nccgs 2.1.0 → 2.1.1

package/tests/phase1.test.mjs

@@ -1,416 +1,427 @@
-import assert from "node:assert/strict";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import crypto from "node:crypto";
-import { spawn, spawnSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import test from "node:test";
-import { atomicJson, json } from "../.claude/nccgs/tools/policy.mjs";
-import { initialize } from "../.claude/nccgs/tools/gates.mjs";
-import { acquireLock, delay, pidState, treeState } from "../.claude/nccgs/tools/process-lock.mjs";
-import { startCommand } from "../.claude/nccgs/tools/command-process.mjs";
-import { startVerification, waitVerification, jobStatus, readJob, jobDirectory } from "../.claude/nccgs/tools/verification-jobs.mjs";
-import { safeVerifyCommand, guardTool } from "../.claude/nccgs/tools/tool-guard.mjs";
-import { cumulativeCost, supervise } from "../scripts/supervise.mjs";
-import { registerReviewBudget, reviewBudgetStatus } from "../.claude/nccgs/tools/review-budget.mjs";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-function fixture(timeoutMs = 5000, mode = "implement") {
-  const base = fs.realpathSync(os.tmpdir()), project = fs.mkdtempSync(path.join(base, "nccgs-phase1-"));
-  const write = (relative, value) => {
-    const file = path.join(project, relative); fs.mkdirSync(path.dirname(file), { recursive: true });
-    fs.writeFileSync(file, typeof value === "string" ? value : JSON.stringify(value)); return file;
-  };
-  fs.cpSync(path.join(root, ".claude/nccgs/tools"), path.join(project, ".claude/nccgs/tools"), { recursive: true });
-  for (const file of ["pipeline.json", "studio.json"]) write(`.claude/nccgs/${file}`, fs.readFileSync(path.join(root, ".claude/nccgs", file), "utf8"));
-  write("Assets/source.cs", "// frozen fixture source");
-  write(".nccgs/project.yaml", "schema_version: 2\nmodels:\n  profile: claude-standalone\n");
-  write(".nccgs/execution.json", { schemaVersion: 1, name: "standalone", externalReview: { mode: "off" } });
-  write(".nccgs/inputs.json", { schemaVersion: 1, canonicalInputs: [], outputDirectories: [], checks: { test: { timeoutMs } } });
-  write(".nccgs/intake.json", { objective: "Process lifecycle fixture; no actual Claude/model/game execution", mode, requiredChecks: ["test"] });
-  initialize(project, "fixture", null, null, null, { intake: ".nccgs/intake.json" });
-  const env = { ...process.env };
-  for (const key of ["CLAUDECODE", "CLAUDE_CODE_ENTRYPOINT", "NCCGS_TASK_ID", "NCCGS_SUPERVISED_SESSION", "NCCGS_PROJECT_ROOT"]) delete env[key];
-  const cli = (...args) => spawnSync(process.execPath, [path.join(project, ".claude/nccgs/tools/task.mjs"), ...args, "--project", project], { cwd: project, env, encoding: "utf8", timeout: 20000, windowsHide: true });
-  return { project, write, env, cli, dispose() {
-    assert.equal(path.dirname(fs.realpathSync(project)).toLowerCase(), base.toLowerCase());
-    assert.ok(path.basename(project).startsWith("nccgs-phase1-"));
-    fs.rmSync(project, { recursive: true, force: true });
-  } };
-}
-
-test("verify parser separates helper options from the framework root and rejects shell composition", () => {
-  const f = fixture();
-  try {
-    const prefix = `node "${f.project.replaceAll("\\", "/")}/.claude/nccgs/tools/task.mjs" verify --id fixture --name test --project "${f.project}"`;
-    assert.equal(safeVerifyCommand(`${prefix} -- node helper.mjs --project "${f.project}"`, f.project), true);
-    assert.equal(safeVerifyCommand(`${prefix} -- node helper.mjs --project=anything`, f.project), true);
-    assert.equal(safeVerifyCommand(`${prefix} -- node -e "console.log('a;b')"`, f.project), true);
-    assert.equal(safeVerifyCommand(`${prefix} --project other -- node x`, f.project), false);
-    assert.equal(safeVerifyCommand(`${prefix.replace(`--project "${f.project}"`, '--project "../foreign"')} -- node x`, f.project), false);
-    for (const suffix of ["; echo bad", " && echo bad", " > output", " | node x"]) assert.equal(safeVerifyCommand(`${prefix} -- node x${suffix}`, f.project), false);
-    assert.equal(safeVerifyCommand(`${prefix} -- node -e "$(touch bad)"`, f.project), false);
-    f.write(".nccgs/runtime/bindings/parser.json", { taskId: "fixture" });
-    assert.doesNotThrow(() => guardTool(f.project, { session_id: "parser", tool_name: "Bash", tool_input: { command: `${prefix} -- node helper.mjs --project "${f.project}"` } }));
-  } finally { f.dispose(); }
-});
-
-test("detached verification survives its caller and repeated request keys reuse one immutable receipt", () => {
-  const f = fixture();
-  try {
-    const code = "setTimeout(()=>{require('node:fs').appendFileSync('.nccgs/evidence/count.txt','run\\n');console.log('real subprocess output')},400)";
-    const args = ["verify", "--id", "fixture", "--name", "test", "--background", "--request-key", "once", "--", process.execPath, "-e", code];
-    // Add the framework project before the separator, as real callers must do.
-    const first = spawnSync(process.execPath, [path.join(f.project, ".claude/nccgs/tools/task.mjs"), ...args], { cwd: f.project, env: f.env, encoding: "utf8", windowsHide: true });
-    assert.equal(first.status, 0, first.stderr); const started = JSON.parse(first.stdout);
-    const result = waitVerification(f.project, started.jobId, "fixture", 10000);
-    assert.equal(result.status, "PASS");
-    const duplicate = startVerification(f.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", code], requestKey: "once" });
-    assert.deepEqual(duplicate.evidence, result.evidence);
-    assert.equal(fs.readFileSync(path.join(f.project, ".nccgs/evidence/count.txt"), "utf8"), "run\n");
-    const receipt = json(path.join(f.project, result.evidence.path));
-    assert.equal(receipt.sourceUnchanged, true); assert.equal(receipt.exitCode, 0);
-    f.write("Assets/source.cs", "// changed");
-    assert.throws(() => startVerification(f.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", code], requestKey: "once" }), /changed source/);
-    assert.throws(() => jobStatus(f.project, started.jobId, "other"), /another task/);
-  } finally { f.dispose(); }
-});
-
-test("timeout and source mutation produce failed receipts, never reusable PASS", () => {
-  const f = fixture(200);
-  try {
-    const timed = startVerification(f.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", "setTimeout(()=>{},10000)"], requestKey: "timeout" });
-    const failure = waitVerification(f.project, timed.jobId, "fixture", 15000);
-    assert.equal(failure.status, "FAIL"); assert.equal(json(path.join(f.project, failure.evidence.path)).timedOut, true);
-  } finally { f.dispose(); }
-  // A mutation needs time to execute; the timeout probe's 200ms budget could kill
-  // Node startup first under concurrent Windows tests and never touch the source.
-  const mutationFixture = fixture(5000);
-  try {
-    const changed = startVerification(mutationFixture.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", "require('node:fs').writeFileSync('Assets/source.cs','changed')"], requestKey: "mutation" });
-    const mutation = waitVerification(mutationFixture.project, changed.jobId, "fixture", 10000);
-    const receipt = json(path.join(mutationFixture.project, mutation.evidence.path));
-    assert.equal(mutation.status, "FAIL"); assert.equal(receipt.sourceUnchanged, false);
-    assert.equal(receipt.timedOut, false);
-  } finally { mutationFixture.dispose(); }
-});
-
-test("per-attempt timeout is bounded, pinned and forwarded only before the helper separator", () => {
-  const f = fixture();
-  try {
-    const beforeInputs = fs.readFileSync(path.join(f.project, ".nccgs/inputs.json"), "utf8");
-    const command = [process.execPath, "-e", "console.log('bounded timeout fixture')"];
-    const invoke = extra => spawnSync(process.execPath, [path.join(f.project, ".claude/nccgs/tools/task.mjs"),
-      "verify", "--id", "fixture", "--name", "long-check", "--request-key", "long-once", ...extra, "--", ...command],
-      { cwd: f.project, env: f.env, encoding: "utf8", windowsHide: true, timeout: 20000 });
-    const first = invoke(["--timeout-ms", "900000"]);
-    assert.equal(first.status, 0, first.stderr);
-    const result = JSON.parse(first.stdout);
-    assert.equal(result.status, "PASS");
-    assert.equal(json(path.join(f.project, result.evidence.path)).timeoutMs, 900000);
-    assert.equal(readJob(f.project, result.jobId).timeoutMs, 900000);
-    const duplicate = invoke(["--timeout-ms", "900000"]);
-    assert.equal(duplicate.status, 0, duplicate.stderr);
-    assert.deepEqual(JSON.parse(duplicate.stdout).evidence, result.evidence);
-    assert.notEqual(invoke(["--timeout-ms", "800000"]).status, 0);
-    assert.equal(fs.readFileSync(path.join(f.project, ".nccgs/inputs.json"), "utf8"), beforeInputs);
-    for (const timeoutMs of [0, 99, 1.5, 7200001, NaN, Infinity, null, "900000"]) {
-      assert.throws(() => startVerification(f.project, "fixture", { name: "long-check", executable: process.execPath,
-        arguments: command.slice(1), requestKey: "invalid", timeoutMs }), /timeoutMs/);
-    }
-    assert.throws(() => startVerification(f.project, "fixture", { name: "test", executable: process.execPath,
-      arguments: command.slice(1), requestKey: "configured-limit", timeoutMs: 5001 }), /configured check timeout/);
-    const helper = f.write(".nccgs/helper.mjs", "console.log(process.argv.slice(2).join(' '));");
-    const forwarded = spawnSync(process.execPath, [path.join(f.project, ".claude/nccgs/tools/task.mjs"),
-      "verify", "--id", "fixture", "--name", "test", "--request-key", "helper-timeout", "--", process.execPath, helper,
-      "--timeout-ms", "900000"], { cwd: f.project, env: f.env, encoding: "utf8", windowsHide: true, timeout: 20000 });
-    assert.equal(forwarded.status, 0, forwarded.stderr);
-    const forwardedReceipt = json(path.join(f.project, JSON.parse(forwarded.stdout).evidence.path));
-    assert.equal(forwardedReceipt.timeoutMs, 5000);
-    assert.match(fs.readFileSync(path.join(f.project, forwardedReceipt.log.path), "utf8"), /--timeout-ms 900000/);
-  } finally { f.dispose(); }
-});
-
-test("long verification remains owned and bounded by its pinned supervisor deadline", () => {
-  const f = fixture();
-  try {
-    const runId = crypto.randomUUID(), sessionId = crypto.randomUUID(), deadline = Date.now() + 2500;
-    f.write(`.nccgs/runs/task-fixture.lock`, { runId });
-    const run = { project: f.project, taskId: "fixture", sessionId, deadline };
-    f.write(`.nccgs/runs/${runId}/run.json`, run);
-    const args = [path.join(f.project, ".claude/nccgs/tools/task.mjs"), "verify", "--id", "fixture",
-      "--name", "long-check", "--request-key", "supervised-long", "--timeout-ms", "900000", "--",
-      process.execPath, "-e", "setTimeout(()=>{require('node:fs').writeFileSync('.nccgs/evidence/late.txt','bad')},60000)"];
-    const env = { ...f.env, NCCGS_SUPERVISED_SESSION: sessionId };
-    const result = spawnSync(process.execPath, args, { cwd: f.project, env, encoding: "utf8", windowsHide: true, timeout: 20000 });
-    assert.equal(result.status, 1, result.stderr);
-    const stopped = JSON.parse(result.stdout), receipt = json(path.join(f.project, stopped.evidence.path));
-    assert.equal(receipt.status, "FAIL"); assert.equal(receipt.timedOut, true);
-    assert.equal(receipt.timeoutMs, 900000); assert.equal(receipt.supervisorDeadline, deadline);
-    const launch = json(path.join(jobDirectory(f.project, stopped.jobId), "launch.json"));
-    assert.equal(pidState(launch.pid), "dead");
-    assert.equal(fs.existsSync(path.join(f.project, ".nccgs/evidence/late.txt")), false);
-    // A settled request remains idempotent after expiry; a fresh attempt cannot run.
-    const repeat = spawnSync(process.execPath, args, { cwd: f.project, env, encoding: "utf8", windowsHide: true, timeout: 10000 });
-    assert.deepEqual(JSON.parse(repeat.stdout).evidence, stopped.evidence);
-    const freshArgs = args.map(a => a === "supervised-long" ? "too-late" : a);
-    const expired = spawnSync(process.execPath, freshArgs, { cwd: f.project, env, encoding: "utf8", windowsHide: true, timeout: 10000 });
-    assert.notEqual(expired.status, 0); assert.match(expired.stderr, /deadline reached/);
-    const foreign = spawnSync(process.execPath, freshArgs, { cwd: f.project, env: { ...env, NCCGS_SUPERVISED_SESSION: crypto.randomUUID() }, encoding: "utf8", windowsHide: true, timeout: 10000 });
-    assert.notEqual(foreign.status, 0); assert.match(foreign.stderr, /binding mismatch/);
-  } finally { f.dispose(); }
-});
-
-test("dead lock owners recover with evidence; live, unknown, legacy and spawning owners do not expire", () => {
-  const f = fixture();
-  try {
-    const file = path.join(f.project, ".nccgs/test.lock");
-    const module = new URL("../.claude/nccgs/tools/process-lock.mjs", import.meta.url).href;
-    const held = spawnSync(process.execPath, ["--input-type=module", "-e", `import {acquireLock} from ${JSON.stringify(module)}; acquireLock(${JSON.stringify(file)});`], { encoding: "utf8", windowsHide: true });
-    assert.equal(held.status, 0, held.stderr);
-    const recovered = acquireLock(file);
-    assert.ok(fs.existsSync(`${file}.recoveries.jsonl`));
-    assert.throws(() => acquireLock(file), /live or unverified/); recovered.release();
-    for (const owner of [{ pid: 99999999 }, { schemaVersion: 1, host: "other-machine", pid: 99999999, token: "remote" },
-      { schemaVersion: 1, host: os.hostname(), pid: 99999999, token: "gap", phase: "spawning" }]) {
-      atomicJson(file, owner); assert.throws(() => acquireLock(file), /live or unverified/); fs.unlinkSync(file);
-    }
-  } finally { f.dispose(); }
-});
-
-test("a dead owner with a live command retains its engine lock", async () => {
-  const f = fixture(), child = spawn(process.execPath, ["-e", "setTimeout(()=>{},20000)"], { stdio: "ignore", windowsHide: true });
-  try {
-    await new Promise((resolve, reject) => { child.once("spawn", resolve); child.once("error", reject); });
-    const file = path.join(f.project, ".nccgs/engine.lock");
-    atomicJson(file, { schemaVersion: 1, host: os.hostname(), pid: 99999999, token: "dead-parent", phase: "running", child: { pid: child.pid, group: false } });
-    assert.throws(() => acquireLock(file), /live or unverified/);
-    const closed = new Promise(resolve => child.once("close", resolve)); child.kill(); await closed;
-    // Legacy/unmanaged children cannot prove that descendants have exited.
-    if (process.platform === "win32") assert.throws(() => acquireLock(file), /live or unverified/);
-  } finally { if (pidState(child.pid) === "alive") child.kill(); f.dispose(); }
-});
-
-test("OS-owned process group retains orphan descendants and proves their exit after host termination", { skip: process.platform !== "win32" }, async () => {
-  const f = fixture(); let host, descendant;
-  try {
-    const id = crypto.randomUUID(), directory = path.join(f.project, ".nccgs");
-    const code = "const cp=require('node:child_process'),fs=require('node:fs');const p=cp.spawn(process.execPath,['-e','setTimeout(()=>{},20000)'],{stdio:'ignore',detached:true});fs.writeFileSync('.nccgs/descendant.json',JSON.stringify({pid:p.pid}));p.unref();";
-    const managed = startCommand({ executable: process.execPath, args: ["-e", code], cwd: f.project, stateDirectory: directory, id, stdio: "ignore" });
-    host = managed.child;
-    const closed = new Promise(resolve => host.once("close", resolve));
-    const deadline = Date.now() + 10000;
-    while (!fs.existsSync(path.join(directory, "descendant.json")) && Date.now() < deadline) await delay(50);
-    descendant = json(path.join(directory, "descendant.json")).pid;
-    assert.equal(pidState(descendant), "alive"); assert.equal(pidState(host.pid), "alive");
-    const file = path.join(directory, "engine.lock");
-    atomicJson(file, { schemaVersion: 1, host: os.hostname(), pid: 99999999, token: "orphan-owner", phase: "running", child: managed.identity() });
-    assert.throws(() => acquireLock(file), /live or unverified/);
-    host.kill("SIGKILL"); await closed;
-    assert.equal(treeState(managed.identity()), "dead"); assert.equal(pidState(descendant), "dead");
-    const recovered = acquireLock(file); recovered.release();
-    assert.ok(fs.existsSync(`${file}.recoveries.jsonl`));
-  } finally { if (host && pidState(host.pid) === "alive") host.kill("SIGKILL"); f.dispose(); }
-});
-
-test("managed wrappers avoid the resident Unity auth broker without changing the caller or persisting its environment", () => {
-  const f = fixture();
-  const key = "UNITY_NO_AUTH_BROKER", previous = process.env[key];
-  const sentinelKey = "NCCGS_TEST_PRIVATE_ENV", previousSentinel = process.env[sentinelKey];
-  const sentinel = crypto.randomUUID();
-  try {
-    // Even a wrapper, rather than a direct `unity` executable, must inherit it.
-    // Explicitly avoid modifying stored auth, peer-signature or account settings.
-    process.env[key] = "0"; process.env[sentinelKey] = sentinel;
-    const code = "const cp=require('node:child_process'); const c=cp.spawnSync(process.execPath,['-e',\"console.log(JSON.stringify({broker:process.env.UNITY_NO_AUTH_BROKER,peer:process.env.UNITY_PEER_AUTH_MODE??null,privateEnv:process.env.NCCGS_TEST_PRIVATE_ENV}))\"],{encoding:'utf8'});process.stdout.write(c.stdout);process.exitCode=c.status;";
-    const started = startVerification(f.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", code], requestKey: "direct-keyring" });
-    const settled = waitVerification(f.project, started.jobId, "fixture", 15000);
-    assert.equal(settled.status, "PASS");
-    const receipt = json(path.join(f.project, settled.evidence.path));
-    const values = JSON.parse(fs.readFileSync(path.join(f.project, receipt.log.path), "utf8"));
-    assert.equal(values.broker, "1");
-    assert.equal(values.peer, process.env.UNITY_PEER_AUTH_MODE ?? null);
-    assert.equal(values.privateEnv, sentinel);
-    assert.equal(process.env[key], "0"); assert.equal(process.env[sentinelKey], sentinel);
-    // Environment values are inherited in memory, never serialized in the job
-    // specification or receipt (which may otherwise expose credentials).
-    assert.equal(JSON.stringify(receipt).includes(sentinel), false);
-    const spec = path.join(jobDirectory(f.project, started.jobId), `${started.jobId}-command.json`);
-    if (fs.existsSync(spec)) assert.equal(fs.readFileSync(spec, "utf8").includes(sentinel), false);
-  } finally {
-    if (previous === undefined) delete process.env[key]; else process.env[key] = previous;
-    if (previousSentinel === undefined) delete process.env[sentinelKey]; else process.env[sentinelKey] = previousSentinel;
-    f.dispose();
-  }
-});
-
-test("a completed wrapper still waits for its real descendant and retains the wrapper exit code", { skip: process.platform !== "win32" }, async () => {
-  const f = fixture();
-  try {
-    const descendant = "setTimeout(()=>require('node:fs').writeFileSync('.nccgs/evidence/descendant-completed.txt','done'),1800)";
-    const wrapper = `const cp=require('node:child_process'),fs=require('node:fs');const p=cp.spawn(process.execPath,['-e',${JSON.stringify(descendant)}],{stdio:'ignore',detached:true});fs.writeFileSync('.nccgs/evidence/wrapper-completed.txt','done');p.unref();process.exitCode=7;`;
-    const started = startVerification(f.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", wrapper], requestKey: "descendant-drain" });
-    const marker = path.join(f.project, '.nccgs/evidence/wrapper-completed.txt');
-    const deadline = Date.now() + 10000;
-    while (!fs.existsSync(marker) && Date.now() < deadline) await delay(20);
-    assert.equal(fs.existsSync(marker), true);
-    assert.equal(jobStatus(f.project, started.jobId, "fixture").status, "RUNNING");
-    const result = waitVerification(f.project, started.jobId, "fixture", 15000);
-    assert.equal(result.status, "FAIL");
-    assert.equal(json(path.join(f.project, result.evidence.path)).exitCode, 7);
-    assert.equal(fs.readFileSync(path.join(f.project, '.nccgs/evidence/descendant-completed.txt'), 'utf8'), 'done');
-  } finally { f.dispose(); }
-});
-
-test("orphan verification becomes a retained failed attempt without rerunning the command", () => {
-  const f = fixture();
-  try {
-    const jobId = crypto.randomUUID(), directory = jobDirectory(f.project, jobId);
-    fs.mkdirSync(directory, { recursive: true });
-    atomicJson(path.join(directory, "request.json"), { schemaVersion: 1, id: jobId, project: fs.realpathSync(f.project), taskId: "fixture", name: "test", queuedAt: new Date().toISOString(), snapshot: "unknown", executable: "unlaunched", arguments: [] });
-    atomicJson(path.join(directory, "owner.lock"), { schemaVersion: 1, host: os.hostname(), pid: 99999999, token: "orphan", phase: "owned", child: null });
-    const failed = jobStatus(f.project, jobId, "fixture");
-    assert.equal(failed.status, "FAIL");
-    assert.equal(json(path.join(f.project, failed.evidence.path)).exitCode, null);
-    assert.match(json(path.join(f.project, failed.evidence.path)).error, /without a terminal receipt/);
-    assert.deepEqual(jobStatus(f.project, jobId, "fixture").evidence, failed.evidence);
-  } finally { f.dispose(); }
-});
-
-test("Unity compiler shutdown verifies exact pipe ownership, qualified binaries and bounded acknowledgement", { skip: process.platform !== "win32" }, () => {
-  const f = fixture();
-  try {
-    const binary = path.join(f.project, '.nccgs/compiler-shutdown-fixture.exe');
-    const compiler = path.join(process.env.SystemRoot || 'C:/Windows', 'Microsoft.NET/Framework64/v4.0.30319/csc.exe');
-    const built = spawnSync(compiler, ['/nologo', '/target:exe', `/out:${binary}`,
-      path.join(root, '.claude/nccgs/tools/windows-compiler-server.cs'),
-      path.join(root, 'tests/fixtures/compiler-shutdown.cs')], { encoding: 'utf8', windowsHide: true, timeout: 30000 });
-    assert.equal(built.status, 0, built.stdout + built.stderr);
-    const result = spawnSync(binary, [path.join(f.project, '.nccgs/fake-install')], { encoding: 'utf8', windowsHide: true, timeout: 10000 });
-    assert.equal(result.status, 0, result.stdout + result.stderr);
-    assert.match(result.stdout, /compiler shutdown guards PASS/);
-  } finally { f.dispose(); }
-});
-
-// The fake native executable below is explicitly a fixture, never Claude evidence.
-function fakeNative(f, { missingUsage = false, omitReport = false } = {}) {
-  return f.write(".nccgs/fake-native.mjs", `
-import fs from 'node:fs';
-import {run} from '../.claude/nccgs/tools/task.mjs';
-const args=process.argv.slice(2), resumed=args.includes('--resume');
-const session=args[args.indexOf(resumed?'--resume':'--session-id')+1];
-if(!resumed) run(['verify','--id','fixture','--name','test','--background','--request-key','native-once','--',process.execPath,'-e',"setTimeout(()=>console.log('fixture command done'),800)"]);
-else if(${!omitReport}) run(['report','--id','fixture','--outcome','partial','--summary','Fixture native continuation read the managed receipt; no game acceptance']);
-console.log(JSON.stringify({type:'result',session_id:session,total_cost_usd:${missingUsage ? "null" : "resumed?0.6:0.4"},result:'Synthetic native result; no actual model execution'}));
-`);
-}
-test("supervisor clamps real launch arguments to work allowance and retains the final review reserve", async () => {
-  const f = fixture();
-  try {
-    f.write('.nccgs/evidence/budget-request.json', { schemaVersion: 1, authority: 'Synthetic test only', totalUsd: 1, finalReviewUsd: 0.4, totalDurationMs: 60000, finalReviewDurationMs: 10000 });
-    registerReviewBudget(f.project, 'fixture', '.nccgs/evidence/budget-request.json');
-    const binary = fakeNative(f), prompt = f.write('.nccgs/prompt.txt', 'Synthetic fixture only');
-    assert.equal(await supervise({ project: f.project, binary: process.execPath, mode: 'full', args: [binary], env: f.env,
-      supervision: { taskId: 'fixture', promptFile: prompt, budgetUsd: 1, maxResumes: 1, timeoutMs: 20000, budgetPhase: 'work' } }), 0);
-    const id = fs.readdirSync(path.join(f.project, '.nccgs/runs'), { withFileTypes: true }).find(e => e.isDirectory()).name;
-    const run = json(path.join(f.project, `.nccgs/runs/${id}/run.json`));
-    assert.equal(run.budgetUsd, 0.6); assert.equal(run.invocations[0].allowanceUsd, 0.6);
-    assert.ok(Math.abs(run.invocations[1].allowanceUsd - 0.2) < 1e-9); assert.equal(run.cumulativeCostUsd, 0.6);
-    assert.equal(reviewBudgetStatus(f.project, 'fixture').protectedReviewUsd, 0.4);
-  } finally { f.dispose(); }
-});
-test("final-review session blocks new engine jobs in both hook and direct lifecycle command", () => {
-  const f = fixture(), names = ['NCCGS_SUPERVISED_RUN','NCCGS_SUPERVISED_SESSION'], saved = names.map(n => process.env[n]);
-  try {
-    const id = crypto.randomUUID(), session = 'final-review-fixture';
-    f.write(`.nccgs/runs/${id}/run.json`, { sessionId: session, budgetPhase: 'final-review' });
-    f.write(`.nccgs/runtime/bindings/${session}.json`, { taskId: 'fixture' });
-    process.env.NCCGS_SUPERVISED_RUN = id; process.env.NCCGS_SUPERVISED_SESSION = session;
-    assert.throws(() => startVerification(f.project, 'fixture', { name: 'test', executable: process.execPath, arguments: ['-e','console.log(1)'] }), /Final-review reserve/);
-    assert.throws(() => guardTool(f.project, { session_id: session, tool_name: 'Bash', tool_input: { command: 'node .claude/nccgs/tools/task.mjs verify --id fixture --name test -- node helper.mjs' } }), /Final-review reserve/);
-    assert.throws(() => guardTool(f.project, { session_id: session, tool_name: 'Bash', tool_input: { command: 'node .claude/nccgs/tools/task.mjs budget-plan --id fixture --file .nccgs/evidence/budget.json' } }), /External decisions/);
-  } finally { names.forEach((n,i) => { if(saved[i]===undefined) delete process.env[n]; else process.env[n]=saved[i]; }); f.dispose(); }
-});
-test("supervisor waits outside the model, resumes the same session once, preserves cumulative budget and receipts", async () => {
-  const f = fixture();
-  try {
-    const binary = fakeNative(f), prompt = f.write(".nccgs/prompt.txt", "Fixture only");
-    const plan = { project: f.project, binary: process.execPath, mode: "full", args: [binary], env: f.env,
-      supervision: { taskId: "fixture", promptFile: prompt, budgetUsd: 1, maxResumes: 1, timeoutMs: 20000 } };
-    assert.equal(await supervise(plan), 0);
-    const runId = fs.readdirSync(path.join(f.project, ".nccgs/runs"), { withFileTypes: true }).find(e => e.isDirectory()).name;
-    const state = json(path.join(f.project, `.nccgs/runs/${runId}/run.json`));
-    assert.equal(state.status, "settled"); assert.equal(state.invocations.length, 2);
-    assert.equal(state.cumulativeCostUsd, 0.6); assert.equal(state.invocations[1].allowanceUsd, 0.6);
-    assert.equal(state.invocations[0].terminal.session_id, state.invocations[1].terminal.session_id);
-    assert.equal(fs.readdirSync(path.join(f.project, ".nccgs/jobs")).length, 1);
-    assert.equal(await supervise({ ...plan, supervision: { recoverRun: runId } }), 0);
-    assert.equal(json(path.join(f.project, `.nccgs/runs/${runId}/run.json`)).invocations.length, 2);
-  } finally { f.dispose(); }
-});
-
-test("supervisor can settle a plan without granting source writes or shell checks", async () => {
-  const f = fixture(5000, "plan");
-  try {
-    const binary = f.write(".nccgs/plan-native.mjs", `import {run} from '../.claude/nccgs/tools/task.mjs';
-const args=process.argv.slice(2);const session=args[args.indexOf('--session-id')+1];
-run(['report','--id','fixture','--outcome','partial','--summary','Synthetic plan report; document review pending']);
-console.log(JSON.stringify({type:'result',session_id:session,total_cost_usd:0.1,result:'Synthetic, not real Claude'}));`);
-    const prompt = f.write(".nccgs/prompt.txt", "Synthetic plan supervision");
-    assert.equal(await supervise({ project: f.project, binary: process.execPath, mode: "full", args: [binary], env: f.env,
-      supervision: { taskId: "fixture", promptFile: prompt, budgetUsd: 1, maxResumes: 0, timeoutMs: 20000 } }), 0);
-    const runId = fs.readdirSync(path.join(f.project, ".nccgs/runs"), { withFileTypes: true }).find(e => e.isDirectory()).name;
-    const state = json(path.join(f.project, `.nccgs/runs/${runId}/run.json`));
-    assert.equal(state.status, "settled"); assert.equal(state.invocations.length, 1);
-    assert.throws(() => guardTool(f.project, { session_id: state.sessionId, tool_name: "Write", tool_input: { file_path: "Assets/source.cs" } }), /cannot edit source/);
-    assert.throws(() => guardTool(f.project, { session_id: state.sessionId, tool_name: "Bash", tool_input: { command: "node helper.mjs" } }), /shell execution is blocked/);
-  } finally { f.dispose(); }
-});
-
-test("supervisor retains unknown usage and refuses a renewed budget", async () => {
-  const f = fixture();
-  try {
-    const binary = fakeNative(f, { missingUsage: true }), prompt = f.write(".nccgs/prompt.txt", "Fixture only");
-    assert.equal(await supervise({ project: f.project, binary: process.execPath, mode: "full", args: [binary], env: f.env,
-      supervision: { taskId: "fixture", promptFile: prompt, budgetUsd: 1, maxResumes: 2, timeoutMs: 20000 } }), 1);
-    const runId = fs.readdirSync(path.join(f.project, ".nccgs/runs"), { withFileTypes: true }).find(e => e.isDirectory()).name;
-    const state = json(path.join(f.project, `.nccgs/runs/${runId}/run.json`));
-    assert.equal(state.status, "blocked"); assert.equal(state.invocations.length, 1); assert.match(state.reason, /cost/);
-    const jobId = fs.readdirSync(path.join(f.project, ".nccgs/jobs"))[0];
-    const verified = waitVerification(f.project, jobId, "fixture", 10000);
-    assert.equal(verified.status, "PASS", JSON.stringify(verified.evidence ? json(path.join(f.project, verified.evidence.path)) : verified));
-  } finally { f.dispose(); }
-});
-
-test("cumulative native cost rejects double counting, missing and mismatched sessions", () => {
-  assert.equal(cumulativeCost(0.4, { type: "result", session_id: "s", total_cost_usd: 0.6 }, "s"), 0.6);
-  assert.throws(() => cumulativeCost(0.4, { type: "result", session_id: "s", total_cost_usd: 0.2 }, "s"), /decreasing/);
-  assert.throws(() => cumulativeCost(0, { type: "result", session_id: "wrong", total_cost_usd: 0.2 }, "s"), /correlated/);
-});
-
-test("supervisor stops at the pinned continuation limit without resetting the attempt", async () => {
-  const f = fixture();
-  try {
-    const executable = fakeNative(f, { omitReport: true }), prompt = f.write(".nccgs/prompt.txt", "Fixture only");
-    assert.equal(await supervise({ project: f.project, binary: process.execPath, mode: "full", args: [executable], env: f.env,
-      supervision: { taskId: "fixture", promptFile: prompt, budgetUsd: 1, maxResumes: 1, timeoutMs: 20000 } }), 1);
-    const runId = fs.readdirSync(path.join(f.project, ".nccgs/runs"), { withFileTypes: true }).find(e => e.isDirectory()).name;
-    const state = json(path.join(f.project, `.nccgs/runs/${runId}/run.json`));
-    assert.equal(state.invocations.length, 2); assert.match(state.reason, /Continuation limit/);
-    assert.equal(state.cumulativeCostUsd, 0.6); assert.ok(state.checkpoint);
-  } finally { f.dispose(); }
-});
-
-test("supervisor refuses a fresh native invocation after the session allowance is spent", async () => {
-  const f = fixture();
-  try {
-    const executable = fakeNative(f), prompt = f.write(".nccgs/prompt.txt", "Fixture only");
-    assert.equal(await supervise({ project: f.project, binary: process.execPath, mode: "full", args: [executable], env: f.env,
-      supervision: { taskId: "fixture", promptFile: prompt, budgetUsd: 0.4, maxResumes: 2, timeoutMs: 20000 } }), 1);
-    const runId = fs.readdirSync(path.join(f.project, ".nccgs/runs"), { withFileTypes: true }).find(e => e.isDirectory()).name;
-    const state = json(path.join(f.project, `.nccgs/runs/${runId}/run.json`));
-    assert.equal(state.invocations.length, 1); assert.equal(state.cumulativeCostUsd, 0.4);
-    assert.match(state.reason, /budget exhausted/); assert.equal(state.costCoverage, "complete");
-  } finally { f.dispose(); }
-});
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import crypto from "node:crypto";
+import { spawn, spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import test from "node:test";
+import { atomicJson, json } from "../.claude/nccgs/tools/policy.mjs";
+import { initialize } from "../.claude/nccgs/tools/gates.mjs";
+import { acquireLock, delay, pidState, treeState } from "../.claude/nccgs/tools/process-lock.mjs";
+import { startCommand } from "../.claude/nccgs/tools/command-process.mjs";
+import { startVerification, waitVerification, jobStatus, readJob, jobDirectory } from "../.claude/nccgs/tools/verification-jobs.mjs";
+import { safeVerifyCommand, guardTool } from "../.claude/nccgs/tools/tool-guard.mjs";
+import { cumulativeCost, supervise } from "../scripts/supervise.mjs";
+import { registerReviewBudget, reviewBudgetStatus } from "../.claude/nccgs/tools/review-budget.mjs";
+import { nativeProvider } from "./fixtures/native-provider.mjs";
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+function fixture(timeoutMs = 5000, mode = "implement") {
+  const base = fs.realpathSync(os.tmpdir()), project = fs.mkdtempSync(path.join(base, "nccgs-phase1-"));
+  const write = (relative, value) => {
+    const file = path.join(project, relative); fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, typeof value === "string" ? value : JSON.stringify(value)); return file;
+  };
+  fs.cpSync(path.join(root, ".claude/nccgs/tools"), path.join(project, ".claude/nccgs/tools"), { recursive: true });
+  for (const file of ["pipeline.json", "studio.json"]) write(`.claude/nccgs/${file}`, fs.readFileSync(path.join(root, ".claude/nccgs", file), "utf8"));
+  write("Assets/source.cs", "// frozen fixture source");
+  write(".nccgs/project.yaml", "schema_version: 2\nmodels:\n  profile: claude-standalone\n");
+  write(".nccgs/execution.json", { schemaVersion: 1, name: "standalone", externalReview: { mode: "off" } });
+  write(".nccgs/inputs.json", { schemaVersion: 1, canonicalInputs: [], outputDirectories: [], checks: { test: { timeoutMs } } });
+  write(".nccgs/intake.json", { objective: "Process lifecycle fixture; no actual Claude/model/game execution", mode, requiredChecks: ["test"] });
+  initialize(project, "fixture", null, null, null, { intake: ".nccgs/intake.json" });
+  const env = { ...process.env };
+  for (const key of ["CLAUDECODE", "CLAUDE_CODE_ENTRYPOINT", "NCCGS_TASK_ID", "NCCGS_SUPERVISED_SESSION", "NCCGS_PROJECT_ROOT"]) delete env[key];
+  const cli = (...args) => spawnSync(process.execPath, [path.join(project, ".claude/nccgs/tools/task.mjs"), ...args, "--project", project], { cwd: project, env, encoding: "utf8", timeout: 20000, windowsHide: true });
+  return { project, write, env, cli, dispose() {
+    assert.equal(path.dirname(fs.realpathSync(project)).toLowerCase(), base.toLowerCase());
+    assert.ok(path.basename(project).startsWith("nccgs-phase1-"));
+    fs.rmSync(project, { recursive: true, force: true });
+  } };
+}
+
+test("verify parser separates helper options from the framework root and rejects shell composition", () => {
+  const f = fixture();
+  try {
+    const prefix = `node "${f.project.replaceAll("\\", "/")}/.claude/nccgs/tools/task.mjs" verify --id fixture --name test --project "${f.project}"`;
+    assert.equal(safeVerifyCommand(`${prefix} -- node helper.mjs --project "${f.project}"`, f.project), true);
+    assert.equal(safeVerifyCommand(`${prefix} -- node helper.mjs --project=anything`, f.project), true);
+    assert.equal(safeVerifyCommand(`${prefix} -- node -e "console.log('a;b')"`, f.project), true);
+    assert.equal(safeVerifyCommand(`${prefix} --project other -- node x`, f.project), false);
+    assert.equal(safeVerifyCommand(`${prefix.replace(`--project "${f.project}"`, '--project "../foreign"')} -- node x`, f.project), false);
+    for (const suffix of ["; echo bad", " && echo bad", " > output", " | node x"]) assert.equal(safeVerifyCommand(`${prefix} -- node x${suffix}`, f.project), false);
+    assert.equal(safeVerifyCommand(`${prefix} -- node -e "$(touch bad)"`, f.project), false);
+    f.write(".nccgs/runtime/bindings/parser.json", { taskId: "fixture" });
+    assert.doesNotThrow(() => guardTool(f.project, { session_id: "parser", tool_name: "Bash", tool_input: { command: `${prefix} -- node helper.mjs --project "${f.project}"` } }));
+  } finally { f.dispose(); }
+});
+
+test("detached verification survives its caller and repeated request keys reuse one immutable receipt", () => {
+  const f = fixture();
+  try {
+    const code = "setTimeout(()=>{require('node:fs').appendFileSync('.nccgs/evidence/count.txt','run\\n');console.log('real subprocess output')},400)";
+    const args = ["verify", "--id", "fixture", "--name", "test", "--background", "--request-key", "once", "--", process.execPath, "-e", code];
+    // Add the framework project before the separator, as real callers must do.
+    const first = spawnSync(process.execPath, [path.join(f.project, ".claude/nccgs/tools/task.mjs"), ...args], { cwd: f.project, env: f.env, encoding: "utf8", windowsHide: true });
+    assert.equal(first.status, 0, first.stderr); const started = JSON.parse(first.stdout);
+    const result = waitVerification(f.project, started.jobId, "fixture", 10000);
+    assert.equal(result.status, "PASS");
+    const duplicate = startVerification(f.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", code], requestKey: "once" });
+    assert.deepEqual(duplicate.evidence, result.evidence);
+    assert.equal(fs.readFileSync(path.join(f.project, ".nccgs/evidence/count.txt"), "utf8"), "run\n");
+    const receipt = json(path.join(f.project, result.evidence.path));
+    assert.equal(receipt.sourceUnchanged, true); assert.equal(receipt.exitCode, 0);
+    f.write("Assets/source.cs", "// changed");
+    assert.throws(() => startVerification(f.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", code], requestKey: "once" }), /changed source/);
+    assert.throws(() => jobStatus(f.project, started.jobId, "other"), /another task/);
+  } finally { f.dispose(); }
+});
+
+test("timeout and source mutation produce failed receipts, never reusable PASS", () => {
+  const f = fixture(200);
+  try {
+    const timed = startVerification(f.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", "setTimeout(()=>{},10000)"], requestKey: "timeout" });
+    const failure = waitVerification(f.project, timed.jobId, "fixture", 15000);
+    assert.equal(failure.status, "FAIL"); assert.equal(json(path.join(f.project, failure.evidence.path)).timedOut, true);
+  } finally { f.dispose(); }
+  // A mutation needs time to execute; the timeout probe's 200ms budget could kill
+  // Node startup first under concurrent Windows tests and never touch the source.
+  const mutationFixture = fixture(5000);
+  try {
+    const changed = startVerification(mutationFixture.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", "require('node:fs').writeFileSync('Assets/source.cs','changed')"], requestKey: "mutation" });
+    const mutation = waitVerification(mutationFixture.project, changed.jobId, "fixture", 10000);
+    const receipt = json(path.join(mutationFixture.project, mutation.evidence.path));
+    assert.equal(mutation.status, "FAIL"); assert.equal(receipt.sourceUnchanged, false);
+    assert.equal(receipt.timedOut, false);
+  } finally { mutationFixture.dispose(); }
+});
+
+test("per-attempt timeout is bounded, pinned and forwarded only before the helper separator", () => {
+  const f = fixture();
+  try {
+    const beforeInputs = fs.readFileSync(path.join(f.project, ".nccgs/inputs.json"), "utf8");
+    const command = [process.execPath, "-e", "console.log('bounded timeout fixture')"];
+    const invoke = extra => spawnSync(process.execPath, [path.join(f.project, ".claude/nccgs/tools/task.mjs"),
+      "verify", "--id", "fixture", "--name", "long-check", "--request-key", "long-once", ...extra, "--", ...command],
+      { cwd: f.project, env: f.env, encoding: "utf8", windowsHide: true, timeout: 20000 });
+    const first = invoke(["--timeout-ms", "900000"]);
+    assert.equal(first.status, 0, first.stderr);
+    const result = JSON.parse(first.stdout);
+    assert.equal(result.status, "PASS");
+    assert.equal(json(path.join(f.project, result.evidence.path)).timeoutMs, 900000);
+    assert.equal(readJob(f.project, result.jobId).timeoutMs, 900000);
+    const duplicate = invoke(["--timeout-ms", "900000"]);
+    assert.equal(duplicate.status, 0, duplicate.stderr);
+    assert.deepEqual(JSON.parse(duplicate.stdout).evidence, result.evidence);
+    assert.notEqual(invoke(["--timeout-ms", "800000"]).status, 0);
+    assert.equal(fs.readFileSync(path.join(f.project, ".nccgs/inputs.json"), "utf8"), beforeInputs);
+    for (const timeoutMs of [0, 99, 1.5, 7200001, NaN, Infinity, null, "900000"]) {
+      assert.throws(() => startVerification(f.project, "fixture", { name: "long-check", executable: process.execPath,
+        arguments: command.slice(1), requestKey: "invalid", timeoutMs }), /timeoutMs/);
+    }
+    assert.throws(() => startVerification(f.project, "fixture", { name: "test", executable: process.execPath,
+      arguments: command.slice(1), requestKey: "configured-limit", timeoutMs: 5001 }), /configured check timeout/);
+    const helper = f.write(".nccgs/helper.mjs", "console.log(process.argv.slice(2).join(' '));");
+    const forwarded = spawnSync(process.execPath, [path.join(f.project, ".claude/nccgs/tools/task.mjs"),
+      "verify", "--id", "fixture", "--name", "test", "--request-key", "helper-timeout", "--", process.execPath, helper,
+      "--timeout-ms", "900000"], { cwd: f.project, env: f.env, encoding: "utf8", windowsHide: true, timeout: 20000 });
+    assert.equal(forwarded.status, 0, forwarded.stderr);
+    const forwardedReceipt = json(path.join(f.project, JSON.parse(forwarded.stdout).evidence.path));
+    assert.equal(forwardedReceipt.timeoutMs, 5000);
+    assert.match(fs.readFileSync(path.join(f.project, forwardedReceipt.log.path), "utf8"), /--timeout-ms 900000/);
+  } finally { f.dispose(); }
+});
+
+test("long verification remains owned and bounded by its pinned supervisor deadline", () => {
+  const f = fixture();
+  try {
+    const runId = crypto.randomUUID(), sessionId = crypto.randomUUID(), deadline = Date.now() + 2500;
+    f.write(`.nccgs/runs/task-fixture.lock`, { runId });
+    const run = { project: f.project, taskId: "fixture", sessionId, deadline };
+    f.write(`.nccgs/runs/${runId}/run.json`, run);
+    const args = [path.join(f.project, ".claude/nccgs/tools/task.mjs"), "verify", "--id", "fixture",
+      "--name", "long-check", "--request-key", "supervised-long", "--timeout-ms", "900000", "--",
+      process.execPath, "-e", "setTimeout(()=>{require('node:fs').writeFileSync('.nccgs/evidence/late.txt','bad')},60000)"];
+    const env = { ...f.env, NCCGS_SUPERVISED_SESSION: sessionId };
+    const result = spawnSync(process.execPath, args, { cwd: f.project, env, encoding: "utf8", windowsHide: true, timeout: 20000 });
+    assert.equal(result.status, 1, result.stderr);
+    const stopped = JSON.parse(result.stdout), receipt = json(path.join(f.project, stopped.evidence.path));
+    assert.equal(receipt.status, "FAIL"); assert.equal(receipt.timedOut, true);
+    assert.equal(receipt.timeoutMs, 900000); assert.equal(receipt.supervisorDeadline, deadline);
+    const launch = json(path.join(jobDirectory(f.project, stopped.jobId), "launch.json"));
+    assert.equal(pidState(launch.pid), "dead");
+    assert.equal(fs.existsSync(path.join(f.project, ".nccgs/evidence/late.txt")), false);
+    // A settled request remains idempotent after expiry; a fresh attempt cannot run.
+    const repeat = spawnSync(process.execPath, args, { cwd: f.project, env, encoding: "utf8", windowsHide: true, timeout: 10000 });
+    assert.deepEqual(JSON.parse(repeat.stdout).evidence, stopped.evidence);
+    const freshArgs = args.map(a => a === "supervised-long" ? "too-late" : a);
+    const expired = spawnSync(process.execPath, freshArgs, { cwd: f.project, env, encoding: "utf8", windowsHide: true, timeout: 10000 });
+    assert.notEqual(expired.status, 0); assert.match(expired.stderr, /deadline reached/);
+    const foreign = spawnSync(process.execPath, freshArgs, { cwd: f.project, env: { ...env, NCCGS_SUPERVISED_SESSION: crypto.randomUUID() }, encoding: "utf8", windowsHide: true, timeout: 10000 });
+    assert.notEqual(foreign.status, 0); assert.match(foreign.stderr, /binding mismatch/);
+  } finally { f.dispose(); }
+});
+
+test("dead lock owners recover with evidence; live, unknown, legacy and spawning owners do not expire", () => {
+  const f = fixture();
+  try {
+    const file = path.join(f.project, ".nccgs/test.lock");
+    const module = new URL("../.claude/nccgs/tools/process-lock.mjs", import.meta.url).href;
+    const held = spawnSync(process.execPath, ["--input-type=module", "-e", `import {acquireLock} from ${JSON.stringify(module)}; acquireLock(${JSON.stringify(file)});`], { encoding: "utf8", windowsHide: true });
+    assert.equal(held.status, 0, held.stderr);
+    const recovered = acquireLock(file);
+    assert.ok(fs.existsSync(`${file}.recoveries.jsonl`));
+    assert.throws(() => acquireLock(file), /live or unverified/); recovered.release();
+    for (const owner of [{ pid: 99999999 }, { schemaVersion: 1, host: "other-machine", pid: 99999999, token: "remote" },
+      { schemaVersion: 1, host: os.hostname(), pid: 99999999, token: "gap", phase: "spawning" }]) {
+      atomicJson(file, owner); assert.throws(() => acquireLock(file), /live or unverified/); fs.unlinkSync(file);
+    }
+  } finally { f.dispose(); }
+});
+
+test("a dead owner with a live command retains its engine lock", async () => {
+  const f = fixture(), child = spawn(process.execPath, ["-e", "setTimeout(()=>{},20000)"], { stdio: "ignore", windowsHide: true });
+  try {
+    await new Promise((resolve, reject) => { child.once("spawn", resolve); child.once("error", reject); });
+    const file = path.join(f.project, ".nccgs/engine.lock");
+    atomicJson(file, { schemaVersion: 1, host: os.hostname(), pid: 99999999, token: "dead-parent", phase: "running", child: { pid: child.pid, group: false } });
+    assert.throws(() => acquireLock(file), /live or unverified/);
+    const closed = new Promise(resolve => child.once("close", resolve)); child.kill(); await closed;
+    // Legacy/unmanaged children cannot prove that descendants have exited.
+    if (process.platform === "win32") assert.throws(() => acquireLock(file), /live or unverified/);
+  } finally { if (pidState(child.pid) === "alive") child.kill(); f.dispose(); }
+});
+
+test("OS-owned process group retains orphan descendants and proves their exit after host termination", { skip: process.platform !== "win32" }, async () => {
+  const f = fixture(); let host, descendant;
+  try {
+    const id = crypto.randomUUID(), directory = path.join(f.project, ".nccgs");
+    const code = "const cp=require('node:child_process'),fs=require('node:fs');const p=cp.spawn(process.execPath,['-e','setTimeout(()=>{},20000)'],{stdio:'ignore',detached:true});fs.writeFileSync('.nccgs/descendant.json',JSON.stringify({pid:p.pid}));p.unref();";
+    const managed = startCommand({ executable: process.execPath, args: ["-e", code], cwd: f.project, stateDirectory: directory, id, stdio: "ignore" });
+    host = managed.child;
+    const closed = new Promise(resolve => host.once("close", resolve));
+    const deadline = Date.now() + 10000;
+    while (!fs.existsSync(path.join(directory, "descendant.json")) && Date.now() < deadline) await delay(50);
+    descendant = json(path.join(directory, "descendant.json")).pid;
+    assert.equal(pidState(descendant), "alive"); assert.equal(pidState(host.pid), "alive");
+    const file = path.join(directory, "engine.lock");
+    atomicJson(file, { schemaVersion: 1, host: os.hostname(), pid: 99999999, token: "orphan-owner", phase: "running", child: managed.identity() });
+    assert.throws(() => acquireLock(file), /live or unverified/);
+    host.kill("SIGKILL"); await closed;
+    assert.equal(treeState(managed.identity()), "dead"); assert.equal(pidState(descendant), "dead");
+    const recovered = acquireLock(file); recovered.release();
+    assert.ok(fs.existsSync(`${file}.recoveries.jsonl`));
+  } finally { if (host && pidState(host.pid) === "alive") host.kill("SIGKILL"); f.dispose(); }
+});
+
+test("managed wrappers avoid the resident Unity auth broker without changing the caller or persisting its environment", () => {
+  const f = fixture();
+  const key = "UNITY_NO_AUTH_BROKER", previous = process.env[key];
+  const sentinelKey = "NCCGS_TEST_PRIVATE_ENV", previousSentinel = process.env[sentinelKey];
+  const sentinel = crypto.randomUUID();
+  try {
+    // Even a wrapper, rather than a direct `unity` executable, must inherit it.
+    // Explicitly avoid modifying stored auth, peer-signature or account settings.
+    process.env[key] = "0"; process.env[sentinelKey] = sentinel;
+    const code = "const cp=require('node:child_process'); const c=cp.spawnSync(process.execPath,['-e',\"console.log(JSON.stringify({broker:process.env.UNITY_NO_AUTH_BROKER,peer:process.env.UNITY_PEER_AUTH_MODE??null,privateEnv:process.env.NCCGS_TEST_PRIVATE_ENV}))\"],{encoding:'utf8'});process.stdout.write(c.stdout);process.exitCode=c.status;";
+    const started = startVerification(f.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", code], requestKey: "direct-keyring" });
+    const settled = waitVerification(f.project, started.jobId, "fixture", 15000);
+    assert.equal(settled.status, "PASS");
+    const receipt = json(path.join(f.project, settled.evidence.path));
+    const values = JSON.parse(fs.readFileSync(path.join(f.project, receipt.log.path), "utf8"));
+    assert.equal(values.broker, "1");
+    assert.equal(values.peer, process.env.UNITY_PEER_AUTH_MODE ?? null);
+    assert.equal(values.privateEnv, sentinel);
+    assert.equal(process.env[key], "0"); assert.equal(process.env[sentinelKey], sentinel);
+    // Environment values are inherited in memory, never serialized in the job
+    // specification or receipt (which may otherwise expose credentials).
+    assert.equal(JSON.stringify(receipt).includes(sentinel), false);
+    const spec = path.join(jobDirectory(f.project, started.jobId), `${started.jobId}-command.json`);
+    if (fs.existsSync(spec)) assert.equal(fs.readFileSync(spec, "utf8").includes(sentinel), false);
+  } finally {
+    if (previous === undefined) delete process.env[key]; else process.env[key] = previous;
+    if (previousSentinel === undefined) delete process.env[sentinelKey]; else process.env[sentinelKey] = previousSentinel;
+    f.dispose();
+  }
+});
+
+test("a completed wrapper still waits for its real descendant and retains the wrapper exit code", { skip: process.platform !== "win32" }, async () => {
+  const f = fixture();
+  try {
+    const descendant = "setTimeout(()=>require('node:fs').writeFileSync('.nccgs/evidence/descendant-completed.txt','done'),1800)";
+    const wrapper = `const cp=require('node:child_process'),fs=require('node:fs');const p=cp.spawn(process.execPath,['-e',${JSON.stringify(descendant)}],{stdio:'ignore',detached:true});fs.writeFileSync('.nccgs/evidence/wrapper-completed.txt','done');p.unref();process.exitCode=7;`;
+    const started = startVerification(f.project, "fixture", { name: "test", executable: process.execPath, arguments: ["-e", wrapper], requestKey: "descendant-drain" });
+    const marker = path.join(f.project, '.nccgs/evidence/wrapper-completed.txt');
+    const deadline = Date.now() + 10000;
+    while (!fs.existsSync(marker) && Date.now() < deadline) await delay(20);
+    assert.equal(fs.existsSync(marker), true);
+    assert.equal(jobStatus(f.project, started.jobId, "fixture").status, "RUNNING");
+    const result = waitVerification(f.project, started.jobId, "fixture", 15000);
+    assert.equal(result.status, "FAIL");
+    assert.equal(json(path.join(f.project, result.evidence.path)).exitCode, 7);
+    assert.equal(fs.readFileSync(path.join(f.project, '.nccgs/evidence/descendant-completed.txt'), 'utf8'), 'done');
+  } finally { f.dispose(); }
+});
+
+test("orphan verification becomes a retained failed attempt without rerunning the command", () => {
+  const f = fixture();
+  try {
+    const jobId = crypto.randomUUID(), directory = jobDirectory(f.project, jobId);
+    fs.mkdirSync(directory, { recursive: true });
+    atomicJson(path.join(directory, "request.json"), { schemaVersion: 1, id: jobId, project: fs.realpathSync(f.project), taskId: "fixture", name: "test", queuedAt: new Date().toISOString(), snapshot: "unknown", executable: "unlaunched", arguments: [] });
+    atomicJson(path.join(directory, "owner.lock"), { schemaVersion: 1, host: os.hostname(), pid: 99999999, token: "orphan", phase: "owned", child: null });
+    const failed = jobStatus(f.project, jobId, "fixture");
+    assert.equal(failed.status, "FAIL");
+    assert.equal(json(path.join(f.project, failed.evidence.path)).exitCode, null);
+    assert.match(json(path.join(f.project, failed.evidence.path)).error, /without a terminal receipt/);
+    assert.deepEqual(jobStatus(f.project, jobId, "fixture").evidence, failed.evidence);
+  } finally { f.dispose(); }
+});
+
+test("Unity compiler shutdown verifies exact pipe ownership, qualified binaries and bounded acknowledgement", { skip: process.platform !== "win32" }, () => {
+  const f = fixture();
+  try {
+    const binary = path.join(f.project, '.nccgs/compiler-shutdown-fixture.exe');
+    const compiler = path.join(process.env.SystemRoot || 'C:/Windows', 'Microsoft.NET/Framework64/v4.0.30319/csc.exe');
+    const built = spawnSync(compiler, ['/nologo', '/target:exe', `/out:${binary}`,
+      path.join(root, '.claude/nccgs/tools/windows-compiler-server.cs'),
+      path.join(root, 'tests/fixtures/compiler-shutdown.cs')], { encoding: 'utf8', windowsHide: true, timeout: 30000 });
+    assert.equal(built.status, 0, built.stdout + built.stderr);
+    const result = spawnSync(binary, [path.join(f.project, '.nccgs/fake-install')], { encoding: 'utf8', windowsHide: true, timeout: 10000 });
+    assert.equal(result.status, 0, result.stdout + result.stderr);
+    assert.match(result.stdout, /compiler shutdown guards PASS/);
+  } finally { f.dispose(); }
+});
+
+// The fake native executable below is explicitly a fixture, never Claude evidence.
+function fakeNative(f, { missingUsage = false, omitReport = false } = {}) {
+  return f.write(".nccgs/fake-native.mjs", `
+import fs from 'node:fs';
+import {run} from '../.claude/nccgs/tools/task.mjs';
+const args=process.argv.slice(2), resumed=args.includes('--resume');
+fs.appendFileSync('.nccgs/fixture-argv.jsonl', JSON.stringify(args)+'\\n');
+const session=args[args.indexOf(resumed?'--resume':'--session-id')+1];
+if(!resumed) run(['verify','--id','fixture','--name','test','--background','--request-key','native-once','--',process.execPath,'-e',"setTimeout(()=>console.log('fixture command done'),800)"]);
+else if(${!omitReport}) run(['report','--id','fixture','--outcome','partial','--summary','Fixture native continuation read the managed receipt; no game acceptance']);
+console.log(JSON.stringify({type:'result',session_id:session,total_cost_usd:${missingUsage ? "null" : "resumed?0.6:0.4"},result:'Synthetic native result; no actual model execution'}));
+`);
+}
+test("supervisor clamps real launch arguments to work allowance and retains the final review reserve", async () => {
+  const f = fixture();
+  try {
+    f.write('.nccgs/evidence/budget-request.json', { schemaVersion: 1, authority: 'Synthetic test only', totalUsd: 1, finalReviewUsd: 0.4, totalDurationMs: 60000, finalReviewDurationMs: 10000 });
+    registerReviewBudget(f.project, 'fixture', '.nccgs/evidence/budget-request.json');
+    const binary = fakeNative(f), prompt = f.write('.nccgs/prompt.txt', 'Synthetic fixture only');
+    assert.equal(await supervise({ project: f.project, ...nativeProvider(f.project, binary, { env: f.env }),
+      supervision: { taskId: 'fixture', promptFile: prompt, budgetUsd: 1, maxResumes: 1, timeoutMs: 20000, budgetPhase: 'work' } }), 0);
+    const id = fs.readdirSync(path.join(f.project, '.nccgs/runs'), { withFileTypes: true }).find(e => e.isDirectory()).name;
+    const run = json(path.join(f.project, `.nccgs/runs/${id}/run.json`));
+    assert.equal(run.budgetUsd, 0.6); assert.equal(run.invocations[0].allowanceUsd, 0.6);
+    assert.ok(Math.abs(run.invocations[1].allowanceUsd - 0.2) < 1e-9); assert.equal(run.cumulativeCostUsd, 0.6);
+    assert.equal(reviewBudgetStatus(f.project, 'fixture').protectedReviewUsd, 0.4);
+  } finally { f.dispose(); }
+});
+test("final-review session blocks new engine jobs in both hook and direct lifecycle command", () => {
+  const f = fixture(), names = ['NCCGS_SUPERVISED_RUN','NCCGS_SUPERVISED_SESSION'], saved = names.map(n => process.env[n]);
+  try {
+    const id = crypto.randomUUID(), session = 'final-review-fixture';
+    f.write(`.nccgs/runs/${id}/run.json`, { sessionId: session, budgetPhase: 'final-review' });
+    f.write(`.nccgs/runtime/bindings/${session}.json`, { taskId: 'fixture' });
+    process.env.NCCGS_SUPERVISED_RUN = id; process.env.NCCGS_SUPERVISED_SESSION = session;
+    assert.throws(() => startVerification(f.project, 'fixture', { name: 'test', executable: process.execPath, arguments: ['-e','console.log(1)'] }), /Final-review reserve/);
+    assert.throws(() => guardTool(f.project, { session_id: session, tool_name: 'Bash', tool_input: { command: 'node .claude/nccgs/tools/task.mjs verify --id fixture --name test -- node helper.mjs' } }), /Final-review reserve/);
+    assert.throws(() => guardTool(f.project, { session_id: session, tool_name: 'Bash', tool_input: { command: 'node .claude/nccgs/tools/task.mjs budget-plan --id fixture --file .nccgs/evidence/budget.json' } }), /External decisions/);
+  } finally { names.forEach((n,i) => { if(saved[i]===undefined) delete process.env[n]; else process.env[n]=saved[i]; }); f.dispose(); }
+});
+test("supervisor waits outside the model, resumes the same session once, preserves cumulative budget and receipts", async () => {
+  const f = fixture();
+  try {
+    const binary = fakeNative(f), prompt = f.write(".nccgs/prompt.txt", "Fixture only");
+    const plan = { project: f.project, ...nativeProvider(f.project, binary, { env: f.env }),
+      supervision: { taskId: "fixture", promptFile: prompt, budgetUsd: 1, maxResumes: 1, timeoutMs: 20000 } };
+    assert.equal(await supervise(plan), 0);
+    const runId = fs.readdirSync(path.join(f.project, ".nccgs/runs"), { withFileTypes: true }).find(e => e.isDirectory()).name;
+    const state = json(path.join(f.project, `.nccgs/runs/${runId}/run.json`));
+    assert.equal(state.status, "settled"); assert.equal(state.invocations.length, 2);
+    assert.equal(state.cumulativeCostUsd, 0.6); assert.equal(state.invocations[1].allowanceUsd, 0.6);
+    assert.equal(state.invocations[0].terminal.session_id, state.invocations[1].terminal.session_id);
+    assert.equal(fs.readdirSync(path.join(f.project, ".nccgs/jobs")).length, 1);
+    // R08: the actual spawned provider argv keeps the owned prefix, strict flag before
+    // all other options, and one config ended by the supervisor's own lifecycle flags.
+    const argv = fs.readFileSync(path.join(f.project, ".nccgs/fixture-argv.jsonl"), "utf8").trim().split("\n").map(line => JSON.parse(line));
+    assert.equal(argv.length, 2);
+    for (const [index, args] of argv.entries()) {
+      assert.deepEqual(args.slice(0, 11), ["--permission-mode", "bypassPermissions", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}',
+        "-p", "--output-format", "stream-json", "--verbose", "--max-budget-usd", index ? "0.6" : "1"]);
+      assert.deepEqual(args.slice(11), [index ? "--resume" : "--session-id", state.sessionId]);
+    }
+    assert.equal(await supervise({ ...plan, supervision: { recoverRun: runId } }), 0);
+    assert.equal(json(path.join(f.project, `.nccgs/runs/${runId}/run.json`)).invocations.length, 2);
+  } finally { f.dispose(); }
+});
+
+test("supervisor can settle a plan without granting source writes or shell checks", async () => {
+  const f = fixture(5000, "plan");
+  try {
+    const binary = f.write(".nccgs/plan-native.mjs", `import {run} from '../.claude/nccgs/tools/task.mjs';
+const args=process.argv.slice(2);const session=args[args.indexOf('--session-id')+1];
+run(['report','--id','fixture','--outcome','partial','--summary','Synthetic plan report; document review pending']);
+console.log(JSON.stringify({type:'result',session_id:session,total_cost_usd:0.1,result:'Synthetic, not real Claude'}));`);
+    const prompt = f.write(".nccgs/prompt.txt", "Synthetic plan supervision");
+    assert.equal(await supervise({ project: f.project, ...nativeProvider(f.project, binary, { env: f.env }),
+      supervision: { taskId: "fixture", promptFile: prompt, budgetUsd: 1, maxResumes: 0, timeoutMs: 20000 } }), 0);
+    const runId = fs.readdirSync(path.join(f.project, ".nccgs/runs"), { withFileTypes: true }).find(e => e.isDirectory()).name;
+    const state = json(path.join(f.project, `.nccgs/runs/${runId}/run.json`));
+    assert.equal(state.status, "settled"); assert.equal(state.invocations.length, 1);
+    assert.throws(() => guardTool(f.project, { session_id: state.sessionId, tool_name: "Write", tool_input: { file_path: "Assets/source.cs" } }), /cannot edit source/);
+    assert.throws(() => guardTool(f.project, { session_id: state.sessionId, tool_name: "Bash", tool_input: { command: "node helper.mjs" } }), /shell execution is blocked/);
+  } finally { f.dispose(); }
+});
+
+test("supervisor retains unknown usage and refuses a renewed budget", async () => {
+  const f = fixture();
+  try {
+    const binary = fakeNative(f, { missingUsage: true }), prompt = f.write(".nccgs/prompt.txt", "Fixture only");
+    assert.equal(await supervise({ project: f.project, ...nativeProvider(f.project, binary, { env: f.env }),
+      supervision: { taskId: "fixture", promptFile: prompt, budgetUsd: 1, maxResumes: 2, timeoutMs: 20000 } }), 1);
+    const runId = fs.readdirSync(path.join(f.project, ".nccgs/runs"), { withFileTypes: true }).find(e => e.isDirectory()).name;
+    const state = json(path.join(f.project, `.nccgs/runs/${runId}/run.json`));
+    assert.equal(state.status, "blocked"); assert.equal(state.invocations.length, 1); assert.match(state.reason, /cost/);
+    const jobId = fs.readdirSync(path.join(f.project, ".nccgs/jobs"))[0];
+    const verified = waitVerification(f.project, jobId, "fixture", 10000);
+    assert.equal(verified.status, "PASS", JSON.stringify(verified.evidence ? json(path.join(f.project, verified.evidence.path)) : verified));
+  } finally { f.dispose(); }
+});
+
+test("cumulative native cost rejects double counting, missing and mismatched sessions", () => {
+  assert.equal(cumulativeCost(0.4, { type: "result", session_id: "s", total_cost_usd: 0.6 }, "s"), 0.6);
+  assert.throws(() => cumulativeCost(0.4, { type: "result", session_id: "s", total_cost_usd: 0.2 }, "s"), /decreasing/);
+  assert.throws(() => cumulativeCost(0, { type: "result", session_id: "wrong", total_cost_usd: 0.2 }, "s"), /correlated/);
+});
+
+test("supervisor stops at the pinned continuation limit without resetting the attempt", async () => {
+  const f = fixture();
+  try {
+    const executable = fakeNative(f, { omitReport: true }), prompt = f.write(".nccgs/prompt.txt", "Fixture only");
+    assert.equal(await supervise({ project: f.project, ...nativeProvider(f.project, executable, { env: f.env }),
+      supervision: { taskId: "fixture", promptFile: prompt, budgetUsd: 1, maxResumes: 1, timeoutMs: 20000 } }), 1);
+    const runId = fs.readdirSync(path.join(f.project, ".nccgs/runs"), { withFileTypes: true }).find(e => e.isDirectory()).name;
+    const state = json(path.join(f.project, `.nccgs/runs/${runId}/run.json`));
+    assert.equal(state.invocations.length, 2); assert.match(state.reason, /Continuation limit/);
+    assert.equal(state.cumulativeCostUsd, 0.6); assert.ok(state.checkpoint);
+  } finally { f.dispose(); }
+});
+
+test("supervisor refuses a fresh native invocation after the session allowance is spent", async () => {
+  const f = fixture();
+  try {
+    const executable = fakeNative(f), prompt = f.write(".nccgs/prompt.txt", "Fixture only");
+    assert.equal(await supervise({ project: f.project, ...nativeProvider(f.project, executable, { env: f.env }),
+      supervision: { taskId: "fixture", promptFile: prompt, budgetUsd: 0.4, maxResumes: 2, timeoutMs: 20000 } }), 1);
+    const runId = fs.readdirSync(path.join(f.project, ".nccgs/runs"), { withFileTypes: true }).find(e => e.isDirectory()).name;
+    const state = json(path.join(f.project, `.nccgs/runs/${runId}/run.json`));
+    assert.equal(state.invocations.length, 1); assert.equal(state.cumulativeCostUsd, 0.4);
+    assert.match(state.reason, /budget exhausted/); assert.equal(state.costCoverage, "complete");
+  } finally { f.dispose(); }
+});