fix(hackbrowser): browser stability + subprocess lifecycle hardening

packages/cyberstrike/src/hackbrowser-subprocess/hackbrowser-worker.ts

@@ -269,8 +269,16 @@ async function main(): Promise<void> {
     }
   })
 
-  // Wait until stdin closes (parent terminates or closes the pipe)
-  await new Promise<void>((resolve) => rl.once("close", resolve))
+  // Wait until stdin closes (parent terminates or closes the pipe).
+  // Abort the crawl so run()'s disconnect-wait breaks and the worker exits cleanly.
+  await new Promise<void>((resolve) =>
+    rl.once("close", () => {
+      controller.abort()
+      resolve()
+    }),
+  )
+  // Backstop: if runWorker is still hanging 5s after stdin close, force exit
+  setTimeout(() => process.exit(0), 5000).unref()
 }
 
 async function runWorker(opts: WorkerOptions, signal: AbortSignal): Promise<void> {

packages/cyberstrike/src/tool/hackbrowser-launcher.ts

@@ -421,7 +421,9 @@ async function backgroundRun(
     }
 
     // Worker exited without sending result/error — unexpected crash.
+    // Force-kill to clean up any orphaned Chrome child processes.
     if (!receivedResult) {
+      try { proc.kill() } catch {}
       const exitCode = await proc.exited.catch(() => -1)
       const stderr = await Bun.readableStreamToText(proc.stderr as ReadableStream).catch(() => "")
       const message =
@@ -463,7 +465,13 @@ async function backgroundRun(
     )
   } finally {
     activeRuns.delete(sessionID)
-    proc.kill()
+    try {
+      const s = proc.stdin
+      if (s && typeof s !== "number") (s as any).end()
+    } catch {}
+    setTimeout(() => {
+      try { proc.kill() } catch {}
+    }, 10_000)
   }
 }