v1.60.2.0 fix: harden Windows GBrain sync runtime

[SatriaSuriaAriffin]

Summary

Runtime packaging

• Include the required lib modules in both generated Codex runtime install surfaces.

Source safety

• Normalize equivalent Windows source paths before drift decisions.
• Preserve paths containing spaces as structural arguments and invoke resolved Windows executables directly with shell: false.
• Fail closed for script launchers that cannot preserve argument boundaries safely.

Maintenance scope

• Probe GBrain maintenance capabilities and refuse to widen a source-scoped request into a brain-wide cycle.

Regression coverage and documentation

• Add compiled fake-GBrain Windows harnesses and regression cases for every reported defect.
• Update README, usage guidance, changelog, and release metadata.

Test Coverage

All new code paths have test coverage. Tests: 90 → 92 (+2 new) after the independent coverage audit closed the final launcher and maintenance-dispatch gaps.

Focused Windows/GBrain suite: 92 passed, 0 failed, 259 expectations.

Pre-Landing Review

No issues found.

Design Review

No frontend files changed — design review skipped.

Eval Results

No prompt-related files changed — evals skipped.

Scope Drift

Scope Check: CLEAN. All changes map directly to DEV-206 implementation, regression coverage, or matching documentation and release metadata.

Plan Completion

No plan file detected. All four DEV-206 acceptance areas were independently audited as complete.

Verification Results

• Focused Windows/GBrain suite: 92 passed, 0 failed.
• Generated-runtime build: passed.
• Public-repository sensitive-content scan: clean.
• Clean upstream baseline reproduced the 28 broader Windows-suite failures unchanged, confirming they are unrelated to this diff.

TODOS

No TODO items completed in this PR.

Test plan

• Codex runtime install and upgrade packaging includes lib.
• Equivalent Windows paths and paths containing spaces are covered.
• Unsafe launchers and brain-wide-only maintenance fail closed.
• Focused regression suite and generated-runtime build pass.

Generated with OpenAI Codex

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here

[SatriaSuriaAriffin]

/trunk merge

[trunk-io]

An error occurred while submitting your PR to the queue: Only users that are a part of this repo's Trunk organization or have write permissions to the repo can submit a PR to the queue