Harden worker dispatch and installation checks

[CryptoJym]

An external claims collector could hide this router's existing launches, and alternate filesystem spellings or nested workspaces could admit overlapping workers. Dispatch now checks fresh durable receipts under its lock and compares canonical paths and filesystem ancestry. Bounded receipt scans, recorded phases, persistent launch intents and route-status make failures diagnosable while preserving reservations after uncertain native outcomes.

Installation now rejects occupied selected ports before provisioning, including qdrant's gRPC port, and rechecks immediately before startup. borg start distinguishes process liveness from verified readiness. The installer entry point and test fixtures are covered, adapter compatibility wording is clarified, and Linux/macOS CI verifies the exact public inventory plus the conductor with a real isolated Codex app-server.

Validation:

• Independent review approved the conductor fix and CI workflow. The added 83 adversarial cases detected 52 failures in the original candidate and rejected 10 deliberately flawed fixes.
• 166/166 conductor tests pass on pinned Node 24.21.0 with native Codex 0.146.0; 97/97 installer tests pass on Python 3.12.12.
• An independent fresh macOS arm64 installation of the preceding public release passed memory/graph, file/process/job/artifact/browser canaries, restart persistence and connector recovery. Changed code is covered by the integration tests above.
• The 372-file exact release inventory passes with zero findings. Hosted CI passed on macOS (166 conductor tests) and Linux (162 passed, four filesystem-specific skips), with 22 release/adapter/startup checks on each. Real native initialization passed on both.

Existing installed homes are not migrated. New-owner provider login, full Linux/Intel installation and external Cloudflare setup remain separate acceptance steps. Legacy intents retain their original path spelling for lookup; unknown starts are not automatically retried.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: b6c1fa4b-5aeb-40a0-898f-58794294f0ca

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}