kenaz 0.3.18 → 0.3.20

package/core/dev/scripts/relay-admin.test.js

@@ -0,0 +1,131 @@
+'use strict';
+// TASK_2451: relay-admin.js against a local fixture that mimics the relay admin endpoints
+// (same routes, X-Admin-Key check, approve-by-fingerprint semantics as node_admin.rs). Every
+// command in HELP is executed through the real CLI process.
+const test = require('node:test');
+const assert = require('node:assert');
+const http = require('http');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { spawn, spawnSync } = require('child_process');
+const { HELP } = require('./relay-admin');
+
+const KEY = 'sekret-admin-key';
+const CLI = path.join(__dirname, 'relay-admin.js');
+let server, url, tokens, blocks = [], protect = false;
+
+test.before(async () => {
+  tokens = [
+    { team_id: 't1', node_name: 'n1', fingerprint: 'AAAA-1111', status: 'pending', created_at: '2026-10-13T00:00:00Z' },
+    { team_id: 't1', node_name: 'n1', fingerprint: 'BBBB-2222', status: 'active', created_at: '2026-10-12T00:00:00Z' },
+  ];
+  server = http.createServer((req, res) => {
+    let b = '';
+    req.on('data', (c) => (b += c));
+    req.on('end', () => {
+      const send = (s, o) => { res.statusCode = s; res.end(JSON.stringify(o || {})); };
+      if (req.headers['x-admin-key'] !== KEY) return send(401);
+      const r = req.url.replace('/api/admin/node-credentials/', '');
+      const body = b ? JSON.parse(b) : {};
+      if (r === 'pending') return send(200, { pending: tokens.filter((t) => t.status === 'pending') });
+      if (r === 'approve') {
+        const t = tokens.find((x) => x.status === 'pending' && x.team_id === body.team_id && x.node_name === body.node_name && x.fingerprint === body.fingerprint);
+        if (!t) return send(404);
+        let n = 0;
+        for (const o of tokens) if (o !== t && o.team_id === t.team_id && o.node_name === t.node_name && o.status !== 'revoked') { o.status = 'revoked'; n++; }
+        t.status = 'active';
+        return send(200, { status: 'active', revoked_others: n });
+      }
+      if (r === 'revoke') {
+        let n = 0;
+        for (const o of tokens) if (o.team_id === body.team_id && o.node_name === body.node_name && o.status !== 'revoked') { o.status = 'revoked'; n++; }
+        return send(200, { status: 'revoked', revoked: n });
+      }
+      if (r === 'ban') { blocks.push(body); return send(200, { banned: true, revoked: 1, protect_bound_names: protect }); }
+      if (r === 'unban') { blocks = []; return send(200, { unbanned: 1 }); }
+      if (r === 'blocked') return send(200, { blocked: blocks.map((b) => ({ team_id: b.team_id, kind: 'name', value: b.node_name, reason: b.reason, created_at: 'now' })) });
+      send(404);
+    });
+  });
+  await new Promise((r) => server.listen(0, '127.0.0.1', r));
+  url = `http://127.0.0.1:${server.address().port}`;
+});
+test.after(() => server.close());
+
+const cli = (args, env = { RELAY_ADMIN_KEY: KEY }) =>
+  new Promise((resolve) => {
+    const p = spawn(process.execPath, [CLI, '--relay', url, ...args], { env: { ...process.env, RELAY_ADMIN_KEY: '', RELAY_ADMIN_KEY_FILE: '', ...env } });
+    let out = ''; p.stdout.on('data', (d) => (out += d)); p.stderr.on('data', (d) => (out += d));
+    p.on('close', (code) => resolve({ code, out }));
+  });
+
+test('list -> wrong fingerprint refused -> approve activates and reports revoked tokens', async () => {
+  let r = await cli(['list']);
+  assert.strictEqual(r.code, 0); assert.match(r.out, /t1\tn1\tAAAA-1111/);
+  r = await cli(['approve', 't1', 'n1', 'ZZZZ-0000']);
+  assert.strictEqual(r.code, 1); assert.match(r.out, /HTTP 404/);
+  assert.strictEqual(tokens[0].status, 'pending');
+  r = await cli(['approve', 't1', 'n1', 'AAAA-1111']);
+  assert.strictEqual(r.code, 0); assert.match(r.out, /revoked 1 other token/);
+  assert.strictEqual(tokens[0].status, 'active'); assert.strictEqual(tokens[1].status, 'revoked');
+  r = await cli(['list']);
+  assert.match(r.out, /no pending/);
+});
+
+test('revoke', async () => {
+  const r = await cli(['revoke', 't1', 'n1']);
+  assert.strictEqual(r.code, 0); assert.match(r.out, /revoked 1 token/);
+  assert.strictEqual(tokens[0].status, 'revoked');
+});
+
+test('wrong admin key and key file', async () => {
+  let r = await cli(['list'], { RELAY_ADMIN_KEY: 'nope' });
+  assert.strictEqual(r.code, 1); assert.match(r.out, /wrong admin key/);
+  const f = path.join(os.tmpdir(), `relay-admin-key-${process.pid}`);
+  fs.writeFileSync(f, KEY + '\n');
+  r = await cli(['list'], { RELAY_ADMIN_KEY_FILE: f });
+  fs.unlinkSync(f);
+  assert.strictEqual(r.code, 0);
+});
+
+test('admin key on argv is refused (control: same call via env works)', async () => {
+  for (const a of [['--admin-key', KEY, 'list'], ['--key=' + KEY, 'list']]) {
+    const r = await cli(a, {});
+    assert.strictEqual(r.code, 2); assert.match(r.out, /must not be passed/);
+  }
+  assert.strictEqual((await cli(['list'])).code, 0);
+});
+
+test('missing key refused; help text commands are all executed by this suite', async () => {
+  assert.strictEqual((await cli(['list'], {})).code, 2);
+  const cmds = [...HELP.matchAll(/^ {2}(list|approve|revoke|ban|unban|blocked)\b/gm)].map((m) => m[1]);
+  assert.deepStrictEqual(cmds, ['list', 'approve', 'revoke', 'ban', 'unban', 'blocked']);
+  const argsFor = { list: ['list'], approve: ['approve', 't', 'n', 'F'], revoke: ['revoke', 't', 'n'], ban: ['ban', 't', 'n'], unban: ['unban', 't', 'n'], blocked: ['blocked'] };
+  for (const c of cmds) assert.notStrictEqual((await cli(argsFor[c])).code, 2, c);
+  assert.strictEqual(spawnSync(process.execPath, [CLI, 'bogus']).status, 2);
+});
+
+test('ban prints the tokenless-access warning when the flag is off; no warning when on; blocked/unban', async () => {
+  protect = false;
+  let r = await cli(['ban', 't1', 'evil', 'because']);
+  assert.strictEqual(r.code, 0); assert.match(r.out, /banned t1\/evil/);
+  assert.match(r.out, /WARNING: protect_bound_names is OFF.*anonymously/);
+  assert.strictEqual(blocks[0].reason, 'because');
+  protect = true;
+  r = await cli(['ban', 't1', 'evil2', '--machine', 'abc']);
+  assert.doesNotMatch(r.out, /WARNING/); assert.match(r.out, /machine abc/);
+  assert.strictEqual(blocks[1].machine_id_hash, 'abc');
+  r = await cli(['blocked']);
+  assert.match(r.out, /t1\tname\tevil\t/);
+  r = await cli(['unban', 't1', 'evil']);
+  assert.match(r.out, /unbanned 1 entry/);
+  assert.match((await cli(['blocked'])).out, /nothing blocked/);
+  assert.strictEqual((await cli(['ban', 't1'])).code, 2);
+});
+
+test('list shows self-reported machine info only when sent', async () => {
+  tokens.push({ team_id: 't1', node_name: 'm1', fingerprint: 'CCCC', status: 'pending', created_at: 'x', hostname: 'box', os: 'linux', machine_id_hash: 'abcdef0123456789' });
+  const r = await cli(['list']);
+  assert.match(r.out, /m1\tCCCC\tx\thost=box os=linux machine=abcdef012345 \(self-reported\)/);
+});

package/core/dev/scripts/run-rust-tests.js

@@ -1,24 +1,12 @@
 #!/usr/bin/env node
 /**
- * run-rust-tests.js — make `cargo test --lib` actually runnable on Windows (TASK_1619).
+ * run-rust-tests.js — build the kenaz-dashboard lib test binary and run it (TASK_1619).
  *
- * Root cause: the kenaz-dashboard lib unittest binary needs the Common-Controls v6
- * manifest (rfd crate statically imports comctl32!TaskDialogIndirect, which only
- * exists in the v6 SxS assembly). build.rs emits `cargo:rustc-link-arg-tests=
- * /MANIFEST:EMBED + /MANIFESTINPUT:test.manifest`, but cargo applies those flags
- * only to integration test targets (tests/), NOT to the lib unittest unit —
- * verified empirically 2026-06-11: the build-script output file contains the
- * directives while the rustc -v link invocation does not. Result: the loader
- * binds comctl32 5.82 from WinSxS and dies with STATUS_ENTRYPOINT_NOT_FOUND
- * (0xc0000139, bash exit 127) before any test runs.
- *
- * A global `cargo:rustc-link-arg` is NOT safe: tauri-build already embeds an
- * RT_MANIFEST resource for the app binary; adding /MANIFESTINPUT there creates
- * a duplicate-manifest link failure.
- *
- * Fix here: build with --no-run, copy the test exe to a stable fresh name
- * (the copy's new timestamp busts the per-path SxS activation-context cache),
- * drop an external .manifest beside it, then exec it with passthrough args.
+ * Builds with --no-run (so compiler errors can be rendered readably from the JSON
+ * message stream), locates the lib unittest executable and execs it with the filter
+ * and passthrough args. The Windows Common-Controls manifest workaround this script
+ * used to carry was only needed for rfd's static TaskDialogIndirect import; rfd is
+ * gone and the test exe starts fine without any manifest.
  *
  * Usage:
  *   node dev/scripts/run-rust-tests.js [test-filter] [-- extra-harness-args]
@@ -36,7 +24,6 @@ const { verifyTargetDir } = require('./verify-target-dir.js');
 
 const repoRoot = path.resolve(__dirname, '..', '..');
 const crateDir = path.join(repoRoot, 'dashboard', 'src-tauri');
-const manifestSrc = path.join(crateDir, 'test.manifest');
 
 // TASK_2058: parse `[test-filter] [-- extra-harness-args]`.
 //
@@ -137,7 +124,7 @@ function main() {
   const exeArgs = buildExeArgs(process.argv.slice(2));
 
   // TASK_1879: default to the canonical shared verify target dir. Avoids both
-  // Windows MAX_PATH (vendor/kuzu CMake) and the live tauri-dev lock on the
+  // Windows MAX_PATH and the live tauri-dev lock on the
   // repo's own target/. Explicit CARGO_TARGET_DIR still wins.
   const env = { ...process.env };
   if (!env.CARGO_TARGET_DIR) {
@@ -192,31 +179,8 @@ function main() {
     fail(`could not locate lib test executable (got: ${testExe})`);
   }
 
-  // 3. Non-Windows: no manifest problem — run the artifact directly.
-  if (process.platform !== 'win32') {
-    const direct = spawnSync(testExe, exeArgs, { stdio: 'inherit' });
-    process.exit(direct.status ?? 1);
-  }
-
-  // 4. Windows: copy to a stable name + external manifest (cache-busting copy).
-  if (!fs.existsSync(manifestSrc)) {
-    fail(`test.manifest not found at ${manifestSrc}`);
-  }
-  const runDir = path.dirname(testExe);
-  const runExe = path.join(runDir, 'kenaz_dashboard_unit_tests.exe');
-  fs.copyFileSync(testExe, runExe); // fresh timestamp invalidates SxS manifest cache
-  fs.copyFileSync(manifestSrc, `${runExe}.manifest`);
-  // Stage the PDB too so panic backtraces keep symbols (best effort).
-  const pdb = testExe.replace(/\.exe$/i, '.pdb');
-  if (fs.existsSync(pdb)) {
-    try {
-      fs.copyFileSync(pdb, runExe.replace(/\.exe$/i, '.pdb'));
-    } catch {
-      /* non-fatal */
-    }
-  }
-
-  const run = spawnSync(runExe, exeArgs, { stdio: 'inherit' });
+  // 3. Run the artifact directly.
+  const run = spawnSync(testExe, exeArgs, { stdio: 'inherit' });
   process.exit(run.status ?? 1);
 }
 

package/core/dev/scripts/rust-verify-worktree.js

@@ -5,8 +5,8 @@
  *
  * PROBLEM: a Rust-scoped worktree subagent cannot safely run `cargo`/
  * `run-rust-tests.js` in its OWN task worktree. That worktree is a fresh
- * source root, so kuzu (a [patch] path dependency, see verify-target-dir.js)
- * has to be rebuilt from scratch via CMake — 10+ minutes, which blows the
+ * source root, so the whole dependency tree (see verify-target-dir.js)
+ * has to be rebuilt from scratch — minutes, which blows the
  * Bash foreground timeout and, per prompt.js rule 13/feedback_agent_orphan_
  * build_holds_lock, leaves an orphan cargo holding the shared target-dir
  * lock forever.
@@ -14,7 +14,7 @@
  * FIX: ONE canonical, reused worktree (this script owns it) that agents
  * check out their branch into, run a single narrow test filter in, and
  * hand back. The cache stays warm across dispatches because it is always
- * the SAME source root (kuzu's build artifacts are keyed per source root).
+ * the SAME source root (build artifacts are keyed per source root).
  *
  * Marker file `.kenaz-rust-verify` inside the worktree is the safety
  * invariant: every subcommand that would touch (create/checkout/lock in)
@@ -67,7 +67,7 @@ const RUNNER_REL_PATH = path.join('dev', 'scripts', 'run-rust-tests.js');
 // and the old `path.resolve(__dirname, '..', '..')` returned the WORKTREE
 // root, not the main repo — deriving a stray `<repoRoot>/.kenaz-worktrees/
 // <repoRoot-basename>/rust-verify` path nested inside the task worktree
-// and paying a cold kuzu build, exactly what this script exists to avoid.
+// and paying a cold build, exactly what this script exists to avoid.
 //
 // Fix: ask git. `git rev-parse --git-common-dir` always resolves to the
 // MAIN repo's shared `.git` directory, even when run from a linked

package/core/dev/scripts/verify-target-dir.js

@@ -6,9 +6,9 @@
  * generators, taskgen templates, verify scripts, formation runner/integration)
  * must take the value from here instead of inventing its own directory.
  *
- * Why a short path at all (Windows): vendor/kuzu's CMake object paths exceed
- * MAX_PATH (260) when the target dir sits under the repo or a worktree
- * (worktree paths add ~40 chars). A short root like C:/t/... keeps CMake alive.
+ * Why a short path at all (Windows): deep C/C++ dependency object paths
+ * can approach MAX_PATH (260) when the target dir sits under the repo or a
+ * worktree (worktree paths add ~40 chars). A short root like C:/t/... avoids it.
  *
  * Why ONE shared directory (user decision 2026-08-22): the previous convention
  * — "each dispatch invents a unique dir (C:/t/vis, C:/t/emb, C:/t1599, ...)
@@ -27,10 +27,10 @@
  * cargo.exe / build-script-build.exe at 0% CPU with NO rustc children
  * (nothing is compiling). Only in the orphan case kill the holder.
  *
- * Cache-heat caveat: kuzu is a [patch] path dependency, so its build artifacts
- * are keyed per source root. Verifies from the SAME checkout (main repo, or a
+ * Cache-heat caveat: workspace crates' build artifacts are keyed per
+ * source root. Verifies from the SAME checkout (main repo, or a
  * reused worktree) get the warm cache; a verify from a NEW worktree path
- * recompiles kuzu but coexists in the same dir without invalidating others.
+ * recompiles them but coexists in the same dir without invalidating others.
  * The dir therefore still grows across many distinct worktree roots — when it
  * gets too big, delete the whole canonical dir while no cargo is running; it
  * is pure cache and rebuilds itself.

package/core/plugins/kenaz/INVENTORY.md

@@ -13,7 +13,7 @@ off = every hook exits before reading stdin. assist = silent telemetry/bookkeepi
 | agent-flow POST (Notification, Pre/PostToolUse, PostToolUseFailure, SessionEnd, Stop, SubagentStart/Stop; user-level curl) | ship | assist | skipped silently when backend down |
 | SessionStart agent-flow ping | ship | assist | |
 | SessionStart guidance (new, replaces injecting CLAUDE.md) | ship | full | `guidance.md` |
-| _run-user-prompt.js (runs handoff-staleness, fatigue-check, daemon-outbox, turn-context, task-bridge, lease-touch, stream-delta) | ship | full | prints context |
+| _run-user-prompt.js (runs daemon-outbox, turn-context, task-bridge, correction-detect; see DEFAULT_HOOKS) | ship | full | prints context |
 | memory-guard.js | ship | full | |
 | synapse-first-investigation.js | ship | full | |
 | task-bridge.js (PostToolUse Task*) | ship | assist | |
@@ -26,19 +26,19 @@ off = every hook exits before reading stdin. assist = silent telemetry/bookkeepi
 
 Hooks only act in Kenaz projects (`.kenaz/project.yaml`, `_project-guard.js`): run `/kenaz init` once in a fresh project.
 
-## Commands (25)
+## Commands (13)
 | Class | Commands |
 |---|---|
-| ship (12 + new `/kenaz`) | Ansuz, Amelia, architect, dev, incident, review, security, spec, strategy, 產品, 設計, 評估 |
-| core | Huginn, sunny, lead, agent-worker, canary |
-| retire | archive, init, 進度, 開發, legacy_dev, 產品檢視, product-review, multi-agent, dev, lead (user retired 2026-10-09 with Formation) |
+| ship (11 + new `/kenaz`) | Ansuz, Amelia, architect, incident, review, security, spec, 產品, 設計, 評估 |
+| core | Huginn, canary, agent-worker (invoked by the Rust scheduler with `--task`/`--agent`) |
+| removed | strategy (Strategy Agent skill gone), archive, init, 進度, legacy_dev, 產品檢視, product-review, sunny (Pipeline / TASK_QUEUE / retired-subsystem commands; `/dev`, `/lead`, `/開發`, `multi-agent` retired earlier with Formation) |
 
-## Skills (45)
+## Skills
 | Class | Skills |
 |---|---|
 | ship (34) | architect_agent, assessment_agent, backend_agent, backend_engineer, code_reviewer, dev_agent, designer, developer, feature_agent, frontend_agent, incident_response, product_manager, qa_engineer, security_agent, spec_optimizer, sre_agent, adapt, animate, audit, bolder, clarify, colorize, critique, delight, distill, extract, frontend-design, harden, normalize, onboard, optimize, polish, quieter, ui-ux-pro-max |
-| core | heimdall, huginn, sunny, optimization_agent |
-| retire | legacy_dev |
+| core | heimdall, huginn, optimization_agent |
+| removed | legacy_dev, sunny |
 | third-party / domain (not shipped; install separately from .agents/skills) | vercel-react-best-practices, supabase-postgres-best-practices, remotion-best-practices, pcb-review |
 
 ## Open items / caveats

package/core/plugins/kenaz/README.md

@@ -48,8 +48,18 @@ Independent Codex sessions use **pull-on-prompt**: in `full` mode with trusted h
 
 Resolution: env `KENAZ_MODE` > `<project>/.kenaz/kenaz.yaml` > `~/.kenaz/kenaz.yaml` > `full`. Hooks fail open (backend down or core not found: no output, exit 0).
 
+## Agent SDK sessions
+
+Programs built on `claude_agent_sdk` (`CLAUDE_CODE_ENTRYPOINT` `sdk-py` / `sdk-ts`) load `~/.claude/settings.json` too, so they would get this plugin. Hooks (`hooks/sdk-gate.js`) and the kenaz-peer mod therefore do nothing for those sessions. `claude -p` (`sdk-cli`) and interactive entrypoints are unchanged. Set `KENAZ_IN_SDK=1` to opt a program in.
+
+The MCP tools cannot be gated: `.mcp.json` is a plain HTTP server entry, not a launcher that could exit, and the connection is made before any hook runs. SDK users who do not want the 34 tools pass `setting_sources=[]` (or `[]` plus the sources they need) and `strict_mcp_config` (`extra_args={"strict-mcp-config": None}`) in `ClaudeAgentOptions`.
+
 ## CLI version gate
 
 Not needed: the 2.1.287 gate (TASK_2234, `peer_mod.rs`) exists because kenaz-peer is a mod module (`hooks/register.ts`). This plugin uses only plain hooks, commands, skills and MCP, which older CLIs support. Automatic registration into `CLAUDE_CODE_PLUGIN_DIRS` (as kenaz-peer gets) is a follow-up in `peer_mod.rs`; until then use `--plugin-dir`.
 
 Tests: `node --test plugins/kenaz/scripts/kenaz.test.js`. Classification: `INVENTORY.md`.
+
+## Peer node identity
+
+kenaz-server requests a relay node token on its own; it starts pending until the relay operator approves its fingerprint. `GET http://localhost:18080/api/peer/status?projectPath=<project>` shows `node_identity` (`none` / `pending` with the fingerprint / `active`). Send the fingerprint to the operator out of band. No token or an old relay keeps today behaviour. Operator commands, the enforcement flag and the `X-Node-Token` header for non-Claude agents that call the relay directly: `yggdrasil-relay/DESIGN.md`, section "Node tokens and approval".

package/core/plugins/kenaz/commands/architect.md

@@ -17,8 +17,7 @@
    - 撰寫模組接口規範
 
 4. **產出文件**：
-   - 更新 `dev/pipeline/TASK_QUEUE.json`
-   - 建立任務文件至 `dev/pipeline/tasks/`
+   - 用 `node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js create` 建立任務卡（`.kenaz/tasks/backlog/`）
    - 撰寫接口文檔至 `docs/`
 
 請開始執行系統架構設計。

package/core/plugins/kenaz/commands/spec.md

@@ -4,7 +4,7 @@
 
 ## 使用場景
 
-- 完成重要里程碑後，需要整理記憶點
+- 完成重要里程碑後，需要整理文件與任務狀態
 - 需要更新 PRODUCT_SPEC.md 的 Feature 狀態
 - 需要從 .failure/ 提取失敗經驗
 - 定期維護文件（建議每週）

package/core/plugins/kenaz/commands//347/224/242/345/223/201.md

@@ -10,6 +10,6 @@
    - 深度理解用戶需求
    - 進行需求分析
    - 將需求拆解為開發任務
-   - 將任務寫入 Pipeline 系統
+   - 用 `node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js create` 建立任務卡（`.kenaz/tasks/backlog/`），完成後建議交給 `/Ansuz` 派工
 
 請開始執行產品需求分析。

package/core/plugins/kenaz/guidance.md

@@ -1,5 +1,5 @@
 [Kenaz plugin: mode full] Kenaz MCP tools (kenaz-dashboard) are available when kenaz-server runs on localhost:18080.
 - Code navigation: kenaz_lsp_callers / kenaz_lsp_references / kenaz_lsp_definition / kenaz_lsp_symbols (always pass projectPath). Text search: Grep/Glob.
 - Collaboration: kenaz_peer_send / kenaz_peer_threads (other sessions, other machines, Codex), /kenaz ygg status|join.
-- Reply in the user's language. Commands: /Ansuz, /Amelia, /review, /security, /incident, /spec, /strategy.
+- Reply in the user's language. Commands: /Ansuz, /Amelia, /review, /security, /incident, /spec.
 - Switch: /kenaz off | assist | full (or env KENAZ_MODE). off disables every Kenaz hook.

package/core/plugins/kenaz/hooks/kenaz-hook.js

@@ -15,6 +15,7 @@ const net = require('net');
 const http = require('http');
 const { spawnSync } = require('child_process');
 const { resolveMode, allows, projectDir } = require('./mode');
+const { isSdkSession } = require('./sdk-gate');
 
 const HOST = '127.0.0.1';
 const PORT = Number(process.env.KENAZ_BACKEND_PORT) || 18080;
@@ -86,7 +87,7 @@ function run(spec, stdin, dir) {
 
 function main() {
   const spec = HOOKS[process.argv[2]];
-  if (!spec) return;
+  if (!spec || isSdkSession()) return; // TASK_2455: SDK sessions get nothing, before stdin or any write
   const dir = projectDir();
   // A project that ships the Kenaz hooks itself (the core repo) registers them in its own
   // .claude/settings.json; the plugin yields so no hook runs twice (same rule as _user-scope.js).

package/core/plugins/kenaz/hooks/sdk-gate.js

@@ -0,0 +1,9 @@
+'use strict';
+// TASK_2455: claude-agent-sdk sessions (CLAUDE_CODE_ENTRYPOINT sdk-py / sdk-ts / ...) must not get Kenaz.
+// sdk-cli is `claude -p` (Kenaz's own dispatch, headless nodes) and keeps working. KENAZ_IN_SDK=1 opts in.
+function isSdkSession(env) {
+  env = env || process.env;
+  const ep = String(env.CLAUDE_CODE_ENTRYPOINT || '');
+  return ep.startsWith('sdk-') && ep !== 'sdk-cli' && env.KENAZ_IN_SDK !== '1';
+}
+module.exports = { isSdkSession };

package/core/plugins/kenaz/scripts/kenaz.test.js

@@ -19,6 +19,18 @@ function hook(name, dir, env, input) {
   });
 }
 
+test('TASK_2455: SDK sessions get nothing; cli / sdk-cli / KENAZ_IN_SDK=1 keep today\'s output', () => {
+  const dir = proj();
+  for (const n of ['guidance', 'prompt-runner', 'memory-guard', 'flow-post', 'session-start', 'session-stop']) {
+    for (const ep of ['sdk-py', 'sdk-ts']) {
+      const r = hook(n, dir, { CLAUDE_CODE_ENTRYPOINT: ep });
+      assert.strictEqual(r.status, 0); assert.strictEqual(r.stdout, ''); assert.strictEqual(r.stderr, '');
+    }
+  }
+  for (const ep of ['cli', 'sdk-cli']) assert.match(hook('guidance', dir, { CLAUDE_CODE_ENTRYPOINT: ep }).stdout, /Kenaz plugin/);
+  assert.match(hook('guidance', dir, { CLAUDE_CODE_ENTRYPOINT: 'sdk-py', KENAZ_IN_SDK: '1' }).stdout, /Kenaz plugin/);
+});
+
 test('full prints guidance (control for off)', () => {
   const r = hook('guidance', proj());
   assert.strictEqual(r.status, 0);
@@ -102,7 +114,7 @@ test('ygg join activates the room in collaboration_projects; status explains how
   const srv = http.createServer((req, res) => {
     let b = ''; req.on('data', (d) => { b += d; });
     req.on('end', () => {
-      if (req.method === 'POST') posts.push(JSON.parse(b));
+      if (req.method === 'POST') { posts.push(JSON.parse(b)); cfg.collaboration_projects = posts[posts.length - 1].collaboration_projects; }
       res.setHeader('content-type', 'application/json');
       res.end(JSON.stringify(req.method === 'POST' ? { ok: true } : cfg));
     });
@@ -120,7 +132,7 @@ test('ygg join activates the room in collaboration_projects; status explains how
     srv.close();
   }
   const { buildStatus, renderStatus } = require('./ygg.js');
-  assert.match(renderStatus(buildStatus(cfg, { connected: false, nodes: [] }, null)), /not active in this project - run "ygg join <key>"/);
+  assert.match(renderStatus(buildStatus(Object.assign({}, cfg, { collaboration_projects: ['other'] }), { connected: false, nodes: [] }, null)), /not active in this project - run "ygg join <key>"/);
 });
 
 // TASK_2416: `ygg create` posts to the relay (config relay_url), then joins with the returned key.
@@ -139,7 +151,7 @@ async function withStub(relayReply, fn) {
       }
       if (req.url.startsWith('/api/nodes')) return res.end('[]');
       if (req.url.startsWith('/api/yggdrasil/config')) {
-        if (req.method === 'POST') { seen.config.push(JSON.parse(b)); return res.end(JSON.stringify({ ok: true })); }
+        if (req.method === 'POST') { seen.config.push(JSON.parse(b)); cfg.collaboration_projects = seen.config[seen.config.length - 1].collaboration_projects; return res.end(JSON.stringify({ ok: true })); }
         return res.end(JSON.stringify(cfg));
       }
       res.end(JSON.stringify({ success: true, created: false }));

package/core/plugins/kenaz/scripts/sync.js

@@ -16,7 +16,7 @@ const SKILLS = [
   'adapt', 'animate', 'audit', 'bolder', 'clarify', 'colorize', 'critique', 'delight', 'distill', 'extract',
   'frontend-design', 'harden', 'normalize', 'onboard', 'optimize', 'polish', 'quieter', 'ui-ux-pro-max',
 ];
-const COMMANDS = ['Amelia', 'Ansuz', 'architect', 'incident', 'review', 'security', 'spec', 'strategy', '產品', '設計', '評估'];
+const COMMANDS = ['Amelia', 'Ansuz', 'architect', 'incident', 'review', 'security', 'spec', '產品', '設計', '評估'];
 
 // Core-relative references become plugin-relative / core-resolved.
 // In a user's project (npm install) the core lives in ~/.kenaz/core, not the project folder, so a

package/core/plugins/kenaz/scripts/ygg.js

@@ -149,7 +149,15 @@ function postBody(cfg, patch) {
 async function join(dir, key, scope) {
   if (!key || /\s/.test(key)) throw new Error('usage: ygg join <key> [--project|--global]');
   const cfg = await getConfig(dir);
+  // TASK_2441: no room key to activate = the POST below would save an empty list and "succeed".
+  if (!cfg.effective_project_key) throw new Error("cannot work out this project's room (" + (cfg.error || 'no effective_project_key') + '); does ' + dir + ' have a repo with a remote?');
   await postConfig(dir, postBody(cfg, { enabled: true, publishable_key: key, key_scope: scope, collaboration_projects: withCollab(cfg, true) }));
+  // Verify by reading back: a save that returned ok but did not land must not print a status that says "run join".
+  const after = await getConfig(dir);
+  if (!(after.collaboration_projects || []).includes(cfg.effective_project_key)) {
+    throw new Error('join saved the key but room "' + cfg.effective_project_key + '" is not in collaboration_projects after re-reading the config; expected in ' +
+      path.join(dir, '.kenaz', 'yggdrasil.local.yaml') + ' (collaboration_projects: "' + cfg.effective_project_key + '"); the server reports ' + JSON.stringify(after.collaboration_projects || []));
+  }
   return status(dir);
 }
 

package/core/plugins/kenaz/scripts/ygg.test.js

@@ -0,0 +1,72 @@
+'use strict';
+// node --test plugins/kenaz/scripts/ygg.test.js
+// TASK_2441: ygg join must read the config back and fail loudly when the room did not land.
+const test = require('node:test');
+const assert = require('node:assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const http = require('http');
+const { spawn } = require('child_process');
+
+const YGG = path.join(__dirname, 'ygg.js');
+const ROOM = 'github.com/o/r';
+
+async function withBackend(persist, fn) {
+  const cfg = { enabled: false, effective_project_key: ROOM, node_name: 'Alice', publishable_key: '', collaboration_projects: [], relay_url: '' };
+  const srv = http.createServer((req, res) => {
+    let b = ''; req.on('data', (d) => { b += d; });
+    req.on('end', () => {
+      res.setHeader('content-type', 'application/json');
+      if (req.url.startsWith('/api/yggdrasil/config') && req.method === 'POST') {
+        if (persist) Object.assign(cfg, JSON.parse(b));
+        return res.end(JSON.stringify({ ok: true }));
+      }
+      res.end(JSON.stringify(req.url.startsWith('/api/yggdrasil/config') ? cfg : req.url.startsWith('/api/projects') ? { success: true } : {}));
+    });
+  });
+  await new Promise((r) => srv.listen(0, '127.0.0.1', r));
+  try { return await fn(srv.address().port); } finally { srv.close(); }
+}
+
+function cli(port, dir) {
+  return new Promise((resolve) => {
+    const c = spawn(process.execPath, [YGG, 'join', 'ygk_abc', '--project-path', dir],
+      { env: Object.assign({}, process.env, { KENAZ_HTTP_PORT: String(port) }) });
+    let out = ''; let err = '';
+    c.stdout.on('data', (d) => { out += d; }); c.stderr.on('data', (d) => { err += d; });
+    c.on('close', (code) => resolve({ code, out, err }));
+  });
+}
+
+test('join exits non-zero naming the file when the room is not in collaboration_projects after the POST', async () => {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'ygg2441-'));
+  await withBackend(false, async (port) => {
+    const r = await cli(port, dir);
+    assert.notStrictEqual(r.code, 0);
+    assert.match(r.err, /yggdrasil\.local\.yaml/);
+    assert.ok(r.err.includes(ROOM), r.err);
+    assert.doesNotMatch(r.out, /not active in this project/);
+  });
+});
+
+test('control: join against a backend that persists the room prints "active in this project"', async () => {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'ygg2441-'));
+  await withBackend(true, async (port) => {
+    const r = await cli(port, dir);
+    assert.strictEqual(r.code, 0, r.err);
+    assert.match(r.out, /active in this project/);
+    assert.doesNotMatch(r.out, /not active/);
+  });
+});
+
+test('join refuses when the backend reports no effective_project_key (nothing to activate)', async () => {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'ygg2441-'));
+  const srv = http.createServer((req, res) => { res.setHeader('content-type', 'application/json'); res.end(JSON.stringify({ enabled: false, error: 'yggdrasil.yaml not found' })); });
+  await new Promise((r) => srv.listen(0, '127.0.0.1', r));
+  try {
+    const r = await cli(srv.address().port, dir);
+    assert.notStrictEqual(r.code, 0);
+    assert.match(r.err, /cannot work out this project's room/);
+  } finally { srv.close(); }
+});