@codyswann/lisa 4.48.0 → 4.49.0

package/dist/configs/vitest/synthesis-scratch-reclaim.js

@@ -0,0 +1,226 @@
+/**
+ * Reclaim for abandoned CDK synthesis assemblies left in the platform temp root.
+ *
+ * The scratch sweep in this directory reclaims what Lisa created, proved by an
+ * owner token it wrote itself. Synthesis assemblies carry no such token: CDK
+ * calls `mkdtemp` against the platform temp root with prefix `cdk.out`, so the
+ * directory is real, unowned, and indistinguishable by name from one a live
+ * synthesis is still writing.
+ *
+ * `isStaleForeignEntry` refuses to authorize a foreign entry on age alone, and
+ * that refusal is correct — a long synthesis is indistinguishable from an
+ * abandoned one by mtime. This module supplies the authority age cannot:
+ * **evidence that the writer finished**. CDK writes `manifest.json` when an
+ * assembly completes, so its presence is positive proof that the process which
+ * created the directory got to the end of its work. A directory still being
+ * written has no manifest, and one that just finished has a recent mtime.
+ *
+ * Both facts must hold before anything is removed, and every other case is
+ * reported as undetermined rather than swept. The unsafe path here is the one
+ * that looks like progress: deleting everything matching the prefix finishes
+ * fast and frees the disk, right up until it takes a live synthesis with it.
+ * @module configs/vitest/synthesis-scratch-reclaim
+ */
+import { randomBytes } from "node:crypto";
+import * as fs from "node:fs";
+import * as path from "node:path";
+/** Prefix CDK uses for a `mkdtemp` cloud-assembly directory. */
+export const SYNTHESIS_PREFIX = "cdk.out";
+/** File CDK writes when an assembly completes. */
+export const COMPLETION_MANIFEST = "manifest.json";
+/** How long an assembly must be untouched before completion authorizes removal. */
+export const DEFAULT_QUIESCENCE_MS = 24 * 60 * 60 * 1000;
+/**
+ * Judge one candidate from its facts alone.
+ *
+ * Ordered so the conservative arms win: anything that is not a plain directory,
+ * or cannot be read, or was touched recently, is kept before completion is even
+ * consulted. Completion is necessary but never sufficient.
+ * @param facts - Facts read from the candidate
+ * @param quiescenceMs - Required untouched interval
+ * @returns The bucket and the reason for it
+ */
+export const classifySynthesisEntry = (facts, quiescenceMs = DEFAULT_QUIESCENCE_MS) => {
+    const { name } = facts;
+    const minutes = String(Math.round(facts.ageMs / 60000));
+    const hours = String(Math.round(facts.ageMs / 3600000));
+    if (!facts.directory)
+        return {
+            disposition: "undetermined",
+            name,
+            reason: "not a plain directory; a link or file is never followed",
+        };
+    if (!facts.readable)
+        return {
+            disposition: "undetermined",
+            name,
+            reason: "contents could not be listed, so completion cannot be established",
+        };
+    if (facts.ageMs < quiescenceMs)
+        return {
+            disposition: "live",
+            name,
+            reason: `modified ${minutes} minute(s) ago, inside the quiescence window`,
+        };
+    if (!facts.complete)
+        return {
+            disposition: "undetermined",
+            name,
+            reason: `no ${COMPLETION_MANIFEST}, so the writer is not proven to have finished`,
+        };
+    return {
+        disposition: "reclaimable",
+        name,
+        reason: `completed assembly, untouched for ${hours} hour(s)`,
+    };
+};
+/**
+ * Stat a candidate without following it, returning nothing when it is absent.
+ * @param candidate - Absolute candidate path
+ * @returns Candidate metadata, or undefined
+ */
+const lstatIfPresent = (candidate) => {
+    try {
+        return fs.lstatSync(candidate);
+    }
+    catch {
+        return undefined;
+    }
+};
+/**
+ * List a directory's children, returning nothing when it cannot be read.
+ * @param candidate - Absolute directory path
+ * @returns Direct child names, or undefined
+ */
+const readdirIfPossible = (candidate) => {
+    try {
+        return fs.readdirSync(candidate);
+    }
+    catch {
+        return undefined;
+    }
+};
+/**
+ * Read the facts for one candidate without ever following a symlink.
+ * @param root - Directory holding the candidate
+ * @param name - Direct child basename
+ * @param now - Clock reading for the age computation
+ * @returns Facts describing the candidate
+ */
+export const readSynthesisEntryFacts = (root, name, now) => {
+    const candidate = path.join(root, name);
+    const stat = lstatIfPresent(candidate);
+    if (stat === undefined || !stat.isDirectory())
+        return {
+            ageMs: 0,
+            complete: false,
+            directory: false,
+            name,
+            readable: false,
+        };
+    const children = readdirIfPossible(candidate);
+    return {
+        ageMs: Math.max(0, now - stat.mtimeMs),
+        complete: children?.includes(COMPLETION_MANIFEST) ?? false,
+        directory: true,
+        name,
+        readable: children !== undefined,
+    };
+};
+/**
+ * Revalidate a quarantined candidate against its pre-rename identity.
+ *
+ * This is the arm that survives a writer racing the decision: a directory
+ * swapped for a symlink between the judgement and the unlink fails here rather
+ * than being followed out of the root.
+ * @param quarantine - Quarantined path
+ * @param before - Pinned pre-rename metadata
+ * @throws When device, inode or kind changed across the rename
+ */
+const assertIdentityUnchanged = (quarantine, before) => {
+    const after = fs.lstatSync(quarantine);
+    if (after.dev !== before.dev ||
+        after.ino !== before.ino ||
+        !after.isDirectory())
+        throw new Error("Synthesis assembly identity changed during quarantine");
+};
+/**
+ * Quarantine one candidate and unlink it, revalidating identity across the rename.
+ * @param root - Directory holding the candidate
+ * @param name - Direct child basename
+ * @param afterQuarantine - Adversarial hook for tests
+ * @returns True when the entry was removed
+ */
+const quarantineAndRemove = (root, name, afterQuarantine) => {
+    const candidate = path.join(root, name);
+    const before = fs.lstatSync(candidate);
+    const suffix = randomBytes(6).toString("hex");
+    const quarantine = path.join(root, `.${SYNTHESIS_PREFIX}-reclaim-${String(process.pid)}-${suffix}`);
+    if (!before.isDirectory())
+        return false;
+    fs.renameSync(candidate, quarantine);
+    afterQuarantine?.(quarantine);
+    assertIdentityUnchanged(quarantine, before);
+    fs.rmSync(quarantine, { force: true, recursive: true });
+    return true;
+};
+/**
+ * Attempt one fenced removal, converting a refusal into a reported outcome.
+ * @param options - Root and hooks for this pass
+ * @param verdict - The reclaimable verdict to act on
+ * @returns Whether it was removed, and the verdict to report
+ */
+const attemptRemoval = (options, verdict) => {
+    if (options.apply !== true)
+        return { removed: true, verdict };
+    try {
+        const removed = quarantineAndRemove(options.root, verdict.name, options.afterQuarantine);
+        return removed
+            ? { removed, verdict }
+            : {
+                removed,
+                verdict: { ...verdict, reason: "no longer a plain directory" },
+            };
+    }
+    catch (error) {
+        return {
+            removed: false,
+            verdict: { ...verdict, reason: error.message },
+        };
+    }
+};
+/**
+ * Reclaim completed, quiescent synthesis assemblies from one temp root.
+ *
+ * Removes nothing when no candidate matches the convention: a naming change in
+ * the producing tool must read as "recognised nothing" rather than as a clean
+ * sweep, because the two are opposite facts and only one of them is good news.
+ * @param options - Root, clock, thresholds and hooks
+ * @returns What was found in each bucket, and what was removed
+ */
+export function reclaimSynthesisScratch(options) {
+    const now = options.now ?? Date.now();
+    const quiescenceMs = options.quiescenceMs ?? DEFAULT_QUIESCENCE_MS;
+    const names = (readdirIfPossible(options.root) ?? []).filter(entry => entry.startsWith(SYNTHESIS_PREFIX));
+    const empty = {
+        live: [],
+        reclaimed: [],
+        recognised: false,
+        refused: [],
+        undetermined: [],
+    };
+    if (names.length === 0)
+        return empty;
+    const verdicts = names.map(name => classifySynthesisEntry(readSynthesisEntryFacts(options.root, name, now), quiescenceMs));
+    const outcomes = verdicts
+        .filter(one => one.disposition === "reclaimable")
+        .map(verdict => attemptRemoval(options, verdict));
+    return {
+        live: verdicts.filter(one => one.disposition === "live"),
+        reclaimed: outcomes.filter(one => one.removed).map(one => one.verdict),
+        recognised: true,
+        refused: outcomes.filter(one => !one.removed).map(one => one.verdict),
+        undetermined: verdicts.filter(one => one.disposition === "undetermined"),
+    };
+}
+//# sourceMappingURL=synthesis-scratch-reclaim.js.map

package/dist/configs/vitest/synthesis-scratch-reclaim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"synthesis-scratch-reclaim.js","sourceRoot":"","sources":["../../../src/configs/vitest/synthesis-scratch-reclaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,gEAAgE;AAChE,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAE1C,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAEnD,mFAAmF;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AA6BzD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAA0B,EAC1B,eAAuB,qBAAqB,EACrB,EAAE;IACzB,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,SAAS;QAClB,OAAO;YACL,WAAW,EAAE,cAAc;YAC3B,IAAI;YACJ,MAAM,EAAE,yDAAyD;SAClE,CAAC;IACJ,IAAI,CAAC,KAAK,CAAC,QAAQ;QACjB,OAAO;YACL,WAAW,EAAE,cAAc;YAC3B,IAAI;YACJ,MAAM,EACJ,mEAAmE;SACtE,CAAC;IACJ,IAAI,KAAK,CAAC,KAAK,GAAG,YAAY;QAC5B,OAAO;YACL,WAAW,EAAE,MAAM;YACnB,IAAI;YACJ,MAAM,EAAE,YAAY,OAAO,8CAA8C;SAC1E,CAAC;IACJ,IAAI,CAAC,KAAK,CAAC,QAAQ;QACjB,OAAO;YACL,WAAW,EAAE,cAAc;YAC3B,IAAI;YACJ,MAAM,EAAE,MAAM,mBAAmB,gDAAgD;SAClF,CAAC;IACJ,OAAO;QACL,WAAW,EAAE,aAAa;QAC1B,IAAI;QACJ,MAAM,EAAE,qCAAqC,KAAK,UAAU;KAC7D,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAwB,EAAE;IACjE,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CACxB,SAAiB,EACc,EAAE;IACjC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,IAAY,EACZ,IAAY,EACZ,GAAW,EACU,EAAE;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAC3C,OAAO;YACL,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,KAAK;YAChB,IAAI;YACJ,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9C,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QACtC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,mBAAmB,CAAC,IAAI,KAAK;QAC1D,SAAS,EAAE,IAAI;QACf,IAAI;QACJ,QAAQ,EAAE,QAAQ,KAAK,SAAS;KACjC,CAAC;AACJ,CAAC,CAAC;AA8BF;;;;;;;;;GASG;AACH,MAAM,uBAAuB,GAAG,CAC9B,UAAkB,EAClB,MAAgB,EACV,EAAE;IACR,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvC,IACE,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QACxB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QACxB,CAAC,KAAK,CAAC,WAAW,EAAE;QAEpB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,CAC1B,IAAY,EACZ,IAAY,EACZ,eAA8C,EACrC,EAAE;IACX,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAC1B,IAAI,EACJ,IAAI,gBAAgB,YAAY,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CAChE,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QAAE,OAAO,KAAK,CAAC;IACxC,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACrC,eAAe,EAAE,CAAC,UAAU,CAAC,CAAC;IAC9B,uBAAuB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5C,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAUF;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CACrB,OAAuC,EACvC,OAA8B,EACd,EAAE;IAClB,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,mBAAmB,CACjC,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,eAAe,CACxB,CAAC;QACF,OAAO,OAAO;YACZ,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE;YACtB,CAAC,CAAC;gBACE,OAAO;gBACP,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE;aAC/D,CAAC;IACR,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAG,KAAe,CAAC,OAAO,EAAE;SAC1D,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAuC;IAEvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACnE,MAAM,KAAK,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnE,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,CACnC,CAAC;IACF,MAAM,KAAK,GAAkC;QAC3C,IAAI,EAAE,EAAE;QACR,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,EAAE;KACjB,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAChC,sBAAsB,CACpB,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAChD,YAAY,CACb,CACF,CAAC;IACF,MAAM,QAAQ,GAAG,QAAQ;SACtB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,aAAa,CAAC;SAChD,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC;QACxD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;QACtE,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;QACrE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,cAAc,CAAC;KACzE,CAAC;AACJ,CAAC"}

package/dist/core/nightly-e2e-guard-behavior-certificate.js

@@ -34,9 +34,9 @@ export const NIGHTLY_E2E_GUARD_BEHAVIOR_CERTIFICATES = Object.freeze({
     }),
     dfd2fef680de5ef03e63075e8a61c62ca4d95cdfdff6201939b79c748d3397f6: Object.freeze({
         contractVersion: "1.9.0",
-        packageVersions: Object.freeze(["4.48.0"]),
+        packageVersions: Object.freeze(["4.49.0"]),
         provenances: Object.freeze([
-            "workspace package @codyswann/lisa@4.48.0 (typescript/copy-overwrite/scripts/check-nightly-e2e-health.mjs)",
+            "workspace package @codyswann/lisa@4.49.0 (typescript/copy-overwrite/scripts/check-nightly-e2e-health.mjs)",
         ]),
     }),
 });

package/dist/core/upstream-evidence-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwlFpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAi4QjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}
+{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwlFpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAy4QjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}

package/dist/core/upstream-evidence-manifest.js

@@ -1165,7 +1165,7 @@ export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "scripts/cleanup-amplify-branches.sh": "eb9db90b07818dd156dd48d04b6350a10b39be8ffe0267d72cc13705c8eb5350",
     "scripts/cleanup-github-branches.sh": "88d7442700c3277cbf96c0f3250b8169fdd43812d585ddac417843a65e2b548c",
     "scripts/cleanup-local-merged-branches.sh": "1f9bc0419187b3cdf0182106588e35dc1068d921be74331aab3737a9de25de57",
-    "scripts/cleanup-worktrees.sh": "b47e79c3ad29c6bb0c8441cd99c851adf0bd5e8ded9840ca18fa40d5b7604be4",
+    "scripts/cleanup-worktrees.sh": "711f73fc9238da6a41e16488b77fc7c6ffa1f60b1edec01111959830789d177c",
     "scripts/copy-codex-scripts.mjs": "2d7082d5033088c85f66995aee9e3ee1e7751435e65bfde8e1cb002e6689d476",
     "scripts/copy-opencode-plugin-templates.mjs": "4d68863cd8414d29218280cded63f2c29c3f8d51d8e74cc3b6adfec4f25b06ec",
     "scripts/detect-stale-workflow-inputs.mjs": "04274c1ed972c040ccf0b64aba193368d652769094db6d97706706530e93d74f",
@@ -7714,6 +7714,8 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "src/configs/vitest/coverage-include-authority.ts": true,
     "src/configs/vitest/coverage-include-global-setup.ts": true,
     "src/configs/vitest/coverage-reports-directory.ts": true,
+    "src/configs/vitest/fleet-admission-global-setup.ts": true,
+    "src/configs/vitest/fleet-admission.ts": true,
     "src/configs/vitest/harper-fabric.ts": true,
     "src/configs/vitest/index.ts": true,
     "src/configs/vitest/nestjs.ts": true,
@@ -7736,6 +7738,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "src/configs/vitest/scratch-sweep.ts": true,
     "src/configs/vitest/scratch-tmpdir-trust.ts": true,
     "src/configs/vitest/scratch.ts": true,
+    "src/configs/vitest/synthesis-scratch-reclaim.ts": true,
     "src/configs/vitest/typescript.ts": true,
     "src/configs/worktrees.ts": true,
     "src/copilot/copilot-instructions-installer.ts": true,
@@ -8595,6 +8598,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/config/scratch-tmpdir-trust.test.ts": true,
     "tests/unit/config/security-pin-floors.test.ts": true,
     "tests/unit/config/shipped-mjs-roster.test.ts": true,
+    "tests/unit/config/synthesis-scratch-reclaim.test.ts": true,
     "tests/unit/config/template-script-toolchain.test.ts": true,
     "tests/unit/config/test-run-child-process-analyzer.test.ts": true,
     "tests/unit/config/test-run-supervision-wiring.test.ts": true,
@@ -8604,6 +8608,8 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/config/tsconfig-template-references.test.ts": true,
     "tests/unit/config/vitest-base.test.ts": true,
     "tests/unit/config/vitest-cdk.test.ts": true,
+    "tests/unit/config/vitest-fleet-admission.test.ts": true,
+    "tests/unit/config/vitest-fleet-denominator.test.ts": true,
     "tests/unit/config/vitest-fleet-discovery.test.ts": true,
     "tests/unit/config/vitest-nestjs.test.ts": true,
     "tests/unit/config/vitest-scratch-inspection.test.ts": true,
@@ -8958,6 +8964,8 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/scripts/check-whole-output-guards.test.ts": true,
     "tests/unit/scripts/check-workflow-package-contracts.test.ts": true,
     "tests/unit/scripts/check-workflow-package-paths.test.ts": true,
+    "tests/unit/scripts/cleanup-worktrees-apply.test.ts": true,
+    "tests/unit/scripts/cleanup-worktrees-unreadable.test.ts": true,
     "tests/unit/scripts/codex-hook-filter.test.ts": true,
     "tests/unit/scripts/command-envelope.test.ts": true,
     "tests/unit/scripts/conflict-prover-markers-and-index.test.ts": true,