stitchkit 0.103.10 → 0.103.12

package/CHANGELOG.md

@@ -15,6 +15,38 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.103.12] - 2026-10-03
+
+### Fixed
+
+- `stitchkit/primitives`: bounded canonical JSON serializes one admitted snapshot, preserving
+  historical key order and undefined handling while refusing unstable Proxy reads and oversized
+  escaped UTF-8 output before unbounded encoding. Durable JSON predicates avoid copying or encoding.
+- `stitchkit/process`: post-spawn launch failures retain cleanup ownership; process-group cleanup
+  uses proven ownership and monotonic deadlines. Exclusive-lock stale guards have bounded depth.
+- Direct sandbox launchers retain process-group cleanup through leader settlement.
+- Release tooling requires every selected evidence job and remote exact-SHA push CI before tags;
+  CI covers the complete affected tree independently of which packages are published, preserving
+  package paths across renames and Unicode or control characters in filenames.
+- Gate reuse includes tracked inputs matched by ignore rules, fingerprints only selected external
+  inputs, rechecks them after execution and serializes memo mutations. Memory admission reads exact
+  v1/v2 controller paths, including colons and trailing spaces; registry polling
+  bounds requests, bodies and waits with one elapsed deadline.
+
+
+## [0.103.11] - 2026-10-02
+
+### Added
+
+- `stitchkit/process`: native command limit errors expose a typed `reason` (`deadline` or `output-budget`) independent of their message; existing codes, causes, cancellation and cleanup guarantees are preserved.
+
+### Fixed
+
+- `stitchkit/files`: cancellation after acquiring an exclusive lock refuses the callback and releases ownership. Lock and reclaim-guard records use bounded descriptor reads and refuse FIFO, nonregular, linked, oversized or changing records.
+- `stitchkit/process`: synchronous native launch failures settle external resources once before rejecting, with bounded cleanup and the original syscall cause.
+- `stitchkit/agent-runtime`: coding commands share the native execution owner while retaining forced descendant cleanup, structural sandbox launchers, bounded artifacts and UTF-8 previews.
+- Local gate evidence is saved only for stable inputs, including content changed and restored during a run. PostgreSQL fingerprint probes have finite budgets and distinguish URI connection overrides; unknown external inputs cannot authorize heavy memo reuse. Heavy concurrency accounts for visible cgroup memory limits.
+
 ## [0.103.10] - 2026-10-01
 
 ### Added

package/dist/agent-runtime/coding-shell-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAuCrD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAsKA"}
+{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAuCrD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAkKA"}

package/dist/agent-runtime/sandbox-process-owner.d.ts

@@ -1,4 +1,4 @@
-import { type ChildProcessWithoutNullStreams } from 'node:child_process';
+import type { ChildProcessWithoutNullStreams } from 'node:child_process';
 import type { AgentProcessSandbox } from './sandbox.js';
 /** All entry paths share one command admission limit and one shutdown barrier. */
 export declare function sandboxProcessOwner(assertActive: () => void, maximum: number): {

package/dist/agent-runtime/sandbox-process-owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-process-owner.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/sandbox-process-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,8BAA8B,EAAS,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM;;mBAOrD,8BAA8B;;iBAerC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;EA0B7D"}
+{"version":3,"file":"sandbox-process-owner.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/sandbox-process-owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAKzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM;;mBAiBrD,8BAA8B;;iBAmCrC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;EAmB7D"}

package/dist/agent-runtime/store-conformance-lifecycle.d.ts

@@ -133,11 +133,6 @@ export declare function fencingPhase(store: AgentRuntimeStore, conversationId: s
                 parts: ({
                     type: "text";
                     text: string;
-                } | {
-                    type: "file";
-                    mediaType: string;
-                    reference: string;
-                    filename?: string | undefined;
                 } | {
                     type: "reasoning";
                     text: string;
@@ -146,6 +141,11 @@ export declare function fencingPhase(store: AgentRuntimeStore, conversationId: s
                         provider: string;
                         data: Record<string, import("zod").JSONType>;
                     } | undefined;
+                } | {
+                    type: "file";
+                    mediaType: string;
+                    reference: string;
+                    filename?: string | undefined;
                 } | {
                     type: "source";
                     sourceId: string;
@@ -313,11 +313,6 @@ export declare function fencingPhase(store: AgentRuntimeStore, conversationId: s
         parts: ({
             type: "text";
             text: string;
-        } | {
-            type: "file";
-            mediaType: string;
-            reference: string;
-            filename?: string | undefined;
         } | {
             type: "reasoning";
             text: string;
@@ -326,6 +321,11 @@ export declare function fencingPhase(store: AgentRuntimeStore, conversationId: s
                 provider: string;
                 data: Record<string, import("zod").JSONType>;
             } | undefined;
+        } | {
+            type: "file";
+            mediaType: string;
+            reference: string;
+            filename?: string | undefined;
         } | {
             type: "source";
             sourceId: string;

package/dist/durability/json.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/durability/json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,iBAAiB,qCAS7B,CAAC"}
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/durability/json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,iBAAiB,qCAQ7B,CAAC"}

package/dist/entrypoints/agent-runtime/coding-tools.js

@@ -7,7 +7,8 @@ import {
   AgentCodingToolAuthorizationSchema2,
   AgentCodingToolPathAuthorizationSchema2,
   createAgentCodingTools2
-} from "../../index-a4ajxwmb.js";
+} from "../../index-806d5phm.js";
+import"../../index-f330qqyg.js";
 import"../../index-ahvsksw5.js";
 import"../../index-tgzhq07n.js";
 export {

package/dist/entrypoints/agent-runtime/harness.js

@@ -5,7 +5,7 @@ import"../../index-8kzct1d6.js";
 import {
   composeAgentPrompt2,
   createAgentRuntime2
-} from "../../index-9jb61j5a.js";
+} from "../../index-zp4jpkp0.js";
 import"../../index-h97tqqp1.js";
 import"../../index-mnkk1ffz.js";
 import"../../index-n53mswt3.js";
@@ -15,7 +15,7 @@ import"../../index-9pw0a51a.js";
 import"../../index-ct75c3at.js";
 import"../../index-x87j7csh.js";
 import"../../index-m2xqkv55.js";
-import"../../index-ary5s7k0.js";
+import"../../index-69nvze1q.js";
 import"../../index-nggfa2yn.js";
 import"../../index-r5hsgkz5.js";
 import"../../index-n5yqxd3d.js";

package/dist/entrypoints/agent-runtime/sandbox.js

@@ -9,11 +9,13 @@ import"../../index-x87j7csh.js";
 import"../../index-b2bz0kdm.js";
 import {
   createAgentCodingTools2
-} from "../../index-a4ajxwmb.js";
+} from "../../index-806d5phm.js";
 import {
   NativeCommandError2,
+  spawnOwnedCommand,
+  nativeCommandOwner,
   startNativeCommand
-} from "../../index-6m6a9ty4.js";
+} from "../../index-f330qqyg.js";
 import"../../index-tgzhq07n.js";
 
 // src/agent-runtime/sandbox-bubblewrap.ts
@@ -539,7 +541,6 @@ function spawnSandboxProcess(executable, args, limits, options = {}, onSpawn) {
 }
 
 // src/agent-runtime/sandbox-process-owner.ts
-import { spawn } from "node:child_process";
 function sandboxProcessOwner(assertActive, maximum) {
   const children = new Map;
   const admit = () => {
@@ -547,13 +548,38 @@ function sandboxProcessOwner(assertActive, maximum) {
     if (children.size >= maximum)
       throw new SandboxError("SANDBOX_BUSY", "Sandbox command concurrency limit reached");
   };
+  const terminate = (child) => {
+    const owner = nativeCommandOwner(child) ?? startNativeCommand({ executable: "host-owned-command", signal: new AbortController().signal }, undefined, { launch: () => child, group: process.platform !== "win32", force: true });
+    return owner.terminate();
+  };
   const track = (child) => {
-    const closed = new Promise((resolve) => {
+    const settleDirect = () => {
+      if (!nativeCommandOwner(child))
+        terminate(child).catch(() => {
+          return;
+        });
+    };
+    child.once("exit", settleDirect);
+    child.once("error", settleDirect);
+    const closed = new Promise((resolve, reject) => {
       child.once("close", () => {
-        children.delete(child);
-        resolve();
+        const settled = nativeCommandOwner(child)?.result ?? Promise.resolve();
+        settled.then(() => {
+          children.delete(child);
+          resolve();
+        }, (error) => {
+          if (error instanceof NativeCommandError2 && error.code === "COMMAND_CLEANUP")
+            reject(error);
+          else {
+            children.delete(child);
+            resolve();
+          }
+        });
       });
     });
+    closed.catch(() => {
+      return;
+    });
     children.set(child, closed);
   };
   return {
@@ -564,11 +590,12 @@ function sandboxProcessOwner(assertActive, maximum) {
     },
     spawn(input) {
       admit();
-      const child = spawn(input.executable, [...input.args], {
+      const child = spawnOwnedCommand({
+        executable: input.executable,
+        args: input.args,
         cwd: input.cwd,
         env: input.environment,
-        detached: true,
-        stdio: ["pipe", "pipe", "pipe"]
+        group: process.platform !== "win32"
       });
       child.stdin.end();
       track(child);
@@ -576,16 +603,7 @@ function sandboxProcessOwner(assertActive, maximum) {
     },
     async stop() {
       const pending = [...children];
-      for (const [child] of pending) {
-        if (child.pid === undefined)
-          continue;
-        try {
-          process.kill(-child.pid, "SIGKILL");
-        } catch (error) {
-          if (!(error instanceof Error && ("code" in error) && error.code === "ESRCH"))
-            throw error;
-        }
-      }
+      await Promise.all(pending.map(([child]) => terminate(child)));
       await Promise.all(pending.map(([, closed]) => closed));
     }
   };

package/dist/entrypoints/agent-runtime.js

@@ -110,7 +110,7 @@ import {
   agentGoalStateSlot2,
   agentTodoStateSlot2,
   createAgentRuntime2
-} from "../index-9jb61j5a.js";
+} from "../index-zp4jpkp0.js";
 import {
   AgentConversationSummarySchema2,
   AgentConversationPageSchema2,
@@ -175,7 +175,7 @@ import {
   StepAbortedError2,
   ParkRecordDecodeError2,
   ParkAbortedError2
-} from "../index-ary5s7k0.js";
+} from "../index-69nvze1q.js";
 import {
   AgentSandboxRestrictionSchema2,
   AgentSandboxGradeSchema2,

package/dist/entrypoints/application/diagnostic-journal.js

@@ -14,10 +14,10 @@ import {
 import {
   createBoundedChannel2
 } from "../../index-w0eqdhyd.js";
-import"../../index-nybn2err.js";
 import {
   attemptExclusiveLock
-} from "../../index-ga597cvy.js";
+} from "../../index-xvdd2rbb.js";
+import"../../index-nybn2err.js";
 import {
   isRecord
 } from "../../index-9jfdm5tg.js";

package/dist/entrypoints/files.js

@@ -9,10 +9,10 @@ import {
 import {
   AppError2
 } from "../index-n53mswt3.js";
-import"../index-nybn2err.js";
 import {
   attemptExclusiveLock
-} from "../index-ga597cvy.js";
+} from "../index-xvdd2rbb.js";
+import"../index-nybn2err.js";
 import {
   writeFileAtomic2,
   writeFileAtomicSync2
@@ -315,6 +315,7 @@ async function withExclusiveLock(path, run, options = {}) {
     const attempt = await attemptExclusiveLock(path, {
       mode,
       reclaim: true,
+      signal,
       ownerlessGraceMs,
       ...options.machineIdentity !== undefined && {
         machineIdentity: options.machineIdentity
@@ -324,6 +325,9 @@ async function withExclusiveLock(path, run, options = {}) {
       const { held } = attempt;
       let result;
       try {
+        if (signal?.aborted) {
+          throw new ExclusiveLockError("LOCK_ABORTED", label, null, `[stitchkit] waiting for the lock on "${label}" was cancelled`, { cause: signal.reason });
+        }
         result = await run({ path: held.path, owner: held.owner, reclaimed: held.reclaimed });
       } catch (error) {
         await held.release().catch(() => {
@@ -334,6 +338,8 @@ async function withExclusiveLock(path, run, options = {}) {
       await held.release();
       return result;
     }
+    if (signal?.aborted)
+      continue;
     const remaining = deadline - performance.now();
     if (remaining <= 0) {
       const holder = attempt.diagnosis?.owner ?? null;

package/dist/entrypoints/primitives.js

@@ -3,7 +3,7 @@ import {
 } from "../index-xqhede6x.js";
 import {
   isJsonData
-} from "../index-c1jmtxa0.js";
+} from "../index-fm1c1a08.js";
 import {
   serializeCanonicalJson
 } from "../index-zsvzhjtk.js";
@@ -91,9 +91,10 @@ var CanonicalJsonOptionsSchema = z3.strictObject({
 });
 function canonicalJson(value, options = {}) {
   const limits = CanonicalJsonOptionsSchema.parse(options);
-  if (!isJsonData(value, { ...limits, omitObjectUndefined: true }))
+  const snapshot = {};
+  if (!isJsonData(value, { ...limits, omitObjectUndefined: true }, snapshot))
     throw new TypeError("Expected bounded plain JSON: dense arrays, finite numbers, no -0, cycles or accessors");
-  return serializeCanonicalJson(value);
+  return serializeCanonicalJson(snapshot.value);
 }
 // src/primitives/deadline.ts
 import { z as z4 } from "zod";

package/dist/entrypoints/process.js

@@ -6,7 +6,7 @@ import {
 import {
   NativeCommandError2,
   startNativeCommand
-} from "../index-6m6a9ty4.js";
+} from "../index-f330qqyg.js";
 // src/process/command.ts
 function runNativeCommand(input) {
   return startNativeCommand(input).result;

package/dist/entrypoints/tools.js

@@ -1,7 +1,7 @@
 import {
   EffectUnresolvedError2,
   createLocalStepDurability2
-} from "../index-ary5s7k0.js";
+} from "../index-69nvze1q.js";
 import {
   AppError2,
   STITCH_ERROR_STATUS2

package/dist/{index-ary5s7k0.js → index-69nvze1q.js}

@@ -1,6 +1,6 @@
 import {
   isJsonData
-} from "./index-c1jmtxa0.js";
+} from "./index-fm1c1a08.js";
 import {
   raceAbort
 } from "./index-mbnnw3f2.js";
@@ -103,7 +103,6 @@ import { z as z2 } from "zod";
 var DurableJsonSchema = z2.custom((value) => isJsonData(value, {
   maxDepth: 100,
   maxNodes: Number.MAX_SAFE_INTEGER,
-  maxBytes: Number.MAX_SAFE_INTEGER,
   omitObjectUndefined: false
 }), "Expected lossless JSON data (finite numbers, plain objects and dense arrays; no accessors)");
 

package/dist/{index-a4ajxwmb.js → index-806d5phm.js}

@@ -2,6 +2,12 @@ import {
   forbidden2,
   conflict2
 } from "./index-n53mswt3.js";
+import {
+  NativeCommandError2,
+  stopCommandGroup,
+  ownsCommandGroup,
+  startNativeCommand
+} from "./index-f330qqyg.js";
 import {
   probeAgentProcessSandbox2,
   missingSandboxRestrictions2,
@@ -981,7 +987,6 @@ function createSearchAndPatchCodingTools(config, limits) {
 import { realpath as realpath5, stat } from "node:fs/promises";
 
 // src/agent-runtime/coding-shell-process.ts
-import { spawn } from "node:child_process";
 function preview(data, budget) {
   if (data.byteLength <= budget) {
     return { data, headBytes: data.byteLength, tailBytes: 0, omittedBytes: 0 };
@@ -1024,140 +1029,118 @@ async function runCodingShell(input) {
       outcome: "cancelled"
     });
   }
-  return await new Promise((resolve, reject) => {
-    const ownsProcessGroup = process.platform !== "win32";
-    const child = input.spawn ? input.spawn() : spawn(input.executable, input.args, {
-      cwd: input.cwd,
-      env: input.environment,
-      stdio: ["ignore", "pipe", "pipe"],
-      detached: ownsProcessGroup
-    });
-    const stdout = [];
-    const stderr = [];
-    const artifactStdout = [];
-    const artifactStderr = [];
-    let retained = 0;
-    let artifactBytes = 0;
-    let outcome = "exited";
-    let settled = false;
-    let settlementTimer;
-    const cancel = () => terminate("cancelled");
-    const cleanup = () => {
-      clearTimeout(timer);
-      if (settlementTimer)
-        clearTimeout(settlementTimer);
-      input.signal?.removeEventListener("abort", cancel);
-    };
-    const persistAndResolve = async (exitCode, signal) => {
-      if (settled)
-        return;
-      settled = true;
-      cleanup();
-      try {
-        const hasArtifact = input.artifacts && artifactBytes > input.maxOutputBytes;
-        const completeStdout = Buffer.concat(artifactStdout);
-        const completeStderr = Buffer.concat(artifactStderr);
-        const artifactData = hasArtifact ? Buffer.concat([stdoutHeader, completeStdout, stderrHeader, completeStderr]) : undefined;
-        const stdoutBudget = completeStderr.byteLength === 0 ? input.maxOutputBytes : Math.ceil(input.maxOutputBytes / 2);
-        const stderrBudget = completeStdout.byteLength === 0 ? input.maxOutputBytes : Math.floor(input.maxOutputBytes / 2);
-        const stdoutPreview = hasArtifact ? preview(completeStdout, stdoutBudget) : retainedPreview(Buffer.concat(stdout));
-        const stderrPreview = hasArtifact ? preview(completeStderr, stderrBudget) : retainedPreview(Buffer.concat(stderr));
-        const persisted = hasArtifact ? await input.artifacts?.write({
-          mediaType: "text/plain; charset=utf-8",
-          data: artifactData ?? new Uint8Array,
-          ...input.authorization && { authorization: input.authorization }
-        }) : undefined;
-        resolve(ShellOutputSchema.parse({
-          executable: input.executableName,
-          exitCode,
-          signal,
-          stdout: stdoutPreview.data.toString("utf8"),
-          stderr: stderrPreview.data.toString("utf8"),
-          outcome,
-          ...persisted && {
-            artifact: {
-              reference: persisted.reference,
-              bytes: artifactData?.byteLength ?? 0,
-              truncated: outcome === "output-limit",
-              headBytes: stdoutPreview.headBytes + stderrPreview.headBytes,
-              tailBytes: stdoutPreview.tailBytes + stderrPreview.tailBytes,
-              omittedBytes: stdoutPreview.omittedBytes + stderrPreview.omittedBytes
-            }
-          }
-        }));
-      } catch (error) {
-        reject(error);
-      }
-    };
-    const killOwnedProcessGroup = () => {
-      if (!ownsProcessGroup || child.pid === undefined)
-        return false;
-      try {
-        process.kill(-child.pid, "SIGKILL");
-        return true;
-      } catch {
-        return false;
+  const stdout = [];
+  const stderr = [];
+  const artifactStdout = [];
+  const artifactStderr = [];
+  let retained = 0;
+  let artifactBytes = 0;
+  let outcome = "exited";
+  let child;
+  let exitCode = null;
+  let signal = null;
+  const outputLimit = new Error("Coding command output retention budget exceeded");
+  const launch = input.spawn;
+  const retain = (target, artifactTarget, chunk) => {
+    const remaining = Math.max(0, input.maxOutputBytes - retained);
+    if (remaining > 0) {
+      const kept = Buffer.from(chunk.subarray(0, remaining));
+      target.push(kept);
+      retained += kept.byteLength;
+    }
+    if (input.artifacts) {
+      const artifactRemaining = Math.max(0, artifactPayloadLimit - artifactBytes);
+      if (artifactRemaining > 0) {
+        const kept = Buffer.from(chunk.subarray(0, artifactRemaining));
+        artifactTarget.push(kept);
+        artifactBytes += kept.byteLength;
       }
-    };
-    const boundStreamSettlement = () => {
-      if (settlementTimer)
-        return;
-      settlementTimer = setTimeout(() => {
-        child.stdout.destroy();
-        child.stderr.destroy();
-        persistAndResolve(child.exitCode, child.signalCode);
-      }, input.terminationGraceMs);
-    };
-    const terminate = (reason) => {
-      if (settled || outcome !== "exited")
+      if (chunk.byteLength > artifactRemaining)
+        throw outputLimit;
+    } else if (chunk.byteLength > remaining)
+      throw outputLimit;
+  };
+  const command = startNativeCommand({
+    executable: input.executable,
+    args: [...input.args],
+    cwd: input.cwd,
+    env: { ...input.environment },
+    envPolicy: "declared-only",
+    signal: input.signal ?? new AbortController().signal,
+    killGraceMs: 0,
+    onOutput: (bytes, channel) => retain(channel === "stdout" ? stdout : stderr, channel === "stdout" ? artifactStdout : artifactStderr, bytes),
+    onLeaderSettled: async (event) => {
+      if (event.kind !== "exit")
         return;
-      outcome = reason;
-      if (!killOwnedProcessGroup())
-        child.kill("SIGKILL");
-      boundStreamSettlement();
-    };
-    const timer = setTimeout(() => terminate("timeout"), input.timeoutMs);
-    timer.unref();
-    const retain = (target, artifactTarget, chunk) => {
-      const remaining = Math.max(0, input.maxOutputBytes - retained);
-      if (remaining > 0) {
-        const kept = chunk.subarray(0, remaining);
-        target.push(kept);
-        retained += kept.byteLength;
+      exitCode = event.exitCode;
+      signal = event.signal;
+      if (process.platform !== "win32" && child && ownsCommandGroup(child))
+        await stopCommandGroup(child?.pid, 0, input.terminationGraceMs, true);
+    }
+  }, (started) => {
+    child = started;
+  }, {
+    group: process.platform !== "win32",
+    force: true,
+    timeoutMs: input.timeoutMs,
+    cleanupTimeoutMs: input.terminationGraceMs,
+    closeTimeoutMs: input.terminationGraceMs,
+    ...launch ? {
+      launch: () => {
+        child = launch();
+        return child;
       }
-      if (input.artifacts) {
-        const artifactRemaining = Math.max(0, artifactPayloadLimit - artifactBytes);
-        if (artifactRemaining > 0) {
-          const kept = chunk.subarray(0, artifactRemaining);
-          artifactTarget.push(kept);
-          artifactBytes += kept.byteLength;
-        }
-        if (chunk.byteLength > artifactRemaining)
-          terminate("output-limit");
-      } else if (chunk.byteLength > remaining)
-        terminate("output-limit");
-    };
-    child.stdout.on("data", (chunk) => retain(stdout, artifactStdout, Buffer.from(chunk)));
-    child.stderr.on("data", (chunk) => retain(stderr, artifactStderr, Buffer.from(chunk)));
-    child.on("error", (error) => {
-      if (settled)
-        return;
-      settled = true;
-      cleanup();
-      reject(error);
-    });
-    child.on("exit", (exitCode, signal) => {
-      if (outcome === "exited")
-        killOwnedProcessGroup();
-      boundStreamSettlement();
-      if (child.stdout.destroyed && child.stderr.destroyed) {
-        persistAndResolve(exitCode, signal);
+    } : {},
+    maxBufferedBytes: Math.max(64 * 1024, input.maxOutputBytes, input.artifacts ? artifactPayloadLimit : 0)
+  });
+  try {
+    const result = await command.result;
+    exitCode = result.exitCode;
+    signal = result.signal;
+  } catch (error) {
+    if (error === outputLimit)
+      outcome = "output-limit";
+    else if (input.signal?.aborted && error === input.signal.reason)
+      outcome = "cancelled";
+    else if (error instanceof NativeCommandError2 && error.code === "COMMAND_LIMIT" && (error.reason === "deadline" || error.reason === "output-budget"))
+      outcome = error.reason === "deadline" ? "timeout" : "output-limit";
+    else if (error instanceof DOMException && error.name === "AbortError" && error.message === "Command stopped")
+      outcome = "cancelled";
+    else
+      throw error;
+    exitCode = child?.exitCode ?? exitCode;
+    signal = child?.signalCode ?? signal;
+  }
+  const hasArtifact = input.artifacts && artifactBytes > input.maxOutputBytes;
+  const completeStdout = Buffer.concat(artifactStdout);
+  const completeStderr = Buffer.concat(artifactStderr);
+  const artifactData = hasArtifact ? Buffer.concat([stdoutHeader, completeStdout, stderrHeader, completeStderr]) : undefined;
+  const stdoutBudget = completeStderr.byteLength === 0 ? input.maxOutputBytes : Math.ceil(input.maxOutputBytes / 2);
+  const stderrBudget = completeStdout.byteLength === 0 ? input.maxOutputBytes : Math.floor(input.maxOutputBytes / 2);
+  const stdoutPreview = hasArtifact ? preview(completeStdout, stdoutBudget) : retainedPreview(Buffer.concat(stdout));
+  const stderrPreview = hasArtifact ? preview(completeStderr, stderrBudget) : retainedPreview(Buffer.concat(stderr));
+  const persisted = hasArtifact ? await input.artifacts?.write({
+    mediaType: "text/plain; charset=utf-8",
+    data: artifactData ?? new Uint8Array,
+    ...input.authorization && { authorization: input.authorization }
+  }) : undefined;
+  return ShellOutputSchema.parse({
+    executable: input.executableName,
+    exitCode,
+    signal,
+    stdout: stdoutPreview.data.toString("utf8"),
+    stderr: stderrPreview.data.toString("utf8"),
+    outcome,
+    ...persisted && {
+      artifact: {
+        reference: persisted.reference,
+        bytes: artifactData?.byteLength ?? 0,
+        truncated: outcome === "output-limit",
+        headBytes: stdoutPreview.headBytes + stderrPreview.headBytes,
+        tailBytes: stdoutPreview.tailBytes + stderrPreview.tailBytes,
+        omittedBytes: stdoutPreview.omittedBytes + stderrPreview.omittedBytes
       }
-    });
-    child.on("close", (exitCode, signal) => void persistAndResolve(exitCode, signal));
-    input.signal?.addEventListener("abort", cancel, { once: true });
-    if (input.signal?.aborted)
-      cancel();
+    }
   });
 }