@north-light/crouter 0.3.270 → 0.3.271

package/dist/core/__tests__/canvas-inbox-watcher-hold.test.js

@@ -28,7 +28,7 @@ import { ApiError } from '../../api/errors.js';
 // debounce window before asserting, exactly as against the real 800/1000 cadence.
 const TICK_MS = 20;
 const DEBOUNCE_MS = 25;
-const SETTLE_MS = TICK_MS * 2 + DEBOUNCE_MS + 30;
+const SETTLE_MS = TICK_MS * 2 + DEBOUNCE_MS + 200;
 let origHome;
 let origNode;
 const homes = [];
@@ -302,7 +302,7 @@ describe('canvas inbox watcher — hold + idle delivery', () => {
             },
         };
         const drive = createEngineDriver({
-            registry: { sendFrame: () => undefined },
+            registry: { sendFrame: () => undefined, broadcast: () => undefined },
             replies: {},
             session: () => session,
             dispatches: { track: (promise) => promise },

package/dist/core/__tests__/helpers/harness.js

@@ -282,6 +282,7 @@ export async function createHarness(opts = {}) {
             ...cleanBaseEnv(),
             CRTR_HOME: home,
             HOME: tmpHome,
+            CRTR_RUNTIME_HOME: realRuntimeHome,
             CRTR_PI_BINARY: FAKE_PI_BINARY,
             CRTR_BROKER_ENGINE: FAKE_ENGINE,
         },

package/dist/core/__tests__/seam/broker-provider-retry.test.js

@@ -109,6 +109,8 @@ test('a managed-cooling terminal authors a rate-limit auto fault whose deadline
     seedPool('openai-codex', false);
     const child = await h.spawnHeadlessChild(parent, 'cooling terminal', { model: OPENAI_STRONG.spec });
     await h.waitFor(() => agentStartCount(child) >= 1, { label: 'initial cooling fixture turn started' });
+    const kickoffObserver = await attachUntil(child, 'observer', 'cooling-terminal-kickoff-settled', (a) => a.welcome.snapshot.state.isStreaming === false, 'cooling terminal kickoff settled');
+    kickoffObserver.close();
     const baselineStarts = agentStartCount(child);
     // A terminal managed-cooling error at agent_end: its explanatory prose avoids
     // rate-limit words entirely; the typed diagnostic alone must classify the

package/dist/core/runtime/fleet.d.ts

@@ -47,9 +47,8 @@ export interface FleetRegistry {
     get(nodeId: string): FleetEntry | undefined;
     /** The capacity count: registered brokers only, excluding reservations. */
     size(): number;
-    /** Every slot the cap accounts for — registered brokers plus in-flight
-     *  reservations (a launch that has claimed a slot but not yet registered, and
-     *  an exited broker whose exit-policy job has not yet run). */
+    /** Every slot the cap accounts for — registered brokers plus launch
+     *  reservations that have not registered yet. */
     occupancy(): number;
     /** Claim a slot for `nodeId`. True means the caller may launch; false means
      *  the cap is reached and the caller must freeze or refuse. Idempotent — a
@@ -62,9 +61,9 @@ export interface FleetRegistry {
     /** Drop an entry without policy (terminal exits + close paths). */
     forget(nodeId: string): void;
     /** Wired by `headlessBrokerHost.launch` to the handle's `exited` promise.
-     *  Removes the entry (freeing the capacity slot), then enqueues an
-     *  exit-policy job on the daemon's serial work lane — policy never runs
-     *  inline on the Node event callback (design D-3). */
+     *  Removes the entry (freeing the capacity slot), then enqueues its
+     *  observation on the daemon's serial work lane — it never runs inline on
+     *  the Node event callback (design D-3). */
     onChildExit(nodeId: string, status: FleetExitStatus): void;
     /** Test seam — delivers a synthetic exit through the SAME path as
      *  onChildExit, so fabricated-row tests drive policy without a process. */

package/dist/core/runtime/nodes.js

@@ -12,7 +12,7 @@
 //             learns when the work finishes — this seeds the subscription
 //             graph to mirror the spawn structure. A `spawned_by` audit edge
 //             is also recorded.
-import { envHomeOverride } from '../../shared/env.js';
+import { envHomeOverride, envRuntimeHomeOverride } from '../../shared/env.js';
 import { randomBytes } from 'node:crypto';
 import { mkdirSync } from 'node:fs';
 import { createNode, getNode, getRow, subscribe, recordSpawn, subscribersOf, contextDir, } from '../canvas/index.js';
@@ -206,6 +206,11 @@ export function nodeEnv(meta) {
     const home = envHomeOverride();
     if (home !== undefined && home !== '')
         env['CRTR_HOME'] = home;
+    // Propagate an explicit runtime home so broker-side `crtr` invocations use
+    // the same installed generation despite an isolated HOME.
+    const runtimeHome = envRuntimeHomeOverride();
+    if (runtimeHome !== undefined && runtimeHome !== '')
+        env['CRTR_RUNTIME_HOME'] = runtimeHome;
     // Propagate the subtree-root node id. The broker uses it to group a subtree;
     // each launch site also emits the authoritative rootOfSpine(nodeId) over this
     // passthrough.

package/dist/daemon/fleet.js

@@ -122,10 +122,7 @@ export class DaemonFleet {
     #enqueue;
     #now;
     #map = new Map();
-    /** Slots claimed but not yet held by a registered broker: a launch in flight,
-     *  or a broker that exited and whose exit-policy job has not yet decided
-     *  whether to relaunch it. Counting both against the cap is what keeps a
-     *  1:1 respawn from losing its own slot to a concurrent launcher. */
+    /** Slots claimed by launches that have not registered a broker yet. */
     #reservations = new Set();
     #lastCapacityLogAt = Number.NEGATIVE_INFINITY;
     constructor(opts) {
@@ -191,13 +188,15 @@ export class DaemonFleet {
         this.#reservations.delete(nodeId);
     }
     onChildExit(nodeId, status) {
-        // Move the slot from the registry to a reservation in ONE synchronous
-        // step: the exit-policy job about to be enqueued may relaunch this node,
-        // and holding the slot through the exit observation prevents a concurrent
-        // launch from entering before the registry reflects the exit.
+        // The real child exit is the liveness boundary. Its queued observation only
+        // records diagnostics, so it cannot retain capacity after the process is
+        // gone and make an explicit replacement look already live.
+        const meta = getNode(nodeId);
+        const launchedMs = meta?.launched_at == null ? Number.NaN : Date.parse(meta.launched_at);
+        const uptimeMs = Number.isFinite(launchedMs) ? Math.max(0, this.#now() - launchedMs) : null;
+        const consecutiveFailures = meta?.respawn_failures ?? 0;
         this.#map.delete(nodeId);
-        this.#reservations.add(nodeId);
-        this.#enqueue(() => this.#runExitPolicy(nodeId, status));
+        this.#enqueue(() => this.#emitExitObserved(nodeId, status, uptimeMs, consecutiveFailures));
     }
     deliverExit(nodeId, status) {
         this.onChildExit(nodeId, status);
@@ -223,17 +222,6 @@ export class DaemonFleet {
         return true;
     }
     dispose() { }
-    async #runExitPolicy(nodeId, status) {
-        try {
-            const launchedAt = getNode(nodeId)?.launched_at;
-            const launchedMs = launchedAt == null ? Number.NaN : Date.parse(launchedAt);
-            const uptimeMs = Number.isFinite(launchedMs) ? Math.max(0, this.#now() - launchedMs) : null;
-            this.#emitExitObserved(nodeId, status, uptimeMs, getNode(nodeId)?.respawn_failures ?? 0);
-        }
-        finally {
-            this.releaseReservation(nodeId);
-        }
-    }
     #emitExitObserved(nodeId, status, uptimeMs, consecutiveFailures) {
         emitEvent({
             level: 'info',

package/dist/shared/env.d.ts

@@ -15,6 +15,8 @@ export declare function envModelExact(): boolean;
  *  only when a caller needs the override itself — to check whether one is
  *  set, or to propagate it verbatim into a child process's env. */
 export declare function envHomeOverride(): string | undefined;
+/** The raw installed-runtime directory override, unresolved. */
+export declare function envRuntimeHomeOverride(): string | undefined;
 /** Dead-provider watchdog timeout (`CRTR_STREAM_WATCHDOG_MS`), 5 minutes by
  *  default. See `runtime/stream-watchdog.ts` for what it guards. */
 export declare function envStreamWatchdogMs(): number;

package/dist/shared/env.js

@@ -51,6 +51,10 @@ export function envModelExact() {
 export function envHomeOverride() {
     return process.env['CRTR_HOME'];
 }
+/** The raw installed-runtime directory override, unresolved. */
+export function envRuntimeHomeOverride() {
+    return process.env['CRTR_RUNTIME_HOME'];
+}
 // Tuning
 /** Generic `Number(raw)` parse with a positive-finite guard, shared by every
  *  millisecond tuning var below (each previously reimplemented this locally,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.270",
+  "version": "0.3.271",
   "description": "crtr — agent runtime with memory, plugins, and marketplaces",
   "type": "module",
   "main": "dist/index.js",

package/runtime.lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.270",
+  "version": "0.3.271",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@north-light/crouter",
-      "version": "0.3.270",
+      "version": "0.3.271",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {