[JacobStephens2]

Summary

Model/Effort checks now share Harness process ownership. Terminal Setup cancellation exits 1 with interrupted, restores terminal attributes and leaves the User config and Credentials unchanged.

Command / Setup check
  Harness process owner
    write and close optional stdin; capture both output pipes
    interruption → adapter stop → reap CLI and join I/O workers

Setup question
  persistent signal recording → poll stdin → restore saved attributes

Closes #452

Evidence

• Before: Live-check regressions for Claude, Codex, agy and Grok each failed: interruption waited for the check and a Command log was created.
  After: Live checks, detached descendants and after-exit pipe holders stop within the regression deadlines. Exact recorded owned PIDs terminate before any Claim, worktree or Command log.
• Both Setup entry paths cover all six Harness I/O catches. Later ordinary/hidden questions remain interruptible after successful and refused/repeated checks; UTF-8 paste, partial-line EOF and terminal restoration pass.
• Validation (Linux): cargo check --all-targets, cargo fmt --check, cargo clippy --all-targets -- -D warnings, and the full cargo test suite pass.
• CI: the full Linux and macOS suites pass, along with the Linux and macOS artifact builds. Terminal regressions retain exact attribute checks across both platforms.
• Review against main: both Standards findings addressed; no Spec findings.

Test seams

• Command startup through real thirdshift processes and fake Harness executables.
• Production Setup terminal input through explicit Setup and the first Run's offer.
• Existing Harness process captured-output and streaming interfaces.

Merge Danger

Door: two-way

Reversible implementation changes; no data migration.

Blast Radius: Harnesses

Command preflight and terminal Setup across all six Harnesses.

Unaddressed findings

Standards

None. Both findings were addressed.

Spec

None. The review reported no findings.

Built with codex · gpt-6.1-sol · xhigh