@north-light/crouter 0.3.233 → 0.3.235

package/dist/migrations/corpus.js

@@ -17,6 +17,7 @@
 // so node target metadata comes from each node's durable meta.json — the source
 // of truth the database index is rebuilt from — through its existing read-only
 // helper. Missing or corrupt metadata remains a global blocker.
+import { envProfileId } from '../shared/env.js';
 import { readdirSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { readMetaObject } from '../core/canvas/meta-file.js';
@@ -79,7 +80,7 @@ function nodeStoresWithDocs() {
  *  so discovery must run after that lane, not against `listProfiles()`. */
 export async function discoverCorpus(opts) {
     const cwd = realpathOrSelf(opts.cwd ?? process.cwd());
-    const selectedProfileId = process.env['CRTR_PROFILE_ID'] || null;
+    const selectedProfileId = envProfileId() || null;
     const explicitDirs = opts.explicitDirs ?? [];
     const roots = [];
     const rootSeen = new Set();
@@ -336,9 +337,7 @@ export async function discoverCorpus(opts) {
         nodeMetadata,
     };
 }
-// ---------------------------------------------------------------------------
 // Snapshots
-// ---------------------------------------------------------------------------
 /** Read every discovered store's documents. `preloaded` supplies the per-store
  *  convergent lane's FOLDED snapshots so the corpus plans against the bytes a
  *  write run leaves behind — identical under `--dry-run`, where the same fold
@@ -387,9 +386,7 @@ export function buildCorpusSnapshot(discovery, snapshots) {
     }));
     return makeCorpusSnapshot(stores, discovery.targets, discovery.roots);
 }
-// ---------------------------------------------------------------------------
 // The runner
-// ---------------------------------------------------------------------------
 function cloneCorpus(corpus) {
     const stores = corpus.stores.map((store) => ({
         ...store,

package/dist/migrations/registry.js

@@ -1,5 +1,18 @@
-// The ordered state-migration registry — ONE list for both lanes, so a cut
-// that spans canvas-db and document stores ships as adjacent entries.
+// The ordered state-migration registry — the SECOND of this repo's three
+// migration homes, and the one for on-disk memory documents, profile
+// manifests, and the corpus lane, driven by `crtr sys migrate`. ONE list for
+// both non-journaled lanes here, so a cut that spans canvas-db and document
+// stores ships as adjacent entries (the journaled lane's entries splice into
+// `../core/canvas/migrations.ts`'s `MIGRATIONS` chain at its tail).
+//
+// The other two homes:
+//   - `../core/canvas/migrations.ts` — canvas.db's own versioned schema chain,
+//     gated by `PRAGMA user_version`. Steps there may freely read node meta,
+//     query other tables mid-step, and build shell commands from canvas data
+//     — exactly what this registry's import contract (below) forbids, which
+//     is why that chain is not expressed as registrants here.
+//   - `../daemon/boot-migrations.ts` — filesystem repairs that run
+//     unconditionally at every daemon boot, outside any version gate.
 //
 // Authoring contract (each migration is one file, `NNN-<desc>.ts`, or one
 // directory, `NNN-<desc>/index.ts`, appended here in order):

package/dist/pi-extensions/__tests__/canvas-stophook-agentend.test.js

@@ -221,7 +221,6 @@ test('queued continuation finishes before natural-stop routing commits', { timeo
     assert.equal(shutdown, true, 'settlement routes from the completed continuation');
     assert.equal(getNode('leaf')?.intent ?? null, null, 'the intermediate natural stop never idle-released the node');
 });
-// ---------------------------------------------------------------------------
 // §5.1 — the §1.7 settlement branch map on the focuses table. Every assertion is
 // on the canvas focuses/runtime rows after firing agent_settled (TMUX_PANE is
 // cleared in beforeEach). NOTE (broker-host cut): the placement read `focusOf`
@@ -232,7 +231,6 @@ test('queued continuation finishes before natural-stop routing commits', { timeo
 // but-not-yet-realized viewer, which liveOrPrune passes through). status='done'
 // is reached by setting the runtime row directly (the branch reads
 // getNode(nodeId).status).
-// ---------------------------------------------------------------------------
 test('§5.1.2 truly-done + focused → focus row CLOSED, own presence nulled (Q1)', async () => {
     // R carries a LOCATION so the close-path presence-null is observable.
     createNode(node('R', { parent: null, lifecycle: 'terminal', pane: '%r', tmux_session: 'Suser', window: '@wr' }));
@@ -323,10 +321,8 @@ test('refresh-yield (intent=refresh) writes NO push — silent to subscribers',
     assert.equal(readInboxSince('root').length, 0, 'a yield is silent: NO inbox pointer');
     assert.equal(pi.injected.length, 0, 'no reprompt on a refresh-yield');
 });
-// ---------------------------------------------------------------------------
 // turn_end — stale-⚠ fix: reaching turn_end proves the current provider
 // round-trip and any wedge episode are both over, so both fault links clear.
-// ---------------------------------------------------------------------------
 /** A turn_end event carrying one assistant text block. */
 function turnEndEvent(text) {
     return { message: { role: 'assistant', content: [{ type: 'text', text }] } };

package/dist/pi-extensions/broker-local.js

@@ -3,6 +3,7 @@
 // These helpers are intentionally independent of the canvas state store. A
 // broker may read its own context files directly, but all node metadata reads
 // and generated-name writes go through crtrd's broker operation projection.
+import { envHomeOverride } from '../shared/env.js';
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
@@ -14,7 +15,7 @@ function contextDir(nodeId) {
     if (nodeId === '' || nodeId === '.' || nodeId === '..' || /[\\/\0]/u.test(nodeId)) {
         throw new TypeError('node_id must be a non-empty path segment');
     }
-    const canvasHome = process.env['CRTR_HOME']?.trim() || join(homedir(), CRTR_DIR_NAME, 'canvas');
+    const canvasHome = envHomeOverride()?.trim() || join(homedir(), CRTR_DIR_NAME, 'canvas');
     return join(canvasHome, 'nodes', nodeId, 'context');
 }
 /** Persist a bare root's first real interactive message without clobbering an

package/dist/pi-extensions/canvas-bash-valve.js

@@ -24,30 +24,24 @@
 // Deviation from upstream: this backend pins `bash` as the shell (upstream
 // consults user shell config via non-exported helpers). Acceptable — crtr's
 // agents are bash-contract anyway.
+import { envBashValveMs, envNodeId } from '../shared/env.js';
 import { spawn } from 'node:child_process';
 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readSync, rmSync, statSync, writeFileSync, } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname } from 'node:path';
+import { performance } from 'node:perf_hooks';
 import { backgroundBashJob, bashJobPaths, formatBashElapsed, newBashJobId, normalizeBashJobPurpose } from '../core/bash-jobs.js';
 import { readConfig } from '../core/config.js';
 import { PREVIEW_RESULT_PATH_ENV, previewResultPath } from '../core/preview-result-path.js';
 import { resolveAdmittedHostCommand } from '../core/runtime/spawn-env.js';
 import { Type } from 'typebox';
 import { createBashToolDefinition } from '@earendil-works/pi-coding-agent';
-// ---------------------------------------------------------------------------
 // Deadline — 5 minutes by default, overridable via CRTR_BASH_VALVE_MS
 // (undocumented; test-only seam so the E2E valve check doesn't sleep 5m).
-// ---------------------------------------------------------------------------
-const DEFAULT_VALVE_MS = 5 * 60 * 1000;
 const POLL_MS = 200;
 function resolveValveMs() {
-    const raw = process.env['CRTR_BASH_VALVE_MS'];
-    if (raw === undefined)
-        return DEFAULT_VALVE_MS;
-    const n = Number(raw);
-    return Number.isFinite(n) && n > 0 ? n : DEFAULT_VALVE_MS;
+    return envBashValveMs();
 }
-// ---------------------------------------------------------------------------
 // The detached supervisor. Spawned with `detached: true` so it becomes its
 // own process-group leader (pgid === its pid) — killing `-pgid` reaches the
 // real command and anything it forked, even after this pi process exits.
@@ -59,7 +53,6 @@ function resolveValveMs() {
 //
 // `--` before the paths is a dummy $0 (a standard `bash -c script -- args`
 // idiom) so the real payload lands at $1 onward.
-// ---------------------------------------------------------------------------
 // The elapsed rendering mirrors formatBashElapsed() in core/bash-jobs.ts
 // (`12s` / `3m 40s` / `1h 04m`) so the completion message reads the same as the
 // handoff notice; it measures TOTAL runtime, foreground portion included.
@@ -166,12 +159,10 @@ function readExitCode(path) {
         return null;
     }
 }
-// ---------------------------------------------------------------------------
 // Long-sleep guard. A command that opens with `sleep <long>` is a node burning
 // a live window to wait on a clock — the runtime already has waiting primitives
 // that cost nothing (`crtr cron` for a scheduled wake, `crtr node wait deadline`
 // for an inbox-vs-deadline race). Anything over 10s is refused before it runs.
-// ---------------------------------------------------------------------------
 const MAX_INLINE_SLEEP_SECONDS = 10;
 const SLEEP_UNIT_SECONDS = { s: 1, m: 60, h: 3600, d: 86400 };
 /** Seconds a leading `sleep ...` will block for, or null when the command does
@@ -247,7 +238,7 @@ export function createValveOperations(nodeId, contextDir, takePurpose = () => nu
                 let offset = 0;
                 let settled = false;
                 let pgid;
-                const startedAt = Date.now();
+                const startedAt = performance.now();
                 const valveMs = resolveValveMs();
                 let interval;
                 const teardown = () => {
@@ -265,7 +256,7 @@ export function createValveOperations(nodeId, contextDir, takePurpose = () => nu
                     act();
                 };
                 function finishBackground(auto = false) {
-                    const elapsed = formatBashElapsed(Date.now() - startedAt);
+                    const elapsed = formatBashElapsed(performance.now() - startedAt);
                     const notice = `\n[backgrounded as job ${paths.jobId} after ${elapsed} in the foreground${auto ? ' (auto)' : ''}. ` +
                         `It will interrupt you with a message when it exits. ` +
                         `Watch: tail -f ${paths.jobLog} ; stop: kill -- -${pgid}]`;
@@ -354,7 +345,7 @@ export function createValveOperations(nodeId, contextDir, takePurpose = () => nu
                     // time out or delete the directory during that in-progress exit.
                     if (existsSync(paths.jobExit))
                         return;
-                    const elapsedMs = Date.now() - startedAt;
+                    const elapsedMs = performance.now() - startedAt;
                     if (timeout !== undefined && timeout > 0) {
                         if (elapsedMs >= timeout * 1000) {
                             if (pgid)
@@ -371,10 +362,7 @@ export function createValveOperations(nodeId, contextDir, takePurpose = () => nu
         },
     };
 }
-// ---------------------------------------------------------------------------
 // Extension
-// ---------------------------------------------------------------------------
-// ---------------------------------------------------------------------------
 // `purpose` — the one line a person reads while a command runs
 //
 // An optional deviation from taking pi's definition verbatim, and the only one
@@ -396,7 +384,6 @@ export function createValveOperations(nodeId, contextDir, takePurpose = () => nu
 // Upstream ask: pi's own bash tool should carry this (Claude Code's bash tool
 // has shipped an equivalent `description` field for years). Until it does, the
 // field is re-declared here on top of pi's schema rather than forked into it.
-// ---------------------------------------------------------------------------
 const PURPOSE_DESCRIPTION = [
     'One short clause naming what this step is FOR, in the words of the person you',
     'are working for — "Reading the Acme thread", not "Fetching emails" and never',
@@ -437,7 +424,7 @@ export function createValveToolDefinition(nodeId, contextDir, cwd, exposePurpose
     return { ...schemaDefinition, execute };
 }
 export default function (pi) {
-    const nodeId = process.env['CRTR_NODE_ID'];
+    const nodeId = envNodeId();
     if (nodeId === undefined || nodeId.trim() === '')
         return; // inert — builtin bash stays
     const contextDir = process.env['CRTR_CONTEXT_DIR'];

package/dist/pi-extensions/canvas-context-intro.js

@@ -22,6 +22,7 @@
 //
 // Plain TS-with-types — no imports from @earendil-works/* so this compiles inside
 // crouter's own tsc build without a dep on the pi packages.
+import { envNodeId } from '../shared/env.js';
 import { CONTEXT_INTRO_CUSTOM_TYPE, formatCard, parseCard } from '../shared/generated-context.js';
 import { brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
 import { buildContextBearingsFromState, buildForkBearingsFromState, buildProjectContextBlockForBroker, renderPreferencesFromState, } from '../core/runtime/broker-extension-render.js';
@@ -35,9 +36,7 @@ import { truncateToWidth } from './truncate.js';
  *  the block builder in `core/runtime/bearings.ts` because the warm-pool claim's
  *  live delivery needs it too; re-exported here as this module's own surface. */
 export { CONTEXT_INTRO_CUSTOM_TYPE };
-// ---------------------------------------------------------------------------
 // Block builder
-// ---------------------------------------------------------------------------
 /** Build the full bearings baseline for a conversation without inherited
  *  crouter context. Exported for testing. */
 export async function buildContextIntro(nodeId, target) {
@@ -50,9 +49,7 @@ export async function buildForkContextIntro(nodeId) {
     const state = await brokerExtensionState(nodeId);
     return buildForkBearingsFromState(state, situationalContextEnvelope(nodeId) ?? '');
 }
-// ---------------------------------------------------------------------------
 // Collapsed-by-default rendering
-// ---------------------------------------------------------------------------
 /** Pull the plain text out of a custom message's content (string or blocks). */
 function messageText(message) {
     if (typeof message.content === 'string')
@@ -127,16 +124,14 @@ export function renderContextMessage(message, options, theme) {
         },
     };
 }
-// ---------------------------------------------------------------------------
 // Extension
-// ---------------------------------------------------------------------------
 /** Register new-context baseline assembly; a strict resume changes nothing. */
 export function registerCanvasContextIntro(pi) {
     // Collapse the block to a one-liner until the user expands tool output (Ctrl+O).
     // Harmless to register outside TUI mode (it's only consulted while rendering).
     pi.registerMessageRenderer(CONTEXT_INTRO_CUSTOM_TYPE, renderContextMessage);
     pi.on('session_start', async (event, ctx) => {
-        const nodeId = process.env['CRTR_NODE_ID'];
+        const nodeId = envNodeId();
         if (nodeId === undefined || nodeId.trim() === '')
             return;
         const reason = event?.reason;

package/dist/pi-extensions/canvas-doc-substrate.js

@@ -14,6 +14,7 @@
 // Plain TS-with-types — NO imports from @earendil-works/* (a local structural
 // PiLike interface stands in), so it compiles inside crouter's own tsc build
 // with no dep on the pi packages. Mirrors canvas-context-intro.ts.
+import { envNodeId } from '../shared/env.js';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
 import { brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
@@ -22,9 +23,7 @@ import { corpusHasPreCommandSurfaces, demotePreCommandExposures, renderOnCommand
 import { clearSessionCache } from '../core/substrate/session-cache.js';
 import { cloneContextExposureState, exposureTarget, freezePreferenceSnapshot, loadContextExposureState, mergeContextExposureState, replaceContextExposureState, saveContextExposureState, sharedContextExposureState, } from '../core/substrate/injected-store.js';
 import { autoLoadedContextInner, mergeAutoLoadedContext } from './envelope-merge.js';
-// ---------------------------------------------------------------------------
 // Extension
-// ---------------------------------------------------------------------------
 /** The stable seam that closes pi's native "Available tools" list. We splice the
  *  substrate's boot sections right before it — the agent decides which capability
  *  to reach for while reading the tools, so memory docs/preferences must sit
@@ -63,7 +62,7 @@ const HELD_SIBLING_REASON = [
     'Read it, then re-issue your WHOLE command unchanged. The re-issue executes.',
 ].join('\n');
 export function registerCanvasDocSubstrate(pi) {
-    const nodeId = process.env['CRTR_NODE_ID'];
+    const nodeId = envNodeId();
     if (nodeId === undefined || nodeId.trim() === '')
         return; // not a canvas node — inert
     // One in-place state object is shared with context-intro and rehydrated on a

package/dist/pi-extensions/canvas-goal-capture.js

@@ -29,6 +29,7 @@
 //
 // Plain TS-with-types — no imports from @earendil-works/* so this compiles inside
 // crouter's own tsc build without a dep on the pi packages.
+import { envNodeId } from '../shared/env.js';
 import { captureGoalIfAbsent, generateAndCommitInitialName, } from './broker-local.js';
 import { parseCard } from '../shared/generated-context.js';
 /**
@@ -41,7 +42,7 @@ import { parseCard } from '../shared/generated-context.js';
 export function registerCanvasGoalCapture(pi) {
     pi.on('input', (event) => {
         try {
-            const nodeId = process.env['CRTR_NODE_ID'];
+            const nodeId = envNodeId();
             if (nodeId === undefined || nodeId.trim() === '')
                 return; // not a canvas node
             const text = (event.text ?? '').trim();

package/dist/pi-extensions/canvas-inbox-watcher.js

@@ -11,6 +11,7 @@
 // trigger, so the agent cannot run on context alone before hearing the person.
 // A context-only batch keeps its wake by triggering on its LAST card while idle,
 // and rides the running turn while streaming.
+import { envNodeId, envProfileId, envWatcherDebounceMs, envWatcherTickMs } from '../shared/env.js';
 import { coalesceBrokerInbox, entryCards, readBrokerCanceledEntryIds, readBrokerCursor, readBrokerInboxSince, reportRefNodeId, } from '../core/runtime/broker/inbox.js';
 import { advanceBrokerInboxCursor, brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
 import { emitEvent } from '../core/events/emit.js';
@@ -18,8 +19,6 @@ import { errorClassFromError } from '../core/events/errors.js';
 import { operationIdContext } from '../core/events/operation-id.js';
 import { situationalContextEnvelope, SITUATIONAL_CONTEXT_CUSTOM_TYPE } from '../core/runtime/situational-context.js';
 import { isProfilePaused } from '../core/profiles/manifest.js';
-const DEFAULT_TICK_MS = 800;
-const DEFAULT_DEBOUNCE_MS = 1000;
 const MAX_PENDING_HANDOFFS = 64;
 const MAX_SOURCE_OPERATION_IDS = 16;
 let currentWatcher;
@@ -31,26 +30,20 @@ class WatcherFatalError extends Error {
     }
 }
 function resolveCadence() {
-    const parse = (raw, fallback) => {
-        if (raw === undefined)
-            return fallback;
-        const value = Number(raw);
-        return Number.isFinite(value) && value > 0 ? value : fallback;
-    };
     return {
-        tickMs: parse(process.env['CRTR_WATCHER_TICK_MS'], DEFAULT_TICK_MS),
-        debounceMs: parse(process.env['CRTR_WATCHER_DEBOUNCE_MS'], DEFAULT_DEBOUNCE_MS),
+        tickMs: envWatcherTickMs(),
+        debounceMs: envWatcherDebounceMs(),
     };
 }
 function currentNodeId() {
-    const nodeId = process.env['CRTR_NODE_ID'];
+    const nodeId = envNodeId();
     return nodeId === undefined || nodeId.trim() === '' ? undefined : nodeId;
 }
 /** The node's profile, read fresh each poll: `crtr profile pause` mutates the
  *  manifest file directly, so a live broker sees the flip on its next tick with
  *  no daemon round-trip. '' is the historical no-profile row. */
 function profilePaused() {
-    const profileId = process.env['CRTR_PROFILE_ID'];
+    const profileId = envProfileId();
     return profileId !== undefined && profileId !== '' && isProfilePaused(profileId);
 }
 function isFilesystemError(error) {

package/dist/pi-extensions/canvas-passive-context.js

@@ -18,6 +18,7 @@
 //
 // Plain TS-with-types — no imports from @earendil-works/* so this compiles inside
 // crouter's own tsc build without a dep on the pi packages.
+import { envNodeId } from '../shared/env.js';
 import { existsSync, readFileSync } from 'node:fs';
 import { brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
 import { reportPathFromRef } from '../core/runtime/broker-extension-render.js';
@@ -26,9 +27,7 @@ import { parseCard } from '../shared/generated-context.js';
 // Per-entry body cap so a single fat report can't blow the context budget. The
 // full report stays on disk at `ref` if the agent needs more.
 const BODY_CAP = 4_000;
-// ---------------------------------------------------------------------------
 // Report dereference — turn a passive pointer into the message text it carries.
-// ---------------------------------------------------------------------------
 /** Strip the leading YAML frontmatter block a report is written with, returning
  *  just the body. Tolerant: no frontmatter → returns the input unchanged. */
 function stripFrontmatter(raw) {
@@ -126,9 +125,7 @@ export function placeBacklog(text, preText) {
     const bodyStart = text.length - card.body.length - CARD_CLOSE.length;
     return `${text.slice(0, bodyStart)}${preText}\n${text.slice(bodyStart)}`;
 }
-// ---------------------------------------------------------------------------
 // Extension
-// ---------------------------------------------------------------------------
 /**
  * Register the passive-context drain on `pi`.
  *
@@ -138,7 +135,7 @@ export function placeBacklog(text, preText) {
 export function registerCanvasPassiveContext(pi) {
     pi.on('input', async (event) => {
         try {
-            const nodeId = process.env['CRTR_NODE_ID'];
+            const nodeId = envNodeId();
             if (nodeId === undefined || nodeId.trim() === '')
                 return; // not a canvas node
             const drained = drainBrokerPassive(nodeId);

package/dist/pi-extensions/canvas-preview-result.js

@@ -6,6 +6,7 @@
 // mirrors its record there, and this hook attaches the record to Pi's
 // ToolResult.details. The attach viewer can render a structured preview
 // without parsing the agent-facing text.
+import { envNodeId } from '../shared/env.js';
 import { existsSync, readFileSync, rmSync } from 'node:fs';
 import { previewResultPath } from '../core/preview-result-path.js';
 function isPreviewRecord(value) {
@@ -19,7 +20,7 @@ function isPreviewRecord(value) {
 /** Loaded into every canvas broker. Plain Pi sessions have no node id and
  * deliberately receive no filesystem transport. */
 export function registerCanvasPreviewResult(pi) {
-    if (process.env['CRTR_NODE_ID'] === undefined || process.env['CRTR_NODE_ID'] === '')
+    if (envNodeId() === undefined || envNodeId() === '')
         return;
     pi.on('tool_result', (event) => {
         if (event.toolName !== 'bash')

package/dist/pi-extensions/canvas-prompt-scrub.js

@@ -23,6 +23,7 @@
 //
 // Every rule below is anchored to pi's exact wording and degrades to a no-op if
 // pi rewords, so a pi upgrade can never break a turn here.
+import { envNodeId } from '../shared/env.js';
 const PI_IDENTITY = 'You are an expert coding assistant operating inside pi, a coding agent harness.';
 const NEUTRAL_IDENTITY = 'You are an expert coding assistant.';
 const PI_DOCS_MARKER = 'Pi documentation (read only';
@@ -40,7 +41,7 @@ export function scrubPromptSelfReference(systemPrompt) {
 }
 /** Register the system-prompt scrub for a canvas node. */
 export function registerCanvasPromptScrub(pi) {
-    const nodeId = process.env['CRTR_NODE_ID'];
+    const nodeId = envNodeId();
     if (nodeId === undefined || nodeId.trim() === '')
         return;
     pi.on('before_agent_start', (event) => {

package/dist/pi-extensions/canvas-recap.js

@@ -38,20 +38,17 @@
 //
 // Plain TS-with-types — no imports from @earendil-works/* so this compiles
 // inside crouter's own tsc build without a dep on the pi packages.
+import { envNodeId, envRecapIdleMs } from '../shared/env.js';
 import { brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
 import { generateRecap } from '../core/runtime/recap.js';
 import { isReviewBoundary } from '../core/runtime/session-visibility.js';
 import { editorLabelForBrokerNode } from '../core/runtime/broker-extension-render.js';
 import { generateAndCommitRecapName, readRoadmap } from './broker-local.js';
-// ---------------------------------------------------------------------------
 // Tuning constants
-// ---------------------------------------------------------------------------
 /** No-new-message window before a recap is shown. 60s by default; override with
  *  CRTR_RECAP_IDLE_MS (for fast runtime verification). */
 function idleMs() {
-    const raw = process.env['CRTR_RECAP_IDLE_MS'];
-    const n = raw !== undefined ? parseInt(raw, 10) : NaN;
-    return Number.isFinite(n) && n > 0 ? n : 60_000;
+    return envRecapIdleMs();
 }
 /** How often the single low-rate timer checks elapsed-since-last-message. */
 const POLL_MS = 7_000;
@@ -62,14 +59,10 @@ const CONVO_EDGE_MESSAGES = 5;
  *  (10 messages × this ≈ the total budget the model needs for the gist). */
 const MESSAGE_CHAR_BUDGET = 1_200;
 const WIDGET_KEY = 'crtr-recap';
-// ---------------------------------------------------------------------------
 // Module-level state — persists across /reload so the timer doesn't stack.
-// ---------------------------------------------------------------------------
 /** The one live poll timer. Cleared and replaced on every re-registration. */
 let liveTimer;
-// ---------------------------------------------------------------------------
 // Conversation extraction — literal user+assistant text ONLY.
-// ---------------------------------------------------------------------------
 /** Pull the literal text out of a message's content (string or text blocks),
  *  dropping non-text blocks (thinking, toolCall, image). */
 function messageText(msg) {
@@ -162,9 +155,7 @@ function buildNamingConversation(sm, assistantPartial, reviewId) {
     });
     return sampled.join('\n\n');
 }
-// ---------------------------------------------------------------------------
 // Extension
-// ---------------------------------------------------------------------------
 /**
  * Register the inactivity-recap chrome on `pi`.
  *
@@ -172,7 +163,7 @@ function buildNamingConversation(sm, assistantPartial, reviewId) {
  * or legacy job agent loads it as a no-op.
  */
 export function registerCanvasRecap(pi, recapGenerator = generateRecap, nameRegenerator) {
-    const nodeId = process.env['CRTR_NODE_ID'];
+    const nodeId = envNodeId();
     if (nodeId === undefined || nodeId.trim() === '')
         return; // not a canvas node
     // Captured on session_start; used by the timer and the message handlers.
@@ -344,9 +335,7 @@ export function registerCanvasRecap(pi, recapGenerator = generateRecap, nameRege
             requestRecap(true);
         },
     });
-    // -------------------------------------------------------------------------
     // Events
-    // -------------------------------------------------------------------------
     pi.on('session_start', (_event, ctx) => {
         ui = ctx.ui;
         sessionManager = ctx.sessionManager;
@@ -382,9 +371,7 @@ export function registerCanvasRecap(pi, recapGenerator = generateRecap, nameRege
         captureLiveModel(ctx);
         onMessage();
     });
-    // -------------------------------------------------------------------------
     // The single low-rate idle poll.
-    // -------------------------------------------------------------------------
     if (liveTimer !== undefined)
         clearInterval(liveTimer);
     const timer = setInterval(() => {

package/dist/pi-extensions/canvas-review-boundary.js

@@ -4,13 +4,12 @@
 // inherited fork context and before canvas-context-intro appends fork bearings.
 // The display projection starts at this marker while the model keeps the full
 // inherited context.
+import { envNodeId } from '../shared/env.js';
 import { brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
 import { isReviewBoundary, REVIEW_BOUNDARY_CUSTOM_TYPE } from '../core/runtime/session-visibility.js';
 import { formatCard, parseCard } from '../shared/generated-context.js';
 import { truncateToWidth } from './truncate.js';
-// ---------------------------------------------------------------------------
 // Collapsed-by-default rendering
-// ---------------------------------------------------------------------------
 /** Render the marker as a single compact divider; its full content remains in
  * the message list for the model and generated-context presenters. */
 export function renderReviewBoundary(message, options, theme) {
@@ -32,9 +31,7 @@ export function renderReviewBoundary(message, options, theme) {
         },
     };
 }
-// ---------------------------------------------------------------------------
 // Extension
-// ---------------------------------------------------------------------------
 /**
  * Register the review boundary marker. Companion nodes receive one boundary
  * marker on session_start that separates inherited context from the visible
@@ -43,7 +40,7 @@ export function renderReviewBoundary(message, options, theme) {
 export function registerCanvasReviewBoundary(pi) {
     pi.registerMessageRenderer(REVIEW_BOUNDARY_CUSTOM_TYPE, renderReviewBoundary);
     pi.on('session_start', async (_event, ctx) => {
-        const nodeId = process.env['CRTR_NODE_ID'];
+        const nodeId = envNodeId();
         if (!nodeId || nodeId.trim() === '')
             return;
         let node;