ruvnet-brain 4.4.1 → 4.5.1

package/console/app.js

@@ -305,8 +305,7 @@ function updateVerdict() {
   const v = $('#verdict');
   if (!v || found.capsTotal == null) return;      // nothing measured yet — say nothing
 
-  const behind = (found.pkgTotal != null && found.pkgCurrent != null)
-    ? found.pkgTotal - found.pkgCurrent : null;
+  const behind = found.pkgNeedsLook != null ? found.pkgNeedsLook : null;
 
   // What actually wants the reader's attention, in blast-radius order.
   const needsLook = [];
@@ -316,6 +315,7 @@ function updateVerdict() {
   const caveats = [];
   if (found.capsUnknown) caveats.push(`${found.capsUnknown} capabilit${found.capsUnknown === 1 ? "y" : "ies"} we could not check`);
   if (found.memNotTested) caveats.push(`${found.memNotTested} memory dimension${found.memNotTested === 1 ? '' : 's'} not probed this session`);
+  if (found.pkgUnchecked) caveats.push(`${found.pkgUnchecked} package${found.pkgUnchecked === 1 ? '' : 's'} whose version we could not check`);
 
   const good = !needsLook.length;
   const headline = good
@@ -323,8 +323,10 @@ function updateVerdict() {
     : `Mostly good — ${needsLook.join(' and ')}.`;
 
   const detail = `${found.capsOn} of ${found.capsTotal} capabilities are on`
+    + (found.capsIdle ? `, ${found.capsIdle} set up but not running` : '')
     + (found.capsAbsent ? `, ${found.capsAbsent} not installed` : '')
-    + (behind === 0 ? ', and every package on your stack is current' : '')
+    + (behind === 0 && !found.pkgUnchecked ? ', and every package on your stack is current' : '')
+    + (behind === 0 && found.pkgUnchecked ? ', and no checked package is behind' : '')
     + '.';
 
   v.replaceChildren(
@@ -357,6 +359,7 @@ function renderHost(host, generatedAt) {
       BRAIN_INSTALLED_VERSION = String(host.brainVersion);
       const vc = $('#brain-ver');
       if (vc) { vc.textContent = `v${BRAIN_INSTALLED_VERSION}`; vc.hidden = false; }
+      if (LAST_TRUST) renderUpdateGong(LAST_TRUST);
     }
     const meta = $('#host-meta');
     if (meta) {
@@ -764,6 +767,12 @@ function renderStack(data) {
 
   found.pkgTotal = total;
   found.pkgCurrent = current;
+  // RNBC QA 2026-10-01: the verdict used to compute "behind" as total − current, so 34 plugin
+  // packages whose marketplace revision is simply not checked were announced as "34 packages
+  // behind" directly above a stack card saying "Nothing needs attention". Behind is what the audit
+  // MEASURED as behind or broken; not-checked is its own caveat.
+  found.pkgNeedsLook = behind + broken;
+  found.pkgUnchecked = Math.max(0, total - current - behind - broken - ahead);
   updateFoundStrip();
 
   pkgs.sort((a, b) =>
@@ -777,6 +786,8 @@ function renderStack(data) {
     ahead ? el('span', {}, ', ', el('b', {}, fmtInt(ahead)), ' ahead of the registry (which is legal)') : '',
     broken ? el('span', {}, ', ', el('b', {}, fmtInt(broken)), ' broken') : '',
     behind ? el('span', {}, ', ', el('b', {}, fmtInt(behind)), ' behind') : '',
+    found.pkgUnchecked ? el('span', {}, ', ', el('b', {}, fmtInt(found.pkgUnchecked)),
+      ' installed but not version-checked (plugin marketplace revisions are not compared)') : '',
     '.', infoBtn('Your stack', STACK_INFO)));
 
   if (pkgs.length) {
@@ -803,10 +814,17 @@ function renderStack(data) {
     // (the purge:shadows recommendation — evidence, cost, undo); the in-sync majority collapses
     // to a single verified line with a peel-back for whoever wants the full inventory.
     const staleRows = shadows.filter((s) => s.stale);
-    const syncCount = shadows.length - staleRows.length;
+    // A cached copy with NO global install has nothing to "match" — RNBC QA 2026-10-01 measured
+    // four "cache 0.1.12 · global ?" rows each wearing a green "in sync" chip under "All 8 cached
+    // copies match your installs". They are counted and labelled for what they are.
+    const orphanRows = shadows.filter((s) => !s.stale && !s.global);
+    const syncCount = shadows.length - staleRows.length - orphanRows.length;
+    const orphanNote = orphanRows.length
+      ? ` ${fmtInt(orphanRows.length)} more ${orphanRows.length === 1 ? 'is a cached copy' : 'are cached copies'} of a package with no global install to compare against.`
+      : '';
     main.push(el('aside', { class: 'shadows' },
       el('p', { class: 'shadows-title' }, 'Shadow copies in the npx cache',
-        staleRows.length ? chip(`${staleRows.length} stale`, 'warn') : chip('all in sync', 'green')),
+        staleRows.length ? chip(`${staleRows.length} stale`, 'warn') : chip(orphanRows.length ? 'none stale' : 'all in sync', 'green')),
       staleRows.length ? el('p', { class: 'shadows-sub' },
         'npx keeps private copies in ', el('code', {}, '~/.npm/_npx'),
         '. A stale one quietly answers instead of your newer install — every command still “works”, which is exactly why it’s invisible. These need dealing with:') : null,
@@ -822,18 +840,18 @@ function renderStack(data) {
         el('span', { class: 'shadow-dir' }, s.dir || ''),
       )),
       el('p', { class: 'shadows-ok' },
-        staleRows.length
-          ? `The other ${fmtInt(syncCount)} cached ${syncCount === 1 ? 'copy matches' : 'copies match'} your installs — re-checked on every audit.`
+        (staleRows.length || orphanRows.length
+          ? `${staleRows.length ? 'The other ' : ''}${fmtInt(syncCount)} cached ${syncCount === 1 ? 'copy matches' : 'copies match'} your installs — re-checked on every audit.`
           : shadows.length === 1
             ? 'The 1 cached copy matches your install — re-checked on every audit; nothing is hiding stale.'
-            : `All ${fmtInt(shadows.length)} cached copies match your installs — re-checked on every audit; nothing is hiding stale.`),
+            : `All ${fmtInt(shadows.length)} cached copies match your installs — re-checked on every audit; nothing is hiding stale.`) + orphanNote),
       el('details', { class: 'sub' },
         el('summary', {}, `Peel it back — ${shadows.length === 1 ? 'the 1 cached copy' : `all ${fmtInt(shadows.length)} cached copies`}`),
         el('div', { class: 'sub-body' },
           shadows.map((s) => el('div', { class: 'shadow-row' },
             el('span', { class: 'shadow-name' }, s.name || '—'),
             el('span', { class: 'shadow-vers' }, `cache ${s.version ?? '?'} · global `, el('b', {}, s.global ?? '?')),
-            s.stale ? chip('stale', 'warn') : chip('in sync', 'green'),
+            s.stale ? chip('stale', 'warn') : s.global ? chip('in sync', 'green') : chip('no global install', 'grey', 'Nothing installed globally to compare this cached copy with'),
             el('span', { class: 'shadow-dir' }, s.dir || ''),
           ))))));
   }
@@ -1100,7 +1118,14 @@ function capRow(row) {
       checkboxEligible
         ? capCheckbox(row)
         : wantsAdvice
-          ? (turnOn
+          ? (row.setting
+            ? el('p', { class: 'cap-turnon' },
+                el('span', { class: 'cap-turnon-lb' }, 'to turn it on'),
+                'use the switch in Settings — ',
+                el('button', { class: 'btn btn-ghost btn-sm cap-setting-jump', type: 'button', onclick: () => jumpToSetting(String(row.setting)) },
+                  'take me to it'),
+                ' (saved with an undo)')
+            : turnOn
             ? el('p', { class: 'cap-turnon' },
                 el('span', { class: 'cap-turnon-lb' }, 'to turn it on'),
                 String(turnOn.human || 'run'), ' — ', el('code', {}, String(turnOn.cmd)))
@@ -1218,7 +1243,7 @@ function renderCapabilities(data) {
   setChips('chips-capabilities', chips);
   // Feed the verdict line. It needs the same counts this card just derived, and deriving them a
   // second time somewhere else is how two surfaces start disagreeing about one machine.
-  found.capsOn = on; found.capsOff = off; found.capsAbsent = absent; found.capsUnknown = unknown;
+  found.capsOn = on; found.capsOff = off; found.capsAbsent = absent; found.capsUnknown = unknown; found.capsIdle = idle;
   found.capsTotal = rows.length;
   updateFoundStrip();
 
@@ -1237,6 +1262,9 @@ function renderCapabilities(data) {
   const counts = [
     on ? el('span', {}, el('b', {}, fmtInt(on)), ' on') : null,
     off ? el('span', {}, el('b', {}, fmtInt(off)), ' off') : null,
+    // RNBC QA 2026-10-01: idle rows were in the chips but missing from this sentence, so "11
+    // capabilities: 7 on, 1 not installed, and 1 we could not check" silently lost two.
+    idle ? el('span', {}, el('b', {}, fmtInt(idle)), ' set up but not running') : null,
     absent ? el('span', {}, el('b', {}, fmtInt(absent)), ' not installed') : null,
     unknown ? el('span', {}, el('b', {}, fmtInt(unknown)), ' we could not check') : null,
   ].filter(Boolean);
@@ -1723,7 +1751,10 @@ function addRecommendations(recs, source) {
  * A full grouped-sections layout is a deliberate follow-up: its group order and whether user/machine
  * split into two visible groups are product decisions the owner reserved. */
 const REC_SCOPE_LABEL = {
-  project: { text: 'Just this project', tone: 'cyan', title: 'Applying this changes only the project you are in right now.' },
+  // "One project", not "Just this project": a reconcile proposal names and changes a DIFFERENT project
+  // from the one the console is serving (RNBC QA 2026-10-01 — the pill said "the project you are in
+  // right now" over a card that rewires npx-project while the console served qa-project).
+  project: { text: 'One project only', tone: 'cyan', title: 'Applying this changes only the one project this proposal names — nothing machine-wide.' },
   user: { text: 'Every project · your account', tone: 'amber', title: 'Applying this changes behaviour for every project under your user account.' },
   machine: { text: 'Every project · this machine', tone: 'amber', title: 'Applying this changes behaviour for every project on this computer.' },
 };
@@ -2641,7 +2672,7 @@ function fieldBeats(f) {
  * same widget — same markup, same "not chosen" honesty rule, same info-bubble mechanics — as every
  * config.json field, rather than a bespoke control invented for one setting.
  */
-function buildSettingsField(f, values, defaults, refreshDirty) {
+function buildSettingsField(f, values, defaults, refreshDirty, overrides = null) {
   const labId = `lab-${f.key}`;
   const helpId = `help-${f.key}`;
   const ctl = el('div', { class: 'field-ctl' });
@@ -2690,20 +2721,27 @@ function buildSettingsField(f, values, defaults, refreshDirty) {
     // that this is a recommendation and not their current setting.
     const chosen = values[f.key] === true || values[f.key] === false;
     const rec = defaults[f.key] === true;
-    const input = el('input', { type: 'checkbox', 'aria-labelledby': labId, 'aria-describedby': helpId, onchange: refreshDirty });
+    // A NOT-CHOSEN field is sent only once the person has touched it. RNBC QA 2026-10-01: every field
+    // was posted on every save, so changing ONLY "Your model house" on a fresh machine also saved the
+    // pre-filled recommendation nightly:true — and saveConfig() installed the nightly LaunchAgent the
+    // person never touched. A recommendation is not a choice until someone makes it.
+    let touched = false;
+    const input = el('input', { type: 'checkbox', 'aria-labelledby': labId, 'aria-describedby': helpId,
+      onchange: () => { touched = true; refreshDirty(); } });
     input.checked = chosen ? values[f.key] === true : rec;
     initialValue = input.checked;
     ctl.append(el('label', { class: 'switch' }, input, el('span', { class: 'track', 'aria-hidden': 'true' })));
     if (!chosen) ctl.append(notChosenField(rec ? 'on' : 'off'));
-    collector = () => ({ include: true, value: input.checked });
+    collector = () => ({ include: chosen || touched, touched: !chosen && touched, value: input.checked });
   } else if (f.type === 'enum' && Array.isArray(f.options)) {
     const name = `seg-${f.key}`;
     const seg = el('div', { class: 'seg', role: 'radiogroup', 'aria-labelledby': labId, 'aria-describedby': helpId });
     const inputs = [];
     const chosen = f.options.some((opt) => Object.is(values[f.key], opt));
     const rec = f.options.includes(defaults[f.key]) ? defaults[f.key] : f.options[0];
+    let touched = false;
     for (const opt of f.options) {
-      const input = el('input', { type: 'radio', name, value: String(opt), onchange: refreshDirty });
+      const input = el('input', { type: 'radio', name, value: String(opt), onchange: () => { touched = true; refreshDirty(); } });
       input.optionValue = opt;
       input.checked = chosen ? Object.is(values[f.key], opt) : Object.is(opt, rec);
       inputs.push(input);
@@ -2720,7 +2758,7 @@ function buildSettingsField(f, values, defaults, refreshDirty) {
     }
     ctl.append(seg);
     if (!chosen) ctl.append(notChosenField(segLabel(f.key, rec)));
-    collector = () => ({ include: true, value: inputs.find((i) => i.checked)?.optionValue });
+    collector = () => ({ include: chosen || touched, touched: !chosen && touched, value: inputs.find((i) => i.checked)?.optionValue });
   } else {
     const input = el('input', {
       type: 'text', class: 'text-input', 'aria-labelledby': labId, 'aria-describedby': helpId, oninput: refreshDirty,
@@ -2731,6 +2769,15 @@ function buildSettingsField(f, values, defaults, refreshDirty) {
     collector = () => ({ include: true, value: input.value });
   }
 
+  // A project file that overrides this key for the runtime that reads it (see projectOverrides()
+  // on the server). Saving here still changes the user-level choice; the note says why this project
+  // will not follow it.
+  const ov = overrides && overrides.values && Object.hasOwn(overrides.values, f.key) ? overrides : null;
+  if (ov) {
+    ctl.append(el('p', { class: 'field-override bp-warn', role: 'note' },
+      'This project overrides this setting: ', el('b', {}, String(typeof ov.values[f.key] === 'boolean' ? (ov.values[f.key] ? 'on' : 'off') : segLabel(f.key, ov.values[f.key]))),
+      ' (from ', el('code', {}, ov.path), '). A change saved here applies to your other projects, not this one.'));
+  }
   const row = el('div', { class: 'field', id: `field-${f.key}` },
     el('div', {},
       el('span', { class: 'field-label', id: labId }, f.label || f.key, infoBtn(f.label || f.key, fieldBeats(f))),
@@ -2746,6 +2793,11 @@ function buildSettingsField(f, values, defaults, refreshDirty) {
  * single advocacy field backed by user-settings.mjs — same widget, same save/undo/error handling,
  * only the endpoint and the file it names in its own copy differ.
  */
+// The last save's undo, per form, kept OUTSIDE the form so it survives a repaint. RNBC QA 2026-10-01:
+// the form is rebuilt whenever a background measurement lands, and the "Undo save" button vanished
+// with it — the undo was still in the server's journal, with no way left to reach it.
+const PENDING_SAVE_UNDO = new Map();
+
 function buildSettingsForm(cfg, { endpoint }) {
   const values = cfg.values || {};
   // What the project would pick FOR you, kept strictly apart from what you actually picked. The
@@ -2762,14 +2814,20 @@ function buildSettingsForm(cfg, { endpoint }) {
     for (const [key, get] of Object.entries(collectors)) {
       const g = get();
       if (g.secret) { if (g.include) return true; continue; }
+      if (g.touched) return true;
       if (g.value !== initial[key]) return true;
     }
     return false;
   }
-  function refreshDirty() { if (saveBtn) saveBtn.disabled = !isDirty(); }
+  function refreshDirty() {
+    const dirty = isDirty();
+    if (saveBtn) saveBtn.disabled = !dirty;
+    // read by renderSettings: a repaint must not discard choices the person has not saved yet
+    form.dataset.dirty = dirty ? '1' : '';
+  }
 
   for (const f of cfg.schema) {
-    const { row, collector, initialValue } = buildSettingsField(f, values, defaults, refreshDirty);
+    const { row, collector, initialValue } = buildSettingsField(f, values, defaults, refreshDirty, cfg.projectOverrides);
     collectors[f.key] = collector;
     if (f.type !== 'secret' && !f.secret) initial[f.key] = initialValue;
     form.append(row);
@@ -2783,6 +2841,45 @@ function buildSettingsForm(cfg, { endpoint }) {
       ' in your user folder. Each choice is enforced by its named runtime; encrypted secrets and scheduler state never live in this browser response.')),
     resultSlot);
 
+  // Renders the saved note and its Undo. Called on a successful save AND whenever this form is
+  // rebuilt while an undo is still pending, so a repaint cannot strand the undo.
+  function showSaved(data) {
+    // Not every store behind this form has an undo token — so the button only appears when one exists.
+    const undoBtn = data.undoToken ? el('button', {
+      class: 'btn btn-undo btn-sm', type: 'button',
+      // try/catch, because this is an async onclick with a network call in it. The server's own
+      // explanation is shown verbatim on failure: "this undo has already been used" and "your
+      // settings were saved again after this point" are the two cases people will actually hit.
+      onclick: async (ev) => {
+        const btn = ev.currentTarget;
+        btn.disabled = true;
+        try {
+          const r = await postJSON('/api/undo', { undoToken: data.undoToken });
+          const ok = r.ok && r.data?.ok;
+          if (!ok) btn.disabled = false;
+          if (ok || /already been used|saved again after/.test(r.data?.log || '')) PENDING_SAVE_UNDO.delete(endpoint);
+          resultSlot.replaceChildren(el('div', { class: `form-note ${ok ? 'n-ok' : 'n-err'}`, role: 'status' },
+            ok
+              ? 'Settings restored from the backup. Reload to see the restored values.'
+              : (r.status === 403 ? TOKEN_MSG
+                : `Undo didn’t complete — ${r.data?.log || 'the backup file still exists, nothing is lost.'}`)));
+        } catch (err) {
+          btn.disabled = false;
+          resultSlot.replaceChildren(el('div', { class: 'form-note n-err', role: 'alert' },
+            `Undo couldn’t reach the console server: ${err.message || err}. Nothing was changed.`));
+        }
+      },
+    }, 'Undo save') : null;
+    resultSlot.replaceChildren(el('div', { class: 'form-note n-ok', role: 'status' },
+      frag(BADGE_OK),
+      el('div', { class: 'fn-body' },
+        el('b', {}, 'Saved.'), ' Your choices are in ',
+        el('span', { class: 'fn-path' }, cfg.path || 'your user folder'), '.',
+        data.backup ? el('span', {}, ' Backup kept at ', el('span', { class: 'fn-path' }, data.backup), '.') : ''),
+      undoBtn));
+  }
+  if (PENDING_SAVE_UNDO.has(endpoint)) showSaved(PENDING_SAVE_UNDO.get(endpoint));
+
   form.addEventListener('submit', async (e) => {
     e.preventDefault();
     const out = {};
@@ -2799,46 +2896,12 @@ function buildSettingsForm(cfg, { endpoint }) {
       if (code === 403) {
         resultSlot.replaceChildren(el('div', { class: 'form-note n-err', role: 'alert' }, TOKEN_MSG));
       } else if (data && data.ok) {
-        // Not every store behind this form has an undo token — saveAdvocacy() (user-settings.mjs)
-        // returns a real backup path but no journalled undoToken the way saveConfig() does, so this
-        // button simply does not appear for that form rather than pretending a capability exists.
-        const undoBtn = data.undoToken ? el('button', {
-          class: 'btn btn-undo btn-sm', type: 'button',
-          // try/catch, because this is an async onclick with a network call in it. Without one, a
-          // dropped connection rejected the promise, left the button permanently disabled and printed
-          // NOTHING — the user is looking at a dead undo button with no idea whether it ran. The
-          // server's own explanation is shown verbatim on failure: "this undo has already been used"
-          // and "your settings were saved again after this point" are the two cases people will
-          // actually hit, and both are worth reading.
-          onclick: async (ev) => {
-            const btn = ev.currentTarget;
-            btn.disabled = true;
-            try {
-              const r = await postJSON('/api/undo', { undoToken: data.undoToken });
-              const ok = r.ok && r.data?.ok;
-              if (!ok) btn.disabled = false;
-              resultSlot.replaceChildren(el('div', { class: `form-note ${ok ? 'n-ok' : 'n-err'}`, role: 'status' },
-                ok
-                  ? 'Settings restored from the backup. Reload to see the restored values.'
-                  : (r.status === 403 ? TOKEN_MSG
-                    : `Undo didn’t complete — ${r.data?.log || 'the backup file still exists, nothing is lost.'}`)));
-            } catch (err) {
-              btn.disabled = false;
-              resultSlot.replaceChildren(el('div', { class: 'form-note n-err', role: 'alert' },
-                `Undo couldn’t reach the console server: ${err.message || err}. Nothing was changed.`));
-            }
-          },
-        }, 'Undo save') : null;
-        resultSlot.replaceChildren(el('div', { class: 'form-note n-ok', role: 'status' },
-          frag(BADGE_OK),
-          el('div', { class: 'fn-body' },
-            el('b', {}, 'Saved.'), ' Your choices are in ',
-            el('span', { class: 'fn-path' }, cfg.path || 'your user folder'), '.',
-            data.backup ? el('span', {}, ' Backup kept at ', el('span', { class: 'fn-path' }, data.backup), '.') : ''),
-          undoBtn));
+        if (data.undoToken) PENDING_SAVE_UNDO.set(endpoint, data); else PENDING_SAVE_UNDO.delete(endpoint);
+        showSaved(data);
         for (const [key, get] of Object.entries(collectors)) {
           const g = get(); if (!g.secret) initial[key] = g.value;
         }
+        form.dataset.dirty = ''; // saved: nothing left to protect from a repaint
         announce('Settings saved.');
       } else {
         // The server says WHY — a rejected value names itself ("routing: expected one of auto, off").
@@ -2878,14 +2941,26 @@ function nightlyFactsLine(f) {
   const run = f.lastRun === 'ok' ? (f.lastRunAt ? fmtDate(f.lastRunAt) : 'completed')
     : f.lastRun === 'never-ran' ? 'never'
       : f.lastRun === 'failed' ? 'failed' : String(f.lastRun || 'unknown');
+  // Each fact carries ITS OWN evidence. RNBC QA 2026-10-01: the agent's evidence ("No LaunchAgent
+  // plist at …") was printed after "last completed run: failed", reading as the reason the run
+  // failed — while the run's real failure (a preflight refusal, a week earlier) was never shown.
+  const runWhen = f.lastRun === 'failed' && f.lastRunAt ? ` ${fmtDate(f.lastRunAt)}` : '';
   return el('p', { class: `fineprint field-facts${f.agree === false ? ' bp-warn' : ''}` },
-    'switch: ', el('b', {}, choice), ' · agent: ', el('b', {}, agent), ' · last completed run: ', el('b', {}, run),
-    f.agree === false ? ' — these disagree, so the toggle above shows no single state until they do.' : '',
-    f.enforcementEvidence ? el('span', { class: 'muted' }, ` (${f.enforcementEvidence})`) : '');
+    'switch: ', el('b', {}, choice),
+    ' · agent: ', el('b', {}, agent),
+    f.enforcementEvidence ? el('span', { class: 'muted nf-agent-ev' }, ` (${f.enforcementEvidence})`) : '',
+    ' · last completed run: ', el('b', {}, run + runWhen),
+    f.lastRunEvidence && f.lastRun !== 'ok' ? el('span', { class: 'muted nf-run-ev' }, ` (${f.lastRunEvidence})`) : '',
+    f.agree === false ? ' — these disagree, so the toggle above shows no single state until they do.' : '');
 }
 
 function renderSettings(cfg, us, bp) {
   const body = $('#body-settings');
+  // UNSAVED CHOICES SURVIVE A REPAINT. RNBC QA 2026-10-01: a background measurement landing while
+  // someone was mid-way through the Settings form rebuilt it and silently threw their selections
+  // away. While any form here has unsaved changes the card is left exactly as the person has it;
+  // the next repaint after they save (or undo their edits) brings it current.
+  if (body && body.querySelector('form.settings-form[data-dirty="1"]')) return;
   // `bp` is NOT counted here any more: its field is rendered by #card-brain at the top of the page,
   // and counting a control this card does not show would make the "N options" chip a lie by one.
   const groups = [cfg, us].filter((c) => c && Array.isArray(c.schema) && c.schema.length);
@@ -2986,15 +3061,21 @@ function renderInventory(inv) {
       inv && inv.reason ? inv.reason : 'The console could not read RVF-GENERATIONS.json from the installed brain, so it is not guessing a list.'));
     return;
   }
-  const chips = [chip(`${fmtInt(inv.count)} repositories`, 'green')];
+  // "stores", not "repositories": gist and concept stores are in this list too (RNBC QA 2026-10-01).
+  const chips = [chip(`${fmtInt(inv.count)} stores`, 'green')];
   if (inv.privateCount > 0) chips.push(chip(`${fmtInt(inv.privateCount)} private`, 'cyan', 'Fenced private stores — never leave this machine'));
   if (inv.releaseTag) chips.push(chip(`generation ${inv.releaseTag}`, 'grey'));
   setChips('chips-inventory', chips);
 
-  const mb = inv.totalBytes ? `${(inv.totalBytes / 1e6).toFixed(0)} MB on disk` : null;
+  // totalBytes sums each store's .rvf only. It was labelled "on disk" beside a Brain-power card
+  // reporting the same 207 stores as 1.25 GB installed (RVF + passages + sidecars) — both true, but
+  // only one of them is the disk footprint. Say which bytes this is.
+  const mb = inv.totalBytes ? `${(inv.totalBytes / 1e6).toFixed(0)} MB of vector files` : null;
   const summary = el('p', { class: 'muted' },
     `${fmtInt(inv.count)} searchable stores`,
-    inv.withProvenance != null ? `, ${fmtInt(inv.withProvenance)} with a recorded upstream commit` : '',
+    // withProvenance counts rows whose SOURCE.json names an upstream repository — not commits (nearly
+    // every row shows its build commit below).
+    inv.withProvenance != null ? `, ${fmtInt(inv.withProvenance)} with a named upstream repository` : '',
     mb ? `, ${mb}.` : '.');
 
   const rows = (inv.stores || []).map((s) => el('li', { class: 'inv-row', 'data-name': s.name.toLowerCase() },
@@ -3281,11 +3362,16 @@ function bpParts(bp) {
       'best for cross-repository reasoning; RuVector Only is the compact choice for people who only ',
       'need the RuVector source. Nightly updates preserve whichever profile is selected.'),
 
-    el('p', { class: 'fineprint' },
-      'There are three more switches in the settings file — what it learns from, whether it may act ',
-      'on its own, and whether new projects inherit these choices. They are deliberately not shown ',
-      'as controls here: nothing enforces them yet, and a switch that governs nothing would make ',
-      'every real switch on this page worth less.'));
+    // RNBC QA 2026-10-01: this used to say these switches were "deliberately not shown … nothing
+    // enforces them yet" — while the Settings card rendered all of them and learn-capture/learn-flush,
+    // the console's guarded remedy loop and SessionStart seeding each read one. A sentence about the
+    // page that the page itself contradicts is the failure this card exists to prevent.
+    el('p', { class: 'fineprint bp-more-settings' },
+      'Four more choices shape what the brain does while it is on — what it learns from, how much it ',
+      'jumps in, whether it may act on its own, and whether new projects inherit these choices. They ',
+      'are in ',
+      el('button', { class: 'btn btn-ghost btn-sm', type: 'button', onclick: () => jumpToSetting('learningScope') }, 'Settings'),
+      ', and each one names the runtime that enforces it.'));
 }
 
 /* -------------------------------------------------- section 7: trust & provenance
@@ -3298,12 +3384,12 @@ const TRUST_INFO = {
   signature: [
     { k: 'What is this?', t: 'The sha256 fingerprint of the release bundle, published as its own asset on every GitHub release.' },
     { k: 'Why does it matter?', t: 'If your download’s fingerprint matches the published one, the bundle is byte-identical to what was released — nothing altered, nothing truncated.' },
-    { k: 'How do I use it?', t: 'Run shasum -a 256 ruvnet-brain.zip on your download and compare. v3.3 adds a one-click local check right here.' },
+    { k: 'How do I use it?', t: 'Run shasum -a 256 ruvnet-brain.zip on your download and compare. A one-click local check here is planned.' },
   ],
   sbom: [
     { k: 'What is this?', t: 'A Software Bill of Materials — the complete, machine-readable list of every package inside the bundle.' },
     { k: 'Why does it matter?', t: 'You can see what’s in the box without unzipping it, and scanners can watch it for known vulnerabilities.' },
-    { k: 'How does it help me?', t: 'v3.3 attaches a CycloneDX SBOM to every release; this row will then show its package count and digest, measured from the published asset.' },
+    { k: 'How does it help me?', t: 'Attaching a CycloneDX SBOM to every release is planned; this row will then show its package count and digest, measured from the published asset.' },
   ],
   channel: [
     { k: 'What is this?', t: 'How your plugin updates: riding the latest release, or pinned to a version you chose.' },
@@ -3340,7 +3426,7 @@ function renderTrust(t) {
     rel.ok ? chip('sha256 published ✓', 'green', 'The release bundle’s fingerprint is published and was read live this session')
            : chip('digest unreachable', 'warn', 'Couldn’t read the published digest this session'),
     sb.present ? chip(`SBOM · ${sb.componentCount} component${sb.componentCount === 1 ? '' : 's'} ✓`, 'green', 'A local CycloneDX SBOM was found and read live this session')
-                : chip('SBOM — v3.3', 'coming', 'A CycloneDX SBOM ships with every release from v3.3'),
+                : chip('SBOM — planned', 'coming', 'Releases do not carry a CycloneDX SBOM yet; it is planned'),
     ch.installed ? chip(ch.channel === 'pinned' ? 'pinned' : 'latest channel', 'cyan') : chip('no plugin install', 'grey'),
   ]);
 
@@ -3370,7 +3456,7 @@ function renderTrust(t) {
   /* 2 · SBOM — real once `npm run sbom` has been run locally; honest empty state until then */
   rows.push(trustRow({
     name: 'SBOM', info: TRUST_INFO.sbom, coming: !sb.present,
-    status: sb.present ? chip(`${sb.componentCount} component${sb.componentCount === 1 ? '' : 's'}`, 'green') : chip('coming · v3.3', 'coming'),
+    status: sb.present ? chip(`${sb.componentCount} component${sb.componentCount === 1 ? '' : 's'}`, 'green') : chip('planned', 'coming'),
     value: sb.present ? [
       el('p', {}, 'A ', el('b', {}, `CycloneDX ${sb.specVersion || ''}`.trim()), ' SBOM exists on this machine: ',
         el('b', {}, `${sb.componentCount} component${sb.componentCount === 1 ? '' : 's'}`),
@@ -3383,9 +3469,8 @@ function renderTrust(t) {
       el('p', {}, sb.error
         ? `Found sbom/ruvnet-brain.cdx.json but couldn’t read it (${sb.error}).`
         : 'Not generated yet on this machine — nothing to show, so nothing is shown.'),
-      el('p', {}, 'Run ', el('code', {}, 'npm run sbom'),
-        ' to produce a CycloneDX SBOM of the shipped dependency tree right now. From ', el('b', {}, 'v3.3'),
-        ' every published release carries one too, measured from the release asset itself.'),
+      el('p', {}, 'Published releases do not carry an SBOM yet — attaching one, measured from the release asset itself, is planned. ',
+        'From a source checkout, ', el('code', {}, 'npm run sbom'), ' produces a CycloneDX SBOM of the shipped dependency tree.'),
     ],
   }));
 
@@ -3451,7 +3536,7 @@ function renderTrust(t) {
         el('button', { class: 'adv-opt on', type: 'button', title: 'Your current behavior — consent-gated changes with undo' },
           el('span', { class: 'pc-dot', 'aria-hidden': 'true' }), 'Full — recommended'),
         advisorBtn,
-        el('span', { class: 'preview-tag' }, 'preview · v3.3')),
+        el('span', { class: 'preview-tag' }, 'preview · planned')),
       advNote,
     ],
   }));
@@ -3459,7 +3544,7 @@ function renderTrust(t) {
   body.replaceChildren(
     el('p', { class: 'lead-stat' },
       'Provenance you can check, not take on faith — ', el('b', {}, String(liveCount)),
-      ` measurement${liveCount === 1 ? ' is' : 's are'} live today; the rest of this card names exactly what v3.3 will measure.`,
+      ` measurement${liveCount === 1 ? ' is' : 's are'} live today; the rest of this card names exactly what is planned and not yet measured.`,
       infoBtn('Trust & provenance', TRUST_CARD_INFO)),
     el('div', { class: 'trust-list', 'data-trust-ready': '1' }, ...rows),
   );
@@ -3476,6 +3561,10 @@ function trustSkeleton() {
 /* ---------------------------------------------- header update gong (owner, 2026-07-24) */
 
 let BRAIN_INSTALLED_VERSION = null; // set by renderHost from /api/state's host.brainVersion
+// The last /api/trust payload. State and trust load in parallel; when trust lands first the gong is
+// decided with no installed version, so renderHost decides it again once the version is known
+// (RNBC 2026-10-01: under load the gong never appeared).
+let LAST_TRUST = null;
 
 // Numeric x.y.z only; -dev/-rc suffixes are deliberately ignored so a tie is NEVER "newer" —
 // a false gong is the nag this page promises not to be. Latest unreachable (null) is UNKNOWN,
@@ -3495,10 +3584,15 @@ function renderUpdateGong(t) {
   const latest = t && t.release && t.release.tag ? String(t.release.tag).replace(/^v/, '') : null;
   if (!BRAIN_INSTALLED_VERSION || !latest || cmpVer(latest, BRAIN_INSTALLED_VERSION) <= 0) { btn.hidden = true; return; }
   const cmd = 'npx ruvnet-brain --update';
-  btn.textContent = `⟳ update available · v${latest} — click to update`;
+  // SHORT ON PURPOSE. RNBC QA 2026-10-01: the long label ("⟳ update available · vX — click to update",
+  // then "copied — paste in any terminal: npx …") overflowed the brand block and sat UNDER the
+  // "what's in the brain" link at 1440px, so clicking the gong navigated to the scope page instead.
+  // The full instruction lives in the title and the live region.
+  btn.textContent = `⟳ v${latest} available`;
+  btn.title = `A newer release (v${latest}) is out — click to copy the update command: ${cmd}`;
   btn.onclick = async () => {
-    try { await navigator.clipboard.writeText(cmd); btn.textContent = `copied — paste in any terminal: ${cmd}`; }
-    catch { btn.textContent = `run in any terminal: ${cmd}`; }
+    try { await navigator.clipboard.writeText(cmd); btn.textContent = '✓ update command copied'; announce(`Copied: ${cmd} — paste it in any terminal.`); }
+    catch { btn.textContent = `run: ${cmd}`; announce(`Run in any terminal: ${cmd}`); }
   };
   btn.hidden = false;
 }
@@ -3506,6 +3600,7 @@ function renderUpdateGong(t) {
 async function loadTrust() {
   try {
     const t = await getJSON('/api/trust');
+    LAST_TRUST = t;
     renderTrust(t);
     renderUpdateGong(t);
   } catch (err) {
@@ -4288,8 +4383,10 @@ function renderLessons(data) {
       chip(r.origin, r.userStated ? 'green' : 'nt',
         r.userStated
           ? 'You said this. Only lessons you stated yourself are allowed to reach the strongest level.'
-          : r.quarantined
-            ? 'This came from bundled maintainer or demonstration history. It is not your statement and cannot be turned into your personal policy.'
+          : (r.sourceClass === 'imported-owner' || r.sourceClass === 'demonstration')
+            ? (r.quarantined
+              ? 'This came from bundled maintainer or demonstration history. It is not your statement and cannot be turned into your personal policy.'
+              : 'This came from imported maintainer history and was ratified, so it is in force here. You can switch it off; it cannot be raised to "Stops me".')
             : 'I inferred this from what happened. A lesson I inferred can never be raised to "Stops me", however often it fires — the model does not get to ratify its own rules.'),
       r.taughtCount ? chip(`taught ${r.taughtCount}×`, 'grey') : null,
       r.awaitingYou ? chip('awaiting your decision', 'amber', 'Recorded, but you have not agreed to it yet.') : null,

package/console/index.html

@@ -477,7 +477,7 @@
           card in this section is L1 doing its job; anything with an undo behind it is L2. Full definitions
           and the tests each level has to pass: <code>docs/adr/0028</code>.</p>
           <p class="fineprint">The one thing on this list you can actually set is the volume on advocacy
-          itself: the <a href="#field-advocacy"><b>“How much it volunteers”</b></a> dial, in the Settings
+          itself: the <a href="#field-advocacy"><b>“How much it jumps in”</b></a> dial, in the Settings
           card in this same section. Everything above is a description of the software, not a switch.</p>
         </div>
       </details>

package/console/install-architecture.html

@@ -4,6 +4,7 @@
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1" />
 <title>RuvNet Brain — install architecture</title>
+<link rel="icon" href="data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 64 64%22><rect x=%222%22 y=%222%22 width=%2260%22 height=%2260%22 rx=%2216%22 fill=%22%230b0d12%22 stroke=%22%232c3850%22 stroke-width=%221.5%22/><path d=%22M25 48 C17 48 11.5 41.5 13.5 34.5 C10 29 13 21 19 19 C21 12.5 29 9.5 35 12 C43 9 50.5 14.5 50.5 22 C55 26 55 34.5 50 38 C49 43.5 43 47.5 37 46.5 L31 47.5 Z%22 fill=%22none%22 stroke=%22%23f0a830%22 stroke-width=%223.4%22 stroke-linejoin=%22round%22/><path d=%22M31 47 L31 33 M31 33 L24 27 M31 33 L40 24.5 M31 33 L41 36.5%22 fill=%22none%22 stroke=%22%23f0a830%22 stroke-width=%222.4%22 stroke-linecap=%22round%22 opacity=%22.9%22/><circle cx=%2224%22 cy=%2227%22 r=%223.4%22 fill=%22%235ad6ff%22/><circle cx=%2240%22 cy=%2224.5%22 r=%223.4%22 fill=%22%23f4b13a%22/><circle cx=%2241%22 cy=%2236.5%22 r=%223.4%22 fill=%22%235fd38a%22/></svg>">
 <style>
   :root {
     --bg: #f4f1ea; --card: #fbfaf6; --ink: #26221b; --ink-2: #5b5648; --muted: #8a8474;

package/console/scope.css

@@ -100,8 +100,11 @@ table.scope thead th {
   position: sticky; top: 58px; z-index: 2;
   background: color-mix(in srgb, var(--surface-2) 92%, var(--bg));
   font-family: var(--mono); font-size: 11px; letter-spacing: 0.14em; text-transform: uppercase; color: var(--muted);
-  cursor: pointer; user-select: none; white-space: nowrap;
+  user-select: none; white-space: nowrap;
 }
+/* Only sortable headers look clickable (RNBC QA 2026-10-01: the commits/revisions headers wore a
+   pointer cursor and did nothing when clicked). */
+table.scope thead th[data-key] { cursor: pointer; }
 table.scope thead th[aria-sort="descending"]::after { content: " ▾"; color: var(--amber-text); }
 table.scope thead th[aria-sort="ascending"]::after  { content: " ▴"; color: var(--amber-text); }
 table.scope tbody tr:nth-child(even) td { background: color-mix(in srgb, var(--surface-2) 40%, transparent); }

package/console/style.css

@@ -229,6 +229,12 @@ p:last-child { margin-bottom: 0; }
 }
 
 .head-right { display: inline-flex; align-items: center; gap: 10px; }
+/* The header is full at desktop widths. When the update gong appears it needs ~155px; the host chip
+   (also shown in the intro's host line) gives way so the gong never slides under the header links
+   (RNBC QA 2026-10-01: it did, and clicking it opened the scope page). The brand text truncates. */
+.brand > * { flex: none; }
+.brand > .brand-text { flex: 0 1 auto; min-width: 0; }
+.head-inner:has(#brain-update:not([hidden])) .host-chip { display: none; }
 .host-chip {
   font-size: 12.5px; color: var(--ink-2);
   border: 1px solid var(--hair); border-radius: 100px; padding: 4px 11px;
@@ -247,6 +253,9 @@ p:last-child { margin-bottom: 0; }
   color: #7c3f00; background: rgba(217, 119, 6, .14);
   border: 1px solid rgba(217, 119, 6, .55); border-radius: 100px; padding: 3px 10px;
   margin-left: 6px; animation: gong-pulse 2.2s ease-in-out infinite;
+  /* Kept short in app.js and never squeezed: the brand text truncates before the gong does. A long
+     gong once overflowed under the header links, so clicking it opened the scope page. */
+  flex: none;
 }
 :root[data-theme="dark"] .update-gong { color: #fbbf24; background: rgba(217, 119, 6, .18); }
 .update-gong:hover { animation-play-state: paused; }
@@ -1137,6 +1146,10 @@ details.sub .sub-body > *:first-child { margin-top: 4px; }
      page-wide horizontal scrollbar. Cap + ellipsis keeps the click target and the full text in the
      title tooltip; nothing about the update claim is hidden, only its overflow. */
   .update-gong { max-width: 46vw; overflow: hidden; text-overflow: ellipsis; }
+  /* RNBC QA 2026-10-01, measured at 390px: the header did not fit one row — the version chip sat
+     under the scope link and the theme button was pushed off-screen. Let it wrap to two rows. */
+  .head-inner { flex-wrap: wrap; height: auto; min-height: 58px; row-gap: 6px; padding-block: 8px; }
+  .head-right { flex-wrap: wrap; justify-content: flex-end; row-gap: 6px; margin-left: auto; }
   .fact { grid-template-columns: minmax(0, 1fr); gap: 3px; }
   .dim { grid-template-columns: auto minmax(0, 1fr); }
   .dim-ded { grid-row: auto; grid-column: 2; }

package/console/tips.html

@@ -492,11 +492,11 @@
         <div class="peg">
           <h3 class="peg-cap mono">slash commands</h3>
           <ul class="peg-list">
-            <li><code>/ruvnet-brain:rvbc</code></li>
-            <li><code>/rvcb</code></li>
-            <li><code>/ruvnet-brain:configure</code></li>
+            <li><code>/rnbc</code></li>
+            <li><code>/rnb</code></li>
+            <li><code>/rvbc</code></li>
           </ul>
-          <p class="peg-note">All three open the same place — the console, the live mirror of your stack.</p>
+          <p class="peg-note">All three open the same place — the console, the live mirror of your stack (so do <code>/brain-console</code> and <code>/ruvnet-brain:configure</code>).</p>
         </div>
         <div class="peg">
           <h3 class="peg-cap mono">skills</h3>