fix(bridge): listener watchdog, fixed-time auth, agent value coercion, auto-tick

[yhc509]

#175 + #174 + #176 + the auto-activation half of #173.

What changed

#175 — fixed-time auth token compare. string.Equals on the token path (length test + early exit) is replaced by AuthTokenComparison.FixedTimeEquals. Hand-rolled rather than CryptographicOperations.FixedTimeEquals so the shared protocol source keeps compiling on Unity's runtime profile and .NET 9. Accept/reject behavior unchanged.

#174 — listener watchdog. The Unix accept loop ended permanently on any unexpected AcceptAsync failure and both loops gave up if the first acquire failed, while the heartbeat kept advertising the instance — a target the CLI resolves and then cannot connect to. BridgeHost now clears listener readiness when an accept loop ends and runs ListenerWatchdogPolicy (Unity-free, unit-tested) each editor tick: skip while a bind is in flight or the editor is compiling/updating, rebind in place up to 5× at 5 s, re-publish registry + token sidecar on recovery, and unregister the instance once the attempts are spent.

#176 — agent value coercion. ApplyToken re-parses a string token when the target cannot hold a raw string and the trimmed text opens { or [. Vector-family readers also accept a flat numeric array, which is what lets "[1,2,3]" actually reach a Vector3.

#173 (half) — auto-tick. Deferred flows subscribe their poll through EditorTickPump.Add/Remove instead of EditorApplication.update; the pump forces EditorApplication.SignalTick while any is subscribed and disarms when the set empties. The explicit editor auto-tick wire command and its protocol bump are not in this PR, so the wire protocol is untouched.

Measurements

Auto-tick, Unity 6000.3.10f1 / macOS GUI, 60 EditorApplication.update ticks via profile stats --frames 60:

	pump off	pump on
focused	9.3–9.5 s	6.0–6.1 s
unfocused	9.4–10.4 s	6.0–6.1 s

Two things worth flagging against the issue's premise:

• The unfocused-vs-focused gap did not reproduce on this version — the editor idles at ~6 ticks/s either way. So "unfocused ≈ focused" is satisfied, but only because they were already equal; the real win is a uniform ~1.55× (≈160 ms → ≈100 ms per tick).
• ~100 ms per tick is a floor I could not get under. Signalling from the update hook, from a 16 ms off-thread timer, Application.runInBackground = true, and InteractionMode = NoThrottling all land on exactly 100 ms. Interval 0 and 16 measure identically, so the default keeps the 16 ms throttle to cap the forced rate where the loop can run faster.

Verification

dotnet test: 1032 passed. Doc-gen --check and check-unity-meta.sh clean.

Live, against a Unity 6000.3.10f1 GUI editor with a file: reference to this package:

• fix(bridge): auth token 비교를 상수 시간 비교로 교체 #175 — raw-socket probe over the Unix socket: valid token succeeds; empty, first-char, last-char, longer, prefix-only and case-flipped all return UNAUTHORIZED; valid succeeds again.
• fix(bridge): 리스너 사망 시 복구 없음 — watchdog 재바인딩 추가 (좀비 인스턴스 방지) #174 — disposed the live listener socket through reflection under a running editor. Console: listener가 죽어 재바인딩을 시도합니다 (1/5). then 재바인딩 완료; subsequent commands succeed and the registry entry stays intact.
• feat(bridge): 문자열로 인코딩된 JSON 파라미터 재파싱 (agent coercion) #176 — prefab patch set-component-values on a BoxCollider: "[1,2,3]", "{\"x\":4,...}", [7,8,9] and {"x":10,...} all land. Malformed "[1,2," still returns the original PREFAB_FIELD_INVALID: object 값이 필요합니다; wrong arity reports it; primitives unchanged.
• feat(bridge): auto-tick — unfocused 에디터에서 SignalTick 강제 틱으로 백그라운드 지연 제거 #173 — package list, test list, profile memory, profile stats all still complete, and the pump reports IsPumping=False SubscriberCount=0 once they finish.

Not covered

A whole values blob sent as one quoted string ("values": "{\"m_Mass\":0.17}") is still rejected — the coercion is per-field. The JObject-typed spec models would have to become JToken first; happy to follow up if that shape shows up in practice.

🤖 Generated with Claude Code