fix(session): reap unattended runs that end via report (v0.141.1)

[vikasprogrammer]

Problem

Background sessions spawned by automations/cron/tasks don't stop after they finish. On the live instawp tenant: 31 orphaned tmux sessions + 61 lingering claude processes, some 20h+ old, every one belonging to a session the DB already marks done. session.reaped had fired once ever.

Root cause

The fleet's automation prompts all end with "Finish with report". report (terminal.ts) sets status='done' but does not kill the tmux pane. The unattended run is an interactive, attachable TUI (not claude -p), so its only teardown is the turn-end Stop hook → /api/turn-idle → markTurnIdle. But markTurnIdle bailed on:

if (!r || r.status !== 'running' || !r.headless || r.resident) return;

By the time the Stop beacon lands, report has already flipped the row to done, so it returns early and never kills the pane (proof: these rows have last_activity = null — it bailed before the stamp). The idle backstop only swept status='running' rows with non-null last_activity, so nothing reaped them. The TUI sits idle forever. It also made the session list show a done run as "live" (green), since isLive() keys off the still-alive pane.

Fix

• markTurnIdle now accepts done as well as running for unattended, non-resident runs and reaps a still-alive pane (still honoring claimed / attached / blocked-on-human). A liveness poll skips an already-dead pane so a stray second beacon can't re-reap.
• reapIdleSessions backstop also sweeps done unattended rows whose pane is still alive — self-heals orphans that predate the fix or whose Stop beacon never landed. It only ever acts on a genuinely-alive pane (so a cleanly-reaped row is never re-killed/re-audited), and is keyed entirely off term_sessions rows, so tmux sessions not spawned through agent-os are never touched, and member interactive (headless=0) / chat resident (resident=1) sessions are excluded.

Net: a finished background run stops for real, and the session list correctly reads "done".

Verification

• npm run typecheck ✓ · npm run build ✓ · npm run test:governance → 68/68 ✓
• Live: after deploy, the backstop reaps the existing done-orphan panes on the next 60s tick.

🤖 Generated with Claude Code