leerness 1.36.297 → 1.36.298

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 1.36.298 - 2026-10-11
+
+- Fixed: on Windows, `leerness path-setup --apply` never registered the npm bin folder in the user PATH (T-0351). This was so from 1.9.254.
+  - Cause: the PowerShell command joined its statements with spaces only, so PowerShell refused it as a whole (UnexpectedToken), and the command reported a failure.
+  - The command now edits `HKCU\Environment\Path` itself. It keeps the value's raw text and registry type, so REG_EXPAND_SZ entries such as `%USERPROFILE%\...\WindowsApps` stay unexpanded, and it refuses other types. It also sends the settings-change broadcast that new terminals rely on.
+  - The folder counts as present only when it is written in the Path as such, letter case aside. If the Path names it only through a variable, a second, literal entry is added.
+  - It invokes no PowerShell module cmdlet. Write-Output and Where-Object are gone; on a GitHub Windows runner without PSModulePath, the first such cmdlet cost 21.5-52 s per launch (T-0343).
+  - A bin path with `;` or `%` is not registered automatically. The command says so and names the manual step.
+  - If a user variable named `LEERNESS_PATH_SETUP_NOTIFY` exists, the command stops before changing anything. A failed write ends with exit 1 and is reported as a failure.
+  - The dry-run hint of `path-setup` describes the new method.
+- Fixed: a decisions or lessons restore with an explicit write policy (`--write-policy-json`, or `writePolicyJson` in MCP) was refused with "snapshot does not belong to this file" when the project path was spelled differently from its real path (T-0350, listed under "Not fixed here" in 1.36.297).
+  - Examples are a lowercase drive letter, a junction or symlink, or an 8.3 short name. A restore without a write policy was not affected.
+  - Cause: the memory footprint capture named its files under the resolved (realpath) workspace, and the write admission named the same files under the path as given.
+  - The capture now uses the given spelling, after checking that it resolves to the same workspace. Its recheck still compares the resolved forms.
+- Tests (T-0351, T-0350):
+  - `scripts/path-setup-powershell-probe.js` (18 checks, Windows only) is `npm run test:path-setup`, part of `test`, `test:core` and `test:fast`.
+    - It parses the command with PowerShell's own parser and expects 0 commands and 0 parse errors. The old command has 3 commands and 1 parse error.
+    - It runs the command through `_registerPath` without PSModulePath, against a throwaway registry key, and checks that the real user Path is unchanged.
+    - On the old code it passes 2 of 18: the parser control and one of its own guard tests.
+  - `scripts/memory-policy-root-spelling-probe.js` is part of `npm run test:memory-command-policy`.
+    - By the CLI it restores through each spelling the machine has: as created, and a lowercase drive letter, a junction and the 8.3 short name on Windows, or a symlink on POSIX. Each restore must leave the same files as the restore through the real path.
+    - By MCP it restores once per surface through a lowercase drive letter on Windows, or a symlink on POSIX, and checks the restored entries.
+    - A workspace that resolves to another folder must be refused before any file is read.
+    - On the old code it passes only the two "as created" cases on Windows and on Linux.
+  - selftest: the path-setup pin checks the registry form.
+
 ## 1.36.297 - 2026-10-11
 
 - Fixed: on Windows, `decision`, `lesson` and `memory` writes that replace an existing file could take 20 s or more per file, or fail with "Windows metadata-preserving replacement failed: spawnSync ... powershell.exe ETIMEDOUT" (T-0343). This happened when Leerness ran in an environment with no PSModulePath.

package/README.md

@@ -195,7 +195,7 @@ MIT
 <!-- leerness:project-readme:start -->
 ## Leerness Project Harness
 
-이 프로젝트는 Leerness v1.36.297 하네스를 사용합니다. AI 에이전트는 작업 전 `leerness handoff`로 컨텍스트를 적재하고, 작업 후 `leerness check`/`leerness audit`/`leerness session close`를 수행해야 합니다.
+이 프로젝트는 Leerness v1.36.298 하네스를 사용합니다. AI 에이전트는 작업 전 `leerness handoff`로 컨텍스트를 적재하고, 작업 후 `leerness check`/`leerness audit`/`leerness session close`를 수행해야 합니다.
 
 ### 정체성 — AI 에이전트 운영 레이어 (UR-0030)
 
@@ -249,7 +249,7 @@ leerness memory restore decision <date|title>
 
 ### MCP server (외부 AI 통합)
 
-Leerness v1.36.297는 stdio JSON-RPC MCP server를 내장합니다 — Claude Code · Cursor · Codex CLI 등 외부 AI에 **102개 도구**를 노출:
+Leerness v1.36.298는 stdio JSON-RPC MCP server를 내장합니다 — Claude Code · Cursor · Codex CLI 등 외부 AI에 **102개 도구**를 노출:
 
 ```jsonc
 // 카테고리별
@@ -270,7 +270,7 @@ Leerness v1.36.297는 stdio JSON-RPC MCP server를 내장합니다 — Claude Co
 `<<autonomous-loop-dynamic>>` 신호만 보내면 AI가:
 1) 다음 라운드 후보 선정 → 2) 코드 변경 → 3) 회귀 테스트 갱신 → 4) 전체 e2e 스위트 통과 → 5) npm publish + git tag → 6) main push → 7) session close → 8) 다음 라운드 예약.
 
-현재 사용 중인 하네스 버전: **1.36.297**. 공개 릴리스 여부는 공개 저장소의 태그와 배포 기록에서 별도로 확인합니다.
+현재 사용 중인 하네스 버전: **1.36.298**. 공개 릴리스 여부는 공개 저장소의 태그와 배포 기록에서 별도로 확인합니다.
 
 ### 성능 가이드
 
@@ -308,7 +308,7 @@ leerness release pack --close --auto-main-push
 - `.leerness/session-handoff.md`: 다음 세션 인수인계 (자동 작성)
 - `.leerness/lessons.md` / `decisions.md` / `rules.md`: 영구 메모리 (5 surface)
 
-Last synced by Leerness v1.36.297: 2026-09-30
+Last synced by Leerness v1.36.298: 2026-09-30
 <!-- leerness:project-readme:end -->
 GitHub 로그인 계정 확인용 서버 어댑터: [설정·연결·승인과의 구분](docs/github-login.md). 실제 앱 등록/브라우저 세션 연결과 대상별 승인은 후속입니다.
 

package/bin/leerness.js

@@ -115,7 +115,7 @@ const {
   migrateLegacyWorkspace,
 } = require('../lib/workspace-dir');
 
-const VERSION = '1.36.297';
+const VERSION = '1.36.298';
 
 // MCP lifecycle 주소 표식은 현재 CLI 호출 한 번에만 유효하다. CLI bootstrap에서 즉시 env에서
 // 떼어 두어 `--no-record`/hook처럼 presence 기록 함수에 도달하지 않는 경로도 후속 child에 유출하지 않는다.
@@ -3992,18 +3992,41 @@ function _pathDiagnose() {
 // 1.9.255 (UR-0019 2단계): Windows User PATH 등록용 PowerShell 스크립트 생성 (순수 함수 — 테스트/디버그 가능)
 //   setx 의 1024자 truncation 회피 위해 [Environment]::SetEnvironmentVariable User scope 사용.
 //   멱등: 현재 User PATH 에 이미 있으면 EXISTS, 없으면 append 후 ADDED. 시스템 PATH 불변 (관리자 권한 불요).
+//   T-0351: from 1.9.254 the lines were joined with spaces only, so `...SetEnvironmentVariable(...)  Write-Output`
+//   was one statement and PowerShell refused the whole script (UnexpectedToken): `path-setup --apply` never ran it on
+//   Windows. Each statement now ends with `;`. Running it showed what [Environment]::Get/SetEnvironmentVariable would
+//   do to the user Path (review round 1): the read expands %VAR% entries with this process's values, and the write
+//   stores REG_SZ, so a REG_EXPAND_SZ Path (the Windows default, e.g. %USERPROFILE%\...\WindowsApps) would lose its
+//   references. The script reads the raw value and its registry type and writes both back. An entry counts as present
+//   only as written (letter case aside): expanding %VAR% here would use this shell's variables, which new terminals may
+//   not have, and could report EXISTS for a directory they cannot reach (review round 3; the owner chose this). The
+//   cost is a harmless second entry when the Path already names the directory through a variable. Deleting a variable
+//   that does not exist through SetEnvironmentVariable(..., 'User') writes nothing but sends the WM_SETTINGCHANGE that
+//   new terminals rely on, as the old write did; if a user variable of that name exists, the script stops before
+//   changing anything (round 2).
+//   The script invokes no command: Write-Output and Where-Object were the module cmdlets that cost 21.5-52 s per launch
+//   without PSModulePath on a GitHub Windows runner (T-0343). Inside `try`, PowerShell treats a .NET exception or a
+//   throw as terminating, so a failure ends the script with exit 1 before ADDED. A bin path with ';' or '%' is
+//   refused by _registerPath before this runs.
 function _winPathPsScript() {
   return [
     // npm prefix is data. JSON double quotes are not PowerShell escaping: $()/backticks execute.
-    "$b = $env:LEERNESS_PATH_BIN;",
-    "$u = [Environment]::GetEnvironmentVariable('PATH','User'); if (-not $u) { $u = '' }",
-    "$parts = $u.Split(';') | Where-Object { $_ -ne '' }",
-    "if ($parts -notcontains $b) {",
-    "  $nu = if ($u -eq '') { $b } else { $u.TrimEnd(';') + ';' + $b }",
-    "  [Environment]::SetEnvironmentVariable('PATH', $nu, 'User')",
-    "  Write-Output 'ADDED'",
-    "} else { Write-Output 'EXISTS' }"
-  ].join(' ');
+    "$b = $env:LEERNESS_PATH_BIN",
+    "$k = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey('Environment', $true)",
+    "if ($null -eq $k) { throw 'HKCU\\Environment cannot be opened for writing' }",
+    "try { $names = $k.GetValueNames(); "
+      + "if ($names -contains 'LEERNESS_PATH_SETUP_NOTIFY') { throw 'the user variable LEERNESS_PATH_SETUP_NOTIFY exists; leerness deletes that name to announce the change, so the Path was left as it is' }; "
+      + "$raw = [string]$k.GetValue('Path', '', [Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames); "
+      + "$kind = [Microsoft.Win32.RegistryValueKind]::ExpandString; "
+      + "if ($names -contains 'Path') { $kind = $k.GetValueKind('Path') }; "
+      + "if ($kind -ne [Microsoft.Win32.RegistryValueKind]::String -and $kind -ne [Microsoft.Win32.RegistryValueKind]::ExpandString) { throw ('the user Path has registry type ' + $kind) }; "
+      + "if ($raw.Split(';') -contains $b) { [Console]::Out.WriteLine('EXISTS') } "
+      + "else { $nu = if ($raw -eq '') { $b } else { $raw.TrimEnd(';') + ';' + $b }; "
+      + "$k.SetValue('Path', $nu, $kind); "
+      + "[Environment]::SetEnvironmentVariable('LEERNESS_PATH_SETUP_NOTIFY', $null, 'User'); "
+      + "[Console]::Out.WriteLine('ADDED') } } "
+      + "finally { $k.Close() }",
+  ].join('; ');
 }
 
 // 1.9.255 (UR-0019 2단계): Unix shell rc 등록 블록 마커 (순수 — 테스트/디버그 가능, 멱등 키)
@@ -4020,7 +4043,10 @@ function _registerPath(diag) {
   if (!bin) return { ok: false, method: 'none', detail: 'npm global bin 경로를 찾을 수 없음' };
   const platform = diag.platform || process.platform;
   if (platform === 'win32') {
-    // Windows: PowerShell [Environment]::SetEnvironmentVariable User scope (멱등, 관리자 권한 불요)
+    // Windows: PowerShell 로 HKCU\Environment 의 Path 원문과 값 종류를 보존해 append (멱등, 관리자 권한 불요)
+    // T-0351: ';' splits a PATH entry and '%' is expanded in a REG_EXPAND_SZ Path, so such a directory cannot be added
+    //   as one literal entry. Registration is refused before PowerShell runs, and the manual step is shown instead.
+    if (/[;%]/.test(bin)) return { ok: false, method: 'powershell-user-path', detail: `npm bin 경로에 ';' 또는 '%' 가 있어 자동 등록하지 않음 (수동 등록 필요): ${bin}` };
     try {
       const ps = _winPathPsScript(bin);
       const r = _spawnPortableArgvSync('powershell', ['-NoProfile', '-Command', ps], {
@@ -4078,7 +4104,7 @@ function pathSetupCmd(root, opts = {}) {
     log(yl(`  ⚠ leerness 가 PATH 에 없습니다 — 'leerness' 명령이 동작하지 않을 수 있음`));
     log(`  ${dm('적용 시 추가될 경로:')} ${diag.globalBin}`);
     if (diag.platform === 'win32') {
-      log(dm(`     방법: PowerShell [Environment]::SetEnvironmentVariable('PATH', ..., 'User')  (관리자 권한 불요)`));
+      log(dm(`     방법: PowerShell 로 HKCU\\Environment 의 Path 끝에 추가 — 원문(%VAR%)과 값 종류 유지 (관리자 권한 불요)`));
     } else {
       log(dm(`     방법: ${diag.shellRc} 에 export PATH 블록 append (멱등)`));
     }
@@ -4191,7 +4217,7 @@ function _selfTestCases() {
     { name: '_classifyCJK: 중국어/일본어 구분', run: () => { const z = Buffer.from('中', 'utf8'), j = Buffer.from('ひ', 'utf8'); return _classifyCJK(z, z.length).chinese > 0 && _classifyCJK(j, j.length).japanese > 0; } },
     { name: '_riskLabel: korean→CP949 / chinese→CP936', run: () => /CP949/.test(_riskLabel({ korean: 3, japanese: 0, chinese: 0, other: 0 }).risk) && /CP936/.test(_riskLabel({ korean: 0, japanese: 0, chinese: 3, other: 0 }).risk) },
     { name: '_dirInPath: 정규화 (trailing slash)', run: () => { const sep = process.platform === 'win32' ? ';' : ':'; const old = process.env.PATH; process.env.PATH = '/usr/bin' + sep + '/opt/x/bin'; const r = _dirInPath('/opt/x/bin/') === true && _dirInPath('/no/such') === false; process.env.PATH = old; return r; } },
-    { name: '_winPathPsScript: User scope + setx 미사용', run: () => { const ps = _winPathPsScript('C:\\npm'); return /SetEnvironmentVariable\('PATH', \$nu, 'User'\)/.test(ps) && !/setx/i.test(ps); } },
+    { name: '_winPathPsScript: HKCU Path 원문·값 종류 보존 + setx 미사용 (T-0351)', run: () => { const ps = _winPathPsScript('C:\\npm'); return ps.includes("OpenSubKey('Environment', $true)") && ps.includes('DoNotExpandEnvironmentNames') && ps.includes("$k.SetValue('Path', $nu, $kind)") && !/SetEnvironmentVariable\('PATH'/i.test(ps) && !/setx/i.test(ps); } },
     { name: '_unixPathBlock: 멱등 마커 + export', run: () => { const b = _unixPathBlock('/x/bin'); return b.includes('managed') && /export PATH="\$PATH:\/x\/bin"/.test(b); } },
     { name: '_shellGuardAnalyze: PS5.1 && → ps5-chain error', run: () => { const r = _shellGuardAnalyze('a && b', { shell: 'powershell', psVersion: '5' }); return r.issues.some(i => i.rule === 'ps5-chain' && i.severity === 'error'); } },
     { name: '_shellGuardAnalyze: bash && → 문제 없음', run: () => _shellGuardAnalyze('a && b', { shell: 'bash' }).issues.length === 0 },

package/lib/memory-footprint-capture.js

@@ -33,7 +33,14 @@ function captureMemoryFootprint(root, surface, limitsJson) {
   const resolved = resolveStatePaths(lexicalRoot), runtime = createRuntimeCompatibilityReader(lexicalRoot);
   if (!runtime().compatible) fail('runtime_incompatible');
   if (!['live','substrate'].includes(resolved.workspace.status)) fail('workspace_unavailable');
-  const workspace = resolved.workspace.selectedPath;
+  // T-0350: the files are named under the caller's spelling of the root, as admission, preparation and the commands
+  //   name them. The resolved workspace is the realpath.native form; with a root spelled another way (a lowercase
+  //   drive letter, a junction or symlink, an 8.3 short name) the snapshots never matched the caller's paths in
+  //   assertCheckedFileCurrent, and every restore with a write policy was refused. The spelled workspace must resolve
+  //   to the resolved one before any file is read, and the recheck still compares resolved forms.
+  const selectedPath = resolved.workspace.selectedPath;
+  const workspace = path.join(lexicalRoot, resolved.workspace.selectedName);
+  if (!sameResolvedParent(resolveMemoryParent(workspace), selectedPath)) fail('workspace_unavailable');
   const observed = [], files = {}, snapshots = {};
   let fileBytes = 0;
   for (const [role, suffix] of [['canonical','.json'],['projection','.md'],['archive','.archive.md']]) {
@@ -50,7 +57,7 @@ function captureMemoryFootprint(root, surface, limitsJson) {
   recheck() {
     const now = resolveStatePaths(lexicalRoot);
     if (!sameResolvedParent(originalRoot,resolveMemoryParent(lexicalRoot))
-      || now.projectRoot !== resolved.projectRoot || now.workspace.selectedPath !== workspace
+      || now.projectRoot !== resolved.projectRoot || now.workspace.selectedPath !== selectedPath
       || now.workspace.status !== resolved.workspace.status) fail('source_changed');
     if (!runtime().compatible || !createRuntimeCompatibilityReader(lexicalRoot)().compatible) fail('runtime_changed');
     for (const record of observed) assertCheckedFileCurrent(record.input,record.file);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "leerness",
-  "version": "1.36.297",
+  "version": "1.36.298",
   "description": "The AI-coding operations layer that makes \"done\" require evidence — persistent memory, evidence-gated completion checks, and clean handoffs for any AI agent (Claude Code, Codex, Cursor). State lives as plain files in your repo. CLI + MCP, 0 runtime dependencies.",
   "keywords": [
     "leerness",
@@ -48,15 +48,15 @@
     "LICENSE"
   ],
   "scripts": {
-    "test": "node ./scripts/lint.js && node ./scripts/workspace-dir-source-ratchet.js && npm run test:state-scopes && npm run test:runtime-compatibility && node ./scripts/workspace-dir-migration-probe.js && node ./scripts/workspace-dir-lock-order-probe.js && node ./scripts/lock-probe.js && node ./scripts/e2e-repo-guard.js && node ./scripts/e2e-lived-in-harness.js && npm run test:lock-heartbeat && npm run test:temp-cleanup && node ./scripts/platform-smoke.js && node ./scripts/parent-detect-selftest-probe.js && node ./scripts/verify-code-cross-runtime-probe.js && node ./scripts/release-runtime-probe.js && node ./scripts/which-shim-probe.js && node ./scripts/i18n-priority-surface-probe.js && npm run test:harness-text && npm run test:test-plan && node ./scripts/i18n-next-cluster-probe.js && node ./scripts/handoff-i18n-probe.js && node ./scripts/provider-capacity-probe.js && npm run test:provider-response && npm run test:github-login && npm run test:provider-dispatch && npm run test:provider-receipt && npm run test:provider-observation && npm run test:ui-review-publication && npm run test:ui-review-target && npm run test:ui-review-authorization && npm run test:ui-review-authority-host && npm run test:ui-review-authority-floor && npm run test:ui-review-proof-use && npm run test:ui-review-recovery && node ./scripts/file-lease-probe.js && node ./scripts/role-agent-schema-probe.js && node ./scripts/role-store-loader-probe.js && node ./scripts/role-fallback-probe.js && npm run test:agent-bench-output && npm run test:agent-chat-stream && npm run test:encoding-diagnostics && npm run test:managed-text && npm run test:plan-text && npm run test:session-close-text && npm run test:brief-text && npm run test:generation-text && npm run test:install-text && npm run test:authoring-language && npm run test:context-reading && npm run test:rule-text && npm run test:mode-text && npm run test:handoff-text && npm run test:audit-text && npm run test:audit-readme-text && npm run test:audit-env-text && npm run test:feature-graph-text && npm run test:env-sync-text && npm run test:teams-text && npm run test:reminder-text && npm run test:handoff-history-text && npm run test:env-snapshot-text && npm run test:context-current && npm run test:review-feedback && npm run test:ledger-sync && npm run test:state-lock && npm run test:history-retention && node ./bin/leerness.js --version && node ./bin/leerness.js selftest && node ./scripts/e2e-core.js && node ./scripts/mutation-integrity-probe.js && node ./scripts/handoff-readonly-probe.js && node ./scripts/mcp-presence-probe.js && npm run test:commands && npm run test:installed && node ./scripts/e2e.js && node ./scripts/review-checkpoint-probe.js && node ./scripts/review-checkpoint-transport-probe.js && node ./scripts/review-snapshot-probe.js && npm run test:memory-migration && npm run test:memory-items && npm run test:memory-budget && npm run test:memory-footprint && npm run test:memory-write-budget && npm run test:memory-write-preparation && npm run test:memory-write-admission && npm run test:memory-command-policy && npm run test:memory-publication-policy && npm run test:memory-recovery-transfer && npm run test:ui-boundary && node ./scripts/review-control-probe.js && npm run test:ui-review-run && npm run test:rule-verification",
-    "test:core": "node ./scripts/lint.js && node ./scripts/workspace-dir-source-ratchet.js && npm run test:state-scopes && npm run test:runtime-compatibility && node ./scripts/workspace-dir-migration-probe.js && node ./scripts/workspace-dir-lock-order-probe.js && node ./scripts/lock-probe.js && node ./scripts/e2e-repo-guard.js && node ./scripts/e2e-lived-in-harness.js && npm run test:lock-heartbeat && npm run test:temp-cleanup && node ./scripts/platform-smoke.js && node ./scripts/parent-detect-selftest-probe.js && node ./scripts/verify-code-cross-runtime-probe.js && node ./scripts/release-runtime-probe.js && node ./scripts/which-shim-probe.js && node ./scripts/i18n-priority-surface-probe.js && npm run test:harness-text && npm run test:test-plan && node ./scripts/i18n-next-cluster-probe.js && node ./scripts/handoff-i18n-probe.js && node ./scripts/provider-capacity-probe.js && npm run test:provider-response && npm run test:github-login && npm run test:provider-dispatch && npm run test:provider-receipt && npm run test:provider-observation && npm run test:ui-review-publication-smoke && npm run test:ui-review-target-smoke && npm run test:ui-review-authorization-smoke && npm run test:ui-review-authority-host-smoke && npm run test:ui-review-authority-floor-smoke && npm run test:ui-review-proof-use-smoke && npm run test:ui-review-recovery && node ./scripts/file-lease-probe.js && node ./scripts/role-agent-schema-probe.js && node ./scripts/role-store-loader-probe.js && node ./scripts/role-fallback-probe.js && npm run test:agent-bench-output && npm run test:review-feedback && npm run test:ledger-sync && npm run test:state-lock && npm run test:history-retention && node ./bin/leerness.js --version && node ./bin/leerness.js selftest && node ./scripts/e2e-core.js && node ./scripts/mutation-integrity-probe.js && node ./scripts/memory-guard-order-probe.js && node ./scripts/memory-input-preflight-probe.js && node ./scripts/memory-utf8-admission-probe.js && node ./scripts/memory-checked-input-probe.js && node ./scripts/memory-input-unit-probe.js && node ./scripts/memory-restore-canonical-probe.js && node ./scripts/memory-archive-retention-probe.js && node ./scripts/memory-archive-check-probe.js && node ./scripts/memory-projection-retention-probe.js && node ./scripts/memory-language-probe.js && node ./scripts/memory-legacy-retention-probe.js && node ./scripts/memory-recovery-receipt-probe.js && node ./scripts/memory-output-unit-probe.js && node ./scripts/memory-output-posix-probe.js && node ./scripts/memory-output-publication-probe.js && node ./scripts/memory-output-parent-race-probe.js && node ./scripts/handoff-readonly-probe.js && node ./scripts/mcp-presence-probe.js && node ./scripts/rule-applicability-probe.js && node ./scripts/review-checkpoint-probe.js && node ./scripts/review-checkpoint-transport-probe.js && node ./scripts/review-snapshot-probe.js && node ./scripts/review-snapshot-transport-probe.js && npm run test:memory-migration && npm run test:memory-items && npm run test:memory-budget && npm run test:memory-footprint && npm run test:memory-write-budget && npm run test:memory-write-preparation && npm run test:memory-write-admission && npm run test:memory-command-policy && npm run test:memory-publication-policy && npm run test:memory-recovery-transfer && npm run test:ui-boundary && npm run test:ui-review-run && npm run test:rule-verification",
+    "test": "node ./scripts/lint.js && node ./scripts/workspace-dir-source-ratchet.js && npm run test:state-scopes && npm run test:runtime-compatibility && node ./scripts/workspace-dir-migration-probe.js && node ./scripts/workspace-dir-lock-order-probe.js && node ./scripts/lock-probe.js && node ./scripts/e2e-repo-guard.js && node ./scripts/e2e-lived-in-harness.js && npm run test:lock-heartbeat && npm run test:temp-cleanup && npm run test:path-setup && node ./scripts/platform-smoke.js && node ./scripts/parent-detect-selftest-probe.js && node ./scripts/verify-code-cross-runtime-probe.js && node ./scripts/release-runtime-probe.js && node ./scripts/which-shim-probe.js && node ./scripts/i18n-priority-surface-probe.js && npm run test:harness-text && npm run test:test-plan && node ./scripts/i18n-next-cluster-probe.js && node ./scripts/handoff-i18n-probe.js && node ./scripts/provider-capacity-probe.js && npm run test:provider-response && npm run test:github-login && npm run test:provider-dispatch && npm run test:provider-receipt && npm run test:provider-observation && npm run test:ui-review-publication && npm run test:ui-review-target && npm run test:ui-review-authorization && npm run test:ui-review-authority-host && npm run test:ui-review-authority-floor && npm run test:ui-review-proof-use && npm run test:ui-review-recovery && node ./scripts/file-lease-probe.js && node ./scripts/role-agent-schema-probe.js && node ./scripts/role-store-loader-probe.js && node ./scripts/role-fallback-probe.js && npm run test:agent-bench-output && npm run test:agent-chat-stream && npm run test:encoding-diagnostics && npm run test:managed-text && npm run test:plan-text && npm run test:session-close-text && npm run test:brief-text && npm run test:generation-text && npm run test:install-text && npm run test:authoring-language && npm run test:context-reading && npm run test:rule-text && npm run test:mode-text && npm run test:handoff-text && npm run test:audit-text && npm run test:audit-readme-text && npm run test:audit-env-text && npm run test:feature-graph-text && npm run test:env-sync-text && npm run test:teams-text && npm run test:reminder-text && npm run test:handoff-history-text && npm run test:env-snapshot-text && npm run test:context-current && npm run test:review-feedback && npm run test:ledger-sync && npm run test:state-lock && npm run test:history-retention && node ./bin/leerness.js --version && node ./bin/leerness.js selftest && node ./scripts/e2e-core.js && node ./scripts/mutation-integrity-probe.js && node ./scripts/handoff-readonly-probe.js && node ./scripts/mcp-presence-probe.js && npm run test:commands && npm run test:installed && node ./scripts/e2e.js && node ./scripts/review-checkpoint-probe.js && node ./scripts/review-checkpoint-transport-probe.js && node ./scripts/review-snapshot-probe.js && npm run test:memory-migration && npm run test:memory-items && npm run test:memory-budget && npm run test:memory-footprint && npm run test:memory-write-budget && npm run test:memory-write-preparation && npm run test:memory-write-admission && npm run test:memory-command-policy && npm run test:memory-publication-policy && npm run test:memory-recovery-transfer && npm run test:ui-boundary && node ./scripts/review-control-probe.js && npm run test:ui-review-run && npm run test:rule-verification",
+    "test:core": "node ./scripts/lint.js && node ./scripts/workspace-dir-source-ratchet.js && npm run test:state-scopes && npm run test:runtime-compatibility && node ./scripts/workspace-dir-migration-probe.js && node ./scripts/workspace-dir-lock-order-probe.js && node ./scripts/lock-probe.js && node ./scripts/e2e-repo-guard.js && node ./scripts/e2e-lived-in-harness.js && npm run test:lock-heartbeat && npm run test:temp-cleanup && npm run test:path-setup && node ./scripts/platform-smoke.js && node ./scripts/parent-detect-selftest-probe.js && node ./scripts/verify-code-cross-runtime-probe.js && node ./scripts/release-runtime-probe.js && node ./scripts/which-shim-probe.js && node ./scripts/i18n-priority-surface-probe.js && npm run test:harness-text && npm run test:test-plan && node ./scripts/i18n-next-cluster-probe.js && node ./scripts/handoff-i18n-probe.js && node ./scripts/provider-capacity-probe.js && npm run test:provider-response && npm run test:github-login && npm run test:provider-dispatch && npm run test:provider-receipt && npm run test:provider-observation && npm run test:ui-review-publication-smoke && npm run test:ui-review-target-smoke && npm run test:ui-review-authorization-smoke && npm run test:ui-review-authority-host-smoke && npm run test:ui-review-authority-floor-smoke && npm run test:ui-review-proof-use-smoke && npm run test:ui-review-recovery && node ./scripts/file-lease-probe.js && node ./scripts/role-agent-schema-probe.js && node ./scripts/role-store-loader-probe.js && node ./scripts/role-fallback-probe.js && npm run test:agent-bench-output && npm run test:review-feedback && npm run test:ledger-sync && npm run test:state-lock && npm run test:history-retention && node ./bin/leerness.js --version && node ./bin/leerness.js selftest && node ./scripts/e2e-core.js && node ./scripts/mutation-integrity-probe.js && node ./scripts/memory-guard-order-probe.js && node ./scripts/memory-input-preflight-probe.js && node ./scripts/memory-utf8-admission-probe.js && node ./scripts/memory-checked-input-probe.js && node ./scripts/memory-input-unit-probe.js && node ./scripts/memory-restore-canonical-probe.js && node ./scripts/memory-archive-retention-probe.js && node ./scripts/memory-archive-check-probe.js && node ./scripts/memory-projection-retention-probe.js && node ./scripts/memory-language-probe.js && node ./scripts/memory-legacy-retention-probe.js && node ./scripts/memory-recovery-receipt-probe.js && node ./scripts/memory-output-unit-probe.js && node ./scripts/memory-output-posix-probe.js && node ./scripts/memory-output-publication-probe.js && node ./scripts/memory-output-parent-race-probe.js && node ./scripts/handoff-readonly-probe.js && node ./scripts/mcp-presence-probe.js && node ./scripts/rule-applicability-probe.js && node ./scripts/review-checkpoint-probe.js && node ./scripts/review-checkpoint-transport-probe.js && node ./scripts/review-snapshot-probe.js && node ./scripts/review-snapshot-transport-probe.js && npm run test:memory-migration && npm run test:memory-items && npm run test:memory-budget && npm run test:memory-footprint && npm run test:memory-write-budget && npm run test:memory-write-preparation && npm run test:memory-write-admission && npm run test:memory-command-policy && npm run test:memory-publication-policy && npm run test:memory-recovery-transfer && npm run test:ui-boundary && npm run test:ui-review-run && npm run test:rule-verification",
     "test:commands": "npm run test:hooks && npm run test:e2e-observation && node ./scripts/memory-guard-order-probe.js && node ./scripts/memory-input-preflight-probe.js && node ./scripts/memory-utf8-admission-probe.js && node ./scripts/memory-checked-input-probe.js && node ./scripts/memory-input-unit-probe.js && node ./scripts/memory-restore-canonical-probe.js && node ./scripts/memory-archive-retention-probe.js && node ./scripts/memory-archive-check-probe.js && node ./scripts/memory-projection-retention-probe.js && node ./scripts/memory-language-probe.js && node ./scripts/memory-legacy-retention-probe.js && node ./scripts/memory-recovery-receipt-probe.js && node ./scripts/memory-output-unit-probe.js && node ./scripts/memory-output-posix-probe.js && node ./scripts/memory-output-publication-probe.js && node ./scripts/memory-output-parent-race-probe.js && node ./scripts/command-flags-probe.js && node ./scripts/dead-flags-probe.js && node ./scripts/free-text-args-probe.js && node ./scripts/title-args-probe.js && node ./scripts/false-claim-probe.js && node ./scripts/claim-sweep-git-probe.js && node ./scripts/claim-runtime-cache-probe.js && node ./scripts/runtime-cost-probe.js && node ./scripts/secret-scan-scope-probe.js && node ./scripts/handoff-preservation-probe.js && node ./scripts/next-action-suggestion-probe.js && node ./scripts/api-skill-match-probe.js && node ./scripts/crud-check-probe.js && node ./scripts/claims-baseline-probe.js && node ./scripts/claims-baseline-concurrency-probe.js && node ./scripts/e2e-command-surface.js && node ./scripts/rule-applicability-probe.js && node ./scripts/review-request-labels-probe.js && node ./scripts/review-request-signals-probe.js && node ./scripts/store-values-probe.js && node ./scripts/review-snapshot-transport-probe.js && node ./scripts/bugfix-areas-probe.js && node ./scripts/done-status-probe.js && node ./scripts/fix-evidence-language-probe.js && node ./scripts/decision-fence-offset-probe.js && node ./scripts/task-sync-roundtrip-probe.js && node ./scripts/tracker-write-language-probe.js && node ./scripts/write-path-language-probe.js && node ./scripts/write-primitive-language-probe.js && node ./scripts/dry-run-refusal-probe.js",
     "test:e2e-observation": "node ./scripts/e2e-temp-scope-probe.js && node ./scripts/e2e-child-diagnostics-probe.js",
     "test:next-actions": "node ./scripts/next-action-suggestion-probe.js && node ./scripts/api-skill-match-probe.js",
     "test:installed": "npm run test:installed-lifecycle && node ./scripts/installed-cleanroom-probe.js",
     "test:installed-lifecycle": "node ./scripts/installed-handoff-lifecycle-probe.js",
     "test:handoff": "node ./scripts/handoff-readonly-probe.js",
-    "test:fast": "node ./scripts/lint.js && node ./scripts/workspace-dir-source-ratchet.js && npm run test:state-scopes && npm run test:runtime-compatibility && node ./scripts/workspace-dir-migration-probe.js && node ./scripts/workspace-dir-lock-order-probe.js && node ./scripts/lock-probe.js && node ./scripts/e2e-repo-guard.js && npm run test:lock-heartbeat && npm run test:temp-cleanup && node ./scripts/platform-smoke.js && node ./scripts/parent-detect-selftest-probe.js && node ./scripts/release-runtime-probe.js && node ./scripts/which-shim-probe.js && node ./scripts/i18n-priority-surface-probe.js && npm run test:harness-text && npm run test:test-plan && node ./scripts/i18n-next-cluster-probe.js && node ./scripts/handoff-i18n-probe.js && node ./scripts/mutation-integrity-probe.js && node ./scripts/memory-guard-order-probe.js && node ./scripts/memory-input-preflight-probe.js && node ./scripts/memory-utf8-admission-probe.js && node ./scripts/memory-checked-input-probe.js && node ./scripts/memory-input-unit-probe.js && node ./scripts/memory-restore-canonical-probe.js && node ./scripts/memory-archive-retention-probe.js && node ./scripts/memory-archive-check-probe.js && node ./scripts/memory-projection-retention-probe.js && node ./scripts/memory-language-probe.js && node ./scripts/memory-legacy-retention-probe.js && node ./scripts/memory-recovery-receipt-probe.js && node ./scripts/memory-output-unit-probe.js && node ./scripts/memory-output-posix-probe.js && node ./scripts/memory-output-publication-probe.js && node ./scripts/memory-output-parent-race-probe.js && node ./scripts/mcp-presence-probe.js && node ./scripts/provider-capacity-probe.js && npm run test:provider-response && npm run test:provider-dispatch && npm run test:provider-receipt && npm run test:provider-observation && npm run test:ui-review-recovery && node ./scripts/file-lease-probe.js && node ./scripts/role-agent-schema-probe.js && node ./scripts/role-store-loader-probe.js && node ./scripts/role-fallback-probe.js && npm run test:agent-bench-output && npm run test:ledger-sync && npm run test:state-lock && npm run test:history-retention && node ./scripts/false-claim-probe.js && node ./scripts/smoke.js && node ./scripts/rule-applicability-probe.js && node ./scripts/review-checkpoint-probe.js && node ./scripts/review-checkpoint-transport-probe.js && node ./scripts/review-snapshot-probe.js && node ./scripts/review-snapshot-transport-probe.js && npm run test:memory-migration && npm run test:memory-items && npm run test:memory-budget && npm run test:memory-footprint && npm run test:memory-write-budget && npm run test:memory-write-preparation && npm run test:memory-write-admission && npm run test:memory-command-policy && npm run test:memory-publication-policy && npm run test:memory-recovery-transfer && npm run test:ui-boundary && npm run test:rule-verification",
+    "test:fast": "node ./scripts/lint.js && node ./scripts/workspace-dir-source-ratchet.js && npm run test:state-scopes && npm run test:runtime-compatibility && node ./scripts/workspace-dir-migration-probe.js && node ./scripts/workspace-dir-lock-order-probe.js && node ./scripts/lock-probe.js && node ./scripts/e2e-repo-guard.js && npm run test:lock-heartbeat && npm run test:temp-cleanup && npm run test:path-setup && node ./scripts/platform-smoke.js && node ./scripts/parent-detect-selftest-probe.js && node ./scripts/release-runtime-probe.js && node ./scripts/which-shim-probe.js && node ./scripts/i18n-priority-surface-probe.js && npm run test:harness-text && npm run test:test-plan && node ./scripts/i18n-next-cluster-probe.js && node ./scripts/handoff-i18n-probe.js && node ./scripts/mutation-integrity-probe.js && node ./scripts/memory-guard-order-probe.js && node ./scripts/memory-input-preflight-probe.js && node ./scripts/memory-utf8-admission-probe.js && node ./scripts/memory-checked-input-probe.js && node ./scripts/memory-input-unit-probe.js && node ./scripts/memory-restore-canonical-probe.js && node ./scripts/memory-archive-retention-probe.js && node ./scripts/memory-archive-check-probe.js && node ./scripts/memory-projection-retention-probe.js && node ./scripts/memory-language-probe.js && node ./scripts/memory-legacy-retention-probe.js && node ./scripts/memory-recovery-receipt-probe.js && node ./scripts/memory-output-unit-probe.js && node ./scripts/memory-output-posix-probe.js && node ./scripts/memory-output-publication-probe.js && node ./scripts/memory-output-parent-race-probe.js && node ./scripts/mcp-presence-probe.js && node ./scripts/provider-capacity-probe.js && npm run test:provider-response && npm run test:provider-dispatch && npm run test:provider-receipt && npm run test:provider-observation && npm run test:ui-review-recovery && node ./scripts/file-lease-probe.js && node ./scripts/role-agent-schema-probe.js && node ./scripts/role-store-loader-probe.js && node ./scripts/role-fallback-probe.js && npm run test:agent-bench-output && npm run test:ledger-sync && npm run test:state-lock && npm run test:history-retention && node ./scripts/false-claim-probe.js && node ./scripts/smoke.js && node ./scripts/rule-applicability-probe.js && node ./scripts/review-checkpoint-probe.js && node ./scripts/review-checkpoint-transport-probe.js && node ./scripts/review-snapshot-probe.js && node ./scripts/review-snapshot-transport-probe.js && npm run test:memory-migration && npm run test:memory-items && npm run test:memory-budget && npm run test:memory-footprint && npm run test:memory-write-budget && npm run test:memory-write-preparation && npm run test:memory-write-admission && npm run test:memory-command-policy && npm run test:memory-publication-policy && npm run test:memory-recovery-transfer && npm run test:ui-boundary && npm run test:rule-verification",
     "test:false-claims": "node ./scripts/false-claim-probe.js",
     "test:claim-sweep": "node ./scripts/claim-sweep-git-probe.js",
     "test:claim-runtime": "node ./scripts/claim-runtime-cache-probe.js",
@@ -119,7 +119,7 @@
     "test:memory-write-budget": "node ./scripts/memory-write-budget-probe.js && node ./scripts/memory-write-budget-race-probe.js && node ./scripts/memory-write-budget-cli-probe.js",
     "test:memory-write-preparation": "node ./scripts/memory-write-preparation-probe.js && node ./scripts/memory-write-preparation-cli-probe.js",
     "test:memory-write-admission": "node ./scripts/memory-write-admission-probe.js && node ./scripts/memory-write-dry-run-probe.js",
-    "test:memory-command-policy": "node ./scripts/memory-command-size-probe.js && node ./scripts/memory-command-policy-probe.js && node ./scripts/memory-command-policy-mcp-probe.js",
+    "test:memory-command-policy": "node ./scripts/memory-command-size-probe.js && node ./scripts/memory-command-policy-probe.js && node ./scripts/memory-command-policy-mcp-probe.js && node ./scripts/memory-policy-root-spelling-probe.js",
     "test:memory-publication-policy": "node ./scripts/memory-publication-policy-probe.js && node ./scripts/memory-publication-cli-probe.js",
     "test:memory-recovery-transfer": "node ./scripts/memory-recovery-transfer-probe.js && node ./scripts/memory-recovery-external-probe.js",
     "test:ui-boundary": "node ./scripts/ui-boundary-probe.js && node ./scripts/ui-boundary-contracts-probe.js && node ./scripts/ui-boundary-scanner-probe.js && node ./scripts/ui-review-probe.js && node ./scripts/ui-review-observation-probe.js && node ./scripts/ui-review-ledger-probe.js && node ./scripts/ui-boundary-browser-probe.js && node ./scripts/ui-boundary-trials-probe.js && npm run test:ui-cli",
@@ -140,6 +140,7 @@
     "test:state-lock": "node ./scripts/shared-state-lock-probe.js",
     "test:lock-heartbeat": "node ./scripts/lock-heartbeat-probe.js",
     "test:temp-cleanup": "node ./scripts/temp-cleanup-probe.js && node ./scripts/copy-tree-probe.js",
+    "test:path-setup": "node ./scripts/path-setup-powershell-probe.js",
     "test:ui-review-publication": "node ./scripts/ui-review-publication-probe.js",
     "test:ui-review-publication-smoke": "node ./scripts/ui-review-publication-probe.js --smoke",
     "test:ui-review-target": "node ./scripts/ui-review-target-probe.js",

package/scripts/memory-policy-root-spelling-probe.js

@@ -0,0 +1,100 @@
+'use strict';
+// T-0350: a decisions or lessons restore with an explicit write policy must work when the project root is spelled
+// differently from its real path. Until 1.36.297 the footprint capture named its snapshots under the realpath.native
+// workspace while admission and preparation named the same files under the caller's spelling, so
+// assertCheckedFileCurrent refused every such restore with "snapshot does not belong to this file".
+// Spellings: as created, and on Windows a lowercase drive letter, a junction and the 8.3 short name (reported as
+// skipped when the volume has no short names); elsewhere a symlink. Each restore must leave the same files as the
+// restore through the real path. One MCP restore per surface uses a non-canonical spelling too.
+const S = require('./memory-write-budget-support');
+const { assert, fs, path, cp, arena, entry, test, finish, fixture, row, options } = S;
+const { renderLosslessArchiveEntries } = require('../lib/memory-archive');
+const policy = JSON.stringify({ limits: options(), mode: 'within-target',
+  targets: { items: 100, canonicalBytes: 65536, projectionBytes: 65536, archiveBytes: 65536, totalPathBytes: 200000 } });
+const env = Object.fromEntries(Object.entries(process.env).filter(([k]) => /^(PATH|PATHEXT|SystemRoot|WINDIR|COMSPEC)$/i.test(k)));
+for (const key of ['TEMP','TMP','USERPROFILE','APPDATA','LOCALAPPDATA']) { env[key] = path.join(arena,'env-'+key.toLowerCase()); fs.mkdirSync(env[key]); }
+Object.assign(env,{ LEERNESS_INTERNAL: '1', LEERNESS_OFFLINE: '1', LEERNESS_NO_BANNER: '1', LEERNESS_NO_PROMPT: '1', LEERNESS_NO_AUTOCHCP: '1' });
+const win = process.platform === 'win32';
+
+const make = s => fixture(s,[row(s,'base')],'\nPRIVATE suffix\n',
+  { [s+'.archive.md']: '# Archive\n\n## 제거 2026-09-01 (target: "recover")\n'+renderLosslessArchiveEntries(s,[row(s,'revive')])+'\n' });
+// What a restore leaves, read through the real path.
+const state = (p, s) => ({ rows: JSON.parse(fs.readFileSync(path.join(p,'.leerness',s+'.json'),'utf8')),
+  projection: fs.readFileSync(path.join(p,'.leerness',s+'.md'),'utf8'), archive: fs.readFileSync(path.join(p,'.leerness',s+'.archive.md'),'utf8') });
+// The 8.3 name of an existing folder, or null when the volume gives none.
+function shortName(p) {
+  const r = cp.spawnSync(process.env.ComSpec || 'cmd.exe', ['/d','/s','/c',`"for %I in ("${p}") do @echo %~sI"`],
+    { encoding: 'utf8', windowsHide: true, windowsVerbatimArguments: true });
+  const out = String(r.stdout || '').trim();
+  return r.status === 0 && out && !out.includes('"') && out.toLowerCase() !== p.toLowerCase() ? out : null;
+}
+const spellings = [
+  ['as created', p => p],
+  ...(win ? [
+    ['a lowercase drive letter', p => /^[A-Z]:/.test(p) ? p[0].toLowerCase() + p.slice(1) : null],
+    ['a junction', p => { const link = p + '-junction'; fs.symlinkSync(p, link, 'junction'); return link; }],
+    ['the 8.3 short name', shortName],
+  ] : [
+    ['a symlink', p => { const link = p + '-symlink'; fs.symlinkSync(p, link, 'dir'); return link; }],
+  ]),
+];
+function restoreCli(spelled, s) {
+  const r = cp.spawnSync(process.execPath,[entry,'memory','restore',s,'recover','--path',spelled,'--write-policy-json',policy,'--json'],
+    { cwd: spelled, env, encoding: 'utf8', timeout: 60000, maxBuffer: 1048576, windowsHide: true });
+  assert(!r.error && !r.signal, r.error && r.error.message);
+  return r;
+}
+function restoreMcp(spelled, s) {
+  const request = { jsonrpc: '2.0', id: 1, method: 'tools/call',
+    params: { name: 'leerness_memory_restore', arguments: { surface: s, target: 'recover', path: spelled, writePolicyJson: policy } } };
+  const r = cp.spawnSync(process.execPath,[entry,'mcp','serve','--profile','full'],
+    { cwd: spelled, env, input: JSON.stringify(request)+'\n', encoding: 'utf8', timeout: 60000, maxBuffer: 1048576, windowsHide: true });
+  assert(!r.error && !r.signal, r.error && r.error.message); assert.equal(r.status,0,r.stderr);
+  return JSON.parse(r.stdout.trim().split(/\r?\n/)[0]);
+}
+
+for (const s of ['decisions','lessons']) {
+  let expected = null;
+  for (const [name, spell] of spellings) {
+    const p = make(s), spelled = spell(p);
+    if (spelled === null) { console.log(`SKIP ${s}: policy restore through ${name} (this volume or path gives no such spelling)`); continue; }
+    test(`${s}: policy restore through ${name} matches the restore through the real path`, () => {
+      if (name !== 'as created') assert.notStrictEqual(spelled, p, 'the spelling must differ from the real path');
+      const r = restoreCli(spelled, s);
+      assert.equal(r.status, 0, r.stdout + r.stderr);
+      const after = state(p, s);
+      assert.deepEqual(after.rows.map(entry => entry.title || entry.text), ['base','revive']);
+      assert(!after.archive.includes('target: "recover"'), 'the restored block must leave the archive');
+      if (expected === null) expected = after; else assert.deepEqual(after, expected);
+    });
+  }
+  const [mcpName, mcpSpell] = spellings[1]; // a lowercase drive letter on Windows, a symlink elsewhere
+  test(`${s}: MCP policy restore through ${mcpName}`, () => {
+    const p = make(s), spelled = mcpSpell(p);
+    assert(spelled && spelled !== p, 'the MCP case needs a non-canonical spelling');
+    const reply = restoreMcp(spelled, s);
+    assert(reply.result, JSON.stringify(reply)); assert.equal(reply.result.isError, false, JSON.stringify(reply));
+    assert.deepEqual(state(p, s).rows.map(entry => entry.title || entry.text), ['base','revive']);
+  });
+}
+// The capture names files under the given spelling only after that spelling's workspace resolves to the resolved
+// one. Make it resolve elsewhere (as a swapped link would between the two resolutions) and the capture must refuse
+// before reading a file; without the check the files of the other folder would be measured as this project's.
+test('a spelled workspace that resolves to another folder is refused before any file is read', () => {
+  const { inspectMemoryFootprint } = require('../lib/memory-footprint');
+  const p = make('decisions'), other = make('decisions'), spelled = spellings[1][1](p);
+  const limits = JSON.stringify(options().observation);
+  assert.equal(inspectMemoryFootprint(spelled,'decisions',limits).ok, true, 'control: the spelling itself is accepted');
+  const workspace = path.join(spelled,'.leerness'), same = (a, b) => win ? a.toLowerCase() === b.toLowerCase() : a === b;
+  const real = fs.realpathSync.native, opened = [], open = fs.openSync;
+  fs.realpathSync.native = function (file, ...rest) {
+    return real.call(fs, same(path.resolve(String(file)), path.resolve(workspace)) ? path.join(other,'.leerness') : file, ...rest);
+  };
+  fs.openSync = function (file, ...rest) { opened.push(String(file)); return open.call(fs, file, ...rest); };
+  try {
+    const result = inspectMemoryFootprint(spelled,'decisions',limits);
+    assert.equal(result.ok, false); assert.equal(result.error.code, 'workspace_unavailable');
+    assert.deepEqual(opened.filter(file => /\.leerness[\\/]decisions\./.test(file)), [], 'no store file may be opened');
+  } finally { fs.realpathSync.native = real; fs.openSync = open; }
+});
+finish('memory policy root spelling');

package/scripts/path-setup-powershell-probe.js

@@ -0,0 +1,245 @@
+'use strict';
+// T-0351: the Windows PATH registration of `leerness path-setup --apply` (_winPathPsScript and _registerPath in
+// bin/leerness.js). From 1.9.254 the script's lines were joined with spaces only, so PowerShell refused it as a whole
+// (UnexpectedToken after SetEnvironmentVariable) and the registration never ran. It also used Write-Output and
+// Where-Object, module cmdlets that cost 21.5-52 s per launch without PSModulePath on a GitHub Windows runner (T-0343).
+// The script now edits HKCU\Environment\Path keeping its raw text and registry type.
+// This probe parses the script with PowerShell's own parser (CommandAst nodes and parse errors), then runs it through
+// _registerPath without PSModulePath against a throwaway registry key. The spawn hook checks that it is about to run
+// exactly the product script, points its one registry open at the throwaway key, and replaces the settings broadcast
+// with a marker; afterwards nothing in the script may still reach HKCU\Environment. The probe also checks that the
+// real user Path (raw text and type) is unchanged.
+const assert = require('assert');
+const cp = require('child_process');
+const crypto = require('crypto');
+const path = require('path');
+
+const original = { spawn: cp.spawnSync };
+let passed = 0, failed = 0;
+function test(name, fn) {
+  try { fn(); passed++; console.log('PASS ' + name); }
+  catch (error) { failed++; console.error('FAIL ' + name + ': ' + (error && error.stack || error)); }
+  finally { cp.spawnSync = original.spawn; }
+}
+
+if (process.platform !== 'win32') {
+  console.log('path-setup PowerShell probe: skipped, it needs Windows PowerShell (platform ' + process.platform + ')');
+  process.exit(0);
+}
+
+const cli = require('../bin/leerness.js');
+const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+const SCRIPT = cli._winPathPsScript();
+// The script as shipped from 1.9.254 to 1.36.297, kept as the control for the command check.
+const OLD_SCRIPT = [
+  "$b = $env:LEERNESS_PATH_BIN;",
+  "$u = [Environment]::GetEnvironmentVariable('PATH','User'); if (-not $u) { $u = '' }",
+  "$parts = $u.Split(';') | Where-Object { $_ -ne '' }",
+  "if ($parts -notcontains $b) {",
+  "  $nu = if ($u -eq '') { $b } else { $u.TrimEnd(';') + ';' + $b }",
+  "  [Environment]::SetEnvironmentVariable('PATH', $nu, 'User')",
+  "  Write-Output 'ADDED'",
+  "} else { Write-Output 'EXISTS' }",
+].join(' ');
+const OPEN_REAL = "[Microsoft.Win32.Registry]::CurrentUser.OpenSubKey('Environment', $true)";
+const NOTIFY = "[Environment]::SetEnvironmentVariable('LEERNESS_PATH_SETUP_NOTIFY', $null, 'User')";
+const WRITE = "$k.SetValue('Path', $nu, $kind)";
+const PARENT_KEY = 'Software\\leerness-t0351-probe';
+const TEST_KEY = PARENT_KEY + '\\' + process.pid + '-' + Date.now().toString(36);
+
+function ps(command, env = {}) {
+  const r = original.spawn.call(cp, powershell, ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command', command],
+    { encoding: 'utf8', windowsHide: true, timeout: 60000, env: { ...process.env, ...env } });
+  assert.strictEqual(r.status, 0, 'PowerShell helper failed: ' + (r.error ? r.error.code : r.stderr));
+  return r.stdout;
+}
+// PowerShell's parser counts CommandAst nodes (cmdlets, aliases, functions, programs; not text inside strings) and
+// parse errors. The parse is a .NET call and invokes no command.
+const commandsAndErrors = text => ps("$e = $null; $a = [System.Management.Automation.Language.Parser]::ParseInput($env:T0351_COMMAND, [ref]$null, [ref]$e); "
+  + "[Console]::Out.Write(('{0}|{1}' -f @($a.FindAll({ param($n) $n -is [System.Management.Automation.Language.CommandAst] }, $true)).Count, @($e).Count))",
+  { T0351_COMMAND: text }).trim();
+// Type and raw text of a Path value (no expansion), or 'absent' / 'nokey'.
+const READ_PATH = "$k = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey($env:T0351_KEY); if ($null -eq $k) { [Console]::Out.Write('nokey') } "
+  + "else { try { if ($k.GetValueNames() -contains 'Path') { $v = $k.GetValue('Path', $null, [Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames); "
+  + "if ($v -is [array]) { $v = $v -join '|' }; [Console]::Out.Write([string]$k.GetValueKind('Path') + '=' + $v) } else { [Console]::Out.Write('absent') } } finally { $k.Close() } }";
+const readPath = key => ps(READ_PATH, { T0351_KEY: key });
+// Sets the throwaway Path (or removes it), and optionally one more REG_SZ value named `extraName`.
+function presetTestPath(kind, raw, extraName = '', extraValue = '') {
+  ps("$k = [Microsoft.Win32.Registry]::CurrentUser.CreateSubKey($env:T0351_KEY); try { if ($env:T0351_KIND -eq 'absent') { $k.DeleteValue('Path', $false) } "
+    // Not `$v = if (...) { [string[]]... }`: an if expression unrolls a one-item array into a string.
+    + "elseif ($env:T0351_KIND -eq 'MultiString') { $k.SetValue('Path', [string[]]@($env:T0351_RAW), [Microsoft.Win32.RegistryValueKind]::MultiString) } "
+    + "else { $k.SetValue('Path', $env:T0351_RAW, [Microsoft.Win32.RegistryValueKind]$env:T0351_KIND) }; "
+    + "foreach ($n in $k.GetValueNames()) { if ($n -ne 'Path') { $k.DeleteValue($n) } }; "
+    + "if ($env:T0351_EXTRA_NAME) { $k.SetValue($env:T0351_EXTRA_NAME, $env:T0351_EXTRA_VALUE, [Microsoft.Win32.RegistryValueKind]::String) } } finally { $k.Close() }",
+  { T0351_KEY: TEST_KEY, T0351_KIND: kind, T0351_RAW: raw, T0351_EXTRA_NAME: extraName, T0351_EXTRA_VALUE: extraValue });
+}
+// The other values of the throwaway key, as name=value lines.
+const readOthers = () => ps("$k = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey($env:T0351_KEY); try { foreach ($n in $k.GetValueNames()) { if ($n -ne 'Path') { [Console]::Out.Write($n + '=' + $k.GetValue($n) + ';') } } } finally { $k.Close() }",
+  { T0351_KEY: TEST_KEY });
+function removeTestKey() {
+  ps("[Microsoft.Win32.Registry]::CurrentUser.DeleteSubKeyTree($env:T0351_KEY, $false); $p = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey($env:T0351_PARENT); "
+    + "if ($null -ne $p) { $n = $p.SubKeyCount + $p.ValueCount; $p.Close(); if ($n -eq 0) { [Microsoft.Win32.Registry]::CurrentUser.DeleteSubKey($env:T0351_PARENT, $false) } }",
+  { T0351_KEY: TEST_KEY, T0351_PARENT: PARENT_KEY });
+}
+// The product script pointed at the throwaway key. Each swap must match exactly once. Afterwards the script may not
+// open HKCU\Environment, set an environment variable, or reach any other hive.
+function againstTestKey(script, { readOnly = false, markWrite = false } = {}) {
+  const open = readOnly ? `[Microsoft.Win32.Registry]::CurrentUser.OpenSubKey('${TEST_KEY}', $false)` : `[Microsoft.Win32.Registry]::CurrentUser.CreateSubKey('${TEST_KEY}')`;
+  const swaps = [[OPEN_REAL, open], [NOTIFY, "[Console]::Error.Write('NOTIFY;')"]];
+  // The marker shows the script reached the write, so a script that never runs (a parse error) cannot pass.
+  if (markWrite) swaps.push([WRITE, "[Console]::Error.Write('BEFORE_WRITE;'); " + WRITE]);
+  let out = script;
+  for (const [from, to] of swaps) {
+    assert.strictEqual(out.split(from).length, 2, 'expected exactly one ' + from);
+    out = out.replace(from, () => to);
+  }
+  assert(!/SetEnvironmentVariable|LocalMachine|Registry::|HK(CU|LM|EY_[A-Z_]+):|OpenSubKey\(\s*["']Environment/i.test(out), 'the test script can still reach the real environment');
+  // Case-insensitive counts: one hive reference and one key open, both the throwaway key's (round 2: a lowercase
+  // `currentuser.OpenSubKey(('Environ' + 'ment'), $true)` passed a case-sensitive count).
+  assert.strictEqual((out.match(/CurrentUser/gi) || []).length, 1, 'only the throwaway key may be opened');
+  assert.strictEqual((out.match(/OpenSubKey|CreateSubKey|OpenBaseKey|OpenRemoteBaseKey/gi) || []).length, 1, 'only one key open is allowed');
+  // Round 3: the static Registry members write by path (Registry::SetValue('HKEY_CURRENT_USER\Environment', ...)).
+  // Only the one Registry member reference (CurrentUser) and the one key write ($k.SetValue) may remain.
+  assert.strictEqual((out.match(/Registry\s*\]\s*::/gi) || []).length, 1, 'only one Registry member reference is allowed');
+  assert.strictEqual((out.match(/SetValue/gi) || []).length, 1, 'only one registry write is allowed');
+  assert(!/Delete(Value|SubKey)/i.test(out), 'the test script may not delete registry values or keys');
+  assert(out.includes(open), 'the throwaway key open is missing');
+  return out;
+}
+// Installs the spawn hook used while _registerPath runs. The caller restores cp.spawnSync.
+function hookRegistration(options = {}) {
+  const seen = [];
+  cp.spawnSync = function (command, args, spawnOptions) {
+    // While _registerPath runs, only two launches may happen: where.exe resolving `powershell` (read-only), and
+    // PowerShell with exactly the product script, which is then pointed at the throwaway key. Anything else is
+    // refused without running, so a future change that writes another way cannot reach the real user Path.
+    if (/^where(\.exe)?$/i.test(path.basename(String(command)))) return original.spawn.call(this, command, args, spawnOptions);
+    assert(/^powershell(\.exe)?$/i.test(path.basename(String(command))), 'unexpected launch during registration: ' + command);
+    // The whole argument list, not just the -Command value: PowerShell joins every argument after -Command into the
+    // command text, so an extra argument could carry its own write (round 2).
+    assert.deepStrictEqual(args, ['-NoProfile', '-Command', SCRIPT], 'the PATH spawn must run exactly the product script');
+    const env = { ...spawnOptions.env, ...(options.env || {}) };
+    for (const key of Object.keys(env)) if (/^PSModule(Path|AnalysisCachePath)$/i.test(key)) delete env[key];
+    const run = ['-NoProfile', '-Command', againstTestKey(SCRIPT, options)];
+    const result = original.spawn.call(this, command, run, { ...spawnOptions, env });
+    seen.push({ env, stdout: Buffer.from(result.stdout || ''), stderr: String(result.stderr || ''), status: result.status });
+    return result;
+  };
+  return seen;
+}
+// Runs _registerPath with the spawn hook. Returns its result, what the child printed, and the throwaway Path after.
+function register(bin, preset, options = {}) {
+  presetTestPath(...preset);
+  const seen = hookRegistration(options);
+  let result;
+  try { result = cli._registerPath({ globalBin: bin, platform: 'win32' }); }
+  finally { cp.spawnSync = original.spawn; }
+  return { result, seen, after: readPath(TEST_KEY) };
+}
+
+const BIN = 'C:\\Users\\example\\AppData\\Roaming\\npm';
+const REAL = 'Environment';
+const realBefore = crypto.createHash('sha256').update(readPath(REAL)).digest('hex');
+try {
+  test('the command check counts cmdlets and parse errors, not text in strings', () => {
+    assert.deepStrictEqual([OLD_SCRIPT, "Write-Output 'ADDED'", "[Console]::Out.Write('Write-Output')"].map(commandsAndErrors),
+      ['3|1', '1|0', '0|0']);
+  });
+  test('the PATH script parses and invokes no command', () => {
+    assert.strictEqual(commandsAndErrors(SCRIPT), '0|0');
+    assert(SCRIPT.includes('$env:LEERNESS_PATH_BIN'), 'the bin path must stay a data channel');
+  });
+  // The two guards that keep the runs below off the real user Path, checked without running anything.
+  test('the registration hook refuses any other launch without running it', () => {
+    hookRegistration();
+    assert.throws(() => cp.spawnSync('reg.exe', ['add', 'HKCU\\Environment', '/v', 'Path', '/d', 'x', '/f']), /unexpected launch/);
+    assert.throws(() => cp.spawnSync(powershell, ['-NoProfile', '-Command', "[Console]::Out.Write('x')"]), /exactly the product script/);
+    // Round 2: PowerShell joins the arguments after -Command, so an appended argument would run as more script.
+    assert.throws(() => cp.spawnSync(powershell, ['-NoProfile', '-Command', SCRIPT, "; [Environment]::SetEnvironmentVariable('PATH','BROKEN','User')"]),
+      /exactly the product script/);
+  });
+  test('the throwaway-key rewrite refuses a script that could still reach the real environment', () => {
+    againstTestKey(SCRIPT); // the product script itself is accepted, so the refusals below are about the extra text
+    for (const extra of ['; [Environment]::SetEnvironmentVariable("PATH", $nu, "User")',
+      '; $x = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey("Environment", $true)',
+      '; $x = [Microsoft.Win32.Registry]::LocalMachine', '; $x = Get-Item HKCU:\\Environment',
+      "; $x = [Microsoft.Win32.Registry]::currentuser.OpenSubKey(('Environ' + 'ment'), $true)",
+      "; [Microsoft.Win32.Registry]::SetValue('HKEY_CURRENT_USER\\Environment','Path','BROKEN')"]) {
+      assert.throws(() => againstTestKey(SCRIPT + extra), extra);
+    }
+  });
+  const windowsApps = '%USERPROFILE%\\AppData\\Local\\Microsoft\\WindowsApps;';
+  const cases = [
+    ['no user Path yet', ['absent', ''], 'ADDED', 'ExpandString=' + BIN],
+    ['REG_EXPAND_SZ keeps its %VAR% text and type', ['ExpandString', windowsApps], 'ADDED', 'ExpandString=%USERPROFILE%\\AppData\\Local\\Microsoft\\WindowsApps;' + BIN],
+    ['REG_SZ keeps its type', ['String', 'C:\\a;C:\\b'], 'ADDED', 'String=C:\\a;C:\\b;' + BIN],
+    ['present among empty entries', ['String', 'C:\\a;;' + BIN + ';'], 'EXISTS', 'String=C:\\a;;' + BIN + ';'],
+    // Round 3 (owner's choice): entries count only as written. A %VAR% entry that this shell would expand to the bin
+    // path is not taken as present, since new terminals may lack the variable; the bin path is added as text.
+    ['a %VAR% entry counts only as written', ['ExpandString', 'C:\\a;%LEERNESS_T0351_DIR%'], 'ADDED', 'ExpandString=C:\\a;%LEERNESS_T0351_DIR%;' + BIN, { LEERNESS_T0351_DIR: BIN }],
+    ['present in other letter case', ['String', 'C:\\a;' + BIN.toUpperCase()], 'EXISTS', 'String=C:\\a;' + BIN.toUpperCase()],
+    // Round 2: Windows expands %VAR% in a REG_EXPAND_SZ Path only, and the bin path's own data channel is gone before
+    // the comparison, so neither can make an entry look present.
+    ['REG_SZ is compared as written', ['String', '%LEERNESS_T0351_DIR%'], 'ADDED', 'String=%LEERNESS_T0351_DIR%;' + BIN, { LEERNESS_T0351_DIR: BIN }],
+    ['%LEERNESS_PATH_BIN% never matches', ['ExpandString', '%LEERNESS_PATH_BIN%'], 'ADDED', 'ExpandString=%LEERNESS_PATH_BIN%;' + BIN],
+  ];
+  for (const [name, preset, word, after, env] of cases) test(`registration without PSModulePath: ${name}`, () => {
+    const r = register(BIN, preset, { env });
+    assert.strictEqual(r.seen.length, 1);
+    assert(!Object.keys(r.seen[0].env).some(key => /^PSModulePath$/i.test(key)), 'the child must run without PSModulePath');
+    assert.strictEqual(r.seen[0].status, 0, r.seen[0].stderr);
+    assert.strictEqual(r.seen[0].stdout.toString('hex'), Buffer.from(word + '\r\n').toString('hex'));
+    assert.strictEqual(r.seen[0].stderr, word === 'ADDED' ? 'NOTIFY;' : '', 'the settings broadcast follows a write only');
+    assert.strictEqual(r.after, after);
+    assert.deepStrictEqual({ ok: r.result.ok, method: r.result.method }, { ok: true, method: word === 'ADDED' ? 'powershell-user-path' : 'already' });
+  });
+  test('a bin path with PowerShell syntax is added as text', () => {
+    const hostile = "C:\\safe $(Write-Output INJECTED) `tick 'q' t\\";
+    const r = register(hostile, ['String', 'C:\\a']);
+    assert.strictEqual(r.seen[0].stdout.toString(), 'ADDED\r\n');
+    assert.strictEqual(r.after, 'String=C:\\a;' + hostile);
+    assert.strictEqual(r.result.method, 'powershell-user-path');
+  });
+  test('a Path of another registry type is refused and left as it is', () => {
+    const r = register(BIN, ['MultiString', 'C:\\a']);
+    assert.strictEqual(r.seen[0].status, 1);
+    // The script's own refusal, not a later SetValue failure on the wrong value type.
+    // PowerShell may wrap the error text at the console width, so whitespace is ignored.
+    assert(r.seen[0].stderr.replace(/\s+/g, '').includes('theuserPathhasregistrytypeMultiString'), r.seen[0].stderr.slice(0, 300));
+    assert.strictEqual(r.seen[0].stdout.toString(), '');
+    assert.strictEqual(r.after, 'MultiString=C:\\a');
+    assert.deepStrictEqual({ ok: r.result.ok, method: r.result.method }, { ok: false, method: 'powershell-user-path' });
+  });
+  test('an existing LEERNESS_PATH_SETUP_NOTIFY user variable stops the script before any change', () => {
+    const r = register(BIN, ['ExpandString', '%LEERNESS_PATH_SETUP_NOTIFY%\\bin', 'LEERNESS_PATH_SETUP_NOTIFY', 'C:\\tools']);
+    assert.strictEqual(r.seen[0].status, 1);
+    assert(r.seen[0].stderr.replace(/\s+/g, '').includes('theuservariableLEERNESS_PATH_SETUP_NOTIFYexists'), r.seen[0].stderr.slice(0, 300));
+    assert.strictEqual(r.seen[0].stdout.toString(), '');
+    assert.strictEqual(r.after, 'ExpandString=%LEERNESS_PATH_SETUP_NOTIFY%\\bin');
+    assert.strictEqual(readOthers(), 'LEERNESS_PATH_SETUP_NOTIFY=C:\\tools;');
+    assert.deepStrictEqual({ ok: r.result.ok, method: r.result.method }, { ok: false, method: 'powershell-user-path' });
+  });
+  test('a failed write exits 1 without printing ADDED, and registration reports failure', () => {
+    const r = register(BIN, ['String', 'C:\\a'], { readOnly: true, markWrite: true });
+    assert.strictEqual(r.seen[0].status, 1);
+    assert(r.seen[0].stderr.startsWith('BEFORE_WRITE;'), 'the script must have run up to the write: ' + r.seen[0].stderr.slice(0, 200));
+    assert.strictEqual(r.seen[0].stdout.toString(), '');
+    assert.strictEqual(r.after, 'String=C:\\a');
+    assert.deepStrictEqual({ ok: r.result.ok, method: r.result.method }, { ok: false, method: 'powershell-user-path' });
+    assert.match(r.result.detail, /exit 1/);
+  });
+  for (const [name, bin] of [['a semicolon', 'C:\\npm;tools'], ['a percent sign', 'C:\\npm%x%']]) test(`a bin path with ${name} is refused before PowerShell runs`, () => {
+    const r = register(bin, ['String', 'C:\\a']);
+    assert.strictEqual(r.seen.length, 0, 'PowerShell must not run');
+    assert.strictEqual(r.after, 'String=C:\\a');
+    assert.deepStrictEqual({ ok: r.result.ok, method: r.result.method }, { ok: false, method: 'powershell-user-path' });
+    assert(r.result.detail.includes("';' 또는 '%'"), r.result.detail);
+  });
+} finally {
+  cp.spawnSync = original.spawn;
+  removeTestKey();
+  assert.strictEqual(readPath(TEST_KEY), 'nokey', 'the throwaway key was not removed');
+  assert.strictEqual(crypto.createHash('sha256').update(readPath(REAL)).digest('hex'), realBefore, 'the probe changed the real user Path');
+}
+console.log('path-setup PowerShell probe: ' + passed + '/' + (passed + failed) + ' PASS');
+process.exitCode = failed ? 1 : 0;