@telorun/kernel 0.79.0 → 0.81.0

package/dist/runtime-seam.js

@@ -138,7 +138,15 @@ export class KernelRuntimeSeam {
         // child down in its own `finally`, so this only has to close the channels.
         const exitCode = (async () => {
             try {
-                await child.load(source);
+                // The child runs a manifest in the SAME workspace as its parent, so it
+                // shares the root the parent already resolved instead of deriving one
+                // beside the child manifest. Deriving put a `.telo` in every directory
+                // holding a test manifest and rebuilt every controller bundle once per
+                // test, since `Test.Suite` runs each test through here.
+                //
+                // `undefined` means "resolve one yourself" and `null` means "no cache" —
+                // a parent with no local anchor must yield the first, not the second.
+                await child.load(source, { cacheDir: this.kernel.getCacheRoot() ?? undefined });
                 await child.start();
                 return child.exitCode;
             }

package/dist/runtime-seam.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-seam.js","sourceRoot":"","sources":["../src/runtime-seam.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,cAAc,EACd,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,kBAAkB,GAMnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,MAAM,GAQP,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,uBAAuB,GAAG,GAAG,CAAC;AASpC;;;;;GAKG;AACH,MAAM,aAAa;IACjB,MAAM,GAAmB,EAAE,CAAC;IAC5B,QAAQ,GAAoD,EAAE,CAAC;IAC/D,MAAM,GAAG,KAAK,CAAC;IAEN,QAAQ,GAAa,IAAI,QAAQ,CAAC;QACzC,KAAK,EAAE,CAAC,KAAsB,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;YACrD,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;IAEM,MAAM,GAAmB,IAAI,MAAM,CAAS;QACnD,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7B,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;SACzB,CAAC;KACH,CAAC,CAAC;IAEH;;8BAE0B;IAC1B,GAAG;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,QAAoB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrC,QAAQ,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3B,QAAQ,EAAE,CAAC;IACb,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzD,OAAO,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACvF,CAAC;CACF;AAED,MAAM,cAAc,GAA4C;IAC9D,CAAC,EAAE,OAAO;IACV,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,MAAM;CACV,CAAC;AAEF;;;8EAG8E;AAC9E,SAAS,iBAAiB,CAAC,UAA8B;IACvD,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAkC,CAAC;IAC5D,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;QACnC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,OAAO;QAC7D,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI;QACnC,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS;QAC1C,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,OAA2B;QACnD,8EAA8E;QAC9E,4EAA4E;QAC5E,6EAA6E;QAC7E,oCAAoC;QACpC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAEnC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC;YAC5B,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG;YACpC,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YACzC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;SACrC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC,QAAQ,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/E,OAAO,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YACnD,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,SAAoC,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,WAAW,EAAiB,EAAE;YACrD,2EAA2E;YAC3E,yEAAyE;YACzE,mDAAmD;YACnD,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE;gBACxB,qEAAqE;gBACrE,kEAAkE;gBAClE,uEAAuE;gBACvE,qDAAqD;gBACrD,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrB,KAAK,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,QAAQ,CAAC;YACjB,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,OAA6B;QACvD,6EAA6E;QAC7E,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,eAAe;QACf,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE;YACrF,WAAW,EAAE,eAAe;SAC7B,CAAC,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACnD,MAAM,CAAC,QAAQ,CAAC,QAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,SAAS,CAAC;QACd,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,gBAAgB,GAAyB,EAAE,CAAC;QAChD,IAAI,kBAAkB,GAAyB,EAAE,CAAC;QAClD,IAAI,oBAAoB,GAAyB,EAAE,CAAC;QACpD,IAAI,eAAe,GAA0B,EAAE,CAAC;QAChD,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,WAAoC,CAAC;QACzC,IAAI,CAAC;YACH,wEAAwE;YACxE,uEAAuE;YACvE,0EAA0E;YAC1E,kBAAkB;YAClB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;gBAC3C,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,IAAI;gBAC/C,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACzD,WAAW,GAAG,KAAK,CAAC;YACpB,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;YAC1C,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC;YAC9C,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;YAClD,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACtC,uEAAuE;YACvE,0DAA0D;YAC1D,eAAe,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,0EAA0E;YAC1E,0EAA0E;YAC1E,0BAA0B;YAC1B,OAAO;gBACL,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC5D,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,qDAAqD;QACrD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,WAAW,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,oBAAoB,EAAE,GAAG,kBAAkB,CAAC,CAAC,GAAG,CACpF,iBAAiB,CAClB;aACF,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,oEAAoE;QACpE,EAAE;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,wBAAwB;QACxB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE;YACvF,eAAe;YACf,YAAY,EAAE,gBAAgB,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC9D,OAAO;YACL,WAAW,EAAE,CAAC,GAAG,oBAAoB,EAAE,GAAG,kBAAkB,EAAE,GAAG,WAAW,CAAC,CAAC,GAAG,CAC/E,iBAAiB,CAClB;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"runtime-seam.js","sourceRoot":"","sources":["../src/runtime-seam.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,cAAc,EACd,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,kBAAkB,GAMnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,MAAM,GAQP,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,uBAAuB,GAAG,GAAG,CAAC;AASpC;;;;;GAKG;AACH,MAAM,aAAa;IACjB,MAAM,GAAmB,EAAE,CAAC;IAC5B,QAAQ,GAAoD,EAAE,CAAC;IAC/D,MAAM,GAAG,KAAK,CAAC;IAEN,QAAQ,GAAa,IAAI,QAAQ,CAAC;QACzC,KAAK,EAAE,CAAC,KAAsB,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;YACrD,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;IAEM,MAAM,GAAmB,IAAI,MAAM,CAAS;QACnD,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7B,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;SACzB,CAAC;KACH,CAAC,CAAC;IAEH;;8BAE0B;IAC1B,GAAG;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,QAAoB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrC,QAAQ,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3B,QAAQ,EAAE,CAAC;IACb,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzD,OAAO,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACvF,CAAC;CACF;AAED,MAAM,cAAc,GAA4C;IAC9D,CAAC,EAAE,OAAO;IACV,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,MAAM;CACV,CAAC;AAEF;;;8EAG8E;AAC9E,SAAS,iBAAiB,CAAC,UAA8B;IACvD,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAkC,CAAC;IAC5D,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;QACnC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,OAAO;QAC7D,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI;QACnC,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS;QAC1C,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,OAA2B;QACnD,8EAA8E;QAC9E,4EAA4E;QAC5E,6EAA6E;QAC7E,oCAAoC;QACpC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAEnC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC;YAC5B,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG;YACpC,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YACzC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;SACrC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,CAAC;gBACH,uEAAuE;gBACvE,sEAAsE;gBACtE,uEAAuE;gBACvE,uEAAuE;gBACvE,wDAAwD;gBACxD,EAAE;gBACF,yEAAyE;gBACzE,sEAAsE;gBACtE,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC;gBAChF,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC,QAAQ,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/E,OAAO,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YACnD,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,SAAoC,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,WAAW,EAAiB,EAAE;YACrD,2EAA2E;YAC3E,yEAAyE;YACzE,mDAAmD;YACnD,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE;gBACxB,qEAAqE;gBACrE,kEAAkE;gBAClE,uEAAuE;gBACvE,qDAAqD;gBACrD,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrB,KAAK,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,QAAQ,CAAC;YACjB,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,OAA6B;QACvD,6EAA6E;QAC7E,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,eAAe;QACf,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE;YACrF,WAAW,EAAE,eAAe;SAC7B,CAAC,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACnD,MAAM,CAAC,QAAQ,CAAC,QAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,SAAS,CAAC;QACd,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,gBAAgB,GAAyB,EAAE,CAAC;QAChD,IAAI,kBAAkB,GAAyB,EAAE,CAAC;QAClD,IAAI,oBAAoB,GAAyB,EAAE,CAAC;QACpD,IAAI,eAAe,GAA0B,EAAE,CAAC;QAChD,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,WAAoC,CAAC;QACzC,IAAI,CAAC;YACH,wEAAwE;YACxE,uEAAuE;YACvE,0EAA0E;YAC1E,kBAAkB;YAClB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;gBAC3C,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,IAAI;gBAC/C,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACzD,WAAW,GAAG,KAAK,CAAC;YACpB,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;YAC1C,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC;YAC9C,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;YAClD,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACtC,uEAAuE;YACvE,0DAA0D;YAC1D,eAAe,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,0EAA0E;YAC1E,0EAA0E;YAC1E,0BAA0B;YAC1B,OAAO;gBACL,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC5D,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,qDAAqD;QACrD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,WAAW,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,oBAAoB,EAAE,GAAG,kBAAkB,CAAC,CAAC,GAAG,CACpF,iBAAiB,CAClB;aACF,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,oEAAoE;QACpE,EAAE;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,wBAAwB;QACxB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE;YACvF,eAAe;YACf,YAAY,EAAE,gBAAgB,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC9D,OAAO;YACL,WAAW,EAAE,CAAC,GAAG,oBAAoB,EAAE,GAAG,kBAAkB,EAAE,GAAG,WAAW,CAAC,CAAC,GAAG,CAC/E,iBAAiB,CAClB;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/workspace-marker.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Finding `telo-workspace.yaml` on disk.
+ *
+ * Its LOCATION is a general anchor — the directory workspace-relative paths are
+ * measured from, the outer bound on how far a walk-up may look, and the root the
+ * `.telo` cache is anchored at — while its `modules:` list is release scope. So
+ * the finder is deliberately separate from `release/`: `telo run` bounds its
+ * `.env` collection with the marker and `resolveCacheRoot` anchors on it, and
+ * neither may reach into the release namespace to do so, where `loadWorkspace`
+ * (which parses `modules:` and throws when the file is absent) sits one import
+ * away.
+ *
+ * It lives in the KERNEL rather than the CLI because the cache root is resolved
+ * here, on a path a CLI-less embedder also takes (a child kernel started through
+ * the runtime seam, a test harness). The CLI re-exports it; nothing is duplicated.
+ *
+ * Parsing the file is the analyzer's (`release/workspace-config.ts`); finding it
+ * is the Node half, and this is all of it.
+ */
+import { WORKSPACE_FILENAME } from "@telorun/analyzer";
+export { WORKSPACE_FILENAME };
+/**
+ * Walk up from `from` looking for the marker. Returns the directory holding it,
+ * or `undefined` — the file is optional. `telo release` requires one and reports
+ * its absence; `telo run` and `resolveCacheRoot` read `undefined` as "no parent
+ * lookup", falling back to what they did before the marker existed.
+ *
+ * `from` is resolved through symlinks first: a manifest reached through a linked
+ * directory would otherwise walk the LINK's parents, miss a marker that is right
+ * there in the real tree, and silently fall back to a narrower answer.
+ */
+export declare function findWorkspaceRoot(from: string): string | undefined;
+/** `fs.realpathSync`, falling back to the input when the path does not exist —
+ *  a manifest path that is wrong is the caller's error to report, not this
+ *  helper's to convert into a different one. */
+export declare function realPath(target: string): string;
+//# sourceMappingURL=workspace-marker.d.ts.map

package/dist/workspace-marker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-marker.d.ts","sourceRoot":"","sources":["../src/workspace-marker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAIvD,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQlE;AAcD;;gDAEgD;AAChD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAM/C"}

package/dist/workspace-marker.js

@@ -0,0 +1,68 @@
+/**
+ * Finding `telo-workspace.yaml` on disk.
+ *
+ * Its LOCATION is a general anchor — the directory workspace-relative paths are
+ * measured from, the outer bound on how far a walk-up may look, and the root the
+ * `.telo` cache is anchored at — while its `modules:` list is release scope. So
+ * the finder is deliberately separate from `release/`: `telo run` bounds its
+ * `.env` collection with the marker and `resolveCacheRoot` anchors on it, and
+ * neither may reach into the release namespace to do so, where `loadWorkspace`
+ * (which parses `modules:` and throws when the file is absent) sits one import
+ * away.
+ *
+ * It lives in the KERNEL rather than the CLI because the cache root is resolved
+ * here, on a path a CLI-less embedder also takes (a child kernel started through
+ * the runtime seam, a test harness). The CLI re-exports it; nothing is duplicated.
+ *
+ * Parsing the file is the analyzer's (`release/workspace-config.ts`); finding it
+ * is the Node half, and this is all of it.
+ */
+import { WORKSPACE_FILENAME } from "@telorun/analyzer";
+import * as fs from "node:fs";
+import * as path from "node:path";
+export { WORKSPACE_FILENAME };
+/**
+ * Walk up from `from` looking for the marker. Returns the directory holding it,
+ * or `undefined` — the file is optional. `telo release` requires one and reports
+ * its absence; `telo run` and `resolveCacheRoot` read `undefined` as "no parent
+ * lookup", falling back to what they did before the marker existed.
+ *
+ * `from` is resolved through symlinks first: a manifest reached through a linked
+ * directory would otherwise walk the LINK's parents, miss a marker that is right
+ * there in the real tree, and silently fall back to a narrower answer.
+ */
+export function findWorkspaceRoot(from) {
+    let dir = realPath(path.resolve(from));
+    for (;;) {
+        if (isFile(path.join(dir, WORKSPACE_FILENAME)))
+            return dir;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return undefined;
+        dir = parent;
+    }
+}
+/** The marker must be a FILE. `existsSync` would accept a directory of that name
+ *  and anchor the whole cache on it, and the Rust half tests `is_file()` — a
+ *  workspace visible to one kernel and not the other is precisely the divergence
+ *  a shared marker exists to prevent. */
+function isFile(target) {
+    try {
+        return fs.statSync(target).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/** `fs.realpathSync`, falling back to the input when the path does not exist —
+ *  a manifest path that is wrong is the caller's error to report, not this
+ *  helper's to convert into a different one. */
+export function realPath(target) {
+    try {
+        return fs.realpathSync(target);
+    }
+    catch {
+        return target;
+    }
+}
+//# sourceMappingURL=workspace-marker.js.map

package/dist/workspace-marker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-marker.js","sourceRoot":"","sources":["../src/workspace-marker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,SAAS,CAAC;QACR,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACrC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;yCAGyC;AACzC,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;gDAEgD;AAChD,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telorun/kernel",
-  "version": "0.79.0",
+  "version": "0.81.0",
   "description": "Telo Runtime - A lightweight, polyglot execution host.",
   "keywords": [
     "telo",
@@ -61,7 +61,7 @@
   "dependencies": {
     "@marcbachmann/cel-js": "^7.6.1",
     "@sinclair/typebox": "^0.34.48",
-    "@telorun/analyzer": "0.63.0",
+    "@telorun/analyzer": "0.64.0",
     "@telorun/glob": "0.2.0",
     "@telorun/templating": "0.16.0",
     "ajv": "^8.17.1",
@@ -75,7 +75,7 @@
     "@types/tar-stream": "^3.1.3",
     "typescript": "^5.0.0",
     "vitest": "^2.1.8",
-    "@telorun/sdk": "0.79.0"
+    "@telorun/sdk": "0.80.0"
   },
   "optionalDependencies": {
     "esbuild": "^0.25.12"
@@ -99,6 +99,7 @@
     "build": "tsc",
     "dev": "tsc --watch",
     "test": "vitest run",
+    "test:integration": "TELO_DOCKER_TESTS=1 vitest run --config vitest.integration.config.ts",
     "test:watch": "vitest"
   }
 }

package/src/bundle/module-artifact.ts

@@ -414,6 +414,18 @@ async function readMarker(marker: string): Promise<string[]> {
  * identically cold and warm. A genuinely local `source` (development, or a module
  * loaded straight off disk) resolves to its own directory.
  *
+ * A module's LAYERS extract beside its cached `telo.yaml`, so this has to follow
+ * the manifest cache's own fallback to the pre-workspace-anchor root: when the
+ * manifest resolved from `<entry-dir>/.telo/manifests/` because the workspace root
+ * is cold, its already-materialized controller layers are there too. Deriving the
+ * directory from the new root alone left an offline hermetic upgrade resolving
+ * `telo.yaml` from disk and then going to the network for every bundled
+ * controller — the fallback covering half a module.
+ *
+ * The legacy root is chosen only when it HOLDS the manifest and the current root
+ * does not; a cold cache still places the module under the current root, so a
+ * fresh materialization is never diverted to the old location.
+ *
  * Returns `null` when neither route yields a directory — a `memory://` module, or
  * a ref this cache has no coordinates for.
  */
@@ -423,14 +435,17 @@ export function moduleDirectoryFor(
   entryDir: string,
   registryUrl: string | undefined,
   manifestsDir: string | undefined,
+  legacyDir?: string | null,
 ): string | null {
-  const cacheFile = cachePathForCanonical(
-    splitIntegrity(requestedUrl).base,
-    entryDir,
-    registryUrl,
-    manifestsDir,
-  );
-  if (cacheFile) return path.dirname(cacheFile);
+  const pinned = splitIntegrity(requestedUrl).base;
+  const cacheFile = cachePathForCanonical(pinned, entryDir, registryUrl, manifestsDir);
+  if (cacheFile) {
+    if (legacyDir && !existsSync(cacheFile)) {
+      const legacyFile = cachePathForCanonical(pinned, entryDir, registryUrl, legacyDir);
+      if (legacyFile && existsSync(legacyFile)) return path.dirname(legacyFile);
+    }
+    return path.dirname(cacheFile);
+  }
   if (source.startsWith("file://")) return path.dirname(fileURLToPath(source));
   if (path.isAbsolute(source)) return path.dirname(source);
   return null;

package/src/controller-loader.ts

@@ -167,7 +167,7 @@ export class ControllerLoader {
       installRoot: options.installRoot,
     });
     if (options.log) this.npmLoader.setLogger(options.log);
-    this.napiLoader = new NapiControllerLoader();
+    this.napiLoader = new NapiControllerLoader(options.cacheRoot);
     this.bundleLoader = new BundleControllerLoader(options.cacheRoot, options.log);
   }
 

package/src/controller-loaders/napi-loader.ts

@@ -106,6 +106,34 @@ export interface NapiLoadResult {
 }
 
 export class NapiControllerLoader {
+  /**
+   * The `.telo` cache root this kernel resolved, or `undefined` when it resolved
+   * none (a memory-rooted entry), in which case cargo's own default is used.
+   *
+   * The build is anchored here for the same reason the Rust kernel's is: one
+   * shared dependency build per workspace instead of one per crate, and — the
+   * load-bearing half — a directory KEYED BY SDK BACKEND. This loader builds a
+   * controller crate with `telorun-sdk/napi` while `telo-rs` builds the very same
+   * crate with `native`, and a plain `cargo build --workspace` builds it with
+   * neither. All three sharing one target directory means each alternation
+   * rebuilds the crate and its dependency tree; before this they were kept apart
+   * only by the accident that this loader took cargo's default.
+   */
+  private readonly cacheRoot?: string;
+
+  constructor(cacheRoot?: string) {
+    this.cacheRoot = cacheRoot;
+  }
+
+  /** `CARGO_TARGET_DIR` for this loader's builds, or `undefined` to leave cargo's
+   *  own resolution alone. Applied to `cargo metadata` as well as `cargo build`,
+   *  since `target_directory` is where the dylib is then looked for — setting it
+   *  on only one of the two would build in one place and search in another. */
+  private targetDirEnv(): Record<string, string | undefined> {
+    const env = hostEnv();
+    if (!this.cacheRoot) return env;
+    return { ...env, CARGO_TARGET_DIR: path.join(this.cacheRoot, "cargo", "napi", "target") };
+  }
   /**
    * Resolve a `pkg:cargo/...` PURL to a controller module instance by building
    * the crate and loading the resulting native addon.
@@ -234,7 +262,11 @@ export class NapiControllerLoader {
     // Read before building: the metadata answers both "where did the dylib
     // land" and "does this crate use the SDK", and the second decides the build
     // flags.
-    const { targetDir, libName, usesSdk } = await resolveCrateMetadata(cratePath, fallbackName);
+    const { targetDir, libName, usesSdk } = await resolveCrateMetadata(
+      cratePath,
+      fallbackName,
+      this.targetDirEnv(),
+    );
 
     try {
       // The backend is selected as a *dependency* feature of the SDK. A crate
@@ -253,7 +285,7 @@ export class NapiControllerLoader {
       await execFileAsync("cargo", ["build", "--release", ...featureArgs], {
         cwd: cratePath,
         maxBuffer: 32 * 1024 * 1024,
-        env: hostEnv(),
+        env: this.targetDirEnv(),
       });
     } catch (err: any) {
       const stderr = err?.stderr ? `\n${err.stderr}` : "";
@@ -331,6 +363,7 @@ const SDK_CRATE_NAME = "telorun-sdk";
 async function resolveCrateMetadata(
   cratePath: string,
   fallbackName: string,
+  env: Record<string, string | undefined>,
 ): Promise<{ targetDir: string; libName: string; usesSdk: boolean }> {
   const result = await execFileAsync("cargo", [
     "metadata",
@@ -339,7 +372,7 @@ async function resolveCrateMetadata(
     "--manifest-path",
     path.join(cratePath, "Cargo.toml"),
     "--no-deps",
-  ], { maxBuffer: 32 * 1024 * 1024, env: hostEnv() });
+  ], { maxBuffer: 32 * 1024 * 1024, env });
   const metadata = JSON.parse(result.stdout);
   const cratePackage = metadata.packages?.find(
     (p: any) => p.manifest_path === path.join(cratePath, "Cargo.toml"),

package/src/controller-loaders/npm-install-root.ts

@@ -0,0 +1,131 @@
+import { createHash } from "crypto";
+import * as fs from "fs/promises";
+import * as path from "path";
+import { hostPlatformTarget } from "../bundle/module-artifact.js";
+import { REALM_COLLAPSE_NAMES } from "./realm.js";
+
+/**
+ * Which npm install root a runner uses, and why that is keyed on the realm
+ * dependency's RELATIVE path rather than on the manifest.
+ *
+ * The root's `package.json` records the kernel-provided realm package as a
+ * `file:` dependency pointing at the running CLI's own copy, and npm rewrites
+ * that into a path RELATIVE to the root — in `package.json`, in
+ * `package-lock.json`, and as the target of the symlink it materializes under
+ * `node_modules`. Once the cache is anchored at the workspace, a second runner
+ * meets that tree and reads a path that resolves elsewhere or nowhere: an
+ * `EMISSINGTARGET` install failure, or a dangling link whose failure surfaces
+ * later at the controller's import. The normal shape is one checkout
+ * bind-mounted into a container (`/home/me/app` on the host, `/app` inside it)
+ * while the developer also runs telo on the host.
+ *
+ * So the key is exactly that relative path, plus the host platform. It is not a
+ * proxy for the problem — it IS the string npm will write into the tree, so two
+ * runners share a root precisely when everything npm records there means the
+ * same thing on both sides, and never otherwise:
+ *
+ * - a different CLI installation (host vs container) → different path → apart;
+ * - the same CLI, workspace mounted at another DEPTH (`/w` vs `/deep/a/b/c/w`)
+ *   → a different number of `..` segments → apart;
+ * - the same CLI, workspace copied to another directory at the same depth
+ *   (`WORKDIR /build` … `COPY --from=build /build /srv`) → identical path → one
+ *   root, so an image finds the tree `telo install` warmed for it;
+ * - a different architecture or libc → apart, since a native controller build
+ *   is not interchangeable.
+ *
+ * Keying on the ENTRY MANIFEST instead was the first attempt, and it cost more
+ * than it bought: it did separate host from container, but it also gave every
+ * manifest in a workspace its own tree — 60 of them after one `pnpm run test`
+ * here — which is the one-repo-one-cache property the workspace-anchored cache
+ * exists for. It also could not tell a `/build` → `/srv` copy from a bind
+ * mount, so it needed a content-keyed alias plus a validity check on top:
+ * machinery this key does not need, because a root it selects is usable by
+ * construction.
+ */
+export async function resolveInstallRoot(
+  npmBase: string,
+  realmPackageRoot: RealmPackageResolver,
+): Promise<string> {
+  return path.join(npmBase, await installRootKey(npmBase, realmPackageRoot));
+}
+
+/** How this kernel resolves a realm package to its own copy. Passed in rather
+ *  than imported: realm resolution belongs to the loader, whose module graph
+ *  this one sits underneath, and a parameter is what lets a test present a
+ *  different CLI's resolution. */
+export type RealmPackageResolver = (name: string) => Promise<string | null>;
+
+/**
+ * The directory name for one (runner, filesystem view, platform) triple.
+ *
+ * Every field is written even when it is empty — an unresolvable realm package,
+ * an undetermined libc — so an absent value and a value that happens to be the
+ * empty string cannot produce one key.
+ */
+async function installRootKey(
+  npmBase: string,
+  realmPackageRoot: RealmPackageResolver,
+): Promise<string> {
+  const host = hostPlatformTarget();
+  const fields = [
+    ...(await realmRelativePaths(npmBase, realmPackageRoot)),
+    host.os ?? "",
+    host.arch ?? "",
+    host.libc ?? "",
+  ];
+  return createHash("sha256").update(fields.join("\0")).digest("hex").slice(0, 32);
+}
+
+/**
+ * Each realm package as npm will record it: relative to the root, in the
+ * declared order so the key does not move with iteration order.
+ *
+ * Measured from the BASE rather than the root, since the root's name is what
+ * this feeds — the two differ by one constant segment. A name this kernel
+ * cannot resolve is recorded as empty rather than skipped, mirroring the
+ * installer, which omits such a dependency from the root instead of failing;
+ * runners that differ only in whether they could resolve it genuinely write
+ * different trees.
+ */
+async function realmRelativePaths(
+  npmBase: string,
+  realmPackageRoot: RealmPackageResolver,
+): Promise<string[]> {
+  const out: string[] = [];
+  for (const name of REALM_COLLAPSE_NAMES) {
+    const resolved = await realmPackageRoot(name);
+    out.push(`${name}=${resolved ? path.relative(npmBase, resolved) : ""}`);
+  }
+  return out;
+}
+
+/** Names what a root was keyed from, for whoever is working out which runner
+ *  wrote which tree. Read by nothing. */
+export const INSTALL_ROOT_MARKER = ".telo-install-root.json";
+
+/**
+ * Write the marker once, when the root is created. Rewriting it on later
+ * installs would only restate what the directory name already fixes, and the
+ * value it carries is the key's own inputs — never an entry manifest, since one
+ * root serves every manifest in the workspace and naming one would name a
+ * coincidence.
+ */
+export async function writeInstallRootMarker(
+  root: string,
+  npmBase: string,
+  realmPackageRoot: RealmPackageResolver,
+): Promise<void> {
+  const target = path.join(root, INSTALL_ROOT_MARKER);
+  try {
+    await fs.access(target);
+    return;
+  } catch {
+    // Absent — this is the run that created the root.
+  }
+  const marker = {
+    realm: await realmRelativePaths(npmBase, realmPackageRoot),
+    ...hostPlatformTarget(),
+  };
+  // A marker nothing reads must never fail an install.
+  await fs.writeFile(target, JSON.stringify(marker, null, 2) + "\n").catch(() => {});
+}

package/src/controller-loaders/npm-loader.ts

@@ -14,6 +14,7 @@ import { tryBuildControllerBundle } from "./bundle-builder.js";
 import { withDirectoryLock } from "../directory-lock.js";
 import { ControllerEnvMissingError } from "./napi-loader.js";
 import { REALM_COLLAPSE_NAMES } from "./realm.js";
+import { resolveInstallRoot, writeInstallRootMarker } from "./npm-install-root.js";
 
 const execFileAsync = promisify(execFile);
 const requireFromHere = createRequire(import.meta.url);
@@ -45,6 +46,21 @@ const PEER_INSTALL_FLAGS: ReadonlyArray<string> =
       ? ["--no-strict-peer-dependencies"]
       : [];
 
+/**
+ * Quiet the installer WITHOUT quieting its failures. `--silent` does both: on
+ * npm 11 a failed install writes nothing at all — not the `ERESOLVE`/`ETARGET`
+ * code, not the offending spec — so the wrapper below could only report that
+ * some install failed, with no cause, for every failure class. `--loglevel`
+ * error keeps the diagnosis and drops the progress chatter, which is the half
+ * that was actually worth suppressing.
+ */
+const QUIET_INSTALL_FLAGS: ReadonlyArray<string> =
+  PACKAGE_MANAGER === "npm"
+    ? ["--loglevel=error", "--no-progress"]
+    : PACKAGE_MANAGER === "pnpm"
+      ? ["--loglevel=error"]
+      : [];
+
 
 /**
  * Tells the dispatcher (and any UI consumer downstream) which branch the
@@ -247,7 +263,10 @@ export class NpmControllerLoader {
       );
     }
     const entryUrlStr = this.entryUrl;
-    const installRoot = this.installRootOverride ?? computeInstallRoot(entryUrlStr);
+    // The BASE holds one root per runner — per filesystem view of the realm
+    // package and per platform — shared by every manifest in the workspace.
+    const installBase = this.installRootOverride ?? computeInstallRoot(entryUrlStr);
+    const installRoot = await resolveInstallRoot(installBase, resolveKernelPackageRoot);
 
     // Build the install-root package.json: kernel-runtime deps as `file:` refs
     // pointing at the kernel-side realpath. Modules declare these names as
@@ -328,6 +347,9 @@ export class NpmControllerLoader {
           2,
         ) + "\n",
       );
+      // Names what this hashed directory was keyed from. Written before the
+      // install so a root that fails to populate still says whose it is.
+      await writeInstallRootMarker(installRoot, installBase, resolveKernelPackageRoot);
       // Announced here rather than at the top of the resolve: everything above
       // this line is a fast path that reuses the existing tree.
       await report?.("npm-install");
@@ -335,7 +357,7 @@ export class NpmControllerLoader {
         "install",
         "--no-audit",
         "--no-fund",
-        "--silent",
+        ...QUIET_INSTALL_FLAGS,
         ...PEER_INSTALL_FLAGS,
       ]);
       await fs.writeFile(stateFile, JSON.stringify({ rootHash: newHash }, null, 2) + "\n");
@@ -476,11 +498,21 @@ export class NpmControllerLoader {
         // Past every re-check: the package manager is about to run for real,
         // which is the wait a caller wants reported.
         await report?.("npm-install");
+        // The installer re-resolves the ROOT's whole dependency set, not just
+        // the alias being added, so one dead record left by another app fails
+        // an install that has nothing to do with it — and the root is shared
+        // workspace-wide, so that blast radius is every app. Prune here rather
+        // than only on a realm change (`materializeInstallRoot`), which a root
+        // that goes stale afterwards never reaches. Placed past every re-check
+        // so it costs 2 stats per recorded dep only on the branch that was
+        // already going to spawn the package manager, never on a cache hit.
+        const pruned = await pruneDeadControllerDeps(installRoot);
+        if (pruned) this.rootDeps = pruned;
         await runPackageManager(installRoot, [
           "install",
           "--no-audit",
           "--no-fund",
-          "--silent",
+          ...QUIET_INSTALL_FLAGS,
           ...PEER_INSTALL_FLAGS,
           "--save",
           // `<alias>@<source-spec>` installs the package under the alias folder
@@ -650,9 +682,15 @@ async function runPackageManager(cwd: string, args: string[]): Promise<void> {
           `TELO_PKG_MANAGER to a different binary name.`,
       );
     }
-    const stderr = err?.stderr ? `\n${err.stderr}` : "";
+    // Both streams: npm writes its diagnosis to stderr, pnpm and bun put parts
+    // of theirs on stdout. Reporting one of them is how a real cause becomes a
+    // failure with no message.
+    const output = [err?.stderr, err?.stdout]
+      .map((s) => (typeof s === "string" ? s.trim() : ""))
+      .filter(Boolean)
+      .join("\n");
     throw new Error(
-      `[telo] '${PACKAGE_MANAGER} ${args.join(" ")}' failed in ${cwd}:${stderr}`,
+      `[telo] '${PACKAGE_MANAGER} ${args.join(" ")}' failed in ${cwd}:${output ? `\n${output}` : ""}`,
     );
   }
 }
@@ -835,6 +873,43 @@ async function liveControllerDeps(
   return live;
 }
 
+/**
+ * Rewrite the install root's `package.json` with its dead controller records
+ * dropped, returning the surviving map — or null when nothing had to change,
+ * so the common case writes no file.
+ *
+ * Realm-collapse names are never candidates: they are wired in by
+ * `materializeInstallRoot` from the kernel's own resolved paths and are the one
+ * thing whose absence must be reported rather than repaired away.
+ *
+ * Must be called under the install root's lock — it is a read-modify-write of a
+ * file every kernel sharing the root writes to.
+ */
+async function pruneDeadControllerDeps(
+  installRoot: string,
+): Promise<Record<string, string> | null> {
+  const deps = await readPackageDeps(installRoot);
+  if (!deps) return null;
+  const realm = new Set<string>(REALM_COLLAPSE_NAMES);
+  const controllers: Record<string, string> = {};
+  const preserved: Record<string, string> = {};
+  for (const [name, spec] of Object.entries(deps)) {
+    if (realm.has(name)) preserved[name] = spec;
+    else controllers[name] = spec;
+  }
+  const live = await liveControllerDeps(controllers, installRoot);
+  if (Object.keys(live).length === Object.keys(controllers).length) return null;
+
+  const packageJsonPath = path.join(installRoot, "package.json");
+  const pkg = JSON.parse(await fs.readFile(packageJsonPath, "utf8"));
+  const merged = { ...live, ...preserved };
+  await fs.writeFile(
+    packageJsonPath,
+    JSON.stringify({ ...pkg, dependencies: merged }, null, 2) + "\n",
+  );
+  return merged;
+}
+
 async function readPackageDeps(installRoot: string): Promise<Record<string, string> | null> {
   try {
     const text = await fs.readFile(path.join(installRoot, "package.json"), "utf8");
@@ -1075,6 +1150,10 @@ export const __testing__ = {
   resolveExportTargetValue,
   tryResolveFile,
   computeInstallRoot,
+  /** The root this kernel uses within the base derived from `entryUrl` — what
+   *  a test asserting on-disk layout needs, since the base alone is not it. */
+  installRootIn: (entryUrl: string) =>
+    resolveInstallRoot(computeInstallRoot(entryUrl), resolveKernelPackageRoot),
   EXPORTS_MAX_DEPTH,
   DEFAULT_RESOLVER_CONDITIONS,
   REALM_COLLAPSE_NAMES,

package/src/index.ts

@@ -10,6 +10,7 @@ export {
   writeManifestCache,
 } from "./manifest-sources/local-manifest-cache-source.js";
 export { MemorySource } from "./manifest-sources/memory-source.js";
+export { WORKSPACE_FILENAME, findWorkspaceRoot, realPath } from "./workspace-marker.js";
 export type { Transport } from "./transports/transport.js";
 export { RegistryTransport } from "./transports/registry-transport.js";
 export { OciTransport } from "./transports/oci/oci-transport.js";