host: review fixes for cargo.build, the test runner, the console, and main; tests for every PROTOCOL.md rule

cargo.build and the runner (review T22R): builds use the network again;
core.unlock and core.notify in order under the runner; quiet test
output; manifest preparation keeps [workspace], target tables, renamed
and optional entries; cargo.rpc.discover; -32004 with data.output;
retention of 10 builds; light, empty test worlds with an in-memory
journal; only CARGO_/RUST_/SAUSAGE_ variables; stdin is null; the runner
through --config. A compile cache that cannot be created is not fatal.
Activation replaces plugin.wasm without a gap.

Console and main: init ships the workspace Cargo.lock and creates the
world atomically; each console command runs in its own task, so ps,
stop, and kill work during a slow call; SAUSAGE_HEADLESS; the terminal
mode is restored; signals during boot; chat text is not taken as a
command.

Tests: 20 more tests for PROTOCOL.md sections 2 to 10; the cargo tests
choose the libtest binary from cargo's JSON output and time out.

cli/tests/console.rs

@@ -14,7 +14,7 @@ fn fixture() -> PathBuf {
             .parent()
             .unwrap()
             .to_owned();
-        let target = root.join("target/vfs/console-guests");
+        let target = root.join("target/core/console-guests");
         let status = std::process::Command::new("cargo")
             .args([
                 "build",
@@ -54,7 +54,7 @@ impl TestWorld {
         let cache = PathBuf::from(env!("CARGO_MANIFEST_DIR"))
             .parent()
             .unwrap()
-            .join("target/vfs/console-cache");
+            .join("target/core/console-cache");
         Host::start_with_cache(&self.0, &cache).await.unwrap()
     }
 }
@@ -78,7 +78,10 @@ async fn rpc_call() {
     let result = command(&host, "probe.echo {\"answer\":42}").await;
     assert!(result.contains("\n  \"answer\": 42\n"));
     assert!(command(&host, "absent.echo {}").await.contains("error:"));
-    assert!(execute_line(&host, "probe.echo not-json").await.is_err());
+    assert_eq!(
+        command(&host, "probe.echo not-json").await,
+        "probe.echo not-json"
+    );
     host.stop().await;
 }
 /// Plain text calls agent.chat and its interim notification uses dim styling.
@@ -96,6 +99,28 @@ async fn chat() {
     );
     host.stop().await;
 }
+/// Invalid command arguments and dotted prose remain agent chat.
+#[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+async fn prose_is_not_a_command() {
+    let world = TestWorld::new();
+    let host = world.start().await;
+    for line in [
+        "help me write a notes plugin",
+        "ps is useful",
+        "stop it",
+        "kill that",
+        "cat",
+        "methods probe extra",
+        "ls too many words",
+        "log -n nope",
+        "README.md says hello",
+        "e.g. write notes",
+    ] {
+        assert_eq!(command(&host, line).await, line);
+    }
+    host.stop().await;
+}
+
 /// Folder listings include the live mounts and accept an explicit folder.
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
 async fn ls() {
@@ -215,7 +240,7 @@ async fn log() {
         }
     }
     assert_eq!(command(&host, "log absent-plugin").await, "");
-    assert!(execute_line(&host, "log -n").await.is_err());
+    assert_eq!(command(&host, "log -n").await, "log -n");
     host.stop().await;
 }
 /// Activate installs a candidate through core.activate.