[geeooff]

A second machine's log, and a watcher that vanished here mid-game on 2026-10-11, showed three gaps in how a session ends. This gathers every way a session can end into one set of rules, written as one table in docs/design/09-robustness.md.

How the session ends	Stop commands	Marker
The game ends, Quit, stop	run	removed, or left if one failed
Windows ends the session	not tried: they would die unborn	left
An update, a reload	not run	left
The watcher vanishes	—	stays open

At start, a marker is resumed if a game still runs, and otherwise its stop commands run once. A marker still open is reported at warn: the last watcher ended without stopping.

What changes for the user

• Windows ending the session is written at info, before the watcher answers. The Stopped that follows can be lost, because Microsoft documents that the session may end as soon as every application has returned from WM_ENDSESSION.
• At a session end, no command is tried. The stop commands run at the next logon, as they already did, and the two warnings that came with them are gone.
• A stop command that fails as a game ends runs again at the next start. A game closed by a shutdown triggers exactly that failure.
• When the last watcher ended mid-game without stopping, the next start says so at warn.

Code

• StopReason::SessionEnd.
• StopSignal records one reason instead of one flag per reason.
• Outcome::confirmed becomes any_failed.
• The marker gets a state line (open or left). A marker with no state line, as written by 0.3.0, reads as left.
• status shows the marker's state.

Verified

• build.ps1 test passes. Four scenarios were added, and the ones the old rules had shaped were rewritten.
• In the field on 2026-10-17, by the maintainer, read back from the log. The details are in the lot page.
  • A shutdown during a game: the stop command was refused before the watcher was told, and ran at the next start.
  • Two watchers ended from Task Manager, one resumed and one closed, each reported at warn.
• Both real shutdowns carried ENDSESSION_CLOSEAPP. A first version read that flag as an installer's request; that branch was removed.

A second commit records one of Lot 17's pending checks: the old gamemode-executor.log was pruned.

🤖 Generated with Claude Code