     };
@@ -143486,8 +143486,8 @@ var require_ALIASUPDATE = __commonJS({
     exports2.default = {
       NOT_KEYED_COMMAND: true,
       IS_READ_ONLY: true,
-      parseCommand(parser, alias, index22) {
-        parser.push("FT.ALIASUPDATE", alias, index22);
+      parseCommand(parser, alias2, index22) {
+        parser.push("FT.ALIASUPDATE", alias2, index22);
       },
       transformReply: void 0
     };
@@ -184543,6 +184543,7 @@ var init_deployment_candidate_failure = __esm({
       "BACKEND_CAPABILITY_EMPTY",
       "BACKEND_CAPABILITY_MISMATCH",
       "APP_DEPENDENCY_INSTALL_FAILED",
+      "APP_DEPENDENCY_INSTALL_TIMEOUT",
       "CANDIDATE_PREPARATION_FAILED",
       "RUNTIME_CANDIDATE_MODULE_RESOLUTION_FAILED",
       "RUNTIME_CANDIDATE_PORT_BIND_FAILED",
@@ -184711,6 +184712,12 @@ function resolveGenericDeploymentFailurePolicy(input) {
         userAction: "EDIT_AND_CHECK"
       };
     }
+    if (code === "APP_DEPENDENCY_INSTALL_TIMEOUT") {
+      return retry(
+        code,
+        "Platform dependency installer timed out before runtime activation; retry the same deployment"
+      );
+    }
     if (code === "APP_DEPENDENCY_INSTALL_FAILED") {
       return retry(
         code,
@@ -186232,7 +186239,8 @@ var init_app_release_store = __esm({
 });
 
 // ../platform/src/deployment-executor-store.ts
-import { and as and14, asc as asc3, eq as eq17, gt as gt4, inArray as inArray8, lte as lte4, or as or7, sql as sql70 } from "drizzle-orm";
+import { and as and14, asc as asc3, eq as eq17, gt as gt4, inArray as inArray8, lte as lte4, ne as ne8, notExists, or as or7, sql as sql70 } from "drizzle-orm";
+import { alias } from "drizzle-orm/pg-core";
 function attemptConditions(attempt) {
   return and14(
     eq17(deployments.id, attempt.deploymentId),
@@ -187008,7 +187016,7 @@ var init_deployment_executor_http_presentation = __esm({
 
 // ../platform/src/app-delete-operation-store.ts
 import { createHash as createHash42 } from "node:crypto";
-import { and as and16, desc as desc6, eq as eq19, inArray as inArray9, lt as lt5, lte as lte5, notExists, or as or8, sql as sql71 } from "drizzle-orm";
+import { and as and16, desc as desc6, eq as eq19, inArray as inArray9, lt as lt5, lte as lte5, notExists as notExists2, or as or8, sql as sql71 } from "drizzle-orm";
 function isAppDeleteTerminalState(state2) {
   return APP_DELETE_TERMINAL_STATES.includes(state2);
 }
@@ -251698,8 +251706,8 @@ ${lanes.join("\n")}
                     }
                     const propertyAccessRequire = (_e2 = symbol2.declarations) == null ? void 0 : _e2.find(isPropertyAccessExpression);
                     if (propertyAccessRequire && isBinaryExpression(propertyAccessRequire.parent) && isIdentifier2(propertyAccessRequire.parent.right) && ((_f = type.symbol) == null ? void 0 : _f.valueDeclaration) && isSourceFile(type.symbol.valueDeclaration)) {
-                      const alias = localName === propertyAccessRequire.parent.right.escapedText ? void 0 : propertyAccessRequire.parent.right;
-                      context2.approximateLength += 12 + (((_g = alias == null ? void 0 : alias.escapedText) == null ? void 0 : _g.length) ?? 0);
+                      const alias2 = localName === propertyAccessRequire.parent.right.escapedText ? void 0 : propertyAccessRequire.parent.right;
+                      context2.approximateLength += 12 + (((_g = alias2 == null ? void 0 : alias2.escapedText) == null ? void 0 : _g.length) ?? 0);
                       addResult(
                         factory.createExportDeclaration(
                           /*modifiers*/
@@ -251709,7 +251717,7 @@ ${lanes.join("\n")}
                           factory.createNamedExports([factory.createExportSpecifier(
                             /*isTypeOnly*/
                             false,
-                            alias,
+                            alias2,
                             localName
                           )])
                         ),
@@ -274630,8 +274638,8 @@ ${lanes.join("\n")}
               return candidateName;
             }
             if (candidate.flags & 2097152) {
-              const alias = tryResolveAlias(candidate);
-              if (alias && alias.flags & meaning) {
+              const alias2 = tryResolveAlias(candidate);
+              if (alias2 && alias2.flags & meaning) {
                 return candidateName;
               }
             }
@@ -297493,10 +297501,10 @@ ${lanes.join("\n")}
               )
             ));
           }
-          const alias = getClassLexicalEnvironment().classConstructor;
-          if (isClassWithConstructorReference && alias) {
+          const alias2 = getClassLexicalEnvironment().classConstructor;
+          if (isClassWithConstructorReference && alias2) {
             enableSubstitutionForClassAliases();
-            classAliases[getOriginalNodeId(node)] = alias;
+            classAliases[getOriginalNodeId(node)] = alias2;
           }
           const classDecl = factory2.updateClassDeclaration(
             node,
@@ -297587,9 +297595,9 @@ ${lanes.join("\n")}
               temp ?? (temp = createClassTempVar());
               if (isClassWithConstructorReference) {
                 enableSubstitutionForClassAliases();
-                const alias = factory2.cloneNode(temp);
-                alias.emitNode.autoGenerate.flags &= ~8;
-                classAliases[getOriginalNodeId(node)] = alias;
+                const alias2 = factory2.cloneNode(temp);
+                alias2.emitNode.autoGenerate.flags &= ~8;
+                classAliases[getOriginalNodeId(node)] = alias2;
               }
               expressions.push(factory2.createAssignment(temp, classExpression));
               addRange(expressions, pendingExpressions);
@@ -378134,7 +378142,7 @@ ${content}
         }
         return modifiers.size > 0 ? arrayFrom(modifiers.values()).join(",") : "";
       }
-      function getSymbolDisplayPartsDocumentationAndSymbolKindWorker(typeChecker, symbol2, sourceFile, enclosingDeclaration, location, type, semanticMeaning, alias, maximumLength, verbosityLevel) {
+      function getSymbolDisplayPartsDocumentationAndSymbolKindWorker(typeChecker, symbol2, sourceFile, enclosingDeclaration, location, type, semanticMeaning, alias2, maximumLength, verbosityLevel) {
         var _a3;
         const displayParts = [];
         let documentation = [];
@@ -378754,7 +378762,7 @@ ${content}
           addAliasPrefixIfNecessary();
         }
         function addAliasPrefixIfNecessary() {
-          if (alias) {
+          if (alias2) {
             pushSymbolKind(
               "alias"
               /* alias */
@@ -378829,8 +378837,8 @@ ${content}
         }
         function addFullSymbolName(symbolToDisplay, enclosingDeclaration2) {
           let indexInfos;
-          if (alias && symbolToDisplay === symbol2) {
-            symbolToDisplay = alias;
+          if (alias2 && symbolToDisplay === symbol2) {
+            symbolToDisplay = alias2;
           }
           if (symbolKind === "index") {
             indexInfos = typeChecker.getIndexInfosOfIndexSymbol(symbolToDisplay);
@@ -378951,7 +378959,7 @@ ${content}
           addRange(displayParts, typeParameterParts);
         }
       }
-      function getSymbolDisplayPartsDocumentationAndSymbolKind(typeChecker, symbol2, sourceFile, enclosingDeclaration, location, semanticMeaning = getMeaningFromLocation(location), alias, maximumLength, verbosityLevel) {
+      function getSymbolDisplayPartsDocumentationAndSymbolKind(typeChecker, symbol2, sourceFile, enclosingDeclaration, location, semanticMeaning = getMeaningFromLocation(location), alias2, maximumLength, verbosityLevel) {
         return getSymbolDisplayPartsDocumentationAndSymbolKindWorker(
           typeChecker,
           symbol2,
@@ -378961,7 +378969,7 @@ ${content}
           /*type*/
           void 0,
           semanticMeaning,
-          alias,
+          alias2,
           maximumLength,
           verbosityLevel
         );
@@ -402301,10 +402309,10 @@ var init_runner_session_log_store = __esm({
           );
         }
         if (!this.isCurrent(appName, session2)) return false;
-        for (const [alias, activeSession] of this.active) {
+        for (const [alias2, activeSession] of this.active) {
           if (activeSession.sessionId !== session2.sessionId) continue;
-          this.active.delete(alias);
-          this.last.set(alias, session2);
+          this.active.delete(alias2);
+          this.last.set(alias2, session2);
         }
         return true;
       }
@@ -404871,10 +404879,10 @@ var init_bun_runner = __esm({
           appendLog(appName, `process exited with code ${code}`, session2.sessionId);
           processes.delete(appName);
           processIdentities.delete(appName);
-          for (const [alias, activeSession] of sessions2) {
+          for (const [alias2, activeSession] of sessions2) {
             if (activeSession.sessionId !== session2.sessionId) continue;
-            sessions2.delete(alias);
-            lastSessions.set(alias, session2);
+            sessions2.delete(alias2);
+            lastSessions.set(alias2, session2);
           }
           const cb2 = exitCallbacks3.get(appName);
           if (cb2) {
@@ -407688,6 +407696,16 @@ function classifyDependencyInstallFailure(output) {
 function redactDependencyInstallOutput(output) {
   return output.replace(/https?:\/\/[^\s"']+/giu, "[url]").replace(/\b(token|password|secret|authorization)\s*[=:]\s*[^\s"']+/giu, "$1=[redacted]").replace(/\/(?:Users|home|opt|tmp|var)\/[^\s:"']+/gu, "[path]");
 }
+function terminateDependencyInstallProcessGroup(processId) {
+  if (!Number.isSafeInteger(processId) || processId <= 1) return;
+  try {
+    process.kill(-processId, "SIGKILL");
+  } catch (error51) {
+    if (!(error51 instanceof Error) || !/ESRCH/u.test(String(error51.code))) {
+      throw error51;
+    }
+  }
+}
 async function readBoundedDependencyInstallOutput(stream) {
   if (!stream || typeof stream !== "object" || !("getReader" in stream)) return "";
   const reader = stream.getReader();
@@ -407708,10 +407726,26 @@ async function readBoundedDependencyInstallOutput(stream) {
   return redactDependencyInstallOutput(new TextDecoder().decode(captured));
 }
 async function runAppDependencyInstaller(input) {
-  let child;
+  const installTimeoutMs = input.timeoutMs ?? 6e4;
+  const timeoutSignal = AbortSignal.timeout(installTimeoutMs);
+  const signal = input.signal ? AbortSignal.any([input.signal, timeoutSignal]) : timeoutSignal;
+  let timedOut = timeoutSignal.aborted;
+  let cancelled = input.signal?.aborted ?? false;
+  const onTimeout = () => {
+    timedOut = true;
+    if (child) terminateDependencyInstallProcessGroup(child.pid);
+  };
+  const onAbort = () => {
+    cancelled = true;
+    if (child) terminateDependencyInstallProcessGroup(child.pid);
+  };
+  let child = null;
+  timeoutSignal.addEventListener("abort", onTimeout, { once: true });
+  input.signal?.addEventListener("abort", onAbort, { once: true });
   try {
     child = Bun.spawn(
       [
+        DEPENDENCY_INSTALL_SESSION_COMMAND,
         "pnpm",
         "install",
         "--prod",
@@ -407726,34 +407760,23 @@ async function runAppDependencyInstaller(input) {
       }
     );
   } catch {
+    timeoutSignal.removeEventListener("abort", onTimeout);
+    input.signal?.removeEventListener("abort", onAbort);
     throw new AppDependencyInstallError("spawn_failed");
   }
-  let timedOut = false;
-  let cancelled = input.signal?.aborted ?? false;
-  let forceKill;
-  const stop = () => {
-    child.kill("SIGTERM");
-    forceKill ??= setTimeout(() => child.kill("SIGKILL"), 2e3);
-  };
-  const timeout = setTimeout(() => {
-    timedOut = true;
-    stop();
-  }, input.timeoutMs ?? 6e4);
   const progress = setInterval(() => input.onProgress?.("dependency_install_running"), 1e4);
-  const onAbort = () => {
-    cancelled = true;
-    stop();
-  };
-  input.signal?.addEventListener("abort", onAbort, { once: true });
-  if (cancelled) stop();
+  if (signal.aborted) {
+    if (timeoutSignal.aborted) timedOut = true;
+    if (input.signal?.aborted) cancelled = true;
+    terminateDependencyInstallProcessGroup(child.pid);
+  }
   const output = Promise.all([
     readBoundedDependencyInstallOutput(child.stdout).catch(() => ""),
     readBoundedDependencyInstallOutput(child.stderr).catch(() => "")
   ]).then((parts) => parts.join("\n"));
   const exitCode = await child.exited.finally(() => {
-    clearTimeout(timeout);
     clearInterval(progress);
-    if (forceKill) clearTimeout(forceKill);
+    timeoutSignal.removeEventListener("abort", onTimeout);
     input.signal?.removeEventListener("abort", onAbort);
   });
   const diagnosticOutput = await output;
@@ -407764,11 +407787,12 @@ async function runAppDependencyInstaller(input) {
     throw new AppDependencyInstallError(classifyDependencyInstallFailure(diagnosticOutput), exitCode);
   }
 }
-var DEPENDENCY_INSTALL_OUTPUT_LIMIT_BYTES, AppDependencyInstallError;
+var DEPENDENCY_INSTALL_OUTPUT_LIMIT_BYTES, DEPENDENCY_INSTALL_SESSION_COMMAND, AppDependencyInstallError;
 var init_app_dependency_installer = __esm({
   "../platform/src/app-dependency-installer.ts"() {
     "use strict";
     DEPENDENCY_INSTALL_OUTPUT_LIMIT_BYTES = 32 * 1024;
+    DEPENDENCY_INSTALL_SESSION_COMMAND = "setsid";
     AppDependencyInstallError = class extends Error {
       constructor(reason, exitCode = null, signalCode = null) {
         super("APP_DEPENDENCY_INSTALL_FAILED");
@@ -407776,11 +407800,12 @@ var init_app_dependency_installer = __esm({
         this.exitCode = exitCode;
         this.signalCode = signalCode;
         this.name = "AppDependencyInstallError";
+        this.code = reason === "timed_out" ? "APP_DEPENDENCY_INSTALL_TIMEOUT" : "APP_DEPENDENCY_INSTALL_FAILED";
       }
       reason;
       exitCode;
       signalCode;
-      code = "APP_DEPENDENCY_INSTALL_FAILED";
+      code;
     };
   }
 });
@@ -412279,10 +412304,10 @@ import { resolve as resolve93 } from "path";
 function isRecord7(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
-function shouldDropDeployWorkspaceAlias(alias, targets) {
-  if (alias === "gencow" || alias.startsWith("gencow/")) return true;
-  if (alias === "drizzle-orm" || alias.startsWith("drizzle-orm/")) return true;
-  if (alias === "@gencow" || alias.startsWith("@gencow/")) return true;
+function shouldDropDeployWorkspaceAlias(alias2, targets) {
+  if (alias2 === "gencow" || alias2.startsWith("gencow/")) return true;
+  if (alias2 === "drizzle-orm" || alias2.startsWith("drizzle-orm/")) return true;
+  if (alias2 === "@gencow" || alias2.startsWith("@gencow/")) return true;
   const targetList = Array.isArray(targets) ? targets : [];
   return targetList.some((target) => {
     if (typeof target !== "string") return false;
@@ -412306,7 +412331,7 @@ function buildDrizzleRuntimeTsconfig(existingTsconfigText) {
   };
   const sourcePaths = isRecord7(sourceCompilerOptions.paths) ? sourceCompilerOptions.paths : {};
   const paths = Object.fromEntries(
-    Object.entries(sourcePaths).filter(([alias, targets]) => !shouldDropDeployWorkspaceAlias(alias, targets))
+    Object.entries(sourcePaths).filter(([alias2, targets]) => !shouldDropDeployWorkspaceAlias(alias2, targets))
   );
   if (Object.keys(paths).length > 0) {
     compilerOptions.paths = paths;
@@ -413942,7 +413967,7 @@ __export(provisioner_exports, {
 import { randomUUID as randomUUID28 } from "node:crypto";
 import { resolve as resolve99, dirname as dirname25 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
-import { and as and23, desc as desc10, eq as eq27, ne as ne8 } from "drizzle-orm";
+import { and as and23, desc as desc10, eq as eq27, ne as ne9 } from "drizzle-orm";
 function setDatabasePreflightRawSql(rawSql) {
   configureDatabasePreflightRawSql(rawSql);
 }
@@ -414583,7 +414608,7 @@ async function checkRuntimeCompatibilityForStart(params) {
       and23(
         eq27(deployments.appId, params.appDbId),
         eq27(deployments.status, "running"),
-        ne8(deployments.env, "static")
+        ne9(deployments.env, "static")
       )
     ).orderBy(desc10(deployments.deployedAt)).limit(1);
   }
@@ -416390,7 +416415,7 @@ var init_candidate_failure_reconciliation = __esm({
 });
 
 // ../platform/src/route-activation-adapter.ts
-import { and as and26, eq as eq30, inArray as inArray15, ne as ne9, sql as sql84 } from "drizzle-orm";
+import { and as and26, eq as eq30, inArray as inArray15, ne as ne10, sql as sql84 } from "drizzle-orm";
 function fail17(code) {
   throw new Error(code);
 }
@@ -416510,7 +416535,7 @@ async function applyCommittedActivationRoute(input) {
       and26(
         eq30(deployments.appId, input.committed.appId),
         eq30(deployments.env, input.committed.environment),
-        ne9(deployments.id, input.committed.deploymentId),
+        ne10(deployments.id, input.committed.deploymentId),
         inArray15(deployments.status, ["running", "success"])
       )
     );
@@ -416719,7 +416744,7 @@ var init_runtime_desired_state_bootstrap = __esm({
 });
 
 // ../platform/src/runtime-candidate-cleanup.ts
-import { and as and27, eq as eq31, inArray as inArray16, isNull as isNull8, ne as ne10, or as or10, sql as sql85 } from "drizzle-orm";
+import { and as and27, eq as eq31, inArray as inArray16, isNull as isNull8, ne as ne11, or as or10, sql as sql85 } from "drizzle-orm";
 import { createConnection as createConnection2 } from "node:net";
 function incompleteCandidatePredicate() {
   return or10(
@@ -416967,7 +416992,7 @@ async function assertNoIncompleteRuntimeCandidateCleanup(input) {
   ).where(
     and27(
       eq31(appRuntimeInstances.appId, input.appId),
-      input.allowedActivationId ? ne10(appRuntimeInstances.activationId, input.allowedActivationId) : void 0,
+      input.allowedActivationId ? ne11(appRuntimeInstances.activationId, input.allowedActivationId) : void 0,
       incompleteCandidatePredicate()
     )
   ).limit(1);
@@ -422704,7 +422729,7 @@ var init_runtime_crash_recovery_store = __esm({
 
 // ../platform/src/runtime-absence-proof-store.ts
 import { createHash as createHash74, randomUUID as randomUUID32 } from "node:crypto";
-import { and as and44, eq as eq48, isNull as isNull18, ne as ne11 } from "drizzle-orm";
+import { and as and44, eq as eq48, isNull as isNull18, ne as ne12 } from "drizzle-orm";
 function hash4(value) {
   return createHash74("sha256").update(JSON.stringify(value)).digest("hex");
 }
@@ -422738,7 +422763,7 @@ async function claimRuntimeAbsenceObservation(input) {
     and44(
       eq48(runtimeLifecycleRemediations.appId, input.appId),
       eq48(runtimeLifecycleRemediations.code, RUNTIME_ABSENCE_PROOF_REMEDIATION_CODE),
-      ne11(runtimeLifecycleRemediations.evidenceHash, evidenceHash),
+      ne12(runtimeLifecycleRemediations.evidenceHash, evidenceHash),
       isNull18(runtimeLifecycleRemediations.resolvedAt)
     )
   );
@@ -425165,8 +425190,8 @@ function cowboxSupervisorMatchesCandidate(input) {
   const command = input.readFile(`/proc/${input.pid}/cmdline`).split("\0").filter(Boolean);
   const executable = input.readLink(`/proc/${input.pid}/exe`);
   const expectedAppDir = `/var/gencow/deployments/.control-plane/generations/v1/${sourceMatch[1]}/workspace`;
-  const expectedTmpDir = `/tmp/gcp-${input.candidate.instanceId.replace(/^instance_/u, "instance-")}`;
-  return processParentId(input.readFile(`/proc/${input.pid}/stat`)) === 1 && COWBOX_EXECUTABLE.test(executable) && command[0] === executable && command.includes(`APP_DIR=${expectedAppDir}`) && command.includes(`APP_PORT=${input.candidate.port}`) && command.includes(`TMP_DIR=${expectedTmpDir}`);
+  const expectedTmpDir = `/tmp/${input.appName}`;
+  return COWBOX_EXECUTABLE.test(executable) && command[0] === executable && command.includes(`APP_DIR=${expectedAppDir}`) && command.includes(`APP_PORT=${input.candidate.port}`) && command.includes(`TMP_DIR=${expectedTmpDir}`);
 }
 async function stopExactUnrecordedCandidateCgroup(input) {
   const port = input.candidate.port;
@@ -425207,6 +425232,7 @@ async function stopExactUnrecordedCandidateCgroup(input) {
     (pid) => !Number.isSafeInteger(pid) || (pid === cgroupLeaderPid ? !cowboxSupervisorMatchesCandidate({
       pid,
       cgroupLeaderPid,
+      appName: input.appName,
       candidate: input.candidate,
       readFile: readFile10,
       readLink
@@ -429379,7 +429405,7 @@ var init_app_delete_terminal_evidence = __esm({
 });
 
 // ../platform/src/app-delete-catalog-finalizer.ts
-import { and as and74, eq as eq79, gt as gt17, inArray as inArray45, isNotNull as isNotNull7, ne as ne12, or as or20, sql as sql110 } from "drizzle-orm";
+import { and as and74, eq as eq79, gt as gt17, inArray as inArray45, isNotNull as isNotNull7, ne as ne13, or as or20, sql as sql110 } from "drizzle-orm";
 var init_app_delete_catalog_finalizer = __esm({
   "../platform/src/app-delete-catalog-finalizer.ts"() {
     "use strict";
@@ -429399,7 +429425,7 @@ var init_app_delete_operation_controller = __esm({
 });
 
 // ../platform/src/app-delete-preconditions.ts
-import { and as and75, eq as eq80, gt as gt18, inArray as inArray46, isNotNull as isNotNull8, isNull as isNull31, ne as ne13 } from "drizzle-orm";
+import { and as and75, eq as eq80, gt as gt18, inArray as inArray46, isNotNull as isNotNull8, isNull as isNull31, ne as ne14 } from "drizzle-orm";
 var init_app_delete_preconditions = __esm({
   "../platform/src/app-delete-preconditions.ts"() {
     "use strict";