gm-plugkit 2.0.1552 → 2.0.1554

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1552",
+  "version": "2.0.1554",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/supervisor.js

@@ -31,6 +31,8 @@ const POLL_INTERVAL_MS = 10_000;
 const STATUS_STALE_MS = 30_000;
 const MAX_RESTART_BURST = 5;
 const RESTART_WINDOW_MS = 60_000;
+const BURST_BACKOFF_MS = 60_000;
+const VERSION_DRIFT_COOLDOWN_MS = 60_000;
 
 function logEvent(event, fields) {
   try {
@@ -146,6 +148,7 @@ function readShutdownReason() {
 }
 
 let lastSpawnedAt = 0;
+let lastVersionDriftActionAt = 0;
 let restartTimestamps = [];
 let currentChildPid = null;
 let currentBootReason = 'initial';
@@ -155,15 +158,18 @@ function spawnWatcher(bootReason) {
   restartTimestamps.push(Date.now());
   restartTimestamps = restartTimestamps.filter(t => Date.now() - t < RESTART_WINDOW_MS);
   if (restartTimestamps.length > MAX_RESTART_BURST) {
-    logEvent('supervisor.giving-up', {
+    logEvent('supervisor.restart-burst-backoff', {
       reason: 'restart-burst-exceeded',
       restarts_in_window: restartTimestamps.length,
       window_ms: RESTART_WINDOW_MS,
       max: MAX_RESTART_BURST,
-      severity: 'critical',
+      backoff_ms: BURST_BACKOFF_MS,
+      severity: 'warn',
     });
-    writeSupervisorStatus('giving-up', { reason: 'restart-burst-exceeded' });
-    process.exit(2);
+    writeSupervisorStatus('backoff', { reason: 'restart-burst-exceeded', backoff_ms: BURST_BACKOFF_MS });
+    restartTimestamps = [];
+    setTimeout(() => spawnWatcher('post-burst-backoff'), BURST_BACKOFF_MS);
+    return;
   }
 
   const primaryWrapper = path.join(os.homedir(), '.gm-tools', 'plugkit-wasm-wrapper.js');
@@ -337,10 +343,15 @@ function checkWatcherHealth() {
   // On that drift, evict the stale cached wasm so the next bootstrap fails isReady() and
   // redownloads the correct build, then recycle the child to load it.
   if (status.version_drifted === true) {
+    if (now - lastVersionDriftActionAt < VERSION_DRIFT_COOLDOWN_MS) {
+      return;
+    }
+    lastVersionDriftActionAt = now;
     logEvent('supervisor.version-drift', {
       watcher_pid: currentChildPid,
       instance_version: status.instance_version || null,
       file_version: status.file_version || null,
+      cooldown_ms: VERSION_DRIFT_COOLDOWN_MS,
       severity: 'critical',
     });
     try {