mirror-mind 0.39.0 → 0.39.1

package/.pi/extensions/mirror-logger.ts

@@ -43,6 +43,14 @@
  * it supplies the Operating Instructions (`AGENTS.md`) itself (D13), and says
  * so once when `mirror` is not on the PATH.
  *
+ * The `node` it runs the core on is resolved as the hook wrappers resolve
+ * theirs (CR191): `MIRROR_NODE`, the PATH, the Node that installed the
+ * package, then nvm, Homebrew, and `/usr/local`. A GUI-launched Pi, or one from
+ * a window older than the Node install, has none on its PATH. When nothing
+ * resolves the session says so once, names the fix, and writes one line to
+ * `<mirror home>/hooks.log`, where `runtime diagnose` reads it; it spawns
+ * nothing, and Pi stays up.
+ *
  * External skill prep note:
  * Pi reads installed external skills from
  *   ~/.mirror-minds/<user>/runtime/skills/pi/extensions.json
@@ -52,7 +60,7 @@
 import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
 import { accessSync, appendFileSync, closeSync, constants, existsSync, mkdirSync, openSync, readdirSync, readFileSync, realpathSync, statSync } from "node:fs";
 import { homedir } from "node:os";
-import { delimiter, dirname, join } from "node:path";
+import { delimiter, dirname, join, posix, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
@@ -180,6 +188,95 @@ function _mirrorOnPath(): string | null {
 	return null;
 }
 
+/**
+ * Where a hook wrapper looks for Node after `MIRROR_NODE`, the PATH, and the
+ * Node beside the entry it runs (CR191). The same list as the core's
+ * `HOOK_NODE_CANDIDATES` (`ts/src/runtime/diagnose.ts`), which this file
+ * cannot import: it is a thin dispatcher and duplicates the contracts it
+ * needs, as it does the homes-root names above. `mirrorLoggerExtension.test.ts`
+ * fails if the two lists differ, as `hooks.test.ts` does for the wrappers.
+ */
+export const NODE_CANDIDATES: readonly string[] = [
+	"$HOME/.nvm/current/bin/node",
+	"/opt/homebrew/bin/node",
+	"/usr/local/bin/node",
+];
+
+/** What `resolveNode` found at a path it probed. */
+export type PathKind = "executable" | "directory" | "not executable" | "missing";
+
+/** An executable FILE: a directory passes `X_OK` on its own. */
+function pathKind(path: string): PathKind {
+	try {
+		if (statSync(path).isDirectory()) return "directory";
+	} catch {
+		return "missing";
+	}
+	try {
+		accessSync(path, constants.X_OK);
+		return "executable";
+	} catch {
+		return "not executable";
+	}
+}
+
+export interface NodeResolution {
+	/** The Node to run the core on, by its path; null when none resolves. */
+	node: string | null;
+	/** A `MIRROR_NODE` the search would not use, and why: the caller says so once. */
+	rejected: { value: string; reason: string } | null;
+}
+
+/**
+ * The Node the core runs on, in the hook wrappers' order (CR191): `MIRROR_NODE`
+ * when it is an absolute path to an executable file; `node` on the PATH; the
+ * Node beside the tree this file ships in, which for a global install is the
+ * `<prefix>/bin/node` that installed the package (and nothing for a checkout);
+ * then `NODE_CANDIDATES`. Not `process.execPath`: Pi may run on a Node older
+ * than the core needs. On Windows the PATH is the last place looked.
+ *
+ * A relative `MIRROR_NODE` is refused here, though the wrappers accept one: it
+ * would resolve against whatever project Pi was opened in.
+ *
+ * The absolute candidates make "nothing anywhere" a fact about the host, so
+ * under `MEMORY_ENV=test` only, `MIRROR_TEST_NODE_SEARCH_ROOT` re-roots them
+ * and the prefix candidate. A production session never reads it.
+ */
+export function resolveNode(
+	env: Record<string, string | undefined>,
+	treeRoot: string,
+	kindOf: (path: string) => PathKind = pathKind,
+	platform: NodeJS.Platform = process.platform,
+): NodeResolution {
+	const paths = platform === "win32" ? win32 : posix;
+	let rejected: NodeResolution["rejected"] = null;
+	const explicit = (env.MIRROR_NODE ?? "").trim();
+	if (explicit !== "") {
+		if (!paths.isAbsolute(explicit)) rejected = { value: explicit, reason: "relative" };
+		else {
+			const kind = kindOf(explicit);
+			if (kind === "executable") return { node: explicit, rejected: null };
+			rejected = { value: explicit, reason: kind === "directory" ? "a directory" : kind };
+		}
+	}
+	const name = platform === "win32" ? "node.exe" : "node";
+	for (const dir of (env.PATH ?? "").split(paths.delimiter).filter(Boolean)) {
+		const candidate = paths.join(dir, name);
+		if (kindOf(candidate) === "executable") return { node: candidate, rejected };
+	}
+	if (platform === "win32") return { node: null, rejected };
+	const searchRoot = env.MEMORY_ENV === "test" ? (env.MIRROR_TEST_NODE_SEARCH_ROOT ?? "") : "";
+	const home = env.HOME ?? homedir();
+	const candidates = [
+		paths.resolve(treeRoot, "..", "..", "..", "bin", "node"),
+		...NODE_CANDIDATES.map((candidate) => candidate.replace("$HOME", home)),
+	].map((candidate) => (searchRoot ? paths.join(searchRoot, candidate) : candidate));
+	for (const candidate of candidates) {
+		if (kindOf(candidate) === "executable") return { node: candidate, rejected };
+	}
+	return { node: null, rejected };
+}
+
 /** True when `path` is the same file as this tree's AGENTS.md (symlinks resolved). */
 function _isOurAgentsFile(path: string): boolean {
 	try {
@@ -277,6 +374,41 @@ export default function (pi: ExtensionAPI) {
 	 */
 	const FRONT_DOOR_ARGV = [MIRROR_BIN];
 
+	/**
+	 * The Node every front-door process runs on (CR191), or null when none
+	 * resolves: the caller spawns nothing and logs why. A `MIRROR_NODE` the search
+	 * refused is said once per registration, with the reason, so the log is
+	 * enough to fix it; the search went on without it, as the wrappers' does.
+	 */
+	let mirrorNodeWarned = false;
+	function nodeFor(): string | null {
+		const found = resolveNode(process.env, TREE_ROOT);
+		if (found.rejected && !mirrorNodeWarned) {
+			mirrorNodeWarned = true;
+			log("WARN", `MIRROR_NODE=${found.rejected.value} is ${found.rejected.reason}; searching the PATH and the usual places instead`);
+		}
+		return found.node;
+	}
+
+	/** The line said once at session start when no Node resolves; also the log's and, in short, hooks.log's. */
+	const NO_NODE_NOTICE =
+		"Mirror: `node` is not on the PATH Pi inherited, nor in the usual places — set MIRROR_NODE=/path/to/node (Node 24 or later) where Pi is launched. Mirror will not log this session.";
+
+	/**
+	 * One line in `<mirror home>/hooks.log`, in the format the wrappers write and
+	 * `hookFailureFindings` parses (`<stamp> <runtime>:<hook>: <reason>`), so
+	 * `runtime diagnose` reports it for seven days. Same directory as this log,
+	 * mode 0600 as `noteHookFailure` writes it.
+	 */
+	function noteHookFailure(hook: string, reason: string): void {
+		try {
+			mkdirSync(MIRROR_DIR, { recursive: true });
+			appendFileSync(join(MIRROR_DIR, "hooks.log"), `${new Date().toISOString()} pi:${hook}: ${reason}\n`, { mode: 0o600 });
+		} catch {
+			// A hook cannot report that it could not report.
+		}
+	}
+
 	function log(level: string, msg: string): void {
 		try {
 			const ts = new Date().toISOString();
@@ -288,11 +420,16 @@ export default function (pi: ExtensionAPI) {
 	}
 
 	function runMirrorBackground(args: string[], label: string): void {
+		const node = nodeFor();
+		if (node === null) {
+			log("ERROR", `${label} skipped: no node (see the session's notice)`);
+			return;
+		}
 		let logFd: number | undefined;
 		try {
 			mkdirSync(MIRROR_DIR, { recursive: true });
 			logFd = openSync(LOG_FILE, "a");
-			const child = spawn("node", [...FRONT_DOOR_ARGV, ...args], {
+			const child = spawn(node, [...FRONT_DOOR_ARGV, ...args], {
 				cwd: process.cwd(),
 				stdio: ["ignore", logFd, logFd],
 				// Windows: a detached console child materializes as a visible
@@ -303,8 +440,24 @@ export default function (pi: ExtensionAPI) {
 				detached: process.platform !== "win32",
 				windowsHide: true,
 			});
+			// A child that cannot start reports through 'error', not by throwing,
+			// so the catch below never sees it; without a listener the event is an
+			// uncaught exception and Pi exits ("pi exiting due to uncaughtException:
+			// Error: spawn node ENOENT", PR #47). The path was an executable file a
+			// moment ago (`resolveNode`), so this is the record of one that vanished
+			// in between, or of any other start failure. A logging failure must never
+			// break anything: log it and move on.
+			child.on("error", (error) => {
+				log("ERROR", `${label} failed to start: ${error.message.slice(0, 500)}`);
+			});
+			// Its stdout and stderr are in this log already; the exit code says
+			// whether to read them (a Node too old for the core exits before it runs).
+			child.on("exit", (code, signal) => {
+				if (code !== 0) log("ERROR", `${label} exited ${code ?? `on ${signal}`}`);
+			});
 			child.unref();
-			log("INFO", `${label} started in detached background process ${child.pid ?? "(unknown pid)"}`);
+			// No pid, no process: the 'error' above is on its way.
+			if (child.pid !== undefined) log("INFO", `${label} started in detached background process ${child.pid}`);
 		} catch (err: unknown) {
 			const message = err instanceof Error ? err.message : String(err);
 			log("ERROR", `${label} failed: ${message.slice(0, 500)}`);
@@ -331,10 +484,15 @@ export default function (pi: ExtensionAPI) {
 	}
 
 	async function runMirror(args: string[]): Promise<string> {
+		const node = nodeFor();
+		if (node === null) {
+			log("ERROR", `runMirror skipped [${args.slice(0, 2).join(" ")}]: no node (see the session's notice)`);
+			return "";
+		}
 		try {
 			const delay = testFrontDoorDelayMs();
 			if (delay > 0) await new Promise((resolve) => setTimeout(resolve, delay));
-			const result = await pi.exec("node", [...FRONT_DOOR_ARGV, ...args], {
+			const result = await pi.exec(node, [...FRONT_DOOR_ARGV, ...args], {
 				timeout: 30_000,
 			});
 			const stderr = (result?.stderr ?? "").trim();
@@ -682,6 +840,14 @@ export default function (pi: ExtensionAPI) {
 			log("WARN", line);
 			if (ctx.hasUI) ctx.ui.notify(line, "warning");
 		}
+		// Likewise when no Node resolves (CR191): once, visibly, naming the fix,
+		// and one line where `runtime diagnose` reads. The calls below then skip
+		// themselves; a later one that finds nothing logs only.
+		if (nodeFor() === null) {
+			log("WARN", NO_NODE_NOTICE);
+			if (ctx.hasUI) ctx.ui.notify(NO_NODE_NOTICE, "warning");
+			noteHookFailure("session-start", "node not found on PATH or in the usual places; Mirror is off for this session. Set MIRROR_NODE.");
+		}
 		const sessionId = ctx.sessionManager.getSessionFile() ?? null;
 		const openArgs = ["conversation-logger", "session-start", "--fast", "--welcome", "--format", "json"];
 		if (sessionId) openArgs.push("--session-id", sessionId);

package/docs/releases/index.md

@@ -12,6 +12,7 @@ Future release notes should use the structure defined in [Release Notes](../proc
 
 ## Releases
 
+- [v0.39.1 — Pi Finds Its Node, or Says So](v0.39.1.md) — patch release of PR #47 (@rodrigoimmaginario) and CR191: a Pi opened where `node` is not on the PATH no longer exits; the Pi extension resolves Node where the hook wrappers look, so a global install needs nothing configured; when no Node resolves, one warning names the fix and `runtime diagnose` reports the `hooks.log` line. No migration.
 - [v0.39.0 — The Core as a Library](v0.39.0.md) — minor release of CV24's first eight Delivery Stories: `mirror-mind/desktop`, a library entry through which a host such as Mirror Desktop 0.3 embeds this core; calls for a home's migration state, Conversations, sidebar reads, home creation, migration on request, Mirror's context, learning from open Conversations, and Journey administration, each with an explicit path and no environment. The new `exports` field closes every other deep import. No migration.
 - [v0.38.1 — The Refusal Names the Way Out](v0.38.1.md) — patch release of three Change Requests, CR185, CR186, and CR187: a package with no home configured names the homes it finds and the `mirror init <name>` that selects one, and `init` adopts a home that already exists; a missing or refused OpenRouter key is one line that names the file, before anything is touched; a `stable` clone ahead only by `main`'s commits is told that `stable` is behind it, not to push or reset. No migration.
 - [v0.38.0 — The Model Behind the Memories, Chosen by Measurement](v0.38.0.md) — minor release closing CV9.DS9: the model behind memories, tasks, titles, summaries, tags, reception, journal, shadow, and consolidation is Claude Haiku 5.5 at reasoning off, chosen on the eval suite with reasoning on and off and on 24 of the owner's own conversations ranked blind, where it came first on 16 of 26 surfaces. Every extraction-pin call can carry a reasoning effort, and a pin carries its own default. With CR180, summaries open with their subject, every lifecycle prompt sees the owner's name, and a framed opening is written once more. Release gate 70 of 70 probes. Rollback is one env line. No migration.

package/docs/releases/v0.39.0.md

@@ -32,6 +32,8 @@ digest: >
 - **Breaking for deep imports only.** The package now declares `exports` with `./desktop` and
   `./package.json`. Any other `import "mirror-mind/…"` path that resolved before no longer does.
   The `mirror` and `mirror-hook` bins are unaffected.
+- **A Windows package install can update itself** (PR #46 by @rodrigoimmaginario, CR189;
+  *added on 2026-10-31*). An earlier version needs one manual install to get here; see Upgrading.
 - No migration, and no model or prompt change, so the model-behavior release gate does not apply.
 
 ## Where We Started
@@ -87,6 +89,32 @@ Existing code changed only where the entry needed it: the loader, three exported
 required), and `package.json`. No existing test changed. The npm smoke installs the package and
 imports the entry from a host project for DS1 to DS5.
 
+*Added on 2026-10-31:* this release also carries one change outside CV24, merged to `main` the
+day before and missing from this note when it was published, so the paragraph above covers CV24
+only. PR #46 (CR189, by @rodrigoimmaginario) runs the package update's `npm install -g` from the
+parent of `node_modules` instead of from inside the package. npm renames the package's directory
+aside before it lays down the new version, and Windows refuses to rename a directory a process is
+running in, so on Windows `runtime update` failed at apply with `EBUSY` every time. Nothing
+changes on macOS or Linux. See Upgrading.
+
+## Upgrading
+
+*Added on 2026-10-31.* Everyone updates as usual:
+
+```bash
+mirror runtime update          # or: npm install -g mirror-mind
+```
+
+On Windows, a package install of an earlier version cannot install this one itself: its
+`runtime update` fails at apply with `EBUSY`. Once, by hand, from any directory other than the
+package's own:
+
+```bash
+npm install -g mirror-mind@latest
+```
+
+From then on `mirror runtime update` works.
+
 ## Conscious Exclusions
 
 - **Renaming a Journey's slug.** The slug keys Conversations, memories and tasks; renaming it is a

package/docs/releases/v0.39.1.md

@@ -0,0 +1,109 @@
+---
+digest: >
+  v0.39.1 is a patch release about one failure: a Pi opened where `node` is not on the
+  PATH, which a desktop launch or a window older than the Node install gives it. Through
+  v0.39.0 that Pi exited at startup with `spawn node ENOENT`. PR #47 (Rodrigo Immaginario)
+  keeps it up, and CR191 makes the Pi extension find Node where the hook wrappers already
+  look, so a machine with a global install needs nothing configured; when no Node resolves,
+  the session says so once, with the fix, and `runtime diagnose` can see it. No migration,
+  and no model or prompt change.
+---
+
+# v0.39.1 — Pi Finds Its Node, or Says So
+
+**Date:** 2026-11-02
+
+## Highlights
+
+- **A Pi opened without `node` on its PATH no longer exits**
+  ([PR #47](https://github.com/mirror-mind-ai/mirror/pull/47), by @rodrigoimmaginario). The
+  extension's detached maintenance process had no `'error'` listener, so a `node` that
+  could not start was an uncaught exception and Pi went down with it. It is now logged.
+- **The Pi extension resolves Node the way the hook wrappers do**
+  ([CR191](../project/refinement/rs010-cv22-oracle-and-port-hygiene/cr191-the-pi-extension-cannot-find-node-where-the-hook-wrappers-can.md)):
+  `MIRROR_NODE`, the PATH, the Node that installed the package (`<prefix>/bin/node`), then
+  `~/.nvm/current/bin`, `/opt/homebrew/bin`, `/usr/local/bin`. On a machine with a global
+  install this needs no configuration: the session that used to crash opens as usual.
+- **When no Node resolves, the failure reaches someone.** Pi stays up, shows one warning at
+  session start that names the fix (`MIRROR_NODE=/path/to/node`, Node 24 or later), and
+  writes one line to `<mirror home>/hooks.log`, where `mirror runtime diagnose` reports it
+  for seven days as `hook_failures_recorded`, as it does for the other runtimes' hooks.
+- **A `MIRROR_NODE` the extension will not use is warned once, with the reason**: missing, a
+  directory, not executable, or relative. The search goes on without it.
+- No migration, and no model or prompt change.
+
+## Where We Started
+
+On 2026-10-16 a Pi opened from a terminal window whose PATH predated the Node install
+exited at once:
+
+```text
+pi exiting due to uncaughtException:
+Error: spawn node ENOENT
+  spawnargs: [ '…/node_modules/mirror-mind/bin/mirror.js', 'conversation-logger', 'session-maintenance' ]
+```
+
+The same happens wherever `node` is not on the PATH Pi inherited, and `runtime diagnose`
+had long named that the usual case for a runtime launched from the desktop: `node` lives
+under nvm or Homebrew, not where a GUI looks. The hook wrappers the other runtimes use
+were built for exactly this. They search the usual places and record a failure in
+`hooks.log`. The Pi extension, which runs no wrapper, knew only the bare name `node`.
+
+Rodrigo Immaginario's PR #47 fixed the crash: the listener, and `MIRROR_NODE` honored by
+the extension as the wrappers honor it. Reviewed through four lenses on 2026-11-01, it was
+merged as it was. The review also showed what it left: without `MIRROR_NODE`, that Pi now
+ran with Mirror silently absent, no welcome card, no logging, no context, and a line in a
+file no one is pointed at. That is the failure the wrappers' silence-is-forbidden rule was
+written against, and CR191 is its answer for Pi.
+
+## What Changed
+
+**One resolver, the wrappers' order (CR191).** The extension resolves Node itself, in the
+same order the wrappers use, taking only an executable file: `MIRROR_NODE`, then `node` on
+each PATH entry, then the `bin/` of the prefix the package is installed under, three
+directories up from the tree the extension ships in, which is the Node that installed the
+package, then nvm, Homebrew, `/usr/local`. The candidate list is the core's
+`HOOK_NODE_CANDIDATES`, duplicated in the extension because it imports no core module, and a
+test fails if the two ever differ, as one already did for the wrappers. On Windows the
+search stops after the PATH, as before.
+
+**Nothing found: no spawn, one notice, one line.** When no Node resolves, no front-door
+process is attempted: each call logs that it was skipped. At session start, the extension
+says so once, the way it already says `mirror` is not on the PATH:
+
+```text
+Mirror: `node` is not on the PATH Pi inherited, nor in the usual places — set MIRROR_NODE=/path/to/node (Node 24 or later) where Pi is launched. Mirror will not log this session.
+```
+
+and writes one line to `hooks.log` in the wrappers' format, `pi:session-start: node not
+found on PATH or in the usual places; …`, which `runtime diagnose` counts.
+
+**The log tells one story.** A child that did not start is not logged as started; one that
+exits non-zero leaves its code beside its own output. PR #47's listener stays as the record
+of a file that vanished between the check and the spawn.
+
+Validated against Pi 1.5.0 with `PATH=/usr/bin:/bin`, the incident's configuration: the
+session opened through `/opt/homebrew/bin/node` with nothing configured; a bad
+`MIRROR_NODE` was warned once; with no Node anywhere, Pi stayed up, the warning was on
+screen, and `runtime diagnose` reported the `hooks.log` line.
+
+## Conscious Exclusions
+
+- The hook wrappers and the MCP locator still accept a relative `MIRROR_NODE`; the Pi
+  extension refuses one, since it would resolve against whatever project Pi was opened in.
+  Whether the family follows is a separate decision.
+- A "Node too old" message with the version, as the wrappers print: the exit code and the
+  loader's own output are in the log.
+- Windows candidates beyond `MIRROR_NODE` and the PATH.
+
+## Upgrading
+
+```bash
+mirror runtime update
+```
+
+A Pi session running the previous extension keeps it until Pi restarts.
+
+## Next Horizon
+
+CR190, captured this week, and the open RS010 backlog. CV24 continues on its branch.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mirror-mind",
-  "version": "0.39.0",
+  "version": "0.39.1",
   "description": "Mirror Mind: a local-first memory and identity framework for agentic AI runtimes (Pi, Claude Code, Codex, Antigravity)",
   "license": "MIT",
   "repository": {

package/plugins/mirror-mind/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mirror-mind",
-  "version": "0.39.0",
+  "version": "0.39.1",
   "description": "Mirror Mind — local-first memory and identity for agentic runtimes.",
   "author": {
     "name": "Mirror Mind"

package/plugins/mirror-mind/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "mirror-mind",
   "description": "Mirror Mind — local-first memory and identity for agentic runtimes.",
-  "version": "0.39.0",
+  "version": "0.39.1",
   "mcpServers": {
     "mirror-mind": {
       "command": "/bin/sh",