@north-light/cli 0.3.479 → 0.3.480

package/dist/clients/attach/render/crtr-output.d.ts

@@ -23,8 +23,8 @@ export declare function isCrtrHelpInvocation(command: unknown): boolean;
 /** Per-render preview state for a crtr bash invocation. Both fields are
  *  synchronous and structural: isHelp from the invocation's own argv (above),
  *  suppressOutput from the bundle-safe static registry (preview-registry.ts —
- *  a hand-maintained mirror of the leaf's own `help.preview.suppressOutput`,
- *  kept in sync by preview-registry-sync.test.ts). Neither needs an async
+ *  a hand-maintained mirror of the leaf's own `help.preview.suppressOutput`).
+ *  Neither needs an async
  *  cross-process command-tree lookup, so there is no cache/resolver/invalidate
  *  machinery here, and no path from the attach bundle into the command tree.
  *  Command-owned computed summaries (canvas read, doc lint, ...) are a

package/docs/ci-runner.md

@@ -10,7 +10,7 @@ On Linux crouter assumes it is the hosted guest (`src/core/layout.ts`): sockets
 - **Capabilities.** `--cap-add SYS_ADMIN --cap-add NET_ADMIN --security-opt seccomp=unconfined --security-opt apparmor=unconfined`: mount namespaces per test file and bubblewrap's namespaces.
 - **One `/run/crtr` per test file.** All test files would otherwise share `/run/crtr/api.sock`, `store.sock` and `nodes/`. `scripts/ci-test-files.mjs` runs each file under `unshare -m` with a tmpfs on `/run/crtr`, and its own `HOME`, `TMPDIR`, `CRTR_RUNTIME_HOME` and `CRTR_HOME`. A failing file is retried once and reported as flaky if the retry passes (as `scripts/test-retry.mjs` does on macOS).
 - **Running a list of files.** `ci-test-files.mjs <lane> --files <list>` (and `scripts/ci-linux-lane.sh <lane> <shard> --files <list>`) runs exactly the files in a text file of repo paths, one per line (seam: the `dist/…/*.test.js` path); the format is in the script header. A path that is not a test file of that lane exits 2.
-- **Flaky recording.** A file that fails and then passes on the rerun is written to `flaky.json`, which each `linux` and `macos` job uploads as artifact `flaky-<attempt>-<platform>-<lane>-<job index>`. `record-flaky-tests.yml` runs on every completed Test or Publish run (on main the suite is Publish's `tests` job) and `scripts/record-flaky-tests.mjs` files one `flaky-test` issue per lane, file and failing test, or comments on the existing one.
+- **Flaky recording.** A file that fails and then passes on the rerun is written to `flaky.json`, which each `linux` and `macos` job uploads as artifact `flaky-<attempt>-<platform>-<lane>-<job index>`. the `record` job of `test.yml` (so also Publish's `tests` job on main) runs after the lanes and only when a lane reported `flaky=true` (the job-level `if` skips it otherwise, so a run with no flake starts no runner), and `scripts/record-flaky-tests.mjs` files one `flaky-test` issue per lane, file and failing test, or comments on the existing one.
 - **No real launcher.** The root launcher starts `crtrd` on the real `/runtime` and flips code paths on its socket, so it cannot run in the test container. Tests that need it are tagged `laptopOnly` and run on macOS.
 
 ## The `laptopOnly` tag
@@ -90,6 +90,16 @@ Installing and upgrading: get a registration token (`gh api -X POST repos/Northl
 
 The OIDC constraint at the top of `publish.yml` is unchanged: every publishing job is still in that file.
 
+## Releases are batched
+
+A push to `main` does not release. `publish.yml`'s `plan` job (ubuntu, seconds, no checkout) decides, and `gate`, `tests` and every publish job run only when it answers `release=true`:
+
+- the `47 */2 * * *` schedule releases when `main` has commits the newest `vX.Y.Z` tag lacks; with none, the run is `plan` alone (no build, no tests, no publish);
+- a push to `main` releases at once when a merged pull request labelled `release-now` is among the commits the newest tag lacks;
+- `gh workflow run publish.yml --ref main -f release=true` applies the schedule's check on demand.
+
+The hourly `17 * * * *` schedule and the `promote`, `api_ref`, `env_docker_ref` and `release_tag` dispatches are unchanged and release nothing. Agent guidance: `.crouter/memory/crouter-development/release-batching.md`.
+
 ## What runs when (hosted-runner spend)
 
 | Event | ubuntu `checks` + `select` | ubuntu `linux` (container) | `macos` (laptop-only tests) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/cli",
-  "version": "0.3.479",
+  "version": "0.3.480",
   "description": "crtr — agent runtime with memory, plugins, and marketplaces",
   "type": "module",
   "main": "dist/index.js",
@@ -137,7 +137,7 @@
   },
   "license": "UNLICENSED",
   "dependencies": {
-    "@north-light/identity": "0.3.479",
+    "@north-light/identity": "0.3.480",
     "@earendil-works/pi-agent-core": "1.1.0",
     "@earendil-works/pi-ai": "1.1.0",
     "@earendil-works/pi-coding-agent": "1.1.0",

package/packages/crouter-identity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/identity",
-  "version": "0.3.479",
+  "version": "0.3.480",
   "description": "Northlight access-token verification and scope rules",
   "type": "module",
   "main": "./dist/index.js",

package/runtime.lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@north-light/cli",
-  "version": "0.3.479",
+  "version": "0.3.480",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@north-light/cli",
-      "version": "0.3.479",
+      "version": "0.3.480",
       "hasInstallScript": true,
       "license": "UNLICENSED",
       "workspaces": [
@@ -18,7 +18,7 @@
         "@earendil-works/pi-ai": "1.1.0",
         "@earendil-works/pi-coding-agent": "1.1.0",
         "@earendil-works/pi-tui": "1.1.0",
-        "@north-light/identity": "0.3.479",
+        "@north-light/identity": "0.3.480",
         "cron-parser": "^5.6.0",
         "esbuild": "^0.27.7",
         "jose": "^6.2.12",
@@ -12116,17 +12116,17 @@
     },
     "packages/crouter-api": {
       "name": "@north-light/api",
-      "version": "0.3.479",
+      "version": "0.3.480",
       "license": "UNLICENSED"
     },
     "packages/crouter-env-docker": {
       "name": "@north-light/env-docker",
-      "version": "0.3.479",
+      "version": "0.3.480",
       "license": "UNLICENSED"
     },
     "packages/crouter-identity": {
       "name": "@north-light/identity",
-      "version": "0.3.479",
+      "version": "0.3.480",
       "license": "UNLICENSED",
       "dependencies": {
         "jose": "^6.2.1"
@@ -12134,20 +12134,20 @@
     },
     "packages/crouter-plugin": {
       "name": "@north-light/plugin",
-      "version": "0.3.479",
+      "version": "0.3.480",
       "license": "UNLICENSED",
       "dependencies": {
-        "@north-light/api": "0.3.479",
-        "@north-light/identity": "0.3.479"
+        "@north-light/api": "0.3.480",
+        "@north-light/identity": "0.3.480"
       }
     },
     "packages/crouter-sdk": {
       "name": "@north-light/sdk",
-      "version": "0.3.479",
+      "version": "0.3.480",
       "license": "UNLICENSED",
       "dependencies": {
-        "@north-light/api": "0.3.479",
-        "@north-light/identity": "0.3.479",
+        "@north-light/api": "0.3.480",
+        "@north-light/identity": "0.3.480",
         "jose": "^6.2.1"
       },
       "bin": {