@north-light/crouter 0.3.311 → 0.3.313

package/dist/pi-extensions/__tests__/canvas-context-intro.test.js

@@ -5,27 +5,26 @@
 import { test, before, after, beforeEach, afterEach } from 'node:test';
 import assert from 'node:assert/strict';
 import { existsSync, mkdtempSync, mkdirSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
-import { createServer } from 'node:http';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { registerCanvasContextIntro, CONTEXT_INTRO_CUSTOM_TYPE, } from '../canvas-context-intro.js';
 import { registerCanvasDocSubstrate } from '../canvas-doc-substrate.js';
 import { buildContextBearings as buildContextIntro } from '../../core/runtime/bearings.js';
 import { installPersonaTransitionGate } from '../../core/runtime/broker-persona-guidance.js';
-import { FaultRetry } from '../../core/runtime/broker/fault-retry.js';
-import { readFault } from '../../core/runtime/fault.js';
-import { ApiError } from '../../api/errors.js';
 import { createNode, deleteNode, getNode, updateNode } from '../../core/canvas/canvas.js';
 import { apiSocketPath } from '../../core/canvas/paths.js';
 import { createApiServer } from '../../daemon/api/server.js';
-import { closeDb } from '../../core/canvas/db.js';
+import { closeDb, migrate, openDb } from '../../core/canvas/db.js';
+import { beginExecution } from '../../core/canvas/executions.js';
 import { resetScopeCache } from '../../core/scope.js';
+import { initializeFreshScopedStore } from '../../core/scoped-state/migrate.js';
 import { clearSessionCache } from '../../core/substrate/session-cache.js';
 import { emptyContextExposureState, exposureTarget, initializeForkContextExposure, loadContextExposureState, registerExposure, saveContextExposureState, } from '../../core/substrate/injected-store.js';
 let home;
 let origCwd;
 let origHome;
 let origNode;
+let origExecution;
 let origProfile;
 let server;
 async function waitForSocket(path) {
@@ -36,22 +35,9 @@ async function waitForSocket(path) {
     }
     throw new Error(`api socket never bound at ${path}`);
 }
-async function listenUnavailableApi(path) {
-    const unavailable = createServer((_request, response) => {
-        response.writeHead(503, { 'content-type': 'application/json' });
-        response.end(JSON.stringify({ error: { code: 'daemon_unavailable', message: 'local daemon connection refused' } }));
-    });
-    await new Promise((resolve, reject) => {
-        unavailable.once('error', reject);
-        unavailable.listen(path, () => {
-            unavailable.off('error', reject);
-            resolve();
-        });
-    });
-    return unavailable;
-}
-function closeHttpServer(server) {
-    return new Promise((resolve, reject) => server.close((error) => error === undefined ? resolve() : reject(error)));
+function activateBroker(id) {
+    process.env['CRTR_NODE_ID'] = id;
+    process.env['CRTR_EXECUTION_ID'] = beginExecution(id, { daemonEpoch: null });
 }
 function node(id, over = {}) {
     return {
@@ -102,6 +88,7 @@ before(() => {
     origCwd = process.cwd();
     origHome = process.env['HOME'];
     origNode = process.env['CRTR_NODE_ID'];
+    origExecution = process.env['CRTR_EXECUTION_ID'];
     origProfile = process.env['CRTR_PROFILE_ID'];
 });
 beforeEach(async () => {
@@ -116,9 +103,12 @@ beforeEach(async () => {
     process.env['HOME'] = userHome;
     process.env['CRTR_HOME'] = home;
     delete process.env['CRTR_NODE_ID'];
+    delete process.env['CRTR_EXECUTION_ID'];
     delete process.env['CRTR_PROFILE_ID'];
     resetScopeCache();
     clearSessionCache();
+    initializeFreshScopedStore({ kind: 'user', root: join(userHome, '.crouter') });
+    migrate(openDb());
     server = createApiServer();
     await waitForSocket(apiSocketPath());
 });
@@ -146,6 +136,10 @@ after(() => {
         delete process.env['CRTR_NODE_ID'];
     else
         process.env['CRTR_NODE_ID'] = origNode;
+    if (origExecution === undefined)
+        delete process.env['CRTR_EXECUTION_ID'];
+    else
+        process.env['CRTR_EXECUTION_ID'] = origExecution;
     if (origProfile === undefined)
         delete process.env['CRTR_PROFILE_ID'];
     else
@@ -167,7 +161,7 @@ test('session_start appends compact fork bearings after an inherited source base
     const forkExposure = loadContextExposureState('forkB');
     assert.deepEqual(forkExposure.exposures.get('inherited-source-document'), { transcript: 3 }, 'a pre-bind retry preserves the transcript exposure seed after its source disappears');
     assert.equal(forkExposure.exposures.has('source-system-only'), false, 'a fork never inherits source system exposure');
-    process.env['CRTR_NODE_ID'] = 'forkB';
+    activateBroker('forkB');
     const pi = makeFakePi();
     registerCanvasContextIntro(pi);
     await pi.fireSessionStart([inheritedSourceBlock]);
@@ -184,7 +178,7 @@ test('session_start appends compact fork bearings after an inherited source base
     const unknownPreState = loadContextExposureState('unknownF');
     assert.equal(unknownPreState.exposures.size, 0);
     assert.equal(unknownPreState.preferenceSnapshot, null);
-    process.env['CRTR_NODE_ID'] = 'unknownF';
+    activateBroker('unknownF');
     const unknownPi = makeFakePi();
     registerCanvasContextIntro(unknownPi);
     await unknownPi.fireSessionStart([inheritedSourceBlock]);
@@ -202,7 +196,7 @@ test('root /new leaves baseline assembly to the replacement broker', async () =>
     exposure.preferenceSnapshot = 'ORIGINAL-SNAPSHOT';
     registerExposure(exposureTarget(exposure, 'transcript'), 'original-transcript', 'content');
     saveContextExposureState('root-new', exposure);
-    process.env['CRTR_NODE_ID'] = 'root-new';
+    activateBroker('root-new');
     const pi = makeFakePi();
     registerCanvasContextIntro(pi);
     await pi.fireSessionStart([], 'new');
@@ -240,7 +234,7 @@ test('child /new commits its baseline before ack and the provider gate delivers
             persona_ack: oldPersona,
         }));
         mkdirSync(join(home, 'nodes', 'new-child'), { recursive: true });
-        process.env['CRTR_NODE_ID'] = 'new-child';
+        activateBroker('new-child');
         const sessionStartHandlers = [];
         const sent = [];
         const branch = [];
@@ -343,68 +337,6 @@ test('child /new commits its baseline before ack and the provider gate delivers
             process.env['CRTR_PROFILE_ID'] = previousProfile;
     }
 });
-test('a typed local API error remains a retryable broker-to-daemon fault after settlement', async () => {
-    createNode(node('persona-transport', {
-        persona_ack: { kind: 'review', mode: 'base', lifecycle: 'terminal' },
-    }));
-    await server.close();
-    let unavailable;
-    try {
-        unavailable = await listenUnavailableApi(apiSocketPath());
-        const messages = [];
-        const agent = {
-            state: { messages },
-            transformContext: async (context) => context,
-        };
-        installPersonaTransitionGate('persona-transport', {
-            agent,
-            sessionManager: {
-                appendCustomMessageEntry: () => undefined,
-            },
-        });
-        await assert.rejects(() => agent.transformContext([{ role: 'user', content: 'continue' }]), (error) => error instanceof ApiError && error.status === 503 && error.code === 'daemon_unavailable');
-        assert.deepEqual(readFault('persona-transport'), {
-            link: 'broker↔crtrd',
-            op: 'persona transition',
-            kind: 'connection',
-            retry: { disposition: 'manual' },
-            message: 'local daemon connection refused',
-            since: readFault('persona-transport')?.since,
-            operation_id: readFault('persona-transport')?.operation_id,
-        }, 'the typed daemon transport error is recorded before Pi turns it into a generic agent error');
-        const session = {
-            sessionManager: { getLeafId: () => 'persona-transport-leaf' },
-            model: undefined,
-        };
-        const generation = {
-            id: 1,
-            session,
-            fallback: { blocked: false },
-            stagedProviderAgentEnd: {
-                messages: [{ role: 'assistant', stopReason: 'error', errorMessage: 'local daemon connection refused' }],
-            },
-            stagedWatchdogAbort: false,
-            stagedRefreshAbort: false,
-            stagedOverflowFailure: null,
-            executingTools: new Set(),
-        };
-        new FaultRetry({
-            nodeId: 'persona-transport',
-            currentSession: () => session,
-            installedGeneration: () => generation,
-        }).publishSettledProviderFault(generation);
-        const fault = readFault('persona-transport');
-        assert.equal(fault?.link, 'broker↔crtrd');
-        assert.equal(fault?.kind, 'connection');
-        assert.equal(fault?.retry.disposition, 'manual');
-    }
-    finally {
-        if (unavailable !== undefined)
-            await closeHttpServer(unavailable);
-        server = createApiServer();
-        await waitForSocket(apiSocketPath());
-    }
-});
 test('resume idempotency uses the exact details stamp independent of block text', async () => {
     createNode(node('stampD'));
     // The exact node-id stamp is authoritative even when prose carries no id.
@@ -414,7 +346,7 @@ test('resume idempotency uses the exact details stamp independent of block text'
         content: '<crtr-context dir="/elsewhere">bearings with no id in the text</crtr-context>',
         details: { nodeId: 'stampD' },
     };
-    process.env['CRTR_NODE_ID'] = 'stampD';
+    activateBroker('stampD');
     const pi = makeFakePi();
     registerCanvasContextIntro(pi);
     await pi.fireSessionStart([stampedNoIdInText]);
@@ -424,7 +356,7 @@ test('session_start stays idempotent on a genuine resume', async () => {
     createNode(node('resumeC'));
     // A resume restores this node's already-stamped bearings.
     const ownBlock = introEntry(buildContextIntro('resumeC'));
-    process.env['CRTR_NODE_ID'] = 'resumeC';
+    activateBroker('resumeC');
     const pi = makeFakePi();
     registerCanvasContextIntro(pi);
     await pi.fireSessionStart([ownBlock]);

package/dist/pi-extensions/__tests__/canvas-goal-capture-envelope.test.js

@@ -22,9 +22,10 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import registerCanvasGoalCapture from '../canvas-goal-capture.js';
 import { createNode } from '../../core/canvas/canvas.js';
-import { closeDb } from '../../core/canvas/db.js';
+import { closeDb, migrate, openDb } from '../../core/canvas/db.js';
 import { apiSocketPath } from '../../core/canvas/paths.js';
 import { buildReviveKickoff, drainBearings } from '../../core/runtime/kickoff.js';
+import { beginExecution } from '../../core/canvas/executions.js';
 let home;
 let socket;
 /** Every request line the extension's naming path sent to the daemon socket. */
@@ -62,6 +63,7 @@ async function waitForRequestMentioning(id) {
 before(async () => {
     home = mkdtempSync(join(tmpdir(), 'crtr-goal-capture-'));
     process.env['CRTR_HOME'] = home;
+    migrate(openDb());
     // A stub daemon: it records the request and answers a typed error, so the
     // naming path fails fast (and silently, as it must) without any model call.
     // It must ANSWER rather than hang up — the api client reads a mid-request
@@ -89,7 +91,7 @@ after(async () => {
 });
 test('a fresh-revive kickoff seeds no mandate and no name; a human first message seeds both', async () => {
     const revived = createNode(node('revived-node'));
-    const kickoff = buildReviveKickoff(revived, drainBearings(revived));
+    const kickoff = buildReviveKickoff(revived, drainBearings(revived, beginExecution(revived.node_id, { daemonEpoch: 'test' })));
     process.env['CRTR_NODE_ID'] = revived.node_id;
     handler()({ type: 'input', text: kickoff, source: 'interactive' });
     const bare = createNode(node('bare-root'));

package/dist/pi-extensions/__tests__/canvas-stophook-agentend.test.js

@@ -17,20 +17,26 @@ import { join } from 'node:path';
 import registerCanvasStophook from '../canvas-stophook.js';
 import { createNode, subscribe, getNode, setStatus } from '../../core/canvas/canvas.js';
 import { openFocusRow, getFocusByNode, getFocusById, listFocuses } from '../../core/canvas/focuses.js';
-import { closeDb } from '../../core/canvas/db.js';
+import { closeDb, migrate, openDb } from '../../core/canvas/db.js';
 import { apiSocketPath } from '../../core/canvas/paths.js';
 import { createApiServer } from '../../daemon/api/server.js';
 import { CrtrClient } from '../../api/client.js';
 import { reportsDir } from '../../core/canvas/paths.js';
-import { readInboxSince, appendInbox } from '../../core/feed/inbox.js';
+import { enqueueNodeMail } from '../../core/feed/messages.js';
+import { hasUnseenWakeMail } from '../../core/canvas/deliveries.js';
 import { STALL_REPROMPT } from '../../core/runtime/stop-guard.js';
 import { markStopSignal } from '../../core/runtime/stop-signals.js';
-import { isBusy } from '../../core/runtime/busy.js';
-import { recordFault, readFault } from '../../core/runtime/fault.js';
+import { readFault, readLiveTurn, recordFault } from '../../core/canvas/recovery.js';
+import { beginExecution } from '../../core/canvas/executions.js';
 let home;
 let server;
 let origNode;
+let origExecution;
 let origPane;
+function activateBroker(nodeId) {
+    process.env['CRTR_NODE_ID'] = nodeId;
+    process.env['CRTR_EXECUTION_ID'] = beginExecution(nodeId, { daemonEpoch: null });
+}
 function node(id, over = {}) {
     return {
         node_id: id,
@@ -54,6 +60,9 @@ function makeFakePi() {
     };
 }
 async function settle(pi, event, ctx) {
+    const nodeId = process.env['CRTR_NODE_ID'];
+    if (nodeId !== undefined && process.env['CRTR_EXECUTION_ID'] === undefined && getNode(nodeId) !== null)
+        activateBroker(nodeId);
     await pi.fire('agent_end', event, ctx);
     await pi.fire('agent_settled', { type: 'agent_settled' }, ctx);
 }
@@ -68,6 +77,7 @@ function reportCount(id) {
 }
 before(() => {
     origNode = process.env['CRTR_NODE_ID'];
+    origExecution = process.env['CRTR_EXECUTION_ID'];
     origPane = process.env['TMUX_PANE'];
 });
 async function waitForSocket() {
@@ -92,11 +102,13 @@ beforeEach(async () => {
         rmSync(home, { recursive: true, force: true });
     home = mkdtempSync(join(tmpdir(), 'crtr-stophook-end-'));
     process.env['CRTR_HOME'] = home;
+    migrate(openDb());
     server = createApiServer();
     await waitForSocket();
     // Force the clean-shutdown path (no in-place respawn) so the refresh test is
     // deterministic even when the suite runs inside a tmux pane.
     delete process.env['TMUX_PANE'];
+    delete process.env['CRTR_EXECUTION_ID'];
 });
 afterEach(async () => {
     await server?.close();
@@ -112,6 +124,10 @@ after(() => {
         delete process.env['CRTR_NODE_ID'];
     else
         process.env['CRTR_NODE_ID'] = origNode;
+    if (origExecution === undefined)
+        delete process.env['CRTR_EXECUTION_ID'];
+    else
+        process.env['CRTR_EXECUTION_ID'] = origExecution;
     if (origPane === undefined)
         delete process.env['TMUX_PANE'];
     else
@@ -123,7 +139,7 @@ test('natural stop commits idle-release only at agent_settled', { timeout: 1_000
     createNode(node('worker', { parent: 'mgr', lifecycle: 'terminal', status: 'active' }));
     subscribe('root', 'mgr', true); // root would receive any push mgr emits
     subscribe('mgr', 'worker', true); // mgr holds an active live subscription → "awaiting"
-    process.env['CRTR_NODE_ID'] = 'mgr';
+    activateBroker('mgr');
     const pi = makeFakePi();
     registerCanvasStophook(pi);
     let shutdown = false;
@@ -131,51 +147,50 @@ test('natural stop commits idle-release only at agent_settled', { timeout: 1_000
     await pi.fire('agent_start', { type: 'agent_start' }, ctx);
     await pi.fire('agent_end', stopEvent('still waiting on the worker'), ctx);
     assert.equal(getNode('mgr')?.status, 'active', 'agent_end is staging-only');
-    assert.equal(isBusy('mgr'), true, 'agent_end cannot clear whole-run busy state');
+    assert.equal(readLiveTurn('mgr')?.busy, true, 'agent_end cannot close the active turn');
     assert.equal(shutdown, false, 'agent_end cannot route a natural stop');
     await pi.fire('agent_settled', { type: 'agent_settled' }, ctx);
     const m = getNode('mgr');
-    assert.equal(isBusy('mgr'), false, 'agent_settled clears whole-run busy state');
+    assert.equal(readLiveTurn('mgr')?.busy, false, 'agent_settled closes the active turn');
     assert.equal(m?.intent, 'idle-release', 'mgr idle-released');
     assert.equal(m?.status, 'idle', 'mgr marked idle');
     assert.equal(shutdown, true, 'pi shut down');
     assert.equal(reportCount('mgr'), 0, 'NO report file written');
-    assert.equal(readInboxSince('root').length, 0, 'NO inbox pointer fanned to subscriber');
+    assert.equal(hasUnseenWakeMail('root'), false, 'NO SQL inbox delivery fanned to subscriber');
     assert.equal(pi.injected.length, 0, 'no reprompt on a legitimate idle-release');
     // §5.1 case 6 (awaiting + UNFOCUSED → idle-release, no focus): the awaiting
     // branch must never create/touch a focus row. Non-vacuous: an impl that ran
     // the done-branch handoff/openFocus on an idle-release would leave a row here.
     assert.equal(listFocuses().length, 0, 'awaiting+unfocused leaves the focuses table empty');
 });
-test('gh-451: idle-release does NOT release while a non-deferred inbox entry sits past the cursor', { timeout: 1_000 }, async () => {
+test('gh-451: idle-release does NOT release while a non-deferred SQL delivery is pending', { timeout: 1_000 }, async () => {
     // Reproduces the #451 race: a subscriber's push landed in mgr's inbox but the
-    // in-process watcher has not yet flushed/committed the durable cursor past it
-    // (its DEBOUNCE_MS hold). If this settle released anyway, the daemon would
-    // immediately re-wake mgr on the very entry the watcher was mid-delivery on.
+    // in-process watcher has not yet claimed and acknowledged its SQL delivery.
+    // If this settle released anyway, the daemon would immediately re-wake mgr on
+    // the delivery the watcher was mid-handoff on.
     createNode(node('root', { parent: null, lifecycle: 'resident' }));
     createNode(node('mgr', { parent: 'root', lifecycle: 'terminal', mode: 'orchestrator' }));
     createNode(node('worker', { parent: 'mgr', lifecycle: 'terminal', status: 'active' }));
     subscribe('root', 'mgr', true);
     subscribe('mgr', 'worker', true); // mgr awaits a live worker → would idle-release once caught up
-    // A push landed in mgr's own inbox, strictly after its (unset) cursor —
-    // exactly the pre-flush window the watcher hasn't committed yet.
-    appendInbox('mgr', { from: 'worker', tier: 'normal', kind: 'update', label: 'worker made progress' });
+    // A push landed in mgr's SQL inbox delivery set, before the watcher claims it.
+    enqueueNodeMail('mgr', { senderNodeId: 'worker', kind: 'update', label: 'worker made progress', urgency: 'normal', wake: 1 });
     process.env['CRTR_NODE_ID'] = 'mgr';
     const pi = makeFakePi();
     registerCanvasStophook(pi);
     let shutdown = false;
     const ctx = { shutdown: () => { shutdown = true; } };
     await settle(pi, stopEvent('still waiting on the worker'), ctx);
-    assert.equal(getNode('mgr')?.status, 'active', 'mgr stays active — NOT idle-released while behind the cursor');
+    assert.equal(getNode('mgr')?.status, 'active', 'mgr stays active — NOT idle-released while a delivery is pending');
     assert.equal(getNode('mgr')?.intent ?? null, null, 'no idle-release intent while a non-deferred entry is unseen');
     assert.equal(shutdown, false, 'pi stays alive so the in-process watcher can still deliver/commit');
 });
-test('gh-451: finished does NOT shut down while a non-deferred inbox entry sits past the cursor', { timeout: 1_000 }, async () => {
-    // A canonical final can settle while the in-process watcher has delivered a
-    // child report into the inbox but has not yet committed the durable cursor.
-    // The finished branch must keep this broker alive for that delivery.
+test('gh-451: finished does NOT shut down while a non-deferred SQL delivery is pending', { timeout: 1_000 }, async () => {
+    // A canonical final can settle while the in-process watcher has a child
+    // report delivery pending. The finished branch must keep this broker alive
+    // for that delivery.
     createNode(node('mgr', { parent: null, lifecycle: 'terminal', final_report: 'mgr-final.md' }));
-    appendInbox('mgr', { from: 'worker', tier: 'normal', kind: 'update', label: 'worker made progress' });
+    enqueueNodeMail('mgr', { senderNodeId: 'worker', kind: 'update', label: 'worker made progress', urgency: 'normal', wake: 1 });
     process.env['CRTR_NODE_ID'] = 'mgr';
     const pi = makeFakePi();
     registerCanvasStophook(pi);
@@ -192,7 +207,7 @@ test('a deferred send to a TERMINAL node was raised on append, so it holds the s
     createNode(node('worker', { parent: 'mgr', lifecycle: 'terminal', status: 'active' }));
     subscribe('root', 'mgr', true);
     subscribe('mgr', 'worker', true);
-    appendInbox('mgr', { from: null, tier: 'deferred', kind: 'message', label: 'a scheduled deferred note' });
+    enqueueNodeMail('mgr', { kind: 'message', label: 'a scheduled deferred note', urgency: 'deferred', wake: 1 });
     process.env['CRTR_NODE_ID'] = 'mgr';
     const pi = makeFakePi();
     registerCanvasStophook(pi);
@@ -206,6 +221,7 @@ test('a deferred send to a TERMINAL node was raised on append, so it holds the s
 test('queued continuation finishes before natural-stop routing commits', { timeout: 1_000 }, async () => {
     createNode(node('leaf', { parent: null, lifecycle: 'terminal' }));
     process.env['CRTR_NODE_ID'] = 'leaf';
+    activateBroker('leaf');
     const pi = makeFakePi();
     registerCanvasStophook(pi);
     let shutdown = false;
@@ -318,7 +334,7 @@ test('refresh-yield (intent=refresh) writes NO push — silent to subscribers',
     await settle(pi, stopEvent('checkpoint before refreshing'), { shutdown: () => { shutdown = true; } });
     assert.equal(shutdown, true, 'pi shut down (no tmux pane → clean shutdown)');
     assert.equal(reportCount('orch'), 0, 'a yield is silent: NO report file');
-    assert.equal(readInboxSince('root').length, 0, 'a yield is silent: NO inbox pointer');
+    assert.equal(hasUnseenWakeMail('root'), false, 'a yield is silent: NO SQL inbox delivery');
     assert.equal(pi.injected.length, 0, 'no reprompt on a refresh-yield');
 });
 // turn_end — stale-⚠ fix: reaching turn_end proves the current provider
@@ -327,7 +343,7 @@ test('refresh-yield (intent=refresh) writes NO push — silent to subscribers',
 function turnEndEvent(text) {
     return { message: { role: 'assistant', content: [{ type: 'text', text }] } };
 }
-test('turn_end clears a stale pi→provider fatal fault (a completed round-trip proves the episode is over)', () => {
+test('turn_end clears a stale pi→provider fatal fault (a completed round-trip proves the episode is over)', async () => {
     createNode(node('leaf', { parent: null, lifecycle: 'terminal' }));
     recordFault('leaf', {
         link: 'pi→provider',
@@ -336,14 +352,14 @@ test('turn_end clears a stale pi→provider fatal fault (a completed round-trip
         retry: { disposition: 'fatal' },
         message: 'terminated',
     });
-    assert.notEqual(readFault('leaf'), null, 'precondition: fault marker recorded');
-    process.env['CRTR_NODE_ID'] = 'leaf';
+    assert.notEqual(readFault('leaf'), null, 'precondition: SQL recovery fault recorded');
+    activateBroker('leaf');
     const pi = makeFakePi();
     registerCanvasStophook(pi);
-    pi.fire('turn_end', turnEndEvent('all good now'), {});
+    await pi.fire('turn_end', turnEndEvent('all good now'), {});
     assert.equal(readFault('leaf'), null, 'the pi→provider fault is cleared at turn_end');
 });
-test('turn_end still clears a daemon→node wedge fault (existing behavior, unchanged)', () => {
+test('turn_end still clears a daemon→node wedge fault (existing behavior, unchanged)', async () => {
     createNode(node('leaf', { parent: null, lifecycle: 'terminal' }));
     recordFault('leaf', {
         link: 'daemon→node',
@@ -352,16 +368,18 @@ test('turn_end still clears a daemon→node wedge fault (existing behavior, unch
         retry: { disposition: 'manual' },
         message: 'no progress for 20m',
     });
-    assert.notEqual(readFault('leaf'), null, 'precondition: wedge fault recorded');
-    process.env['CRTR_NODE_ID'] = 'leaf';
+    assert.notEqual(readFault('leaf'), null, 'precondition: SQL recovery wedge fault recorded');
+    activateBroker('leaf');
     const pi = makeFakePi();
     registerCanvasStophook(pi);
-    pi.fire('turn_end', turnEndEvent('turn completed'), {});
+    await pi.fire('turn_end', turnEndEvent('turn completed'), {});
     assert.equal(readFault('leaf'), null, 'the daemon→node wedge fault is still cleared at turn_end');
 });
-test('a successful final or requested human reply suppresses the stop reprompt without a canvas read', async () => {
+test('a successful final or requested human reply suppresses the stop reprompt', async () => {
+    createNode(node('signal-only', { parent: null, lifecycle: 'terminal' }));
     for (const [signal, shutsDown] of [['pushedFinal', true], ['requestedHumanReply', false]]) {
         process.env['CRTR_NODE_ID'] = 'signal-only';
+        activateBroker('signal-only');
         markStopSignal('signal-only', signal);
         const pi = makeFakePi();
         registerCanvasStophook(pi);
@@ -410,5 +428,5 @@ test('stalled leaf (nothing live to await, no final) is still reprompted', async
     assert.equal(shutdown, false, 'a stalled leaf is NOT shut down — it is re-prompted to finish');
     assert.notEqual(getNode('leaf')?.intent, 'idle-release', 'a stalled leaf does not idle-release');
     assert.equal(reportCount('leaf'), 0, 'NO report file written on a stall');
-    assert.equal(readInboxSince('mgr').length, 0, 'NO inbox pointer fanned on a stall');
+    assert.equal(hasUnseenWakeMail('mgr'), false, 'NO SQL inbox delivery fanned on a stall');
 });

package/dist/pi-extensions/__tests__/canvas-stophook-context-nudge.test.js

@@ -20,11 +20,13 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import registerCanvasStophook from '../canvas-stophook.js';
 import { createNode } from '../../core/canvas/canvas.js';
-import { closeDb } from '../../core/canvas/db.js';
+import { beginExecution } from '../../core/canvas/executions.js';
+import { closeDb, migrate, openDb } from '../../core/canvas/db.js';
 import { apiSocketPath } from '../../core/canvas/paths.js';
 import { createApiServer } from '../../daemon/api/server.js';
 let home;
 let origNode;
+let origExecution;
 let server;
 async function waitForSocket(path) {
     for (let i = 0; i < 200; i++) {
@@ -66,7 +68,10 @@ function turnEnd(content, stopReason = 'stop') {
     return { message: { role: 'assistant', stopReason, content, usage: { input: 1, output: 1 } }, toolResults: [] };
 }
 const ctxAt = (tokens) => ({ getContextUsage: () => ({ tokens }) });
-before(() => { origNode = process.env['CRTR_NODE_ID']; });
+before(() => {
+    origNode = process.env['CRTR_NODE_ID'];
+    origExecution = process.env['CRTR_EXECUTION_ID'];
+});
 beforeEach(async () => {
     closeDb();
     if (home)
@@ -74,6 +79,7 @@ beforeEach(async () => {
     home = mkdtempSync(join(tmpdir(), 'crtr-stophook-nudge-'));
     process.env['CRTR_HOME'] = home;
     mkdirSync(home, { recursive: true });
+    migrate(openDb());
     server = createApiServer();
     await waitForSocket(apiSocketPath());
 });
@@ -89,10 +95,15 @@ after(() => {
         delete process.env['CRTR_NODE_ID'];
     else
         process.env['CRTR_NODE_ID'] = origNode;
+    if (origExecution === undefined)
+        delete process.env['CRTR_EXECUTION_ID'];
+    else
+        process.env['CRTR_EXECUTION_ID'] = origExecution;
 });
 test('band crossing mid-run (tool calls present) → context nudge is a STEER', async () => {
     createNode(node('midrun'));
     process.env['CRTR_NODE_ID'] = 'midrun';
+    process.env['CRTR_EXECUTION_ID'] = beginExecution('midrun', { daemonEpoch: null });
     const pi = makeFakePi();
     registerCanvasStophook(pi);
     await pi.fire('turn_end', turnEnd([{ type: 'toolCall', id: 't1', name: 'bash', arguments: {} }], 'toolUse'), ctxAt(150_000));
@@ -104,6 +115,7 @@ test('band crossing mid-run (tool calls present) → context nudge is a STEER',
 test('band crossing on the FINAL message (no tool calls) → nudge is HELD as nextTurn, never a steer', async () => {
     createNode(node('final'));
     process.env['CRTR_NODE_ID'] = 'final';
+    process.env['CRTR_EXECUTION_ID'] = beginExecution('final', { daemonEpoch: null });
     const pi = makeFakePi();
     registerCanvasStophook(pi);
     await pi.fire('turn_end', turnEnd([{ type: 'text', text: 'here is my summary' }]), ctxAt(150_000));
@@ -117,6 +129,7 @@ test('band crossing on the FINAL message (no tool calls) → nudge is HELD as ne
 test('a truncated tool-calling turn (stopReason length) still steers — the loop continues past failed calls', async () => {
     createNode(node('lengthrun'));
     process.env['CRTR_NODE_ID'] = 'lengthrun';
+    process.env['CRTR_EXECUTION_ID'] = beginExecution('lengthrun', { daemonEpoch: null });
     const pi = makeFakePi();
     registerCanvasStophook(pi);
     await pi.fire('turn_end', turnEnd([{ type: 'toolCall', id: 't1', name: 'bash', arguments: {} }], 'length'), ctxAt(150_000));
@@ -127,6 +140,7 @@ test('a truncated tool-calling turn (stopReason length) still steers — the loo
 test('an aborted final turn also holds (the loop ends unconditionally on abort)', async () => {
     createNode(node('aborted'));
     process.env['CRTR_NODE_ID'] = 'aborted';
+    process.env['CRTR_EXECUTION_ID'] = beginExecution('aborted', { daemonEpoch: null });
     const pi = makeFakePi();
     registerCanvasStophook(pi);
     // Aborted mid-tool-call: toolCall content present, but the run ends anyway —

package/dist/pi-extensions/__tests__/pre-command-gate.test.js

@@ -27,9 +27,11 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { registerCanvasDocSubstrate } from '../canvas-doc-substrate.js';
 import { createNode } from '../../core/canvas/canvas.js';
-import { closeDb } from '../../core/canvas/db.js';
+import { closeDb, migrate, openDb } from '../../core/canvas/db.js';
+import { beginExecution } from '../../core/canvas/executions.js';
 import { apiSocketPath } from '../../core/canvas/paths.js';
 import { resetScopeCache } from '../../core/scope.js';
+import { initializeFreshScopedStore } from '../../core/scoped-state/migrate.js';
 import { loadContextExposureState } from '../../core/substrate/injected-store.js';
 import { clearSessionCache } from '../../core/substrate/session-cache.js';
 import { createApiServer } from '../../daemon/api/server.js';
@@ -40,6 +42,7 @@ let server = null;
 let origCwd;
 let origHome;
 let origNode;
+let origExecution;
 let origProfile;
 async function waitForSocket(path) {
     for (let i = 0; i < 200; i++) {
@@ -83,6 +86,7 @@ function seedNode(id) {
     });
     mkdirSync(join(home, 'nodes', id), { recursive: true });
     process.env['CRTR_NODE_ID'] = id;
+    process.env['CRTR_EXECUTION_ID'] = beginExecution(id, { daemonEpoch: null });
 }
 /** The registered extension, driven through the pi events it actually binds. */
 function registerSubstrate() {
@@ -117,6 +121,7 @@ before(() => {
     origCwd = process.cwd();
     origHome = process.env['HOME'];
     origNode = process.env['CRTR_NODE_ID'];
+    origExecution = process.env['CRTR_EXECUTION_ID'];
     origProfile = process.env['CRTR_PROFILE_ID'];
 });
 beforeEach(async () => {
@@ -130,9 +135,12 @@ beforeEach(async () => {
     process.env['HOME'] = join(home, 'user');
     process.env['CRTR_HOME'] = home;
     delete process.env['CRTR_NODE_ID'];
+    delete process.env['CRTR_EXECUTION_ID'];
     delete process.env['CRTR_PROFILE_ID'];
     resetScopeCache();
     clearSessionCache();
+    initializeFreshScopedStore({ kind: 'user', root: join(home, 'user', '.crouter') });
+    migrate(openDb());
     server = createApiServer();
     await waitForSocket(apiSocketPath());
 });
@@ -160,6 +168,10 @@ after(() => {
         delete process.env['CRTR_NODE_ID'];
     else
         process.env['CRTR_NODE_ID'] = origNode;
+    if (origExecution === undefined)
+        delete process.env['CRTR_EXECUTION_ID'];
+    else
+        process.env['CRTR_EXECUTION_ID'] = origExecution;
     if (origProfile === undefined)
         delete process.env['CRTR_PROFILE_ID'];
     else