stitchkit 0.74.0 → 0.74.1

package/dist/application/diagnostic-journal-lock.d.ts

@@ -18,6 +18,20 @@ export declare function parsePlatformUuid(dump: string): string | null;
  * removed — but which executable answers can be, and that makes the branch provable off darwin.
  */
 export declare function readDarwinPlatformUuid(command?: string): Promise<string | null>;
+/**
+ * The state letter of a pid, or `null` where this platform will not say.
+ *
+ * `/proc/<pid>/stat` puts the command name in parentheses and the name may itself contain them, so
+ * the state follows the LAST `)` — reading the third whitespace-separated field instead is wrong for
+ * any process whose name has a space or a bracket in it.
+ *
+ * @internal `psCommand` is a seam for the tests: `/proc` is Linux-only, so the fallback branch is
+ * unreachable here without one, and an untested branch in a liveness probe is how this defect got in.
+ */
+export declare function isZombieProcess(pid: number, seam?: {
+    procRoot?: string;
+    psCommand?: string;
+}): Promise<boolean>;
 /**
  * Take the journal's exclusive lock under the configured policy.
  *

package/dist/application/diagnostic-journal-lock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"diagnostic-journal-lock.d.ts","sourceRoot":"","sources":["../../src/application/diagnostic-journal-lock.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAoB,MAAM,kBAAkB,CAAC;AAI1D,OAAO,KAAK,EAEV,2BAA2B,EAC5B,MAAM,+BAA+B,CAAC;AAEvC,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;AAEnD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AA6DD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7D;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,SAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBtF;AAiGD;;;;;;;;;;;;GAYG;AACH,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,2BAA2B,EACnC,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,6BAA6B,CAAC,CA2BxC"}
+{"version":3,"file":"diagnostic-journal-lock.d.ts","sourceRoot":"","sources":["../../src/application/diagnostic-journal-lock.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAoB,MAAM,kBAAkB,CAAC;AAI1D,OAAO,KAAK,EAEV,2BAA2B,EAC5B,MAAM,+BAA+B,CAAC;AAEvC,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;AAEnD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AA6DD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7D;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,SAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBtF;AAgED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAgDD;;;;;;;;;;;;GAYG;AACH,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,2BAA2B,EACnC,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,6BAA6B,CAAC,CA2BxC"}

package/dist/application.js

@@ -604,13 +604,30 @@ function attribute(owner, identity) {
   }
   return owner.host === hostname() ? "this-machine" : "unattributable";
 }
-function probeLiveness(owner) {
+async function probeLiveness(owner) {
   try {
     process.kill(owner.pid, 0);
-    return "alive";
   } catch (error) {
     return isRecord(error) && error.code === "ESRCH" ? "gone" : "alive";
   }
+  return await isZombieProcess(owner.pid) ? "gone" : "alive";
+}
+async function isZombieProcess(pid, seam = {}) {
+  const { procRoot = "/proc", psCommand = "ps" } = seam;
+  try {
+    const stat = await readFile(`${procRoot}/${pid}/stat`, "utf8");
+    return stat.slice(stat.lastIndexOf(")") + 1).trimStart().startsWith("Z");
+  } catch {}
+  try {
+    const { stdout } = await run(psCommand, ["-o", "state=", "-p", String(pid)], {
+      timeout: 2000,
+      maxBuffer: 1 << 16,
+      encoding: "utf8"
+    });
+    return stdout.trim().startsWith("Z");
+  } catch {
+    return false;
+  }
 }
 async function diagnose(owner, declaredIdentity) {
   if (!owner)
@@ -624,7 +641,7 @@ async function diagnose(owner, declaredIdentity) {
   };
   if (attribution !== "this-machine")
     return { attribution, liveness: "not-probed", owner: record };
-  return { attribution, liveness: probeLiveness(owner), owner: record };
+  return { attribution, liveness: await probeLiveness(owner), owner: record };
 }
 async function readLockOwner(lockPath) {
   let handle;

package/llms-full.txt

@@ -2137,9 +2137,11 @@ check({ when: new Date() })   // accepted: a live Date
 // server                     // refused: expected date, received string
 ```
 
-This one fails in the safe direction — nothing valid is blocked — but it means a
-local check passes traffic the server will reject, which is the opposite of what
-it was added for.
+This one fails in the safe direction — nothing valid is blocked — but "safe" is
+about traffic, not about diagnostics. The check stays silent exactly where it
+promised to speak: the refusal then arrives from the server, through a different
+path and without the field names the local gate would have given. A gate that
+lets through what it was added to catch is not a cheap gate, it is a quiet one.
 
 One schema, one call, opposite answers — inside a single release, with no version
 skew involved. Argument validation therefore stays on the server, which is the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stitchkit",
-  "version": "0.74.0",
+  "version": "0.74.1",
   "description": "Contract-first backend framework — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client. Bun and Node.",
   "keywords": [
     "bun",