hermes d2cd7115f1 fix(npm): no cache fallback without an absolute home directory ... The release-gate Codex review found the relative-path fix incomplete: with XDG_CACHE_HOME unset and HOME empty or relative, the fallback was `.cache/...` under the current directory, so a checkout could plant the binary the launcher runs. Use the home cache only when the home path is absolute; otherwise the package's bin/ is the only location. npm smoke plants such a binary and checks it is never run (it was, before this). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01V3syn2fN2LNo5pvTSqc6eh		2026-10-16 09:54:30 +00:00
..
audit-msn-fundamentals.sh	fix: handle non-finite msn key ratios	2026-04-13 23:34:36 +07:00
build-latest-ownership-snapshot.sh	fix(ownership): bound snapshot download by manifest size; clean refused builds	2026-09-25 22:31:40 +00:00
build-ownership-snapshot.sh	fix(ownership): verify snapshot assets before publishing manifests	2026-09-25 10:37:32 +00:00
check-ownership-snapshot-freshness.sh	fix(ownership): make publisher RESULT contract hold on every path	2026-09-24 21:50:51 +00:00
idx.js	fix(npm): absolute cache root, per-arch cache dir, SIGINT during install	2026-10-16 09:54:30 +00:00
install-sh-test.sh	ci(nix): unify cached verification and strengthen packaged smoke	2026-10-03 16:22:11 +00:00
install.js	fix(npm): no cache fallback without an absolute home directory	2026-10-16 09:54:30 +00:00
live-smoke.sh	test: add golden output parity gate and live A/B compare	2026-10-14 08:33:25 +00:00
npm-smoke.sh	fix(npm): no cache fallback without an absolute home directory	2026-10-16 09:54:30 +00:00
publish-ownership-snapshot-test.sh	fix(ownership): update syncs when a same-date snapshot is rebuilt	2026-10-14 18:52:13 +00:00
publish-ownership-snapshot.sh	fix: address final review (path traversal, sync races, MCP limits)	2026-10-14 21:58:37 +00:00