fix(daemon): verify structured process identity

crates/daemon/src/error.rs

@@ -90,6 +90,9 @@ pub enum DaemonError {
     #[error("process `{name}` started without an observable pid")]
     MissingProcessId { name: String },
 
+    #[error("process `{name}` started without observable identity for pid {pid}")]
+    MissingProcessIdentity { name: String, pid: u32 },
+
     #[error("readiness check `{check}` timed out after {timeout_ms}ms; last error: {last_error:?}")]
     ReadinessTimedOut {
         check: String,

crates/daemon/src/managed_resources/mysql_tests.rs

@@ -6,6 +6,7 @@ use camino::Utf8Path;
 use camino_tempfile::tempdir;
 use insta::{Settings, assert_debug_snapshot};
 use resources::RuntimeArtifactAdapter;
+use serde_json::{Value, json};
 use state::{Database, LinkProjectInput, ProjectRecord, PvPaths};
 
 use super::ManagedResourceRuntimeAdapter;
@@ -293,10 +294,17 @@ fn read_dotenv(project: &ProjectRecord) -> Result<String> {
     state::fs::read_to_string(&project.path.join(".env")).map_err(Into::into)
 }
 
-fn read_runtime_metadata(paths: &PvPaths, track: &str) -> Result<serde_json::Value> {
+fn read_runtime_metadata(paths: &PvPaths, track: &str) -> Result<Value> {
     let content = state::fs::read_to_string(&paths.resource_runtime_metadata("mysql", track))?;
+    let mut metadata: Value = serde_json::from_str(&content)?;
+    if let Some(process_start_identity) = metadata.get_mut("process_start_identity") {
+        *process_start_identity = json!("<native-start-identity>");
+    }
+    if let Some(process_executable_identity) = metadata.get_mut("process_executable_identity") {
+        *process_executable_identity = json!("<native-executable-identity>");
+    }
 
-    serde_json::from_str(&content).map_err(Into::into)
+    Ok(metadata)
 }
 
 fn mysql_system_database_initialized(paths: &PvPaths, track: &str) -> Result<bool> {

crates/daemon/src/managed_resources/snapshots/daemon__managed_resources__mysql_tests__mysql_project_demand_installs_missing_fixture_track_before_start.snap

@@ -97,6 +97,8 @@ expression: snapshot
         "log_path": String("<tempdir>/home/.pv/logs/resources/mysql/8.0.log"),
         "name": String("mysql-8.0"),
         "pid": Number(<pid>),
+        "process_executable_identity": String("<native-executable-identity>"),
+        "process_start_identity": String("<native-start-identity>"),
         "resource_name": String("mysql"),
         "started_at": String("<timestamp>"),
         "track": String("8.0"),

crates/daemon/src/managed_resources/snapshots/daemon__managed_resources__mysql_tests__mysql_reconciliation_creates_database_allocation_and_renders_env.snap

@@ -97,6 +97,8 @@ expression: snapshot
         "log_path": String("<tempdir>/home/.pv/logs/resources/mysql/8.0.log"),
         "name": String("mysql-8.0"),
         "pid": Number(<pid>),
+        "process_executable_identity": String("<native-executable-identity>"),
+        "process_start_identity": String("<native-start-identity>"),
         "resource_name": String("mysql"),
         "started_at": String("<timestamp>"),
         "track": String("8.0"),

crates/daemon/src/managed_resources/tests.rs

@@ -4761,7 +4761,7 @@ fn assert_with_normalized_runtime(
     settings.add_filter(r"timeout_ms: \d+", "timeout_ms: <timeout_ms>");
     settings.add_filter(r"os error \d+", "os error <code>");
     settings.add_filter(
-        r"I/O error: Connection refused \(os error <code>\)|I/O error: HTTP readiness returned non-success status|deadline has elapsed",
+        r"I/O error: (Connection refused|Connection reset by peer) \(os error <code>\)|I/O error: HTTP readiness returned non-success status|deadline has elapsed",
         "I/O error: readiness unavailable",
     );
     settings.add_filter(r"port: \d+", "port: <port>");