fix(electron): reject non-executable paths and contain launch rejections (#2705)

* fix(electron): reject non-executable paths and contain launch rejections

An executable_path that runs but never prints the inspector line made
Playwright's electron.launch() leave three waits unawaited. They rejected
unhandled and Node ended the CLI or the MCP server (#2269).

Check the resolved executable_path is a regular file, and on non-Windows
hosts that it passes X_OK, before any launch. Wrap only the launch call
in a scoped unhandledRejection listener that absorbs rejections whose
stack is in playwright-core/lib and re-throws anything else.

Tested on Linux with Node 22.23.1, 24.18.0 and 26.11.1.

Refs #2269

🤖 Generated with Claude Code (Sonnet 5.5, verified by Opus 5.5) 🦊

* fix(electron): absorb only this launch's orphaned rejections

The listener around the launch dropped every rejection with a
playwright-core stack, so an unrelated Playwright failure during the
launch window would vanish. Hold those rejections instead. When the
launch settles, drop only the ones whose message is part of the launch's
own error (the orphans of a failed launch). Raise every other one again
through the unhandledRejection path, so the process still fails. A launch
that succeeds raises all of them. Rejections without a Playwright stack
still fail at once.

One setImmediate turn before the decision lets rejections queued by the
settling tick arrive first. It is a single turn, not a timer. A shared
set of absorbed errors stops overlapping launches from raising each
other's orphans. The listener is removed on every path.

Add child-process tests that drive the built provider through its launch
seam, since Vitest's worker has its own unhandledRejection listener.

🤖 Generated with Claude Code (Sonnet 5.5, verified by Opus 5.5) 🦊

* test(electron): distinguish launch success from capture ownership

* test(electron): assert cleanup ownership failures around overlapping launches

* fix(comparison): recheck historical calls-only changes (#2223)

* fix(comparison): preserve incomplete function call evidence

Keep missing, unknown, partial and unresolved call relationships unknown in function comparisons and reconstruction claims. Aggregate IDA caller and callee coverage without overwriting uncertainty.

Validate with 144 focused tests, typecheck/lint, docs checks and test discovery. Real providers were not verified; the full headless IDA session suite requires unavailable Windows native controls.

* fix(comparison): recheck historical calls-only changes

---------

Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>

* fix(android): make DEX descriptor pattern portable

* fix(ci): isolate Linux Hopper process fixture inventory

* fix(browser): avoid replaying observed launch rejections

* style: format comparison and IDA sources

* test(electron): allow cold macOS ownership setup

* test(electron): allow cold macOS setup in the early-exit path test

The test that runs an executable which exits at once builds the Swift
ownership helper twice on macOS: in the CLI process, and again in the
MCP server process on its first tool call that prepares. A cold Swift
cache can spend up to 120 seconds on a build. The test had only the
30 second default.

Give the test 180 seconds, as e1579ec31 did for
electronLaunchRejections.test.ts and 65a809a0d did for
webSourceLocationCli.test.ts. cli.run has no deadline of its own, so
it needs no timeoutMs.

🤖 Generated with Claude Code (Sonnet 5.5, verified by Opus 5.5) 🦊

* test(ci): isolate report fixtures and declare PowerPC Java bounds

---------

Co-authored-by: Claude Opus 5.5 <opus@fox.invalid>
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
Co-authored-by: Lucien <164857476+dakjdakd@users.noreply.github.com>

src/application/javascript/ElectronActiveObservationService.ts

@@ -1,5 +1,6 @@
 import { dirname } from "node:path";
-import { realpath } from "node:fs/promises";
+import { constants } from "node:fs";
+import { access, realpath, stat } from "node:fs/promises";
 
 import type { ExecutionOptions } from "../AnalysisProvider.js";
 import type {
@@ -43,11 +44,35 @@ const resolveInputPath = async (
   }
 };
 
+/** Resolve the executable and require a launchable regular file before any spawn. */
+const resolveExecutablePath = async (
+  selected: string,
+): ReturnType<typeof resolveInputPath> => {
+  const resolved = await resolveInputPath("executable_path", selected);
+  if (!resolved.ok) return resolved;
+  try {
+    if (!(await stat(resolved.value)).isFile())
+      throw new Error("not a regular file");
+    if (process.platform !== "win32")
+      await access(resolved.value, constants.X_OK);
+    return resolved;
+  } catch (cause: unknown) {
+    return err({
+      issue: {
+        path: ["executable_path"],
+        reason: "invalid_value",
+        message: `executable_path ${selected} is not an executable file: ${cause instanceof Error ? cause.message : String(cause)}`,
+      },
+      cause,
+    });
+  }
+};
+
 const canonicalizeInput = async (
   input: ElectronActiveObservationInput,
 ): Promise<Result<CanonicalElectronActiveObservationInput, AnalysisError>> => {
   const [executable, application, root] = await Promise.all([
-    resolveInputPath("executable_path", input.executable_path),
+    resolveExecutablePath(input.executable_path),
     resolveInputPath("application_path", input.application_path),
     input.application_root === undefined
       ? Promise.resolve(ok(undefined))

src/browser/PlaywrightElectronActiveProvider.ts

@@ -96,13 +96,16 @@ export class PlaywrightElectronActiveProvider implements ElectronActiveObservati
         await systemProcessOwnershipHost.captureBaseline?.(options.signal);
       if (options.signal?.aborted)
         throw new BrowserObservationError(OPERATION, "cancelled");
-      application = await this.launch({
+      const launchOptions: Parameters<typeof electron.launch>[0] = {
         executablePath: paths.executable,
         cwd: paths.root,
         env: safeElectronEnvironment(this.environment, runId),
         args: ["-r", hookPath, paths.application, ...input.args],
         timeout: Math.max(1, startupDeadline - performance.now()),
-      });
+      };
+      application = await containLaunchRejections(() =>
+        this.launch(launchOptions),
+      );
       const leaderPid = application.process().pid;
       if (
         typeof leaderPid !== "number" ||
@@ -377,6 +380,88 @@ const safeElectronEnvironment = (
     ["REA_PROCESS_RUN_ID", runId] as const,
   ]);
 
+const PLAYWRIGHT_INTERNAL_FRAME = /playwright-core[\\/]lib[\\/]/;
+interface LaunchRejectionScope {
+  failure?: unknown;
+}
+const activeLaunches = new Set<LaunchRejectionScope>();
+const heldLaunchRejections = new Map<
+  Promise<unknown>,
+  {
+    readonly reason: Error;
+    readonly candidates: Set<LaunchRejectionScope>;
+    readonly hadExternalListener: boolean;
+  }
+>();
+
+const holdLaunchRejection = (
+  reason: unknown,
+  promise: Promise<unknown>,
+): void => {
+  if (
+    !(reason instanceof Error) ||
+    !PLAYWRIGHT_INTERNAL_FRAME.test(reason.stack ?? "")
+  )
+    throw reason;
+  if (!heldLaunchRejections.has(promise))
+    heldLaunchRejections.set(promise, {
+      reason,
+      candidates: new Set(activeLaunches),
+      hadExternalListener: process
+        .listeners("unhandledRejection")
+        .some((listener) => listener !== holdLaunchRejection),
+    });
+};
+
+const forwardLaunchRejection = (
+  reason: Error,
+  hadExternalListener: boolean,
+): void => {
+  // Listeners present at the original event already observed it. When the
+  // holding listener was the only listener, restore Node's fatal behavior.
+  if (!hadExternalListener)
+    process.nextTick(() => {
+      throw reason;
+    });
+};
+
+/** Playwright leaves rejected launch promises unhandled; absorb only those that repeat this launch's failure. */
+const containLaunchRejections = async <T>(
+  launch: () => Promise<T>,
+): Promise<T> => {
+  const scope: LaunchRejectionScope = {};
+  if (activeLaunches.size === 0)
+    process.on("unhandledRejection", holdLaunchRejection);
+  activeLaunches.add(scope);
+  try {
+    return await launch();
+  } catch (cause: unknown) {
+    scope.failure = cause;
+    throw cause;
+  } finally {
+    await new Promise<void>((resolve) => setImmediate(resolve));
+    activeLaunches.delete(scope);
+    if (activeLaunches.size === 0)
+      process.off("unhandledRejection", holdLaunchRejection);
+    for (const [
+      promise,
+      { reason, candidates, hadExternalListener },
+    ] of heldLaunchRejections) {
+      if (!candidates.delete(scope)) continue;
+      if (
+        scope.failure instanceof Error &&
+        reason.message !== "" &&
+        scope.failure.message.includes(reason.message)
+      )
+        heldLaunchRejections.delete(promise);
+      else if (candidates.size === 0) {
+        heldLaunchRejections.delete(promise);
+        forwardLaunchRejection(reason, hadExternalListener);
+      }
+    }
+  }
+};
+
 const providerError = (cause: unknown): AnalysisError =>
   cause instanceof AnalysisError
     ? cause

tests/acceptance/applications/electronInvalidPaths.test.ts

@@ -1,4 +1,4 @@
-import { writeFile } from "node:fs/promises";
+import { chmod, mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 
 import { expect } from "vitest";
@@ -68,6 +68,130 @@ cliTest(
   },
 );
 
+const isWindows = process.platform === "win32";
+
+const errorBody = (result: {
+  readonly content: readonly { readonly type: string }[];
+}) => {
+  const content = result.content.find((item) => item.type === "text");
+  if (content?.type !== "text" || !("text" in content))
+    throw new Error("Missing error response");
+  return JSON.parse(String(content.text));
+};
+
+const createElectronApplication = async (root: string) => {
+  const application = join(root, "app");
+  await mkdir(application);
+  await writeFile(
+    join(application, "package.json"),
+    JSON.stringify({ name: "fixture", main: "main.js" }),
+  );
+  await writeFile(join(application, "main.js"), "");
+  return application;
+};
+
+cliTest.skipIf(isWindows)(
+  "rejects a non-executable Electron executable_path before launch through CLI and MCP",
+  async ({ cli }) => {
+    const root = await createTestTempDirectory("rea-electron-not-executable-");
+    const application = await createElectronApplication(root);
+    const executable = join(root, "not-an-executable.txt");
+    await writeFile(executable, "plain text");
+    await chmod(executable, 0o644);
+    const request = {
+      executable_path: executable,
+      application_path: application,
+      actions: [],
+    };
+    const requestPath = join(root, "input.json");
+    await writeFile(requestPath, JSON.stringify(request));
+
+    const response = await cli.run({
+      arguments: ["capture-electron-scenario", requestPath, "--format", "json"],
+      environment: { REA_LOG_LEVEL: "silent" },
+    });
+    expect(response.exitCode).toBe(1);
+    expect(response.json).toMatchObject({
+      code: "invalid_request",
+      details: {
+        issues: [{ path: ["executable_path"], reason: "invalid_value" }],
+      },
+    });
+
+    const { call } = await connectLocalToolsMcp();
+    const result = await call("capture_electron_scenario", request);
+    expect(result.isError).toBe(true);
+    expect(errorBody(result)).toMatchObject({
+      error: {
+        code: "invalid_request",
+        details: {
+          issues: [{ path: ["executable_path"], reason: "invalid_value" }],
+        },
+      },
+    });
+    const session = await call("binary_session", {});
+    expect(session.isError, JSON.stringify(session)).not.toBe(true);
+  },
+);
+
+cliTest.skipIf(isWindows)(
+  "returns a typed failure when an executable exits before Electron starts and keeps the MCP server and its Evidence",
+  async ({ cli }) => {
+    const root = await createTestTempDirectory("rea-electron-early-exit-");
+    const application = await createElectronApplication(root);
+    const executable = join(root, "exits-immediately");
+    await writeFile(executable, "#!/bin/sh\nexit 0\n");
+    await chmod(executable, 0o755);
+    const request = {
+      executable_path: executable,
+      application_path: application,
+      actions: [],
+    };
+    const requestPath = join(root, "input.json");
+    await writeFile(requestPath, JSON.stringify(request));
+
+    const response = await cli.run({
+      arguments: ["capture-electron-scenario", requestPath, "--format", "json"],
+      environment: { REA_LOG_LEVEL: "silent" },
+    });
+    expect(response.exitCode).toBe(1);
+    expect(response.json).toMatchObject({
+      code: "execution_failure",
+      details: { operation: "capture_electron_scenario" },
+    });
+    expect(response.stdout).toContain("Process failed to launch");
+
+    const { call } = await connectLocalToolsMcp();
+    const analysis = await call("analyze_javascript_application", {
+      input_path: application,
+    });
+    expect(analysis.isError, JSON.stringify(analysis)).not.toBe(true);
+    const retained = async () => {
+      const bundle = await call("get_evidence_bundle", {});
+      expect(bundle.isError, JSON.stringify(bundle)).not.toBe(true);
+      const structured = bundle.structuredContent as {
+        result: { records: { evidence_id: string }[] };
+      };
+      return structured.result.records.map((record) => record.evidence_id);
+    };
+    const before = await retained();
+    expect(before).toHaveLength(1);
+
+    const result = await call("capture_electron_scenario", request);
+    expect(result.isError).toBe(true);
+    expect(errorBody(result)).toMatchObject({
+      error: {
+        code: "execution_failure",
+        details: { operation: "capture_electron_scenario" },
+      },
+    });
+    const session = await call("binary_session", {});
+    expect(session.isError, JSON.stringify(session)).not.toBe(true);
+    expect(await retained()).toEqual(before);
+  },
+  180_000,
+);
+
 cliTest(
   "rejects a file URL path field without resolving an invented local path",
   async ({ cli }) => {

tests/boundary/process/electronLaunchRejections.test.ts

@@ -0,0 +1,323 @@
+import { chmod, mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+
+import { expect, vi } from "vitest";
+
+import { createTestTempDirectory } from "../../fixtures/temporaryDirectory.js";
+import {
+  processTest,
+  type TestProcesses,
+} from "../../support/process/processFixture.js";
+
+const script = `
+import { PlaywrightElectronActiveProvider } from "./dist/browser/PlaywrightElectronActiveProvider.js";
+import { electronActiveObservationInputSchema } from "./dist/domain/javascript/electronActiveObservation.js";
+
+const [scenario, executable, root] = JSON.parse(process.argv[1]);
+let observedRejections = 0;
+if (scenario === "oneFailureWithManySuccesses" || scenario === "externalListenerSeesUnrelatedOnce")
+  process.on("unhandledRejection", () => { observedRejections += 1; });
+const orphanStack = (message, file) =>
+  message + "\\n    at waitForLine (/app/node_modules/playwright-core/lib/server/" + file + ":247:21)";
+const playwrightError = (message, file = "electron/electron.js") => {
+  const error = new Error(message);
+  error.stack = "Error: " + orphanStack(message, file);
+  return error;
+};
+const rejectLater = (error, ms) => setTimeout(() => void Promise.reject(error), ms);
+const fakeApplication = { process: () => ({ pid: undefined }), close: async () => undefined };
+const launchFailure = (message) =>
+  new Error("electron.launch: " + message + "\\nCall log:\\n  - <launching>");
+const after = (ms, action) => new Promise((resolve, reject) => setTimeout(() => {
+  try { resolve(action()); } catch (error) { reject(error); }
+}, ms));
+const orphans = (message) => {
+  for (let index = 0; index < 3; index += 1) void Promise.reject(playwrightError(message));
+};
+
+let during = -1;
+const launches = {
+  realLaunch: undefined,
+  realWithUnrelatedPlaywrightRejection: async (options) => {
+    void Promise.reject(playwrightError("unrelated playwright failure", "page.js"));
+    return (await import("playwright-core"))._electron.launch(options);
+  },
+  failureWithOrphans: async () => {
+    during = process.listenerCount("unhandledRejection");
+    orphans("Process failed to launch!");
+    await after(10, () => { throw launchFailure("Process failed to launch!"); });
+  },
+  failureInOneTick: async () => {
+    orphans("Process failed to launch!");
+    throw launchFailure("Process failed to launch!");
+  },
+  failureWithUnrelatedPlaywrightRejection: async () => {
+    orphans("Process failed to launch!");
+    void Promise.reject(playwrightError("Target page, context or browser has been closed", "page.js"));
+    await after(10, () => { throw launchFailure("Process failed to launch!"); });
+  },
+  externalListenerSeesUnrelatedOnce: async () => {
+    void Promise.reject(playwrightError("unrelated playwright failure", "page.js"));
+    await after(10, () => { throw launchFailure("Process failed to launch!"); });
+  },
+  pendingWithUnrelatedRejection: () => {
+    setInterval(() => {}, 1000);
+    rejectLater(new Error("unrelated application failure"), 20);
+    return new Promise(() => {});
+  },
+  success: async () => {
+    during = process.listenerCount("unhandledRejection");
+    return fakeApplication;
+  },
+  successWithPlaywrightRejection: async () => {
+    void Promise.reject(playwrightError("stray playwright failure", "page.js"));
+    await after(10, () => fakeApplication);
+    return fakeApplication;
+  },
+};
+
+const input = (executablePath) => ({
+  ...electronActiveObservationInputSchema.parse({
+    executable_path: executablePath,
+    application_path: root,
+  }),
+  application_root: root,
+});
+const capture = (launch, executablePath = executable) =>
+  new PlaywrightElectronActiveProvider({}, launch).capture(input(executablePath));
+
+const before = process.listenerCount("unhandledRejection");
+let results;
+if (scenario === "concurrentFailures" || scenario === "failureThenSuccess" || scenario === "successThenFailure" || scenario === "oneFailureWithManySuccesses") {
+  const failing = (message, orphanAt, settleAt) => async () => {
+    during = Math.max(during, process.listenerCount("unhandledRejection"));
+    await after(orphanAt, () => orphans(message));
+    await after(settleAt - orphanAt, () => { throw launchFailure(message); });
+  };
+  const succeeding = (settleAt) => () => {
+    during = Math.max(during, process.listenerCount("unhandledRejection"));
+    return after(settleAt, () => fakeApplication);
+  };
+  const pair = {
+    concurrentFailures: [failing("alpha failed", 10, 30), failing("beta failed", 20, 50)],
+    failureThenSuccess: [failing("alpha failed", 10, 20), succeeding(40)],
+    successThenFailure: [failing("alpha failed", 20, 40), succeeding(30)],
+    oneFailureWithManySuccesses: [failing("alpha failed", 10, 80), ...[20, 30, 40, 50].map(succeeding)],
+  }[scenario];
+  results = await Promise.all(pair.map((launch) => capture(launch)));
+} else {
+  results = [await capture(launches[scenario] ?? undefined)];
+}
+await new Promise((resolve) => setTimeout(resolve, 50));
+console.log(JSON.stringify({
+  before,
+  during,
+  after: process.listenerCount("unhandledRejection"),
+  observedRejections,
+  reasons: results.map((result) => result.ok ? null : result.error.reason ?? null),
+  ok: results.map((result) => result.ok),
+  causeReasons: results.map((result) => result.ok ? null : result.error.cause?.reason ?? null),
+  cleanupResources: results.map((result) => result.ok ? null : result.error.cleanupResources ?? null),
+  causes: results.map((result) => result.ok ? null : String(result.error.cause?.message).split("\\n")[0]),
+}));
+`;
+
+// A cold macOS Swift toolchain may spend up to 120 seconds building the
+// ownership reader before any child launch reaches its assertion.
+vi.setConfig({ testTimeout: 180_000 });
+
+type Outcome = {
+  readonly before: number;
+  readonly during: number;
+  readonly after: number;
+  readonly ok: readonly boolean[];
+  readonly causes: readonly (string | null)[];
+  readonly observedRejections: number;
+  readonly reasons: readonly (string | null)[];
+  readonly causeReasons: readonly (string | null)[];
+  readonly cleanupResources: readonly (readonly string[] | null)[];
+};
+
+const run = async (
+  processes: TestProcesses,
+  scenario: string,
+  executable = "/not/launched",
+  root = "/",
+) =>
+  processes.run(
+    process.execPath,
+    [
+      "--input-type=module",
+      "--eval",
+      script,
+      JSON.stringify([scenario, executable, root]),
+    ],
+    { timeoutMs: 150_000 },
+  );
+
+const outcome = (result: { readonly stdout: string }): Outcome =>
+  JSON.parse(result.stdout.trim().split("\n").at(-1) ?? "") as Outcome;
+
+const earlyExit = async () => {
+  const root = await createTestTempDirectory("rea-launch-rejections-");
+  const executable = join(root, "exits-immediately");
+  await mkdir(join(root, "app"));
+  await writeFile(executable, "#!/bin/sh\nexit 0\n");
+  await chmod(executable, 0o755);
+  return { executable, root: join(root, "app") };
+};
+
+processTest(
+  "absorbs the orphaned rejections of a failed launch and removes its listener",
+  async ({ processes }) => {
+    const result = await run(processes, "failureWithOrphans");
+    expect(result.exitCode, result.stderr).toBe(0);
+    expect(outcome(result)).toMatchObject({
+      during: outcome(result).before + 1,
+      after: outcome(result).before,
+      ok: [false],
+      causes: ["electron.launch: Process failed to launch!"],
+    });
+  },
+);
+
+processTest(
+  "absorbs orphans raised in the same tick as the launch failure",
+  async ({ processes }) => {
+    const result = await run(processes, "failureInOneTick");
+    expect(result.exitCode, result.stderr).toBe(0);
+    expect(outcome(result)).toMatchObject({ ok: [false] });
+  },
+);
+
+processTest.skipIf(process.platform === "win32")(
+  "absorbs the orphans of a real Playwright launch that exits at once",
+  async ({ processes }) => {
+    const { executable, root } = await earlyExit();
+    const result = await run(processes, "realLaunch", executable, root);
+    expect(result.exitCode, result.stderr).toBe(0);
+    expect(outcome(result)).toMatchObject({
+      ok: [false],
+      causes: ["electron.launch: Process failed to launch!"],
+    });
+    expect(outcome(result).after).toBe(outcome(result).before);
+  },
+);
+
+processTest.skipIf(process.platform === "win32")(
+  "still fails on an unrelated Playwright rejection during a real failing launch",
+  async ({ processes }) => {
+    const { executable, root } = await earlyExit();
+    const result = await run(
+      processes,
+      "realWithUnrelatedPlaywrightRejection",
+      executable,
+      root,
+    );
+    expect(result.exitCode, result.stderr).toBe(1);
+    expect(result.stderr).toContain("unrelated playwright failure");
+    expect(result.stdout).toBe("");
+  },
+);
+
+processTest(
+  "does not replay an unrelated orphan to a listener that already received it",
+  async ({ processes }) => {
+    const result = await run(processes, "externalListenerSeesUnrelatedOnce");
+    expect(result.exitCode, result.stderr).toBe(0);
+    expect(outcome(result)).toMatchObject({
+      observedRejections: 1,
+      ok: [false],
+      causes: ["electron.launch: Process failed to launch!"],
+    });
+  },
+);
+
+processTest(
+  "still fails on an unrelated Playwright rejection beside a failing launch's own orphans",
+  async ({ processes }) => {
+    const result = await run(
+      processes,
+      "failureWithUnrelatedPlaywrightRejection",
+    );
+    expect(result.exitCode, result.stderr).toBe(1);
+    expect(result.stderr).toContain(
+      "Target page, context or browser has been closed",
+    );
+    expect(result.stdout).toBe("");
+  },
+);
+
+processTest(
+  "still fails at once on an unrelated rejection while a launch is pending",
+  async ({ processes }) => {
+    const result = await run(processes, "pendingWithUnrelatedRejection");
+    expect(result.exitCode, result.stderr).toBe(1);
+    expect(result.stderr).toContain("unrelated application failure");
+    expect(result.stdout).toBe("");
+  },
+);
+
+processTest(
+  "removes its listener after a successful launch",
+  async ({ processes }) => {
+    const result = await run(processes, "success");
+    expect(result.exitCode, result.stderr).toBe(0);
+    expect(outcome(result)).toMatchObject({
+      during: outcome(result).before + 1,
+      after: outcome(result).before,
+    });
+  },
+);
+
+processTest(
+  "re-raises a Playwright rejection when the launch succeeds",
+  async ({ processes }) => {
+    const result = await run(processes, "successWithPlaywrightRejection");
+    expect(result.exitCode, result.stderr).toBe(1);
+    expect(result.stderr).toContain("stray playwright failure");
+    expect(result.stdout).toBe("");
+  },
+);
+
+processTest.for([
+  "concurrentFailures",
+  "failureThenSuccess",
+  "successThenFailure",
+])(
+  "keeps overlapping launches from re-raising each other's orphans (%s)",
+  async (scenario, { processes }) => {
+    const result = await run(processes, scenario);
+    expect(result.exitCode, result.stderr).toBe(0);
+    expect(outcome(result).after).toBe(outcome(result).before);
+  },
+);
+
+processTest(
+  "holds each orphan once across many overlapping successful launches",
+  async ({ processes }) => {
+    const result = await run(processes, "oneFailureWithManySuccesses");
+    expect(result.exitCode, result.stderr).toBe(0);
+    const observed = outcome(result);
+    expect(observed.during).toBe(observed.before + 1);
+    expect(observed.after).toBe(observed.before);
+    expect(observed.observedRejections).toBe(3);
+    expect(observed.ok).toEqual([false, false, false, false, false]);
+    expect(observed.causes[0]).toBe("electron.launch: alpha failed");
+    expect(observed.reasons).toEqual([
+      null,
+      "cleanup_failed",
+      "cleanup_failed",
+      "cleanup_failed",
+      "cleanup_failed",
+    ]);
+    expect(observed.causeReasons).toEqual([
+      null,
+      ...Array.from({ length: 4 }, () => "process_ownership_unavailable"),
+    ]);
+    expect(observed.cleanupResources).toEqual([
+      [],
+      ...Array.from({ length: 4 }, () => ["owned_process_group"]),
+    ]);
+  },
+);