ruvnet-brain 4.0.6 → 4.0.7

package/scripts/lesson-lifecycle.mjs

@@ -43,7 +43,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import crypto from 'node:crypto';
-import { ORIGIN, STATUS, ENFORCEMENT, loadLessons } from './lesson-store.mjs';
+import { ORIGIN, SOURCE_CLASS, STATUS, ENFORCEMENT, loadLessons } from './lesson-store.mjs';
 
 // ── The bars, in one place, as numbers a human can argue with ────────────────────────────────────
 export const RETIREMENT = Object.freeze({
@@ -385,6 +385,7 @@ export function explainGeneralization(lesson, otherProjects = [], { minProjects
     // `{...lesson, ...proposal}`, so the result cannot block even if the source lesson was ratified
     // and blocking — the trust boundary is enforced by the data, not by the caller remembering.
     origin: ORIGIN.MODEL_INFERRED,
+    sourceClass: SOURCE_CLASS.MODEL_INFERRED,
     status: STATUS.CANDIDATE,
     enforcement: ENFORCEMENT.CHECKLIST,
     intendedEnforcement: null,

package/scripts/lesson-ratify.mjs

@@ -26,7 +26,7 @@
  * correctly, stops using it.
  */
 import os from 'node:os';
-import { loadLessons, saveLessons, ratify, demote, weightOf, pending, ENFORCEMENT, STATUS, ORIGIN, TRIGGERS } from './lesson-store.mjs';
+import { loadLessons, saveLessons, ratify, demote, weightOf, pending, ENFORCEMENT, STATUS, ORIGIN, SOURCE_CLASS, TRIGGERS } from './lesson-store.mjs';
 
 const argv = process.argv.slice(2);
 const arg = (f) => { const i = argv.indexOf(f); return i >= 0 && argv[i + 1] ? argv[i + 1] : null; };
@@ -34,7 +34,7 @@ const has = (f) => argv.includes(f);
 
 const lessons = loadLessons();
 if (!lessons.length) {
-  console.log('\n  No lessons stored yet. Seed them with:  node scripts/lesson-seed.mjs --apply\n');
+  console.log('\n  No personal lessons stored yet. They appear after an explicit user correction is captured.\n');
   process.exit(0);
 }
 
@@ -86,7 +86,10 @@ if (has('--ratify')) {
   // Bulk convenience, deliberately scoped: it can only touch lessons the USER stated. Model-inferred
   // lessons are never swept up by a bulk action — that would be exactly the hole the boundary closes.
   let next = lessons;
-  const targets = lessons.filter((l) => l.origin === ORIGIN.USER_STATED && l.status === STATUS.CANDIDATE && !l.demoted);
+  const targets = lessons.filter((l) => l.origin === ORIGIN.USER_STATED
+    && l.sourceClass === SOURCE_CLASS.CURRENT_USER
+    && l.status === STATUS.CANDIDATE
+    && !l.demoted);
   for (const l of targets) next = ratify(l.id, next);
   saveLessons(next);
   const nowBlocking = next.filter((l) => l.enforcement === ENFORCEMENT.BLOCK).length;

package/scripts/lesson-seed.mjs

@@ -17,17 +17,22 @@
 import os from 'node:os';
 import {
   makeLesson, saveLessons, loadLessons, lessonsFor, unenforceable, pending, weightOf,
-  TRIGGERS as T, ENFORCEMENT as E, ORIGIN as O,
+  TRIGGERS as T, ENFORCEMENT as E, ORIGIN as O, SOURCE_CLASS,
 } from './lesson-store.mjs';
 
 // Shipped at CHECKLIST; `intendedEnforcement` records what it becomes once a human ratifies it.
 const blocking = { enforcement: E.CHECKLIST, intendedEnforcement: E.BLOCK };
+const ownerImport = {
+  origin: O.IMPORTED,
+  sourceClass: SOURCE_CLASS.IMPORTED_OWNER,
+  demoted: true,
+};
 
 export const SEED = [
   makeLesson({
     id: 'L01-verify-with-a-capable-channel',
     ...blocking,
-    origin: O.USER_STATED,
+    ...ownerImport,
     severity: 'high',
     statement: 'Before claiming something works, verify through a channel CAPABLE of observing the change — an independent tool, a re-measurement, a read-write connection. Never the exit code of the thing being tested.',
     trigger: T.CLAIM_DONE.key,
@@ -46,7 +51,7 @@ export const SEED = [
   makeLesson({
     id: 'L02-check-before-you-assert',
     ...blocking,
-    origin: O.USER_STATED,
+    ...ownerImport,
     severity: 'high',
     statement: 'Before stating any fact about the world — a version, an API, what a tool does, how an architecture works — read a live source THIS TURN and name it. Recalling is not checking. The urge to skip the check IS the signal you are about to be wrong.',
     trigger: T.ASSERT_FACT.key,
@@ -64,7 +69,7 @@ export const SEED = [
   makeLesson({
     id: 'L03-research-before-recommending',
     enforcement: E.CHECKLIST,
-    origin: O.USER_STATED,
+    ...ownerImport,
     statement: 'Before recommending an architecture, research it: compare at least three real options with tradeoffs, and check whether the ecosystem already ships it. Pattern-matching from training data is not a recommendation.',
     trigger: T.RECOMMEND_ARCH.key,
     evidence: [
@@ -78,7 +83,7 @@ export const SEED = [
   makeLesson({
     id: 'L04-never-relay-a-number',
     enforcement: E.CHECKLIST,
-    origin: O.USER_STATED,
+    ...ownerImport,
     severity: 'high',
     statement: 'Never repeat a score, benchmark, or subagent result without re-checking the underlying artifact yourself. A number you did not measure is a claim you cannot defend.',
     trigger: T.RELAY_NUMBER.key,
@@ -93,7 +98,7 @@ export const SEED = [
   makeLesson({
     id: 'L05-version-is-the-update-signal',
     ...blocking,
-    origin: O.USER_STATED,
+    ...ownerImport,
     severity: 'high',
     statement: 'Any behaviour-changing push bumps the version IN THE SAME COMMIT, and the release narrative is updated to match. A fix label on a new subsystem is a lie about what changed.',
     trigger: T.SHIP.key,
@@ -109,7 +114,7 @@ export const SEED = [
   makeLesson({
     id: 'L06-use-the-real-tool',
     ...blocking,
-    origin: O.USER_STATED,
+    ...ownerImport,
     severity: 'high',
     statement: 'Before writing code in the RuvNet domain, search for the tool that already implements it. If you still disagree after genuinely looking, say so OUT LOUD, cite the source path, and name the hand-roll as a hand-roll. Never silently.',
     trigger: T.WRITE_CODE.key,
@@ -127,7 +132,7 @@ export const SEED = [
   makeLesson({
     id: 'L07-blast-radius-not-social-comfort',
     ...blocking,
-    origin: O.USER_STATED,
+    ...ownerImport,
     severity: 'high',
     statement: 'Gate on blast radius, not on how awkward an action feels. Ask: is it reversible, and is it outward-facing? A silent irreversible change is worse than an awkward reversible one.',
     trigger: T.MUTATE_MACHINE.key,
@@ -143,7 +148,7 @@ export const SEED = [
   makeLesson({
     id: 'L08-status-is-a-table',
     enforcement: E.CHECKLIST,
-    origin: O.USER_STATED,
+    ...ownerImport,
     statement: 'Report status as a structured table with an explicit shipped/tested column, never as narrative. Prose lets unfinished work live inside sentences about progress.',
     trigger: T.REPORT_STATUS.key,
     evidence: [
@@ -159,7 +164,7 @@ export const SEED = [
   makeLesson({
     id: 'L09-gradeable-is-not-valuable',
     enforcement: E.CHECKLIST,
-    origin: O.MODEL_INFERRED,
+    ...ownerImport,
     statement: 'When choosing what to work on, name the ungradeable items explicitly and commit to them. The instinct to pick the task with a green test routes systematically away from the user\'s actual value.',
     trigger: T.CHOOSE_WORK.key,
     evidence: [
@@ -172,7 +177,7 @@ export const SEED = [
   makeLesson({
     id: 'L10-under-enumeration-is-a-tell',
     enforcement: E.CHECKLIST,
-    origin: O.MODEL_INFERRED,
+    ...ownerImport,
     statement: 'When producing a list of failure modes, options, or requirements, state what was left out and why. A satisfyingly round number is evidence of rounding, not of completeness.',
     trigger: T.REPORT_STATUS.key,
     evidence: [
@@ -185,7 +190,7 @@ export const SEED = [
   makeLesson({
     id: 'L11-retrieval-without-volition-is-broken',
     enforcement: E.REVIEW,
-    origin: O.MODEL_INFERRED,
+    ...ownerImport,
     statement: 'A surface that CAN detect something useful and stays silent is broken. Judge every feature by whether it volunteers what it knows, not by whether it can answer when asked.',
     trigger: T.CHOOSE_WORK.key,
     evidence: [
@@ -199,7 +204,7 @@ export const SEED = [
   makeLesson({
     id: 'L12-efficiency-seeking-is-the-tell',
     enforcement: E.REVIEW,
-    origin: O.USER_STATED,
+    ...ownerImport,
     statement: 'Treat the impulse to save a step as a defect signal, not a virtue. Skipping a check to save a turn is the specific mechanism that produces wrong answers — effectiveness first, always.',
     trigger: T.CHOOSE_WORK.key,
     evidence: [
@@ -228,14 +233,14 @@ if (invokedDirectly) {
     for (const l of ls) {
       const shown = l.intendedEnforcement ? `${l.enforcement}→${l.intendedEnforcement}` : l.enforcement;
       console.log(`      ${shown.padEnd(18)} ${l.id}`);
-      console.log(`      ${''.padEnd(18)}   ${l.origin === 'user-stated' ? 'you said it' : 'MODEL-INFERRED (quarantined — can never block)'} · taught ${l.repeatCount}× · weight ${weightOf(l)}`);
+      console.log(`      ${''.padEnd(18)}   IMPORTED MAINTAINER HISTORY (quarantined — never personal policy) · observed ${l.repeatCount}× · weight ${weightOf(l)}`);
     }
     console.log('');
   }
   const un = unenforceable(SEED);
   const pend = pending(SEED);
-  console.log(`  ${pend.length} awaiting YOUR ratification. Nothing here blocks until you agree to it —`);
-  console.log(`  the model does not get to ratify its own rules.`);
+  console.log(`  ${pend.length} awaiting ratification. Bundled maintainer history is quarantined and cannot`);
+  console.log(`  become the installing user's personal policy.`);
   if (un.length) console.log(`  ${un.length} are declared unenforceable (no hook can observe them); checked at review instead.`);
   console.log('');
 

package/scripts/model-router-catalog.mjs

@@ -0,0 +1,16 @@
+// Managed facts are additive for existing users. Their existing row is the user overlay: it wins
+// byte-for-byte, including disablement, tier/priority changes, and local candidates. Newly shipped
+// metered rows are not auto-added; that would silently expand spend authority.
+export function mergeManagedCatalog(existing, managed) {
+  const current = Array.isArray(existing?.candidates) ? existing.candidates : [];
+  const seen = new Set(current.map((candidate) => candidate?.id).filter(Boolean));
+  const additions = (managed?.candidates || []).filter((candidate) => candidate?.id
+    && !seen.has(candidate.id)
+    && ((candidate.subscription || []).length > 0 || candidate.provider === 'local'));
+  const next = {
+    ...existing,
+    managedVersion: managed?.managedVersion || managed?.updated || null,
+    candidates: [...current, ...additions],
+  };
+  return JSON.stringify(next) === JSON.stringify(existing) ? existing : next;
+}

package/scripts/model-router-engine.mjs

@@ -113,10 +113,13 @@ export function loadCatalog() {
   } catch {
     /* fall through to a minimal built-in so the engine still answers */
   }
-  // Built-in fallback (verified OpenRouter prices from route-cheap; Anthropic frontier from same).
+  // Built-in fallback. Claude launchability was verified against Claude Code 2.1.220 on 2026-08-02;
+  // prices remain null where the subscription host, rather than a metered API, is authoritative.
   return [
     { id: 'deepseek/deepseek-chat', provider: 'openrouter', harness: ['claude-code', 'codex'], tier: 'cheap', costPerMTok: { in: 0.2, out: 0.8 }, verified: '2026-07-07' },
     { id: 'claude-opus-4-8', provider: 'anthropic', harness: ['claude-code'], tier: 'frontier', costPerMTok: { in: 5.0, out: 25.0 }, verified: '2026-07-07' },
+    { id: 'claude-opus-5', provider: 'anthropic', harness: ['claude-code'], subscription: ['claude-code'], tier: 'frontier', costPerMTok: null, verified: '2026-08-02 Claude Code 2.1.220 launch' },
+    { id: 'claude-fable-5', provider: 'anthropic', harness: ['claude-code'], subscription: ['claude-code'], tier: 'frontier', costPerMTok: null, verified: '2026-08-02 Claude Code 2.1.220 launch' },
     { id: 'gpt-5.5', provider: 'openai', harness: ['codex'], tier: 'frontier', costPerMTok: null, verified: null },
   ];
 }

package/scripts/onboarding-console.mjs

@@ -41,6 +41,8 @@ import { loadCatalog as engineCatalog, catalogSource as engineCatalogSource, loa
 import { effectivePrices, loadLabelledRows, MIN_LABELS, OUTCOMES } from './metaharness-router.mjs';
 import { utilization } from './router-utilization.mjs';
 import { loadCatalog, detectProvider, frontierFor } from './model-catalog.mjs';
+import { providerAvailability } from './provider-availability.mjs';
+import { inspectSessionSnapshots } from './session-snapshot-contract.mjs';
 import { learnings } from './learnings.mjs';
 import { gatesSurvey } from './gates.mjs';
 // The write-safety primitives, borrowed rather than re-implemented. See saveConfig for why.
@@ -59,7 +61,7 @@ import {
 } from '../kb/brain-profile.mjs';
 // Lessons: read model + the two user verbs. Every mutation goes through lesson-store's own
 // updateLessons/ratify/demote/restore — this file adds a SURFACE, never a second writer.
-import { loadLessons, updateLessons, ratify, demote, restore, pending, weightOf, TRIGGERS, ENFORCEMENT, ORIGIN, STATUS } from './lesson-store.mjs';
+import { loadLessons, updateLessons, ratify, demote, restore, pending, weightOf, TRIGGERS, ENFORCEMENT, ORIGIN, SOURCE_CLASS, STATUS } from './lesson-store.mjs';
 import {
   openRouterCredentialStatus,
   saveOpenRouterCredential,
@@ -421,8 +423,19 @@ function probeMemory(projectDir) {
   const db = path.join(projectDir, '.swarm/memory.db');
   const probes = {};
   // compaction survival + session surfacing are filesystem facts, always checkable
-  const snap = fs.existsSync(path.join(projectDir, 'agentdb-sessions.jsonl')) || fs.existsSync(path.join(projectDir, '.swarm/agentdb-sessions.jsonl'));
-  probes.compactionSurvival = snap ? { status: 'ok', detail: 'a PreCompact snapshot file is present' } : { status: 'warn', detail: 'no PreCompact snapshot found for this project yet' };
+  const snapshot = inspectSessionSnapshots(projectDir);
+  const snapshotDetail = snapshot.kind === 'canonical'
+    ? 'a fresh versioned PreCompact snapshot is present in .swarm/agentdb-sessions.jsonl'
+    : snapshot.kind === 'legacy'
+      ? 'a fresh supported Ruflo session snapshot is present (legacy path; migration recommended)'
+      : snapshot.kind === 'malformed'
+        ? 'snapshot files were found but none matched the supported schema'
+        : snapshot.kind !== 'absent'
+          ? 'the newest supported snapshot is stale'
+          : 'no supported PreCompact snapshot found for this project yet';
+  probes.compactionSurvival = snapshot.fresh
+    ? { status: 'ok', detail: snapshotDetail, artifact: snapshot.kind }
+    : { status: 'warn', detail: snapshotDetail, artifact: snapshot.kind };
   probes.sessionSurfacing = sessionHookExists() ? { status: 'ok', detail: 'the global SessionStart hook surfaces project state at launch' } : { status: 'warn', detail: 'no SessionStart recall hook found' };
   // recall quality: honestly NOT probed at render (a true probe needs an embedding query; left for an explicit deep test)
   probes.recallQuality = { status: 'notTested', detail: 'not checked this session — a real recall probe needs an embedding round-trip, which render deliberately avoids' };
@@ -989,7 +1002,15 @@ function gatherLessons() {
   const lessons = all.map((l) => {
     const trig = TRIGGER_BY_KEY.get(l.trigger);
     const meaning = ENFORCEMENT_MEANING[l.enforcement] || { label: l.enforcement, detail: '' };
-    const userStated = l.origin === ORIGIN.USER_STATED;
+    const userStated = l.origin === ORIGIN.USER_STATED && l.sourceClass === SOURCE_CLASS.CURRENT_USER;
+    const quarantined = l.sourceClass === SOURCE_CLASS.IMPORTED_OWNER || l.sourceClass === SOURCE_CLASS.DEMONSTRATION;
+    const origin = l.sourceClass === SOURCE_CLASS.CURRENT_USER
+      ? 'you taught me this'
+      : l.sourceClass === SOURCE_CLASS.IMPORTED_OWNER
+        ? 'imported maintainer history — not yours'
+        : l.sourceClass === SOURCE_CLASS.DEMONSTRATION
+          ? 'demonstration data — not personal policy'
+          : 'I inferred this from what happened';
     return {
       id: l.id,
       statement: l.statement,
@@ -1001,8 +1022,10 @@ function gatherLessons() {
       enforcementLabel: meaning.label,
       enforcementDetail: meaning.detail,
       // Provenance drives trust, so it is stated plainly and never flattened into a badge colour.
-      origin: userStated ? 'you taught me this' : 'I inferred this from what happened',
+      origin,
+      sourceClass: l.sourceClass,
       userStated,
+      quarantined,
       taughtCount: l.repeatCount || 0,
       projects: Array.isArray(l.projects) ? l.projects : [],
       evidence: l.evidence || null,
@@ -1011,10 +1034,11 @@ function gatherLessons() {
       ratified: l.status === STATUS.RATIFIED || l.status === STATUS.ACTIVE,
       demoted: !!l.demoted,
       // The one thing the user is being ASKED, as opposed to merely shown.
-      awaitingYou: l.status === STATUS.CANDIDATE && !l.demoted,
+      awaitingYou: l.status === STATUS.CANDIDATE && !l.demoted && !quarantined,
       // Honest ceiling: ratifying a model-inferred lesson can NOT raise it to block
       // (lesson-store.mjs:380). Say so before they click, not after.
       canReachBlock: userStated,
+      canRatify: !quarantined,
       intendedEnforcement: l.intendedEnforcement || null,
     };
   });
@@ -1038,6 +1062,7 @@ function gatherLessons() {
       active: lessons.filter((l) => l.ratified && !l.demoted).length,
       awaitingYou: lessons.filter((l) => l.awaitingYou).length,
       off: lessons.filter((l) => l.demoted).length,
+      quarantined: lessons.filter((l) => l.quarantined).length,
       blocking: lessons.filter((l) => l.enforcement === 'block' && l.ratified && !l.demoted).length,
     },
     // TASK 2: this endpoint bypasses serveCached entirely and had NO timestamp of any kind. It is
@@ -1068,6 +1093,9 @@ function setLesson(body) {
   }
   const before = loadLessons().find((l) => l.id === id);
   if (!before) return { ok: false, log: `nothing changed — no lesson with id ${id}` };
+  if (action === 'ratify' && (before.sourceClass === SOURCE_CLASS.IMPORTED_OWNER || before.sourceClass === SOURCE_CLASS.DEMONSTRATION)) {
+    return { ok: false, log: 'nothing changed — imported or demonstration history cannot become personal policy' };
+  }
 
   try {
     updateLessons((fresh) => spec.fn(id, fresh));
@@ -1695,7 +1723,10 @@ function gatherRouterEngine() {
   // user's Settings choice is now the single source of truth, via the SAME detectProvider() the
   // savings.utilization frontier calc already uses (config → env → catalog default) — so this and
   // the frontier calc can never disagree either.
-  let house, providerKeys = {};
+  const subscriptions = detectSubscriptions();
+  let house;
+  let providerKeys = providerAvailability(null, subscriptions);
+  let providerCatalog = { status: 'degraded', detail: 'provider catalog was not loaded; native boolean detections are shown' };
   try {
     const hcat = loadCatalog();
     house = detectProvider(hcat, { provider: cfg.provider });
@@ -1704,11 +1735,12 @@ function gatherRouterEngine() {
     // key found". Read each provider's real detect_env vars — minus the CLAUDECODE / CLAUDE_CODE_ENTRYPOINT
     // run-context markers (which are not credentials), exactly as detectProvider() itself filters them —
     // so the UI's "key found / not found" is now true instead of decorative.
-    const IGNORE_ENV = new Set(['CLAUDECODE', 'CLAUDE_CODE_ENTRYPOINT']);
-    for (const [name, p] of Object.entries(hcat.providers || {})) {
-      providerKeys[name] = (p.detect_env || []).some((k) => !IGNORE_ENV.has(k) && !!process.env[k]);
-    }
-  } catch { house = { provider: cfg.provider && cfg.provider !== 'auto' ? cfg.provider : 'anthropic', source: 'default' }; }
+    providerKeys = providerAvailability(hcat, subscriptions);
+    providerCatalog = { status: 'ok', detail: 'verified provider catalog loaded' };
+  } catch (error) {
+    house = { provider: cfg.provider && cfg.provider !== 'auto' ? cfg.provider : 'anthropic', source: 'default' };
+    providerCatalog = { status: 'degraded', detail: `provider catalog unavailable: ${String(error?.message || error)}` };
+  }
   return {
     engine: {
       package: '@metaharness/router', installed,
@@ -1717,12 +1749,13 @@ function gatherRouterEngine() {
       outcomesLog: OUTCOMES.replace(os.homedir(), '~'),
     },
     keys: { openrouter: openrouterKey, ...providerKeys },
+    providerCatalog,
     // Paid seats, found at USER level. `keys` above is env-var API keys only, which is exactly why a
     // user with ChatGPT Max and Claude Max read as "auto" — neither plan puts a key in the
     // environment. These two fields are what let the UI say "you already have this" instead of
     // asking someone to paste a credential they are already paying not to need.
-    subscriptions: detectSubscriptions(),
-    preferredSeat: preferredSeat(detectSubscriptions()),
+    subscriptions,
+    preferredSeat: preferredSeat(subscriptions),
     profile: { present: !!profile, path: PROFILE_PATH.replace(os.homedir(), '~') },
     catalogSource: engineCatalogSource(),   // 'catalog' | 'built-in-fallback' — so the UI never calls the stub a real catalog
     house,
@@ -1833,6 +1866,10 @@ async function fetchReleaseDigest() {
 // in the heading of the console"). Plugin-cache dir first — the truth on installed machines — then
 // the repo's plugin.json for dev checkouts. null hides the chip rather than guessing.
 function brainVersionOnDisk() {
+  const runtimeIdentity = readJSON(path.join(REPO, 'runtime-identity.json'));
+  if (typeof runtimeIdentity?.runtimeVersion === 'string' && runtimeIdentity.runtimeVersion) {
+    return runtimeIdentity.runtimeVersion.replace(/^v/, '');
+  }
   try { const v = readInstallChannel().version; if (v) return String(v).replace(/^v/, ''); } catch { /* fall through */ }
   try { return getVersion(); } catch { return null; }
 }
@@ -2948,6 +2985,7 @@ export {
   saveBrainPower,
   gatherBrainProfile,
   saveBrainProfile,
+  gatherRouterEngine,
   autoEligibleIds,
 };
 // Exported for the cross-project cache-isolation test (console-cache-scope.test.mjs). serveCached's

package/scripts/provider-availability.mjs

@@ -0,0 +1,12 @@
+const IGNORED_ENV = new Set(['CLAUDECODE', 'CLAUDE_CODE_ENTRYPOINT']);
+
+// Boolean-only by construction: no credential value can cross the Console API boundary.
+export function providerAvailability(catalog, subscriptions = {}, env = process.env) {
+  if (catalog?.providers && typeof catalog.providers === 'object') {
+    return Object.fromEntries(Object.entries(catalog.providers).map(([name, provider]) => [
+      name,
+      (provider?.detect_env || []).some((key) => !IGNORED_ENV.has(key) && Boolean(env[key])),
+    ]));
+  }
+  return Object.fromEntries(Object.entries(subscriptions).map(([name, value]) => [name, Boolean(value?.apiKey)]));
+}

package/scripts/release-authority.mjs

@@ -7,7 +7,10 @@ import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const CANONICAL_PUBLISHER = 'scripts/release.mjs';
+const CANONICAL_PUBLISHERS = new Set([
+  'scripts/release.mjs',
+  'scripts/release-transaction-provider.mjs',
+]);
 const SOURCE_EXTENSIONS = new Set(['.mjs', '.js', '.cjs', '.sh']);
 
 function executableSource(source) {
@@ -27,6 +30,14 @@ const ACTIONS = [
     ],
     shellPatterns: [/^\s*gh\s+release\s+create\b/m],
   },
+  {
+    action: 'github-release-update',
+    jsPatterns: [
+      /['"]PATCH['"][\s\S]{0,120}releases\//,
+      /\[\s*['"]release['"]\s*,\s*['"]edit['"]/,
+    ],
+    shellPatterns: [/^\s*gh\s+(?:release\s+edit|api\s+.*releases\/.*PATCH)\b/m],
+  },
   {
     action: 'npm-publish',
     jsPatterns: [
@@ -47,7 +58,7 @@ const ACTIONS = [
 
 export function detectPublisherActions(file, source) {
   const relative = file.split(path.sep).join('/');
-  if (relative === CANONICAL_PUBLISHER) return [];
+  if (CANONICAL_PUBLISHERS.has(relative)) return [];
   const executable = executableSource(source);
   const kind = path.extname(relative) === '.sh' ? 'shellPatterns' : 'jsPatterns';
   return ACTIONS
@@ -67,6 +78,7 @@ function sourceFiles(root) {
   };
   visit(path.join(root, 'scripts'));
   visit(path.join(root, 'deploy'));
+  visit(path.join(root, 'bin'));
   return files;
 }