qualia-framework 4.1.1 → 4.4.0

package/tests/runner.js

@@ -12,10 +12,11 @@ const os = require("os");
 const ROOT = path.resolve(__dirname, "..");
 const BIN = path.join(ROOT, "bin");
 const HOOKS = path.join(ROOT, "hooks");
+const NODE = process.env.NODE || "node";
 
 // Helper: run a bin/ script and return {stdout, stderr, status}
 function run(script, args = [], opts = {}) {
-  const result = spawnSync(process.execPath, [path.join(BIN, script), ...args], {
+  const result = spawnSync(NODE, [path.join(BIN, script), ...args], {
     encoding: "utf8",
     timeout: 10000,
     cwd: opts.cwd || ROOT,
@@ -29,7 +30,7 @@ function run(script, args = [], opts = {}) {
 // Helper: run a hook with JSON input on stdin
 function runHook(hookFile, jsonInput) {
   const hookPath = path.join(HOOKS, hookFile);
-  const result = spawnSync(process.execPath, [hookPath], {
+  const result = spawnSync(NODE, [hookPath], {
     encoding: "utf8",
     timeout: 5000,
     input: JSON.stringify(jsonInput),
@@ -41,7 +42,7 @@ function runHook(hookFile, jsonInput) {
 
 // Helper: run state.js with args in a given cwd
 function runState(args, cwd) {
-  const result = spawnSync(process.execPath, [path.join(BIN, "state.js"), ...args], {
+  const result = spawnSync(NODE, [path.join(BIN, "state.js"), ...args], {
     encoding: "utf8",
     timeout: 5000,
     cwd,
@@ -65,7 +66,7 @@ function withTempPlanning(fn) {
 // Helper: create a full temp project (init with 2 phases)
 function makeProject() {
   const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-proj-"));
-  const r = spawnSync(process.execPath, [
+  const r = spawnSync(NODE, [
     path.join(BIN, "state.js"), "init",
     "--project", "TestProject",
     "--phases", '[{"name":"Foundation","goal":"Auth"},{"name":"Core","goal":"Features"}]',
@@ -144,6 +145,10 @@ describe("CLI", () => {
       assert.match(clean, /team/);
       assert.match(clean, /traces/);
       assert.match(clean, /analytics/);
+      assert.match(clean, /set-erp-key/);
+      assert.match(clean, /erp-ping/);
+      assert.match(clean, /doctor/);
+      assert.match(clean, /flush/);
     } finally {
       fs.rmSync(tmpHome, { recursive: true, force: true });
     }
@@ -264,6 +269,22 @@ describe("CLI", () => {
       fs.rmSync(tmpHome, { recursive: true, force: true });
     }
   });
+
+  it("set-erp-key saves key and enables ERP", () => {
+    const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-cli-"));
+    try {
+      const r = run("cli.js", ["set-erp-key", "test-erp-key-12345"], {
+        env: { HOME: tmpHome, USERPROFILE: tmpHome },
+      });
+      assert.equal(r.status, 0);
+      const keyPath = path.join(tmpHome, ".claude", ".erp-api-key");
+      assert.equal(fs.readFileSync(keyPath, "utf8"), "test-erp-key-12345");
+      const cfg = JSON.parse(fs.readFileSync(path.join(tmpHome, ".claude", ".qualia-config.json"), "utf8"));
+      assert.equal(cfg.erp.enabled, true);
+    } finally {
+      fs.rmSync(tmpHome, { recursive: true, force: true });
+    }
+  });
 });
 
 // ═══════════════════════════════════════════════════════════
@@ -286,7 +307,7 @@ describe("State Machine", () => {
 
   it("init creates state and tracking files", () => {
     withTempPlanning((tmpDir) => {
-      const r = spawnSync(process.execPath, [
+      const r = spawnSync(NODE, [
         path.join(BIN, "state.js"), "init",
         "--project", "test-proj",
         "--phases", '[{"name":"Foundation","goal":"Auth"}]',
@@ -819,7 +840,7 @@ waves: 1
   it("init refuses to clobber an existing project (no --force)", () => {
     const tmpDir = makeProject();
     try {
-      const r = spawnSync(process.execPath, [
+      const r = spawnSync(NODE, [
         path.join(BIN, "state.js"), "init",
         "--project", "TestProject",
         "--phases", '[{"name":"X","goal":"Y"}]',
@@ -838,14 +859,14 @@ waves: 1
       // Seed lifetime via close-milestone first. --force bypasses the v4
       // readiness guards (MILESTONE_NOT_READY) since this test doesn't
       // exercise the verification flow — it's focused on lifetime preservation.
-      const c = spawnSync(process.execPath, [
+      const c = spawnSync(NODE, [
         path.join(BIN, "state.js"), "close-milestone", "--force",
       ], { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(c.status, 0);
       const tBefore = JSON.parse(fs.readFileSync(path.join(tmpDir, ".planning", "tracking.json"), "utf8"));
       assert.ok(tBefore.lifetime.milestones_completed >= 1);
 
-      const r = spawnSync(process.execPath, [
+      const r = spawnSync(NODE, [
         path.join(BIN, "state.js"), "init",
         "--project", "TestProject",
         "--phases", '[{"name":"NewFoundation","goal":"X"}]',
@@ -867,7 +888,7 @@ waves: 1
     try {
       // First close uses --force to bypass v4 readiness guards — this test
       // focuses on the ALREADY_CLOSED sentinel, not phase-verification gates.
-      const r1 = spawnSync(process.execPath, [
+      const r1 = spawnSync(NODE, [
         path.join(BIN, "state.js"), "close-milestone", "--force",
       ], { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r1.status, 0);
@@ -884,7 +905,7 @@ waves: 1
 
       // Second close (without --force) must fail with ALREADY_CLOSED, which
       // is checked BEFORE the readiness guards in cmdCloseMilestone.
-      const r2 = spawnSync(process.execPath, [
+      const r2 = spawnSync(NODE, [
         path.join(BIN, "state.js"), "close-milestone",
       ], { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r2.status, 1);
@@ -898,7 +919,7 @@ waves: 1
   it("close-milestone --force allows re-close", () => {
     const tmpDir = makeProject();
     try {
-      const r1 = spawnSync(process.execPath, [
+      const r1 = spawnSync(NODE, [
         path.join(BIN, "state.js"), "close-milestone", "--force",
       ], { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r1.status, 0);
@@ -908,7 +929,7 @@ waves: 1
       t.milestone = JSON.parse(r1.stdout).closed_milestone;
       fs.writeFileSync(tFile, JSON.stringify(t, null, 2) + "\n");
 
-      const r2 = spawnSync(process.execPath, [
+      const r2 = spawnSync(NODE, [
         path.join(BIN, "state.js"), "close-milestone", "--force",
       ], { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r2.status, 0);
@@ -931,7 +952,7 @@ waves: 1
       fs.writeFileSync(tFile, JSON.stringify(t, null, 2) + "\n");
 
       // Backfill on a project with NO completed phases would compute 0/0
-      const r = spawnSync(process.execPath, [
+      const r = spawnSync(NODE, [
         path.join(BIN, "state.js"), "backfill-lifetime",
       ], { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r.status, 0);
@@ -987,7 +1008,7 @@ waves: 1
       t.lifetime = { tasks_completed: 5 }; // partial — missing other keys
       fs.writeFileSync(tFile, JSON.stringify(t, null, 2) + "\n");
 
-      const r = spawnSync(process.execPath, [
+      const r = spawnSync(NODE, [
         path.join(BIN, "state.js"), "init",
         "--project", "TestProject",
         "--phases", '[{"name":"X","goal":"Y"}]',
@@ -1013,7 +1034,7 @@ waves: 1
     const tmpDir = makeProject();
     try {
       // No phases verified yet — close-milestone (without --force) must refuse.
-      const r = spawnSync(process.execPath, [
+      const r = spawnSync(NODE, [
         path.join(BIN, "state.js"), "close-milestone",
       ], { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r.status, 1);
@@ -1027,7 +1048,7 @@ waves: 1
   it("close-milestone refuses single-phase milestones (MILESTONE_TOO_SMALL)", () => {
     const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-single-"));
     try {
-      const init = spawnSync(process.execPath, [
+      const init = spawnSync(NODE, [
         path.join(BIN, "state.js"), "init",
         "--project", "SingleProject",
         "--phases", '[{"name":"Only","goal":"Y"}]',
@@ -1036,7 +1057,7 @@ waves: 1
 
       // Single-phase milestone — even if the phase were verified, the size
       // guard catches it first. A milestone needs ≥ 2 phases without --force.
-      const r = spawnSync(process.execPath, [
+      const r = spawnSync(NODE, [
         path.join(BIN, "state.js"), "close-milestone",
       ], { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r.status, 1);
@@ -1050,7 +1071,7 @@ waves: 1
   it("close-milestone appends a summary to milestones[]", () => {
     const tmpDir = makeProject();
     try {
-      const r = spawnSync(process.execPath, [
+      const r = spawnSync(NODE, [
         path.join(BIN, "state.js"), "close-milestone", "--force",
       ], { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r.status, 0);
@@ -1092,20 +1113,20 @@ waves: 1
 `);
         const verFile = path.join(tmpDir, ".planning", `phase-${phase}-verification.md`);
         // Plan → built → verified
-        let r = spawnSync(process.execPath, [path.join(BIN, "state.js"), "transition", "--to", "planned", "--phase", String(phase)],
+        let r = spawnSync(NODE, [path.join(BIN, "state.js"), "transition", "--to", "planned", "--phase", String(phase)],
           { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
         assert.equal(r.status, 0, `planned transition failed for phase ${phase}: ${r.stderr || r.stdout}`);
-        r = spawnSync(process.execPath, [path.join(BIN, "state.js"), "transition", "--to", "built", "--phase", String(phase), "--tasks-done", "3", "--tasks-total", "3"],
+        r = spawnSync(NODE, [path.join(BIN, "state.js"), "transition", "--to", "built", "--phase", String(phase), "--tasks-done", "3", "--tasks-total", "3"],
           { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
         assert.equal(r.status, 0, `built transition failed for phase ${phase}: ${r.stderr || r.stdout}`);
         fs.writeFileSync(verFile, "result: PASS");
-        r = spawnSync(process.execPath, [path.join(BIN, "state.js"), "transition", "--to", "verified", "--phase", String(phase), "--verification", "pass"],
+        r = spawnSync(NODE, [path.join(BIN, "state.js"), "transition", "--to", "verified", "--phase", String(phase), "--verification", "pass"],
           { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
         assert.equal(r.status, 0, `verified transition failed for phase ${phase}: ${r.stderr || r.stdout}`);
       }
 
       // Close milestone
-      const r = spawnSync(process.execPath, [path.join(BIN, "state.js"), "close-milestone"],
+      const r = spawnSync(NODE, [path.join(BIN, "state.js"), "close-milestone"],
         { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r.status, 0, `close-milestone failed: ${r.stderr || r.stdout}`);
 
@@ -1139,9 +1160,9 @@ waves: 1
 **Acceptance Criteria:**
 - ok
 `);
-      spawnSync(process.execPath, [path.join(BIN, "state.js"), "transition", "--to", "planned", "--phase", "1"],
+      spawnSync(NODE, [path.join(BIN, "state.js"), "transition", "--to", "planned", "--phase", "1"],
         { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
-      const r = spawnSync(process.execPath, [path.join(BIN, "state.js"), "transition", "--to", "built", "--phase", "1", "--tasks-done", "1", "--tasks-total", "1"],
+      const r = spawnSync(NODE, [path.join(BIN, "state.js"), "transition", "--to", "built", "--phase", "1", "--tasks-done", "1", "--tasks-total", "1"],
         { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r.status, 0);
 
@@ -1155,7 +1176,7 @@ waves: 1
   it("check exposes milestones[] and milestone_name in output", () => {
     const tmpDir = makeProject();
     try {
-      const r = spawnSync(process.execPath, [
+      const r = spawnSync(NODE, [
         path.join(BIN, "state.js"), "check",
       ], { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r.status, 0);
@@ -1293,7 +1314,7 @@ waves: 1
   it("next-report-id returns QS-REPORT-01 on fresh project and increments", () => {
     const tmpDir = makeProject();
     try {
-      const r1 = spawnSync(process.execPath,
+      const r1 = spawnSync(NODE,
         [path.join(BIN, "state.js"), "next-report-id"],
         { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r1.status, 0, `next-report-id failed: ${r1.stderr || r1.stdout}`);
@@ -1302,7 +1323,7 @@ waves: 1
       assert.equal(j1.report_seq, 1);
       assert.equal(j1.peeked, false);
 
-      const r2 = spawnSync(process.execPath,
+      const r2 = spawnSync(NODE,
         [path.join(BIN, "state.js"), "next-report-id"],
         { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       const j2 = JSON.parse(r2.stdout);
@@ -1316,7 +1337,7 @@ waves: 1
   it("next-report-id --peek does NOT increment the counter", () => {
     const tmpDir = makeProject();
     try {
-      const r1 = spawnSync(process.execPath,
+      const r1 = spawnSync(NODE,
         [path.join(BIN, "state.js"), "next-report-id", "--peek"],
         { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       const j1 = JSON.parse(r1.stdout);
@@ -1324,7 +1345,7 @@ waves: 1
       assert.equal(j1.peeked, true);
 
       // Peek again — should still return QS-REPORT-01 since nothing incremented
-      const r2 = spawnSync(process.execPath,
+      const r2 = spawnSync(NODE,
         [path.join(BIN, "state.js"), "next-report-id", "--peek"],
         { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       const j2 = JSON.parse(r2.stdout);
@@ -1356,7 +1377,7 @@ Exit: auth + dashboard
 ## Milestone 3 · Handoff     [FINAL]
 Exit: client takeover
 `);
-      const r = spawnSync(process.execPath,
+      const r = spawnSync(NODE,
         [path.join(BIN, "state.js"), "close-milestone", "--force"],
         { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r.status, 0, `close-milestone failed: ${r.stderr || r.stdout}`);
@@ -1374,7 +1395,7 @@ Exit: client takeover
     const tmpDir = makeProject();
     try {
       // No JOURNEY.md — milestone_name should fall back to blank (legacy behavior)
-      const r = spawnSync(process.execPath,
+      const r = spawnSync(NODE,
         [path.join(BIN, "state.js"), "close-milestone", "--force"],
         { encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"] });
       assert.equal(r.status, 0);
@@ -1397,7 +1418,7 @@ describe("Hooks", () => {
     const hooks = fs.readdirSync(HOOKS).filter(f => f.endsWith(".js"));
     assert.ok(hooks.length >= 7, `Expected 7+ hooks, found ${hooks.length}`);
     for (const hook of hooks) {
-      const r = spawnSync(process.execPath, ["--check", path.join(HOOKS, hook)], {
+      const r = spawnSync(NODE, ["--check", path.join(HOOKS, hook)], {
         encoding: "utf8", timeout: 5000,
       });
       assert.equal(r.status, 0, `Syntax error in ${hook}: ${r.stderr}`);
@@ -1516,7 +1537,7 @@ describe("Hooks", () => {
       const headBefore = spawnSync("git", ["rev-parse", "HEAD"], gitOpts).stdout.trim();
 
       // Run the hook
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-push.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-push.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0, `pre-push exited ${r.status}: ${r.stderr}`);
@@ -1542,7 +1563,7 @@ describe("Hooks", () => {
   it("pre-push.js exits 0 with no tracking.json", () => {
     const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-push-"));
     try {
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-push.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-push.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1556,7 +1577,7 @@ describe("Hooks", () => {
   it("session-start.js exits 0 with no project", () => {
     const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-ss-"));
     try {
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "session-start.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "session-start.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1571,7 +1592,7 @@ describe("Hooks", () => {
       const planningDir = path.join(tmpDir, ".planning");
       fs.mkdirSync(planningDir, { recursive: true });
       fs.writeFileSync(path.join(planningDir, "STATE.md"), "# Project State\nPhase: 1 of 3 — Foundation\nStatus: setup\n");
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "session-start.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "session-start.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1585,7 +1606,7 @@ describe("Hooks", () => {
   it("pre-compact.js exits 0 with no STATE.md", () => {
     const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-pc-"));
     try {
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-compact.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-compact.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1603,7 +1624,7 @@ describe("Hooks", () => {
       fs.writeFileSync(path.join(tmpHome, ".claude", ".qualia-config.json"), JSON.stringify({
         code: "QS-FAWZI-01", version: "99.99.99",
       }));
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "auto-update.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "auto-update.js")], {
         encoding: "utf8", timeout: 5000,
         env: { ...process.env, HOME: tmpHome, USERPROFILE: tmpHome },
         stdio: ["pipe", "pipe", "pipe"],
@@ -1620,7 +1641,7 @@ describe("Hooks", () => {
   it("pre-deploy-gate: empty project exits 0", () => {
     const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-pdg-"));
     try {
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1634,7 +1655,7 @@ describe("Hooks", () => {
     try {
       fs.mkdirSync(path.join(tmpDir, "src"), { recursive: true });
       fs.writeFileSync(path.join(tmpDir, "src", "app.ts"), "export const x = 1;");
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 5000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1648,7 +1669,7 @@ describe("Hooks", () => {
     try {
       fs.mkdirSync(path.join(tmpDir, "app"), { recursive: true });
       fs.writeFileSync(path.join(tmpDir, "app", "page.tsx"), 'const key = "service_role_literal_leak";\nexport default function P(){return null}');
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 2, "PreToolUse hook must exit 2 to block");
@@ -1665,7 +1686,7 @@ describe("Hooks", () => {
     try {
       fs.mkdirSync(path.join(tmpDir, "components"), { recursive: true });
       fs.writeFileSync(path.join(tmpDir, "components", "Widget.tsx"), 'const key = "service_role_literal_leak";');
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 2, "PreToolUse hook must exit 2 to block");
@@ -1679,7 +1700,7 @@ describe("Hooks", () => {
     try {
       fs.mkdirSync(path.join(tmpDir, "app", "api"), { recursive: true });
       fs.writeFileSync(path.join(tmpDir, "app", "api", "route.server.ts"), 'const key = "service_role_legit_server_key";');
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1693,7 +1714,7 @@ describe("Hooks", () => {
     try {
       fs.mkdirSync(path.join(tmpDir, "app", "server"), { recursive: true });
       fs.writeFileSync(path.join(tmpDir, "app", "server", "admin.ts"), 'const key = "service_role_legit_server_dir";');
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1707,7 +1728,7 @@ describe("Hooks", () => {
     try {
       fs.mkdirSync(path.join(tmpDir, "app", "node_modules", "evil"), { recursive: true });
       fs.writeFileSync(path.join(tmpDir, "app", "node_modules", "evil", "index.ts"), 'const key = "service_role_in_node_modules";');
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1725,7 +1746,7 @@ describe("Hooks", () => {
       fs.writeFileSync(path.join(tmpDir, "app", "page.tsx"), "export const a = 1;");
       fs.writeFileSync(path.join(tmpDir, "components", "Widget.tsx"), "export const b = 2;");
       fs.writeFileSync(path.join(tmpDir, "lib", "util.ts"), "export const c = 3;");
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1741,7 +1762,7 @@ describe("Hooks", () => {
       fs.mkdirSync(path.join(tmpDir, "app", "api", "auth"), { recursive: true });
       fs.writeFileSync(path.join(tmpDir, "app", "api", "auth", "route.ts"),
         'const key = process.env.SUPABASE_SERVICE_ROLE_KEY; export async function POST() {}');
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1755,7 +1776,7 @@ describe("Hooks", () => {
     try {
       fs.writeFileSync(path.join(tmpDir, "middleware.ts"),
         'import { service_role } from "./config"; export function middleware() {}');
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1770,7 +1791,7 @@ describe("Hooks", () => {
       fs.mkdirSync(path.join(tmpDir, "app", "api", "webhook"), { recursive: true });
       fs.writeFileSync(path.join(tmpDir, "app", "api", "webhook", "route.js"),
         'const sr = "service_role"; export async function GET() { return new Response(sr); }');
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1785,7 +1806,7 @@ describe("Hooks", () => {
       fs.mkdirSync(path.join(tmpDir, "app", "admin"), { recursive: true });
       fs.writeFileSync(path.join(tmpDir, "app", "admin", "actions.ts"),
         '"use server"\nconst key = process.env.SUPABASE_SERVICE_ROLE_KEY;\nexport async function deleteUser() {}\n');
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 0);
@@ -1800,7 +1821,7 @@ describe("Hooks", () => {
       fs.mkdirSync(path.join(tmpDir, "app", "admin"), { recursive: true });
       fs.writeFileSync(path.join(tmpDir, "app", "admin", "page.tsx"),
         'const key = "service_role"; export default function Page() { return <div>{key}</div>; }');
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "pre-deploy-gate.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "pre-deploy-gate.js")], {
         encoding: "utf8", cwd: tmpDir, timeout: 10000, stdio: ["pipe", "pipe", "pipe"],
       });
       assert.equal(r.status, 2, "PreToolUse hook must exit 2 to block");
@@ -1820,7 +1841,7 @@ describe("Hooks", () => {
       spawnSync("git", ["init", "-q"], { cwd: projDir });
       spawnSync("git", ["checkout", "-b", "main", "-q"], { cwd: projDir, stdio: "pipe" });
       fs.writeFileSync(path.join(tmpDir, ".claude", ".qualia-config.json"), JSON.stringify({ role: "OWNER" }));
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "branch-guard.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "branch-guard.js")], {
         encoding: "utf8", cwd: projDir, timeout: 5000,
         env: { ...process.env, HOME: tmpDir, USERPROFILE: tmpDir },
         stdio: ["pipe", "pipe", "pipe"],
@@ -1840,7 +1861,7 @@ describe("Hooks", () => {
       spawnSync("git", ["init", "-q"], { cwd: projDir });
       spawnSync("git", ["checkout", "-b", "main", "-q"], { cwd: projDir, stdio: "pipe" });
       fs.writeFileSync(path.join(tmpDir, ".claude", ".qualia-config.json"), JSON.stringify({ role: "EMPLOYEE" }));
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "branch-guard.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "branch-guard.js")], {
         encoding: "utf8", cwd: projDir, timeout: 5000,
         env: { ...process.env, HOME: tmpDir, USERPROFILE: tmpDir },
         stdio: ["pipe", "pipe", "pipe"],
@@ -1861,7 +1882,7 @@ describe("Hooks", () => {
       spawnSync("git", ["init", "-q"], { cwd: projDir });
       spawnSync("git", ["checkout", "-b", "feature/xyz", "-q"], { cwd: projDir, stdio: "pipe" });
       fs.writeFileSync(path.join(tmpDir, ".claude", ".qualia-config.json"), JSON.stringify({ role: "EMPLOYEE" }));
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "branch-guard.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "branch-guard.js")], {
         encoding: "utf8", cwd: projDir, timeout: 5000,
         env: { ...process.env, HOME: tmpDir, USERPROFILE: tmpDir },
         stdio: ["pipe", "pipe", "pipe"],
@@ -1880,7 +1901,7 @@ describe("Hooks", () => {
       spawnSync("git", ["init", "-q"], { cwd: projDir });
       spawnSync("git", ["checkout", "-b", "feature/x", "-q"], { cwd: projDir, stdio: "pipe" });
       // No .claude/.qualia-config.json
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "branch-guard.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "branch-guard.js")], {
         encoding: "utf8", cwd: projDir, timeout: 5000,
         env: { ...process.env, HOME: tmpDir, USERPROFILE: tmpDir },
         stdio: ["pipe", "pipe", "pipe"],
@@ -1900,7 +1921,7 @@ describe("Hooks", () => {
       spawnSync("git", ["init", "-q"], { cwd: projDir });
       spawnSync("git", ["checkout", "-b", "feature/x", "-q"], { cwd: projDir, stdio: "pipe" });
       fs.writeFileSync(path.join(tmpDir, ".claude", ".qualia-config.json"), "not json{");
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "branch-guard.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "branch-guard.js")], {
         encoding: "utf8", cwd: projDir, timeout: 5000,
         env: { ...process.env, HOME: tmpDir, USERPROFILE: tmpDir },
         stdio: ["pipe", "pipe", "pipe"],
@@ -1920,7 +1941,7 @@ describe("Hooks", () => {
       spawnSync("git", ["init", "-q"], { cwd: projDir });
       spawnSync("git", ["checkout", "-b", "feature/x", "-q"], { cwd: projDir, stdio: "pipe" });
       fs.writeFileSync(path.join(tmpDir, ".claude", ".qualia-config.json"), JSON.stringify({ role: "" }));
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "branch-guard.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "branch-guard.js")], {
         encoding: "utf8", cwd: projDir, timeout: 5000,
         env: { ...process.env, HOME: tmpDir, USERPROFILE: tmpDir },
         stdio: ["pipe", "pipe", "pipe"],
@@ -1946,7 +1967,7 @@ describe("Hooks", () => {
       const payload = JSON.stringify({
         tool_input: { command: "git push origin feature/x:main" },
       });
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "branch-guard.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "branch-guard.js")], {
         encoding: "utf8", cwd: projDir, timeout: 5000,
         env: { ...process.env, HOME: tmpDir, USERPROFILE: tmpDir },
         input: payload,
@@ -1970,7 +1991,7 @@ describe("Hooks", () => {
       const payload = JSON.stringify({
         tool_input: { command: "git push origin HEAD:master" },
       });
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "branch-guard.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "branch-guard.js")], {
         encoding: "utf8", cwd: projDir, timeout: 5000,
         env: { ...process.env, HOME: tmpDir, USERPROFILE: tmpDir },
         input: payload,
@@ -1994,7 +2015,7 @@ describe("Hooks", () => {
       const payload = JSON.stringify({
         tool_input: { command: "git push origin feature/x:main" },
       });
-      const r = spawnSync(process.execPath, [path.join(HOOKS, "branch-guard.js")], {
+      const r = spawnSync(NODE, [path.join(HOOKS, "branch-guard.js")], {
         encoding: "utf8", cwd: projDir, timeout: 5000,
         env: { ...process.env, HOME: tmpDir, USERPROFILE: tmpDir },
         input: payload,
@@ -2089,14 +2110,14 @@ describe("Hooks", () => {
 
 describe("Statusline", () => {
   it("statusline.js passes syntax check", () => {
-    const r = spawnSync(process.execPath, ["--check", path.join(BIN, "statusline.js")], {
+    const r = spawnSync(NODE, ["--check", path.join(BIN, "statusline.js")], {
       encoding: "utf8", timeout: 5000,
     });
     assert.equal(r.status, 0);
   });
 
   it("statusline.js runs without crashing", () => {
-    const r = spawnSync(process.execPath, [path.join(BIN, "statusline.js")], {
+    const r = spawnSync(NODE, [path.join(BIN, "statusline.js")], {
       encoding: "utf8", timeout: 5000,
       env: { ...process.env, HOME: os.tmpdir(), USERPROFILE: os.tmpdir() },
       stdio: ["pipe", "pipe", "pipe"],
@@ -2105,7 +2126,7 @@ describe("Statusline", () => {
   });
 
   it("qualia-ui.js passes syntax check", () => {
-    const r = spawnSync(process.execPath, ["--check", path.join(BIN, "qualia-ui.js")], {
+    const r = spawnSync(NODE, ["--check", path.join(BIN, "qualia-ui.js")], {
       encoding: "utf8", timeout: 5000,
     });
     assert.equal(r.status, 0);
@@ -2121,7 +2142,7 @@ describe("Statusline", () => {
       agent: {},
       worktree: {},
     });
-    const r = spawnSync(process.execPath, [path.join(BIN, "statusline.js")], {
+    const r = spawnSync(NODE, [path.join(BIN, "statusline.js")], {
       encoding: "utf8", timeout: 5000,
       input: json,
       stdio: ["pipe", "pipe", "pipe"],
@@ -2143,7 +2164,7 @@ describe("Statusline", () => {
       agent: {},
       worktree: {},
     });
-    const r = spawnSync(process.execPath, [path.join(BIN, "statusline.js")], {
+    const r = spawnSync(NODE, [path.join(BIN, "statusline.js")], {
       encoding: "utf8", timeout: 5000,
       input: json,
       stdio: ["pipe", "pipe", "pipe"],
@@ -2162,7 +2183,7 @@ describe("Statusline", () => {
       agent: {},
       worktree: {},
     });
-    const r = spawnSync(process.execPath, [path.join(BIN, "statusline.js")], {
+    const r = spawnSync(NODE, [path.join(BIN, "statusline.js")], {
       encoding: "utf8", timeout: 5000,
       input: json,
       stdio: ["pipe", "pipe", "pipe"],
@@ -2181,7 +2202,7 @@ describe("Statusline", () => {
       agent: {},
       worktree: {},
     });
-    const r = spawnSync(process.execPath, [path.join(BIN, "statusline.js")], {
+    const r = spawnSync(NODE, [path.join(BIN, "statusline.js")], {
       encoding: "utf8", timeout: 5000,
       input: json,
       stdio: ["pipe", "pipe", "pipe"],
@@ -2200,7 +2221,7 @@ describe("Statusline", () => {
       agent: { name: "qualia-planner" },
       worktree: {},
     });
-    const r = spawnSync(process.execPath, [path.join(BIN, "statusline.js")], {
+    const r = spawnSync(NODE, [path.join(BIN, "statusline.js")], {
       encoding: "utf8", timeout: 5000,
       input: json,
       stdio: ["pipe", "pipe", "pipe"],
@@ -2210,7 +2231,7 @@ describe("Statusline", () => {
   });
 
   it("statusline handles empty stdin gracefully", () => {
-    const r = spawnSync(process.execPath, [path.join(BIN, "statusline.js")], {
+    const r = spawnSync(NODE, [path.join(BIN, "statusline.js")], {
       encoding: "utf8", timeout: 5000,
       input: "",
       stdio: ["pipe", "pipe", "pipe"],
@@ -2221,7 +2242,7 @@ describe("Statusline", () => {
   });
 
   it("statusline handles invalid JSON gracefully", () => {
-    const r = spawnSync(process.execPath, [path.join(BIN, "statusline.js")], {
+    const r = spawnSync(NODE, [path.join(BIN, "statusline.js")], {
       encoding: "utf8", timeout: 5000,
       input: "not json{",
       stdio: ["pipe", "pipe", "pipe"],
@@ -2245,7 +2266,7 @@ describe("Statusline", () => {
         agent: {},
         worktree: {},
       });
-      const r = spawnSync(process.execPath, [path.join(BIN, "statusline.js")], {
+      const r = spawnSync(NODE, [path.join(BIN, "statusline.js")], {
         encoding: "utf8", timeout: 5000,
         input: json,
         stdio: ["pipe", "pipe", "pipe"],
@@ -2271,7 +2292,7 @@ describe("Statusline", () => {
         agent: {},
         worktree: {},
       });
-      const r = spawnSync(process.execPath, [path.join(BIN, "statusline.js")], {
+      const r = spawnSync(NODE, [path.join(BIN, "statusline.js")], {
         encoding: "utf8", timeout: 5000,
         input: json,
         stdio: ["pipe", "pipe", "pipe"],
@@ -2294,7 +2315,7 @@ describe("qualia-ui.js", () => {
 
   function runUI(args, opts = {}) {
     const tmpHome = opts.home || os.tmpdir();
-    const r = spawnSync(process.execPath, [UI, ...args], {
+    const r = spawnSync(NODE, [UI, ...args], {
       encoding: "utf8", timeout: 5000,
       cwd: opts.cwd || os.tmpdir(),
       env: { ...process.env, HOME: tmpHome, USERPROFILE: tmpHome },
@@ -2517,7 +2538,7 @@ describe("install.js", () => {
   const INSTALL = path.join(BIN, "install.js");
 
   function runInstall(code, home) {
-    const r = spawnSync(process.execPath, [INSTALL], {
+    const r = spawnSync(NODE, [INSTALL], {
       encoding: "utf8", timeout: 15000,
       input: code + "\n",
       env: { ...process.env, HOME: home, USERPROFILE: home },
@@ -2536,7 +2557,12 @@ describe("install.js", () => {
       assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "bin", "state.js")));
       assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "bin", "qualia-ui.js")));
       assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "bin", "statusline.js")));
+      assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "bin", "knowledge.js")));
       assert.ok(fs.existsSync(path.join(tmpHome, ".claude", ".qualia-config.json")));
+      // v4.2.0 — knowledge layer must be initialized
+      assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "knowledge", "agents.md")));
+      assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "knowledge", "index.md")));
+      assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "knowledge", "daily-log")));
     } finally {
       fs.rmSync(tmpHome, { recursive: true, force: true });
     }
@@ -2567,12 +2593,12 @@ describe("install.js", () => {
     }
   });
 
-  it("7 hooks installed (block-env-edit removed in v3.2.0)", () => {
+  it("9 hooks installed (block-env-edit removed in v3.2.0; git-guardrails + stop-session-log added in v4.2.0)", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
       runInstall("QS-FAWZI-01", tmpHome);
       const hooks = fs.readdirSync(path.join(tmpHome, ".claude", "hooks")).filter(f => f.endsWith(".js"));
-      assert.equal(hooks.length, 7);
+      assert.equal(hooks.length, 9);
     } finally {
       fs.rmSync(tmpHome, { recursive: true, force: true });
     }
@@ -2644,7 +2670,7 @@ describe("install.js", () => {
   it("empty code exits 1", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      const r = spawnSync(process.execPath, [INSTALL], {
+      const r = spawnSync(NODE, [INSTALL], {
         encoding: "utf8", timeout: 15000,
         input: "\n",
         env: { ...process.env, HOME: tmpHome, USERPROFILE: tmpHome },