@volter/supercode-orchestrator 0.5.126 → 0.5.128

package/bin/runtime.mjs

@@ -480,7 +480,7 @@ async function appsMain(argv) {
     }
     const program = rh2Program();
     if (!program) {
-      process.stderr.write('apps mcp: no rh2 CLI in an absolute PATH folder or ~/.local/bin\n');
+      process.stderr.write(`apps mcp: rh2 is not on PATH (searched ${process.env.PATH || 'an empty PATH'})\n`);
       process.exit(127);
     }
     const child = spawn(program, ['mcp'], { stdio: 'inherit', env: { ...process.env, ...rh2AgentEnv(record) } });

package/board/ci.mjs

@@ -411,12 +411,20 @@ export async function inspectCompletionEvidence(board, id, entry, payload = {},
     // Merged source is immutable and needs no surviving workspace. Resolve an
     // unmerged candidate's checkout as before; a broken legacy path never
     // prevents a verdict on already merged commits.
-    const mergedOnly = urls.length && (await Promise.all(urls.map(readPullRequest))).every(pr => pr.state === 'MERGED');
+    const read = await Promise.all(urls.map(readPullRequest));
+    const mergedOnly = urls.length && read.every(pr => pr.state === 'MERGED');
     const own = mergedOnly ? null : await repositoryWorkspace(board, id);
     if (!own && !urls.length) {
       return state;
     }
-    if (!own && !mergedOnly) throw new Error('An unmerged PR candidate needs a resolved repository workspace.');
+    // A card with no repository of its own (scratch) is reviewed through the branches it registered: each unmerged PR
+    // on one of them (or on its wt/<card> branch) is read at its pushed head, and needs no checkout to exist here.
+    if (!own && !mergedOnly) {
+      const registered = registeredBranches(board, id);
+      const declared = (pr) => namedWorkBranch(id, pr.headRefName) || registered.some((r) => r.branch === pr.headRefName && r.repository.toLowerCase() === repositoryOf(pr.url).toLowerCase());
+      const stray = read.find((pr) => pr.state !== 'MERGED' && !declared(pr));
+      if (stray) throw new Error(`An unmerged PR candidate needs a repository workspace: ${stray.url} (${stray.headRefName}) is on no branch the card or its tasks declare; register it with create "<what>" --subtask-of ${id} --workspace worktree:${repositoryOf(stray.url)} --branch ${stray.headRefName}`);
+    }
     // A verdict with no requested PR (a scratch arc) keeps its own contract. An arc's review
     // always names every opened PR it changed, independent of completion_ci.
     if (stage === 'review_verdict' && !asked && !urls.length) return state;
@@ -452,7 +460,7 @@ async function verifyPullRequest(board, id, entry, own, url, supplied, stage) {
   // card's own checkout, and this machine's checkout of the PR's branch when it keeps one, must also hold that head
   // with nothing uncommitted. A card on another machine is reviewed at its pushed head: its checkout is not read from here.
   const observed = await readPullRequest(url);
-  const path = !own?.here || observed.state === 'MERGED' ? null : await originOf(own.path) === repository && await run('git', ['branch', '--show-current'], own.path) === observed.headRefName ? own.path : await branchCheckout(board, id, repository, observed.headRefName);
+  const path = observed.state === 'MERGED' || (own && !own.here) ? null : !own ? await branchCheckout(board, id, repository, observed.headRefName) : await originOf(own.path) === repository && await run('git', ['branch', '--show-current'], own.path) === observed.headRefName ? own.path : await branchCheckout(board, id, repository, observed.headRefName);
   // A PR merged before its review (an outage fix landed first) is still reviewed: its head is fixed for good, so the
   // verdict is recorded on that head, and nothing about a worktree or its base can move under it any more.
   const merged = observed.state === 'MERGED';

package/gates.mjs

@@ -146,11 +146,16 @@ export async function runJobScript(profile, scriptPath, workdir = null, { env =
   });
 }
 
+// A signal that aborts `ms` from now, for use inside AbortSignal.any(). Its timer holds its controller, so it fires
+// whatever the garbage collector does. AbortSignal.timeout() inside AbortSignal.any() does not on Node 23.9: the timeout
+// signal is collected, the combined signal never aborts, and a request to a server that went quiet never ends.
+const timeoutSignal=ms=>{const controller=new AbortController(),timer=setTimeout(()=>controller.abort(new DOMException('The operation was aborted due to timeout','TimeoutError')),ms);timer.unref?.();return controller.signal;};
+
 /** `cron/monitor.py` `_fetch_monitor_url`: a bounded GET, the body as text. */
 async function fetchMonitorUrl(url, signal = null) {
   if (!/^https?:\/\//i.test(url)) return { ok: false, output: `monitor_url must be http(s): ${JSON.stringify(url)}` };
   try {
-    const res = await fetch(url, { headers: { 'user-agent': 'hermes-cron-monitor' }, signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(URL_TIMEOUT_MS)]) : AbortSignal.timeout(URL_TIMEOUT_MS) });
+    const res = await fetch(url, { headers: { 'user-agent': 'hermes-cron-monitor' }, signal: signal ? AbortSignal.any([signal, timeoutSignal(URL_TIMEOUT_MS)]) : AbortSignal.timeout(URL_TIMEOUT_MS) });
     if (!res.ok) return { ok: false, output: `monitor_url fetch failed: HTTP Error ${res.status}: ${res.statusText}` };
     const reader = res.body?.getReader();
     const chunks = [];

package/installed-apps.mjs

@@ -5,7 +5,6 @@
 // token, and the channel stops; `remove` forgets the record here.
 import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
 import { delimiter, isAbsolute, join } from 'node:path';
-import { homedir } from 'node:os';
 
 export const APPS_DIR = 'apps';
 /** The apps this orchestrator can host, by name: what each installs and which adapter it attaches. */
@@ -65,12 +64,12 @@ function rh2Origin(origin) {
   return /^https:\/\/|^http:\/\/(localhost|127\.0\.0\.1)(:|\/|$)/.test(String(origin ?? ''));
 }
 
-/** The `rh2` CLI, by absolute path: in an absolute folder on this process's PATH, else where RH2's installer puts it
- * (`~/.local/bin`); null when neither has it. A relative PATH entry is never searched (a session's working directory
- * may be a checkout that carries its own `rh2`, which would then run with the agent's token), and neither is a bare
- * name, which the OS would look up the same way. */
+/** The `rh2` CLI, by absolute path: the first in an absolute folder on this process's PATH, as the person's shell
+ * finds it; null when PATH has none. No install location is assumed. A relative PATH entry is never searched (a
+ * session's working directory may be a checkout that carries its own `rh2`, which would then run with the agent's
+ * token), and neither is a bare name, which the OS would look up the same way. */
 export function rh2Program() {
-  const folders = [...String(process.env.PATH ?? '').split(delimiter), join(homedir(), '.local', 'bin')].filter((folder) => folder && isAbsolute(folder));
+  const folders = String(process.env.PATH ?? '').split(delimiter).filter((folder) => folder && isAbsolute(folder));
   return folders.map((folder) => join(folder, 'rh2')).find((file) => existsSync(file)) ?? null;
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/supercode-orchestrator",
-  "version": "0.5.126",
+  "version": "0.5.128",
   "type": "module",
   "description": "The orchestrator runtime over the Volter Harness ontology: one typed operational model whose folder is its serialization, read and written through the harness orchestration doors (docs/ORCHESTRATOR-IR.md)",
   "exports": {
@@ -25,7 +25,7 @@
   },
   "dependencies": {
     "@volter/supercode-harness-sdk": "^0.3.60",
-    "@volter/teams": "0.2.50",
+    "@volter/teams": "0.2.51",
     "@volter/ztrack": "^2.4.23",
     "yaml": "^2.9.0"
   },