@bongos/core 1.18.19 → 1.19.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (251) hide show
  1. package/.bongos-core.json +514 -194
  2. package/.claude/skills/builder-box/SKILL.md +1 -1
  3. package/.claude/skills/builder-claim/SKILL.md +1 -1
  4. package/.claude/skills/goal-create/SKILL.md +1 -1
  5. package/.claude/skills/idea-triage/SKILL.md +1 -1
  6. package/.claude/skills/planning-session/SKILL.md +5 -5
  7. package/.claude/skills/scan-before-install/SKILL.md +165 -0
  8. package/clients/bongos-client/README.md +1 -1
  9. package/clients/bongos-client/bongos-client.global.js +63 -41
  10. package/clients/bongos-client/index.cjs +63 -41
  11. package/clients/bongos-client/index.d.ts +78 -44
  12. package/clients/bongos-client/index.mjs +63 -41
  13. package/docs/adr/0020-security-model-public-stub.md +1 -1
  14. package/docs/adr/0097-one-active-claim-per-session-and-worktree-binding.md +2 -0
  15. package/docs/adr/0144-devbox-rehome-onto-cloudbongos-plane.md +1 -1
  16. package/docs/adr/0151-governance-permissions-as-atom-ranks-as-roles.md +2 -1
  17. package/docs/adr/0155-adopt-private-repo-widen-oauth-scope.md +51 -0
  18. package/docs/adr/0156-user-set-display-name-wins.md +62 -0
  19. package/docs/adr/0157-archon-is-rank-and-identity-only.md +93 -0
  20. package/docs/adr/0158-choke-point-verdict-taxonomy.md +174 -0
  21. package/docs/adr/0159-merge-gate-reconciliation.md +88 -0
  22. package/docs/adr/0160-main-audit-repo-verifiable-caller.md +77 -0
  23. package/docs/adr/README.md +8 -0
  24. package/docs/api/openapi.json +1209 -233
  25. package/docs/api-reference.md +61 -46
  26. package/docs/architecture.md +1 -1
  27. package/docs/canonical-permissions.md +61 -16
  28. package/docs/design/vanilla-hall-ui-redesign-scope.md +1 -1
  29. package/docs/file-map.md +4 -1
  30. package/docs/onboarding/diagrams/assertions.json +3 -3
  31. package/docs/recipes/core-release-pipeline.md +179 -0
  32. package/docs/recipes/packaging-the-core.md +2 -0
  33. package/docs/recipes/parallel-goal-waves.md +1 -3
  34. package/docs/recipes/private-npm-distribution.md +2 -0
  35. package/docs/recipes/upgrading-the-core.md +2 -0
  36. package/migrations/core_197_display_name_source.sql +56 -0
  37. package/migrations/core_204_rekey_active_claim_per_session_worktree.sql +77 -0
  38. package/modules/autonomy/routes/autonomy.js +1 -1
  39. package/modules/builder-settings/db.js +7 -1
  40. package/modules/dev-box/app/src/vendor/bongos-client.cjs +63 -41
  41. package/modules/dev-box/routes/box.js +11 -9
  42. package/modules/discord/auth.js +3 -1
  43. package/modules/discord/routes/discord.js +8 -2
  44. package/modules/discord/ship-broadcast.js +48 -1
  45. package/modules/governance/catalog.js +70 -20
  46. package/modules/governance/db.js +102 -0
  47. package/modules/governance/migrations/governance_006_version_create.sql +38 -0
  48. package/modules/governance/migrations/governance_007_delegate_archon_ops_to_metic.sql +72 -0
  49. package/modules/governance/routes/governance.js +235 -6
  50. package/modules/grading/grader-workers/index.js +18 -9
  51. package/modules/hall-ui/public/gate.js +6 -2
  52. package/modules/hall-ui/public/goals-page.js +6 -2
  53. package/modules/hall-ui/public/governance.css +100 -0
  54. package/modules/hall-ui/public/governance.html +77 -0
  55. package/modules/hall-ui/public/governance.js +353 -0
  56. package/modules/hall-ui/public/harbor.js +14 -8
  57. package/modules/hall-ui/public/instances-panel.js +3 -1
  58. package/modules/hall-ui/public/new-project-wizard.js +6 -0
  59. package/modules/hall-ui/public/people.html +51 -0
  60. package/modules/hall-ui/public/people.js +100 -0
  61. package/modules/hall-ui/public/profile.html +2 -1
  62. package/modules/hall-ui/public/profile.js +9 -3
  63. package/modules/hall-ui/public/sessions.js +4 -2
  64. package/modules/hall-ui/public/shell.js +28 -7
  65. package/modules/hall-ui/public/task-detail.js +6 -3
  66. package/modules/hall-ui/public/watch.js +17 -9
  67. package/modules/ideas/blockers.js +44 -7
  68. package/modules/ideas/routes/blockers.js +12 -7
  69. package/modules/ideas/routes/inbox.js +2 -2
  70. package/modules/lifecycle/db.js +84 -17
  71. package/modules/lifecycle/github-push.js +37 -10
  72. package/modules/lifecycle/publish-reconciler.js +128 -31
  73. package/modules/lifecycle/routes/claims.js +10 -4
  74. package/modules/lifecycle/routes/dependencies.js +2 -2
  75. package/modules/lifecycle/routes/done-when.js +4 -4
  76. package/modules/lifecycle/routes/gate-approvals.js +9 -3
  77. package/modules/lifecycle/routes/goals.js +5 -5
  78. package/modules/lifecycle/routes/tasks.js +16 -16
  79. package/modules/lifecycle/routes/versions.js +13 -2
  80. package/modules/lifecycle/ship-card.js +38 -7
  81. package/modules/memory/routes/memory.js +2 -2
  82. package/modules/onboarding/routes/access-requests.js +3 -3
  83. package/modules/platform-identity/routes/projects.js +10 -6
  84. package/modules/platform-identity/routes/scouting.js +2 -2
  85. package/modules/provisioning/migrations/provisioning_004_onboard_mode.sql +30 -0
  86. package/modules/provisioning/provisioning.js +24 -6
  87. package/modules/provisioning/routes/provisioning.js +24 -6
  88. package/modules/security/artifact-scan/aggregate.js +133 -0
  89. package/modules/security/artifact-scan/detectors/capabilities.js +53 -0
  90. package/modules/security/artifact-scan/detectors/config-obfuscation.js +41 -0
  91. package/modules/security/artifact-scan/detectors/credentials.js +112 -0
  92. package/modules/security/artifact-scan/detectors/dependencies.js +115 -0
  93. package/modules/security/artifact-scan/detectors/hooks.js +116 -0
  94. package/modules/security/artifact-scan/detectors/injection.js +118 -0
  95. package/modules/security/artifact-scan/detectors/mcp.js +102 -0
  96. package/modules/security/artifact-scan/detectors/network.js +67 -0
  97. package/modules/security/artifact-scan/detectors/npm-lifecycle.js +67 -0
  98. package/modules/security/artifact-scan/detectors/permissions.js +91 -0
  99. package/modules/security/artifact-scan/detectors/shared.js +219 -0
  100. package/modules/security/artifact-scan/fence-local.js +99 -0
  101. package/modules/security/artifact-scan/fetch.js +330 -0
  102. package/modules/security/artifact-scan/floor.js +319 -0
  103. package/modules/security/artifact-scan/limits.js +66 -0
  104. package/modules/security/artifact-scan/manifest.js +203 -0
  105. package/modules/security/artifact-scan/mirror.js +158 -0
  106. package/modules/security/artifact-scan/quarantine.js +149 -0
  107. package/modules/security/artifact-scan/rebuild-spec.js +120 -0
  108. package/modules/security/artifact-scan/report.js +155 -0
  109. package/modules/security/artifact-scan/sanitize.js +317 -0
  110. package/modules/security/migrations/security_001_tool_scans.sql +145 -0
  111. package/modules/security/module.json +2 -2
  112. package/modules/security/routes/reports.js +11 -7
  113. package/modules/security/routes/scans.js +115 -0
  114. package/modules/security/scan-store.js +214 -0
  115. package/modules/security/tests/aggregate.mjs +283 -0
  116. package/modules/security/tests/artifact_scan.mjs +591 -0
  117. package/modules/security/tests/floor.mjs +549 -0
  118. package/modules/security/tests/mirror.mjs +350 -0
  119. package/modules/security/tests/sanitize_rebuild.mjs +499 -0
  120. package/modules/security/tests/scan_store.mjs +250 -0
  121. package/modules/security/tests/tool_scans_migration.mjs +116 -0
  122. package/modules/sessions/routes/sessions.js +6 -5
  123. package/package-lock.json +2 -2
  124. package/package.json +1 -1
  125. package/public-landing/create.html +13 -3
  126. package/scripts/gds/abandon.js +1 -1
  127. package/scripts/gds/audit-authorship.sh +6 -0
  128. package/scripts/gds/box.js +1 -1
  129. package/scripts/gds/claim.js +15 -0
  130. package/scripts/gds/cli-lib.js +16 -4
  131. package/scripts/gds/gating.js +28 -13
  132. package/scripts/gds/gen-api-docs.js +1 -1
  133. package/scripts/gds/goal.js +234 -0
  134. package/scripts/gds/init.js +70 -15
  135. package/scripts/gds/main-audit.js +80 -11
  136. package/scripts/gds/mirror-redact.js +6 -0
  137. package/scripts/gds/newcomer-floor.js +2 -2
  138. package/scripts/gds/provision.js +230 -94
  139. package/scripts/gds/run-unit-tests.js +9 -1
  140. package/scripts/gds/sandbox-stage.js +66 -9
  141. package/scripts/gds/search-ingest-md.js +1 -0
  142. package/scripts/gds/sequence.js +67 -8
  143. package/scripts/gds/ship.js +183 -50
  144. package/scripts/hall-preview/server.js +1 -1
  145. package/scripts/migrate.sh +5 -5
  146. package/src/bongos/auth.js +129 -27
  147. package/src/bongos/db-kernel.js +66 -5
  148. package/src/bongos/db.js +6 -7
  149. package/src/bongos/github-repos.js +19 -7
  150. package/src/bongos/goal-scope-check.js +1 -1
  151. package/src/bongos/module-scope-map.js +3 -1
  152. package/src/bongos/permission-path-check.js +1 -1
  153. package/src/bongos/route-rank-check.js +73 -30
  154. package/src/bongos/routes/audit-log.js +4 -2
  155. package/src/bongos/routes/auth.js +8 -4
  156. package/src/bongos/routes/backup.js +7 -4
  157. package/src/bongos/routes/builders.js +23 -11
  158. package/src/bongos/routes/github.js +15 -4
  159. package/src/bongos/routes/llm-cache.js +5 -2
  160. package/src/bongos/routes/modules.js +9 -5
  161. package/src/bongos/routes/security.js +21 -12
  162. package/src/bongos/serve-internal.js +22 -7
  163. package/src/module-api.js +86 -13
  164. package/src/platform-server.js +14 -0
  165. package/tests/api_client.mjs +18 -2
  166. package/tests/api_path_404.mjs +3 -0
  167. package/tests/art_stage.mjs +2 -1
  168. package/tests/atlas.mjs +32 -4
  169. package/tests/auth_admission_gate.mjs +17 -5
  170. package/tests/auth_error_brand.mjs +41 -21
  171. package/tests/auth_resolve_failure.mjs +155 -0
  172. package/tests/blocker_link.mjs +88 -0
  173. package/tests/bongos_downloads.mjs +2 -1
  174. package/tests/box_dns_repoint.mjs +2 -0
  175. package/tests/box_ship_permissions.mjs +2 -0
  176. package/tests/box_terminal_ssrf.mjs +23 -17
  177. package/tests/claim_error_surface.mjs +23 -0
  178. package/tests/claude_materialize.mjs +4 -0
  179. package/tests/cli_box_scope.mjs +40 -0
  180. package/tests/cloud_bongos_pack.mjs +34 -4
  181. package/tests/conductor.mjs +2 -1
  182. package/tests/criterion_authoring_gate.mjs +28 -5
  183. package/tests/currency_label.mjs +10 -1
  184. package/tests/deploy_instance.mjs +2 -0
  185. package/tests/devbox_downloads.mjs +2 -1
  186. package/tests/display_name.mjs +95 -6
  187. package/tests/eviction_policy.mjs +2 -1
  188. package/tests/file_map.mjs +10 -0
  189. package/tests/first_admin_bootstrap.mjs +10 -2
  190. package/tests/first_run_engine_check.mjs +2 -1
  191. package/tests/fitness.mjs +26 -6
  192. package/tests/gate_approvals.mjs +15 -2
  193. package/tests/github_push_land_proof.mjs +50 -4
  194. package/tests/github_repos_helpers.mjs +30 -5
  195. package/tests/github_token_store.mjs +23 -0
  196. package/tests/goal_abuse_matrix.mjs +13 -3
  197. package/tests/goal_cli.mjs +89 -0
  198. package/tests/governance_abuse_matrix.mjs +386 -0
  199. package/tests/governance_fold.mjs +156 -0
  200. package/tests/governance_fold_bench.mjs +50 -0
  201. package/tests/governance_live_proof.mjs +201 -0
  202. package/tests/governance_page_gates.mjs +21 -9
  203. package/tests/governance_parity.mjs +11 -2
  204. package/tests/governance_require_permission.mjs +125 -1
  205. package/tests/governance_routes.mjs +334 -0
  206. package/tests/grader.mjs +7 -3
  207. package/tests/hall_nav.mjs +14 -4
  208. package/tests/helpers.mjs +73 -0
  209. package/tests/hook_core_resolve.mjs +2 -1
  210. package/tests/host_topology_skips.mjs +97 -0
  211. package/tests/infra_exec_paths.mjs +14 -4
  212. package/tests/init.mjs +128 -0
  213. package/tests/known_failing_ratchet.mjs +89 -0
  214. package/tests/lifecycle-card.mjs +2 -1
  215. package/tests/main_audit.mjs +72 -1
  216. package/tests/memory_isolation.mjs +56 -9
  217. package/tests/migrate_root_resolution.mjs +1 -1
  218. package/tests/mirror_redact.mjs +19 -0
  219. package/tests/module_api.mjs +3 -1
  220. package/tests/module_loader.mjs +4 -0
  221. package/tests/modules.mjs +35 -7
  222. package/tests/modules_route.mjs +29 -5
  223. package/tests/onboarding_observability.mjs +49 -11
  224. package/tests/onboarding_route_signals.mjs +1 -0
  225. package/tests/one_active_claim_per_session.mjs +80 -0
  226. package/tests/pre_compact.mjs +2 -1
  227. package/tests/preview_server.mjs +2 -1
  228. package/tests/profile_route.mjs +1 -0
  229. package/tests/provision.mjs +170 -0
  230. package/tests/provisioning_onboard_mode.mjs +180 -0
  231. package/tests/publish_manifest.mjs +16 -3
  232. package/tests/publish_reconciler.mjs +181 -10
  233. package/tests/rank_tier_single_source.mjs +205 -0
  234. package/tests/recall_hints.mjs +2 -1
  235. package/tests/repo_map.mjs +4 -0
  236. package/tests/route_permission_check.mjs +14 -5
  237. package/tests/rubric_fixtures.mjs +3 -0
  238. package/tests/run_routine_two_root.mjs +2 -0
  239. package/tests/sandbox_stage.mjs +69 -7
  240. package/tests/search_ingest.mjs +7 -0
  241. package/tests/security_docs.mjs +28 -6
  242. package/tests/sequence.mjs +64 -0
  243. package/tests/session-cards.mjs +2 -1
  244. package/tests/session_start_freshness.mjs +2 -1
  245. package/tests/ship_broadcast_server.mjs +63 -1
  246. package/tests/ship_card.mjs +66 -0
  247. package/tests/ship_ci_deploy.mjs +66 -1
  248. package/tests/ship_smoke_gate.mjs +76 -0
  249. package/tests/versions_route.mjs +15 -0
  250. package/tests/workflow_exec_paths.mjs +16 -4
  251. package/tests/worktree_guard.mjs +2 -1
package/.bongos-core.json CHANGED
@@ -2,22 +2,22 @@
2
2
  "artifact": "bongos-core",
3
3
  "manifest_schema": 1,
4
4
  "generator": "scripts/gds/package-core.js",
5
- "core_version": "1.18.19",
6
- "core_contract": "1.18.19",
7
- "source_commit": "ccda86b3b4fe68b8a59dd1d70bf73bfec9682642",
5
+ "core_version": "1.19.2",
6
+ "core_contract": "1.19.2",
7
+ "source_commit": "8f1fb3183aa242e5ee3d48edc8c30e908772074f",
8
8
  "source_ref": "HEAD",
9
- "built_at": "2026-08-08T18:02:27.307Z",
9
+ "built_at": "2026-08-08T18:43:18.345Z",
10
10
  "redaction": {
11
11
  "model": "docs-redacted+functional-verbatim",
12
- "docs_redacted": 275,
12
+ "docs_redacted": 283,
13
13
  "agent_docs_stubbed": 21,
14
- "functional_verbatim": 1141,
14
+ "functional_verbatim": 1197,
15
15
  "rules": 3,
16
16
  "gate_literals": 3,
17
17
  "gate": "passed"
18
18
  },
19
- "file_count": 1437,
20
- "tree_sha256": "6e3052888f6a30b9440eeaefee370fa8f296a9345ab9377935c703346d150f3c",
19
+ "file_count": 1501,
20
+ "tree_sha256": "1aebd39558b67cc2836d00f9d5e4e038b92a9769b93fc1ef2ffea23caf25c5c3",
21
21
  "files": [
22
22
  {
23
23
  "path": ".claude/skills/blocker-review/SKILL.md",
@@ -37,12 +37,12 @@
37
37
  {
38
38
  "path": ".claude/skills/builder-box/SKILL.md",
39
39
  "mode": "0000644",
40
- "sha256": "0aabfc07fc71050a6a240ff8e203c9017d9645e2dae5a669fa05284fd9ebee4e"
40
+ "sha256": "a24e22a6e7102654d71a255210b260d2c2c0dd9047a5bab128fa3e44c6b511c9"
41
41
  },
42
42
  {
43
43
  "path": ".claude/skills/builder-claim/SKILL.md",
44
44
  "mode": "0000644",
45
- "sha256": "1d2f732a75b0c91539dc5439d8d2559cc8248743c8c3aa2fbe373aee5aa6575b"
45
+ "sha256": "fed2f54639b98586533fe3482e41493bb07dfcf28421cb1e25b6d29fe9abe900"
46
46
  },
47
47
  {
48
48
  "path": ".claude/skills/builder-connect/SKILL.md",
@@ -147,7 +147,7 @@
147
147
  {
148
148
  "path": ".claude/skills/goal-create/SKILL.md",
149
149
  "mode": "0000644",
150
- "sha256": "a7e3cfb115fc14072cc326771e5054f2c5356c0a67655469d06eabd3c6021d70"
150
+ "sha256": "af3dedaff2c831c4c532644edc2e2e3af012fd359ab02d66b81339d327bd6c43"
151
151
  },
152
152
  {
153
153
  "path": ".claude/skills/goal-review/SKILL.md",
@@ -157,7 +157,7 @@
157
157
  {
158
158
  "path": ".claude/skills/idea-triage/SKILL.md",
159
159
  "mode": "0000644",
160
- "sha256": "efa11025425b160cb46f8b31117c5283e5e3162b75b8758f7fa913a89fb8f8cb"
160
+ "sha256": "deeb1f067f4598207782b6b99c03a25f184cbb44421f7f93cfd680f4b3353acf"
161
161
  },
162
162
  {
163
163
  "path": ".claude/skills/ideate/SKILL.md",
@@ -207,7 +207,7 @@
207
207
  {
208
208
  "path": ".claude/skills/planning-session/SKILL.md",
209
209
  "mode": "0000644",
210
- "sha256": "1863f07fcb71209024763076c7836afd29c1d31150033ebc64970c47e8e81b6f"
210
+ "sha256": "f67391e1ef814d8577b31c89d53df83b911bc09b3db2ad6301547c351de9815f"
211
211
  },
212
212
  {
213
213
  "path": ".claude/skills/priority-session/SKILL.md",
@@ -224,6 +224,11 @@
224
224
  "mode": "0000644",
225
225
  "sha256": "d54016004fb756a9c6e2da17b08dec88d341f8a4de18116f12586165ea18b770"
226
226
  },
227
+ {
228
+ "path": ".claude/skills/scan-before-install/SKILL.md",
229
+ "mode": "0000644",
230
+ "sha256": "efab6aa06f093f37ee2a99c03a39ad13ce7a3431614a2baffa91683740d7c272"
231
+ },
227
232
  {
228
233
  "path": ".claude/skills/session-handoff/SKILL.md",
229
234
  "mode": "0000644",
@@ -327,12 +332,12 @@
327
332
  {
328
333
  "path": "clients/bongos-client/README.md",
329
334
  "mode": "0000644",
330
- "sha256": "126b112de4714dcaa928aa941a57a70f7228a67833f11ce1065b370eba86a8f7"
335
+ "sha256": "8aeb1aaf87db169788d5e17a671846526a1c89f184ee6ff0425730ecea71fb8a"
331
336
  },
332
337
  {
333
338
  "path": "clients/bongos-client/bongos-client.global.js",
334
339
  "mode": "0000644",
335
- "sha256": "412fba10e0fa5cf4c55870cdd9b1aee49861572479834dc15b6f3ee201769545"
340
+ "sha256": "724bfb1a3647a316226f32b1b62f56e30dba8df28a2ccfadb1dcbaaff65e7197"
336
341
  },
337
342
  {
338
343
  "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -342,17 +347,17 @@
342
347
  {
343
348
  "path": "clients/bongos-client/index.cjs",
344
349
  "mode": "0000644",
345
- "sha256": "1e1655619fe002bc783e5cfd29e45d9993acb8d836f73bcfe783db4874c753f5"
350
+ "sha256": "e4efb5ad8e209a5c27c9a85f42e920915a7d7b91491197b03a52f85091319247"
346
351
  },
347
352
  {
348
353
  "path": "clients/bongos-client/index.d.ts",
349
354
  "mode": "0000644",
350
- "sha256": "05f01c553d96ce974caa2874af8fff566d8f1367555676e4f5b557f0cf280556"
355
+ "sha256": "2e321ea71ad8b24a5562b97dc76bedae62e3a313fd8cbb72f415fa575bd686a1"
351
356
  },
352
357
  {
353
358
  "path": "clients/bongos-client/index.mjs",
354
359
  "mode": "0000644",
355
- "sha256": "fdfd93367351ec2a22ba13f60146fd8721631751aa5c96c2c05f9b89c69692a2"
360
+ "sha256": "ff501fe93dd31785d2acb8e55c9b664128065d7acf2862fb91af0800274619de"
356
361
  },
357
362
  {
358
363
  "path": "clients/bongos-client/package.json",
@@ -497,7 +502,7 @@
497
502
  {
498
503
  "path": "docs/adr/0020-security-model-public-stub.md",
499
504
  "mode": "0000644",
500
- "sha256": "b7dd96481b423e80f40becc964f96f5b2f10298134ca0485bc1b62a32b5aa647"
505
+ "sha256": "822b6757a04940d7302c443d1dff52f9cc9fb1ce1638c727b521a215b9afba35"
501
506
  },
502
507
  {
503
508
  "path": "docs/adr/0021-per-builder-skill-model-preferences.md",
@@ -927,7 +932,7 @@
927
932
  {
928
933
  "path": "docs/adr/0097-one-active-claim-per-session-and-worktree-binding.md",
929
934
  "mode": "0000644",
930
- "sha256": "3267d88a62cfa36992f039bb05bb6eb775cd0601e3e9d921e36a43f2b012a261"
935
+ "sha256": "9613664f0f3906aeda7c384c3a6dfaacb8a0a048b0010da8a011831846d7911e"
931
936
  },
932
937
  {
933
938
  "path": "docs/adr/0097-retroactive-reward-backfill.md",
@@ -1157,7 +1162,7 @@
1157
1162
  {
1158
1163
  "path": "docs/adr/0144-devbox-rehome-onto-cloudbongos-plane.md",
1159
1164
  "mode": "0000644",
1160
- "sha256": "84d6de7e511fcab4fc1d687e8a010fe22b4a0175b16516601ad85698b859f590"
1165
+ "sha256": "e4ddc6e640919691a6f6143493158ee080bb6e9edb9e6bf0b8cc24832fb9c3b2"
1161
1166
  },
1162
1167
  {
1163
1168
  "path": "docs/adr/0144-federated-single-logout-backchannel.md",
@@ -1202,7 +1207,7 @@
1202
1207
  {
1203
1208
  "path": "docs/adr/0151-governance-permissions-as-atom-ranks-as-roles.md",
1204
1209
  "mode": "0000644",
1205
- "sha256": "1ac1500ed56858f1a46d2c1624daee36395a656c17fff5b59164d2cd463825a0"
1210
+ "sha256": "20fcf384ddef52e0ac09e52372cbd532ea3a4c40705dba7a84e48891a5c14256"
1206
1211
  },
1207
1212
  {
1208
1213
  "path": "docs/adr/0152-landing-gate-served-by-the-core-app.md",
@@ -1224,25 +1229,55 @@
1224
1229
  "mode": "0000644",
1225
1230
  "sha256": "db0e3d371d0172b18f7117a4330b66efc310cb3436bb30f701991c01254ad9c3"
1226
1231
  },
1232
+ {
1233
+ "path": "docs/adr/0155-adopt-private-repo-widen-oauth-scope.md",
1234
+ "mode": "0000644",
1235
+ "sha256": "5f770123e7867476e79821297d3d5e245971e72fd4793569c673e07fde6df03f"
1236
+ },
1237
+ {
1238
+ "path": "docs/adr/0156-user-set-display-name-wins.md",
1239
+ "mode": "0000644",
1240
+ "sha256": "6c6c55670e701f2edfc5f9ea0745ec03bbfa9d2d21f838c83130bc4457e161c9"
1241
+ },
1242
+ {
1243
+ "path": "docs/adr/0157-archon-is-rank-and-identity-only.md",
1244
+ "mode": "0000644",
1245
+ "sha256": "72aae2c4aea03a4a53a216e7eca6a14867d06445ee9dae31f4f193d1fe1823d7"
1246
+ },
1247
+ {
1248
+ "path": "docs/adr/0158-choke-point-verdict-taxonomy.md",
1249
+ "mode": "0000644",
1250
+ "sha256": "47e53b1f3bc5a45333c5687e757d94d09b5e7fbc4a68dff10ccf92ed7cf0550a"
1251
+ },
1252
+ {
1253
+ "path": "docs/adr/0159-merge-gate-reconciliation.md",
1254
+ "mode": "0000644",
1255
+ "sha256": "92ad8e0c4f52495524b8befdb25441bd348557864b90a21c932d9f117ac6968a"
1256
+ },
1257
+ {
1258
+ "path": "docs/adr/0160-main-audit-repo-verifiable-caller.md",
1259
+ "mode": "0000644",
1260
+ "sha256": "3a23a8e64dc258397aea1ecff0c4aa75bf05067be9e1c96c678bf95d66c0c0fb"
1261
+ },
1227
1262
  {
1228
1263
  "path": "docs/adr/README.md",
1229
1264
  "mode": "0000644",
1230
- "sha256": "f4a447100bc8fbe60d8a99cf34731d58fd52f18de0f03a2069231642b220ce8c"
1265
+ "sha256": "99b095e94122a721f5fe45def82486d7ebfe78b8c530095b7e04f463e4bb1e56"
1231
1266
  },
1232
1267
  {
1233
1268
  "path": "docs/api-reference.md",
1234
1269
  "mode": "0000644",
1235
- "sha256": "6460dbea23438f95217d47f9c4fb04048f9d43228f8830bb84c316838c19fff2"
1270
+ "sha256": "c2e909c0f62a643dc2ff4c705cc6ffccf279dcc588945d1b39147d09d70c5f5b"
1236
1271
  },
1237
1272
  {
1238
1273
  "path": "docs/api/openapi.json",
1239
1274
  "mode": "0000644",
1240
- "sha256": "81d074819923960112e52225e29f097a3dd32ae735ecb3dfe119471d73f4ef3c"
1275
+ "sha256": "43b270dbfaa283c2c793d8f779b497cfd0c6da4f4a4cef07f4516d1c4e582946"
1241
1276
  },
1242
1277
  {
1243
1278
  "path": "docs/architecture.md",
1244
1279
  "mode": "0000644",
1245
- "sha256": "a2cbc583dc9df58741d3c4648956ef4309479e71a32aa58d7ec20cd4828fb5c2"
1280
+ "sha256": "3967a6a48afbbd5e71d486f4f518f768fc3e3000ccd75ee310406a93977a3489"
1246
1281
  },
1247
1282
  {
1248
1283
  "path": "docs/branding-contract.md",
@@ -1257,7 +1292,7 @@
1257
1292
  {
1258
1293
  "path": "docs/canonical-permissions.md",
1259
1294
  "mode": "0000644",
1260
- "sha256": "bc1aaadb046dd68c035d72436bc04e476605bad53e874ce97ab92b8b95704bc0"
1295
+ "sha256": "cecb0aba0f0276831422a82e42a8c8473479ad6a59dcb180e38795c91f22d6e2"
1261
1296
  },
1262
1297
  {
1263
1298
  "path": "docs/design-contract.md",
@@ -1297,12 +1332,12 @@
1297
1332
  {
1298
1333
  "path": "docs/design/vanilla-hall-ui-redesign-scope.md",
1299
1334
  "mode": "0000644",
1300
- "sha256": "69007ac56c0567d135440ebc07b0654230192f34175c95af6c3275896749cc22"
1335
+ "sha256": "7e4b465c5b2e61759755a7a45d50171ed88f44095c61f409c4e28b9a7ed4fc0b"
1301
1336
  },
1302
1337
  {
1303
1338
  "path": "docs/file-map.md",
1304
1339
  "mode": "0000644",
1305
- "sha256": "1a8be1b1cc1009877c4853fd3a3c868af27fb0bc3d0b5afb11c5762d80903626"
1340
+ "sha256": "4907ddeca728a5060f25f091f325daac85120cefb41f49aa67a7291f2c20d1c8"
1306
1341
  },
1307
1342
  {
1308
1343
  "path": "docs/handoff-template.md",
@@ -1352,7 +1387,7 @@
1352
1387
  {
1353
1388
  "path": "docs/onboarding/diagrams/assertions.json",
1354
1389
  "mode": "0000644",
1355
- "sha256": "93749def4615356460754b2974a8125066a8e33b4d9081752820ea1c76d613b7"
1390
+ "sha256": "d7a8120a3a2ad20f1be87da516a3f475b03b2a1f961499f7cbb8d77a1a621886"
1356
1391
  },
1357
1392
  {
1358
1393
  "path": "docs/onboarding/diagrams/puppeteer-config.json",
@@ -1409,6 +1444,11 @@
1409
1444
  "mode": "0000644",
1410
1445
  "sha256": "7a2891bcf89ba0ff7f718d4255600d68202518ab3178fd74ba686eeb312a097d"
1411
1446
  },
1447
+ {
1448
+ "path": "docs/recipes/core-release-pipeline.md",
1449
+ "mode": "0000644",
1450
+ "sha256": "e9a61435d70b81d634a37686c06e27dfe49f52b6dced7f04420c49e0413f6cb9"
1451
+ },
1412
1452
  {
1413
1453
  "path": "docs/recipes/devbox-app-release.md",
1414
1454
  "mode": "0000644",
@@ -1482,17 +1522,17 @@
1482
1522
  {
1483
1523
  "path": "docs/recipes/packaging-the-core.md",
1484
1524
  "mode": "0000644",
1485
- "sha256": "ee80d178b14fdaff7a19eb340767325cd93c48b17676c602ae9bf72e0060ae91"
1525
+ "sha256": "98852a97d2a8102d723ecc7be21125025462841534badd8222513e1f8e62e6d3"
1486
1526
  },
1487
1527
  {
1488
1528
  "path": "docs/recipes/parallel-goal-waves.md",
1489
1529
  "mode": "0000644",
1490
- "sha256": "a311e824961b6f5d74e07e7d54db65d9c5fa13f3b3c6298c5c4db832f5c38f2a"
1530
+ "sha256": "0ce5b2395e8e4a78a58af68e45cc25d1ca10a5ddc6cc349e2d2b300a85a83a68"
1491
1531
  },
1492
1532
  {
1493
1533
  "path": "docs/recipes/private-npm-distribution.md",
1494
1534
  "mode": "0000644",
1495
- "sha256": "b0dc53415d889c21c2549dc5b21041f25f72ac5ca1547b984ac6a35632945744"
1535
+ "sha256": "cfc5b14e966f614bbee72ff125b8db028a8e587f5457fd1cfc7172a922130518"
1496
1536
  },
1497
1537
  {
1498
1538
  "path": "docs/recipes/search-index-ingestion.md",
@@ -1522,7 +1562,7 @@
1522
1562
  {
1523
1563
  "path": "docs/recipes/upgrading-the-core.md",
1524
1564
  "mode": "0000644",
1525
- "sha256": "bafef1be5b5369bbe7ef4f41c31b7c1a754dcc3b93d7bd7d7eb1943e06083caf"
1565
+ "sha256": "dcf0520928832e4a8e723c830a5d8f5e1ae1a0fcef16ff21345aabf715e142f6"
1526
1566
  },
1527
1567
  {
1528
1568
  "path": "docs/recipes/work-on-a-task-from-your-dev-box.md",
@@ -2129,6 +2169,16 @@
2129
2169
  "mode": "0000644",
2130
2170
  "sha256": "4a3a23cd95959f2666deeaeaf166d6108df9c812681ab14687823f1c6867a4a0"
2131
2171
  },
2172
+ {
2173
+ "path": "migrations/core_197_display_name_source.sql",
2174
+ "mode": "0000644",
2175
+ "sha256": "07dd609ded1dac819a5a6baf7c8401fc4f231d4f50abcd4bf0fede4cfeefb0b3"
2176
+ },
2177
+ {
2178
+ "path": "migrations/core_204_rekey_active_claim_per_session_worktree.sql",
2179
+ "mode": "0000644",
2180
+ "sha256": "614def05feaeefe06de81de73523bbc42da4ffd095a8a71ad4f80af7bf61d878"
2181
+ },
2132
2182
  {
2133
2183
  "path": "modules/autonomy/CLAUDE.md",
2134
2184
  "mode": "0000644",
@@ -2152,7 +2202,7 @@
2152
2202
  {
2153
2203
  "path": "modules/autonomy/routes/autonomy.js",
2154
2204
  "mode": "0000644",
2155
- "sha256": "db063ae3a129146ab99dd2a7d27b18ef2261ddbdacb4b40233aee10dccc34af1"
2205
+ "sha256": "aa0c84ab532bbc946d80cf625d130b9ef2ba8e2e54cd320945aa1dda6b210488"
2156
2206
  },
2157
2207
  {
2158
2208
  "path": "modules/builder-settings/CLAUDE.md",
@@ -2167,7 +2217,7 @@
2167
2217
  {
2168
2218
  "path": "modules/builder-settings/db.js",
2169
2219
  "mode": "0000644",
2170
- "sha256": "e283f0566644ed3591ae76f923ae555ddef5c4ce3b6c674576e06d7c14f4e4af"
2220
+ "sha256": "a7ff0f8d78bf5e54149841e4ab2c76555ba25b177b82bd27baba62093d9a098f"
2171
2221
  },
2172
2222
  {
2173
2223
  "path": "modules/builder-settings/display-name.js",
@@ -2447,7 +2497,7 @@
2447
2497
  {
2448
2498
  "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
2449
2499
  "mode": "0000644",
2450
- "sha256": "1e1655619fe002bc783e5cfd29e45d9993acb8d836f73bcfe783db4874c753f5"
2500
+ "sha256": "e4efb5ad8e209a5c27c9a85f42e920915a7d7b91491197b03a52f85091319247"
2451
2501
  },
2452
2502
  {
2453
2503
  "path": "modules/dev-box/app/test/unit.mjs",
@@ -2487,7 +2537,7 @@
2487
2537
  {
2488
2538
  "path": "modules/dev-box/routes/box.js",
2489
2539
  "mode": "0000644",
2490
- "sha256": "7dde5da0323a8f60e86feba0b3b8c9b65bd8f87e4e894ee758a652cfe8fa498a"
2540
+ "sha256": "a9f51c0ddc4fc8c558d0c6dde77ffcd3e1b1262a6f14f93c88e1bb3e9093538d"
2491
2541
  },
2492
2542
  {
2493
2543
  "path": "modules/discord/CLAUDE.md",
@@ -2497,7 +2547,7 @@
2497
2547
  {
2498
2548
  "path": "modules/discord/auth.js",
2499
2549
  "mode": "0000644",
2500
- "sha256": "238959baabab5387282cc8e3461180f068deaea2d502009ba032afd4ed1f18a6"
2550
+ "sha256": "a3261a569a381ed4b19f6f5d32598a9cec09f62be51533fd6b7c5272d53b63d3"
2501
2551
  },
2502
2552
  {
2503
2553
  "path": "modules/discord/bug-attachments.js",
@@ -2572,12 +2622,12 @@
2572
2622
  {
2573
2623
  "path": "modules/discord/routes/discord.js",
2574
2624
  "mode": "0000644",
2575
- "sha256": "73d3fee54f1b8fc760e6ba6d2154531f7cf38067f6f9dc4c35e2b9a5b133e13c"
2625
+ "sha256": "6c3d77cb86ea3f9328de88c8ddf02a1af95e3c95ed92559bf380f627f7f59f48"
2576
2626
  },
2577
2627
  {
2578
2628
  "path": "modules/discord/ship-broadcast.js",
2579
2629
  "mode": "0000644",
2580
- "sha256": "d5672c0a6f141baa4cf6dbe5e8d8b7695233e04ce279856eaad9b6d8452c6767"
2630
+ "sha256": "5c1273de955d5559e549603d7c60a6987f88696631c7536c429c04d55c2fdf5c"
2581
2631
  },
2582
2632
  {
2583
2633
  "path": "modules/discord/webhook.js",
@@ -2657,7 +2707,7 @@
2657
2707
  {
2658
2708
  "path": "modules/governance/catalog.js",
2659
2709
  "mode": "0000644",
2660
- "sha256": "7ae35f374d8e6e591ef461b495a9f61d775d6f30397403f7e605515cccb3f819"
2710
+ "sha256": "b5d09300e2dc63704c533a62e51022f7a5ccf90efc477cb4f0878479a704c7ce"
2661
2711
  },
2662
2712
  {
2663
2713
  "path": "modules/governance/config.js",
@@ -2667,7 +2717,7 @@
2667
2717
  {
2668
2718
  "path": "modules/governance/db.js",
2669
2719
  "mode": "0000644",
2670
- "sha256": "56d3190ba4ea3a41019ece6054ecbc719cd1cbd950e7428e734d7703161f502f"
2720
+ "sha256": "fa587b97acc0668ba55ef8329e8b888a45f8c34aa7e93cbf8f6307956f5560a1"
2671
2721
  },
2672
2722
  {
2673
2723
  "path": "modules/governance/migrations/governance_001_tables.sql",
@@ -2694,6 +2744,16 @@
2694
2744
  "mode": "0000644",
2695
2745
  "sha256": "fdbfcd598f6e983207d7a745e5c92540cd28f7a65dc3c9b1b657bb8c8b6435fc"
2696
2746
  },
2747
+ {
2748
+ "path": "modules/governance/migrations/governance_006_version_create.sql",
2749
+ "mode": "0000644",
2750
+ "sha256": "6675a71459ea9f7905887b7fb7f34fa7936d86c777e5ddcb17363fc60989e1cd"
2751
+ },
2752
+ {
2753
+ "path": "modules/governance/migrations/governance_007_delegate_archon_ops_to_metic.sql",
2754
+ "mode": "0000644",
2755
+ "sha256": "cb532aeed42e0b377f0eefa3047b169ca8dff5c13bd8061ce82473172926564f"
2756
+ },
2697
2757
  {
2698
2758
  "path": "modules/governance/module.json",
2699
2759
  "mode": "0000644",
@@ -2722,7 +2782,7 @@
2722
2782
  {
2723
2783
  "path": "modules/governance/routes/governance.js",
2724
2784
  "mode": "0000644",
2725
- "sha256": "0afebe03b6f83c0435ea09a38bf8e94dadfa34979c6e9cfaafef477bb261a371"
2785
+ "sha256": "6f600bb237009064f18eae7af140cd8376cf5770ff7efd89d0e4071bade9eb4d"
2726
2786
  },
2727
2787
  {
2728
2788
  "path": "modules/governance/routes/role-sync.js",
@@ -2777,7 +2837,7 @@
2777
2837
  {
2778
2838
  "path": "modules/grading/grader-workers/index.js",
2779
2839
  "mode": "0000644",
2780
- "sha256": "4aed41e7e724a40550a3231a2f0bd20378eed78b3fa37774ae4d60b3da6446c8"
2840
+ "sha256": "80c4bbb043994fcade7a4ff33cd368a1c20ca895e92e36db2f672e9f7553f421"
2781
2841
  },
2782
2842
  {
2783
2843
  "path": "modules/grading/grader-workers/narc.js",
@@ -2932,7 +2992,7 @@
2932
2992
  {
2933
2993
  "path": "modules/hall-ui/public/gate.js",
2934
2994
  "mode": "0000644",
2935
- "sha256": "4dc84717529a727086b6778c0901c6a6b2dc7f8eecb500a558604eb9ec5f6c28"
2995
+ "sha256": "a70fd388f3e1df5f759dbcc0df7bda4d4492906f06c0a5bd9fab712cda29461e"
2936
2996
  },
2937
2997
  {
2938
2998
  "path": "modules/hall-ui/public/goal-inbox.js",
@@ -2942,7 +3002,7 @@
2942
3002
  {
2943
3003
  "path": "modules/hall-ui/public/goals-page.js",
2944
3004
  "mode": "0000644",
2945
- "sha256": "d338a81d1a9928e6a5e86e2a8c3970c2649916baa467d225f2b9800a75dbb77f"
3005
+ "sha256": "bacccdcedf5abfe57ebe6ae4f521f00dace123c11509554b2ef6c934fde2afb4"
2946
3006
  },
2947
3007
  {
2948
3008
  "path": "modules/hall-ui/public/goals.css",
@@ -2959,6 +3019,21 @@
2959
3019
  "mode": "0000644",
2960
3020
  "sha256": "9cdbc14c1709dcc26fe9b8c85b2bfd08685a2925c9855758ca8e758455d1bc5c"
2961
3021
  },
3022
+ {
3023
+ "path": "modules/hall-ui/public/governance.css",
3024
+ "mode": "0000644",
3025
+ "sha256": "9b9a442db7091d16e5db948eb3b3eabf2a8e3c29bac608e68fa79c08d05fa76a"
3026
+ },
3027
+ {
3028
+ "path": "modules/hall-ui/public/governance.html",
3029
+ "mode": "0000644",
3030
+ "sha256": "0c4b49a863e98199ee95a29910eac003239f5b6319483928a7aee8d8f06830bb"
3031
+ },
3032
+ {
3033
+ "path": "modules/hall-ui/public/governance.js",
3034
+ "mode": "0000644",
3035
+ "sha256": "bb49a7f64dfe11f9192a6b22e9cf9fedabe0f270f81d5283e8fb56e12a634f77"
3036
+ },
2962
3037
  {
2963
3038
  "path": "modules/hall-ui/public/hall-kit.js",
2964
3039
  "mode": "0000644",
@@ -2982,7 +3057,7 @@
2982
3057
  {
2983
3058
  "path": "modules/hall-ui/public/harbor.js",
2984
3059
  "mode": "0000644",
2985
- "sha256": "7bd9eed7c846ddad74e6aac3ac651671306680ae2fa50813d27b669cd87d9520"
3060
+ "sha256": "0dbe5085c9672303fdb30c3396d5ce145a71f67c11166427d4a980586f6246f9"
2986
3061
  },
2987
3062
  {
2988
3063
  "path": "modules/hall-ui/public/index.html",
@@ -2992,7 +3067,7 @@
2992
3067
  {
2993
3068
  "path": "modules/hall-ui/public/instances-panel.js",
2994
3069
  "mode": "0000644",
2995
- "sha256": "50d1d95658ba7fa6b705ce173f3d3ee8545f65c716e4112840e4715776915068"
3070
+ "sha256": "d42ddfb865d8fa928286be158a19a93299050754366b2d625fe2f92dbbd75ade"
2996
3071
  },
2997
3072
  {
2998
3073
  "path": "modules/hall-ui/public/md-reader.js",
@@ -3027,7 +3102,7 @@
3027
3102
  {
3028
3103
  "path": "modules/hall-ui/public/new-project-wizard.js",
3029
3104
  "mode": "0000644",
3030
- "sha256": "16b5ef8bce6dc0636a9221d4c75f21c77aa4dafa5b3d372d50d8527c95063794"
3105
+ "sha256": "ebd0192e70e01cbf36be4eb977039c2368cc325a6cd64f8de9c7530d25f357c4"
3031
3106
  },
3032
3107
  {
3033
3108
  "path": "modules/hall-ui/public/not-ready.html",
@@ -3054,6 +3129,16 @@
3054
3129
  "mode": "0000644",
3055
3130
  "sha256": "f01a585277f24dafb12caa39d4b475cd65e61cda50ba918c66941a20916fd8b1"
3056
3131
  },
3132
+ {
3133
+ "path": "modules/hall-ui/public/people.html",
3134
+ "mode": "0000644",
3135
+ "sha256": "22de52171687542636cf2635d5b96bc207abceb8eceab02e2b959a572c9efbd5"
3136
+ },
3137
+ {
3138
+ "path": "modules/hall-ui/public/people.js",
3139
+ "mode": "0000644",
3140
+ "sha256": "5439654ddbc1ad6be7944dc198eca5094ec5978ad3b73b7196215ad3dc781dca"
3141
+ },
3057
3142
  {
3058
3143
  "path": "modules/hall-ui/public/primer.css",
3059
3144
  "mode": "0000644",
@@ -3072,12 +3157,12 @@
3072
3157
  {
3073
3158
  "path": "modules/hall-ui/public/profile.html",
3074
3159
  "mode": "0000644",
3075
- "sha256": "e3246b23a2320e1d84421399b918e2cef1d1b6b2fd1a7d1ea51bdc3fe2ce1430"
3160
+ "sha256": "cd3148ae6a22d7e7fff8e0b4a07aed2fe6d27b4e0b6e5b450bd2a63b3f078713"
3076
3161
  },
3077
3162
  {
3078
3163
  "path": "modules/hall-ui/public/profile.js",
3079
3164
  "mode": "0000644",
3080
- "sha256": "b5ac5d2011390a97940e7990dc8867b23796a6fb282bec90477fa05332e24680"
3165
+ "sha256": "be57f192368280ac1ae2b0b820f89daf59512f9f89d9ad23414c42cbf09a462e"
3081
3166
  },
3082
3167
  {
3083
3168
  "path": "modules/hall-ui/public/ranks.html",
@@ -3127,7 +3212,7 @@
3127
3212
  {
3128
3213
  "path": "modules/hall-ui/public/sessions.js",
3129
3214
  "mode": "0000644",
3130
- "sha256": "b3465ea8ebb5f8b27e4fa3daa3b4ec6e93bd60ebef6592dc506310c51eeaeae8"
3215
+ "sha256": "e99046a2c0e2cb6ce9f05711ddbe6ed9d2e7536086dca16496ef0e5e8cb9a041"
3131
3216
  },
3132
3217
  {
3133
3218
  "path": "modules/hall-ui/public/settings.css",
@@ -3147,7 +3232,7 @@
3147
3232
  {
3148
3233
  "path": "modules/hall-ui/public/shell.js",
3149
3234
  "mode": "0000644",
3150
- "sha256": "88599e272c4f943512c71b5c61692d6e544cc9a012e4938177f2316ebbbf542e"
3235
+ "sha256": "00a356cf20df11fd195c8ecce619ba5e4bc4138ccb3b66ebdef1522fa3f56c8e"
3151
3236
  },
3152
3237
  {
3153
3238
  "path": "modules/hall-ui/public/style.css",
@@ -3157,7 +3242,7 @@
3157
3242
  {
3158
3243
  "path": "modules/hall-ui/public/task-detail.js",
3159
3244
  "mode": "0000644",
3160
- "sha256": "cbfebae6118a307fbabfa13a207a58d1bad6aea1908434df9b2774cf36d9fd1a"
3245
+ "sha256": "fc9224e79a1003434f7cb35925b3264b26bb4aea1d32c1b24723de4918530bef"
3161
3246
  },
3162
3247
  {
3163
3248
  "path": "modules/hall-ui/public/task.html",
@@ -3182,7 +3267,7 @@
3182
3267
  {
3183
3268
  "path": "modules/hall-ui/public/watch.js",
3184
3269
  "mode": "0000644",
3185
- "sha256": "040530b54a32352021138450db3597d5786af659b18e9c36b04d546d42fcdd2f"
3270
+ "sha256": "31dc79e6aaf72260cae3b46eb0fbb356e4e2bb01e3a2cbce3c420dad5221f25e"
3186
3271
  },
3187
3272
  {
3188
3273
  "path": "modules/hall-ui/public/work.css",
@@ -3207,7 +3292,7 @@
3207
3292
  {
3208
3293
  "path": "modules/ideas/blockers.js",
3209
3294
  "mode": "0000644",
3210
- "sha256": "ce92de31f385440c0bed072ddb4f01e617d834ef6bfaae11626aa580472c5b60"
3295
+ "sha256": "73349f0209190305a61e2f4d771fa466c12be4f9034b4134b60a9e4a560e1c5a"
3211
3296
  },
3212
3297
  {
3213
3298
  "path": "modules/ideas/inbox.js",
@@ -3222,12 +3307,12 @@
3222
3307
  {
3223
3308
  "path": "modules/ideas/routes/blockers.js",
3224
3309
  "mode": "0000644",
3225
- "sha256": "f5ebbc932acc2327550cc51d529eee756a9a402cf81362f651912a4a67d4c3d1"
3310
+ "sha256": "7c61821b9ddf9a9255f6a9916659140881a6436dbd50f3d53b4cf818640a39a4"
3226
3311
  },
3227
3312
  {
3228
3313
  "path": "modules/ideas/routes/inbox.js",
3229
3314
  "mode": "0000644",
3230
- "sha256": "6eefb842097067b5b7a12efd9c85aecc06b9563ed3c83f8339cd205d736dde6a"
3315
+ "sha256": "6c57608d1eae4159e967f9b471b20cb4c518c2b4acdf9d5ab88cad2afaf7c197"
3231
3316
  },
3232
3317
  {
3233
3318
  "path": "modules/lifecycle/CLAUDE.md",
@@ -3252,7 +3337,7 @@
3252
3337
  {
3253
3338
  "path": "modules/lifecycle/db.js",
3254
3339
  "mode": "0000644",
3255
- "sha256": "e647ee3f50a2242d02a435d8694f11db3ac8dfcfbaa0a6ac1199ff41425c388d"
3340
+ "sha256": "44cdb3c44dcf9277e9e0661d664387f0497e7d9b11c9775e1133aeec0da9db9f"
3256
3341
  },
3257
3342
  {
3258
3343
  "path": "modules/lifecycle/done-when.js",
@@ -3262,7 +3347,7 @@
3262
3347
  {
3263
3348
  "path": "modules/lifecycle/github-push.js",
3264
3349
  "mode": "0000644",
3265
- "sha256": "918ab0c4a38fcb9fea2403b6a31efbea025a523c431702bdf1ea2b19411d7ee0"
3350
+ "sha256": "200de3b5be6b1f3b0612dea91409f44aa3d5b76f8f90fb71e4e5ced43a0890fb"
3266
3351
  },
3267
3352
  {
3268
3353
  "path": "modules/lifecycle/goal-advisory.js",
@@ -3317,7 +3402,7 @@
3317
3402
  {
3318
3403
  "path": "modules/lifecycle/publish-reconciler.js",
3319
3404
  "mode": "0000644",
3320
- "sha256": "de21ed92ca1ca8974c52f5c3058c9bb478ae0deff5499424d5868f5b5c2442c7"
3405
+ "sha256": "7f42dfe5b16dff0e3833b0a586c5b04592aeaee1aa1f4f41c0255a16db1a14fc"
3321
3406
  },
3322
3407
  {
3323
3408
  "path": "modules/lifecycle/routes/analytics.js",
@@ -3327,27 +3412,27 @@
3327
3412
  {
3328
3413
  "path": "modules/lifecycle/routes/claims.js",
3329
3414
  "mode": "0000644",
3330
- "sha256": "b518c5ab8d9692f23436542f10db55dab377009bdc0e29bb1c49cff85174eb3e"
3415
+ "sha256": "6e30cf7169736737ea7aeac0aa1af9e5f31ed8ea79f08796cc2da9ed9ae03577"
3331
3416
  },
3332
3417
  {
3333
3418
  "path": "modules/lifecycle/routes/dependencies.js",
3334
3419
  "mode": "0000644",
3335
- "sha256": "f5137fc12a7e57c5896d2bdad0991c22fea671dd65933590385b4f893c59c9e7"
3420
+ "sha256": "bafacf5c0cb990ae2604179d86cbcaff9f9752a7f8d4f26dd65eafd777a8d793"
3336
3421
  },
3337
3422
  {
3338
3423
  "path": "modules/lifecycle/routes/done-when.js",
3339
3424
  "mode": "0000644",
3340
- "sha256": "971774b1e794e2de346d816463b3b6f585dc45b9cd18f1497d1afc0f6dd193fb"
3425
+ "sha256": "f77651b5418d6eb99e78ecf4c864f239ba75a149444a88eae59a5c3082f48cae"
3341
3426
  },
3342
3427
  {
3343
3428
  "path": "modules/lifecycle/routes/gate-approvals.js",
3344
3429
  "mode": "0000644",
3345
- "sha256": "4ca9732777a8995eadff3dd6855fac2f69381c4e0acba294adf4e5d76196212d"
3430
+ "sha256": "e88256fd506eafbecde48704f6eee72141451f38107fa10630257a171122d67a"
3346
3431
  },
3347
3432
  {
3348
3433
  "path": "modules/lifecycle/routes/goals.js",
3349
3434
  "mode": "0000644",
3350
- "sha256": "3d212f1ec6fc7328b5aa54b967989bf95e5ac73941cce3d192dc9be9175fa83c"
3435
+ "sha256": "9651f16e968983ab378aabc3d2a5e3d6ef6ba3fc3aaa00727fc5aff673b8d10e"
3351
3436
  },
3352
3437
  {
3353
3438
  "path": "modules/lifecycle/routes/lifecycle.js",
@@ -3357,17 +3442,17 @@
3357
3442
  {
3358
3443
  "path": "modules/lifecycle/routes/tasks.js",
3359
3444
  "mode": "0000644",
3360
- "sha256": "068ff4593569cfd166a6ad11d0bb04b1fb430bd9afa12a007d3149d29c4c48df"
3445
+ "sha256": "fc4e72f719b66aafe87bbd52db64a468d87069e24afe73eeb93318ff74ac9877"
3361
3446
  },
3362
3447
  {
3363
3448
  "path": "modules/lifecycle/routes/versions.js",
3364
3449
  "mode": "0000644",
3365
- "sha256": "f28e2a50510829dcfba1bafd4e50e9aefa735a838e4494329697daa73d1def1f"
3450
+ "sha256": "044ca86e5605c19dd8e523da9eb061b4a90ed0af199ec1288c3c5f1b1bb8f46b"
3366
3451
  },
3367
3452
  {
3368
3453
  "path": "modules/lifecycle/ship-card.js",
3369
3454
  "mode": "0000644",
3370
- "sha256": "391ff28d28360e7b7c8e43368406069de69718b8dbf43adb0413f34e91d4eaef"
3455
+ "sha256": "c2c4f75c6fec8a51befbe9e08f9fdb15b47a637654791a98d5eac6ed4a319ece"
3371
3456
  },
3372
3457
  {
3373
3458
  "path": "modules/lifecycle/ship-preflight.js",
@@ -3412,7 +3497,7 @@
3412
3497
  {
3413
3498
  "path": "modules/memory/routes/memory.js",
3414
3499
  "mode": "0000644",
3415
- "sha256": "00fee1a02d4c11ae333868e3b0325c3e619f5ca16d76001ed54b089bbc5f0677"
3500
+ "sha256": "1d0e08502f34acec327052a352444561f6c48305a89e1ed8c6acd22f3c4163c3"
3416
3501
  },
3417
3502
  {
3418
3503
  "path": "modules/memory/routes/search.js",
@@ -3472,7 +3557,7 @@
3472
3557
  {
3473
3558
  "path": "modules/onboarding/routes/access-requests.js",
3474
3559
  "mode": "0000644",
3475
- "sha256": "76ba18cf1e3c2d44a31315d90d6dc931cd57f6c258ece6f6d5bf8ac3095f4549"
3560
+ "sha256": "96cc25d7f8c343333cc4393258ad931c2cb9df9b25b564d77d0fcf2257455a03"
3476
3561
  },
3477
3562
  {
3478
3563
  "path": "modules/onboarding/routes/onboarding.js",
@@ -3542,12 +3627,12 @@
3542
3627
  {
3543
3628
  "path": "modules/platform-identity/routes/projects.js",
3544
3629
  "mode": "0000644",
3545
- "sha256": "f3a5c55d983b986bc418cabde2b42dbb00560cb3486b0373c3e0491d3398ac4e"
3630
+ "sha256": "33acce5b2f0c9ea9aef4a0d38f5245e56be4cd2756bc1d49129d5fadeb56a4a1"
3546
3631
  },
3547
3632
  {
3548
3633
  "path": "modules/platform-identity/routes/scouting.js",
3549
3634
  "mode": "0000644",
3550
- "sha256": "b471f91c1a7c102eb0e6ed094e5fbc8b08f6a650a4731b25e2b94da24214c979"
3635
+ "sha256": "c6db7fa003caaf55d2ecb68f1ff73d7d89d8b71b6d999ed3ebf71286e8726359"
3551
3636
  },
3552
3637
  {
3553
3638
  "path": "modules/platform-identity/routes/sso.js",
@@ -3584,6 +3669,11 @@
3584
3669
  "mode": "0000644",
3585
3670
  "sha256": "6142399fba4d11d27de9d4fdeabf6d28a39e6f9341555ec34b15625470bd3234"
3586
3671
  },
3672
+ {
3673
+ "path": "modules/provisioning/migrations/provisioning_004_onboard_mode.sql",
3674
+ "mode": "0000644",
3675
+ "sha256": "c25101daed13fc22ba3f132b2dac59c782fa564fa4bc22a6a5169e6644109b3a"
3676
+ },
3587
3677
  {
3588
3678
  "path": "modules/provisioning/module.json",
3589
3679
  "mode": "0000644",
@@ -3597,7 +3687,7 @@
3597
3687
  {
3598
3688
  "path": "modules/provisioning/provisioning.js",
3599
3689
  "mode": "0000644",
3600
- "sha256": "ff9b64f711f1b7eee9936326b9f76d97d4f115bb3c87ca8bb7a8d01b4b2ce693"
3690
+ "sha256": "468557062f75a9a02e3cab53103389d7ecaaede6528b60587e51a71ce9dfecf5"
3601
3691
  },
3602
3692
  {
3603
3693
  "path": "modules/provisioning/rate-limit.js",
@@ -3607,7 +3697,7 @@
3607
3697
  {
3608
3698
  "path": "modules/provisioning/routes/provisioning.js",
3609
3699
  "mode": "0000644",
3610
- "sha256": "d4a3f8afcb95d032a00bfda625996ef39d631bc42a0b4fa7b738d60ee011eb1f"
3700
+ "sha256": "f48562d5f17e0ea9934b4ca96c84e1ac0fc448819a8fff54227045e52aa98731"
3611
3701
  },
3612
3702
  {
3613
3703
  "path": "modules/provisioning/tests/provisioning.mjs",
@@ -3624,15 +3714,140 @@
3624
3714
  "mode": "0000644",
3625
3715
  "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
3626
3716
  },
3717
+ {
3718
+ "path": "modules/security/artifact-scan/aggregate.js",
3719
+ "mode": "0000644",
3720
+ "sha256": "06f407b53be4492eda77a9c286dfb58348e75ab7491422b858808092afde1332"
3721
+ },
3722
+ {
3723
+ "path": "modules/security/artifact-scan/detectors/capabilities.js",
3724
+ "mode": "0000644",
3725
+ "sha256": "3e9c130cc4cad9faa62b06ecfce9f65024dc0cbd2077959084c8ae7bd9c0307d"
3726
+ },
3727
+ {
3728
+ "path": "modules/security/artifact-scan/detectors/config-obfuscation.js",
3729
+ "mode": "0000644",
3730
+ "sha256": "887cd4cc270df4fde4531cf14bbbba1799132dc0cab6fb036e0f160adfa85d05"
3731
+ },
3732
+ {
3733
+ "path": "modules/security/artifact-scan/detectors/credentials.js",
3734
+ "mode": "0000644",
3735
+ "sha256": "ac793c3caa1b047770dc5729777881fa9a9c0e799eb46799fda038ed98338934"
3736
+ },
3737
+ {
3738
+ "path": "modules/security/artifact-scan/detectors/dependencies.js",
3739
+ "mode": "0000644",
3740
+ "sha256": "e33d0deb1a1c883d021fa7a838600ea1a0c14d01a22059cb1e34f41d88b26b41"
3741
+ },
3742
+ {
3743
+ "path": "modules/security/artifact-scan/detectors/hooks.js",
3744
+ "mode": "0000644",
3745
+ "sha256": "206e631050862c429369d5f5e5ad576391a3f0e2d4111fd4cbd45ede55cd08cc"
3746
+ },
3747
+ {
3748
+ "path": "modules/security/artifact-scan/detectors/injection.js",
3749
+ "mode": "0000644",
3750
+ "sha256": "5fa6a7e22bc9ab856fad95f6faef83b8dba35bb919abbcc50aa5afef7e8c1ab5"
3751
+ },
3752
+ {
3753
+ "path": "modules/security/artifact-scan/detectors/mcp.js",
3754
+ "mode": "0000644",
3755
+ "sha256": "0c49d45fcd72905eccbf7c2bb675ca39cf072a9e8e80dd6450631f03c26d5079"
3756
+ },
3757
+ {
3758
+ "path": "modules/security/artifact-scan/detectors/network.js",
3759
+ "mode": "0000644",
3760
+ "sha256": "0fff96f4a628586351159059b7cd4f50ba393093b2d1e20ae53c2bc71afe92a1"
3761
+ },
3762
+ {
3763
+ "path": "modules/security/artifact-scan/detectors/npm-lifecycle.js",
3764
+ "mode": "0000644",
3765
+ "sha256": "ad38a6c63b2b55c31708a1a1b3e0302f7333ac39deb1a073c47423915cbc476b"
3766
+ },
3767
+ {
3768
+ "path": "modules/security/artifact-scan/detectors/permissions.js",
3769
+ "mode": "0000644",
3770
+ "sha256": "2e3cb01a85a9fdb77ef5c755c6bdfafbaf25fbcce78a2f5f45930a1da88b25ee"
3771
+ },
3772
+ {
3773
+ "path": "modules/security/artifact-scan/detectors/shared.js",
3774
+ "mode": "0000644",
3775
+ "sha256": "1f56f5049bd8616f9ada86889b34d9548c0b7757847aeaf6ec59c0439a66eb1c"
3776
+ },
3777
+ {
3778
+ "path": "modules/security/artifact-scan/fence-local.js",
3779
+ "mode": "0000644",
3780
+ "sha256": "d01aab5eb3761296a93ee454ef30b3074577317bcb2c0fa9bd0b4ea38c159b8d"
3781
+ },
3782
+ {
3783
+ "path": "modules/security/artifact-scan/fetch.js",
3784
+ "mode": "0000644",
3785
+ "sha256": "73fecaa98fd69649edf75c8854ffcefa9117412e8604cf5ccfa1ac376ae27fd6"
3786
+ },
3787
+ {
3788
+ "path": "modules/security/artifact-scan/floor.js",
3789
+ "mode": "0000644",
3790
+ "sha256": "c3daa70d6a07cb64040f0f0c88b359ef7ff284c66b0282297253d726b25ba93b"
3791
+ },
3792
+ {
3793
+ "path": "modules/security/artifact-scan/limits.js",
3794
+ "mode": "0000644",
3795
+ "sha256": "7e404f5621c493c23a2ebed05919180d480c830da588a6b46773b0ffd558533d"
3796
+ },
3797
+ {
3798
+ "path": "modules/security/artifact-scan/manifest.js",
3799
+ "mode": "0000644",
3800
+ "sha256": "924f3601b9c71bbff0b11cf2f77f028898ed03c8f86f0a89298b7fee7e537503"
3801
+ },
3802
+ {
3803
+ "path": "modules/security/artifact-scan/mirror.js",
3804
+ "mode": "0000644",
3805
+ "sha256": "8b77b65410cdde306d60903fe08913cb87e3db0af1a03926dce57dd4ce79a163"
3806
+ },
3807
+ {
3808
+ "path": "modules/security/artifact-scan/quarantine.js",
3809
+ "mode": "0000644",
3810
+ "sha256": "9ac4695e571efdda2b991ff42d4635c9b493383733819c8c97ca93f1066220a1"
3811
+ },
3812
+ {
3813
+ "path": "modules/security/artifact-scan/rebuild-spec.js",
3814
+ "mode": "0000644",
3815
+ "sha256": "c9c7136299e76135390e6feda44149e7d5124cedb2360d9901fb28709afbc848"
3816
+ },
3817
+ {
3818
+ "path": "modules/security/artifact-scan/report.js",
3819
+ "mode": "0000644",
3820
+ "sha256": "68c071b172fbebf1ce4897887414abcacab056a2b420358ff6f09a9b7d7f2d04"
3821
+ },
3822
+ {
3823
+ "path": "modules/security/artifact-scan/sanitize.js",
3824
+ "mode": "0000644",
3825
+ "sha256": "861abc56de494363d4420d8e5826eeda01ba6ba79f113deceea094db4d9ab6a8"
3826
+ },
3827
+ {
3828
+ "path": "modules/security/migrations/security_001_tool_scans.sql",
3829
+ "mode": "0000644",
3830
+ "sha256": "17bd24de65db4b1d5f0b6af5d92b0d5dcb58bb69faae6e872d92376fb6b07d50"
3831
+ },
3627
3832
  {
3628
3833
  "path": "modules/security/module.json",
3629
3834
  "mode": "0000644",
3630
- "sha256": "c3d781d701178329c4dee80157008b3685cd61c99d7a25abc40ba30dc47b2b0b"
3835
+ "sha256": "b087a1752b413882c8d3057867d8dcb464395831b9cc1be3b82a05607802cc26"
3631
3836
  },
3632
3837
  {
3633
3838
  "path": "modules/security/routes/reports.js",
3634
3839
  "mode": "0000644",
3635
- "sha256": "135d8ae66de4a3eabed3fa0f791f877de0c6b98010d873591381f2fd86651691"
3840
+ "sha256": "cf24557603650a2f0d692f36da24acf80011e0c0d4f58f6a6e7a0ae14c6085d9"
3841
+ },
3842
+ {
3843
+ "path": "modules/security/routes/scans.js",
3844
+ "mode": "0000644",
3845
+ "sha256": "008bee59c78d7e67726f30d770da81b5c16f4fe01905f22a47a5d2ab6c5e68d8"
3846
+ },
3847
+ {
3848
+ "path": "modules/security/scan-store.js",
3849
+ "mode": "0000644",
3850
+ "sha256": "2b6aa7dc200d10e53c0908c8cb5f099955e2a1bb9cc9e19eb0df9fa4e1d08915"
3636
3851
  },
3637
3852
  {
3638
3853
  "path": "modules/security/secret-scrub.js",
@@ -3644,6 +3859,41 @@
3644
3859
  "mode": "0000644",
3645
3860
  "sha256": "0cb4a6bd849a4b9486ad342041e1b848e81fcb99ab52f9ba55fbd01f58fc1fc7"
3646
3861
  },
3862
+ {
3863
+ "path": "modules/security/tests/aggregate.mjs",
3864
+ "mode": "0000644",
3865
+ "sha256": "f046ddf3890eea7bd5c1191b2a5999b39cf50a1a0d8eb6423eec0c526896acb1"
3866
+ },
3867
+ {
3868
+ "path": "modules/security/tests/artifact_scan.mjs",
3869
+ "mode": "0000644",
3870
+ "sha256": "68079f8cc0e8c8466054865032fa03bd23f0a46513cbe997c4390d2e236e9249"
3871
+ },
3872
+ {
3873
+ "path": "modules/security/tests/floor.mjs",
3874
+ "mode": "0000644",
3875
+ "sha256": "7fcc6fedf6d087156ba91c6a6935fcf86b4c0cd0d80c31082121669f14b58172"
3876
+ },
3877
+ {
3878
+ "path": "modules/security/tests/mirror.mjs",
3879
+ "mode": "0000644",
3880
+ "sha256": "b1bceda3d21897133db69f22d02fc91ed9671c536432d32959409637bfaf3bdb"
3881
+ },
3882
+ {
3883
+ "path": "modules/security/tests/sanitize_rebuild.mjs",
3884
+ "mode": "0000644",
3885
+ "sha256": "4af88247bed3dcb3c12370e48380625871a9b50a0b430a6da34db0ce6d6c8aca"
3886
+ },
3887
+ {
3888
+ "path": "modules/security/tests/scan_store.mjs",
3889
+ "mode": "0000644",
3890
+ "sha256": "a369afdadb5e3b4c2c1f49de2ce1504d1b5927be5bada151fdb820bd7276dd8b"
3891
+ },
3892
+ {
3893
+ "path": "modules/security/tests/tool_scans_migration.mjs",
3894
+ "mode": "0000644",
3895
+ "sha256": "4add5724402e529ab1aaac86f06d948f8a5639fde621ea676601b75c542fd322"
3896
+ },
3647
3897
  {
3648
3898
  "path": "modules/sessions/CLAUDE.md",
3649
3899
  "mode": "0000644",
@@ -3677,7 +3927,7 @@
3677
3927
  {
3678
3928
  "path": "modules/sessions/routes/sessions.js",
3679
3929
  "mode": "0000644",
3680
- "sha256": "8b235d4bb620c2e39219535a17cf63a4313057d540fbe20ec1b40a8bd0b9eaf2"
3930
+ "sha256": "731287e9960d4492f9c2d1c4160093010d79ed3ee5ab91dd94f9ea4a222fd761"
3681
3931
  },
3682
3932
  {
3683
3933
  "path": "modules/status-ui/CLAUDE.md",
@@ -3737,12 +3987,12 @@
3737
3987
  {
3738
3988
  "path": "package-lock.json",
3739
3989
  "mode": "0000644",
3740
- "sha256": "e8bc8b5238e6c8d6fb3c4168cc93e4fcbad6cff43364b52d7e976466de3c235d"
3990
+ "sha256": "33af861149a0ee55d9ae6f3c5f0558c625ca233dbdac4421ac5ba399c0ab985a"
3741
3991
  },
3742
3992
  {
3743
3993
  "path": "package.json",
3744
3994
  "mode": "0000644",
3745
- "sha256": "04a15921eadb531ab832ada19fd934cd7ffa79ca138cb23832394511a2c8e016"
3995
+ "sha256": "e6e7e25cb92c85152be56c6f63123d2f47d3e7026b2953d6c020dc4dbacaa82a"
3746
3996
  },
3747
3997
  {
3748
3998
  "path": "public-docs/index.html",
@@ -3987,7 +4237,7 @@
3987
4237
  {
3988
4238
  "path": "public-landing/create.html",
3989
4239
  "mode": "0000644",
3990
- "sha256": "b31ca99c0630299390879d1e081feefba336e874be4b179cc3048f7494de9296"
4240
+ "sha256": "31dec15fbf56b826b6a8e3623cdbd0eb2f015ee56f08fefda19135c7ee7c725f"
3991
4241
  },
3992
4242
  {
3993
4243
  "path": "public-landing/gate/README.md",
@@ -4122,7 +4372,7 @@
4122
4372
  {
4123
4373
  "path": "scripts/gds/abandon.js",
4124
4374
  "mode": "0000644",
4125
- "sha256": "a4c02cc2c2938242ea29ce3de2d0547935494661b2b987b04711171c8e3177fa"
4375
+ "sha256": "226e266390bd7eac3c10526557427a3b1e7916749ad64dda2a7163c4fac43a74"
4126
4376
  },
4127
4377
  {
4128
4378
  "path": "scripts/gds/adopt-detect.js",
@@ -4162,7 +4412,7 @@
4162
4412
  {
4163
4413
  "path": "scripts/gds/audit-authorship.sh",
4164
4414
  "mode": "0000644",
4165
- "sha256": "2ba18619ea5cbadeb68b6e44e521a5eefbaaa0276047ebf5aa8c546abf4d6254"
4415
+ "sha256": "eeeb1471e46e5b62ec95dd4d856ec2e6f48fd110f5a0ac86e6b0895d2aa0bfa8"
4166
4416
  },
4167
4417
  {
4168
4418
  "path": "scripts/gds/audit-deps.js",
@@ -4232,7 +4482,7 @@
4232
4482
  {
4233
4483
  "path": "scripts/gds/box.js",
4234
4484
  "mode": "0000644",
4235
- "sha256": "dd8d5d211e0b7d4fea4d009c35afb41036bfa364db7c0e7d2ab312480cd49f27"
4485
+ "sha256": "65712c9b88a461add6211d895c650d9e6bc3a0994d8966a17be373a5dafbd105"
4236
4486
  },
4237
4487
  {
4238
4488
  "path": "scripts/gds/build-bongos.js",
@@ -4262,7 +4512,7 @@
4262
4512
  {
4263
4513
  "path": "scripts/gds/claim.js",
4264
4514
  "mode": "0000644",
4265
- "sha256": "47ae299991299191936d13f381514d3397ba2eddb16803f48c9b85a7259330b1"
4515
+ "sha256": "23f9932dd79c63915679eeb175e2fc6d95e43b840dba78336c23504c85617987"
4266
4516
  },
4267
4517
  {
4268
4518
  "path": "scripts/gds/classify-discipline.js",
@@ -4287,7 +4537,7 @@
4287
4537
  {
4288
4538
  "path": "scripts/gds/cli-lib.js",
4289
4539
  "mode": "0000644",
4290
- "sha256": "fe82cf86a36256bc330c7efe3d538aea0a925ea5e4cbd13475da0308c3f22f44"
4540
+ "sha256": "6c42a8ee151ba5e12475e50b0d113d306fd01c5c95100f131713fb3abeaa4e62"
4291
4541
  },
4292
4542
  {
4293
4543
  "path": "scripts/gds/code.js",
@@ -4427,7 +4677,7 @@
4427
4677
  {
4428
4678
  "path": "scripts/gds/gating.js",
4429
4679
  "mode": "0000644",
4430
- "sha256": "3f6cad9ca65b6ed0a1d29158296a9a9c57a4dd48783f71f2ad6e497c5f7737ec"
4680
+ "sha256": "5de3e4129006035e844efd4c5a2147060228fe6c73fe0bbbf1ead72af2cc405c"
4431
4681
  },
4432
4682
  {
4433
4683
  "path": "scripts/gds/gds-db-backup.service",
@@ -4457,7 +4707,7 @@
4457
4707
  {
4458
4708
  "path": "scripts/gds/gen-api-docs.js",
4459
4709
  "mode": "0000644",
4460
- "sha256": "bf0f270cbad06386f858aba52667d1a68024540d48cc1143613b6282c7916725"
4710
+ "sha256": "ccdebd47cc53a4896c766c6a70f43dfb91e3b84264b82bd927c918ac941a6905"
4461
4711
  },
4462
4712
  {
4463
4713
  "path": "scripts/gds/gen-atlas.js",
@@ -4494,6 +4744,11 @@
4494
4744
  "mode": "0000644",
4495
4745
  "sha256": "75130de4a880fc7d76f5a8d79ed65750238df94847c1ccfdc974188f9300a1e6"
4496
4746
  },
4747
+ {
4748
+ "path": "scripts/gds/goal.js",
4749
+ "mode": "0000644",
4750
+ "sha256": "6cd8b2e7d23a4a8351f4018d2eec9403bb7eb16391e77fa2583a5f4c612e3046"
4751
+ },
4497
4752
  {
4498
4753
  "path": "scripts/gds/grade-smoke.js",
4499
4754
  "mode": "0000644",
@@ -4512,7 +4767,7 @@
4512
4767
  {
4513
4768
  "path": "scripts/gds/init.js",
4514
4769
  "mode": "0000644",
4515
- "sha256": "90ac7e61c185040efe0d6dfc8fb1216537c9842994313add96a7ac08713ceb7f"
4770
+ "sha256": "036429e68c840759ba9edf95ce6e17e501011e440b4b6d9a71e2344442f4f0d9"
4516
4771
  },
4517
4772
  {
4518
4773
  "path": "scripts/gds/install-git-hooks.js",
@@ -4582,7 +4837,7 @@
4582
4837
  {
4583
4838
  "path": "scripts/gds/main-audit.js",
4584
4839
  "mode": "0000644",
4585
- "sha256": "6049b1492b6575169a7b1000eb2fd6ca31851bb14f2a43c3a1ee237a25f57d61"
4840
+ "sha256": "18e14d00fead3293eb5b1c9d7a756a0a3780147938a40253ff35540740a73f4b"
4586
4841
  },
4587
4842
  {
4588
4843
  "path": "scripts/gds/me.js",
@@ -4612,7 +4867,7 @@
4612
4867
  {
4613
4868
  "path": "scripts/gds/mirror-redact.js",
4614
4869
  "mode": "0000644",
4615
- "sha256": "a409ef4841901f027ed9fdcb8762fc8c51b75265c72bb8098f886417f494989e"
4870
+ "sha256": "161493827d30df4f10ed91913c628338487bfec129174423d5731d3db13b6799"
4616
4871
  },
4617
4872
  {
4618
4873
  "path": "scripts/gds/module.js",
@@ -4627,7 +4882,7 @@
4627
4882
  {
4628
4883
  "path": "scripts/gds/newcomer-floor.js",
4629
4884
  "mode": "0000644",
4630
- "sha256": "71db643fe8bf2216d5d1beb4376e1c80dfc11c10f3f8214cf935d9576fdf7690"
4885
+ "sha256": "17c264e600dbc9a456942bd4392c5e897439fbcecd35666a3c1b240c8ead4f9b"
4631
4886
  },
4632
4887
  {
4633
4888
  "path": "scripts/gds/newcomer-floor.templates.json",
@@ -4702,7 +4957,7 @@
4702
4957
  {
4703
4958
  "path": "scripts/gds/provision.js",
4704
4959
  "mode": "0000644",
4705
- "sha256": "0385afa30f53e668d883576e94253db692616197c5a287dd94daac09ed82ff0b"
4960
+ "sha256": "79c45444d67985ba0e6bc5e4d5cbff79f28a1490badf3bcfc7b39d8d1d47f7d5"
4706
4961
  },
4707
4962
  {
4708
4963
  "path": "scripts/gds/publish-manifest.js",
@@ -4767,12 +5022,12 @@
4767
5022
  {
4768
5023
  "path": "scripts/gds/run-unit-tests.js",
4769
5024
  "mode": "0000644",
4770
- "sha256": "510fee49670cbaba7097d86d56918e1eca5638be014b3fc7cdb1e20424ae0d2c"
5025
+ "sha256": "85712b5cd1e20a2d84646b117cbaadf0ee4903f278ca904eb863da4612ee937b"
4771
5026
  },
4772
5027
  {
4773
5028
  "path": "scripts/gds/sandbox-stage.js",
4774
5029
  "mode": "0000644",
4775
- "sha256": "1deea547e003ba0026e2f85e9f2a66f1f787c1e5ebee90e263f3ba97cff1e56c"
5030
+ "sha256": "327528f90554c2c60ae9e2ad6a0d5dc177d33d918c34fa83f87fe80e0ca89cfc"
4776
5031
  },
4777
5032
  {
4778
5033
  "path": "scripts/gds/search-ingest-db.js",
@@ -4782,7 +5037,7 @@
4782
5037
  {
4783
5038
  "path": "scripts/gds/search-ingest-md.js",
4784
5039
  "mode": "0000644",
4785
- "sha256": "d5d26db4c44fd25d95238482dd39fd437e103c00008f4c2b25b0ff1bcfa7f32c"
5040
+ "sha256": "19b4e880f0a44dcba9458d863ba10686fe67b90f3aed5b595f7b7db4e205e68a"
4786
5041
  },
4787
5042
  {
4788
5043
  "path": "scripts/gds/security-baseline-check.sh",
@@ -4887,7 +5142,7 @@
4887
5142
  {
4888
5143
  "path": "scripts/gds/sequence.js",
4889
5144
  "mode": "0000644",
4890
- "sha256": "371cce49cc36c650b91e76c4bb42d561de16705a2123e193d9364e97c47bd7bd"
5145
+ "sha256": "52c43371c2e6e8f7ffeac588143167ffc43e0010bceb7137ebce4ed61eaa64e6"
4891
5146
  },
4892
5147
  {
4893
5148
  "path": "scripts/gds/session-cost.js",
@@ -4922,7 +5177,7 @@
4922
5177
  {
4923
5178
  "path": "scripts/gds/ship.js",
4924
5179
  "mode": "0000644",
4925
- "sha256": "451c08587652132afca1860e7d4a5a2ff5b42cb80425c033156fc47753181a4c"
5180
+ "sha256": "fc83c3ee63ce06c603eff9a4423f21d3b915ea7eae27e68ba953a45c8f14eda6"
4926
5181
  },
4927
5182
  {
4928
5183
  "path": "scripts/gds/smoke-batch-claim.sh",
@@ -5012,12 +5267,12 @@
5012
5267
  {
5013
5268
  "path": "scripts/hall-preview/server.js",
5014
5269
  "mode": "0000644",
5015
- "sha256": "301aa249bd15559d82d9baaa492b5eb1ab023ddea6c8c5c00eec46263e5201cc"
5270
+ "sha256": "b6550cee568d8e8082c30512979256872d71d0d7f1810d061f5dbffad8a76979"
5016
5271
  },
5017
5272
  {
5018
5273
  "path": "scripts/migrate.sh",
5019
5274
  "mode": "0000644",
5020
- "sha256": "28fc9fc9450ca6147d57db0a6f3ab38a5edab5f7dee22ec0340093d854c6c50a"
5275
+ "sha256": "1c0ffd6822949c0aeb0bd89f48e12c2923c6d623228619729e9812056351fe9d"
5021
5276
  },
5022
5277
  {
5023
5278
  "path": "scripts/migrate_cost_ledger.sh",
@@ -5117,7 +5372,7 @@
5117
5372
  {
5118
5373
  "path": "src/bongos/auth.js",
5119
5374
  "mode": "0000644",
5120
- "sha256": "0c0246bce00fed81b7c8bd428842ce2197646d4b38743c1ec67e517ec11ebc01"
5375
+ "sha256": "60888e8a84fc109ce258256ed7c0af13a8a453464b4f71716bc3a018a89f1b1a"
5121
5376
  },
5122
5377
  {
5123
5378
  "path": "src/bongos/cascade-dispatch.js",
@@ -5127,22 +5382,22 @@
5127
5382
  {
5128
5383
  "path": "src/bongos/db-kernel.js",
5129
5384
  "mode": "0000644",
5130
- "sha256": "d7a9bee94b0db7ecc80afdc9814e1751f5c82919f1095d1191801470bc80ea6b"
5385
+ "sha256": "7951e23e770dc001f6893d42db1cdb6dbb91cf8b084f0651972c75bc8463083d"
5131
5386
  },
5132
5387
  {
5133
5388
  "path": "src/bongos/db.js",
5134
5389
  "mode": "0000644",
5135
- "sha256": "7d00051835f8aea48695aff743ca8ec129fe6da909ee6b915271beb74c08a0a3"
5390
+ "sha256": "64b0efa7c0a251266a8dbc00d43373fb1516fa5c88ba737220c969ec97a2e98b"
5136
5391
  },
5137
5392
  {
5138
5393
  "path": "src/bongos/github-repos.js",
5139
5394
  "mode": "0000644",
5140
- "sha256": "40d23e16bc96820cb964f81d542c5b4621e6494be7a5b74d25ad554380acf850"
5395
+ "sha256": "893a2eb6f2658942cee2043ff130a5ae38538007e47e2ec2665548e0d286e211"
5141
5396
  },
5142
5397
  {
5143
5398
  "path": "src/bongos/goal-scope-check.js",
5144
5399
  "mode": "0000644",
5145
- "sha256": "2c7fedc3434bdb82d20752548d8c67d40df88ec75648cda52dedb5ebc5296968"
5400
+ "sha256": "7455ac1f04b8715bb998653ddfd0986eb79d6eac540972562ffc5084920bb63d"
5146
5401
  },
5147
5402
  {
5148
5403
  "path": "src/bongos/hierarchy-config.js",
@@ -5187,7 +5442,7 @@
5187
5442
  {
5188
5443
  "path": "src/bongos/module-scope-map.js",
5189
5444
  "mode": "0000644",
5190
- "sha256": "61f009b8611c62a161d0128962fef38cc8bc188c89a5c21e3f956174d1e8af0d"
5445
+ "sha256": "f39bb8e6269b64ce57e1a16d5369ccdbd384618172f742494c4aaa3c04392cba"
5191
5446
  },
5192
5447
  {
5193
5448
  "path": "src/bongos/module-submissions.js",
@@ -5207,7 +5462,7 @@
5207
5462
  {
5208
5463
  "path": "src/bongos/permission-path-check.js",
5209
5464
  "mode": "0000644",
5210
- "sha256": "b6fb51a2366c1783d71160b0a56bdeae24abf6d515c4aee945c43d9fc9a6f4f2"
5465
+ "sha256": "75f463c95a694cc04aec7748783b427cf46d5805dae862428cf8a2546035dcb3"
5211
5466
  },
5212
5467
  {
5213
5468
  "path": "src/bongos/pool.js",
@@ -5222,7 +5477,7 @@
5222
5477
  {
5223
5478
  "path": "src/bongos/route-rank-check.js",
5224
5479
  "mode": "0000644",
5225
- "sha256": "97f455932eea3331ed4d2260a95de2a42b9a2f87e7e6d9526b712011ad67039e"
5480
+ "sha256": "ceaa1116fe91fa618da5b52dccf36a06caef0f8a9a40673d58a92425c91b9c47"
5226
5481
  },
5227
5482
  {
5228
5483
  "path": "src/bongos/routes.js",
@@ -5242,27 +5497,27 @@
5242
5497
  {
5243
5498
  "path": "src/bongos/routes/audit-log.js",
5244
5499
  "mode": "0000644",
5245
- "sha256": "90da0d599e688531d4560178b300d3aae3851895642b2bb2c6462bc1850da688"
5500
+ "sha256": "c5c8ece90dd00bc567cd1f9cc6579d91bbf0fa3aa50d351a9e2e18f77ab6954d"
5246
5501
  },
5247
5502
  {
5248
5503
  "path": "src/bongos/routes/auth.js",
5249
5504
  "mode": "0000644",
5250
- "sha256": "15058365eaf2a5c78d766800615fa636bee808e66ca2b903c170427bcc5a8ba0"
5505
+ "sha256": "2cacde2aa0984457904c0a29cc0dd0d41e32be89b7b6e401d885662805c3de5e"
5251
5506
  },
5252
5507
  {
5253
5508
  "path": "src/bongos/routes/backup.js",
5254
5509
  "mode": "0000644",
5255
- "sha256": "5c2d23684960d157ee0f3175804553e09b6e37e8679492a1f595b989503cce7e"
5510
+ "sha256": "23f9a3f8c3e0741fb9bd771942cd8beb8f434a748a2d006eab858710ea2f0cc7"
5256
5511
  },
5257
5512
  {
5258
5513
  "path": "src/bongos/routes/builders.js",
5259
5514
  "mode": "0000644",
5260
- "sha256": "67ccaed4dbba0c5d264365bb7c95d88cab63ee1710524db1c97e3dd588a6497f"
5515
+ "sha256": "43a409918ba54af69d0c7183af510ff9d73b26566a1a520ad97d84360abcc79b"
5261
5516
  },
5262
5517
  {
5263
5518
  "path": "src/bongos/routes/github.js",
5264
5519
  "mode": "0000644",
5265
- "sha256": "a57f3cca8aff642c2c52b632cabe33e17229231bc698eaf7f105862901e71866"
5520
+ "sha256": "2895aa72fbcef361a5edf07166e64e9902edcb5971eb2e496705b3bfddeabda1"
5266
5521
  },
5267
5522
  {
5268
5523
  "path": "src/bongos/routes/healthz.js",
@@ -5282,7 +5537,7 @@
5282
5537
  {
5283
5538
  "path": "src/bongos/routes/llm-cache.js",
5284
5539
  "mode": "0000644",
5285
- "sha256": "6c1831495dd205c0972a42004761f76f005d7b02cbabea92bb008fb8a658c990"
5540
+ "sha256": "552320e8c14c94abdacc45ffb034c93bc6c9703b2e9290fcf742abad5c4b734f"
5286
5541
  },
5287
5542
  {
5288
5543
  "path": "src/bongos/routes/me.js",
@@ -5292,7 +5547,7 @@
5292
5547
  {
5293
5548
  "path": "src/bongos/routes/modules.js",
5294
5549
  "mode": "0000644",
5295
- "sha256": "093f7ce68161ef6948cf9d962ea0abf6c7ce2c8cbc03a6222dba7150985fce30"
5550
+ "sha256": "62018ff2d9a9ed274a789c6141edce3dfe90a282f99f99965dcbf513e3f55037"
5296
5551
  },
5297
5552
  {
5298
5553
  "path": "src/bongos/routes/optimizer.js",
@@ -5307,7 +5562,7 @@
5307
5562
  {
5308
5563
  "path": "src/bongos/routes/security.js",
5309
5564
  "mode": "0000644",
5310
- "sha256": "fe5bb9abe01df00ab4cabb5888a3efa0dea6e0e5181a8b703b7ec364bbce7f82"
5565
+ "sha256": "ae79028f92e0f299a8da7b68a2a17d227c7db06e43334991a9673468ca155a6f"
5311
5566
  },
5312
5567
  {
5313
5568
  "path": "src/bongos/secret-box.js",
@@ -5322,7 +5577,7 @@
5322
5577
  {
5323
5578
  "path": "src/bongos/serve-internal.js",
5324
5579
  "mode": "0000644",
5325
- "sha256": "570fa92c63ba1dbbc38481e9deb69e3c468502d5d2685b0552bf5062dad2027e"
5580
+ "sha256": "25c52c06c03af400c94f04f2cda1aaab0c5e5486a084005b9a4e224f345a4871"
5326
5581
  },
5327
5582
  {
5328
5583
  "path": "src/bongos/uptime-poller.js",
@@ -5352,7 +5607,7 @@
5352
5607
  {
5353
5608
  "path": "src/module-api.js",
5354
5609
  "mode": "0000644",
5355
- "sha256": "36c522ca8a10cf57bc03bc87987c8eacea995ab99bf8f6b21842c68ec8389943"
5610
+ "sha256": "f1a2dcb784a9ec64a77a89ce49cee1ff74338c70c0c524a3db78cfcfb84fb084"
5356
5611
  },
5357
5612
  {
5358
5613
  "path": "src/module-loader/loader.js",
@@ -5387,7 +5642,7 @@
5387
5642
  {
5388
5643
  "path": "src/platform-server.js",
5389
5644
  "mode": "0000644",
5390
- "sha256": "589edf13e3beb9dbe5756fff75c51d77b6711c1411e58a92e6fec179cf45fa33"
5645
+ "sha256": "287e49f074612ae29fc43dc7126f6e4fed243d97e1f27df77284b0e106f5dfca"
5391
5646
  },
5392
5647
  {
5393
5648
  "path": "src/ui/adapters/claude-design/index.js",
@@ -5437,7 +5692,7 @@
5437
5692
  {
5438
5693
  "path": "tests/api_client.mjs",
5439
5694
  "mode": "0000644",
5440
- "sha256": "0cf2b490477d2572d71b4c47075f56374eba4c74b8dc6fbbd3e7b2052ba58b6c"
5695
+ "sha256": "fa360a42fa5d11b225afe1b13622f2a27fe43f2b7d0a47c2fef158bc8a11ecb6"
5441
5696
  },
5442
5697
  {
5443
5698
  "path": "tests/api_docs.mjs",
@@ -5467,7 +5722,7 @@
5467
5722
  {
5468
5723
  "path": "tests/api_path_404.mjs",
5469
5724
  "mode": "0000644",
5470
- "sha256": "14cee28bf8b12adb3a393e13da8d0670ed3a532fbbaa51cbb8294896daf0b274"
5725
+ "sha256": "427f5750b4115fc0ddd30f6f7f8202521d5b31300b191093bc98f8416bb4a228"
5471
5726
  },
5472
5727
  {
5473
5728
  "path": "tests/app_pair.mjs",
@@ -5482,7 +5737,7 @@
5482
5737
  {
5483
5738
  "path": "tests/art_stage.mjs",
5484
5739
  "mode": "0000644",
5485
- "sha256": "a072bf2b3dbc30ce658d3d8955129d0e30ff8d3749261bf6d8a240e02c625848"
5740
+ "sha256": "244b8d71c2ad4403c077629f7f1f726bcdfd62e6d4a3ee16c35ee73b5d8f563d"
5486
5741
  },
5487
5742
  {
5488
5743
  "path": "tests/asset_version.mjs",
@@ -5492,7 +5747,7 @@
5492
5747
  {
5493
5748
  "path": "tests/atlas.mjs",
5494
5749
  "mode": "0000644",
5495
- "sha256": "8c38fafa17e6bd3606967e3d827b2e1222e1e85317780d55126d3b080939e2e8"
5750
+ "sha256": "ccc47720350deebc3c652d67a75046daf41408fe2089f10684f0ae04b6b6f71e"
5496
5751
  },
5497
5752
  {
5498
5753
  "path": "tests/audit_deps.mjs",
@@ -5507,7 +5762,7 @@
5507
5762
  {
5508
5763
  "path": "tests/auth_admission_gate.mjs",
5509
5764
  "mode": "0000644",
5510
- "sha256": "ba416ae2a11e511968828acaa1365dab40401ccf9eb8d19299add9f35e9bdb7b"
5765
+ "sha256": "32fa656fd994219498b4ba7923fd925eccc039f20fac5ab66cab97b25977ee0f"
5511
5766
  },
5512
5767
  {
5513
5768
  "path": "tests/auth_anthropic_identity.mjs",
@@ -5522,7 +5777,7 @@
5522
5777
  {
5523
5778
  "path": "tests/auth_error_brand.mjs",
5524
5779
  "mode": "0000644",
5525
- "sha256": "748ca496432973927a28a29335f10d4be18b2b59d05346ceb278b81305119702"
5780
+ "sha256": "e28bdcf3149d3baa15fdd4d5a44276953abfa3633ff37923f75355be746fc840"
5526
5781
  },
5527
5782
  {
5528
5783
  "path": "tests/auth_flow_slice1.mjs",
@@ -5539,6 +5794,11 @@
5539
5794
  "mode": "0000644",
5540
5795
  "sha256": "70a269e2f3457c9b00ec97fb1d8bf449467bfbfbb5c520b203f75753685e5219"
5541
5796
  },
5797
+ {
5798
+ "path": "tests/auth_resolve_failure.mjs",
5799
+ "mode": "0000644",
5800
+ "sha256": "8d40fbb16a8b6256551eb014ba3a209b577548fe1e61ccd965227422ac238d90"
5801
+ },
5542
5802
  {
5543
5803
  "path": "tests/auth_session_ttl.mjs",
5544
5804
  "mode": "0000644",
@@ -5589,6 +5849,11 @@
5589
5849
  "mode": "0000644",
5590
5850
  "sha256": "445231e7fea9163e83ec0a76fce981415ed141760e34b165016a8039bba4da51"
5591
5851
  },
5852
+ {
5853
+ "path": "tests/blocker_link.mjs",
5854
+ "mode": "0000644",
5855
+ "sha256": "0ade9bbcb1782ffa2dd01799002dee7d88f6b17dab8ee418fe58e1a06ffb925e"
5856
+ },
5592
5857
  {
5593
5858
  "path": "tests/bongos_box_connect.mjs",
5594
5859
  "mode": "0000644",
@@ -5602,7 +5867,7 @@
5602
5867
  {
5603
5868
  "path": "tests/bongos_downloads.mjs",
5604
5869
  "mode": "0000644",
5605
- "sha256": "b38dc3afcebd1c474cf58ea6c1cc411e0ffbb6d633049bf0bfe4a03b1e436b51"
5870
+ "sha256": "e9bb8c19e1f45679e46b154d4317959d7ee2b30c4b80e65d44f66f2257bb9aca"
5606
5871
  },
5607
5872
  {
5608
5873
  "path": "tests/bongos_login.mjs",
@@ -5642,7 +5907,7 @@
5642
5907
  {
5643
5908
  "path": "tests/box_dns_repoint.mjs",
5644
5909
  "mode": "0000644",
5645
- "sha256": "ab2784a13ea5c381f7282d16967f1ae48a5a1f80510b475746c75973ad84818c"
5910
+ "sha256": "f0718abdcaaf538bff5b7724bf848ec8a81082192fee4f492409a13faf18c578"
5646
5911
  },
5647
5912
  {
5648
5913
  "path": "tests/box_host_keys.mjs",
@@ -5667,7 +5932,7 @@
5667
5932
  {
5668
5933
  "path": "tests/box_ship_permissions.mjs",
5669
5934
  "mode": "0000644",
5670
- "sha256": "7762cd8752056ae168a0af709ffad42c2e8c8ff44e7c7c7698f54f7113a7eb62"
5935
+ "sha256": "5347fc776e8edb533223534707ddc7085af21654298d9d2169d711ecc5cfce2c"
5671
5936
  },
5672
5937
  {
5673
5938
  "path": "tests/box_sync.mjs",
@@ -5682,7 +5947,7 @@
5682
5947
  {
5683
5948
  "path": "tests/box_terminal_ssrf.mjs",
5684
5949
  "mode": "0000644",
5685
- "sha256": "76876d65ed7a8b27efd2b358f40e2fc7d22cec0f01e3412ea9867ee291bd73ab"
5950
+ "sha256": "c2956956fd87f8172d36c4612f04f75babfe3be6261d04d2a295d3416ab32387"
5686
5951
  },
5687
5952
  {
5688
5953
  "path": "tests/boxes.mjs",
@@ -5732,7 +5997,7 @@
5732
5997
  {
5733
5998
  "path": "tests/claim_error_surface.mjs",
5734
5999
  "mode": "0000644",
5735
- "sha256": "b2c813eaa0d2ef630e42d1eb6f72454a95bdfcd0342108fcb3cf2bd62018f3c9"
6000
+ "sha256": "6273b5b86f0fecd24bcb54a36a673ec9d42f81180d602d5d374fc9d07a511072"
5736
6001
  },
5737
6002
  {
5738
6003
  "path": "tests/claim_gate_rebase.mjs",
@@ -5752,7 +6017,7 @@
5752
6017
  {
5753
6018
  "path": "tests/claude_materialize.mjs",
5754
6019
  "mode": "0000644",
5755
- "sha256": "8be8bf17604b760598733387e96d30f3ee12408b10fdd1570ff6c54b1fb59e02"
6020
+ "sha256": "ba55196528236a9473d7038f00f7c7c0d6c8bd9fd05bfe2b11d94688e97cdb90"
5756
6021
  },
5757
6022
  {
5758
6023
  "path": "tests/clawback_confirmed_backlog.mjs",
@@ -5762,7 +6027,7 @@
5762
6027
  {
5763
6028
  "path": "tests/cli_box_scope.mjs",
5764
6029
  "mode": "0000644",
5765
- "sha256": "2bfc3e7cd8e347ad0f6077e5045814fade478a80642f91994beb035a56580459"
6030
+ "sha256": "b9258f690d5dc7c87bcbb12d510b3071a38669777ae9a92a99e683e76ea15e83"
5766
6031
  },
5767
6032
  {
5768
6033
  "path": "tests/cli_lib_formatters.mjs",
@@ -5782,12 +6047,12 @@
5782
6047
  {
5783
6048
  "path": "tests/cloud_bongos_pack.mjs",
5784
6049
  "mode": "0000644",
5785
- "sha256": "3b2e401ed8fbf2923895878a999701328c2a42f78b46f55140701686b2a4310a"
6050
+ "sha256": "7d4277afa6566c6287d71e9ca31333ebf0f6d8532d299537bbc7fa64ab73d86d"
5786
6051
  },
5787
6052
  {
5788
6053
  "path": "tests/conductor.mjs",
5789
6054
  "mode": "0000644",
5790
- "sha256": "b644eaf849361167acd7f09e9d23b759789e679b988afd86397e66cc21751321"
6055
+ "sha256": "27d1c2654d9d0bbd970b088d7aae674c624b70e112a70de63f87fe7a1e99ae7a"
5791
6056
  },
5792
6057
  {
5793
6058
  "path": "tests/confirm_attribution.mjs",
@@ -5842,7 +6107,7 @@
5842
6107
  {
5843
6108
  "path": "tests/criterion_authoring_gate.mjs",
5844
6109
  "mode": "0000644",
5845
- "sha256": "ed83e7ae0f0ab26afc418f7d5b2b02da610dee980389397a33b872b8fd5014f1"
6110
+ "sha256": "23d8c31f310e7ffb840dce3850c1eb2eab59b5513489bde19edb22c5bab6eb75"
5846
6111
  },
5847
6112
  {
5848
6113
  "path": "tests/criterion_progress.mjs",
@@ -5867,7 +6132,7 @@
5867
6132
  {
5868
6133
  "path": "tests/currency_label.mjs",
5869
6134
  "mode": "0000644",
5870
- "sha256": "74e130da2ab7a2e4e86d3a2ec669b4a2c0e007c54dd8f558eb4dc3a377bb0eb4"
6135
+ "sha256": "dd3a232a6bcb8fb26abb88fa98662919a474f61527d88484c14a3bb3c98bf3c8"
5871
6136
  },
5872
6137
  {
5873
6138
  "path": "tests/cutover_codemod.mjs",
@@ -5887,7 +6152,7 @@
5887
6152
  {
5888
6153
  "path": "tests/deploy_instance.mjs",
5889
6154
  "mode": "0000644",
5890
- "sha256": "ab3b368375eaf928383fe768da543e50115982e75d4531ec03b9829337d2585c"
6155
+ "sha256": "1abfa6c8bb119d010d2a53f71373508a31a9cc3c28207ca1dbac2138a7eda595"
5891
6156
  },
5892
6157
  {
5893
6158
  "path": "tests/dev_lib.mjs",
@@ -5907,7 +6172,7 @@
5907
6172
  {
5908
6173
  "path": "tests/devbox_downloads.mjs",
5909
6174
  "mode": "0000644",
5910
- "sha256": "2cf326039b31fdf88e9b19be180923e754e60e629d667b49c730896b7d08586c"
6175
+ "sha256": "91950e7477f9fff30e361bc32def211e1cb3792fa098e9c839d5db1e1ba21d6a"
5911
6176
  },
5912
6177
  {
5913
6178
  "path": "tests/devbox_icons.mjs",
@@ -5992,7 +6257,7 @@
5992
6257
  {
5993
6258
  "path": "tests/display_name.mjs",
5994
6259
  "mode": "0000644",
5995
- "sha256": "b10c1e9af80cc3b97b068a3aa89851ecb55eb3137699d7666ee40426bb5d6ed5"
6260
+ "sha256": "4eac4b50dc7e3b9797f7d7633eb480b04dd5ebde4fc867ec19765177ff22d8b4"
5996
6261
  },
5997
6262
  {
5998
6263
  "path": "tests/dns_preflight.mjs",
@@ -6017,7 +6282,7 @@
6017
6282
  {
6018
6283
  "path": "tests/eviction_policy.mjs",
6019
6284
  "mode": "0000644",
6020
- "sha256": "538266cde93cc7124749c64ad7c749f552528541b5a9eacee596facf701f0568"
6285
+ "sha256": "d6a78357533fdeea3bc33fe97cfcd27b1d04747c600d0a7800ddfca5199dbb1f"
6021
6286
  },
6022
6287
  {
6023
6288
  "path": "tests/extract_json.mjs",
@@ -6032,22 +6297,22 @@
6032
6297
  {
6033
6298
  "path": "tests/file_map.mjs",
6034
6299
  "mode": "0000644",
6035
- "sha256": "10d208f6d2308a64287b7e067ea4f898135e860c5c6ae51bc7d71eb69c24b37d"
6300
+ "sha256": "387eb4455a5e79f930fccae875278841094a52900a1158617345db8b58147d1a"
6036
6301
  },
6037
6302
  {
6038
6303
  "path": "tests/first_admin_bootstrap.mjs",
6039
6304
  "mode": "0000644",
6040
- "sha256": "a85288ae63e220314d3a5a3e649242197bdc47cb1a436113370e71fab42b9b1e"
6305
+ "sha256": "5466ddf0b7e0298206d46da7b84cfd3826e0f549395088bf5ed91397d15f1746"
6041
6306
  },
6042
6307
  {
6043
6308
  "path": "tests/first_run_engine_check.mjs",
6044
6309
  "mode": "0000644",
6045
- "sha256": "9a56f41889e6a43a740ab9d9d9a162dd6023102a50cadce92db1b0834679aea7"
6310
+ "sha256": "ca84a108f24015ec3a94d8510960f2cc5963f5f502c35d84567aa35e8727021e"
6046
6311
  },
6047
6312
  {
6048
6313
  "path": "tests/fitness.mjs",
6049
6314
  "mode": "0000644",
6050
- "sha256": "20dfafcb75ac7f5c48272af46b51122576e8776a45819a81bf02511b0e22cdd4"
6315
+ "sha256": "ebb93b7bdd90c0775f71eb949a6e47022570bdb35c901bd4522413fefa750e14"
6051
6316
  },
6052
6317
  {
6053
6318
  "path": "tests/fitness_two_root.mjs",
@@ -6062,7 +6327,7 @@
6062
6327
  {
6063
6328
  "path": "tests/gate_approvals.mjs",
6064
6329
  "mode": "0000644",
6065
- "sha256": "6ef688216e53c77f629d679a9a199bbf7eb244dd098daf0c193550e2d1e52ec2"
6330
+ "sha256": "900923ab39dee11de4c59ec977555346aa52ba875d12e2b4ca27013bf99e51c2"
6066
6331
  },
6067
6332
  {
6068
6333
  "path": "tests/gate_review.mjs",
@@ -6087,7 +6352,7 @@
6087
6352
  {
6088
6353
  "path": "tests/github_push_land_proof.mjs",
6089
6354
  "mode": "0000644",
6090
- "sha256": "f89e0b986cce4fdfecb47766b47c492668807e54f19ce7b214df204a6efe6a68"
6355
+ "sha256": "080a19cae0faf168b4b7fa31d1a68d0fe84b3d5b41c9bbfda1f5ecee34ad8ca4"
6091
6356
  },
6092
6357
  {
6093
6358
  "path": "tests/github_push_merge_driver.mjs",
@@ -6097,17 +6362,17 @@
6097
6362
  {
6098
6363
  "path": "tests/github_repos_helpers.mjs",
6099
6364
  "mode": "0000644",
6100
- "sha256": "be8b6dd0c0f956a66759f5c3ad9e0548088c0e3ab14926b3c706c011d13097fe"
6365
+ "sha256": "14d68c064218655bdbc04fe95dd7d03a8ac0d152301ac65c8c2c7b9fd93926ef"
6101
6366
  },
6102
6367
  {
6103
6368
  "path": "tests/github_token_store.mjs",
6104
6369
  "mode": "0000644",
6105
- "sha256": "4d7de0efaa515422a0f0d8f2f8bd0dd8e6ccb56d7bb91b614e3396e2554d7f65"
6370
+ "sha256": "d0d10628a17717fdef505dcf501915ecfcc31a0c99d9e5d4cf6dc06b47d8c883"
6106
6371
  },
6107
6372
  {
6108
6373
  "path": "tests/goal_abuse_matrix.mjs",
6109
6374
  "mode": "0000644",
6110
- "sha256": "ee265b8c35a122ff54f1e62ed46bafd5f9c5e342bfd8d432f87377966d3974b7"
6375
+ "sha256": "e5b32e9c4a38e405cfd3185b49f4a1d9a6b39a0f39c12053c01ba3680c550120"
6111
6376
  },
6112
6377
  {
6113
6378
  "path": "tests/goal_achievement.mjs",
@@ -6119,6 +6384,11 @@
6119
6384
  "mode": "0000644",
6120
6385
  "sha256": "c4eb5f6a36faed5c90b500c20bc84944dba62a0af06d4c88c08eaa684bf96aad"
6121
6386
  },
6387
+ {
6388
+ "path": "tests/goal_cli.mjs",
6389
+ "mode": "0000644",
6390
+ "sha256": "8d1f3511b8ecd0bb88f75a936ee29035d9f789a2be4f6aedabb46b9be5bd2385"
6391
+ },
6122
6392
  {
6123
6393
  "path": "tests/goal_conflicts.mjs",
6124
6394
  "mode": "0000644",
@@ -6164,6 +6434,11 @@
6164
6434
  "mode": "0000644",
6165
6435
  "sha256": "412ca7c0bdc10abc90146b777571bcc7a180e19f0e3d058c6998ac2d33941940"
6166
6436
  },
6437
+ {
6438
+ "path": "tests/governance_abuse_matrix.mjs",
6439
+ "mode": "0000644",
6440
+ "sha256": "370578b833f99e0ef3ffa2f54203109cf8569613c122c4046b2f7871633f52b3"
6441
+ },
6167
6442
  {
6168
6443
  "path": "tests/governance_catalog.mjs",
6169
6444
  "mode": "0000644",
@@ -6179,6 +6454,21 @@
6179
6454
  "mode": "0000644",
6180
6455
  "sha256": "eccfd3a277ced9c4d83bc6bf3557126628573101b21ac4a31aa1a1fdc3d1d1e8"
6181
6456
  },
6457
+ {
6458
+ "path": "tests/governance_fold.mjs",
6459
+ "mode": "0000644",
6460
+ "sha256": "e460eb69eac6ad7af6c838f1d009dbe5841ffd5f51d5f2cbef42a437bd647585"
6461
+ },
6462
+ {
6463
+ "path": "tests/governance_fold_bench.mjs",
6464
+ "mode": "0000644",
6465
+ "sha256": "93025d2a9cf51db2910ca26e4d605b54b52d7cd16a3e75f918582f28fcf2f4eb"
6466
+ },
6467
+ {
6468
+ "path": "tests/governance_live_proof.mjs",
6469
+ "mode": "0000644",
6470
+ "sha256": "33635e67bee87b917c30eb59ffbd3d8429b67dc19cf1df6be624323bac4c583e"
6471
+ },
6182
6472
  {
6183
6473
  "path": "tests/governance_ownership_scope.mjs",
6184
6474
  "mode": "0000644",
@@ -6187,12 +6477,12 @@
6187
6477
  {
6188
6478
  "path": "tests/governance_page_gates.mjs",
6189
6479
  "mode": "0000644",
6190
- "sha256": "28e74bb5d7e5a136835810d083c5c8d4b448e2cc173d5784b430eec726add839"
6480
+ "sha256": "cf0d01b58a209d9d2ad64e2c1c999ce2338fb0f69bb5ddff43ca7f24d7bc66be"
6191
6481
  },
6192
6482
  {
6193
6483
  "path": "tests/governance_parity.mjs",
6194
6484
  "mode": "0000644",
6195
- "sha256": "252a3f8039cfae826f3e3d50d2e7af277afdc06d7446ec13b8f4e17d76053e57"
6485
+ "sha256": "a5b58fa4ba3aae75a5062a81a61ff4664c0996ebeb782d04e4ddc207ec2008e0"
6196
6486
  },
6197
6487
  {
6198
6488
  "path": "tests/governance_principals.mjs",
@@ -6207,7 +6497,7 @@
6207
6497
  {
6208
6498
  "path": "tests/governance_require_permission.mjs",
6209
6499
  "mode": "0000644",
6210
- "sha256": "90ef6fc86adc762f12064f1db7b43a111d5b5c3c2be813c152e0525a0a4cfc85"
6500
+ "sha256": "58090f6e6cb0cb7e99b03675deeb80302986b053dc1402e254f64ae4126df084"
6211
6501
  },
6212
6502
  {
6213
6503
  "path": "tests/governance_resolver.mjs",
@@ -6219,6 +6509,11 @@
6219
6509
  "mode": "0000644",
6220
6510
  "sha256": "350599cd0b2d3e10d3a0b92b9551599783a8046b6cacc429a6276277e68a0693"
6221
6511
  },
6512
+ {
6513
+ "path": "tests/governance_routes.mjs",
6514
+ "mode": "0000644",
6515
+ "sha256": "aaa4e675bdcaef579bca67a204700a3cd50be044acb9bfe798b92af583ab25c9"
6516
+ },
6222
6517
  {
6223
6518
  "path": "tests/governance_seed.mjs",
6224
6519
  "mode": "0000644",
@@ -6262,7 +6557,7 @@
6262
6557
  {
6263
6558
  "path": "tests/grader.mjs",
6264
6559
  "mode": "0000644",
6265
- "sha256": "1f593cd9f3f841e2049028ea815dfb284136a28fd59f4afa0a0572583a269374"
6560
+ "sha256": "380ef7c395dea5ba988a1b0f9492451c621ebc01ba5e04c2674ebb54fe32cddd"
6266
6561
  },
6267
6562
  {
6268
6563
  "path": "tests/grader_bypass.mjs",
@@ -6287,7 +6582,7 @@
6287
6582
  {
6288
6583
  "path": "tests/hall_nav.mjs",
6289
6584
  "mode": "0000644",
6290
- "sha256": "fa4c121b840b6ab3e0d0d671734a546a6f033585c4a7be1f17cf61283d393610"
6585
+ "sha256": "c2456b6fe8845c5778e9e57323cd7a0f2f9d6e96ef9d3a9d4f47f0312da07964"
6291
6586
  },
6292
6587
  {
6293
6588
  "path": "tests/hall_palette.mjs",
@@ -6302,7 +6597,7 @@
6302
6597
  {
6303
6598
  "path": "tests/helpers.mjs",
6304
6599
  "mode": "0000644",
6305
- "sha256": "341d06038bec0726443c1844159983c44bb99f18f26697967fba9f2b64212897"
6600
+ "sha256": "56321847cf62d27db361b7b4f2511f3573967e3d1b95630f7efd48bad74a7a8f"
6306
6601
  },
6307
6602
  {
6308
6603
  "path": "tests/hierarchy-config.mjs",
@@ -6312,13 +6607,18 @@
6312
6607
  {
6313
6608
  "path": "tests/hook_core_resolve.mjs",
6314
6609
  "mode": "0000644",
6315
- "sha256": "c941d82f376eac7c312208cbc7465c2945e983fdfa47773c7681106f00c0e825"
6610
+ "sha256": "7035673d4b9e55166acc19d5c40a2128c0aceb233bca6856eace34bebc1139e4"
6316
6611
  },
6317
6612
  {
6318
6613
  "path": "tests/hook_user_agents.mjs",
6319
6614
  "mode": "0000644",
6320
6615
  "sha256": "7289010b4d9e52bce152b4acba1cd6e17f747756719664c7f7e07ac818f885b7"
6321
6616
  },
6617
+ {
6618
+ "path": "tests/host_topology_skips.mjs",
6619
+ "mode": "0000644",
6620
+ "sha256": "7d384cd84cdc93b8e7b57df291a4600a40f43346fd2a52168324ecde219f1388"
6621
+ },
6322
6622
  {
6323
6623
  "path": "tests/idea_triage.mjs",
6324
6624
  "mode": "0000644",
@@ -6337,12 +6637,12 @@
6337
6637
  {
6338
6638
  "path": "tests/infra_exec_paths.mjs",
6339
6639
  "mode": "0000644",
6340
- "sha256": "a88324a9a9368667d76af80b4cf283caf020fa2069092b8e2d23d609653572b8"
6640
+ "sha256": "0437795b927bf68baa1e08ba2e52ca5b1799d41938402159ffb01f2f5bff01b2"
6341
6641
  },
6342
6642
  {
6343
6643
  "path": "tests/init.mjs",
6344
6644
  "mode": "0000644",
6345
- "sha256": "cdfb04930f74b6f4085db59c7f5a602d1e6ca921778c97dddbac483a4886ee96"
6645
+ "sha256": "02b7753faee3c1b8a193d1f85a15e846e6b0a2eb3166f20e3f3387c458905e04"
6346
6646
  },
6347
6647
  {
6348
6648
  "path": "tests/instance_config.mjs",
@@ -6379,6 +6679,11 @@
6379
6679
  "mode": "0000644",
6380
6680
  "sha256": "db9ad86df4c9593db89f91ef2306c30eb33ae56bebe5b210a4b3a1912f67d42c"
6381
6681
  },
6682
+ {
6683
+ "path": "tests/known_failing_ratchet.mjs",
6684
+ "mode": "0000644",
6685
+ "sha256": "0afe138db1e80744f79a352c7ac5e0e998c05d07885aa23d047b9da2ed4be237"
6686
+ },
6382
6687
  {
6383
6688
  "path": "tests/land_watch.mjs",
6384
6689
  "mode": "0000644",
@@ -6387,7 +6692,7 @@
6387
6692
  {
6388
6693
  "path": "tests/lifecycle-card.mjs",
6389
6694
  "mode": "0000644",
6390
- "sha256": "1ff087ef15ba217c4492399c983b16dd1a6351c82ef1a20857e8714dc5f82dd4"
6695
+ "sha256": "3bf8585f0cb4afa7db94d3a8db37d0fea34336dfab3053f518aae029199b1563"
6391
6696
  },
6392
6697
  {
6393
6698
  "path": "tests/lifecycle_breakdown_view.mjs",
@@ -6432,12 +6737,12 @@
6432
6737
  {
6433
6738
  "path": "tests/main_audit.mjs",
6434
6739
  "mode": "0000644",
6435
- "sha256": "5f3437449911e3aed2e06c2cc4ec782a9d6535a237e0f5ee686efbe86ddc1658"
6740
+ "sha256": "9a1813d6036886ea07d1563e71a466e66c28554b75b22605464c795fd9fa2ebb"
6436
6741
  },
6437
6742
  {
6438
6743
  "path": "tests/memory_isolation.mjs",
6439
6744
  "mode": "0000644",
6440
- "sha256": "fed7f019384aa7f7f17c22e927e8fdddcb51e6a8a9c5716d65d2a83247725e9e"
6745
+ "sha256": "8f0f583120c4fc2e7cb92c78afd0d170482d6d555bd6a5c8c04d5e66845feb13"
6441
6746
  },
6442
6747
  {
6443
6748
  "path": "tests/memory_map.mjs",
@@ -6467,7 +6772,7 @@
6467
6772
  {
6468
6773
  "path": "tests/migrate_root_resolution.mjs",
6469
6774
  "mode": "0000644",
6470
- "sha256": "caf6f21d69cf7ab0521deb40a10450e6f2fc7c3baadcd4602dbfc3edcd224d70"
6775
+ "sha256": "eec69562f86d218a0f22411bbf6707d864e42e5f0b3f841692ca938d775a45ad"
6471
6776
  },
6472
6777
  {
6473
6778
  "path": "tests/migration_allocation.mjs",
@@ -6502,7 +6807,7 @@
6502
6807
  {
6503
6808
  "path": "tests/mirror_redact.mjs",
6504
6809
  "mode": "0000644",
6505
- "sha256": "38b984f62bede5766e522a20c8612ac614a8070bcdc39ad78a48440b880034ab"
6810
+ "sha256": "77c58f22a2d4c0d5b3490afc4b804743c5239afa407d0c345b0d7e927e0eb04a"
6506
6811
  },
6507
6812
  {
6508
6813
  "path": "tests/model_alloc_prefs.mjs",
@@ -6517,7 +6822,7 @@
6517
6822
  {
6518
6823
  "path": "tests/module_api.mjs",
6519
6824
  "mode": "0000644",
6520
- "sha256": "59b10b2e729e652d4e1ded4f53c44c1364631ffc4b7bccd81de271f738e89579"
6825
+ "sha256": "f9142ae695964882ef4d6c4b83fec12c9ab32d0e31b3135333c27d695afb3262"
6521
6826
  },
6522
6827
  {
6523
6828
  "path": "tests/module_cli.mjs",
@@ -6532,7 +6837,7 @@
6532
6837
  {
6533
6838
  "path": "tests/module_loader.mjs",
6534
6839
  "mode": "0000644",
6535
- "sha256": "2b4594974ebbfb66481ced0bd577a92aa58a8ea91cfec20aed750ad6d4bfc080"
6840
+ "sha256": "005e784feb96676ada71399fae94e7b11c579159cd80a7fac0ba0ac79bda1e5d"
6536
6841
  },
6537
6842
  {
6538
6843
  "path": "tests/module_manifest.mjs",
@@ -6572,12 +6877,12 @@
6572
6877
  {
6573
6878
  "path": "tests/modules.mjs",
6574
6879
  "mode": "0000644",
6575
- "sha256": "8fe3bf808c207f8f5dd863ab2bd8f209eec9e797d4ae8694dc6d292975708c45"
6880
+ "sha256": "3e786351878160a4726ef8712c33fc2d85bdb7aca8bcadb4c5c19f120c23e023"
6576
6881
  },
6577
6882
  {
6578
6883
  "path": "tests/modules_route.mjs",
6579
6884
  "mode": "0000644",
6580
- "sha256": "e841237b01395741c235868c1ef62bcf0cf3d5c90b67f9849a41aa254a6b1f5a"
6885
+ "sha256": "079d7eef5828912e306e9dbbe081fef6004526067bd15aa6433dc2ff1873a4be"
6581
6886
  },
6582
6887
  {
6583
6888
  "path": "tests/needs_rebase.mjs",
@@ -6622,12 +6927,12 @@
6622
6927
  {
6623
6928
  "path": "tests/onboarding_observability.mjs",
6624
6929
  "mode": "0000644",
6625
- "sha256": "9d10ced73274d1fe3eabdbaeb8cc892af42acc02cd235dbe4f4ee36e3599d37d"
6930
+ "sha256": "9a14f7cc72a1beed580cc5cc219bf221f30e11892b1c42924d77785ead8d95a4"
6626
6931
  },
6627
6932
  {
6628
6933
  "path": "tests/onboarding_route_signals.mjs",
6629
6934
  "mode": "0000644",
6630
- "sha256": "f4c9cdb18262aadb0b947a6b0be6be42be981bc2e5cc1f3ab59e5b8cb229ca61"
6935
+ "sha256": "53d8761d47a5288bc3e755f478b6b24be63a035510948d32e0eb0ea246498ea9"
6631
6936
  },
6632
6937
  {
6633
6938
  "path": "tests/onboarding_state.mjs",
@@ -6637,7 +6942,7 @@
6637
6942
  {
6638
6943
  "path": "tests/one_active_claim_per_session.mjs",
6639
6944
  "mode": "0000644",
6640
- "sha256": "6e84981e96c18ee5e4d5a66ef5d076f4272bb2347cc21d3f2da4838a00f22504"
6945
+ "sha256": "3a4d6cc704d0ecd7be2f094ad10baf9c725a2045587994f076de76fb26ce90e5"
6641
6946
  },
6642
6947
  {
6643
6948
  "path": "tests/orphaned_claim_ship.mjs",
@@ -6697,7 +7002,7 @@
6697
7002
  {
6698
7003
  "path": "tests/pre_compact.mjs",
6699
7004
  "mode": "0000644",
6700
- "sha256": "0bf6a4991bece0101c1f5184dfcef11640931452281525ab63217f146f5f26c1"
7005
+ "sha256": "c9604d5184f2f1243c4bfab594e3f0e2c04060aadc2d726c923e72d38e276577"
6701
7006
  },
6702
7007
  {
6703
7008
  "path": "tests/preflight_checks.mjs",
@@ -6707,23 +7012,28 @@
6707
7012
  {
6708
7013
  "path": "tests/preview_server.mjs",
6709
7014
  "mode": "0000644",
6710
- "sha256": "2d4f63b1dd4e50c2dfb7889de00301cb4c6c2d908116d824426de1fe99601d24"
7015
+ "sha256": "3c85d28ecc55e375988f3e55aee993c8c84220889678262d8207146c2772f3f5"
6711
7016
  },
6712
7017
  {
6713
7018
  "path": "tests/profile_route.mjs",
6714
7019
  "mode": "0000644",
6715
- "sha256": "69529c5aee0df18cc23876b7766d01add2b4e2c6ed2d6e3c309235196a15daf8"
7020
+ "sha256": "dc354f082204073409aea90df9b91f149d474c6930b761ed5c9928bb76e1358f"
6716
7021
  },
6717
7022
  {
6718
7023
  "path": "tests/provision.mjs",
6719
7024
  "mode": "0000644",
6720
- "sha256": "6951112ee088b536813fffbf0860ec73dcbb978e12b626d6ee3e5cd691a98e33"
7025
+ "sha256": "6f47c2a9c43fbef9b26090c9ca794a67bbca279f5bc79db625f26fa43775d4b7"
6721
7026
  },
6722
7027
  {
6723
7028
  "path": "tests/provisioning_github_app_routes.mjs",
6724
7029
  "mode": "0000644",
6725
7030
  "sha256": "fce4837d4882dcd980bc144a2afeaf04fbce99aa31d7d1a72a277bad0ebfae99"
6726
7031
  },
7032
+ {
7033
+ "path": "tests/provisioning_onboard_mode.mjs",
7034
+ "mode": "0000644",
7035
+ "sha256": "9a41d64fba3a8cc8ffdbccb0aea363ca6ccb63909cfeefd4bd0b05ebab052403"
7036
+ },
6727
7037
  {
6728
7038
  "path": "tests/pruned_lockfile_integrity.mjs",
6729
7039
  "mode": "0000644",
@@ -6747,18 +7057,23 @@
6747
7057
  {
6748
7058
  "path": "tests/publish_manifest.mjs",
6749
7059
  "mode": "0000644",
6750
- "sha256": "c28a54a36d196b16e9335361c12a8865bbc43e7a59604479edf75e8d84108f82"
7060
+ "sha256": "8849310cc884c09785478faa8193c853468a46b79b63e72f1e362d95586fcdcc"
6751
7061
  },
6752
7062
  {
6753
7063
  "path": "tests/publish_reconciler.mjs",
6754
7064
  "mode": "0000644",
6755
- "sha256": "01ff3691f6b12e6d5bc66a1f0b31027a4f05f5dae797fec29e09c1baefc3d4dc"
7065
+ "sha256": "fa54fe19a54153ce65f8a98ccce22c9aad7e2c928a648fb2fc621067168eb703"
6756
7066
  },
6757
7067
  {
6758
7068
  "path": "tests/rank_gate.mjs",
6759
7069
  "mode": "0000644",
6760
7070
  "sha256": "2745778ec6ff188a9e65b0a5964f07d5a399aaafdd8854aa962e3cb6728244e6"
6761
7071
  },
7072
+ {
7073
+ "path": "tests/rank_tier_single_source.mjs",
7074
+ "mode": "0000644",
7075
+ "sha256": "930fccbeeeaece47fcf7aa70132f16a40cebe20c408e67c7dd177c4b4f12a06c"
7076
+ },
6762
7077
  {
6763
7078
  "path": "tests/rate_limit_public.mjs",
6764
7079
  "mode": "0000644",
@@ -6777,7 +7092,7 @@
6777
7092
  {
6778
7093
  "path": "tests/recall_hints.mjs",
6779
7094
  "mode": "0000644",
6780
- "sha256": "bcfbbae82e6e08865fe4f8a9fd8c29bfd5abcedc2f3b207390c5c5cbd6d326dc"
7095
+ "sha256": "d337def56a38ae73a195fa057e52a0e6f39fd6a228348a4b7d3e86673cfef5e8"
6781
7096
  },
6782
7097
  {
6783
7098
  "path": "tests/recent_shipped_window.mjs",
@@ -6802,7 +7117,7 @@
6802
7117
  {
6803
7118
  "path": "tests/repo_map.mjs",
6804
7119
  "mode": "0000644",
6805
- "sha256": "8099ce02b4b4bb70b03b78d0ad2dee7555dba810cecccf5a62c718dd385575b6"
7120
+ "sha256": "b88208852062b4e8c8efcb44380e13205cd4d5ece7eed4e6c340a0ea969b33a9"
6806
7121
  },
6807
7122
  {
6808
7123
  "path": "tests/reward_gate.mjs",
@@ -6822,7 +7137,7 @@
6822
7137
  {
6823
7138
  "path": "tests/route_permission_check.mjs",
6824
7139
  "mode": "0000644",
6825
- "sha256": "fa6e737b7cc99438ae53291cb1003dff79e5e1fd16258ba9a62b59e74e2e09c0"
7140
+ "sha256": "8e61e22dd5750eb5fcec706ee876a7ab51dd21d2feee22f961185c9ef3a3bf62"
6826
7141
  },
6827
7142
  {
6828
7143
  "path": "tests/route_rank_check.mjs",
@@ -6842,7 +7157,7 @@
6842
7157
  {
6843
7158
  "path": "tests/rubric_fixtures.mjs",
6844
7159
  "mode": "0000644",
6845
- "sha256": "fd9f7e8936659ee62683c0c4b957933f0aa3bb31ce4df9b104a7bcc1a756206f"
7160
+ "sha256": "96fc57ac449e372e7f762f03a0dcfef1db85492221c8b837638122388499119d"
6846
7161
  },
6847
7162
  {
6848
7163
  "path": "tests/run_routine.mjs",
@@ -6852,12 +7167,12 @@
6852
7167
  {
6853
7168
  "path": "tests/run_routine_two_root.mjs",
6854
7169
  "mode": "0000644",
6855
- "sha256": "060a70b752c7a7459a7a5358f7bb7aaf436bdbf65c8fa5d3f553855fa56e54b1"
7170
+ "sha256": "b5698af4ca50c44b384a3adfd1a1b1132bab630241ebb70ac77b13a67ffc8eae"
6856
7171
  },
6857
7172
  {
6858
7173
  "path": "tests/sandbox_stage.mjs",
6859
7174
  "mode": "0000644",
6860
- "sha256": "88654f839d33d60b5fd17b5418f866271fb51c29994cbc74a8a9acc6c511266a"
7175
+ "sha256": "b499ea62cdc1a615e565ce7b0379b2cab83b9aaa8098361f94d3eb93ebc7f927"
6861
7176
  },
6862
7177
  {
6863
7178
  "path": "tests/scrubber_corpus.mjs",
@@ -6872,7 +7187,7 @@
6872
7187
  {
6873
7188
  "path": "tests/search_ingest.mjs",
6874
7189
  "mode": "0000644",
6875
- "sha256": "d937836667b74df91207e4479979bde049655970f3a716d41328bda8b38933de"
7190
+ "sha256": "504a855803d88468667663f663656dfd8e25726b90a412e34bcf55da0ad57d5e"
6876
7191
  },
6877
7192
  {
6878
7193
  "path": "tests/search_ingest_db.mjs",
@@ -6897,7 +7212,7 @@
6897
7212
  {
6898
7213
  "path": "tests/security_docs.mjs",
6899
7214
  "mode": "0000644",
6900
- "sha256": "852b1522abba0921f161380266b95f4b86abbf36d8957499cbb89a184b3ff9d0"
7215
+ "sha256": "b3eb71705068be493488ee504b6e1f91e00880f029bd6f8c6d2619602203cbb4"
6901
7216
  },
6902
7217
  {
6903
7218
  "path": "tests/security_route.mjs",
@@ -6907,7 +7222,7 @@
6907
7222
  {
6908
7223
  "path": "tests/sequence.mjs",
6909
7224
  "mode": "0000644",
6910
- "sha256": "47b17cca0f533b07651fb5f1c95335545652abc169b420f39d21af6c524e5753"
7225
+ "sha256": "68e8478af48abc5d3a114f74d1f0bba6cb527c9b457a9f2d291a2ed45cf971dc"
6911
7226
  },
6912
7227
  {
6913
7228
  "path": "tests/served_paths_shipped.mjs",
@@ -6917,7 +7232,7 @@
6917
7232
  {
6918
7233
  "path": "tests/session-cards.mjs",
6919
7234
  "mode": "0000644",
6920
- "sha256": "7591e53074692d6996de7e4a6dbe48259d60916bf5134d081eabbe0dff7e5460"
7235
+ "sha256": "3b9ca3392533ade9dc8fecd33c705e844a3c3c692fd7ffb33a0d582bf8da6ca6"
6921
7236
  },
6922
7237
  {
6923
7238
  "path": "tests/session_506_regression.mjs",
@@ -6972,7 +7287,7 @@
6972
7287
  {
6973
7288
  "path": "tests/session_start_freshness.mjs",
6974
7289
  "mode": "0000644",
6975
- "sha256": "bb0b13119f360a4cdca6f39c3f0b5dfd7d4670e5b927550592fb30c6534d4923"
7290
+ "sha256": "a630ac72981f230e8aa6609152765c13e8928ac329cb0ff3fe615371f31208d2"
6976
7291
  },
6977
7292
  {
6978
7293
  "path": "tests/setup_smoke.mjs",
@@ -7007,17 +7322,17 @@
7007
7322
  {
7008
7323
  "path": "tests/ship_broadcast_server.mjs",
7009
7324
  "mode": "0000644",
7010
- "sha256": "f8e7437e390d729e9ee2884f0e76df7d1b152e864ee527266d6699a091df8905"
7325
+ "sha256": "72507f8192bc95ac1c3a92714d2280a43ed588820ce409586a9dad88c5677b09"
7011
7326
  },
7012
7327
  {
7013
7328
  "path": "tests/ship_card.mjs",
7014
7329
  "mode": "0000644",
7015
- "sha256": "41e9c8698859084c508d967b6b8eb237099aabd54d471bbc8e251e03c35bf7b7"
7330
+ "sha256": "d326bec65ddabbdfedee525c7adadf6c9e3ed4a46e9f44402c3711705897f97a"
7016
7331
  },
7017
7332
  {
7018
7333
  "path": "tests/ship_ci_deploy.mjs",
7019
7334
  "mode": "0000644",
7020
- "sha256": "09397a0a36c74713818f3a690d23d394c59784ca860057f2322b154a9fc93462"
7335
+ "sha256": "02346e000b0b4212a27dce1d2638a52b2e80509eea335110a148886f18ee5b81"
7021
7336
  },
7022
7337
  {
7023
7338
  "path": "tests/ship_preflight.mjs",
@@ -7034,6 +7349,11 @@
7034
7349
  "mode": "0000644",
7035
7350
  "sha256": "2b2ef91bda46ab9a764709ab30b97de6e184a3ab2b86c4b7cb8f1c168fc0a5b7"
7036
7351
  },
7352
+ {
7353
+ "path": "tests/ship_smoke_gate.mjs",
7354
+ "mode": "0000644",
7355
+ "sha256": "43e2f109ce85e99e71daa4573a6ec4fc591b167fe81ee02f2f73ea1ce84d465c"
7356
+ },
7037
7357
  {
7038
7358
  "path": "tests/ship_upload_skip.mjs",
7039
7359
  "mode": "0000644",
@@ -7172,7 +7492,7 @@
7172
7492
  {
7173
7493
  "path": "tests/versions_route.mjs",
7174
7494
  "mode": "0000644",
7175
- "sha256": "0fc0539e087f423af2d93f72aca6fdb0031e590cdbe40b07a1891ddb624e1a23"
7495
+ "sha256": "2a381bab380342e4fc556211d4821c85fdde1f676a6c5c6aa2421a89a573cd27"
7176
7496
  },
7177
7497
  {
7178
7498
  "path": "tests/wandering_prefs.mjs",
@@ -7187,7 +7507,7 @@
7187
7507
  {
7188
7508
  "path": "tests/workflow_exec_paths.mjs",
7189
7509
  "mode": "0000644",
7190
- "sha256": "0fe20bb9b7d6a7ce8f5d1da7a919e1f04673588149f6ef9212213c566f0fc898"
7510
+ "sha256": "43c7c42ffe92143443c45d5ba382d522efa0a16ef14f58675e6a86233e3f8e74"
7191
7511
  },
7192
7512
  {
7193
7513
  "path": "tests/worktree_disambiguation.mjs",
@@ -7197,7 +7517,7 @@
7197
7517
  {
7198
7518
  "path": "tests/worktree_guard.mjs",
7199
7519
  "mode": "0000644",
7200
- "sha256": "df0efb2db07c22aaaa39f621e9db7798f749bee05b4d2ab6b914f7bcbff0794a"
7520
+ "sha256": "aa1aab27bdfc5761586514fa07dacfad125fb1d5dcc7f01c060cbe3556985454"
7201
7521
  },
7202
7522
  {
7203
7523
  "path": "tests/write_validation_gaps.mjs",