kolu pin-bump obligations — the standing ledger

[srid]

The standing ledger for odu-impact items that accumulate between kolu pin bumps.

The contract (kolu's .claude/rules/surface.md): odu consumes @kolu/surface* via a loose npins pin — deliberately no per-PR pair (three-repo lockstep was rejected; drishti is the tight twin). In exchange, every API-facing kolu surface PR must post its odu-impact verdict (breaks-at-bump / adoption-opportunity / none, with the grounding grep) — and any non-none verdict lands here as a line item: the kolu PR, the affected odu site, the verdict.

The trigger: the moment this ledger holds a breaks-at-bump item, the next pin bump is schedulable work, not someday-work. Adoption-only items batch until a bump is scheduled anyway.

Consumed by: each pin-bump PR drains the ledger — its body checks off every line item (adopted / fixed / explicitly deferred with reason) and closes the drained entries.

(The 2026-07 bump in flight predates this ledger and drains the obligations recorded in kolu's plan note instead — SR1's two hand-finalization sites, SR2's cast sweep.)

[srid]

Ledger item — kolu#1858 (adoption-opportunity) — DRAINED by the paired bump PR.

• kolu PR: juspay/kolu#1858 — serveOverStdio's default-transport arm now framework-owns the process exit (link ends → settle → sync cleanup window → exit(0|1)); benign peer-gone write deaths classify as clean teardown at one terminal seam.
• Affected odu site (grounded at the bump pin's tree): src/runner/main.ts:34 — the --stdio lane agent serves on the default arm with sync-only post-settle work (runner.dispose() + log) → inherits the exit; src/odu.test.ts:45 — override arm, caller-owned, unaffected.
• Verdict: adoption-opportunity — the orphaned-runner leaves on CI boxes (T/odu/kolu/*) become structurally impossible at the new pin.
• Drained by: the paired pin-bump PR (kolu 07397fa2 → c0b631c69), opened as part of the same campaign rather than ledgered for a future bump.

[srid]

Ledger item — juspay/kolu#1865 (kolu mcp + the wait scaffold): adoption-opportunity

Grepped at odu's kolu pin f3a3e55:

• @kolu/surface-mcp tool dispatch now awaits — a rejecting bespoke handler (e.g. wait_for_settle's downstream failing) returns a typed isError tool result instead of escaping as a JSON-RPC -32603. odu's consumer (src/cli/mcp.ts) inherits this silently at bump; its tests assert isError falsy only on success paths, so nothing breaks — but an agent driving odu mcp gets honest, retryable tool failures where it previously got a protocol throw.
• New @kolu/surface/wait (WaitOutcome<Met> + runWait — the bounded-wait race scaffold): odu's blocking bespoke tools could adopt it instead of hand-rolling abort/timeout/settle plumbing.

No action required at bump; adoption is optional.

[srid]

adoption-opportunity — juspay/kolu#1876 adds a declared error union to @kolu/surface procedures (ProcedureSpec.errors, oRPC contract-level typed errors: handler opts.errors constructors, defined:true across every hop, client narrowing via isDefinedError/safe). Affected odu sites at its pin (src/common/surface.ts:249/269 — node.rerun, run.configure, run.cancel; plus src/mcp/agentSurface.ts procedure specs): each could declare its failure modes instead of erroring opaque. Additive + optional — nothing breaks at bump; verdicts for the same PR's other changes (makeSession onLog→log, supervisor incompatible state) are none (odu passes no onLog — the default stderr sink its display.ts:26 reads is unchanged — and imports no supervisor symbol).

[srid]

breaks-at-bump — kolu #1884 (surface-remote localhost localEnv)

• kolu PR: Require a composed env for surface-remote's localhost spawn arm (PR1.5) kolu#1884 — @kolu/surface-remote's sshConnector / dialAgentOnce / buildAgentCommand now require a localEnv: Record<string, string> (the composed env for the localhost spawn arm; #1872 defense-in-depth).
• Affected odu site: src/coordinator/lane.ts:71 — constructs sshConnector<typeof laneSurface.contract>({ host, binary: "odu-runner", resolveDrvPath }) with no localEnv.
• Verdict: breaks-at-bump. At odu's next kolu-pin bump past this PR, that construction becomes a compile error (localEnv missing).
• Fix at bump: add localEnv to the lane.ts construction. odu lanes dial remote CI boxes, so the localhost arm is not the hot path, but the field is required unconditionally (host-locality is a runtime string) — compose a clean base ({ HOME, PATH, USER } from process.env, or odu's own allowlist if one exists). Grep-confirmed this is the only odu consumer of the changed exports (src/coordinator/run.ts:31 imports only isLocalHost/resolveSystem, unaffected).