@linzumi/cli 1.0.88 → 1.0.90

package/README.md

@@ -58,7 +58,7 @@ Install the CLI or run it with `npx`:
 ```bash
 npm install -g @linzumi/cli@latest
 npx -y @linzumi/cli@latest signup
-npx -y @linzumi/cli@1.0.88 --version
+npx -y @linzumi/cli@1.0.90 --version
 linzumi --version
 ```
 

package/dist/index.js

@@ -1470,7 +1470,7 @@ To kick the agent off:
 `,L=Buffer.byteLength(P,"utf8");if(L>s)return l("runner_diagnostics.spool_entry_dropped",{reason:"entry_too_large",entry_bytes:L,max_entry_bytes:s}),!1;lve(n,{recursive:!0}),m(u)+L>i&&f(),_(L);let M=b()?`
 `:"";return dve(u,`${M}${P}`,"utf8"),!0}catch(R){return l("runner_diagnostics.spool_failed",{error:R instanceof Error?R.message:String(R)}),!1}},w=k=>{let R=[],P=fve(k,"utf8");for(let L of P.split(`
 `))if(L.trim()!=="")try{let M=JSON.parse(L);M!==null&&typeof M=="object"&&R.push({parsed:M,raw:L})}catch{}return R};return{append:S,drain:async k=>{if(c)return{uploadedBatches:0,uploadedEntries:0,remainingBatches:p().length,skipped:!0};c=!0;let R=0,P=0;try{f(),_(0);let L=a()-o;for(let M of p()){let j;try{j=w(M)}catch(Q){l("runner_diagnostics.spool_batch_unreadable",{file:M,error:Q instanceof Error?Q.message:String(Q)}),y(M,"unreadable");continue}let F=j.filter(Q=>{let he=Eve(Q.parsed);return he===void 0||he>=L});if(F.length===0){y(M,"empty_or_expired");continue}let A=DT(M,".jsonl"),B=F.map(Q=>Q.raw).join(`
-`),K=F.map(Q=>Q.parsed.spooled_at).filter(Q=>typeof Q=="string"),G={bundle_name:"runner-diagnostics-spool",exported_at:new Date(a()).toISOString(),idempotency_key:A,diagnostics:{kind:"runner_diagnostic_log",spool_batch:!0,idempotency_key:A,entry_count:F.length,...K.length===0?{}:{first_spooled_at:K[0],last_spooled_at:K[K.length-1]}},telemetry_ndjson:B};try{await k(G)}catch(Q){l("runner_diagnostics.spool_upload_failed",{file:M,remaining_batches:p().length,error:Q instanceof Error?Q.message:String(Q)});break}R+=1,P+=F.length;try{PU(M)}catch(Q){l("runner_diagnostics.spool_delete_failed",{file:M,error:Q instanceof Error?Q.message:String(Q)})}}}catch(L){l("runner_diagnostics.spool_drain_failed",{error:L instanceof Error?L.message:String(L)})}finally{c=!1}return{uploadedBatches:R,uploadedEntries:P,remainingBatches:p().length,skipped:!1}},pendingBatchFiles:p}}var _ve,bve,wve,vve,Sve,IU,Cve,Tve,EU=z(()=>{"use strict";$y();_ve=32*1024*1024,bve=10080*60*1e3,wve=4*1024*1024,vve=1024*1024,Sve="spool.jsonl",IU=/^batch-(\d{1,16})-[0-9a-f-]+\.jsonl$/;Cve=/\b([A-Z][A-Z0-9_]{1,})=("[^"\n]*"|'[^'\n]*'|[^\s"'`;,)\]}]+)/g,Tve=/(?:\/(?:[A-Za-z0-9._@~+-]|%[0-9A-Fa-f]{2})+){2,}/g});var jt,AT,Ws=z(()=>{"use strict";jt="1.0.88",AT=`linzumi ${jt}`});import{closeSync as MU,existsSync as $T,mkdirSync as Dve,openSync as AU,readFileSync as OU,renameSync as Mve,unlinkSync as cd,writeFileSync as Ave,writeSync as $U}from"node:fs";import{dirname as jU,join as Ove}from"node:path";function jT(e){return e instanceof us||e instanceof Error&&e.name===zU&&"lockPath"in e&&"heldBy"in e}function LT(e,n=Kn(),t){let r=t===void 0?encodeURIComponent(e):rd(t);return Ove(jU(n),"runners",`${r}.lock`)}function Kx(e){let n=LT(e.machineId,e.configPath,e.linzumiUrl),t=e.isPidAlive??KU,r=e.now??(()=>new Date),o=e.killPid??Wve,i=r().toISOString(),s={version:1,machineId:e.machineId,runnerId:e.runnerId,pid:e.pid??process.pid,cwd:e.cwd,workspace:e.workspace,...e.linzumiUrl===void 0?{}:{linzumiUrl:zn(e.linzumiUrl)},...e.launchSource===void 0?{}:{launchSource:e.launchSource},startedAt:i,heartbeatAt:i,cliVersion:e.cliVersion??jt,...e.gracefulUpdateDrain===!0?{gracefulUpdateDrain:!0}:{}};zve(e.machineId,e.configPath,e.linzumiUrl,t,r,o,e.onTakeover),qve(n,s,t,r,o,e.onTakeover,e.beforeReadExistingLock,e.beforeReplaceStaleLock);let a=()=>qU(n,s,r),d=setInterval(a,LU);return d.unref(),{path:n,record:s,heartbeat:a,release:()=>{clearInterval(d),BU(n,s)}}}function qU(e,n,t){try{let r=Wx(e);if(r===void 0||r.machineId!==n.machineId||r.runnerId!==n.runnerId||r.pid!==n.pid||r.startedAt!==n.startedAt)return;let o={...r,heartbeatAt:t().toISOString()},i=`${e}.tmp`;Ave(i,`${JSON.stringify(o,null,2)}
+`),K=F.map(Q=>Q.parsed.spooled_at).filter(Q=>typeof Q=="string"),G={bundle_name:"runner-diagnostics-spool",exported_at:new Date(a()).toISOString(),idempotency_key:A,diagnostics:{kind:"runner_diagnostic_log",spool_batch:!0,idempotency_key:A,entry_count:F.length,...K.length===0?{}:{first_spooled_at:K[0],last_spooled_at:K[K.length-1]}},telemetry_ndjson:B};try{await k(G)}catch(Q){l("runner_diagnostics.spool_upload_failed",{file:M,remaining_batches:p().length,error:Q instanceof Error?Q.message:String(Q)});break}R+=1,P+=F.length;try{PU(M)}catch(Q){l("runner_diagnostics.spool_delete_failed",{file:M,error:Q instanceof Error?Q.message:String(Q)})}}}catch(L){l("runner_diagnostics.spool_drain_failed",{error:L instanceof Error?L.message:String(L)})}finally{c=!1}return{uploadedBatches:R,uploadedEntries:P,remainingBatches:p().length,skipped:!1}},pendingBatchFiles:p}}var _ve,bve,wve,vve,Sve,IU,Cve,Tve,EU=z(()=>{"use strict";$y();_ve=32*1024*1024,bve=10080*60*1e3,wve=4*1024*1024,vve=1024*1024,Sve="spool.jsonl",IU=/^batch-(\d{1,16})-[0-9a-f-]+\.jsonl$/;Cve=/\b([A-Z][A-Z0-9_]{1,})=("[^"\n]*"|'[^'\n]*'|[^\s"'`;,)\]}]+)/g,Tve=/(?:\/(?:[A-Za-z0-9._@~+-]|%[0-9A-Fa-f]{2})+){2,}/g});var jt,AT,Ws=z(()=>{"use strict";jt="1.0.90",AT=`linzumi ${jt}`});import{closeSync as MU,existsSync as $T,mkdirSync as Dve,openSync as AU,readFileSync as OU,renameSync as Mve,unlinkSync as cd,writeFileSync as Ave,writeSync as $U}from"node:fs";import{dirname as jU,join as Ove}from"node:path";function jT(e){return e instanceof us||e instanceof Error&&e.name===zU&&"lockPath"in e&&"heldBy"in e}function LT(e,n=Kn(),t){let r=t===void 0?encodeURIComponent(e):rd(t);return Ove(jU(n),"runners",`${r}.lock`)}function Kx(e){let n=LT(e.machineId,e.configPath,e.linzumiUrl),t=e.isPidAlive??KU,r=e.now??(()=>new Date),o=e.killPid??Wve,i=r().toISOString(),s={version:1,machineId:e.machineId,runnerId:e.runnerId,pid:e.pid??process.pid,cwd:e.cwd,workspace:e.workspace,...e.linzumiUrl===void 0?{}:{linzumiUrl:zn(e.linzumiUrl)},...e.launchSource===void 0?{}:{launchSource:e.launchSource},startedAt:i,heartbeatAt:i,cliVersion:e.cliVersion??jt,...e.gracefulUpdateDrain===!0?{gracefulUpdateDrain:!0}:{}};zve(e.machineId,e.configPath,e.linzumiUrl,t,r,o,e.onTakeover),qve(n,s,t,r,o,e.onTakeover,e.beforeReadExistingLock,e.beforeReplaceStaleLock);let a=()=>qU(n,s,r),d=setInterval(a,LU);return d.unref(),{path:n,record:s,heartbeat:a,release:()=>{clearInterval(d),BU(n,s)}}}function qU(e,n,t){try{let r=Wx(e);if(r===void 0||r.machineId!==n.machineId||r.runnerId!==n.runnerId||r.pid!==n.pid||r.startedAt!==n.startedAt)return;let o={...r,heartbeatAt:t().toISOString()},i=`${e}.tmp`;Ave(i,`${JSON.stringify(o,null,2)}
 `,"utf8"),Mve(i,e)}catch{}}function ld(e,n,t){if(!n(e.pid))return{state:"dead"};let r=e.heartbeatAt??e.startedAt,o=Date.parse(r);return Number.isNaN(o)||t().getTime()-o>$ve?{state:"wedged",reason:e.heartbeatAt===void 0?"missing_heartbeat":"stale_heartbeat"}:{state:"live"}}function NU(e,n,t,r){return t!==Vx||e.launchSource!==Vx?!1:r.state!=="live"?!0:jve(n,e.cliVersion)>0}function jve(e,n){let t=DU(e),r=DU(n);for(let o=0;o<3;o++){let i=t.core[o],s=r.core[o];if(i===void 0||s===void 0)throw new Error(`compareCliVersions: unexpected undefined at core index ${o}`);if(i!==s)return i>s?1:-1}return t.prerelease.length===0&&r.prerelease.length===0?0:t.prerelease.length===0?1:r.prerelease.length===0?-1:Lve(t.prerelease,r.prerelease)}function DU(e){let n=e.trim().replace(/^v/i,"").split("+",1)[0]??"",t=n.indexOf("-"),r=t===-1?n:n.slice(0,t),o=t===-1?"":n.slice(t+1),i=r.split("."),s=[OT(i[0]),OT(i[1]),OT(i[2])],a=o===""?[]:o.split(".").filter(d=>d!=="");return{core:s,prerelease:a}}function OT(e){let n=Number.parseInt(e??"",10);return Number.isInteger(n)&&n>=0?n:0}function Lve(e,n){let t=Math.max(e.length,n.length);for(let r=0;r<t;r++){let o=e[r],i=n[r];if(o===void 0)return-1;if(i===void 0)return 1;let s=Number.parseInt(o,10),a=Number.parseInt(i,10),d=s.toString()===o,u=a.toString()===i;if(d&&u){if(s!==a)return s>a?1:-1}else{if(d!==u)return d?-1:1;if(o!==i)return o>i?1:-1}}return 0}function FU(e,n,t,r,o){try{r(n.pid)}catch(i){let s=i!==null&&typeof i=="object"&&"code"in i?i.code:void 0;if(s!=="ESRCH")throw s==="EPERM"||s==="EACCES"?new Error(`Cannot take over the runner lock at ${e}: its holder process (pid ${n.pid}) is owned by another user and cannot be stopped. Stop that process, or remove the lock file, then retry.`):i}o?.({lockPath:e,holderPid:n.pid,holderRunnerId:n.runnerId,reason:t})}function zve(e,n,t,r,o,i,s){if(t===void 0||gr(t)!==gr(Ut))return;let a=LT(e,n),d=Wx(a);if(d!==void 0){if(ld(d,r,o).state==="live")throw new us(a,d);UU(a,r,()=>{let u=$T(a)?zT(a):void 0;if(u===void 0)return;let c=ld(u,r,o);if(c.state==="live")throw new us(a,u);c.state==="wedged"&&FU(a,u,c.reason,i,s),cd(a)})}}function qve(e,n,t,r,o,i,s,a){if(Jx(e,n))return;s?.();let d=Wx(e);if(d===void 0){if(Jx(e,n))return;throw new Error(`another Linzumi runner lock appeared while starting: ${e}`)}if(ld(d,t,r).state==="live")throw new us(e,d);a?.(),UU(e,t,()=>{let u=$T(e)?zT(e):void 0;if(u!==void 0){let c=ld(u,t,r);if(c.state==="live")throw new us(e,u);c.state==="wedged"&&FU(e,u,c.reason,o,i),cd(e)}if(!Jx(e,n))throw new Error(`another Linzumi runner lock appeared while starting: ${e}`)})}function Jx(e,n){Dve(jU(e),{recursive:!0});try{let t=AU(e,"wx");try{$U(t,`${JSON.stringify(n,null,2)}
 `)}finally{MU(t)}return!0}catch(t){if(Dc(t,"EEXIST"))return!1;throw t}}function UU(e,n,t){let r=`${e}.replace`;for(;;)try{let o=AU(r,"wx");try{$U(o,`${process.pid}
 `),t()}finally{MU(o),cd(r)}return}catch(o){if(Dc(o,"EEXIST")){let i=Nve(r);if(i===void 0)continue;if(n(i))throw new Error(["another Linzumi runner is already replacing a stale runner lock",`lock: ${e}`,"Wait for that startup to finish, then retry."].join(`
@@ -1709,7 +1709,7 @@ Subcommands:
 `),0):(process.stderr.write(`${i.error}
 `),1)}default:return process.stderr.write(`Unknown dev-services subcommand: ${n}
 
-${Tee()}`),2}}var Eee=z(()=>{"use strict";Jp()});var Mee,Dee=z(()=>{Mee={note:"Single source of truth for the linzumi CLI's compute-node GraphQL documents (compute-nodes program M1.5/M1.8). Consumed by BOTH computeNodeCli.ts (the CLI sends documentId + operationName + variables; text is the free-form fallback for servers with persisted-document enforcement disabled) AND kandan/server_v2/web/scripts/generate_persisted_documents.mjs (which registers these in the server's persisted-document manifest - prod enforces persisted documents on /api/v2/graphql, so unregistered documents are FREE_FORM_GRAPHQL_FORBIDDEN there). documentId = base64url(first 8 bytes of sha256(text)) - the generator recomputes it and hard-errors on drift; test/computeNodeCli.test.ts pins it CLI-side.",documents:[{operationName:"ComputeNodeCliList",operationKind:"query",documentId:"ACIiSxoZstI",text:`query ComputeNodeCliList($after: String) {
+${Tee()}`),2}}var Eee=z(()=>{"use strict";Jp()});var Mee,Dee=z(()=>{Mee={note:"Single source of truth for the linzumi CLI's compute-node GraphQL documents (compute-nodes program M1.5/M1.8). Consumed by computeNodeCli.ts (the CLI sends documentId + operationName + variables; text is the free-form fallback for servers with persisted-document enforcement disabled), by scripts/compute-node-reset-e2e.mjs (the ComputeNodeCliRenamePropagation subscription backing the P5 rename-propagation leg), AND by kandan/server_v2/web/scripts/generate_persisted_documents.mjs (which registers these in the server's persisted-document manifest - prod enforces persisted documents on /api/v2/graphql and on the __absinthe__ socket doc path, so unregistered documents are FREE_FORM_GRAPHQL_FORBIDDEN there). documentId = base64url(first 8 bytes of sha256(text)) - the generator recomputes it and hard-errors on drift; test/computeNodeCli.test.ts pins it CLI-side.",documents:[{operationName:"ComputeNodeCliList",operationKind:"query",documentId:"ACIiSxoZstI",text:`query ComputeNodeCliList($after: String) {
   viewer {
     computeNodes(first: 100, after: $after) {
       edges {
@@ -1742,6 +1742,12 @@ ${Tee()}`),2}}var Eee=z(()=>{"use strict";Jp()});var Mee,Dee=z(()=>{Mee={note:"S
     ... on ComputeNodeNotOwnerError { message nodeId }
     ... on ComputeNodeInvalidNameError { message }
   }
+}`},{operationName:"ComputeNodeCliRenamePropagation",operationKind:"subscription",documentId:"tHnTnXwp5Nc",text:`subscription ComputeNodeCliRenamePropagation {
+  viewerComputeNodesUpdated {
+    id
+    name
+    resetGeneration
+  }
 }`}]}});var Jee={};Jo(Jee,{buildRenameInput:()=>Fee,buildResetInput:()=>Nee,nodeHelpText:()=>Lee,parseNodeArgs:()=>zee,persistedDocumentId:()=>o9e,resolveTargetNode:()=>_A,runNodeCommand:()=>g9e,validateNodeName:()=>qee});import{createHash as t9e}from"node:crypto";import{hostname as $ee}from"node:os";import{createInterface as r9e}from"node:readline";function o9e(e){return t9e("sha256").update(e,"utf8").digest().subarray(0,8).toString("base64url")}function jee(e){let n=Mee.documents.find(t=>t.operationName===e);if(n===void 0)throw new Error(`unknown compute-node CLI document: ${e}`);return n}function Lee(){return`Usage: linzumi node <subcommand> [options]
 
 Manage this account's compute nodes (one node per (machine, OS user)).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linzumi/cli",
-  "version": "1.0.88",
+  "version": "1.0.90",
   "description": "Linzumi CLI \u2014 point a Codex agent at the real code on your laptop, with your team watching and steering from shared threads.",
   "type": "module",
   "bin": {

package/scripts/compute-node-reset-e2e.mjs

@@ -14,6 +14,16 @@
 //                  so there is nothing local whose loss could fork identity).
 //   P4 rename:     `linzumi node rename` renames the node and the list
 //                  read-back shows the new name (M1.8).
+//   P5 propagation: M1.8's leg of the plan's "Rename propagation test": with
+//                  a live viewerComputeNodesUpdated subscription open (the
+//                  same subscription class an open web client holds), a
+//                  CLI-issued rename is DELIVERED as a push frame carrying
+//                  the new name - no reload, no re-poll; the assertion
+//                  consumes only what the socket pushes. Subscribes with the
+//                  persisted ComputeNodeCliRenamePropagation document first
+//                  (the only shape an enforcing server accepts on the
+//                  __absinthe__ doc path), free-form fallback when the
+//                  server's manifest predates it (dev default posture).
 //
 // REQUIREMENTS: a server running M1.1 (join adoption) + M1.3 (the
 // executeComputeNodeCommand mutation) - D29 gates the CLI merge on M1.3
@@ -29,15 +39,35 @@
 // The script never touches the real ~/.linzumi: all CLI state is scoped into
 // a temp dir via LINZUMI_CONFIG_FILE, and the "config wipe" leg wipes THAT.
 import { spawn, spawnSync } from 'node:child_process';
-import { mkdtempSync, rmSync } from 'node:fs';
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import WebSocket from 'ws';
 
 const here = dirname(fileURLToPath(import.meta.url));
 const pkgRoot = dirname(here);
 const cliBin = join(pkgRoot, 'bin', 'linzumi.js');
 
+// The subscription document for the P5 propagation leg - same single-source
+// JSON the CLI transport and the server manifest generator consume, so an
+// enforcing server (prod posture) accepts it by documentId.
+const renamePropagationDocument = JSON.parse(
+  readFileSync(
+    join(pkgRoot, 'src', 'computeNodePersistedDocuments.json'),
+    'utf8'
+  )
+).documents.find(
+  (document) => document.operationName === 'ComputeNodeCliRenamePropagation'
+);
+if (renamePropagationDocument === undefined) {
+  // Loud at module load: without this, a renamed/removed document in the JSON
+  // surfaces as an opaque TypeError deep inside subscribe().
+  throw new Error(
+    'ComputeNodeCliRenamePropagation not found in src/computeNodePersistedDocuments.json - the P5 leg needs it (test/computeNodeCli.test.ts pins it)'
+  );
+}
+
 const serverUrl = process.env.LINZUMI_E2E_URL ?? 'ws://127.0.0.1:4000';
 const token = process.env.LINZUMI_E2E_TOKEN;
 // Extra args appended to `linzumi connect` (space-separated), e.g.
@@ -77,6 +107,188 @@ function runCli(args, options = {}) {
   };
 }
 
+// Async variant for legs that must keep the event loop live while the CLI
+// runs (P5 holds an open websocket whose frames a spawnSync would starve).
+function runCliAsync(args, options = {}) {
+  return new Promise((resolve, reject) => {
+    const child = spawn('node', [cliBin, ...args], {
+      env: cliEnv(),
+      stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    let stdout = '';
+    let stderr = '';
+    child.stdout.on('data', (chunk) => (stdout += chunk));
+    child.stderr.on('data', (chunk) => (stderr += chunk));
+    const timer = setTimeout(() => {
+      child.kill('SIGKILL');
+      reject(new Error(`CLI timed out: linzumi ${args.join(' ')}`));
+    }, options.timeoutMs ?? 60_000);
+    child.on('error', (error) => {
+      clearTimeout(timer);
+      reject(error);
+    });
+    child.on('close', (code) => {
+      clearTimeout(timer);
+      resolve({ code, stdout, stderr });
+    });
+  });
+}
+
+// A minimal Phoenix-v2 GraphQL subscription client, standing in for the open
+// web client of the plan's Rename propagation test: connect /socket, join
+// __absinthe__:control, push the subscription "doc" (documentId first;
+// free-form fallback when the server's persisted-document store predates it),
+// then surface every subscription:data frame. No polling anywhere.
+function openRenamePropagationSubscription() {
+  const socketUrl = new URL(
+    serverUrl.replace(/^http/, 'ws').replace(/\/$/, '') + '/socket/websocket'
+  );
+  socketUrl.searchParams.set('vsn', '2.0.0');
+  socketUrl.searchParams.set('token', token);
+
+  const ws = new WebSocket(socketUrl.toString());
+  const controlTopic = '__absinthe__:control';
+  const pending = new Map(); // ref -> {resolve, reject}
+  const dataListeners = new Set();
+  // Cancel hooks for in-flight waitForNodeFrame waits, so close() can clear
+  // their timers/listeners on error paths (never an orphaned 20s timeout).
+  const activeWaitCancels = new Set();
+  let nextRef = 0;
+
+  function push(event, payload) {
+    const ref = String((nextRef += 1));
+    // Phoenix v2 JSON frames: [join_ref, ref, topic, event, payload]; the
+    // control topic's join_ref is the join push's own ref ("1").
+    ws.send(JSON.stringify(['1', ref, controlTopic, event, payload]));
+    return new Promise((resolve, reject) => {
+      pending.set(ref, { resolve, reject });
+      setTimeout(() => {
+        if (pending.delete(ref)) {
+          reject(new Error(`no phx_reply for ${event} within 15s`));
+        }
+      }, 15_000);
+    });
+  }
+
+  ws.on('message', (raw) => {
+    let frame;
+    try {
+      frame = JSON.parse(String(raw));
+    } catch {
+      return;
+    }
+    const [, ref, topic, event, payload] = frame;
+    if (event === 'phx_reply' && pending.has(ref)) {
+      const waiter = pending.get(ref);
+      pending.delete(ref);
+      waiter.resolve(payload);
+      return;
+    }
+    if (event === 'subscription:data') {
+      for (const listener of dataListeners) {
+        listener(topic, payload);
+      }
+    }
+  });
+
+  const opened = new Promise((resolve, reject) => {
+    ws.on('open', resolve);
+    ws.on('error', reject);
+  });
+
+  return {
+    async subscribe() {
+      await opened;
+      const joinReply = await push('phx_join', {});
+      if (joinReply?.status !== 'ok') {
+        throw new Error(
+          `__absinthe__:control join failed: ${JSON.stringify(joinReply)}`
+        );
+      }
+
+      // Persisted documentId first (the only shape an enforcing server
+      // accepts); free-form fallback mirrors the CLI's HTTP transport.
+      let docReply = await push('doc', {
+        documentId: renamePropagationDocument.documentId,
+        operationName: renamePropagationDocument.operationName,
+      });
+      const replyCodes = (docReply?.response?.errors ?? [])
+        .map((error) => error?.extensions?.code)
+        .filter((code) => typeof code === 'string');
+      if (
+        docReply?.status !== 'ok' &&
+        replyCodes.includes('PERSISTED_DOCUMENT_NOT_FOUND')
+      ) {
+        docReply = await push('doc', { query: renamePropagationDocument.text });
+      }
+      if (
+        docReply?.status !== 'ok' ||
+        typeof docReply?.response?.subscriptionId !== 'string'
+      ) {
+        throw new Error(
+          `viewerComputeNodesUpdated subscribe failed: ${JSON.stringify(docReply)}`
+        );
+      }
+      return docReply.response.subscriptionId;
+    },
+    // Resolves with the first PUSHED viewerComputeNodesUpdated frame matching
+    // `predicate`; other frames on the topic (e.g. adoption events) are
+    // skipped, never treated as failures. The returned promise is
+    // pre-guarded against unhandled rejection (a P5 error path abandons it
+    // before awaiting) and close() cancels its timer + listener so a failed
+    // run never leaves a live timeout keeping the process alive.
+    waitForNodeFrame(subscriptionId, predicate, timeoutMs = 20_000) {
+      const framePromise = new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+          cancel(
+            new Error(
+              `no matching viewerComputeNodesUpdated push within ${timeoutMs}ms`
+            )
+          );
+        }, timeoutMs);
+        const listener = (topic, payload) => {
+          if (
+            topic !== subscriptionId &&
+            payload?.subscriptionId !== subscriptionId
+          ) {
+            return;
+          }
+          const node = payload?.result?.data?.viewerComputeNodesUpdated;
+          if (node !== undefined && predicate(node)) {
+            clearTimeout(timer);
+            dataListeners.delete(listener);
+            activeWaitCancels.delete(cancel);
+            resolve(node);
+          }
+        };
+        const cancel = (error) => {
+          clearTimeout(timer);
+          dataListeners.delete(listener);
+          activeWaitCancels.delete(cancel);
+          reject(error);
+        };
+        activeWaitCancels.add(cancel);
+        dataListeners.add(listener);
+      });
+      // An error before the await abandons this promise; the guard keeps the
+      // eventual timeout/cancel rejection from becoming an unhandled
+      // rejection (Node exits non-zero on those before cleanup finishes).
+      framePromise.catch(() => {});
+      return framePromise;
+    },
+    close() {
+      for (const cancel of [...activeWaitCancels]) {
+        cancel(new Error('subscription closed'));
+      }
+      try {
+        ws.close();
+      } catch {
+        // Best-effort teardown only.
+      }
+    },
+  };
+}
+
 function nodeList() {
   const result = runCli([
     'node',
@@ -238,6 +450,53 @@ try {
     renamed?.name === newName,
     JSON.stringify(renamed)
   );
+
+  // P5: rename propagation (M1.8's contribution to the plan's Rename
+  // propagation test - program plan Definitions + M1 acceptance (b)). The
+  // subscription is opened BEFORE the rename runs and the assertion consumes
+  // only pushed frames: delivery without reload or re-poll.
+  const subscription = openRenamePropagationSubscription();
+  try {
+    const subscriptionId = await subscription.subscribe();
+    const propagatedName = `e2e propagated ${Date.now()}`;
+    const framePromise = subscription.waitForNodeFrame(
+      subscriptionId,
+      (node) => node.id === successor.id && node.name === propagatedName
+    );
+
+    const propagatedRename = await runCliAsync([
+      'node',
+      'rename',
+      propagatedName,
+      '--node',
+      successor.id,
+      '--linzumi-url',
+      serverUrl,
+      '--token',
+      token,
+    ]);
+    check(
+      'P5 rename exits 0',
+      propagatedRename.code === 0,
+      propagatedRename.stderr
+    );
+
+    const frame = await framePromise;
+    check(
+      'P5 subscription push delivered the renamed node (no re-poll)',
+      frame.id === successor.id && frame.name === propagatedName,
+      JSON.stringify(frame)
+    );
+    check(
+      'P5 pushed frame carries the successor generation',
+      frame.resetGeneration === successor.resetGeneration,
+      JSON.stringify(frame)
+    );
+  } catch (error) {
+    check('P5 rename propagation', false, error.message);
+  } finally {
+    subscription.close();
+  }
 } finally {
   rmSync(stateRoot, { recursive: true, force: true });
   rmSync(workDir, { recursive: true, force: true });