Read the whole bwrap info object before parsing the child pid

bwrap writes --info-fd JSON in several writes. A single os.read could
return only '{"child-pid": N' and fail with a JSON error, observed
reproducibly on railiance01 for the rebuilt owner runtime. Read until a
complete object or EOF within the existing 10 s bound; a truncated object
at EOF is still refused. 207 tests pass.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 272244@bnt-lap001
Assistant-Session: c8962fa7-b290-47df-865f-403ddb6c77e9

tests/test_bwrap.py

@@ -362,3 +362,52 @@ def test_runner_bounds_output_and_normalizes_timeout(tmp_path) -> None:
     assert result["stdout"] == "123"
     assert result["stderr"] == "abc"
     assert result["output_truncated"] is True
+
+
+class _FakeProc:
+    def __init__(self) -> None:
+        self.killed = False
+
+    def kill(self) -> None:
+        self.killed = True
+
+
+def test_read_child_pid_accepts_info_split_across_writes() -> None:
+    import os
+    import threading
+    import time
+
+    read_fd, write_fd = os.pipe()
+
+    def writer() -> None:
+        os.write(write_fd, b'{\n    "child-pid": 1234567')
+        time.sleep(0.05)
+        os.write(write_fd, b',\n    "cgroup-namespace": 4026531835\n}\n')
+        os.close(write_fd)
+
+    thread = threading.Thread(target=writer)
+    thread.start()
+    try:
+        proc = _FakeProc()
+        assert BwrapExtension._read_child_pid(proc, read_fd) == 1234567
+        assert not proc.killed
+    finally:
+        thread.join()
+        os.close(read_fd)
+
+
+def test_read_child_pid_refuses_truncated_info_at_eof() -> None:
+    import os
+
+    import pytest
+
+    read_fd, write_fd = os.pipe()
+    os.write(write_fd, b'{\n    "child-pid": 1234567')
+    os.close(write_fd)
+    proc = _FakeProc()
+    try:
+        with pytest.raises(RuntimeError, match="valid namespace child pid"):
+            BwrapExtension._read_child_pid(proc, read_fd)
+        assert proc.killed
+    finally:
+        os.close(read_fd)