[P1.9] Enforce `SubprocessAdapter` timeout while the external agent is producing output

[frankbria]

Severity: high | Category: correctness | Phase: P1.9

Problem

run() streams for line in process.stdout: (unbounded) before process.wait(timeout=...), so the 30-min timeout only bounds the window after stdout EOF. A hung external agent (claude/codex/opencode) that keeps stdout open blocks the run — and the batch worker — forever.

Evidence

codeframe/core/adapters/subprocess_adapter.py:124

Acceptance criteria

• A deadline wraps the read loop (reader thread + overall timer); on expiry the child is killed and a timeout failure returned.
• Test: a child that stalls with stdout open is terminated at the timeout.

Dependencies

None

---

_{Filed from the SaaS launch-readiness audit. Atomic: one developer, one session. Work order: strictly P0.1 → P3.12 (no forward dependencies).}

[coderabbitai]

🔗 Related PRs

#319 - feat(cli): add cf work follow for live execution streaming [merged]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!