pi-crew 0.11.8 → 0.11.9

package/CHANGELOG.md

@@ -1,5 +1,80 @@
 # Changelog
 
+## [0.11.9] — F-BAT1: broker socket dir dodges /tmp pi-crew-* sweeps + stale-probe race (2026-10-08)
+
+Live-caught by the full-tier battery (T9b-W): worker coordination (`ask`/`message`/`delegate`)
+returned ENOENT in BOTH sync and async runs while the runs stayed green (graceful degrade —
+the exact silent-failure class the battery exists to catch).
+
+Two stacked root causes:
+
+1. **Namespace collision** — with `XDG_RUNTIME_DIR` absent (sessions launched from
+   non-login envs), the broker's per-user dir fell back to `/tmp/pi-crew-<uid>`, which
+   THREE /tmp workspace sweeps (`cleanupLegacyOrphanTempDirs`, the orphan temp
+   reconciler, the health zombie scan) pattern-match as `pi-crew-*` debris and `rmSync`
+   — deleting the LIVE broker socket dir. Sessions with XDG_RUNTIME_DIR were
+   unaffected (/run/user is never swept), which is why this only bit some launches.
+   Fix: the no-XDG fallback now uses `.pi-crew-broker-<uid>` (dot-prefixed — no sweep
+   matches). XDG path unchanged.
+2. **Stale-probe race** — `removeStaleBrokerSocket` treated a connect TIMEOUT as
+   "stale" and unlinked a HEALTHY (slow-to-accept) broker socket. Only a definitive
+   `ECONNREFUSED` (kernel rejects connect on a listener-less socket) may ever unlink.
+
+   Cross-platform hardening (CI 2026-10-08, macOS catch): a NON-SOCKET entry at the
+   socket path (the classic leftover corpse) is now removed deterministically via
+   `lstat` — no connect probe — because connect() to a non-socket path is undefined
+   across kernels (Linux yields ECONNREFUSED, macOS a different errno). Sockets keep
+   the probe path: ECONNREFUSED → remove, timeout/other → keep.
+
+Live re-verified end-to-end on the fixed bundle: socket binds at
+`/tmp/.pi-crew-broker-1000/`, `ask` round-trip delivers the leader reply through
+dependency-context (worker quotes it verbatim), `message` notify delivered, socket
+survives the whole run. Pin suite `socket-path-fbat1.test.ts` (6 tests,
+mutation-checked both halves; single mutations are neutralized by the paired guard —
+defense-in-depth by design).
+
+## [0.11.9] — UI instability fix wave L1–L9 (2026-10-07)
+
+Live-battery-driven fixes from the 2026-10-07 UI review
+(docs/real-test/reports/real-test-2026-10-07-ui-instability-review.md +
+real-test-2026-10-07-ui-fix-wave.md — 4 real runs, 308 live frames, T1/T5/T13 gates,
+5/5 mutation-verified pins).
+
+### Fixed
+
+- **L1 — crew dock renders in every session (HIGH)**: `activeWidgetRuns()` no longer filters
+  runs by `ownerSessionId` — bystander terminals now see active runs owned by other sessions
+  (live evidence: 308 frames across 3 async runs + 1 headless run rendered 0 docks; widget of
+  another extension updated fine in the same session). Crash-recovery scoping unchanged.
+- **L2 — no more flicker around run completion (HIGH-MED)**: the render-loop health gates
+  (GATE 1 / FIX#1 / GATE 3) now rebuild snapshots in place (`scheduleRefresh`) instead of
+  hard-deleting cache entries — restoring the FLICKER FIX invariant the gates had been
+  violating on every tick for terminal/divergent runs.
+- **L3 — dashboard defaults to the right-anchored panel**: `ui.dashboardPlacement` default
+  `"center"` → `"right"` (mirrors updated in install.mjs + both EFFECTIVE_DEFAULTS maps). The
+  centered 90% overlay exposed chopped background words at both margins on every width probed
+  (160/100/80) — pi-tui keeps base content visible outside overlay bounds by design.
+- **L4 — sidebar auto-close deadline no longer slides**: the deadline is captured on first
+  eligibility and re-armed only when the run leaves terminal state; the "auto-close in 3s…"
+  countdown now reflects a fixed deadline instead of being reset by every re-render.
+- **L6 — sidebar height locked** (dashboard `targetHeight()` pattern): loading → loaded →
+  shrunk frames share one height, killing ghost `┃` rows.
+- **L5 — sync snapshot rebuild off the paint path**: new `readForRender()` cached-only accessor
+  + coalesced async refresh for render(); keypress paths with sync read-after-write keep
+  `refreshIfStale` (Tier 11a read-your-writes preserved).
+
+### Changed
+
+- **L7 — TUI dialect sweep**: dashboard agent preview + mailbox pane now use `↑/↓` compact
+  usage instead of `tok=/in=/out=/model=/age=` wire format; live-conversation overlay uses
+  `formatDuration` (`5m44s`) instead of raw seconds; dead `formatLiveDuration` export removed.
+- **L8 — `CURSOR_MARKER` defensive resolve** (settings overlay, mailbox compose): named import
+  replaced with the W4/G22 typeof-guard pattern — no ESM crash on hosts whose pi-tui lacks the
+  export.
+- **L9 — dock truncation priority**: status pieces (`1 running`, `3/5 done`) are atomic — they
+  render whole or drop, never split mid-word (`1 runnin…` gone at 40 cols); meta pieces drop
+  first; plurals via `formatCount` across dashboard/panes/dispatcher.
+
 ## [0.11.8] — Pi 1.0.4 adoption + RPC/surface hardening + battery-proven stability (2026-10-07)
 
 ### Added — deep-learn polish batch (docs/reviews/pi-1.0.0-deep-learn-r3-2026-10-03.md R3 matrix)