archal 0.9.20 → 0.10.0

package/dist/vitest/index.cjs

@@ -32,7 +32,6 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   ArchalReporter: () => ArchalReporter,
-  archalVitestConfig: () => archalVitestConfig,
   archalVitestProject: () => archalVitestProject,
   archalVitestRootConfig: () => archalVitestRootConfig,
   archalVitestWorkspace: () => archalVitestWorkspace,
@@ -63,6 +62,8 @@ var CREDENTIALS_MASTER_KEY_ENV_VAR = "ARCHAL_CREDENTIALS_MASTER_KEY";
 var KEYCHAIN_SERVICE = "archal-cli";
 var KEYCHAIN_ACCOUNT = "credentials-master-key";
 var HOSTED_DEFAULT_AUTH_BASE_URL = "https://www.archal.ai";
+var HOSTED_DEFAULT_API_BASE_URL = "https://api.archal.ai";
+var WORKSPACE_API_KEY_PREFIX = "archal_ws_";
 var STRICT_ENDPOINTS_ENV_VAR = "ARCHAL_STRICT_ENDPOINTS";
 var REQUEST_TIMEOUT_MS = 8e3;
 var ENV_TOKEN_FALLBACK_TTL_SECONDS = 24 * 60 * 60;
@@ -72,11 +73,6 @@ function isPlan(value) {
   return value === "free" || value === "pro" || value === "enterprise";
 }
 
-// ../node-auth/src/errors.ts
-function errorMessage(error) {
-  return error instanceof Error ? error.message : String(error);
-}
-
 // ../node-auth/src/credential-store.ts
 var import_node_child_process = require("child_process");
 var import_node_crypto = require("crypto");
@@ -109,7 +105,7 @@ var GENERATED_CLONE_CATALOG = [
     name: "Cal.com",
     description: "Event types, schedules, availability slots, bookings, calendars, and webhooks.",
     stage: "preview",
-    toolCount: 18,
+    toolCount: 35,
     transport: "both",
     architectureClass: "domain-simulator",
     domainPrimitives: [
@@ -127,7 +123,7 @@ var GENERATED_CLONE_CATALOG = [
     name: "ClickUp",
     description: "Teams, spaces, folders, lists, tasks, comments, tags, time tracking, and checklists.",
     stage: "preview",
-    toolCount: 40,
+    toolCount: 123,
     transport: "both",
     architectureClass: "standard-core",
     domainPrimitives: [],
@@ -140,7 +136,7 @@ var GENERATED_CLONE_CATALOG = [
     name: "Customer.io",
     description: "Messaging automation across campaigns, broadcasts, transactional email, segments, customers, and message delivery.",
     stage: "preview",
-    toolCount: 22,
+    toolCount: 129,
     transport: "rest",
     architectureClass: "standard-core",
     domainPrimitives: [],
@@ -205,7 +201,7 @@ var GENERATED_CLONE_CATALOG = [
     name: "GitLab",
     description: "Projects, branches, commits, issues, merge requests, pipelines, labels, milestones, releases, and webhooks.",
     stage: "preview",
-    toolCount: 46,
+    toolCount: 559,
     transport: "both",
     architectureClass: "domain-simulator",
     domainPrimitives: [
@@ -240,7 +236,7 @@ var GENERATED_CLONE_CATALOG = [
     name: "HubSpot",
     description: "CRM contacts, companies, deals, tickets, and engagements.",
     stage: "preview",
-    toolCount: 41,
+    toolCount: 44,
     transport: "rest",
     architectureClass: "replay-shell",
     domainPrimitives: [
@@ -275,7 +271,7 @@ var GENERATED_CLONE_CATALOG = [
     name: "Linear",
     description: "Issues, projects, teams, cycles, and workflows.",
     stage: "public",
-    toolCount: 50,
+    toolCount: 53,
     transport: "both",
     architectureClass: "domain-simulator",
     domainPrimitives: [
@@ -344,7 +340,7 @@ var GENERATED_CLONE_CATALOG = [
     name: "Sentry",
     description: "Error monitoring across organizations, projects, teams, issues, events, releases, and DSN keys.",
     stage: "preview",
-    toolCount: 25,
+    toolCount: 34,
     transport: "rest",
     architectureClass: "domain-simulator",
     domainPrimitives: [
@@ -446,14 +442,10 @@ var GENERATED_CLONE_CATALOG = [
     name: "Webflow",
     description: "Sites, pages, CMS collections, items, assets, forms, and webhooks.",
     stage: "preview",
-    toolCount: 19,
-    transport: "rest",
-    architectureClass: "replay-shell",
-    domainPrimitives: [
-      "recording replay cursor",
-      "CMS collection/item overlays",
-      "publish lifecycle captures"
-    ],
+    toolCount: 104,
+    transport: "both",
+    architectureClass: "standard-core",
+    domainPrimitives: [],
     behaviorOwner: null,
     opsCoverage: 100
   }
@@ -549,142 +541,11 @@ var STARTABLE_CLONE_CATALOG = CLONE_CATALOG.filter(
   (entry) => STARTABLE_CLONE_ID_SET.has(entry.id)
 );
 
-// ../billing-constants/src/credit-catalog.ts
-var CREDIT_COGS_MARKUP = 3;
-var CREDIT_TARGET_GROSS_MARGIN_PERCENT = Math.round(
-  (1 - 1 / CREDIT_COGS_MARKUP) * 100
-);
-
-// ../billing-constants/src/index.ts
-var PLAN_MONTHLY_TWIN_MINUTE_LIMITS = {
-  free: 500,
-  pro: 5e3,
-  enterprise: null
-};
-var PLAN_CONCURRENT_SESSION_LIMITS = {
-  free: 3,
-  pro: 10,
-  enterprise: 50
-};
-var FREE_WORKSPACE_MEMBER_LIMIT = 2;
-var PRO_PLAN_PRICE_USD = 199;
-function formatMinutesLabel(minutes) {
-  return minutes.toLocaleString("en-US");
-}
-var FREE_MINUTES = PLAN_MONTHLY_TWIN_MINUTE_LIMITS.free;
-var PRO_MINUTES = PLAN_MONTHLY_TWIN_MINUTE_LIMITS.pro;
-if (FREE_MINUTES == null || PRO_MINUTES == null) {
-  throw new Error("PLAN_MONTHLY_TWIN_MINUTE_LIMITS: free and pro must be non-null");
-}
-var PRO_EVALS_PER_SEAT = 500;
-var PRO_SESSION_MINUTES_PER_SEAT = 5e3;
-var PRO_MAX_SEATS = 5;
-var FREE_EVALS_PER_MONTH = 100;
-var PLAN_DISPLAY = {
-  free: {
-    tag: "Free",
-    priceLabel: "$0",
-    periodLabel: "",
-    included: [
-      `${formatMinutesLabel(FREE_MINUTES)} session-minutes / account`,
-      `${FREE_EVALS_PER_MONTH} evals / account`,
-      `1 workspace (${FREE_WORKSPACE_MEMBER_LIMIT} users max)`,
-      `${PLAN_CONCURRENT_SESSION_LIMITS.free} concurrent sessions / workspace`,
-      "All clones included"
-    ]
-  },
-  pro: {
-    tag: "Pro",
-    priceLabel: `$${PRO_PLAN_PRICE_USD}`,
-    periodLabel: "/mo per seat",
-    included: [
-      `${formatMinutesLabel(PRO_SESSION_MINUTES_PER_SEAT)} session-minutes / seat / month`,
-      `${PRO_EVALS_PER_SEAT} evals / seat / month`,
-      "All clones included",
-      `${PLAN_CONCURRENT_SESSION_LIMITS.pro} concurrent sessions / workspace`,
-      `1 workspace, up to ${PRO_MAX_SEATS} seats with pooled usage`
-    ]
-  },
-  enterprise: {
-    tag: "Enterprise",
-    priceLabel: "Contact us",
-    periodLabel: "",
-    included: [
-      "Unlimited session-minutes",
-      "Unlimited seats per workspace",
-      "Unlimited workspaces",
-      `${PLAN_CONCURRENT_SESSION_LIMITS.enterprise} concurrent sessions / workspace`,
-      "SSO / SAML",
-      "SOC 2 (in progress)",
-      "Custom clones & eval support",
-      "Dedicated onboarding & support"
-    ]
-  }
-};
-var PLAN_MAX_SESSION_TTL_SECONDS = {
-  free: 30 * 60,
-  // 30 minutes
-  pro: 60 * 60,
-  // 60 minutes
-  enterprise: 90 * 60
-  // 90 minutes
-};
-var MAX_ABSOLUTE_SESSION_LIFETIME_SECONDS = 4 * 60 * 60;
-var LIFETIME_PERIOD_RESETS_AT = new Date(Date.UTC(9999, 11, 31));
-var ALL_ENTITLED_CLONES = ALL_STARTABLE_CLONE_IDS;
-var SCENARIO_USAGE_WINDOW_DAYS = 7;
-var SCENARIO_USAGE_WINDOW_MS = SCENARIO_USAGE_WINDOW_DAYS * 24 * 60 * 60 * 1e3;
-var SCENARIO_USAGE_WINDOW_SECONDS = SCENARIO_USAGE_WINDOW_DAYS * 24 * 60 * 60;
-var LLM_PRICING_USD_PER_M_TOKENS = {
-  // Google Gemini (verified 2026-05-05, standard tier <=200K input tokens)
-  "gemini-2.5-pro": { input: 1.25, output: 10 },
-  "gemini-2.5-flash": { input: 0.3, output: 2.5 },
-  // OpenAI flagship text models (verified 2026-05-21, standard short-context tier)
-  "gpt-5.5": { input: 5, output: 30 },
-  "gpt-5.5-pro": { input: 30, output: 180 },
-  "gpt-5.4": { input: 2.5, output: 15 },
-  "gpt-5.4-mini": { input: 0.75, output: 4.5 },
-  "gpt-5.4-nano": { input: 0.2, output: 1.25 },
-  "gpt-5.4-pro": { input: 30, output: 180 },
-  "gpt-4o-mini": { input: 0.15, output: 0.6 },
-  "gpt-4o": { input: 2.5, output: 10 },
-  "gpt-4.1-mini": { input: 0.4, output: 1.6 },
-  "gpt-4.1-nano": { input: 0.1, output: 0.4 },
-  "gpt-4.1": { input: 2, output: 8 },
-  // DeepSeek (verified 2026-05-05; legacy names map to v4-flash per vendor)
-  "deepseek-chat": { input: 0.14, output: 0.28 },
-  "deepseek-reasoner": { input: 0.14, output: 0.28 },
-  "deepseek-v4-flash": { input: 0.14, output: 0.28 }
-};
-var LLM_PRICING_FAMILY_RATES = [
-  { match: /^gemini-2\.5-pro/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gemini-2.5-pro"] },
-  { match: /^gemini-2\.5-flash/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gemini-2.5-flash"] },
-  { match: /^gpt-5\.5-pro/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-5.5-pro"] },
-  { match: /^gpt-5\.5/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-5.5"] },
-  { match: /^gpt-5\.4-pro/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-5.4-pro"] },
-  { match: /^gpt-5\.4-mini/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-5.4-mini"] },
-  { match: /^gpt-5\.4-nano/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-5.4-nano"] },
-  { match: /^gpt-5\.4/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-5.4"] },
-  { match: /^gpt-4o-mini/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-4o-mini"] },
-  { match: /^gpt-4o(?!-mini)/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-4o"] },
-  { match: /^gpt-4\.1-mini/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-4.1-mini"] },
-  { match: /^gpt-4\.1-nano/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-4.1-nano"] },
-  { match: /^gpt-4\.1(?!-mini|-nano)/i, rate: LLM_PRICING_USD_PER_M_TOKENS["gpt-4.1"] },
-  // Anthropic Claude 4.x list prices (verified 2026): Opus $5/$25, Sonnet
-  // $3/$15, Haiku 4.5 $1/$5 per 1M tokens (input/output).
-  { match: /^claude-opus-/i, rate: { input: 5, output: 25 } },
-  { match: /^claude-haiku-/i, rate: { input: 1, output: 5 } },
-  { match: /^claude-sonnet-/i, rate: { input: 3, output: 15 } },
-  { match: /^opus-/i, rate: { input: 5, output: 25 } },
-  { match: /^haiku-/i, rate: { input: 1, output: 5 } },
-  { match: /^sonnet-/i, rate: { input: 3, output: 15 } },
-  { match: /^deepseek-chat/i, rate: LLM_PRICING_USD_PER_M_TOKENS["deepseek-chat"] },
-  { match: /^deepseek-reasoner/i, rate: LLM_PRICING_USD_PER_M_TOKENS["deepseek-reasoner"] },
-  { match: /^deepseek-v4-flash/i, rate: LLM_PRICING_USD_PER_M_TOKENS["deepseek-v4-flash"] }
-];
-
-// ../node-auth/src/clone-entitlements.ts
-var ENTITLED_CLONE_SET = new Set(ALL_ENTITLED_CLONES);
+// ../node-auth/src/credential-store.ts
+function errorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+var ENTITLED_CLONE_SET = new Set(ALL_STARTABLE_CLONE_IDS);
 function normalizeEntitledCloneIds(cloneIds) {
   if (!cloneIds) {
     return [];
@@ -701,8 +562,6 @@ function normalizeEntitledCloneIds(cloneIds) {
   }
   return [...normalized];
 }
-
-// ../node-auth/src/credential-store.ts
 var KEYCHAIN_COMMAND_TIMEOUT_MS = 1500;
 var ARCHAL_DIR_NAME = ".archal";
 var TEST_SANDBOX_ID_ENV_VAR = "ARCHAL_TEST_SANDBOX_ID";
@@ -774,7 +633,7 @@ function seedSandboxFromRealHomeOnce(sandboxDir) {
   }
 }
 function getArchalDir() {
-  const explicit = process.env["ARCHAL_HOME"];
+  const explicit = process.env["ARCHAL_HOME"]?.trim();
   if (explicit) {
     return explicit;
   }
@@ -1058,7 +917,66 @@ function readCredentialsFile(options) {
   return readCredentialsFileAtPath(getCredentialsPath(), options);
 }
 function isWorkspaceApiKey(token) {
-  return token.startsWith("archal_ws_") || token.startsWith("archal_") && !token.includes(".");
+  return token.startsWith(WORKSPACE_API_KEY_PREFIX) || token.startsWith("archal_") && !token.includes(".");
+}
+var WORKSPACE_API_KEY_EXPIRES_SECONDS = 365 * 24 * 60 * 60;
+function parseEnvToken(token, envName = AUTH_TOKEN_ENV_VAR, nowSeconds = Math.floor(Date.now() / 1e3)) {
+  const trimmed = token.trim();
+  if (!trimmed) {
+    return { status: "invalid", message: `${envName} is empty.` };
+  }
+  if (isWorkspaceApiKey(trimmed)) {
+    return {
+      status: "ok",
+      credentials: {
+        token: trimmed,
+        refreshToken: "",
+        email: "(workspace-api-key)",
+        plan: "pro",
+        selectedCloneIds: [],
+        expiresAt: nowSeconds + WORKSPACE_API_KEY_EXPIRES_SECONDS
+      }
+    };
+  }
+  const claims = decodeJwtPayload(trimmed);
+  if (claims === null) {
+    return {
+      status: "invalid",
+      message: `${envName} must be a JWT with valid plan and exp claims or a workspace API key (archal_ws_...).`
+    };
+  }
+  const email = typeof claims["email"] === "string" ? claims["email"] : `(from ${envName})`;
+  if (!isPlan(claims["plan"])) {
+    return {
+      status: "invalid",
+      message: `${envName} JWT does not contain a valid plan claim.`
+    };
+  }
+  const plan = claims["plan"];
+  if (typeof claims["exp"] !== "number" || !Number.isFinite(claims["exp"])) {
+    return {
+      status: "invalid",
+      message: `${envName} JWT does not contain a valid exp claim.`
+    };
+  }
+  const expiresAt = claims["exp"];
+  if (expiresAt <= nowSeconds) {
+    return {
+      status: "expired",
+      message: `${envName} is expired. Remove it or replace it with a valid token.`
+    };
+  }
+  return {
+    status: "ok",
+    credentials: {
+      token: trimmed,
+      refreshToken: "",
+      email,
+      plan,
+      selectedCloneIds: [],
+      expiresAt
+    }
+  };
 }
 function getStoredCredentials(options) {
   const creds = readCredentialsFile(options);
@@ -1215,8 +1133,68 @@ function getConfiguredAuthBaseUrl(options) {
   }
   return isStrictEndpointModeEnabled() ? null : HOSTED_DEFAULT_AUTH_BASE_URL;
 }
+function readConfiguredUrlFromEnvChain(envVarNames, options) {
+  const uniqueEnvVars = [...new Set(envVarNames)];
+  return readConfiguredUrl(options, ...uniqueEnvVars);
+}
+function getConfiguredAuthValidationBaseUrl(options = {}) {
+  const apiUrlEnvVar = options.apiUrlEnvVar ?? "ARCHAL_API_URL";
+  const authUrlEnvVar = options.authUrlEnvVar ?? "ARCHAL_AUTH_URL";
+  const resolved = readConfiguredUrlFromEnvChain([
+    apiUrlEnvVar,
+    authUrlEnvVar,
+    "ARCHAL_AUTH_URL",
+    "ARCHAL_AUTH_BASE_URL",
+    "ARCHAL_API_URL",
+    "ARCHAL_API_BASE_URL"
+  ], options);
+  if (resolved) {
+    return resolved;
+  }
+  return isStrictEndpointModeEnabled() ? null : HOSTED_DEFAULT_AUTH_BASE_URL;
+}
+function getConfiguredVitestApiBaseUrl(fallback = HOSTED_DEFAULT_API_BASE_URL, options) {
+  return readConfiguredUrlFromEnvChain([
+    "ARCHAL_VITEST_API_URL",
+    "ARCHAL_API_URL",
+    "ARCHAL_API_BASE_URL",
+    "ARCHAL_AUTH_URL",
+    "ARCHAL_AUTH_BASE_URL"
+  ], options) ?? fallback;
+}
+
+// ../retry/dist/index.js
+function abortReason(signal) {
+  return signal.reason instanceof Error ? signal.reason : new DOMException("The operation was aborted.", "AbortError");
+}
+function sleep(ms, options) {
+  const signal = options?.signal;
+  if (signal?.aborted) {
+    return Promise.reject(abortReason(signal));
+  }
+  if (ms <= 0) {
+    return Promise.resolve();
+  }
+  if (!signal) {
+    return new Promise((resolve5) => {
+      setTimeout(resolve5, ms);
+    });
+  }
+  const abortSignal = signal;
+  return new Promise((resolve5, reject) => {
+    const timeout = setTimeout(() => {
+      abortSignal.removeEventListener("abort", onAbort);
+      resolve5();
+    }, ms);
+    function onAbort() {
+      clearTimeout(timeout);
+      reject(abortReason(abortSignal));
+    }
+    abortSignal.addEventListener("abort", onAbort, { once: true });
+  });
+}
 
-// ../node-auth/src/request-metadata.ts
+// ../node-auth/src/token-exchange.ts
 function buildAuthRequestHeaders(metadata, includeContentType = false) {
   const headers = {};
   if (includeContentType) {
@@ -1337,37 +1315,6 @@ async function validateAuthWithServerResult(creds, metadata) {
   };
 }
 
-// ../retry/dist/index.js
-function abortReason(signal) {
-  return signal.reason instanceof Error ? signal.reason : new DOMException("The operation was aborted.", "AbortError");
-}
-function sleep(ms, options) {
-  const signal = options?.signal;
-  if (signal?.aborted) {
-    return Promise.reject(abortReason(signal));
-  }
-  if (ms <= 0) {
-    return Promise.resolve();
-  }
-  if (!signal) {
-    return new Promise((resolve5) => {
-      setTimeout(resolve5, ms);
-    });
-  }
-  const abortSignal = signal;
-  return new Promise((resolve5, reject) => {
-    const timeout = setTimeout(() => {
-      abortSignal.removeEventListener("abort", onAbort);
-      resolve5();
-    }, ms);
-    function onAbort() {
-      clearTimeout(timeout);
-      reject(abortReason(abortSignal));
-    }
-    abortSignal.addEventListener("abort", onAbort, { once: true });
-  });
-}
-
 // ../node-auth/src/secure-token.ts
 var import_node_crypto2 = require("crypto");
 
@@ -1475,26 +1422,6 @@ function parsePositiveInteger(rawValue, fallback, minimum = 1) {
   const parsed = Number(normalized);
   return Number.isSafeInteger(parsed) && parsed >= minimum ? parsed : fallback;
 }
-function normalizeApiBaseUrl(value) {
-  if (!value) return null;
-  const normalized = value.trim().replace(/\/+$/, "");
-  if (!normalized) return null;
-  let parsed;
-  try {
-    parsed = new URL(normalized);
-  } catch {
-    throw new Error(`Invalid ARCHAL_API_URL: "${normalized}" is not a valid URL`);
-  }
-  const isLocalhostHttp = parsed.protocol === "http:" && (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1");
-  if (parsed.protocol !== "https:" && !isLocalhostHttp) {
-    throw new Error(`Hosted API URL must use HTTPS (or localhost HTTP). Received ${normalized}.`);
-  }
-  const pathname = parsed.pathname.replace(/\/+$/, "");
-  parsed.pathname = pathname.endsWith("/api") ? pathname.slice(0, -4) || "/" : pathname || "/";
-  parsed.search = "";
-  parsed.hash = "";
-  return parsed.toString().replace(/\/$/, "");
-}
 function resolveHostedWorkspaceHeader() {
   return trimEnv("ARCHAL_WORKSPACE_ID");
 }
@@ -1982,34 +1909,6 @@ var HostedSessionClient = class {
 var STORED_CREDENTIALS_LOCK_TIMEOUT_MS = 3e4;
 var STORED_CREDENTIALS_STALE_LOCK_MS = STORED_CREDENTIALS_LOCK_TIMEOUT_MS;
 var STORED_CREDENTIALS_LOCK_POLL_INTERVAL_MS = 50;
-var DEFAULT_AUTH_BASE_URL = "https://www.archal.ai";
-var WORKSPACE_API_KEY_EXPIRES_SECONDS = 365 * 24 * 60 * 60;
-function readFirstConfiguredBaseUrl(envVars) {
-  for (const envVar of envVars) {
-    const configured = trimEnv(envVar);
-    if (!configured) {
-      continue;
-    }
-    const normalized = normalizeApiBaseUrl(configured);
-    if (normalized) {
-      return normalized;
-    }
-  }
-  return null;
-}
-function resolveHostedAuthBaseUrl(options) {
-  const authUrlEnvVar = options.authUrlEnvVar ?? "ARCHAL_AUTH_URL";
-  const apiUrlEnvVar = options.apiUrlEnvVar ?? "ARCHAL_API_URL";
-  const envVars = [.../* @__PURE__ */ new Set([
-    apiUrlEnvVar,
-    authUrlEnvVar,
-    "ARCHAL_AUTH_URL",
-    "ARCHAL_AUTH_BASE_URL",
-    "ARCHAL_API_URL",
-    "ARCHAL_API_BASE_URL"
-  ])];
-  return readFirstConfiguredBaseUrl(envVars) ?? DEFAULT_AUTH_BASE_URL;
-}
 function isImplicitTestSandboxFlow() {
   if (trimEnv("ARCHAL_HOME")) {
     return false;
@@ -2026,59 +1925,11 @@ function readExplicitEnvCredentials(envName) {
   if (!token) {
     return { kind: "missing" };
   }
-  const claims = decodeJwtPayload(token);
-  const nowSeconds = Math.floor(Date.now() / 1e3);
-  if (claims === null) {
-    if (isWorkspaceApiKey(token)) {
-      return {
-        kind: "valid",
-        credentials: {
-          token,
-          refreshToken: "",
-          email: "(workspace-api-key)",
-          plan: "pro",
-          selectedCloneIds: [],
-          expiresAt: nowSeconds + WORKSPACE_API_KEY_EXPIRES_SECONDS
-        }
-      };
-    }
-    return {
-      kind: "invalid",
-      message: `${envName} must be a JWT with valid plan and exp claims or a workspace API key (archal_ws_...).`
-    };
-  }
-  const email = typeof claims["email"] === "string" ? claims["email"] : `(from ${envName})`;
-  if (!isPlan(claims["plan"])) {
-    return {
-      kind: "invalid",
-      message: `${envName} JWT does not contain a valid plan claim.`
-    };
-  }
-  const plan = claims["plan"];
-  if (typeof claims["exp"] !== "number" || !Number.isFinite(claims["exp"])) {
-    return {
-      kind: "invalid",
-      message: `${envName} JWT does not contain a valid exp claim.`
-    };
-  }
-  const expiresAt = claims["exp"];
-  if (expiresAt <= nowSeconds) {
-    return {
-      kind: "invalid",
-      message: `${envName} is expired. Remove it or replace it with a valid token.`
-    };
+  const parsed = parseEnvToken(token, envName);
+  if (parsed.status !== "ok") {
+    return { kind: "invalid", message: parsed.message };
   }
-  return {
-    kind: "valid",
-    credentials: {
-      token,
-      refreshToken: "",
-      email,
-      plan,
-      selectedCloneIds: [],
-      expiresAt
-    }
-  };
+  return { kind: "valid", credentials: parsed.credentials };
 }
 function readStoredCredentials(includeExpired = false) {
   prepareStoredCredentialSources();
@@ -2110,16 +1961,6 @@ function resolveCredentialsWithSource(tokenEnvVar, includeExpiredStored = false)
   }
   return { credentials: storedCredentials, source: "stored" };
 }
-function resolveHostedCredentials(tokenEnvVar = "ARCHAL_TOKEN") {
-  return resolveCredentialsWithSource(tokenEnvVar)?.credentials ?? null;
-}
-function getCredentials2(tokenEnvVar = "ARCHAL_TOKEN") {
-  const credentials = resolveHostedCredentials(tokenEnvVar);
-  if (!credentials) {
-    return null;
-  }
-  return credentials.expiresAt > Math.floor(Date.now() / 1e3) ? credentials : null;
-}
 function prepareStoredCredentialSources() {
   if (isImplicitTestSandboxFlow()) {
     seedTestSandboxCredentialsFromRealHome();
@@ -2205,7 +2046,15 @@ async function resolveCurrentCredentials(credentials, source, forceValidation, a
 }
 async function createHostedAuthLease(options = {}) {
   const tokenEnvVar = options.tokenEnvVar ?? "ARCHAL_TOKEN";
-  const authBaseUrl = resolveHostedAuthBaseUrl(options);
+  const authBaseUrl = getConfiguredAuthValidationBaseUrl({
+    apiUrlEnvVar: options.apiUrlEnvVar,
+    authUrlEnvVar: options.authUrlEnvVar
+  });
+  if (!authBaseUrl) {
+    throw new Error(
+      "Hosted auth validation requires ARCHAL_AUTH_URL or ARCHAL_API_URL when ARCHAL_STRICT_ENDPOINTS=1."
+    );
+  }
   const resolved = resolveCredentialsWithSource(tokenEnvVar, true);
   if (!resolved) {
     const tokenSources = Array.from(/* @__PURE__ */ new Set([tokenEnvVar, "ARCHAL_TOKEN"])).join(", ");
@@ -2783,7 +2632,7 @@ function installReporterLifecycleCheck(projectName) {
         return;
       }
       process.stderr.write(
-        '\n\x1B[33m\x1B[1mArchal Vitest could not upload test results\n\x1B[0m\x1B[33mThe Archal reporter started, but Vitest did not call its final upload\nstep. Test results will not appear in the dashboard.\n\nCommon causes:\n  - A Vitest upgrade changed per-project reporter lifecycle timing.\n  - A consumer config filtered out reporters (look for reporter overrides).\n  - The ArchalReporter threw before reaching collectAndReport.\n\nWhat to check:\n  1. Grep stderr for "[archal/reporter]". If any line appears, the\n     reporter did run and this warning is a false positive.\n  2. If no [archal/reporter] lines exist at all, the reporter was\n     installed but never called. Verify your vitest config wires it\n     at the level Vitest actually honors (workspace root vs project).\n'
+        '\n\x1B[33m\x1B[1mArchal Vitest reporter did not finish lifecycle diagnostics\n\x1B[0m\x1B[33mThe Archal reporter started, but Vitest did not call its final\nlifecycle step. Benchmark Results are submitted by the scenario runner.\n\nCommon causes:\n  - A Vitest upgrade changed per-project reporter lifecycle timing.\n  - A consumer config filtered out reporters (look for reporter overrides).\n  - The ArchalReporter threw before reaching collectAndReport.\n\nWhat to check:\n  1. Grep stderr for "[archal/reporter]". If any line appears, the\n     reporter did run and this warning is a false positive.\n  2. If no [archal/reporter] lines exist at all, the reporter was\n     installed but never called. Verify your vitest config wires it\n     at the level Vitest actually honors (workspace root vs project).\n'
       );
       process.stderr.write("\x1B[0m\n");
       for (const survivor of survivors) {
@@ -2831,7 +2680,7 @@ function installWorkspaceReporterCheck(projectNames) {
         return;
       }
       process.stderr.write(
-        "\n\x1B[33m\x1B[1mArchal Vitest did not upload workspace test results\n\x1B[0m\x1B[33marchalVitestWorkspace() configured hosted clone projects, but no\nroot Archal reporter was registered. Requests were routed to the\nhosted clones, but dashboard upload was skipped.\n\nFix: add a root vitest.config.ts alongside vitest.workspace.ts:\n\n    import { defineConfig } from 'vitest/config';\n    import { archalVitestRootConfig } from 'archal/vitest';\n\n    export default defineConfig(archalVitestRootConfig());\n\nIf you do not need workspace mode, use withArchal() instead.\n\x1B[0m\n"
+        "\n\x1B[33m\x1B[1mArchal Vitest did not run workspace reporter diagnostics\n\x1B[0m\x1B[33marchalVitestWorkspace() configured hosted clone projects, but no\nroot Archal reporter was registered. Requests were routed to the\nhosted clones, but reporter lifecycle diagnostics were skipped.\n\nFix: add a root vitest.config.ts alongside vitest.workspace.ts:\n\n    import { defineConfig } from 'vitest/config';\n    import { archalVitestRootConfig } from 'archal/vitest';\n\n    export default defineConfig(archalVitestRootConfig());\n\nIf you do not need workspace mode, use withArchal() instead.\n\x1B[0m\n"
       );
       for (const survivor of survivors) {
         try {
@@ -2892,7 +2741,7 @@ function installImportSentinel() {
     if (process.env[ARCHAL_VITEST_CONFIG_ENV]) return;
     warningWritten = true;
     process.stderr.write(
-      "\n\x1B[33m\x1B[1mArchal Vitest was imported but not configured\n\x1B[0m\x1B[33mSomething in your test run imported `archal/vitest`, but no\nArchal Vitest helper was called (`withArchal`, `archalVitestProject`,\n`archalVitestRootConfig`). Test results will not appear in the dashboard.\n\nFix: in your vitest.config.ts, wrap your test block with withArchal():\n\n    import { defineConfig } from 'vitest/config';\n    import { withArchal } from 'archal/vitest';\n    export default defineConfig({\n      test: withArchal({}, { services: {} }),\n    });\n\nOr run `archal init` from your project root and we will wire it for you.\n\x1B[0m\n"
+      "\n\x1B[33m\x1B[1mArchal Vitest was imported but not configured\n\x1B[0m\x1B[33mSomething in your test run imported `archal/vitest`, but no\nArchal Vitest helper was called (`withArchal`, `archalVitestProject`,\n`archalVitestRootConfig`). Benchmark Results are submitted by the scenario runner.\n\nFix: in your vitest.config.ts, wrap your test block with withArchal():\n\n    import { defineConfig } from 'vitest/config';\n    import { withArchal } from 'archal/vitest';\n    export default defineConfig({\n      test: withArchal({}, { services: {} }),\n    });\n\nOr run `archal init` from your project root and we will wire it for you.\n\x1B[0m\n"
     );
   };
   const sigintHandler = () => {
@@ -2911,22 +2760,6 @@ function installImportSentinel() {
   registeredSigtermListener = sigtermHandler;
 }
 
-// src/runtime/session-snapshot.ts
-var ARCHAL_VITEST_CONFIG_ENV2 = "ARCHAL_VITEST_CONFIG";
-function readArchalVitestConfigFromEnv() {
-  const encoded = process.env[ARCHAL_VITEST_CONFIG_ENV2];
-  if (!encoded) {
-    throw new Error(`Missing ${ARCHAL_VITEST_CONFIG_ENV2}. archalVitestProject() must set worker config before bootstrap.`);
-  }
-  return readArchalVitestConfig(encoded);
-}
-function readArchalVitestConfig(encoded) {
-  if (!encoded) {
-    throw new Error(`Missing ${ARCHAL_VITEST_CONFIG_ENV2}. archalVitestProject() must set worker config before bootstrap.`);
-  }
-  return decodeConfig(encoded);
-}
-
 // ../route-runtime-core/src/errors.ts
 var RouteRuntimePolicyError = class extends Error {
   code;
@@ -3243,9 +3076,9 @@ var githubRouteManifest = {
   manifestVersion: "2026-04-02.github.v1",
   baselineSeed: "small-project",
   routeDomains: [
+    exactDomain("github.com"),
     exactDomain("api.github.com"),
     exactDomain("uploads.github.com"),
-    exactDomain("github.com"),
     exactDomain("raw.githubusercontent.com")
   ],
   // Block adjacent GitHub-owned domains that tests don't need. Keep raw
@@ -3258,7 +3091,6 @@ var githubRouteManifest = {
   ],
   routePathRewrite: rewriteGitHubRawContentPath,
   warningDomains: [
-    suffixDomain("github.com"),
     suffixDomain("githubusercontent.com")
   ],
   diagnostics: {
@@ -4593,19 +4425,13 @@ var ROUTE_RUNTIME_DISPATCHING_ROUTE_KINDS = new Set(ROUTE_RUNTIME_PUBLIC_ROUTE_K
 // ../route-runtime-core/src/service-profiles/stripe.ts
 var stripeCompatibilityProfile = buildServiceCompatibilityProfile(stripeRouteManifest);
 
-// ../../clones/core/dist/chunk-FBW6QFHJ.js
+// ../../clones/core/dist/chunk-457KV5BB.js
 var manifest_default = [
   {
-    name: "apify",
-    package: "@archal/clone-apify",
-    path: "clones/apify",
-    stage: "preview",
-    display: {
-      icon: "AP",
-      name: "Apify",
-      description: "Actors, runs, datasets, key-value stores, and request queues.",
-      toolCount: 59
-    },
+    name: "agentmail",
+    package: "@archal/clone-agentmail",
+    path: "clones/agentmail",
+    stage: "internal",
     transport: "rest",
     hostedRuntime: {
       enabled: true,
@@ -4613,15 +4439,62 @@ var manifest_default = [
       requiresEmptySeed: true
     },
     cli: {
-      bundleAssets: true,
-      bundleToolSnapshot: true
+      bundleAssets: false,
+      bundleToolSnapshot: false
     },
     routeProxy: {
-      enabled: true,
-      domains: [
-        {
-          domain: "api.apify.com"
-        },
+      enabled: false,
+      domains: []
+    },
+    seeds: {
+      generatedCatalog: false,
+      default: "empty"
+    },
+    smoke: {
+      production: "none"
+    },
+    architecture: {
+      class: "replay-shell",
+      summary: "AgentMail (api.agentmail.to /v0) replay-shell ported from the forge lineage: REST routes replay the harvested recording corpus with per-operation response shaping; promote only after inbox/thread/draft mutation invariants replace recording-coupled fallbacks.",
+      domainPrimitives: [
+        "inbox lifecycle state",
+        "thread and message state",
+        "draft and webhook lifecycle state"
+      ],
+      promotionEvidence: [
+        "clones/agentmail/SPEC.md tracks inbox/thread/draft/webhook handlers mutating StateEngine state",
+        "clones/agentmail/SPEC.md tracks create/update/send/delete sequence invariants and reset determinism",
+        "runtime recording-backed handlers in clones/agentmail/src/rest/handlers.ts and recordings.ts must be replaced by state-derived handlers before promotion"
+      ]
+    }
+  },
+  {
+    name: "apify",
+    package: "@archal/clone-apify",
+    path: "clones/apify",
+    stage: "preview",
+    display: {
+      icon: "AP",
+      name: "Apify",
+      description: "Actors, runs, datasets, key-value stores, and request queues.",
+      toolCount: 59
+    },
+    transport: "rest",
+    hostedRuntime: {
+      enabled: true,
+      requiresDist: true,
+      requiresEmptySeed: true
+    },
+    cli: {
+      bundleAssets: true,
+      bundleToolSnapshot: true
+    },
+    routeProxy: {
+      enabled: true,
+      domains: [
+        {
+          domain: "api.apify.com"
+        },
         {
           domain: "apify.com"
         }
@@ -4643,7 +4516,8 @@ var manifest_default = [
         "fixture-backed fallback semantics for uncovered REST paths"
       ],
       behaviorOwner: "src/upstream.ts"
-    }
+    },
+    opsCoverage: null
   },
   {
     name: "box",
@@ -4694,7 +4568,7 @@ var manifest_default = [
       icon: "CC",
       name: "Cal.com",
       description: "Event types, schedules, availability slots, bookings, calendars, and webhooks.",
-      toolCount: 18
+      toolCount: 35
     },
     transport: "both",
     hostedRuntime: {
@@ -4742,7 +4616,7 @@ var manifest_default = [
       icon: "CU",
       name: "ClickUp",
       description: "Teams, spaces, folders, lists, tasks, comments, tags, time tracking, and checklists.",
-      toolCount: 40
+      toolCount: 123
     },
     transport: "both",
     hostedRuntime: {
@@ -4783,7 +4657,7 @@ var manifest_default = [
       icon: "CI",
       name: "Customer.io",
       description: "Messaging automation across campaigns, broadcasts, transactional email, segments, customers, and message delivery.",
-      toolCount: 22
+      toolCount: 129
     },
     transport: "rest",
     hostedRuntime: {
@@ -4892,6 +4766,17 @@ var manifest_default = [
         {
           domain: "discordapp.com"
         }
+      ],
+      hardFailDomains: [
+        {
+          domain: "cdn.discordapp.com"
+        },
+        {
+          domain: "media.discordapp.net"
+        },
+        {
+          domain: "gateway.discord.gg"
+        }
       ]
     },
     seeds: {
@@ -4918,7 +4803,8 @@ var manifest_default = [
       "thread",
       "webhook",
       "slash command"
-    ]
+    ],
+    opsCoverage: 14
   },
   {
     name: "dropbox",
@@ -4954,7 +4840,7 @@ var manifest_default = [
         "sharing permissions",
         "delta/list-folder cursors"
       ],
-      behaviorOwner: "src/domain/files.ts"
+      behaviorOwner: "src/register-tools.ts"
     }
   },
   {
@@ -5033,7 +4919,8 @@ var manifest_default = [
         "clones/firecrawl/SPEC.md tracks runtime recording-backed handlers replaced by state-derived crawl/job responses",
         "clones/firecrawl/SPEC.md tracks status/progress/replay determinism invariants"
       ]
-    }
+    },
+    opsCoverage: 77
   },
   {
     name: "freshdesk",
@@ -5100,6 +4987,9 @@ var manifest_default = [
     routeProxy: {
       enabled: true,
       domains: [
+        {
+          domain: "github.com"
+        },
         {
           domain: "api.github.com"
         },
@@ -5107,10 +4997,18 @@ var manifest_default = [
           domain: "uploads.github.com"
         },
         {
-          domain: "github.com"
+          domain: "raw.githubusercontent.com"
+        }
+      ],
+      hardFailDomains: [
+        {
+          domain: "gist.github.com"
         },
         {
-          domain: "raw.githubusercontent.com"
+          domain: "objects.githubusercontent.com"
+        },
+        {
+          domain: "codeload.github.com"
         }
       ]
     },
@@ -5140,7 +5038,8 @@ var manifest_default = [
       "create_issue",
       "create_pull_request",
       "merge_pull_request"
-    ]
+    ],
+    opsCoverage: 96
   },
   {
     name: "gitlab",
@@ -5151,7 +5050,7 @@ var manifest_default = [
       icon: "GL",
       name: "GitLab",
       description: "Projects, branches, commits, issues, merge requests, pipelines, labels, milestones, releases, and webhooks.",
-      toolCount: 46
+      toolCount: 559
     },
     transport: "both",
     hostedRuntime: {
@@ -5265,7 +5164,88 @@ var manifest_default = [
       "google sheet",
       "google sheets",
       "contacts"
-    ]
+    ],
+    opsCoverage: 64
+  },
+  {
+    name: "guesty",
+    package: "@archal/clone-guesty",
+    path: "clones/guesty",
+    stage: "internal",
+    transport: "rest",
+    hostedRuntime: {
+      enabled: true,
+      requiresDist: true,
+      requiresEmptySeed: true
+    },
+    cli: {
+      bundleAssets: false,
+      bundleToolSnapshot: false
+    },
+    routeProxy: {
+      enabled: false,
+      domains: []
+    },
+    seeds: {
+      generatedCatalog: false,
+      default: "empty"
+    },
+    smoke: {
+      production: "none"
+    },
+    architecture: {
+      class: "replay-shell",
+      summary: "Current internal Guesty package is a bootstrap scaffold with no registered tools or REST behavior; promote to replay-shell preview only after the Open API listing/reservation/guest surface is harvested and replayed against a Guesty Pro account.",
+      domainPrimitives: [
+        "listing, reservation, and guest read projections",
+        "availability-calendar overlay",
+        "future webhook delivery behavior"
+      ],
+      promotionEvidence: [
+        "clones/guesty/SPEC.md tracks listing/reservation/guest handlers mutating StateEngine",
+        "clones/guesty/SPEC.md tracks reservation create/cancel/modify lifecycle and read-after-write invariants"
+      ]
+    }
+  },
+  {
+    name: "hostaway",
+    package: "@archal/clone-hostaway",
+    path: "clones/hostaway",
+    stage: "internal",
+    transport: "rest",
+    hostedRuntime: {
+      enabled: true,
+      requiresDist: true,
+      requiresEmptySeed: true
+    },
+    cli: {
+      bundleAssets: false,
+      bundleToolSnapshot: false
+    },
+    routeProxy: {
+      enabled: false,
+      domains: []
+    },
+    seeds: {
+      generatedCatalog: false,
+      default: "empty"
+    },
+    smoke: {
+      production: "none"
+    },
+    architecture: {
+      class: "replay-shell",
+      summary: "Current internal Hostaway package is a bootstrap scaffold with no registered tools or REST behavior; promote to replay-shell preview only after the Public API listing/reservation/calendar surface is harvested and replayed against a Hostaway account.",
+      domainPrimitives: [
+        "listing, reservation, and calendar read projections",
+        "unified-inbox conversation overlay",
+        "future webhook delivery behavior"
+      ],
+      promotionEvidence: [
+        "clones/hostaway/SPEC.md tracks listing/reservation/calendar handlers mutating StateEngine",
+        "clones/hostaway/SPEC.md tracks reservation create/cancel/modify lifecycle and read-after-write invariants"
+      ]
+    }
   },
   {
     name: "hubspot",
@@ -5276,7 +5256,7 @@ var manifest_default = [
       icon: "HS",
       name: "HubSpot",
       description: "CRM contacts, companies, deals, tickets, and engagements.",
-      toolCount: 41
+      toolCount: 44
     },
     transport: "rest",
     hostedRuntime: {
@@ -5315,7 +5295,8 @@ var manifest_default = [
         "clones/hubspot/SPEC.md tracks runtime recording reads removed from exported handlers",
         "clones/hubspot/SPEC.md tracks CRM alias and association sequence invariants"
       ]
-    }
+    },
+    opsCoverage: 99
   },
   {
     name: "jira",
@@ -5378,7 +5359,8 @@ var manifest_default = [
       "jira board",
       "sprint",
       "epic"
-    ]
+    ],
+    opsCoverage: 80
   },
   {
     name: "linear",
@@ -5389,7 +5371,7 @@ var manifest_default = [
       icon: "LN",
       name: "Linear",
       description: "Issues, projects, teams, cycles, and workflows.",
-      toolCount: 50
+      toolCount: 53
     },
     transport: "both",
     hostedRuntime: {
@@ -5433,7 +5415,8 @@ var manifest_default = [
       "linear project",
       "linear cycle",
       "cycle"
-    ]
+    ],
+    opsCoverage: 98
   },
   {
     name: "mailchimp",
@@ -5518,6 +5501,47 @@ var manifest_default = [
         "clones/ownerrez/SPEC.md tracks runtime recording-backed handlers replaced for the promoted reservation/payment slice",
         "clones/ownerrez/SPEC.md tracks availability/payment invariants"
       ]
+    },
+    opsCoverage: 100
+  },
+  {
+    name: "outlook",
+    package: "@archal/clone-outlook",
+    path: "clones/outlook",
+    stage: "internal",
+    transport: "rest",
+    hostedRuntime: {
+      enabled: true,
+      requiresDist: true,
+      requiresEmptySeed: true
+    },
+    cli: {
+      bundleAssets: false,
+      bundleToolSnapshot: false
+    },
+    routeProxy: {
+      enabled: false,
+      domains: []
+    },
+    seeds: {
+      generatedCatalog: false,
+      default: "empty"
+    },
+    smoke: {
+      production: "none"
+    },
+    architecture: {
+      class: "replay-shell",
+      summary: "Outlook mail (Microsoft Graph v1.0, mail-only) replay-shell ported from the forge lineage: REST routes replay harvested Graph recordings over a StateEngine mail model; promote only after folder/message mutation invariants and broader Graph surface land.",
+      domainPrimitives: [
+        "mail folder hierarchy and well-known folder state",
+        "message lifecycle state (draft, send, move, copy, delete)",
+        "attachment state"
+      ],
+      promotionEvidence: [
+        "clones/outlook/SPEC.md tracks mail folder/message/attachment handlers mutating StateEngine state",
+        "clones/outlook/SPEC.md tracks draft/send/move/copy/delete sequence invariants and reset determinism"
+      ]
     }
   },
   {
@@ -5549,7 +5573,11 @@ var manifest_default = [
     architecture: {
       class: "redesign-before-expansion",
       summary: "PostHog currently models admin resources and frozen insight/dashboard projections; event ingestion, query execution, and feature flag evaluation need a simulator contract before expansion.",
-      domainPrimitives: ["event ingestion", "query execution", "feature flag evaluation"],
+      domainPrimitives: [
+        "event ingestion",
+        "query execution",
+        "feature flag evaluation"
+      ],
       redesignContract: "docs/internal/dev/clones/redesign-contracts/posthog.md"
     }
   },
@@ -5605,7 +5633,8 @@ var manifest_default = [
         "clones/pricelabs/SPEC.md tracks runtime recording-backed handlers replaced for the promoted pricing/reservation slice",
         "clones/pricelabs/SPEC.md tracks occupancy/rate/replay determinism invariants"
       ]
-    }
+    },
+    opsCoverage: 100
   },
   {
     name: "quickbooks",
@@ -5707,7 +5736,8 @@ var manifest_default = [
       "reimbursement",
       "fund",
       "card spend"
-    ]
+    ],
+    opsCoverage: null
   },
   {
     name: "sendgrid",
@@ -5758,7 +5788,8 @@ var manifest_default = [
         "clones/sendgrid/SPEC.md tracks runtime recording-backed handlers replaced for send/event/suppression behavior",
         "clones/sendgrid/SPEC.md tracks send-to-event and suppression replay invariants"
       ]
-    }
+    },
+    opsCoverage: 100
   },
   {
     name: "sentry",
@@ -5769,7 +5800,7 @@ var manifest_default = [
       icon: "SN",
       name: "Sentry",
       description: "Error monitoring across organizations, projects, teams, issues, events, releases, and DSN keys.",
-      toolCount: 25
+      toolCount: 34
     },
     transport: "rest",
     hostedRuntime: {
@@ -5805,7 +5836,8 @@ var manifest_default = [
         "release and time-window projections"
       ],
       behaviorOwner: "src/domain/sentry-simulator.ts"
-    }
+    },
+    opsCoverage: null
   },
   {
     name: "slack",
@@ -5837,6 +5869,23 @@ var manifest_default = [
         {
           domain: "api.slack.com"
         }
+      ],
+      hardFailDomains: [
+        {
+          domain: "hooks.slack.com"
+        },
+        {
+          domain: "files.slack.com"
+        },
+        {
+          domain: "edgeapi.slack.com"
+        },
+        {
+          domain: "wss-primary.slack.com"
+        },
+        {
+          domain: "wss-backup.slack.com"
+        }
       ]
     },
     seeds: {
@@ -5862,7 +5911,8 @@ var manifest_default = [
       "send_message",
       "slack message",
       "direct message"
-    ]
+    ],
+    opsCoverage: 100
   },
   {
     name: "stripe",
@@ -5891,6 +5941,14 @@ var manifest_default = [
         {
           domain: "api.stripe.com"
         }
+      ],
+      hardFailDomains: [
+        {
+          domain: "files.stripe.com"
+        },
+        {
+          domain: "uploads.stripe.com"
+        }
       ]
     },
     seeds: {
@@ -5917,7 +5975,8 @@ var manifest_default = [
       "subscription",
       "invoice",
       "charge"
-    ]
+    ],
+    opsCoverage: null
   },
   {
     name: "woocommerce",
@@ -6012,7 +6071,8 @@ var manifest_default = [
       "sql query",
       "database table",
       "sql"
-    ]
+    ],
+    opsCoverage: 100
   },
   {
     name: "tavily",
@@ -6066,7 +6126,8 @@ var manifest_default = [
         "clones/tavily/SPEC.md tracks runtime recording-backed handlers replaced for the promoted search/extract/research surface",
         "clones/tavily/SPEC.md tracks search/extract/research replay determinism invariants"
       ]
-    }
+    },
+    opsCoverage: 100
   },
   {
     name: "typeform",
@@ -6152,7 +6213,8 @@ var manifest_default = [
         "webhook registration state"
       ],
       behaviorOwner: "src/domain/telegram-simulator.ts"
-    }
+    },
+    opsCoverage: null
   },
   {
     name: "twilio",
@@ -6199,7 +6261,8 @@ var manifest_default = [
         "clones/twilio/SPEC.md tracks runtime recording-backed handlers replaced for the promoted message/call slice",
         "clones/twilio/SPEC.md tracks delivery/status/webhook sequence invariants"
       ]
-    }
+    },
+    opsCoverage: 92
   },
   {
     name: "unipile",
@@ -6254,7 +6317,8 @@ var manifest_default = [
         "clones/unipile/SPEC.md tracks runtime recording-backed handlers replaced for the promoted chat/provider surface",
         "clones/unipile/SPEC.md tracks send/delivery/read/webhook sequence invariants"
       ]
-    }
+    },
+    opsCoverage: 100
   },
   {
     name: "webflow",
@@ -6265,9 +6329,9 @@ var manifest_default = [
       icon: "WF",
       name: "Webflow",
       description: "Sites, pages, CMS collections, items, assets, forms, and webhooks.",
-      toolCount: 19
+      toolCount: 104
     },
-    transport: "rest",
+    transport: "both",
     hostedRuntime: {
       enabled: true,
       requiresDist: true,
@@ -6296,26 +6360,17 @@ var manifest_default = [
       production: "clone-surface"
     },
     architecture: {
-      class: "replay-shell",
-      summary: "Webflow is recording-replay backed with focused CMS stateful overlays; it should not be treated as a full Webflow behavior engine.",
-      domainPrimitives: [
-        "recording replay cursor",
-        "CMS collection/item overlays",
-        "publish lifecycle captures"
-      ],
-      promotionEvidence: [
-        "clones/webflow/SPEC.md tracks staged/live publish projection state model",
-        "clones/webflow/SPEC.md tracks runtime recording-backed handlers replaced for the promoted publish/CMS surface",
-        "clones/webflow/SPEC.md tracks CMS publish/reset sequence invariants"
-      ]
-    }
+      class: "standard-core",
+      summary: "Webflow Data API v2 slice models sites, collections, and users as deterministic StateEngine records with state-derived REST routes and a per-boot webhook store; Designer-side surfaces (form components, page DOM editing) and real publish delivery are not claimed."
+    },
+    opsCoverage: 100
   }
 ];
 var CLONE_MANIFEST = manifest_default;
 var CLONE_NAMES = CLONE_MANIFEST.map((t) => t.name);
 var CLONE_PACKAGES = CLONE_MANIFEST.map((t) => t.package);
 
-// ../../clones/core/dist/chunk-SXNWBK3S.js
+// ../../clones/core/dist/chunk-UB63UNGS.js
 var CLONE_PREFIX_PATTERN = new RegExp(`^(${CLONE_NAMES.join("|")})_`, "i");
 
 // ../../clones/core/dist/chunk-EZKTFYZI.js
@@ -6384,6 +6439,13 @@ var CLONE_ARCHITECTURE_MANIFEST_FIELDS2 = Object.freeze([
 ]);
 var CLONE_ARCHITECTURE_MANIFEST_FIELD_SET2 = new Set(CLONE_ARCHITECTURE_MANIFEST_FIELDS2);
 
+// src/runtime/hosted-session-provider.ts
+var import_node_crypto3 = require("crypto");
+var import_node_child_process2 = require("child_process");
+var import_node_fs7 = require("fs");
+var import_node_path8 = require("path");
+var import_node_os4 = require("os");
+
 // src/runtime/service-profiles.ts
 function unsupportedServiceMessage(unsupportedServices) {
   const supportedServices = listSharedRouteManifests().map((manifest) => manifest.service).sort();
@@ -6413,34 +6475,9 @@ function resolveArchalVitestServiceProfiles(services) {
 }
 
 // src/runtime/hosted-session-provider.ts
-var import_node_crypto3 = require("crypto");
-var import_node_child_process2 = require("child_process");
-var import_node_fs7 = require("fs");
-var import_node_path8 = require("path");
-var import_node_os4 = require("os");
-
-// src/url-resolution.ts
-function readFirstConfiguredApiBaseUrl(envVars) {
-  for (const envVar of envVars) {
-    const configured = trimEnv(envVar);
-    if (!configured) {
-      continue;
-    }
-    return normalizeApiBaseUrl(configured);
-  }
-  return null;
-}
 function resolveArchalVitestApiBaseUrl(defaultBaseUrl) {
-  return readFirstConfiguredApiBaseUrl([
-    "ARCHAL_VITEST_API_URL",
-    "ARCHAL_API_URL",
-    "ARCHAL_API_BASE_URL",
-    "ARCHAL_AUTH_URL",
-    "ARCHAL_AUTH_BASE_URL"
-  ]) ?? defaultBaseUrl;
+  return getConfiguredVitestApiBaseUrl(defaultBaseUrl);
 }
-
-// src/runtime/hosted-session-provider.ts
 var COORDINATOR_LOCK_TIMEOUT_MS = 3e4;
 var COORDINATOR_STALE_LOCK_MS = COORDINATOR_LOCK_TIMEOUT_MS;
 var COORDINATOR_POLL_INTERVAL_MS = 50;
@@ -7090,6 +7127,20 @@ var VITEST_AUTH_LEASE_OPTIONS = {
 };
 
 // src/runtime/bootstrap.ts
+var ARCHAL_VITEST_CONFIG_ENV2 = "ARCHAL_VITEST_CONFIG";
+function readArchalVitestConfigFromEnv() {
+  const encoded = process.env[ARCHAL_VITEST_CONFIG_ENV2];
+  if (!encoded) {
+    throw new Error(`Missing ${ARCHAL_VITEST_CONFIG_ENV2}. archalVitestProject() must set worker config before bootstrap.`);
+  }
+  return readArchalVitestConfig(encoded);
+}
+function readArchalVitestConfig(encoded) {
+  if (!encoded) {
+    throw new Error(`Missing ${ARCHAL_VITEST_CONFIG_ENV2}. archalVitestProject() must set worker config before bootstrap.`);
+  }
+  return decodeConfig(encoded);
+}
 var GLOBAL_RUNTIME_KEY = "__archalVitestRuntime";
 var GLOBAL_SESSION_KEY = "__archalVitestSession";
 var GLOBAL_CLEANUP_HANDLER_KEY = "__archalVitestRuntimeCleanupHandlerRegistered";
@@ -7527,14 +7578,8 @@ function getInstalledArchalVitestSession() {
 }
 
 // src/reporter.ts
-var import_picomatch = __toESM(require("picomatch"), 1);
 var LOG_PREFIX = "[archal/reporter]";
 var STRICT_ENV = "ARCHAL_REPORTER_STRICT";
-var REPORTER_TOKEN_ENV = "ARCHAL_REPORTER_TOKEN";
-var REPORTER_AUTH_URL_ENV = "ARCHAL_REPORTER_AUTH_URL";
-var REPORTER_AUTH_BASE_URL_ENV = "ARCHAL_REPORTER_AUTH_BASE_URL";
-var REPORTER_BYPASS_SECRET_ENV = "ARCHAL_REPORTER_VERCEL_AUTOMATION_BYPASS_SECRET";
-var REPORTER_WORKSPACE_ENV = "ARCHAL_REPORTER_WORKSPACE_ID";
 var WORKSPACE_REPORTER_MARKER_ENV = "ARCHAL_VITEST_WORKSPACE_REPORTER_MARKER";
 function isStrict() {
   return process.env[STRICT_ENV] === "1";
@@ -7547,112 +7592,43 @@ function warn(message) {
   }
   process.stderr.write(line);
 }
-function info(message) {
+function diagnostic(message) {
   process.stderr.write(`${LOG_PREFIX} ${message}
 `);
 }
-async function resolveReporterToken() {
-  const explicitReporterToken = process.env[REPORTER_TOKEN_ENV]?.trim();
-  if (explicitReporterToken) {
-    return explicitReporterToken;
-  }
-  try {
-    const creds = getCredentials2();
-    return creds?.token ?? process.env["ARCHAL_TOKEN"]?.trim();
-  } catch (authErr) {
-    warn(`auth resolution failed: ${authErr instanceof Error ? authErr.message : String(authErr)}`);
-    return void 0;
-  }
-}
-function resolveReporterBaseUrl() {
-  return (process.env[REPORTER_AUTH_URL_ENV]?.trim() || process.env[REPORTER_AUTH_BASE_URL_ENV]?.trim() || process.env["ARCHAL_AUTH_URL"]?.trim() || process.env["ARCHAL_AUTH_BASE_URL"]?.trim() || "https://www.archal.ai").replace(/\/+$/, "");
-}
-function buildReporterHeaders(token) {
-  const headers = new Headers({
-    "content-type": "application/json",
-    authorization: `Bearer ${token}`
-  });
-  const bypassSecret = process.env[REPORTER_BYPASS_SECRET_ENV]?.trim();
-  if (bypassSecret) {
-    headers.set("x-vercel-protection-bypass", bypassSecret);
-  }
-  const workspaceId = resolveReporterWorkspaceId();
-  if (workspaceId) {
-    headers.set("x-archal-workspace", workspaceId);
-  }
-  return headers;
-}
-function resolveReporterWorkspaceId() {
-  const reporterWorkspaceId = process.env[REPORTER_WORKSPACE_ENV]?.trim();
-  if (reporterWorkspaceId) {
-    return reporterWorkspaceId;
-  }
-  const cliWorkspaceId = process.env["ARCHAL_WORKSPACE_ID"]?.trim();
-  return cliWorkspaceId || void 0;
-}
-function normalizePathForMatch(path) {
-  return path.replaceAll("\\", "/");
-}
-function buildIncludeMatcher(pattern) {
-  const normalizedPattern = normalizePathForMatch(pattern).replace(/^\.?\//, "");
-  const patterns = normalizedPattern.startsWith("**/") ? [normalizedPattern] : [normalizedPattern, `**/${normalizedPattern}`];
-  const matchers = patterns.map((candidate) => (0, import_picomatch.default)(candidate, { dot: true }));
-  return (filePath) => {
-    const normalizedFile = normalizePathForMatch(filePath);
-    return matchers.some((matcher) => matcher(normalizedFile));
-  };
-}
 function readEncodedConfigFromTarget(target) {
   const env = target?.config?.env;
   return env?.[ARCHAL_VITEST_CONFIG_ENV2];
 }
-function readProjectIncludePatterns(project) {
-  const config = project?.config;
-  const include = Array.isArray(config?.include) ? config.include : Array.isArray(config?.test?.include) ? config.test.include : [];
-  return include.filter(
-    (pattern) => typeof pattern === "string" && pattern.length > 0
-  );
-}
 var ArchalReporter = class {
-  startTime = 0;
   ctx = null;
   lifecycleMarkerPath = "";
-  workspaceReporterMarkerPath = "";
-  projects = [];
   /**
-   * In-flight upload promise for the current run. Vitest v3+ fires both
-   * `onFinished` and `onTestRunEnd` in parallel via `Promise.all` (see
-   * vitest@3.x packages/vitest/src/node/test-run.ts), so without this guard
-   * the reporter uploads results twice and the dashboard shows duplicate
-   * rows. Reset at the start of each run (onTestRunStart / onWatcherRerun)
-   * so watch-mode reruns still upload.
+   * In-flight lifecycle promise for the current run. Vitest v3+ fires both
+   * `onFinished` and `onTestRunEnd` in parallel via `Promise.all`, so without
+   * this guard the reporter emits duplicate diagnostics. Reset at the start
+   * of each run (onTestRunStart / onWatcherRerun) so watch-mode reruns still
+   * report.
    */
-  activeUpload = null;
+  activeLifecycle = null;
   onInit(ctx) {
-    this.startTime = Date.now();
     this.ctx = ctx;
-    this.projects = this.resolveProjects();
-    const projectName = this.projects[0]?.config.projectName ?? "vitest";
+    const projectName = this.resolveProjectName();
     this.lifecycleMarkerPath = installReporterLifecycleCheck(projectName);
-    this.workspaceReporterMarkerPath = process.env[WORKSPACE_REPORTER_MARKER_ENV] ?? "";
-    markWorkspaceReporterInstalled(this.workspaceReporterMarkerPath);
-    this.workspaceReporterMarkerPath = "";
+    const workspaceReporterMarkerPath = process.env[WORKSPACE_REPORTER_MARKER_ENV] ?? "";
+    markWorkspaceReporterInstalled(workspaceReporterMarkerPath);
   }
-  /**
-   * v3+ canonical start-of-run hook. Resetting the upload guard here lets
-   * watch-mode reruns upload their own results.
-   */
   onTestRunStart(_specifications) {
-    this.activeUpload = null;
-    this.startTime = Date.now();
+    this.activeLifecycle = null;
   }
-  /**
-   * v2 watch-mode start-of-rerun hook. Same purpose as onTestRunStart for
-   * v3+. Vitest v2 has no onTestRunStart, so we reset here instead.
-   */
   onWatcherRerun(_files, _trigger) {
-    this.activeUpload = null;
-    this.startTime = Date.now();
+    this.activeLifecycle = null;
+  }
+  async onFinished(files, _errors) {
+    await this.runLifecycleOnce(files?.length ?? 0, "files");
+  }
+  async onTestRunEnd(testModules, _unhandledErrors, _reason) {
+    await this.runLifecycleOnce(testModules?.length ?? 0, "test modules");
   }
   decodeConfig(encoded) {
     try {
@@ -7661,320 +7637,34 @@ var ArchalReporter = class {
       return null;
     }
   }
-  buildProjectContext(config, includePatterns) {
-    return {
-      config,
-      includePatterns,
-      includeMatchers: includePatterns.map(buildIncludeMatcher)
-    };
-  }
-  resolveProjects() {
-    const resolvedProjects = (this.ctx?.projects ?? []).map((project) => {
+  resolveProjectName() {
+    for (const project of this.ctx?.projects ?? []) {
       const config = this.decodeConfig(readEncodedConfigFromTarget(project));
-      return config ? this.buildProjectContext(config, readProjectIncludePatterns(project)) : null;
-    }).filter((project) => project !== null);
-    if (resolvedProjects.length > 0) {
-      return resolvedProjects;
+      if (config?.projectName) {
+        return config.projectName;
+      }
     }
     const rootConfig = this.decodeConfig(
       readEncodedConfigFromTarget(this.ctx) ?? process.env[ARCHAL_VITEST_CONFIG_ENV2]
     );
-    return rootConfig ? [this.buildProjectContext(rootConfig, [])] : [];
-  }
-  /**
-   * vitest v2 calls onFinished with an array of File objects (from @vitest/runner).
-   * Each File extends Suite which has `tasks: Task[]`, and each Task has
-   * `.type` ('test' | 'suite'), `.name`, `.result?.state`, `.result?.duration`.
-   */
-  async onFinished(files, _errors) {
-    await this.runUploadOnce(() => this.collectAndReport(files ?? [], "v2"));
+    return rootConfig?.projectName ?? "vitest";
   }
-  /**
-   * vitest v3+ calls onTestRunEnd alongside onFinished (in parallel via
-   * Promise.all). v4 drops onFinished entirely. The argument is an array of
-   * test modules, each with nested children.
-   */
-  async onTestRunEnd(testModules, _unhandledErrors, _reason) {
-    await this.runUploadOnce(() => this.collectAndReport(testModules ?? [], "v4"));
-  }
-  /**
-   * Dedupe upload work when Vitest fires multiple end-of-run hooks. In
-   * Vitest v3+ both `onFinished` and `onTestRunEnd` fire from the same
-   * `Promise.all` in TestRun.end(); the first hook to enter wins and the
-   * second awaits the same in-flight upload instead of POSTing a duplicate
-   * row to /api/test-results. The resolved promise is kept on the instance
-   * so any late hook still no-ops — the guard is only cleared at the start
-   * of a new run (onTestRunStart / onWatcherRerun).
-   */
-  async runUploadOnce(work) {
-    if (!this.activeUpload) {
-      this.activeUpload = work();
+  async runLifecycleOnce(itemCount, itemLabel) {
+    if (!this.activeLifecycle) {
+      this.activeLifecycle = this.reportLifecycleComplete(itemCount, itemLabel);
     }
-    await this.activeUpload;
+    await this.activeLifecycle;
   }
-  async collectAndReport(items, version) {
+  async reportLifecycleComplete(itemCount, itemLabel) {
     markReporterFired(this.lifecycleMarkerPath);
     this.lifecycleMarkerPath = "";
-    if (this.projects.length === 0) {
-      this.projects = this.resolveProjects();
-    }
-    if (this.projects.length === 0) {
-      warn(
-        "Archal Vitest config was unreadable. Using the default project name. If this persists, make sure withArchal() or archalVitestProject() wraps your test config."
-      );
-      this.projects = [
-        this.buildProjectContext(
-          {
-            projectName: "vitest",
-            services: {}
-          },
-          []
-        )
-      ];
-    }
-    if (items.length === 0) {
-      warn(`No ${version === "v2" ? "files" : "test modules"} received. Nothing to upload.`);
+    if (itemCount === 0) {
+      warn(`No ${itemLabel} received. Nothing to upload.`);
       return;
     }
-    const results = version === "v2" ? this.collectV2Files(items) : this.collectV4Modules(items);
-    if (results.length === 0) {
-      warn("Collected 0 tests after reading the test tree. Nothing to upload.");
-      return;
-    }
-    const buckets = this.partitionResults(results);
-    if (buckets.length === 0) {
-      warn("collected tests but could not map them to an Archal Vitest project.");
-      return;
-    }
-    try {
-      for (const bucket of buckets) {
-        await this.sendResults(bucket.project, bucket.results);
-      }
-    } catch (err) {
-      warn(`failed to upload test results: ${err instanceof Error ? err.message : String(err)}`);
-    }
-  }
-  /**
-   * vitest v2: File extends Suite { tasks: Task[] }.
-   * Task.type is 'test' | 'suite' | 'custom'. Suite tasks recurse.
-   */
-  collectV2Files(files) {
-    const results = [];
-    const collectTasks = (tasks, fileName) => {
-      for (const task of tasks) {
-        if (task.type === "test" || task.type === "custom") {
-          const state = task.result?.state;
-          results.push({
-            name: task.name ?? "unnamed",
-            file: fileName,
-            status: state === "pass" ? "passed" : state === "fail" ? "failed" : "skipped",
-            duration: task.result?.duration ?? 0,
-            error: state === "fail" && task.result?.errors?.[0] ? task.result.errors[0].message ?? String(task.result.errors[0]) : void 0
-          });
-        } else if (task.type === "suite" && Array.isArray(task.tasks)) {
-          collectTasks(task.tasks, fileName);
-        }
-      }
-    };
-    for (const file of files) {
-      const f = file;
-      const fileName = f.filepath ?? f.name ?? "unknown";
-      if (Array.isArray(f.tasks)) {
-        collectTasks(f.tasks, fileName);
-      }
-    }
-    return results;
-  }
-  /**
-   * vitest v4: TestModule.children() → TestSuite[].children() → TestCase[]
-   * All accessors are methods (not properties) in v4.
-   */
-  collectV4Modules(testModules) {
-    const results = [];
-    const collectTests = (node, fileName) => {
-      const children = typeof node.children === "function" ? node.children() : node.children ?? [];
-      for (const child of children) {
-        if (child.type === "test") {
-          const result = typeof child.result === "function" ? child.result() : child.result;
-          const diag = typeof child.diagnostic === "function" ? child.diagnostic() : child.diagnostic;
-          const state = result?.state;
-          results.push({
-            name: child.name ?? "unnamed",
-            file: fileName,
-            status: state === "passed" ? "passed" : state === "failed" ? "failed" : "skipped",
-            duration: diag?.duration ?? result?.duration ?? 0,
-            error: state === "failed" && result?.errors?.[0] ? result.errors[0].message ?? String(result.errors[0]) : void 0
-          });
-        } else {
-          collectTests(child, fileName);
-        }
-      }
-    };
-    for (const mod of testModules) {
-      const m = mod;
-      const fileName = m.moduleId ?? m.id ?? "unknown";
-      collectTests(m, fileName);
-    }
-    return results;
-  }
-  resolveProjectForFile(fileName) {
-    const normalizedFile = normalizePathForMatch(fileName);
-    const onlyProject = this.projects[0] ?? null;
-    if (this.projects.length === 1) {
-      if (!onlyProject) {
-        return null;
-      }
-      if (onlyProject.includeMatchers.length === 0) {
-        return onlyProject;
-      }
-      return onlyProject.includeMatchers.some((matcher) => matcher(normalizedFile)) ? onlyProject : null;
-    }
-    let bestMatch = null;
-    let bestSpecificity = -1;
-    for (const project of this.projects) {
-      for (const [index, matcher] of project.includeMatchers.entries()) {
-        if (!matcher(normalizedFile)) {
-          continue;
-        }
-        const specificity = project.includePatterns[index]?.length ?? 0;
-        if (specificity > bestSpecificity) {
-          bestMatch = project;
-          bestSpecificity = specificity;
-        }
-      }
-    }
-    return bestMatch;
-  }
-  partitionResults(results) {
-    const buckets = /* @__PURE__ */ new Map();
-    for (const result of results) {
-      const project = this.resolveProjectForFile(result.file);
-      if (!project) {
-        warn(
-          `Could not map ${result.file} to a Vitest project config. Skipping reporter upload for that file.`
-        );
-        continue;
-      }
-      const key = project.config.projectName;
-      const bucket = buckets.get(key);
-      if (bucket) {
-        bucket.results.push(result);
-        continue;
-      }
-      buckets.set(key, {
-        project,
-        results: [result]
-      });
-    }
-    return [...buckets.values()];
-  }
-  async sendResults(project, results) {
-    const summary = {
-      total: results.length,
-      passed: results.filter((result) => result.status === "passed").length,
-      failed: results.filter((result) => result.status === "failed").length,
-      skipped: results.filter((result) => result.status === "skipped").length,
-      duration: Date.now() - this.startTime
-    };
-    const token = await resolveReporterToken();
-    if (!token) {
-      warn(
-        `skipped upload (no auth token found). Set ${REPORTER_TOKEN_ENV} or ARCHAL_TOKEN, or run \`archal login\` to populate ~/.archal/credentials.json.`
-      );
-      return;
-    }
-    const baseUrl = resolveReporterBaseUrl();
-    const sessionId = await this.readSessionId(project.config.sessionKey);
-    const payload = {
-      sessionId,
-      projectName: project.config.projectName,
-      services: Object.keys(project.config.services),
-      results,
-      summary,
-      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    const res = await fetch(`${baseUrl}/api/test-results`, {
-      method: "POST",
-      headers: buildReporterHeaders(token),
-      body: JSON.stringify(payload)
-    });
-    if (res.ok) {
-      info(`Uploaded ${summary.passed}/${summary.total} tests to Archal Tests.`);
-      if (sessionId) {
-        try {
-          const syncRes = await fetch(`${baseUrl}/api/sessions/sync`, {
-            method: "POST",
-            headers: buildReporterHeaders(token),
-            body: JSON.stringify({
-              sessionId,
-              twinIds: Object.keys(project.config.services),
-              status: summary.failed > 0 ? "failed" : "ended",
-              endedAt: (/* @__PURE__ */ new Date()).toISOString(),
-              runtimeStartedAt: new Date(Date.now() - summary.duration).toISOString(),
-              source: "test",
-              evidence: {
-                reportSummary: {
-                  scenarioTitle: project.config.projectName,
-                  satisfactionScore: summary.total > 0 ? Math.round(summary.passed / summary.total * 100) : null,
-                  runCount: 1
-                }
-              }
-            })
-          });
-          if (!syncRes.ok) {
-            const body = await syncRes.text().catch(() => "");
-            warn(`Session sync failed (${syncRes.status}): ${body.slice(0, 200)}`);
-          }
-        } catch (syncErr) {
-          warn(
-            `Session sync failed: ${syncErr instanceof Error ? syncErr.message : String(syncErr)}`
-          );
-        }
-      } else {
-        warn(
-          "Uploaded test results, but could not link them to a session. The run may not appear in Activity."
-        );
-      }
-    } else {
-      const body = await res.text().catch(() => "");
-      warn(`Upload failed (${res.status}): ${body.slice(0, 200)}`);
-    }
-  }
-  async readSessionId(sessionKey) {
-    const { readFileSync: readFileSync4, readdirSync, statSync } = await import("fs");
-    const { dirname: dirname5, join: join6 } = await import("path");
-    if (sessionKey?.trim()) {
-      try {
-        const keyed = readFileSync4(getSessionIdFilePath(sessionKey), "utf-8").trim();
-        if (keyed) return keyed;
-      } catch {
-      }
-    }
-    if (sessionKey?.trim()) {
-      return void 0;
-    }
-    try {
-      const sessionsDir = dirname5(getSessionIdFilePath("any"));
-      const entries = readdirSync(sessionsDir);
-      let newest;
-      for (const name of entries) {
-        if (!name.endsWith(".session-id")) continue;
-        const path = join6(sessionsDir, name);
-        try {
-          const st = statSync(path);
-          if (!newest || st.mtimeMs > newest.mtimeMs) {
-            newest = { path, mtimeMs: st.mtimeMs };
-          }
-        } catch {
-        }
-      }
-      if (newest) {
-        const content = readFileSync4(newest.path, "utf-8").trim();
-        if (content) return content;
-      }
-    } catch {
-    }
-    return void 0;
+    diagnostic(
+      "skipped legacy test-result upload. Benchmark Results ingestion requires a Benchmark Run payload and no longer writes /api/test-results."
+    );
   }
 };
 
@@ -8179,11 +7869,6 @@ function archalVitestProject(options, testOptions = {}) {
   const test = buildTestConfig(options, testOptions);
   return (0, import_config.defineProject)({ test });
 }
-function archalVitestConfig(options, testOptions = {}) {
-  const built = buildTestConfig(options, testOptions);
-  built.reporters = ["default", new ArchalReporter()];
-  return built;
-}
 function archalVitestRootConfig() {
   markHelperCalled();
   return {
@@ -8245,7 +7930,6 @@ function archalVitestWorkspace(projects) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ArchalReporter,
-  archalVitestConfig,
   archalVitestProject,
   archalVitestRootConfig,
   archalVitestWorkspace,