ruvnet-brain 4.7.20 → 4.7.21

package/scripts/qe/session-start-gate.mjs

@@ -52,6 +52,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { fireHook, resolveInstalledSurface, readInstalledRegistrations } from '../selfcheck.mjs';
+import { isDirectInvocation } from '../../plugin/scripts/entrypoint.mjs';
 
 const HERE = path.dirname(fileURLToPath(import.meta.url));
 export const REPO_ROOT = path.resolve(HERE, '../..');
@@ -225,20 +226,5 @@ async function main() {
   process.exit(1);
 }
 
-// Entry-point guard. Compares REALPATHS on both sides: path.resolve() normalizes a path but does
-// NOT follow symlinks, while import.meta.url IS symlink-resolved by Node. Through a symlink (npm bin
-// shims, wrapper scripts, and every os.tmpdir() path on macOS) the two sides disagree, so main()
-// never runs -- and because nothing throws, the process exits 0. A silent exit 0 is indistinguishable
-// from "ran, found nothing", which is how prepareCorpusCandidate once reported SUCCESS with no
-// archive on disk. Reproduced live 2026-07-27; pinned by tests/unit/entrypoint-symlink.test.mjs.
-function isDirectInvocation() {
-  try {
-    if (!process.argv[1]) return false;
-    return fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url));
-  } catch {
-    return false;
-  }
-}
-
-const invokedDirectly = isDirectInvocation();
+const invokedDirectly = isDirectInvocation(import.meta.url);
 if (invokedDirectly) main();

package/scripts/qe/ux-suite.mjs

@@ -33,6 +33,7 @@ import { runCommandProbe } from '../../tests/ux/command-probe.mjs';
 import { runCardLaneGate } from './card-lane-gate.mjs';
 import { runSessionStartGate } from './session-start-gate.mjs';
 import { automaticHookRetirementStatus } from '../../bin/install.mjs';
+import { isDirectInvocation } from '../../plugin/scripts/entrypoint.mjs';
 
 const HERE = path.dirname(fileURLToPath(import.meta.url));
 const RENDER_PROBE = path.resolve(HERE, '../../tests/ux/render-probe.mjs');
@@ -394,7 +395,7 @@ export async function runUxSuite() {
   throw error;
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   runUxSuite().catch((e) => {
     if (!e.receipt) console.error('  ux-suite crashed:', e.message);
     process.exit(e.receipt ? 1 : 2);

package/scripts/qualified-candidate-check.mjs

@@ -10,6 +10,7 @@ import { evaluateCandidateReceipt } from './release-proof.mjs';
 import { aggregateEvidence } from './release-evidence-aggregate.mjs';
 import { payloadIdFor } from './release-payload.mjs';
 import { canonicalJson } from './release-transaction.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const REPO = 'stuinfla/ruvnet-brain';
 const WORKFLOW = '.github/workflows/release-candidate-preflight.yml';
@@ -109,7 +110,7 @@ export async function checkQualifiedCandidate({ sha, requiredCheck, timeoutMs =
     await pause(Math.min(pollMs, remaining));
   }
 }
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   try {
     if (process.env.GITHUB_REPOSITORY !== REPO) throw new Error('unexpected qualification repository');
     const args = process.argv.slice(2), options = {};

package/scripts/rebuild-gists-from-receipts.mjs

@@ -25,6 +25,7 @@ import {
   sealGistReceipt,
   sealGistReceiptSet,
 } from './gist-receipts.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 export { buildGistAggregate, paragraphChunks, provenanceBanner, rawUrlFor };
 
@@ -263,7 +264,7 @@ export async function main(argv = process.argv.slice(2), {
   return 0;
 }
 
-if (((() => { try { return process.argv[1] && fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url)); } catch { return false; } })())) {
+if (isDirectInvocation(import.meta.url)) {
   main().then((code) => { process.exitCode = code; }).catch((error) => {
     console.error(error.message);
     process.exitCode = 1;

package/scripts/recommendation-eval.mjs

@@ -13,6 +13,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { indexCards, rank, SNAPSHOT_FILE } from '../plugin/scripts/package-recommender.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.dirname(path.dirname(fileURLToPath(import.meta.url)));
 
@@ -76,7 +77,7 @@ export function evaluate(items, index) {
   };
 }
 
-const isMain = process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+const isMain = isDirectInvocation(import.meta.url);
 if (isMain) {
   const sets = [];
   let cards = SNAPSHOT_FILE;

package/scripts/recommendation-floor.mjs

@@ -14,6 +14,7 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { judgeScore } from './recommendation-judge-score.mjs';
 import { wilson } from './recommendation-eval.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.dirname(path.dirname(fileURLToPath(import.meta.url)));
 const POS = new Set(['design', 'diagnosis']);
@@ -31,7 +32,7 @@ export function applyFloor(key, picks, floor) {
   return Object.fromEntries(key.map((k) => [k.qid, k.lane === 'semantic' && !(k.topSimilarity >= floor) ? null : picks[k.qid] ?? null]));
 }
 
-const isMain = process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+const isMain = isDirectInvocation(import.meta.url);
 if (isMain) {
   const arg = (n, d) => { const i = process.argv.indexOf(n); return i >= 0 && process.argv[i + 1] ? process.argv[i + 1] : d; };
   const dir = arg('--dir', null);

package/scripts/recommendation-judge-score.mjs

@@ -13,6 +13,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { wilson } from './recommendation-eval.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.dirname(path.dirname(fileURLToPath(import.meta.url)));
 const POS = new Set(['design', 'diagnosis']);
@@ -57,7 +58,7 @@ export function judgeScore(key, picks, cards, { familyAware = false } = {}) {
   };
 }
 
-const isMain = process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+const isMain = isDirectInvocation(import.meta.url);
 if (isMain) {
   const arg = (n, d) => { const i = process.argv.indexOf(n); return i >= 0 && process.argv[i + 1] ? process.argv[i + 1] : d; };
   const dir = arg('--dir', null);

package/scripts/recommendation-real-host-score.mjs

@@ -15,6 +15,7 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { wilson } from './recommendation-eval.mjs';
 import { applyFloor } from './recommendation-floor.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.dirname(path.dirname(fileURLToPath(import.meta.url)));
 const POS = new Set(['design', 'diagnosis']);
@@ -55,7 +56,7 @@ export function scoreRealHost(real, key, simPicks, cards) {
   };
 }
 
-const isMain = process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+const isMain = isDirectInvocation(import.meta.url);
 if (isMain) {
   const arg = (n, d) => { const i = process.argv.indexOf(n); return i >= 0 && process.argv[i + 1] ? process.argv[i + 1] : d; };
   const real = JSON.parse(fs.readFileSync(arg('--real'), 'utf8'));

package/scripts/recommendation-real-host.mjs

@@ -21,6 +21,7 @@ import os from 'node:os';
 import path from 'node:path';
 import readline from 'node:readline';
 import { fileURLToPath } from 'node:url';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.dirname(path.dirname(fileURLToPath(import.meta.url)));
 const arg = (n, d) => { const i = process.argv.indexOf(n); return i >= 0 && process.argv[i + 1] ? process.argv[i + 1] : d; };
@@ -53,7 +54,7 @@ export function mentioned(answer, offered) {
   return null;
 }
 
-const isMain = process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+const isMain = isDirectInvocation(import.meta.url);
 if (isMain) {
   const outDir = arg('--out', null);
   if (!outDir || !arg('--key', null)) { console.error('--key and --out are required'); process.exit(2); }

package/scripts/refresh-capability-only-store.mjs

@@ -8,6 +8,7 @@ import { fileURLToPath, pathToFileURL } from 'node:url';
 import { buildCorpus } from '../kb/forge-corpus.mjs';
 import { loadRvf } from '../kb/resolve-deps.mjs';
 import { CAPABILITY_RETIRED_SUFFIXES, isCapabilityOnly } from '../kb/capability-only.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const NAME = 'cognitum-ruos';
@@ -138,6 +139,6 @@ async function main(argv) {
   console.log(JSON.stringify({ store: NAME, ...result }));
 }
 
-if (process.argv[1] && pathToFileURL(path.resolve(process.argv[1])).href === import.meta.url) {
+if (isDirectInvocation(import.meta.url)) {
   try { await main(process.argv.slice(2)); } catch (error) { console.error(`[capability-store] ${error.message}`); process.exitCode = 1; }
 }

package/scripts/refresh-model-catalog.mjs

@@ -15,6 +15,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const ROOT = path.resolve(__dirname, '..');
@@ -123,6 +124,6 @@ async function main() {
   }
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   main().catch((e) => { console.error('refresh-model-catalog FAILED:', e.message); process.exit(1); });
 }

package/scripts/rehearse-corpus-pipeline.mjs

@@ -68,6 +68,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath, pathToFileURL } from 'node:url';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const HERE = path.dirname(fileURLToPath(import.meta.url));
 export const REAL_ROOT = path.resolve(HERE, '..');
@@ -1591,7 +1592,7 @@ export async function main(argv = process.argv.slice(2)) {
   return receipt.verdict === 'PASS' ? 0 : 1;
 }
 
-if (((() => { try { return process.argv[1] && fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url)); } catch { return false; } })())) {
+if (isDirectInvocation(import.meta.url)) {
   main().then((code) => { process.exitCode = code; }).catch((error) => {
     console.error(error?.message || error);
     process.exitCode = 1;

package/scripts/release-authority.mjs

@@ -5,6 +5,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const CANONICAL_PUBLISHERS = new Set([
@@ -203,7 +204,7 @@ export function main(root = ROOT) {
 // spellings of one file, so the guard silently reads false and the CLI exits 0 having done nothing —
 // the same defect 6eead7bc fixed in release-projection.mjs, which is a gate this repo relies on.
 if (((() => {
-  try { return process.argv[1] && fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url)); } catch { return false; }
+  try { return isDirectInvocation(import.meta.url); } catch { return false; }
 })())) {
   process.exitCode = main();
 }

package/scripts/release-evidence-aggregate.mjs

@@ -4,6 +4,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { canonicalJson } from './release-transaction.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 export const REQUIRED_RELEASE_LEAVES = Object.freeze([
   'source-quality',
@@ -38,7 +39,7 @@ export function aggregateEvidence({ sha, payloadId, leaves }) {
   return { ...envelope, evidenceDigest: crypto.createHash('sha256').update(canonicalJson(envelope)).digest('hex') };
 }
 
-const isCli = process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+const isCli = isDirectInvocation(import.meta.url);
 if (isCli) {
   const arg = (name) => {
     const index = process.argv.indexOf(name);

package/scripts/release-payload.mjs

@@ -4,6 +4,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { canonicalJson } from './release-transaction.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const sha256 = (bytes) => crypto.createHash('sha256').update(bytes).digest('hex');
 const digestFile = (file) => sha256(fs.readFileSync(file));
@@ -51,7 +52,7 @@ const arg = (name) => {
   const index = process.argv.indexOf(name);
   return index >= 0 ? process.argv[index + 1] : null;
 };
-const command = process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)
+const command = isDirectInvocation(import.meta.url)
   ? process.argv[2]
   : null;
 

package/scripts/release-projection.mjs

@@ -24,6 +24,7 @@ import { PUBLIC_GENERATIONS_FILE, generationLedgerBytes, projectPublicGeneration
   releaseCoverageGenerationFor, validateCoverageDirectory } from '../plugin/scripts/coverage-integrity.mjs';
 import { validatePublicInventory } from './public-inventory.mjs';
 import { readRvfGenerations } from './rvf-generation.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const sha256 = (bytes) => crypto.createHash('sha256').update(bytes).digest('hex');
@@ -238,7 +239,7 @@ export function projectReleaseFromAssets({ corpusCoverage, assetsDir, version, s
   return releaseBase;
 }
 
-if (((() => { try { return process.argv[1] && fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url)); } catch { return false; } })())) {
+if (isDirectInvocation(import.meta.url)) {
   const arg = (name, fallback = null) => { const i = process.argv.indexOf(name); return i >= 0 ? process.argv[i + 1] : fallback; };
   try {
     const corpusFile = path.resolve(arg('--corpus', path.join(ROOT, 'data', 'source-coverage.json')));

package/scripts/release-proof.mjs

@@ -3,7 +3,8 @@ export * from '../plugin/skills/release-proof/scripts/release-proof.mjs';
 import { main } from '../plugin/skills/release-proof/scripts/release-proof.mjs';
 import path from 'node:path';
 import { pathToFileURL } from 'node:url';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
-if (process.argv[1] && pathToFileURL(path.resolve(process.argv[1])).href === import.meta.url) {
+if (isDirectInvocation(import.meta.url)) {
   process.exitCode = main(process.argv.slice(2));
 }

package/scripts/release-qualification-contract.mjs

@@ -11,8 +11,8 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
       "reason": "Allowed channels and immutable Claude artifact paths reject downgrades, ambiguous registry records, changed bytes, extra active resources and escape paths; Console success requires the exact launched source closure. POSIX owner fixtures additionally enforce original-prefix installs, existing-tool-only policy, shared locks and source-bound scheduler receipts",
       "files": ["tests/unit/developer-update-policy-portable.test.mjs", "tests/unit/plugin-artifact-proof.test.mjs", "tests/unit/console-suite-update.test.mjs", "tests/unit/developer-update-scheduled-receipt.test.mjs"],
       "platformFiles": {
-        "linux": ["tests/unit/developer-update.test.mjs", "tests/unit/developer-update-codex-launcher.test.mjs"],
-        "macos": ["tests/unit/developer-update.test.mjs", "tests/unit/developer-update-codex-launcher.test.mjs"]
+        "linux": ["tests/unit/developer-update.test.mjs", "tests/unit/developer-update-codex-launcher.test.mjs", "tests/unit/developer-update-lock-reclaim.test.mjs", "tests/unit/developer-update-lock-release-race.test.mjs", "tests/unit/developer-update-stage-isolation.test.mjs"],
+        "macos": ["tests/unit/developer-update.test.mjs", "tests/unit/developer-update-codex-launcher.test.mjs", "tests/unit/developer-update-lock-reclaim.test.mjs", "tests/unit/developer-update-lock-release-race.test.mjs", "tests/unit/developer-update-stage-isolation.test.mjs"]
       }
     },
     {
@@ -22,16 +22,20 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
     },
     {
       "id": "honest-currency-lesson-and-metrics-evidence",
-      "reason": "Foreign KB roots remain isolated; panel currency derives from measured completion rather than checkout time; exact lesson readback binds this shell-free write; public metrics never fabricate performance or a competing product score",
-      "files": ["tests/unit/forge-currency-selected-root.test.mjs", "tests/unit/brain-score-producer.test.mjs", "tests/unit/brain-grade-groundtruth-timestamp.test.mjs", "tests/unit/record-lesson.test.mjs", "tests/unit/lesson-presentation-budget.test.mjs", "tests/unit/metrics-truth.test.mjs", "tests/unit/issue-watch-retry.test.mjs"]
+      "reason": "Foreign KB roots remain isolated; panel currency derives from measured completion rather than checkout time; exact lesson readback binds this shell-free write; public metrics never fabricate performance or a competing product score; SessionStart reports a host-sync-only failure after a passed knowledge update separately from knowledge currency",
+      "files": ["tests/unit/forge-currency-selected-root.test.mjs", "tests/unit/brain-score-producer.test.mjs", "tests/unit/brain-grade-groundtruth-timestamp.test.mjs", "tests/unit/record-lesson.test.mjs", "tests/unit/lesson-presentation-budget.test.mjs", "tests/unit/metrics-truth.test.mjs", "tests/unit/issue-watch-retry.test.mjs", "tests/unit/session-start-knowledge-currency.test.mjs"],
+      "platformFiles": {
+        "linux": ["tests/unit/session-start-knowledge-auto-update.test.mjs", "tests/unit/claims-verify.test.mjs", "tests/unit/capability-registry.test.mjs"],
+        "macos": ["tests/unit/session-start-knowledge-auto-update.test.mjs", "tests/unit/claims-verify.test.mjs", "tests/unit/capability-registry.test.mjs"]
+      }
     },
     {
       "id": "owner-alerting-volume-and-trust",
       "reason": "Alerts page on change, not repeat; an undelivered page is retried; overrunning jobs and their whole process tree stop; people's issues page once at SLA with one daily summary; the ntfy inbox never turns message text into instructions",
       "files": ["tests/unit/issue-watch-paging.test.mjs"],
       "platformFiles": {
-        "linux": ["tests/unit/job-heartbeat-alerting.test.mjs", "tests/unit/ntfy-inbox.test.mjs"],
-        "macos": ["tests/unit/job-heartbeat-alerting.test.mjs", "tests/unit/ntfy-inbox.test.mjs"]
+        "linux": ["tests/unit/job-heartbeat-alerting.test.mjs", "tests/unit/ntfy-inbox.test.mjs", "tests/unit/brain-alarm-paging.test.mjs", "tests/unit/ntfy-alerts-filter.test.mjs", "tests/unit/api-spend-watchdog-transition.test.mjs", "tests/unit/issue-watch-unreadable-exit.test.mjs", "tests/unit/nightly-watchdog.test.mjs", "tests/unit/ntfy-delivery.test.mjs"],
+        "macos": ["tests/unit/job-heartbeat-alerting.test.mjs", "tests/unit/ntfy-inbox.test.mjs", "tests/unit/brain-alarm-paging.test.mjs", "tests/unit/ntfy-alerts-filter.test.mjs", "tests/unit/api-spend-watchdog-transition.test.mjs", "tests/unit/issue-watch-unreadable-exit.test.mjs", "tests/unit/nightly-watchdog.test.mjs", "tests/unit/ntfy-delivery.test.mjs"]
       }
     },
     {
@@ -39,8 +43,8 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
       "reason": "Captured owner policy never falls back on read failures; installed-only automation avoids npx; transient GET and body failures retry without weakening trust; POSIX executable aliases retain interpreter identity",
       "files": ["tests/unit/automatic-update.test.mjs", "tests/unit/download-retry.test.mjs"],
       "platformFiles": {
-        "linux": ["tests/unit/automatic-update-node-alias.test.mjs"],
-        "macos": ["tests/unit/automatic-update-node-alias.test.mjs"]
+        "linux": ["tests/unit/automatic-update-node-alias.test.mjs", "tests/unit/host-update-knowledge-exit.test.mjs"],
+        "macos": ["tests/unit/automatic-update-node-alias.test.mjs", "tests/unit/host-update-knowledge-exit.test.mjs"]
       }
     },
     {
@@ -57,8 +61,8 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
       "reason": "Explicit document meaning requests retain corroboration; literal searches stay silent; POSIX complete-write exemptions preserve executable and managed-store grounding",
       "files": ["tests/unit/advocacy-route.test.mjs", "tests/unit/advocacy-catalog.test.mjs", "tests/unit/card-lane.test.mjs"],
       "platformFiles": {
-        "linux": ["tests/unit/advocacy-route-budget.test.mjs", "tests/unit/ground-before-write.test.mjs", "tests/unit/grounding-code-projection.test.mjs"],
-        "macos": ["tests/unit/advocacy-route-budget.test.mjs", "tests/unit/ground-before-write.test.mjs", "tests/unit/grounding-code-projection.test.mjs"]
+        "linux": ["tests/unit/advocacy-route-budget.test.mjs", "tests/unit/ground-before-write.test.mjs", "tests/unit/grounding-code-projection.test.mjs", "tests/unit/package-recommender.test.mjs", "tests/unit/write-gate-policy.test.mjs"],
+        "macos": ["tests/unit/advocacy-route-budget.test.mjs", "tests/unit/ground-before-write.test.mjs", "tests/unit/grounding-code-projection.test.mjs", "tests/unit/package-recommender.test.mjs"]
       }
     },
     {
@@ -68,11 +72,12 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
     },
     {
       "id": "canonical-learning-capture",
-      "reason": "Fixed metadata capture, canonical scope, consent, exact readback and loud refusal retain privacy; learning is handed straight to ruflo memory store with no local queue",
+      "reason": "Fixed metadata capture, canonical scope, consent, exact readback and loud refusal retain privacy; learning is handed straight to ruflo memory store with no local queue; the SessionEnd checkpoint plans for Claude Code's real 1.5 s budget and detaches instead of being cancelled",
       "files": [
         "tests/unit/learn-capture-project-root.test.mjs",
         "tests/unit/learn-capture-redaction.test.mjs",
-        "tests/unit/learner-scope-agreement.test.mjs"
+        "tests/unit/learner-scope-agreement.test.mjs",
+        "tests/unit/claude-session-end-budget.test.mjs"
       ]
     },
     {
@@ -111,7 +116,11 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
         "tests/unit/protected-release-workflow.test.mjs",
         "tests/unit/agentic-qe-early-public.test.mjs",
         "tests/unit/release-evidence-dag.test.mjs"
-      ]
+      ],
+      "platformFiles": {
+        "linux": ["tests/unit/self-update-publish-branch-guard.test.mjs", "tests/unit/pre-push-worktree-root.test.mjs", "tests/unit/wired-baseline-classification.test.mjs"],
+        "macos": ["tests/unit/self-update-publish-branch-guard.test.mjs", "tests/unit/pre-push-worktree-root.test.mjs", "tests/unit/wired-baseline-classification.test.mjs"]
+      }
     },
     {
       "id": "public-verification",
@@ -127,7 +136,7 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
     },
     {
       "id": "safe-install-update",
-      "reason": "Installation and update preserve prior and private state and reject invalid dependencies; the Codex hook bridge a retained Brain generation shipped upgrades reversibly while edited, linked, shared or foreign-owned bridges stay preserved",
+      "reason": "Installation and update preserve prior and private state and reject invalid dependencies; the Codex hook bridge a retained Brain generation shipped upgrades reversibly while edited, linked, shared or foreign-owned bridges stay preserved; a failed host sync rolls the Console runtime back and records its reason",
       "files": [
         "tests/unit/automatic-hook-retirement.test.mjs",
         "tests/unit/codex-wrapper-upgrade-ownership.test.mjs",
@@ -136,11 +145,13 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
         "tests/unit/forge-update-archive-digest.test.mjs",
         "tests/unit/kb-copy-proof-legacy-sidecars.test.mjs",
         "tests/unit/kb-copy-proof-unknown-content.test.mjs",
-        "tests/unit/user-model-hook-install.test.mjs"
+        "tests/unit/user-model-hook-install.test.mjs",
+        "tests/unit/console-runtime-transaction.test.mjs",
+        "tests/unit/install-update-exit-semantics.test.mjs"
       ],
       "platformFiles": {
-        "linux": ["tests/unit/codex-wrapper-upgrade-ownership-links.test.mjs"],
-        "macos": ["tests/unit/codex-wrapper-upgrade-ownership-links.test.mjs"]
+        "linux": ["tests/unit/codex-wrapper-upgrade-ownership-links.test.mjs", "tests/unit/forge-update-signal.test.mjs", "tests/unit/console-runtime-replacement-posix.test.mjs", "tests/unit/update-apply-lock-identity.test.mjs", "tests/unit/update-apply-lock-takeover-race.test.mjs", "tests/integration/install-update-signals.test.mjs", "tests/unit/forge-guard-injection-log-location.test.mjs", "tests/unit/installer-sibling-imports-packaged.test.mjs", "tests/unit/npm-pack-json.test.mjs", "tests/unit/npm-tarball-codex.test.mjs", "tests/integration/pack-completeness.test.mjs"],
+        "macos": ["tests/unit/codex-wrapper-upgrade-ownership-links.test.mjs", "tests/unit/forge-update-signal.test.mjs", "tests/unit/console-runtime-replacement-posix.test.mjs", "tests/unit/update-apply-lock-identity.test.mjs", "tests/unit/update-apply-lock-takeover-race.test.mjs", "tests/integration/install-update-signals.test.mjs", "tests/unit/forge-guard-injection-log-location.test.mjs", "tests/unit/installer-sibling-imports-packaged.test.mjs", "tests/unit/npm-pack-json.test.mjs", "tests/unit/npm-tarball-codex.test.mjs", "tests/integration/pack-completeness.test.mjs", "tests/unit/spend-guard-install.test.mjs"]
       }
     },
     {
@@ -196,11 +207,12 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
         "tests/unit/model-native-catalog.test.mjs",
         "tests/unit/user-model-prompt-hook.test.mjs",
         "tests/unit/model-routing-policy-promotion.test.mjs",
-        "tests/unit/codex-hook-trust.test.mjs"
+        "tests/unit/codex-hook-trust.test.mjs",
+        "tests/unit/model-catalog-refresh-workflow.test.mjs"
       ],
       "platformFiles": {
-        "linux": ["tests/unit/model-weekly-cycle-native-stub.test.mjs", "tests/unit/goldie-weekly-path.test.mjs"],
-        "macos": ["tests/unit/model-weekly-cycle-native-stub.test.mjs", "tests/unit/goldie-weekly-path.test.mjs"]
+        "linux": ["tests/unit/model-weekly-cycle-native-stub.test.mjs", "tests/unit/goldie-weekly-path.test.mjs", "tests/unit/model-currency-live-capture.test.mjs"],
+        "macos": ["tests/unit/model-weekly-cycle-native-stub.test.mjs", "tests/unit/goldie-weekly-path.test.mjs", "tests/unit/model-currency-live-capture.test.mjs"]
       }
     },
     {
@@ -240,25 +252,45 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
     },
     {
       "id": "lossless-lifecycle-retention",
-      "reason": "Evidence compaction preserves tokens, private state and atomic transaction recovery",
+      "reason": "Evidence compaction preserves tokens, private state and atomic transaction recovery; an abandoned atomic receipt temporary is reclaimed or preserved, never a permanent blocker",
       "files": [
         "tests/unit/lifecycle-evidence-retention.test.mjs",
+        "tests/unit/refresh-run.test.mjs",
+        "tests/unit/refresh-run-stale-reclaim.test.mjs",
         "tests/unit/update-storage-transaction.test.mjs"
-      ]
+      ],
+      "platformFiles": {
+        "linux": ["tests/unit/refresh-run-takeover-race.test.mjs"],
+        "macos": ["tests/unit/refresh-run-takeover-race.test.mjs"]
+      }
+    },
+    {
+      "id": "nightly-knowledge-jobs",
+      "reason": "The gists nightly re-embeds over a stale store, scales its stall budget with the slowest batch and reports its error paths; a stalled shard is detected; a reader never deadlocks the refresh",
+      "files": ["tests/unit/forge-big-stall.test.mjs"],
+      "platformFiles": {
+        "linux": ["tests/integration/ingest-gists.test.mjs", "tests/integration/nightly-gists-error-paths.test.mjs"],
+        "macos": ["tests/integration/ingest-gists.test.mjs", "tests/integration/nightly-gists-error-paths.test.mjs"]
+      }
     },
     {
       "id": "causal-learning-proof",
       "reason": "Recorded learning evidence rejects forged, absent and mismatched causal transcripts",
       "files": [
         "tests/unit/learning-replay-proof.test.mjs"
-      ]
+      ],
+      "platformFiles": {
+        "linux": ["tests/unit/learning-replay-workflow-step.test.mjs"],
+        "macos": ["tests/unit/learning-replay-workflow-step.test.mjs"]
+      }
     },
     {
       "id": "qualification-topology",
       "reason": "Release promotion consumes qualified exact-source receipts and preserves required contexts",
       "files": [
         "tests/unit/qualify-once-workflow.test.mjs",
-        "tests/unit/architecture-review-lock.test.mjs"
+        "tests/unit/architecture-review-lock.test.mjs",
+        "tests/unit/canonical-qa-preflight-parity.test.mjs"
       ]
     },
     {
@@ -291,10 +323,13 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
   ],
   "platformFiles": {
     "linux": [
-      "tests/unit/hook-shim.test.mjs"
+      "tests/unit/hook-shim.test.mjs",
+      "tests/unit/continuation-gate-quiet-default.test.mjs"
     ],
     "macos": [
-      "tests/unit/hook-shim.test.mjs"
+      "tests/unit/hook-shim.test.mjs",
+      "tests/unit/continuation-gate-quiet-default.test.mjs",
+      "tests/unit/hook-qualify.test.mjs"
     ]
   }
 },
@@ -358,10 +393,11 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
     },
     {
       "id": "installed-routing-and-hook-trust",
-      "reason": "Actual installer update converges managed routing while preserving private overrides; POSIX archive and native metadata subprocess probes bind authorized hook trust to verified released bytes and preserve concurrent or disabled owner state",
+      "reason": "Actual installer update converges managed routing while preserving private overrides; POSIX archive and native metadata subprocess probes bind authorized hook trust to verified released bytes and preserve concurrent or disabled owner state; a running shared Codex app-server is reloaded after a plugin or trust change without granting approval (#492)",
       "files": [
         "tests/unit/model-router-update-convergence.test.mjs",
-        "tests/unit/codex-hook-trust-reconcile.test.mjs"
+        "tests/unit/codex-hook-trust-reconcile.test.mjs",
+        "tests/unit/codex-shared-host-refresh.test.mjs"
       ]
     },
     {

package/scripts/release-qualification.mjs

@@ -7,6 +7,7 @@ import { fileURLToPath } from 'node:url';
 import { digest } from './coverage-integrity.mjs';
 import { sourceIdentity } from './qa-contract.mjs';
 import { RELEASE_REQUIREMENTS } from './release-qualification-contract.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const PLATFORM = { linux: 'linux', darwin: 'macos', win32: 'windows' }[process.platform];
@@ -124,6 +125,12 @@ export function runQualification({ suite = 'source', platform = PLATFORM, report
   }
   const sourceAfter = sourceIdentity(root);
   const sourceStable = source.digest === sourceAfter.digest;
+  if (!sourceStable && !failure) {
+    // Name what the run changed: "source changed" with no file is undiagnosable on a runner we cannot open.
+    const git = (args) => spawnSync('git', args, { cwd: root, encoding: 'utf8' }).stdout.split('\n').filter(Boolean);
+    const changed = [...git(['ls-files', '--others', '--exclude-standard']), ...git(['diff', '--name-only'])].slice(0, 20);
+    failure = `qualification changed the checkout: ${changed.join(', ') || 'unknown files'}`;
+  }
   const receipt = { schemaVersion: 1, kind: 'ruvnet-brain-release-qualification', suite, platform, checkoutRoot: path.resolve(root),
     source, sourceAfter, sourceStable, status: !failure && sourceStable ? 'PASS' : 'FAIL',
     requirements: plan.requirements.map((entry) => entry.id), contractSha256: plan.contractSha256,
@@ -135,7 +142,7 @@ export function runQualification({ suite = 'source', platform = PLATFORM, report
   return receipt;
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   const args = process.argv.slice(2);
   const value = (flag, fallback) => { const i = args.indexOf(flag); return i < 0 ? fallback : args[i + 1]; };
   try {

package/scripts/release-vector.mjs

@@ -22,6 +22,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { performance } from 'node:perf_hooks';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 export const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 
@@ -319,7 +320,7 @@ export function formatVectorOutput(result, { json = false } = {}) {
   return `${lines.join('\n')}\n`;
 }
 
-if (process.argv[1] && fileURLToPath(import.meta.url) === path.resolve(process.argv[1])) {
+if (isDirectInvocation(import.meta.url)) {
   const timings = process.argv.includes('--timings');
   const emitTiming = (phase, data) => process.stderr.write(`${JSON.stringify({
     schema: 'ruvnet-brain.release-vector.timing', phase, ...data,

package/scripts/restore-local-ingests.mjs

@@ -43,6 +43,7 @@ import path from 'node:path';
 import { execFileSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { storeRoot, storesAt, rootNeverMaterialized } from '../kb/store-root.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.dirname(path.dirname(fileURLToPath(import.meta.url)));
 const LEDGER = path.join(ROOT, 'kb', 'local-ingests.json');
@@ -76,7 +77,7 @@ export function classify({ ledgerFile = LEDGER, root = storeRoot() } = {}) {
 }
 
 const isMain = (() => {
-  try { return process.argv[1] && fs.realpathSync(process.argv[1]) === fileURLToPath(import.meta.url); }
+  try { return isDirectInvocation(import.meta.url); }
   catch { return false; }
 })();
 

package/scripts/retrieval-canary.mjs

@@ -8,6 +8,7 @@ import { fileURLToPath } from 'node:url';
 import { canonicalJson, digest, eligibleRepositoryStanding, validateCoverageLedger } from './coverage-integrity.mjs';
 import { fixtureDenominator } from './fixture-denominator.mjs';
 import { passageMatches } from './retrieval-passage-identity.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 // Both release phases resolve against an explicit installed context, never the checkout.
 export async function resolveInstalledCanaryCitation({ kbDir, matched, expected, passageFileDigests = new Map(), contentMap }) {
@@ -740,7 +741,7 @@ export function auditOracleCoverageFromFiles({ coverageFile, oracleFile, exempti
   return { ...inventory, oracleSourceCommit: queryEvidence.sourceCommit, strictAncestor };
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   try {
     const argv = process.argv.slice(2);
     if (argv.includes('--audit')) {

package/scripts/route-cheap.mjs

@@ -28,6 +28,7 @@ import os from 'node:os';
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { loadRuntimePreferences, runtimeChildEnv } from '../plugin/scripts/runtime-preferences.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
@@ -207,4 +208,4 @@ function main() {
   console.log(receiptLine(args.model, costs));
 }
 
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) main();
+if (isDirectInvocation(import.meta.url)) main();