From b182943c2486fc7445040f3fd0fb9f34b00b3d63 Mon Sep 17 00:00:00 2001
From: jochen <jschoubben@novox.be>
Date: Sat, 3 Oct 2026 21:12:15 +0200
Subject: [PATCH 1/2] node-tools launches every bundle it serves; a child's
 emit is published as its module (hq ADR 0193)

Every served entrypoint is started as a process speaking MCP over stdio, told its module and node;
one that is not executable is refused by name. The import path, the SDK resolve hook (issue 209)
and the per-registration hand-off go. The one-module form the per-module containers use is still
imported until they move (to-be 38 WP4c). A child's mesh/publish is published as its module and
answered once accepted; a child that dies says why in its own last words. Fixtures are served
through launchers exactly as the builder writes them.
---
 node-tools/src/launch.ts                      |  31 ++++-
 node-tools/src/runtime.ts                     | 120 ++++--------------
 .../test/fixtures/clash-tools.serve.mjs       |   5 +
 node-tools/test/fixtures/env-delta.serve.mjs  |   5 +
 node-tools/test/fixtures/env-gamma.serve.mjs  |   5 +
 node-tools/test/fixtures/many-alpha.serve.mjs |   5 +
 node-tools/test/fixtures/many-beta.serve.mjs  |   5 +
 .../test/fixtures/many-broken.serve.mjs       |   5 +
 node-tools/test/fixtures/shop-seat.serve.mjs  |   5 +
 node-tools/test/fixtures/shop-tools.serve.mjs |   5 +
 .../fixtures/store-seat-unclaimed.serve.mjs   |   5 +
 node-tools/test/fixtures/store-seat.serve.mjs |   5 +
 node-tools/test/node-runtime.test.ts          |  50 ++++++--
 node-tools/test/node-tools-serve.test.ts      |   2 +-
 14 files changed, 146 insertions(+), 107 deletions(-)
 create mode 100755 node-tools/test/fixtures/clash-tools.serve.mjs
 create mode 100755 node-tools/test/fixtures/env-delta.serve.mjs
 create mode 100755 node-tools/test/fixtures/env-gamma.serve.mjs
 create mode 100755 node-tools/test/fixtures/many-alpha.serve.mjs
 create mode 100755 node-tools/test/fixtures/many-beta.serve.mjs
 create mode 100755 node-tools/test/fixtures/many-broken.serve.mjs
 create mode 100755 node-tools/test/fixtures/shop-seat.serve.mjs
 create mode 100755 node-tools/test/fixtures/shop-tools.serve.mjs
 create mode 100755 node-tools/test/fixtures/store-seat-unclaimed.serve.mjs
 create mode 100755 node-tools/test/fixtures/store-seat.serve.mjs

diff --git a/node-tools/src/launch.ts b/node-tools/src/launch.ts
index 585f4d0..23a3625 100644
--- a/node-tools/src/launch.ts
+++ b/node-tools/src/launch.ts
@@ -13,6 +13,8 @@
 import { spawn, type ChildProcess } from "node:child_process";
 import { accessSync, constants } from "node:fs";
 import type { ToolDefinition } from "@novox/mesh-sdk/tools";
+import { broker, type Envelope } from "@novox/mesh-sdk/messaging";
+import { atWork } from "./broker-nats.js";
 
 /** The protocol version this speaks; a bundle says the same. */
 export const PROTOCOL = "2025-03-26";
@@ -71,29 +73,50 @@ export async function launch(module: string, entry: string, env: NodeJS.ProcessE
         const line = buffered.slice(0, at).trim();
         buffered = buffered.slice(at + 1);
         if (!line) continue;
-        let reply: { id?: number; result?: unknown; error?: { message?: string } };
+        let reply: { id?: number | string; method?: string; params?: unknown; result?: unknown; error?: { message?: string } };
         try {
           reply = JSON.parse(line);
         } catch {
           console.log(`[mesh-tools] ${module}'s bundle said something that is not a reply: ${line.slice(0, 120)}`);
           continue;
         }
+        // **The bundle asks the runtime to emit** (novox/hq ADR 0193): published on the bus as this
+        // module, and answered once the bus has accepted it, so the tool's emit means what it means
+        // in-process. Nothing else a bundle may ask.
+        if (typeof reply.method === "string") {
+          const id = reply.id;
+          const answer = (m: Record<string, unknown>) => proc.stdin!.write(JSON.stringify({ jsonrpc: "2.0", id, ...m }) + "\n");
+          if (reply.method !== "mesh/publish") {
+            if (id !== undefined) answer({ error: { code: -32601, message: `the runtime answers no ${reply.method} from a bundle` } });
+            continue;
+          }
+          atWork.run({ module }, () => broker().publish(reply.params as Envelope<unknown>))
+            .then(() => { if (id !== undefined) answer({ result: {} }); })
+            .catch((err: unknown) => { if (id !== undefined) answer({ error: { code: -32000, message: err instanceof Error ? err.message : String(err) } }); });
+          continue;
+        }
         const waiting = typeof reply.id === "number" ? pending.get(reply.id) : undefined;
         if (!waiting) continue;
-        pending.delete(reply.id!);
+        pending.delete(reply.id as number);
         clearTimeout(waiting.timer);
         if (reply.error) waiting.reject(new Error(reply.error.message ?? "the bundle refused the request"));
         else waiting.resolve(reply.result);
       }
     });
     // stderr is the bundle's log; kept under the module's name so a fault reads where it belongs.
+    // The last thing it said is kept, so a bundle that dies says why in its own words, not by code.
+    let lastSaid = "";
     proc.stderr!.on("data", (chunk: Buffer) => {
-      for (const line of chunk.toString("utf8").split("\n")) if (line.trim()) console.log(`[${module}] ${line}`);
+      for (const line of chunk.toString("utf8").split("\n")) {
+        if (!line.trim()) continue;
+        console.log(`[${module}] ${line}`);
+        if (/\S/.test(line) && !/^\s+at\s/.test(line) && !/^Node\.js v/.test(line)) lastSaid = line.trim();
+      }
     });
     const exited = new Promise<never>((_, reject) => {
       proc.once("error", (err) => reject(err));
       proc.once("exit", (code, signal) => {
-        const why = `${module}'s bundle exited (${signal ?? code})`;
+        const why = `${module}'s bundle exited (${signal ?? code})` + (lastSaid ? `: ${lastSaid}` : "");
         for (const [id, p] of pending) {
           pending.delete(id);
           clearTimeout(p.timer);
diff --git a/node-tools/src/runtime.ts b/node-tools/src/runtime.ts
index 7993c2f..e18b1c9 100644
--- a/node-tools/src/runtime.ts
+++ b/node-tools/src/runtime.ts
@@ -9,12 +9,9 @@
 // and the per-module shape is the list with one entry. A bundle that fails to import is named —
 // in the log and in what `tools` answers for it — and the others serve.
 
-import { fileURLToPath, pathToFileURL } from "node:url";
-import { dirname, join, resolve } from "node:path";
-import { existsSync, readFileSync } from "node:fs";
-import { registerHooks } from "node:module";
+import { pathToFileURL } from "node:url";
+import { resolve } from "node:path";
 import { useBroker } from "@novox/mesh-sdk/messaging";
-import * as sdkTools from "@novox/mesh-sdk/tools";
 import { collectTools, toolKey, type ToolDefinition } from "@novox/mesh-sdk/tools";
 import type { Broker } from "@novox/mesh-sdk/messaging";
 import { atWork, seatToolSubject, type Credential, type RuntimeBroker } from "./broker-nats.js";
@@ -115,6 +112,7 @@ export async function runTools(opts: RuntimeOptions): Promise<() => void> {
   for (const s of opts.serves ?? []) {
     served.set(s.module, [...(served.get(s.module) ?? []), ...s.entrypoints]);
   }
+  const ownEntrypoints = opts.moduleEntrypoints ?? [];
   if (opts.moduleEntrypoints?.length) {
     if (!self) {
       throw new Error(
@@ -143,34 +141,38 @@ export async function runTools(opts: RuntimeOptions): Promise<() => void> {
   const envs = opts.envs ?? new Map<string, Record<string, string>>();
   const envFor = (module: string): NodeJS.ProcessEnv => ({ ...process.env, ...(envs.get(module) ?? {}) });
 
-  // Import each bundle, guarded (ADR 0175: one faulty bundle must not take the node's tools down).
-  // Importing the entrypoint runs its registerModuleTools(...) — that is the whole handshake — and
-  // the registrations it adds are the ones that appear after it, which is how each is attributed
-  // to the module whose bundle made it.
-  // A bundle that is not plain JavaScript — or is marked executable — is launched as a process
-  // and spoken to over MCP on stdio instead (ADR 0188); what it lists is registered the same way.
-  // Every bundle's import of the SDK resolves to this runtime's copy (04-ISSUES/209): one registry
-  // of tools, one broker. Installed before the first bundle is imported.
-  oneSdk();
+  // Every bundle this runtime serves is launched as a process and spoken to over MCP on stdio (ADR
+  // 0188, ADR 0193): given the runtime's words and its module's own, and told the module it serves
+  // it as. The runtime knows no language; an entrypoint that is not executable was not built to be
+  // served, and is refused by name. A bundle that fails to start is named, and the others serve
+  // (ADR 0175: one faulty bundle must not take the node's tools down).
+  //
+  // The one-module form — the credential's own module's entrypoints, which the per-module containers
+  // still use for their event handlers and provisioners until they move (to-be 38 WP4c) — is imported
+  // into this process as before: one module, one SDK, its container's own environment.
+  // The machine this runtime serves, which an event a launched tool emits is stamped with.
+  const node = opts.credential?.node ?? (typeof (runtime as unknown as { node?: unknown }).node === "string" ? (runtime as unknown as { node: string }).node : undefined);
   const failed = new Map<string, string>();
-  const owner: string[] = []; // registration index → the module whose bundle registered it
   const launched: { module: string; owner: string; tools: ToolDefinition[] }[] = [];
   const children: Array<() => void> = [];
   for (const [module, entrypoints] of served) {
+    const imported = module === self && ownEntrypoints.length > 0;
     for (const entry of entrypoints) {
       const path = resolve(entry);
       try {
-        if (launches(path)) {
-          // Told the module it serves it as, so a seat's verbs are the seat's (ADR 0193).
-          const child = await launch(module, path, { ...envFor(module), MESH_SERVED_MODULE: module });
-          children.push(child.stop);
-          for (const r of child.registrations) launched.push({ ...r, owner: module });
+        if (imported) {
+          await import(pathToFileURL(path).href);
           continue;
         }
-        const before = collectTools().length;
-        await import(pathToFileURL(path).href);
-        const after = collectTools().length;
-        for (let i = before; i < after; i++) owner[i] = module;
+        if (!launches(path)) {
+          throw new Error(`${path} is not executable; a bundle the runtime serves is started, never imported, and its build makes it executable (novox/hq ADR 0193)`);
+        }
+        const child = await launch(module, path, {
+          ...envFor(module), MESH_SERVED_MODULE: module, MESH_MODULE: module,
+          ...(node ? { MESH_NODE: node } : {}),
+        });
+        children.push(child.stop);
+        for (const r of child.registrations) launched.push({ ...r, owner: module });
       } catch (err) {
         const why = err instanceof Error ? err.message : String(err);
         failed.set(module, why);
@@ -187,16 +189,8 @@ export async function runTools(opts: RuntimeOptions): Promise<() => void> {
   // out rather than fatal — on 2026-10-01 the credential of a module that had just learned to
   // implement a seat did not yet name the claim, and the whole runtime restarted for it.
   const claimed = seatsClaimed(served.keys(), self, opts.credential, runtime);
-  // Each registration's contributor is given its own module's environment and no other's (ADR 0192):
-  // the runtime's own words, and over them what the mesh composed for the module whose bundle made
-  // the registration. An SDK too old to ask per registration cannot do that; said, not hidden.
-  const each = (sdkTools as { collectToolsEach?: (f: (module: string, i: number) => NodeJS.ProcessEnv) => { module: string; tools: ToolDefinition[] }[] }).collectToolsEach;
-  if (!each && envs.size > 0) {
-    console.log(`[mesh-tools] this runtime's SDK cannot give each bundle its own environment; ${[...envs.keys()].join(", ")} serve with the runtime's words only (novox/hq ADR 0192)`);
-  }
-  const collected = each ? each((module, i) => envFor(owner[i] ?? self ?? module)) : collectTools();
   const registrations = [
-    ...collected.map((r, i) => ({ ...r, owner: owner[i] ?? self ?? r.module })),
+    ...collectTools().map((r) => ({ ...r, owner: self ?? r.module })),
     ...launched,
   ];
   const ownRegistrations = registrations.filter(({ module, owner: by }) => {
@@ -365,63 +359,3 @@ async function serveClaimedSeats(
   if (typeof broker.onMembership === "function") broker.onMembership(() => void serve());
   return () => stops.forEach((s) => s());
 }
-
-let sdkHooked = false;
-const SDK = "@novox/mesh-sdk";
-/**
- * The one SDK in a node's runtime (novox/hq ADR 0175, 04-ISSUES/209).
- *
- * A bundle carries its own dependencies — the toolchain copies them in so a bundle starts anywhere
- * (to-be 38 WP3) — and among them is a copy of the SDK. Imported in this process, that copy would be
- * a second SDK: its own registry of tools, its own broker handle. A bundle calling registerModuleTools
- * through it registers into a list this runtime never reads, and its tools are silently not served.
- * So every import of the SDK, from whichever bundle, is resolved as if this runtime had written it:
- * one registry, one broker — the runtime's. Everything else a bundle carries resolves from the
- * bundle's own tree, as before. A launched bundle (ADR 0188) is another process and is untouched.
- *
- * Installed once, in-thread, before the first bundle is imported; the hook sees every import after,
- * `require` included. A bundle whose own copy is another version than the runtime's is said once,
- * so a tool failing against the runtime's SDK points at the bundle rather than at the runtime.
- */
-function oneSdk(): void {
-  if (sdkHooked) return;
-  registerHooks({
-    resolve(specifier, context, next) {
-      if (specifier === SDK || specifier.startsWith(SDK + "/")) {
-        if (context.parentURL) sayOtherSdk(context.parentURL);
-        return next(specifier, { ...context, parentURL: import.meta.url });
-      }
-      return next(specifier, context);
-    },
-  });
-  sdkHooked = true;
-}
-
-const sdkSaid = new Set<string>();
-/** The version of the SDK copy nearest a file, by its package.json, or nothing when the file has none above it. */
-function sdkVersionNear(fileURL: string): { dir: string; version: string } | undefined {
-  let dir = dirname(fileURLToPath(fileURL));
-  for (;;) {
-    const pkg = join(dir, "node_modules", SDK, "package.json");
-    if (existsSync(pkg)) {
-      try {
-        return { dir, version: String((JSON.parse(readFileSync(pkg, "utf8")) as { version?: string }).version ?? "?") };
-      } catch {
-        return { dir, version: "?" };
-      }
-    }
-    const up = dirname(dir);
-    if (up === dir) return undefined;
-    dir = up;
-  }
-}
-function sayOtherSdk(parentURL: string): void {
-  if (!parentURL.startsWith("file:")) return;
-  const own = sdkVersionNear(import.meta.url);
-  const theirs = sdkVersionNear(parentURL);
-  if (!theirs || !own || theirs.dir === own.dir || sdkSaid.has(theirs.dir)) return;
-  sdkSaid.add(theirs.dir);
-  if (theirs.version !== own.version) {
-    console.log(`[mesh-tools] ${theirs.dir} carries ${SDK} ${theirs.version}; this runtime's is ${own.version}, and the bundle speaks to the runtime's`);
-  }
-}
diff --git a/node-tools/test/fixtures/clash-tools.serve.mjs b/node-tools/test/fixtures/clash-tools.serve.mjs
new file mode 100755
index 0000000..8db318e
--- /dev/null
+++ b/node-tools/test/fixtures/clash-tools.serve.mjs
@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+// The launcher the builder writes beside an entrypoint (novox/hq ADR 0193), for clash-tools.mjs.
+import { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";
+await import("./clash-tools.mjs");
+await serveRegisteredOverStdio();
diff --git a/node-tools/test/fixtures/env-delta.serve.mjs b/node-tools/test/fixtures/env-delta.serve.mjs
new file mode 100755
index 0000000..aa1bdbd
--- /dev/null
+++ b/node-tools/test/fixtures/env-delta.serve.mjs
@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+// The launcher the builder writes beside an entrypoint (novox/hq ADR 0193), for env-delta.mjs.
+import { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";
+await import("./env-delta.mjs");
+await serveRegisteredOverStdio();
diff --git a/node-tools/test/fixtures/env-gamma.serve.mjs b/node-tools/test/fixtures/env-gamma.serve.mjs
new file mode 100755
index 0000000..79e6793
--- /dev/null
+++ b/node-tools/test/fixtures/env-gamma.serve.mjs
@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+// The launcher the builder writes beside an entrypoint (novox/hq ADR 0193), for env-gamma.mjs.
+import { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";
+await import("./env-gamma.mjs");
+await serveRegisteredOverStdio();
diff --git a/node-tools/test/fixtures/many-alpha.serve.mjs b/node-tools/test/fixtures/many-alpha.serve.mjs
new file mode 100755
index 0000000..21c27ee
--- /dev/null
+++ b/node-tools/test/fixtures/many-alpha.serve.mjs
@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+// The launcher the builder writes beside an entrypoint (novox/hq ADR 0193), for many-alpha.mjs.
+import { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";
+await import("./many-alpha.mjs");
+await serveRegisteredOverStdio();
diff --git a/node-tools/test/fixtures/many-beta.serve.mjs b/node-tools/test/fixtures/many-beta.serve.mjs
new file mode 100755
index 0000000..48af4e7
--- /dev/null
+++ b/node-tools/test/fixtures/many-beta.serve.mjs
@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+// The launcher the builder writes beside an entrypoint (novox/hq ADR 0193), for many-beta.mjs.
+import { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";
+await import("./many-beta.mjs");
+await serveRegisteredOverStdio();
diff --git a/node-tools/test/fixtures/many-broken.serve.mjs b/node-tools/test/fixtures/many-broken.serve.mjs
new file mode 100755
index 0000000..b411ceb
--- /dev/null
+++ b/node-tools/test/fixtures/many-broken.serve.mjs
@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+// The launcher the builder writes beside an entrypoint (novox/hq ADR 0193), for many-broken.mjs.
+import { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";
+await import("./many-broken.mjs");
+await serveRegisteredOverStdio();
diff --git a/node-tools/test/fixtures/shop-seat.serve.mjs b/node-tools/test/fixtures/shop-seat.serve.mjs
new file mode 100755
index 0000000..ae79e68
--- /dev/null
+++ b/node-tools/test/fixtures/shop-seat.serve.mjs
@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+// The launcher the builder writes beside an entrypoint (novox/hq ADR 0193), for shop-seat.mjs.
+import { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";
+await import("./shop-seat.mjs");
+await serveRegisteredOverStdio();
diff --git a/node-tools/test/fixtures/shop-tools.serve.mjs b/node-tools/test/fixtures/shop-tools.serve.mjs
new file mode 100755
index 0000000..b9c7e3e
--- /dev/null
+++ b/node-tools/test/fixtures/shop-tools.serve.mjs
@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+// The launcher the builder writes beside an entrypoint (novox/hq ADR 0193), for shop-tools.mjs.
+import { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";
+await import("./shop-tools.mjs");
+await serveRegisteredOverStdio();
diff --git a/node-tools/test/fixtures/store-seat-unclaimed.serve.mjs b/node-tools/test/fixtures/store-seat-unclaimed.serve.mjs
new file mode 100755
index 0000000..a5f3679
--- /dev/null
+++ b/node-tools/test/fixtures/store-seat-unclaimed.serve.mjs
@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+// The launcher the builder writes beside an entrypoint (novox/hq ADR 0193), for store-seat-unclaimed.mjs.
+import { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";
+await import("./store-seat-unclaimed.mjs");
+await serveRegisteredOverStdio();
diff --git a/node-tools/test/fixtures/store-seat.serve.mjs b/node-tools/test/fixtures/store-seat.serve.mjs
new file mode 100755
index 0000000..e8588f3
--- /dev/null
+++ b/node-tools/test/fixtures/store-seat.serve.mjs
@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+// The launcher the builder writes beside an entrypoint (novox/hq ADR 0193), for store-seat.mjs.
+import { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";
+await import("./store-seat.mjs");
+await serveRegisteredOverStdio();
diff --git a/node-tools/test/node-runtime.test.ts b/node-tools/test/node-runtime.test.ts
index 96c4b65..5e0c050 100644
--- a/node-tools/test/node-runtime.test.ts
+++ b/node-tools/test/node-runtime.test.ts
@@ -122,9 +122,9 @@ test("the node's runtime serves five modules' bundles on one credential — two
       broker: nodeTools,
       credential,
       serves: [
-        { module: "alpha", entrypoints: [fixture("many-alpha.mjs")] },
-        { module: "beta", entrypoints: [fixture("many-beta.mjs")] },
-        { module: "gamma", entrypoints: [fixture("many-broken.mjs")] },
+        { module: "alpha", entrypoints: [fixture("many-alpha.serve.mjs")] },
+        { module: "beta", entrypoints: [fixture("many-beta.serve.mjs")] },
+        { module: "gamma", entrypoints: [fixture("many-broken.serve.mjs")] },
         { module: "delta", entrypoints: [fixture("many-delta.py")] },
         { module: "epsilon", entrypoints: [fixture("many-epsilon.mjs")] },
       ],
@@ -132,7 +132,7 @@ test("the node's runtime serves five modules' bundles on one credential — two
     console.log = log;
     assert.deepEqual(nodeTools.serving().sort(), ["alpha", "beta", "delta", "epsilon", "gamma", "node-tools"]);
     assert.ok(said.some((s) => /the operator's account here is somebody \(home \/home\/somebody\)/.test(s)), said.join("\n"));
-    assert.ok(said.some((s) => /gamma's bundle .*many-broken\.mjs failed to load: gamma's bundle cannot find its client; its tools are not served here/.test(s)), said.join("\n"));
+    assert.ok(said.some((s) => /gamma's bundle .*many-broken\.serve\.mjs failed to load: gamma's bundle exited \(1\): Error: gamma's bundle cannot find its client; its tools are not served here/.test(s)), said.join("\n"));
     assert.ok(said.some((s) => /serving 8 tool\(s\) for 5 module\(s\): alpha\.one, alpha\.two, beta\.three, beta\.four, beta\.five, delta\.greet, delta\.die, epsilon\.seven; not serving gamma/.test(s)), said.join("\n"));
 
     // Five tools answer, each where its module's membership says: alpha anywhere and here, beta here only.
@@ -163,7 +163,7 @@ test("the node's runtime serves five modules' bundles on one credential — two
 
     // `tools` answers for each: what alpha and beta serve, and why gamma serves nothing.
     const gamma = await asker.request<Record<string, never>, { module: string; tools: unknown[]; failed?: string }>("gamma.tools@anchor", {});
-    assert.deepEqual(gamma, { module: "gamma", tools: [], failed: "gamma's bundle cannot find its client" });
+    assert.deepEqual(gamma, { module: "gamma", tools: [], failed: "gamma's bundle exited (1): Error: gamma's bundle cannot find its client" });
     const beta = await asker.request<Record<string, never>, { tools: { name: string; subjects?: string[] }[] }>("beta.tools@anchor", {});
     assert.deepEqual(beta.tools.map((x) => x.name), ["three", "four", "five"]);
     assert.deepEqual(beta.tools[0]!.subjects, ["mesh.mod.beta.tool.three.anchor"]);
@@ -174,7 +174,7 @@ test("the node's runtime serves five modules' bundles on one credential — two
     try {
       const have = await toolsOn(asker);
       assert.deepEqual(have.tools.map((x) => `${x.module}.${x.name}`), ["alpha.one", "alpha.two", "beta.five", "beta.four", "beta.three", "delta.die", "delta.greet", "epsilon.seven"]);
-      assert.deepEqual(have.notAnswering, ["gamma (its tools bundle failed to load: gamma's bundle cannot find its client)", "mesh-controller (seat)"]);
+      assert.deepEqual(have.notAnswering, ["gamma (its tools bundle failed to load: gamma's bundle exited (1): Error: gamma's bundle cannot find its client)", "mesh-controller (seat)"]);
     } finally {
       await catalogue.close();
     }
@@ -215,6 +215,8 @@ test("a bundle carrying its own copy of the SDK registers into the runtime's reg
     writeFileSync(join(dir, "node_modules", "zeta-flavour", "package.json"), '{"name":"zeta-flavour","type":"module","main":"index.js"}\n');
     writeFileSync(join(dir, "node_modules", "zeta-flavour", "index.js"), 'export const flavour = "the bundle\'s own";\n');
     writeFileSync(join(dir, "package.json"), '{"type":"module","private":true}\n');
+    writeFileSync(join(dir, "index.serve.mjs"),
+      '#!/usr/bin/env node\nimport { serveRegisteredOverStdio } from "@novox/mesh-sdk/stdio";\nawait import("./index.js");\nawait serveRegisteredOverStdio();\n', { mode: 0o755 });
     writeFileSync(join(dir, "index.js"),
       'import { registerModuleTools } from "@novox/mesh-sdk/tools";\n' +
       'import { flavour } from "zeta-flavour";\n' +
@@ -228,7 +230,7 @@ test("a bundle carrying its own copy of the SDK registers into the runtime's reg
     const asker = await connectNats({ url, module: "console", node: "workstation" });
     closing.push(() => asker.close());
     console.log = (...a: unknown[]) => said.push(a.join(" "));
-    stop = await runTools({ broker: nodeTools, credential, serves: [{ module: "zeta", entrypoints: [join(dir, "index.js")] }] });
+    stop = await runTools({ broker: nodeTools, credential, serves: [{ module: "zeta", entrypoints: [join(dir, "index.serve.mjs")] }] });
     console.log = log;
     assert.ok(said.some((s) => /serving 1 tool\(s\) for 1 module\(s\): zeta\.probe/.test(s)), said.join("\n"));
     // The SDK is the runtime's (the registration arrived); the bundle's other dependency is its own.
@@ -266,8 +268,8 @@ test("each bundle is given its own environment and none of another's, imported o
     stop = await runTools({
       broker: nodeTools, credential, envs,
       serves: [
-        { module: "gamma", entrypoints: [fixture("env-gamma.mjs")] },
-        { module: "delta", entrypoints: [fixture("env-delta.mjs")] },
+        { module: "gamma", entrypoints: [fixture("env-gamma.serve.mjs")] },
+        { module: "delta", entrypoints: [fixture("env-delta.serve.mjs")] },
         { module: "zeta", entrypoints: [fixture("env-zeta.mjs")] },
       ],
     });
@@ -316,3 +318,33 @@ test("a launched bundle is told the module it serves, so its seat's verbs stay t
     resetTools();
   }
 });
+
+test("an entrypoint that is not executable is refused by name, and the others serve (ADR 0193)", async (t) => {
+  if (!url) return t.skip("MESH_TEST_NATS unset");
+  resetTools();
+  const mesh = await aMesh();
+  for (const m of ["alpha", "plain"]) await mesh.issue(membershipOf(m, "anchor"));
+  const credential = { url, node: "anchor", module: "node-tools" };
+  const nodeTools = await connectNats(credential);
+  const asker = await connectNats({ url, module: "console", node: "workstation" });
+  const said: string[] = [];
+  const log = console.log;
+  let stop = () => {};
+  try {
+    console.log = (...a: unknown[]) => said.push(a.join(" "));
+    stop = await runTools({ broker: nodeTools, credential, serves: [
+      { module: "alpha", entrypoints: [fixture("many-alpha.serve.mjs")] },
+      { module: "plain", entrypoints: [fixture("many-alpha.mjs")] },
+    ] });
+    console.log = log;
+    assert.ok(said.some((s) => /plain's bundle .*many-alpha\.mjs failed to load: .* is not executable; a bundle the runtime serves is started, never imported/.test(s)), said.join("\n"));
+    assert.deepEqual((await callTool(asker, "alpha.one@anchor", {})).result, { alpha: 1 });
+  } finally {
+    console.log = log;
+    stop();
+    await asker.close();
+    await nodeTools.close();
+    await mesh.close();
+    resetTools();
+  }
+});
diff --git a/node-tools/test/node-tools-serve.test.ts b/node-tools/test/node-tools-serve.test.ts
index 15e53a7..8f1c4e3 100644
--- a/node-tools/test/node-tools-serve.test.ts
+++ b/node-tools/test/node-tools-serve.test.ts
@@ -36,7 +36,7 @@ test("as node-tools, serve loads the bundles and is the console on loopback", as
     env: {
       ...process.env,
       MESH_BROKER_FILE: credential,
-      MESH_TOOL_MODULES: `alpha=${fixture("many-alpha.mjs")}`,
+      MESH_TOOL_MODULES: `alpha=${fixture("many-alpha.serve.mjs")}`,
       MESH_CONSOLE_LISTEN: "127.0.0.1:0",
     },
     stdio: ["ignore", "pipe", "pipe"],

From ae6bdc9b0603506716f45a42f4cf0a63b9f0b18f Mon Sep 17 00:00:00 2001
From: jochen <jschoubben@novox.be>
Date: Sat, 3 Oct 2026 21:23:50 +0200
Subject: [PATCH 2/2] Require SDK 0.1.5: a launched bundle names its module and
 emits through the runtime (hq ADR 0193)

The toolchain image installs from this package.json with a range; unchanged, Docker reused the
cached install and the image kept SDK 0.1.3 after 0.1.5 was published. Bundles copied that copy, so
a launched bundle registering its seat first served the seat's verbs as its own tools. Requiring
0.1.5 says what the runtime and its bundles need, and invalidates the cached layer.
---
 node-tools/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/node-tools/package.json b/node-tools/package.json
index 9831df0..afef641 100644
--- a/node-tools/package.json
+++ b/node-tools/package.json
@@ -13,7 +13,7 @@
     "test": "node --test --test-concurrency=1 --experimental-strip-types 'test/*.test.ts'"
   },
   "dependencies": {
-    "@novox/mesh-sdk": "^0.1.0",
+    "@novox/mesh-sdk": "^0.1.5",
     "nats": "^2.29.0"
   },
   "devDependencies": {