docs(tui): govern agent process interfaces

[huangzesen]

Summary

• add the first two root-governed, co-located TUI interface contracts:
  • tui/internal/process/CONTRACT.md for agent launch/observe/terminate lifecycle behavior;
  • tui/internal/processscan/CONTRACT.md for advisory Unix/Windows process observation;
• add/route the paired Anatomy graph without creating one umbrella Contract;
• add focused first-child graph validation and an exact argv test proving a Windows agent path with spaces remains one argument.

Scope

This is the first real vertical slice of the Windows-native TUI contract tree requested by the maintainer. It freezes the existing TUI process boundary before the backend is implemented.

Out of scope:

• Python kernel/backend implementation or readiness changes;
• Windows installer/runtime packaging;
• shared .lingtai/ disk-protocol changes;
• Postman/UDP restoration (PR refactor(tui): retire Postman relay #681 remains intact);
• claiming that cross-compilation is Windows real-machine execution.

Contract map

root CONTRACT.md
├── tui/internal/process/CONTRACT.md
│   ├── launcher.go
│   ├── check.go
│   └── kill_{unix,windows}.go
└── tui/internal/processscan/CONTRACT.md
    └── check.go + cross-platform parser/scan tests

Each Contract is paired with its nearby ANATOMY.md; the root/TUI/neighbor links are reciprocal and checked mechanically.

Validation

Base: 19f0d61272413524daaa5d402597c2e65bd334f1 (merged PR #681; live main at candidate lock)

Passed:

cd tui
go test ./internal/process ./internal/processscan -count=1
go test . -run 'TestArchitecture|TestGovernedProcessContractGraph' -count=1
GOOS=windows GOARCH=amd64 go test -c ./internal/process
GOOS=windows GOARCH=amd64 go test -c ./internal/processscan
GOOS=windows GOARCH=amd64 go build -o /private/tmp/dev4-windows-tui-contracts/lingtai-tui.exe .
git diff --check

The built artifact is identified as PE32+ executable (console) x86-64, for MS Windows.

Post-open evidence

Passed at the same exact head after opening the review surface:

cd tui
go test ./... -count=1
go vet ./...
Anatomy citation scan: PASS (58 citations)
worktree cleanliness: PASS

• No real Windows 11 execution evidence is claimed by this PR.
• Runtime discovery, shared disk protocol, and future preflight/plan/apply/rebind interfaces each require their own nearby Contract rather than expansion of these two files.

[huangzesen]

Independent post-open review

Review was locked to base 19f0d61272413524daaa5d402597c2e65bd334f1 and original head c51321139f244fe521c064d688fd3f7122a50a26.

The read-only review found two P2 documentation blockers: stale migration-ownership statements in the new process and processscan Anatomy files. Commit 0cca1ded27db2cbfd227b8399c139667aecfcc08 corrects only those two statements.

Focused re-review of c5132113... → 0cca1ded... returned PASS:

• both original blockers resolved;
• no new findings in the two-file delta;
• stale-claim absence check and git diff --check passed;
• TestArchitectureEntryLinks and TestGovernedProcessContractGraph passed;
• independent snapshot remained clean at the exact reviewed head.

This records review evidence only; it is not a GitHub approval or merge authorization.