ruvnet-brain 4.5.2 → 4.5.4

package/scripts/release-qualification-contract.mjs

@@ -62,6 +62,62 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
       "files": [
         "tests/unit/ux-render-best-of-n.test.mjs"
       ]
+    },
+    {
+      "id": "canonical-memory-privacy",
+      "reason": "Canonical project isolation, persisted consent and truthful capture status",
+      "files": [
+        "tests/unit/turn-outcome-capture.test.mjs",
+        "tests/unit/turn-journal-platform.test.mjs",
+        "tests/unit/project-store-resolver.test.mjs"
+      ]
+    },
+    {
+      "id": "lossless-lifecycle-retention",
+      "reason": "Evidence compaction preserves tokens, private state and atomic transaction recovery",
+      "files": [
+        "tests/unit/lifecycle-evidence-retention.test.mjs",
+        "tests/unit/update-storage-transaction.test.mjs"
+      ]
+    },
+    {
+      "id": "causal-learning-proof",
+      "reason": "Recorded learning evidence rejects forged, absent and mismatched causal transcripts",
+      "files": [
+        "tests/unit/learning-replay-proof.test.mjs"
+      ]
+    },
+    {
+      "id": "qualification-topology",
+      "reason": "Release promotion consumes qualified exact-source receipts and preserves required contexts",
+      "files": [
+        "tests/unit/qualify-once-workflow.test.mjs"
+      ]
+    },
+    {
+      "id": "managed-memory-test-safety",
+      "reason": "Only managed project memory is accessed and tests cannot target owner stores",
+      "files": [
+        "tests/unit/no-real-store-path-in-tests.test.mjs",
+        "tests/unit/managed-memory-no-raw-sql.test.mjs"
+      ]
+    },
+    {
+      "id": "citation-producer-boundaries",
+      "reason": "Actual CLI, card and MCP outputs reject document-injected citation headers; packed verifier and source mutants bind the changed boundary",
+      "files": [
+        "tests/unit/verify-citation.test.mjs",
+        "tests/unit/citation-producers.test.mjs",
+        "tests/mutation/citation-binding-mutation.test.mjs"
+      ]
+    },
+    {
+      "id": "pending-memory-durability",
+      "reason": "Complete outbox tails replay and accepted pending journal events survive capacity pressure without silent deletion",
+      "files": [
+        "tests/unit/project-progression-outbox.test.mjs",
+        "tests/unit/project-progression-durability.test.mjs"
+      ]
     }
   ],
   "integration": [
@@ -92,6 +148,37 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
       "files": [
         "tests/integration/uninstall-footprint.test.mjs"
       ]
+    },
+    {
+      "id": "canonical-memory-native-boundary",
+      "reason": "POSIX registered recall and capture use canonical project stores; global Ruflo prerequisites and real-process privacy/readback probes fail closed",
+      "files": [
+        "tests/unit/agentdb-recall.test.mjs",
+        "tests/unit/session-start-core-parity.test.mjs",
+        "tests/unit/learning-replay.test.mjs",
+        "tests/integration/continuity-journal.test.mjs",
+        "tests/integration/changed-memory-process-probes.test.mjs",
+        "tests/unit/managed-memory-boundary.test.mjs"
+      ]
+    },
+    {
+      "id": "automatic-memory-transition-durability",
+      "reason": "Reviewed POSIX automatic boundary capture, complete history, consent suspension, first-start recovery and data-only turn replay; real global Ruflo and filesystem prerequisites are required",
+      "files": [
+        "tests/unit/project-transition-hook.test.mjs",
+        "tests/unit/turn-transport-security.test.mjs",
+        "tests/unit/turn-durable-transport.test.mjs",
+        "tests/integration/automatic-progression-continuation.test.mjs",
+        "tests/integration/capture-consent-boundary.test.mjs",
+        "tests/integration/session-start-turn-replay.test.mjs"
+      ]
+    },
+    {
+      "id": "pending-continuity-capacity",
+      "reason": "POSIX non-root permission refusal, capacity-pressure reporting and recovery preserve all accepted pending continuity events",
+      "files": [
+        "tests/unit/continuity-journal-bounds.test.mjs"
+      ]
     }
   ]
 });

package/scripts/release-qualification.mjs

@@ -80,7 +80,7 @@ export function runQualification({ suite = 'source', platform = PLATFORM, report
   const execute = (name, args) => {
     const run = spawnSync(process.execPath, ['scripts/ci/step-watchdog.mjs', '--name', name,
       '--timeout-ms', '900000', '--receipt-dir', temp, '--', process.execPath, ...args],
-    { cwd: root, env: { ...process.env, ...(suite === 'integration' ? { RUVNET_REQUIRE_CODEX_DISCOVERY: '1' } : {}) },
+    { cwd: root, env: { ...process.env, ...(suite === 'integration' ? { RUVNET_REQUIRE_CODEX_DISCOVERY: '1', RUVNET_REQUIRE_LEARNING_REPLAY: '1' } : {}) },
       stdio: 'inherit' });
     const ok = !run.error && run.status === 0;
     results.push({ name, status: ok ? 'PASS' : 'FAIL', exitCode: run.status });
@@ -89,6 +89,15 @@ export function runQualification({ suite = 'source', platform = PLATFORM, report
   let failure = null;
   try {
     if (suite === 'source') {
+      // Fail early when the current filesystem cannot support required adversarial link fixtures.
+      execute('release-filesystem-prerequisite', ['--input-type=module', '-e',
+        `import fs from 'node:fs'; import os from 'node:os'; import path from 'node:path';
+         const root=fs.mkdtempSync(path.join(os.tmpdir(),'qualification-link-'));
+         try { const file=path.join(root,'target'); const link=path.join(root,'link');
+           fs.writeFileSync(file,'required link fixture'); fs.symlinkSync(file,link,'file');
+           if(!fs.lstatSync(link).isSymbolicLink() || fs.readFileSync(link,'utf8')!=='required link fixture')
+             throw new Error('required file-symlink fixture is unavailable');
+         } finally { fs.rmSync(root,{recursive:true,force:true}); }`]);
       execute('release-version', ['scripts/sync-version.mjs', '--check']);
       execute('release-source-identity', ['scripts/convergence-manifest.mjs']);
       execute('automatic-hook-retirement', ['scripts/hook-retirement-check.mjs']);

package/scripts/wired-check.mjs

@@ -70,6 +70,7 @@ const argv = process.argv.slice(2);
  * every entry on every run, below, so they cannot rot unseen.
  */
 const STANDALONE = [
+  ['full-suite-gate', 'explicit historical developer diagnostic; reviewed requirement-bound qualification owns promotion, so no automatic release caller'],
   ['spike-run', 'ADR-086 Step 14 oracle feasibility-spike driver, run by hand against disposable snapshots outside the checkout. '
     + 'It is deliberately NOT imported by the pipeline: Step 14 only proves or disproves that a trustworthy unattended label '
     + 'producer exists, and Step 15 owns any prepareCorpusCandidate wiring. The three modules it drives (source-units, '