test(ids): add 5 regression tests for syncSelfRegistryEntry

Addresses CodeRabbit feedback on PR #749 — the self-entry sync logic
introduced in PR #748 was load-bearing (lastVerified + checksum drift
was the original CodeRabbit complaint) but lacked targeted tests.

Tests added cover the four invariants:

1. **Self-path match → mutates both fields**: when the entry's path
   equals `.aiox-core/data/entity-registry.yaml`, `lastVerified`
   becomes the new timestamp and `checksum` becomes the sentinel.

2. **Non-self path → no mutation**: the companion entry pointing at
   `.aiox-core/core/doctor/checks/entity-registry.js` (a real JS
   module, NOT self-referential) must NOT be touched. Catches the
   most likely regression: if the path guard is removed, the JS
   module entry would get clobbered with the yaml sentinel.

3. **Missing entities.data** is a no-op (defensive).

4. **Missing self-entry** is a no-op + leaves other data entries
   alone (defensive).

5. **Malformed registry** (`{}`, `null`) does not throw.

Required exporting `syncSelfRegistryEntry` from the script's
`module.exports` and consuming it in the test file. Suite: 96/96
pass (was 91/91).

Author: rafaelscosta

.aiox-core/development/scripts/populate-entity-registry.js

@@ -853,6 +853,7 @@ module.exports = {
   extractKeywords,
   extractPurpose,
   looksLikePlaceholder,
+  syncSelfRegistryEntry,
   detectDependencies,
   extractYamlDependencies,
   extractMarkdownCrossReferences,

.aiox-core/install-manifest.yaml

@@ -8,7 +8,7 @@
 # - File types for categorization
 #
 version: 5.2.6
-generated_at: "2026-05-17T15:12:58.541Z"
+generated_at: "2026-05-17T19:14:46.622Z"
 generator: scripts/generate-install-manifest.js
 file_count: 1128
 files:
@@ -1669,9 +1669,9 @@ files:
     type: script
     size: 23410
   - path: development/scripts/populate-entity-registry.js
-    hash: sha256:65cc968e9fa82bb18390ee0ed7063082b5341a441b83a9778638f1ce4064ab23
+    hash: sha256:67a64f3bf0118eaa58401f4450e04f99643a33903d6b57d433929604b9061315
     type: script
-    size: 31446
+    size: 31471
   - path: development/scripts/refactoring-suggester.js
     hash: sha256:d50ea6b609c9cf8385979386fee4b4385d11ebcde15460260f66d04c705f6cd9
     type: script

tests/core/ids/populate-entity-registry.test.js

@@ -7,6 +7,7 @@ const {
   extractKeywords,
   extractPurpose,
   looksLikePlaceholder,
+  syncSelfRegistryEntry,
   detectDependencies,
   extractYamlDependencies,
   extractMarkdownCrossReferences,
@@ -305,6 +306,77 @@ describe('populate-entity-registry (AC: 3, 4, 12)', () => {
     });
   });
 
+  describe('syncSelfRegistryEntry()', () => {
+    const SELF_PATH = '.aiox-core/data/entity-registry.yaml';
+    const SENTINEL = 'sha256:<self-reference>';
+
+    it('updates lastVerified and checksum on the self-entry when path matches', () => {
+      const registry = {
+        entities: {
+          data: {
+            'entity-registry': {
+              path: SELF_PATH,
+              checksum: 'sha256:stale-old-hash-1234567890abcdef',
+              lastVerified: '2026-01-01T00:00:00.000Z',
+              purpose: 'Entity at .aiox-core/data/entity-registry.yaml',
+            },
+          },
+        },
+      };
+      const newTimestamp = '2026-05-17T15:00:00.000Z';
+
+      syncSelfRegistryEntry(registry, newTimestamp, SENTINEL);
+
+      expect(registry.entities.data['entity-registry'].lastVerified).toBe(newTimestamp);
+      expect(registry.entities.data['entity-registry'].checksum).toBe(SENTINEL);
+    });
+
+    it('does NOT mutate entries whose path is different (other entity-registry pointing to .js module)', () => {
+      const registry = {
+        entities: {
+          data: {
+            'entity-registry': {
+              path: '.aiox-core/core/doctor/checks/entity-registry.js',
+              checksum: 'sha256:legitimate-js-module-hash-do-not-touch',
+              lastVerified: '2026-01-01T00:00:00.000Z',
+            },
+          },
+        },
+      };
+      const newTimestamp = '2026-05-17T15:00:00.000Z';
+
+      syncSelfRegistryEntry(registry, newTimestamp, SENTINEL);
+
+      expect(registry.entities.data['entity-registry'].checksum).toBe(
+        'sha256:legitimate-js-module-hash-do-not-touch',
+      );
+      expect(registry.entities.data['entity-registry'].lastVerified).toBe('2026-01-01T00:00:00.000Z');
+    });
+
+    it('is a no-op when entities.data does not exist', () => {
+      const registry = { entities: { agents: { foo: { path: 'irrelevant' } } } };
+      expect(() => syncSelfRegistryEntry(registry, '2026-05-17T15:00:00.000Z', SENTINEL)).not.toThrow();
+    });
+
+    it('is a no-op when self-entry is missing', () => {
+      const registry = {
+        entities: {
+          data: {
+            'some-other-data': { path: '.aiox-core/data/something.yaml', checksum: 'sha256:keep' },
+          },
+        },
+      };
+      syncSelfRegistryEntry(registry, '2026-05-17T15:00:00.000Z', SENTINEL);
+      // Other entries unchanged
+      expect(registry.entities.data['some-other-data'].checksum).toBe('sha256:keep');
+    });
+
+    it('is a no-op when registry is malformed (missing entities)', () => {
+      expect(() => syncSelfRegistryEntry({}, '2026-05-17T15:00:00.000Z', SENTINEL)).not.toThrow();
+      expect(() => syncSelfRegistryEntry(null, '2026-05-17T15:00:00.000Z', SENTINEL)).not.toThrow();
+    });
+  });
+
   describe('detectDependencies()', () => {
     it('detects require() dependencies', () => {
       const content = "const foo = require('./foo-module');\nconst bar = require('../bar');";