stitchkit 0.103.11 → 0.103.12

package/dist/{index-ttf0y7b8.js → index-xvdd2rbb.js}

@@ -100,6 +100,7 @@ async function diagnose(owner, declaredIdentity) {
     return { attribution, liveness: "not-probed", owner };
   return { attribution, ...await probeProcessOwner2(owner.pid, owner.process), owner };
 }
+var MAX_RECLAIM_DEPTH = 16;
 async function readLockFile(path, onFailure, signal) {
   try {
     const record = await readLockRecord(path, undefined, signal);
@@ -180,33 +181,45 @@ function reclaimable(state, diagnosis, graceMs) {
     return diagnosis.liveness === "gone";
   return typeof graceMs === "number" && Date.now() - state.mtimeMs >= graceMs;
 }
-async function reclaimUnderGuard(path, options) {
+async function reclaimUnderGuard(path, options, depth) {
   const guardPath = `${path}.reclaim`;
-  const acquired = await attemptExclusiveLock(guardPath, {
-    ...options,
-    ownerlessGraceMs: options.ownerlessGraceMs === undefined ? 5000 : options.ownerlessGraceMs
-  });
+  if (depth >= MAX_RECLAIM_DEPTH)
+    return {
+      refused: true,
+      cause: new Error(`Exclusive lock reclaim guard recovery depth exceeds ${MAX_RECLAIM_DEPTH}`)
+    };
+  let acquired;
+  try {
+    acquired = await attemptExclusiveLock(guardPath, {
+      ...options,
+      ownerlessGraceMs: options.ownerlessGraceMs === undefined ? 5000 : options.ownerlessGraceMs
+    }, depth + 1);
+  } catch (cause) {
+    if (!isCode(cause, "ENAMETOOLONG"))
+      throw cause;
+    return { refused: true, cause };
+  }
   if (!("held" in acquired))
-    return;
+    return { refused: true, cause: acquired.diagnosis?.cause ?? acquired.error };
   const guard = acquired.held;
   try {
-    let unsafe = false;
-    const state = await readLockFile(path, () => {
-      unsafe = true;
+    let readFailure;
+    const state = await readLockFile(path, (cause) => {
+      readFailure = cause;
     }, options.signal);
-    if (unsafe)
-      return "refused";
+    if (readFailure !== undefined)
+      return { refused: true, cause: readFailure };
     if (state) {
       const diagnosis = await diagnose(state.owner, options.machineIdentity);
       if (options.signal?.aborted)
-        return "refused";
+        return { refused: true };
       if (!reclaimable(state, diagnosis, options.ownerlessGraceMs))
-        return "refused";
+        return { refused: true, cause: diagnosis.cause };
       await unlinkIfSame(path, state.ino, state.dev);
     }
     return await createOwned(path, options, state !== undefined).catch((error) => {
       if (isCode(error, "EEXIST"))
-        return "refused";
+        return { refused: true, cause: error };
       throw error;
     });
   } finally {
@@ -215,7 +228,7 @@ async function reclaimUnderGuard(path, options) {
     });
   }
 }
-async function attemptExclusiveLock(path, options) {
+async function attemptExclusiveLock(path, options, depth = 0) {
   try {
     return { held: await createOwned(path, options, false) };
   } catch (error) {
@@ -236,10 +249,16 @@ async function attemptExclusiveLock(path, options) {
     if (!state || !reclaimable(state, diagnosis, options.ownerlessGraceMs)) {
       return { error, diagnosis };
     }
-    const reclaimed = await reclaimUnderGuard(path, options);
-    if (reclaimed !== undefined && reclaimed !== "refused")
+    const reclaimed = await reclaimUnderGuard(path, options, depth);
+    if (!("refused" in reclaimed))
       return { held: reclaimed };
-    return { error, diagnosis };
+    return {
+      error,
+      diagnosis: {
+        ...diagnosis,
+        ...reclaimed.cause !== undefined && { cause: reclaimed.cause }
+      }
+    };
   }
 }
 

package/dist/{index-9jb61j5a.js → index-zp4jpkp0.js}

@@ -20,7 +20,7 @@ import {
 } from "./index-mnkk1ffz.js";
 import {
   createLocalStepDurability2
-} from "./index-ary5s7k0.js";
+} from "./index-69nvze1q.js";
 import {
   isAgentToolError2,
   createToolDurabilityContext

package/dist/internal/exclusive-lock.d.ts

@@ -59,7 +59,7 @@ export type ExclusiveLockAttempt = {
  * its owner is provably gone. A refusal returns the create's own `EEXIST`, so a
  * caller that surfaced that error keeps surfacing the identical one.
  */
-export declare function attemptExclusiveLock(path: string, options: ExclusiveLockAttemptOptions): Promise<ExclusiveLockAttempt>;
+export declare function attemptExclusiveLock(path: string, options: ExclusiveLockAttemptOptions, depth?: number): Promise<ExclusiveLockAttempt>;
 /** Read the owner a present lock records, for a refusal that has to name it. */
 export declare function readExclusiveLockOwner(path: string): Promise<ExclusiveLockOwner | null>;
 export {};

package/dist/internal/exclusive-lock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exclusive-lock.d.ts","sourceRoot":"","sources":["../../src/internal/exclusive-lock.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAEL,KAAK,oBAAoB,EAG1B,MAAM,oBAAoB,CAAC;AAG5B,gDAAgD;AAChD,QAAA,MAAM,wBAAwB;;;;;;;;;;;;;;iBAO5B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,wCAAwC;AACxC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,EAAE,cAAc,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;IAC5E,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,YAAY,CAAC;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,iCAAiC;AACjC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,kFAAkF;IAClF,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,uFAAuF;IACvF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IACE,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,6CAA6C;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,sBAAsB,CAAC;CAC7C,CAAC;AAkMN;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,oBAAoB,CAAC,CA0B/B;AAED,gFAAgF;AAChF,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAEpC"}
+{"version":3,"file":"exclusive-lock.d.ts","sourceRoot":"","sources":["../../src/internal/exclusive-lock.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAEL,KAAK,oBAAoB,EAG1B,MAAM,oBAAoB,CAAC;AAG5B,gDAAgD;AAChD,QAAA,MAAM,wBAAwB;;;;;;;;;;;;;;iBAO5B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,wCAAwC;AACxC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,EAAE,cAAc,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;IAC5E,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,YAAY,CAAC;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,iCAAiC;AACjC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,kFAAkF;IAClF,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,uFAAuF;IACvF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IACE,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,6CAA6C;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,sBAAsB,CAAC;CAC7C,CAAC;AAgON;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,2BAA2B,EACpC,KAAK,SAAI,GACR,OAAO,CAAC,oBAAoB,CAAC,CAgC/B;AAED,gFAAgF;AAChF,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAEpC"}

package/dist/internal/json-data.d.ts

@@ -1,8 +1,14 @@
-/** Validation shared by durable JSON and canonical JSON; serialization has one separate owner. */
+/**
+ * Shared descriptor traversal. A snapshot sink captures admitted data without rereading the caller;
+ * predicate-only validation allocates no payload copy and skips absent byte accounting.
+ * Limits bound admitted data, not arbitrary JavaScript executed inside Proxy traps.
+ */
 export declare function isJsonData(value: unknown, limits: {
     maxDepth: number;
     maxNodes: number;
-    maxBytes: number;
+    maxBytes?: number;
     omitObjectUndefined: boolean;
+}, snapshot?: {
+    value?: unknown;
 }): boolean;
 //# sourceMappingURL=json-data.d.ts.map

package/dist/internal/json-data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json-data.d.ts","sourceRoot":"","sources":["../../src/internal/json-data.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,wBAAgB,UAAU,CACxB,KAAK,EAAE,OAAO,EACd,MAAM,EAAE;IACN,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,OAAO,CAAC;CAC9B,GACA,OAAO,CA0DT"}
+{"version":3,"file":"json-data.d.ts","sourceRoot":"","sources":["../../src/internal/json-data.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,OAAO,EACd,MAAM,EAAE;IACN,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,OAAO,CAAC;CAC9B,EACD,QAAQ,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7B,OAAO,CAgGT"}

package/dist/internal/json-string-size.d.ts

@@ -0,0 +1,3 @@
+/** Escaped JSON string size in UTF-8, stopping as soon as the byte budget is exceeded. */
+export declare function jsonStringSize(text: string, budget: number): number;
+//# sourceMappingURL=json-string-size.d.ts.map

package/dist/internal/json-string-size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-string-size.d.ts","sourceRoot":"","sources":["../../src/internal/json-string-size.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAoBnE"}

package/dist/primitives/canonical-json.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-json.d.ts","sourceRoot":"","sources":["../../src/primitives/canonical-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,0BAA0B;;;;kBAQ9B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,oBAAyB,GAAG,MAAM,CAOxF"}
+{"version":3,"file":"canonical-json.d.ts","sourceRoot":"","sources":["../../src/primitives/canonical-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,0BAA0B;;;;kBAQ9B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,oBAAyB,GAAG,MAAM,CAQxF"}

package/dist/process/cleanup.d.ts

@@ -0,0 +1,12 @@
+import type { NativeCommandSettlement } from './contract.js';
+import type { NativeCommandTransport } from './transport.js';
+/** One failure barrier, including a child whose transport setup never completed. */
+export declare function cleanupNativeCommand(input: {
+    error: unknown;
+    transport?: NativeCommandTransport;
+    settle: (event: NativeCommandSettlement) => Promise<void>;
+    event?: NativeCommandSettlement;
+    signal: () => Promise<void>;
+    timeoutMs: number;
+}): Promise<void>;
+//# sourceMappingURL=cleanup.d.ts.map

package/dist/process/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/process/cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,oFAAoF;AACpF,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,MAAM,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,KAAK,CAAC,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBhB"}

package/dist/process/command-lifetime.d.ts

@@ -0,0 +1,19 @@
+import { type NativeCommandResult } from './contract.js';
+/** Admission sees the same owner before transport setup and through terminal cleanup. */
+export declare function createCommandLifetime(input: {
+    result: Promise<NativeCommandResult>;
+    controller: AbortController;
+    finished: () => boolean;
+    signal: () => Promise<void>;
+    cleanupTimeoutMs: number;
+}): {
+    result: Promise<{
+        exitCode: number | null;
+        signal: string | null;
+        stdout: Uint8Array<ArrayBuffer>;
+        stderr: Uint8Array<ArrayBuffer>;
+    }>;
+    terminate(): Promise<void>;
+    stop(): Promise<void>;
+};
+//# sourceMappingURL=command-lifetime.d.ts.map

package/dist/process/command-lifetime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-lifetime.d.ts","sourceRoot":"","sources":["../../src/process/command-lifetime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAG1E,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrC,UAAU,EAAE,eAAe,CAAC;IAC5B,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;IAKG,MAAM;;;;;;IACA,SAAS;IAoBT,IAAI;EAMb"}

package/dist/process/command-owner.d.ts

@@ -3,9 +3,6 @@ import { type NativeCommandOptions } from './contract.js';
 import { type NativeCommandLaunchDriver } from './launch.js';
 /** One-shot native execution; sandbox policy/admission is composed above this owner. */
 export declare function startNativeCommand(input: NativeCommandOptions, onSpawn?: (child: ChildProcessWithoutNullStreams) => void, driver?: NativeCommandLaunchDriver): {
-    result: Promise<never>;
-    stop(): Promise<void>;
-} | {
     result: Promise<{
         exitCode: number | null;
         signal: string | null;

package/dist/process/command-owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-owner.d.ts","sourceRoot":"","sources":["../../src/process/command-owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,EAEL,KAAK,oBAAoB,EAG1B,MAAM,YAAY,CAAC;AAOpB,OAAO,EAEL,KAAK,yBAAyB,EAG/B,MAAM,UAAU,CAAC;AAIlB,wFAAwF;AACxF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,oBAAoB,EAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,IAAI,EACzD,MAAM,CAAC,EAAE,yBAAyB;;;;;;;;;;;;EA+LnC"}
+{"version":3,"file":"command-owner.d.ts","sourceRoot":"","sources":["../../src/process/command-owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAIzE,OAAO,EAEL,KAAK,oBAAoB,EAG1B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAEL,KAAK,yBAAyB,EAG/B,MAAM,UAAU,CAAC;AAMlB,wFAAwF;AACxF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,oBAAoB,EAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,IAAI,EACzD,MAAM,CAAC,EAAE,yBAAyB;;;;;;;;;EA4JnC"}

package/dist/process/group.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"group.d.ts","sourceRoot":"","sources":["../../src/process/group.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;IAapE,MAAM;IACN,MAAM;EAIT;AAWD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAOjF;AAiCD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,OAAO,EAAE,MAAM,EACf,gBAAgB,SAAO,EACvB,KAAK,UAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAItE;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAMxF"}
+{"version":3,"file":"group.d.ts","sourceRoot":"","sources":["../../src/process/group.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;IAapE,MAAM;IACN,MAAM;EAIT;AAWD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAOjF;AAmCD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,OAAO,EAAE,MAAM,EACf,gBAAgB,SAAO,EACvB,KAAK,UAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAItE;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAMxF"}

package/dist/process/launch.d.ts

@@ -1,5 +1,7 @@
-import { type ChildProcessWithoutNullStreams } from 'node:child_process';
+import type { ChildProcessWithoutNullStreams } from 'node:child_process';
+import { Readable } from 'node:stream';
 import { type ParsedNativeCommandOptions } from './contract.js';
+import { type NativeCommandTransport } from './transport.js';
 /** A structural host launcher may supply pipes without importing Node ambient types. */
 export interface NativeCommandLaunchedProcess {
     readonly pid?: number;
@@ -11,7 +13,7 @@ export interface NativeCommandLaunchedProcess {
     on(event: 'error', listener: (error: Error) => void): unknown;
     on(event: 'exit' | 'close', listener: (code: number | null, signal: string | null) => void): unknown;
 }
-interface NativeCommandLaunchedOutput {
+export interface NativeCommandLaunchedOutput {
     readonly destroyed: boolean;
     on(event: 'data', listener: (chunk: Uint8Array) => void): unknown;
     destroy(): unknown;
@@ -40,10 +42,11 @@ interface NativeCommandOwner {
 export declare function registerNativeCommandOwner(child: object, owner: NativeCommandOwner): void;
 export declare function nativeCommandOwner(child: object): NativeCommandOwner | undefined;
 /** Install every observation before starting stdin or invoking an admission callback. */
-export declare function launchNativeCommand(options: ParsedNativeCommandOptions, driver: NativeCommandLaunchDriver | undefined, onSpawn: ((child: ChildProcessWithoutNullStreams) => void) | undefined, onFailure: (error: Error) => void, onInputFailure: (error: Error) => void): {
-    child: NativeCommandLaunchedProcess;
+export declare function launchNativeCommand(options: ParsedNativeCommandOptions, driver: NativeCommandLaunchDriver | undefined, onSpawn: ((child: ChildProcessWithoutNullStreams) => void) | undefined, onFailure: (error: Error) => void, onInputFailure: (error: Error) => void, onAcquired: (transport: NativeCommandTransport) => void): {
     stdout: AsyncIterable<Uint8Array<ArrayBufferLike>>;
     stderr: AsyncIterable<Uint8Array<ArrayBufferLike>>;
+    start(): void;
+    child: NativeCommandLaunchedProcess;
     leader: Promise<{
         kind: "exit";
         exitCode: number | null;
@@ -56,9 +59,15 @@ export declare function launchNativeCommand(options: ParsedNativeCommandOptions,
         exitCode: number | null;
         signal: string | null;
     }>;
-    released: Promise<[boolean, ...boolean[]]>;
+    released: Promise<void>;
     pendingHandles: Set<string>;
-    start(): void;
+    stdin: import("node:stream").Writable | undefined;
+    observe(onFailure: (cause: Error) => void): void;
+    capture(): {
+        stdout: NativeCommandLaunchedOutput | Readable;
+        stderr: NativeCommandLaunchedOutput | Readable;
+    };
+    pipeDestructor(name: 'stdout' | 'stderr', destroy: () => unknown): void;
     destroy(): void;
 };
 export {};

package/dist/process/launch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launch.d.ts","sourceRoot":"","sources":["../../src/process/launch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,8BAA8B,EAAS,MAAM,oBAAoB,CAAC;AAEhF,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,YAAY,CAAC;AAEpB,wFAAwF;AACxF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IACjC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC;IAC9D,EAAE,CACA,KAAK,EAAE,MAAM,GAAG,OAAO,EACvB,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAC7D,OAAO,CAAC;CACZ;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC;IAClE,OAAO,IAAI,OAAO,CAAC;CACpB;AAED,iGAAiG;AACjG,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,EAAE,MAAM,4BAA4B,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,0BAA0B,EACnC,MAAM,EAAE,yBAAyB,GAAG,SAAS;;;EAY9C;AAED,UAAU,kBAAkB;IAC1B,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAGD,uFAAuF;AACvF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAEzF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEhF;AA4ED,yFAAyF;AACzF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,0BAA0B,EACnC,MAAM,EAAE,yBAAyB,GAAG,SAAS,EAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,8BAA8B,KAAK,IAAI,CAAC,GAAG,SAAS,EACtE,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,EACjC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI;;;;;;;;;;;;;kBAuBC,MAAM,GAAG,IAAI;gBAAU,MAAM,GAAG,IAAI;;;;;;EA0D5E"}
+{"version":3,"file":"launch.d.ts","sourceRoot":"","sources":["../../src/process/launch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAsB,KAAK,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEjF,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAElF,wFAAwF;AACxF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IACjC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC;IAC9D,EAAE,CACA,KAAK,EAAE,MAAM,GAAG,OAAO,EACvB,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAC7D,OAAO,CAAC;CACZ;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC;IAClE,OAAO,IAAI,OAAO,CAAC;CACpB;AAED,iGAAiG;AACjG,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,EAAE,MAAM,4BAA4B,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,0BAA0B,EACnC,MAAM,EAAE,yBAAyB,GAAG,SAAS;;;EAY9C;AAED,UAAU,kBAAkB;IAC1B,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAGD,uFAAuF;AACvF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAEzF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEhF;AAwED,yFAAyF;AACzF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,0BAA0B,EACnC,MAAM,EAAE,yBAAyB,GAAG,SAAS,EAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,8BAA8B,KAAK,IAAI,CAAC,GAAG,SAAS,EACtE,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,EACjC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,EACtC,UAAU,EAAE,CAAC,SAAS,EAAE,sBAAsB,KAAK,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8CxD"}

package/dist/process/owned-child.d.ts

@@ -0,0 +1,10 @@
+/** Only this native spawn can establish group ownership; structural PIDs cannot. */
+export declare function spawnOwnedCommand(input: {
+    executable: string;
+    args: readonly string[];
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    group: boolean;
+}): import("node:child_process").ChildProcessWithoutNullStreams;
+export declare function ownsCommandGroup(child: object): boolean;
+//# sourceMappingURL=owned-child.d.ts.map

package/dist/process/owned-child.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned-child.d.ts","sourceRoot":"","sources":["../../src/process/owned-child.ts"],"names":[],"mappings":"AAIA,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;CAChB,+DASA;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD"}

package/dist/process/start-failure.d.ts

@@ -1,7 +1,4 @@
-import { type NativeCommandSettlement } from './contract.js';
+import { NativeCommandError } from './contract.js';
 /** A failed native admission still owns one bounded external-resource settlement. */
-export declare function failedCommandStart(cause: unknown, settle: (event: NativeCommandSettlement) => Promise<void>): {
-    result: Promise<never>;
-    stop(): Promise<void>;
-};
+export declare function failedCommandStart(cause: unknown, cleanup: (error: NativeCommandError) => Promise<void>): Promise<never>;
 //# sourceMappingURL=start-failure.d.ts.map

package/dist/process/start-failure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start-failure.d.ts","sourceRoot":"","sources":["../../src/process/start-failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAG9E,qFAAqF;AACrF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC;;;EAyB1D"}
+{"version":3,"file":"start-failure.d.ts","sourceRoot":"","sources":["../../src/process/start-failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,qFAAqF;AACrF,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,GACpD,OAAO,CAAC,KAAK,CAAC,CAMhB"}

package/dist/process/transport.d.ts

@@ -0,0 +1,30 @@
+import { Readable, Writable } from 'node:stream';
+import type { NativeCommandLaunchedOutput, NativeCommandLaunchedProcess } from './launch.js';
+/** Acquired before subscriptions: failed setup and normal execution own the same handles. */
+export declare function createCommandTransport(child: NativeCommandLaunchedProcess): {
+    child: NativeCommandLaunchedProcess;
+    leader: Promise<{
+        kind: "exit";
+        exitCode: number | null;
+        signal: string | null;
+    } | {
+        kind: "error";
+        cause: unknown;
+    }>;
+    closed: Promise<{
+        exitCode: number | null;
+        signal: string | null;
+    }>;
+    released: Promise<void>;
+    pendingHandles: Set<string>;
+    readonly stdin: Writable | undefined;
+    observe(onFailure: (cause: Error) => void): void;
+    capture(): {
+        stdout: NativeCommandLaunchedOutput | Readable;
+        stderr: NativeCommandLaunchedOutput | Readable;
+    };
+    pipeDestructor(name: 'stdout' | 'stderr', destroy: () => unknown): void;
+    destroy(): void;
+};
+export type NativeCommandTransport = ReturnType<typeof createCommandTransport>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/process/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/process/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,KAAK,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAC;AAE1F,6FAA6F;AAC7F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,4BAA4B;;;;;;;;;;;kBAEvB,MAAM,GAAG,IAAI;gBAAU,MAAM,GAAG,IAAI;;;;;uBA6BhE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI;;;;;yBAkCpB,QAAQ,GAAG,QAAQ,WAAW,MAAM,OAAO;;EAmBnE;AAED,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/llms/agent-runtime-sandbox.txt

@@ -15,6 +15,12 @@ Also read:
 ---
 title: Optional process sandbox
 description: Linux namespace isolation, durable workspaces and a host credential gateway.
+updated: 2026-10-03 14:47 +07:00
+participants:
+  - role: implemented
+    harness: Codex
+    model: GPT-6
+    at: 2026-10-03 14:47 +07:00
 ---
 
 # Optional process sandbox
@@ -84,7 +90,9 @@ Unsupported backends omit the binding and the factory refuses explicitly.
 Stop also kills coding commands. Both launch paths share the configured
 `maxConcurrentCommands` admission limit (default 8); an occupied slot gives
 `SANDBOX_BUSY` before another process starts. This counts direct commands, not
-guest descendants. Required restrictions are checked again during preparation;
+guest descendants. A direct launch retains its slot through terminal group cleanup,
+including descendants that outlive the leader. Required restrictions are checked again
+during preparation;
 a network-policy change invalidates an outstanding prepared launch. After
 reconnect, create the coding profile from the new handle; old tools remain stopped.
 

package/llms/process.txt

@@ -15,7 +15,7 @@ description: Native IO для Bun и Node, с явно выбранной durabi
 type: guide
 status: active
 created: 2026-10-01 20:44 +07:00
-updated: 2026-10-02 16:28 +07:00
+updated: 2026-10-03 13:36 +07:00
 participants:
   - role: authored
     harness: Codex
@@ -25,6 +25,10 @@ participants:
     harness: Codex
     model: GPT-6
     at: 2026-10-02 00:08 +07:00
+  - role: implemented
+    harness: Codex
+    model: GPT-6
+    at: 2026-10-03 13:36 +07:00
 ---
 
 # Native IO
@@ -227,9 +231,10 @@ independent of umask. Default `0600` stays private. Shared `0640` requires a com
 traversable directories; another UID also needs directory write permission to reclaim a
 proven-dead owner's file. Set `ownerlessGraceMs: null` to refuse every age-only reclaim,
 including ownerless reclaim guards. The default remains 5000 ms for existing clients.
-Восстановление stale reclaim guard использует тот же lock owner и следующий guard:
-проверка inode и удаление выполняются под ним. Конкурирующий writer не обходит guard,
-пока прежнее удаление приостановлено; live и unknown lifetime evidence остаются отказом.
+Stale reclaim guards use the same lock owner and a child guard for the inode check and
+unlink. Recovery depth is capped at 16; a deeper stale chain refuses recovery with a depth diagnosis retained as the cause of
+the bounded `LOCK_TIMEOUT`. Live owners, unknown process-lifetime evidence and unsafe records are never
+reclaimed. Concurrent writers cannot bypass a guard while a prior unlink is paused.
 
 ## Libraries with a Zod-only runtime
 
@@ -259,6 +264,26 @@ Stitchkit leaf fails there. A separate schema-only entry must not import the nat
 This delivery removes a runtime kernel installation; it does not remove the build-time
 Stitchkit installation or create an independent lightweight npm package.
 
+## Qualification boundaries
+
+Native command cleanup owns the child before launch subscriptions are installed. Setup
+refusal still settles leader closure and teardown within the cleanup budget; failure to
+prove closure reports `COMMAND_CLEANUP` with the original failure retained. Process-group
+signaling requires evidence from the actual detached launcher, not a structural PID field.
+The built-in sandbox transport carries that ownership across the package's split entrypoints.
+Internal finite deadlines and Darwin retry admission use monotonic elapsed time.
+
+Linux UID-refusal qualification is a separate privileged installed-package proof in Bun
+and real Node; an unsupported platform or insufficient UID reports an explicit skip.
+A generic native-owner marker does not certify the privileged case. Real Darwin CI remains
+the qualification for native Darwin behavior.
+
+Local filesystem tests do not attest delayed NFS visibility, shared-volume microVM or gVisor
+ownership, actual PGID reuse, power-loss durability or macOS full-sync behavior. Those
+require their actual topology or failure environment. The default ownerless grace remains
+5000 ms; stricter callers can retain `ownerlessGraceMs: null`. No age-only observation
+proves a partially published owner's process dead.
+
 ==============================================================================
 # API reference: `stitchkit/process`  (docs/api/reference.md)
 ==============================================================================

package/llms-full.txt

@@ -7900,6 +7900,12 @@ boundary is required. Send and projection callbacks own their external deadlines
 ---
 title: Optional process sandbox
 description: Linux namespace isolation, durable workspaces and a host credential gateway.
+updated: 2026-10-03 14:47 +07:00
+participants:
+  - role: implemented
+    harness: Codex
+    model: GPT-6
+    at: 2026-10-03 14:47 +07:00
 ---
 
 # Optional process sandbox
@@ -7969,7 +7975,9 @@ Unsupported backends omit the binding and the factory refuses explicitly.
 Stop also kills coding commands. Both launch paths share the configured
 `maxConcurrentCommands` admission limit (default 8); an occupied slot gives
 `SANDBOX_BUSY` before another process starts. This counts direct commands, not
-guest descendants. Required restrictions are checked again during preparation;
+guest descendants. A direct launch retains its slot through terminal group cleanup,
+including descendants that outlive the leader. Required restrictions are checked again
+during preparation;
 a network-policy change invalidates an outstanding prepared launch. After
 reconnect, create the coding profile from the new handle; old tools remain stopped.
 
@@ -8037,7 +8045,7 @@ description: Native IO для Bun и Node, с явно выбранной durabi
 type: guide
 status: active
 created: 2026-10-01 20:44 +07:00
-updated: 2026-10-02 16:28 +07:00
+updated: 2026-10-03 13:36 +07:00
 participants:
   - role: authored
     harness: Codex
@@ -8047,6 +8055,10 @@ participants:
     harness: Codex
     model: GPT-6
     at: 2026-10-02 00:08 +07:00
+  - role: implemented
+    harness: Codex
+    model: GPT-6
+    at: 2026-10-03 13:36 +07:00
 ---
 
 # Native IO
@@ -8249,9 +8261,10 @@ independent of umask. Default `0600` stays private. Shared `0640` requires a com
 traversable directories; another UID also needs directory write permission to reclaim a
 proven-dead owner's file. Set `ownerlessGraceMs: null` to refuse every age-only reclaim,
 including ownerless reclaim guards. The default remains 5000 ms for existing clients.
-Восстановление stale reclaim guard использует тот же lock owner и следующий guard:
-проверка inode и удаление выполняются под ним. Конкурирующий writer не обходит guard,
-пока прежнее удаление приостановлено; live и unknown lifetime evidence остаются отказом.
+Stale reclaim guards use the same lock owner and a child guard for the inode check and
+unlink. Recovery depth is capped at 16; a deeper stale chain refuses recovery with a depth diagnosis retained as the cause of
+the bounded `LOCK_TIMEOUT`. Live owners, unknown process-lifetime evidence and unsafe records are never
+reclaimed. Concurrent writers cannot bypass a guard while a prior unlink is paused.
 
 ## Libraries with a Zod-only runtime
 
@@ -8281,6 +8294,26 @@ Stitchkit leaf fails there. A separate schema-only entry must not import the nat
 This delivery removes a runtime kernel installation; it does not remove the build-time
 Stitchkit installation or create an independent lightweight npm package.
 
+## Qualification boundaries
+
+Native command cleanup owns the child before launch subscriptions are installed. Setup
+refusal still settles leader closure and teardown within the cleanup budget; failure to
+prove closure reports `COMMAND_CLEANUP` with the original failure retained. Process-group
+signaling requires evidence from the actual detached launcher, not a structural PID field.
+The built-in sandbox transport carries that ownership across the package's split entrypoints.
+Internal finite deadlines and Darwin retry admission use monotonic elapsed time.
+
+Linux UID-refusal qualification is a separate privileged installed-package proof in Bun
+and real Node; an unsupported platform or insufficient UID reports an explicit skip.
+A generic native-owner marker does not certify the privileged case. Real Darwin CI remains
+the qualification for native Darwin behavior.
+
+Local filesystem tests do not attest delayed NFS visibility, shared-volume microVM or gVisor
+ownership, actual PGID reuse, power-loss durability or macOS full-sync behavior. Those
+require their actual topology or failure environment. The default ownerless grace remains
+5000 ms; stricter callers can retain `ownerlessGraceMs: null`. No age-only observation
+proves a partially published owner's process dead.
+
 
 ==============================================================================
 # Guide: Generic application primitives  (docs/guide/primitives.md)

package/llms.txt

@@ -38,7 +38,7 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit/application/diagnostic-journal**: [llms/application-diagnostic-journal.txt](llms/application-diagnostic-journal.txt) 1.8 KB
 - **stitchkit/application/schemas**: [llms/application-schemas.txt](llms/application-schemas.txt) 1.8 KB
 - **stitchkit/testing**: [llms/testing.txt](llms/testing.txt) 30.8 KB
-- **stitchkit/agent-runtime/sandbox**: [llms/agent-runtime-sandbox.txt](llms/agent-runtime-sandbox.txt) 8.1 KB
+- **stitchkit/agent-runtime/sandbox**: [llms/agent-runtime-sandbox.txt](llms/agent-runtime-sandbox.txt) 8.3 KB
 - **stitchkit/files**: [llms/files.txt](llms/files.txt) 4.5 KB
 - **stitchkit/telegram**: [llms/telegram.txt](llms/telegram.txt) 26.9 KB
 - **stitchkit/telegram/html**: [llms/telegram-html.txt](llms/telegram-html.txt) 2.7 KB
@@ -55,7 +55,7 @@ Load the slice for each entrypoint your code imports — `import … from 'stitc
 - **stitchkit/agent-runtime/react**: [llms/agent-runtime-react.txt](llms/agent-runtime-react.txt) 1.0 KB
 - **stitchkit/agent-runtime/realtime**: [llms/agent-runtime-realtime.txt](llms/agent-runtime-realtime.txt) 1.8 KB
 - **stitchkit/agent-runtime/harness-tools**: [llms/agent-runtime-harness-tools.txt](llms/agent-runtime-harness-tools.txt) 1.3 KB
-- **stitchkit/process**: [llms/process.txt](llms/process.txt) 18.6 KB
+- **stitchkit/process**: [llms/process.txt](llms/process.txt) 20.0 KB
 
 ## Upgrading slices
 - **Upgrading — how to move across versions**: [llms/upgrading.txt](llms/upgrading.txt) 10.3 KB

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.103.11",
+  "version": "0.103.12",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",