[gurnben]

Summary

Runs used to live inside the launching terminal: closing it (or an incautious ctrl+c) killed a 10-minute audit, and one attach session owned the only live view. This PR moves every run into a detached worker process with the journal as the event bus:

• Background launch: run spawns a setsid worker (survives the terminal) and attaches by default; -d/--detach fires and forgets and prints the run id with hints. The worker writes options.json in, and the existing journal (spec, stream, result, pid) out; stop signals (SIGINT/SIGTERM) become context cancellations that flow through the same graceful teardown paths as before (crush cancel endpoint, server shutdown).
• attach <run>: replays the journal from the start and follows it live through the existing monitor. Ctrl-C / q / d detaches without cancelling — the destructive action is now the explicit one (x twice). Attaching to a finished run replays the full transcript and exits with the run's code. Non-TTY attach degrades to a plain live tail.
• runs / stop / logs / result: run listing with a state machine (running/done/failed/needs-input/budget-stop/aborted/orphaned via result.json + pid liveness), a graceful SIGINT→SIGTERM→SIGKILL stop ladder, rendered journal transcripts, and stored results. Run ids get random 4-hex suffixes; attach/stop/result accept the suffix or any unambiguous prefix.
• Output completeness: crush tool_result parts — the actual command/scanner output and the bulk of a run's transcript — now stream as tool_result events (truncated to 6 lines/400 chars), rendered as dim blocks in the monitor and plain output. Journal raw lines no longer duplicate parsed events, so replays render once.
• --json / --no-monitor keep the synchronous in-process CI semantics; the background path is the interactive default.

Verification

• Live end to end against the fake harness: detached start → runs shows running → ctrl+c detach with the run surviving → graceful stop writing an aborted result → replay of finished runs → no orphaned workers. A fast-run race (worker finishing before the parent's pid handshake) was found and fixed live.
• New tests: worker round-trip and failure path in-process (options.json → journal → result → state resolution), journal tailer (replay/follow/partial lines), run-state machine, prefix resolution, id uniqueness, tool_result mapping and truncation.
• Full suite with race detector, vet, staticcheck clean.

💘 Generated with Crush