thumbgate 1.35.0 → 1.37.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thumbgate",
-  "version": "1.35.0",
+  "version": "1.37.2",
   "description": "ThumbGate Pre-Action Checks self-improve from ranked lessons and repeated failures, hard-block detected secret leaks, and block matches in strict mode.",
   "homepage": "https://thumbgate.ai",
   "repository": {
@@ -14,26 +14,124 @@
   "bin": {
     "thumbgate": "bin/cli.js",
     "thumbgate-dashboard": "bin/dashboard-cli.js",
-    "thumbgate-revenue-evidence": "scripts/grafana-revenue-evidence.js"
+    "thumbgate-revenue-evidence": "scripts/grafana-revenue-evidence.js",
+    "futureagi-bridge": "bin/futureagi-bridge"
   },
   "files": [
+    "!config/main-branch-ruleset.json",
+    "!config/performance-budgets.json",
+    "!config/progressive/**",
+    "!public/assets/brand/github-social-preview.png",
+    "!public/assets/diagrams/thumbgate-agent-meme.jpg",
+    "!public/js/webmcp.js",
+    "!src/webmcp-governance.js",
+    ".claude-plugin/plugin.json",
+    ".claude/commands/",
+    ".well-known/",
+    "CONTRIBUTING.md",
+    "LICENSE",
+    "README.md",
+    "THIRD_PARTY_NOTICES.md",
+    "adapters/amp/skills/thumbgate-feedback/SKILL.md",
+    "adapters/claude/.mcp.json",
+    "adapters/codex/config.toml",
+    "adapters/forge/forge.yaml",
+    "adapters/future-agi/",
+    "adapters/gcp/dfcx-webhook-gate.js",
+    "adapters/gemini/function-declarations.json",
+    "adapters/herdr/herdr-plugin.toml",
+    "adapters/letta/README.md",
+    "adapters/letta/thumbgate-letta-adapter.js",
+    "adapters/mcp/server-stdio.js",
+    "adapters/opencode/opencode.json",
+    "adapters/policy-engine/README.md",
+    "adapters/policy-engine/ethicore-guardian-client.js",
+    "adapters/policy-engine/thumbgate-policy-engine-adapter.js",
+    "adapters/workos/WORKOS.md",
+    "bench/observability-eval-suite.json",
+    "bench/programbench-smoke.json",
+    "bench/prompt-eval-suite.json",
+    "bench/thumbgate-bench.json",
+    "bin/cli.js",
+    "bin/dashboard-cli.js",
+    "bin/futureagi-bridge",
+    "bin/postinstall.js",
+    "commands/",
+    "config/",
+    "config/entitlement-public-keys.json",
+    "conformance/provider-attestation/",
+    "docs/integrations/grafana/README.md",
+    "docs/integrations/grafana/thumbgate-revenue-evidence-dashboard.json",
+    "docs/specs/provider-execution-attestation-v1.md",
+    "glama.json",
+    "hooks/hooks.json",
+    "openapi/",
+    "public/about.html",
+    "public/agent-manager.html",
+    "public/agents-cost-savings.html",
+    "public/ai-malpractice-prevention.html",
+    "public/architecture.html",
+    "public/assets/brand/",
+    "public/assets/claude-thumbgate-statusbar.svg",
+    "public/assets/codex-thumbgate-statusbar-test.svg",
+    "public/assets/diagrams/",
+    "public/assets/legal-intake-control-flow.svg",
+    "public/blog.html",
+    "public/blog/",
+    "public/brand/",
+    "public/case-studies.html",
+    "public/chatgpt-app.html",
+    "public/codex-enterprise.html",
+    "public/codex-plugin.html",
+    "public/compare.html",
+    "public/dashboard.html",
+    "public/diagnostic.html",
+    "public/docs/connectors.html",
+    "public/eval-scorecard.html",
+    "public/eval-scorecard.json",
+    "public/evaluations.html",
+    "public/federal.html",
+    "public/founders.html",
+    "public/guide.html",
+    "public/index.html",
+    "public/install.html",
+    "public/js/",
+    "public/learn.html",
+    "public/lessons.html",
+    "public/numbers.html",
+    "public/partner-intake.html",
+    "public/peter.html",
+    "public/platform-partners.html",
+    "public/pricing.html",
+    "public/privacy.html",
+    "public/pro.html",
+    "public/support.html",
+    "public/terms.html",
+    "public/third-party-notices.html",
+    "public/whitepaper.html",
+    "public/yt.html",
+    "scripts/a-plus-evidence-scorecard.js",
     "scripts/access-anomaly-detector.js",
     "scripts/action-receipts.js",
     "scripts/activation-quickstart.js",
     "scripts/activation-tracker.js",
+    "scripts/adaptive-governance-arena.js",
+    "scripts/admin-override.js",
+    "scripts/agent-action-inventory.js",
     "scripts/agent-audit-trace.js",
-    "scripts/agent-outcome-eval.js",
-    "scripts/agent-outcome-monitor.js",
     "scripts/agent-design-governance.js",
+    "scripts/agent-egress-policy.js",
+    "scripts/allowlist-bridge-honesty.js",
     "scripts/agent-memory-lifecycle.js",
+    "scripts/agent-operations-planner.js",
+    "scripts/agent-outcome-eval.js",
+    "scripts/agent-outcome-monitor.js",
     "scripts/agent-readiness-plan.js",
     "scripts/agent-readiness.js",
-    "scripts/a-plus-evidence-scorecard.js",
-    "scripts/agent-operations-planner.js",
     "scripts/agent-reasoning-traces.js",
     "scripts/agent-reward-model.js",
+    "scripts/agent-security-central.js",
     "scripts/agent-stack-survival-audit.js",
-    "scripts/aws-blocks-guardrails.js",
     "scripts/agentic-data-pipeline.js",
     "scripts/ai-component-inventory.js",
     "scripts/ai-engineering-stack-guardrails.js",
@@ -46,71 +144,74 @@
     "scripts/auto-promote-gates.js",
     "scripts/auto-wire-hooks.js",
     "scripts/autoresearch-runner.js",
+    "scripts/aws-blocks-guardrails.js",
     "scripts/background-agent-governance.js",
     "scripts/bayes-optimal-gate.js",
     "scripts/belief-update.js",
     "scripts/billing.js",
-    "scripts/checkout-attribution-reference.js",
     "scripts/bot-detection.js",
+    "scripts/broker-execution-receipts.js",
+    "scripts/budget-aware-gates-proof.js",
     "scripts/build-metadata.js",
-    "scripts/classifier-routing.js",
-    "scripts/colbert-style-maxsim.js",
-    "scripts/cross-encoder-reranker.js",
+    "scripts/buyer-paths.js",
     "scripts/chatgpt-ads-readiness-pack.js",
+    "scripts/checkout-attribution-reference.js",
+    "scripts/classifier-routing.js",
     "scripts/claude-feedback-sync.js",
+    "scripts/claw-harness-production.js",
     "scripts/cli-demo.js",
     "scripts/cli-feedback.js",
+    "scripts/cli-progress.js",
     "scripts/cli-schema.js",
     "scripts/cli-status.js",
     "scripts/cli-telemetry.js",
     "scripts/cli-test-block.js",
-    "scripts/cli-progress.js",
     "scripts/cloudflare-dynamic-sandbox.js",
     "scripts/code-graph-guardrails.js",
     "scripts/code-mode-mcp-plan.js",
     "scripts/code-reasoning.js",
     "scripts/codegraph-context.js",
+    "scripts/codex-runbook-flywheel.js",
     "scripts/codex-self-heal.js",
-    "scripts/buyer-paths.js",
+    "scripts/colbert-style-maxsim.js",
     "scripts/commercial-offer.js",
-    "scripts/revenue-offer-system.js",
     "scripts/context-engine.js",
     "scripts/context-footprint.js",
     "scripts/context-manager.js",
     "scripts/contextfs.js",
     "scripts/conversation-context.js",
+    "scripts/cross-encoder-reranker.js",
     "scripts/dashboard-chat.js",
+    "scripts/dashboard-limits.js",
     "scripts/dashboard-render-spec.js",
     "scripts/dashboard.js",
-    "scripts/dashboard-limits.js",
     "scripts/decision-journal.js",
     "scripts/deepseek-v4-runtime-guardrails.js",
+    "scripts/nvidia-specdecode-al-doctor.js",
+    "scripts/package-manager-honesty-doctor.js",
+    "scripts/openui-catalog-compose-honesty.js",
     "scripts/docker-sandbox-planner.js",
     "scripts/document-intake.js",
-    "scripts/rag-document-pipeline.js",
-    "scripts/ragas-style-metrics.js",
-    "scripts/skill-packs.js",
-    "scripts/lesson-embedding-maintenance.js",
-    "scripts/retrieval-hybrid-ablation.js",
     "scripts/document-workflow-governance.js",
+    "scripts/double-blind-eval-protocol.js",
     "scripts/durability/step.js",
+    "scripts/edotenv-rl-gateway.js",
+    "scripts/ensure-production-search-corpus.js",
+    "scripts/entitlement.js",
+    "scripts/eval-holdout.js",
+    "scripts/eval-quality-suite.js",
     "scripts/evolution-state.js",
     "scripts/experiment-tracker.js",
     "scripts/explore-subcommands.js",
     "scripts/explore.js",
     "scripts/export-databricks-bundle.js",
-    "scripts/entitlement.js",
-    "scripts/eval-quality-suite.js",
-    "config/entitlement-public-keys.json",
-    "scripts/external-customer-audit.js",
-    "scripts/stripe-revenue-catalog.js",
-    "scripts/stripe-revenue-catalog-audit.js",
     "scripts/export-dpo-pairs.js",
     "scripts/export-hf-dataset.js",
+    "scripts/external-customer-audit.js",
     "scripts/failure-diagnostics.js",
     "scripts/feedback-aggregate.js",
-    "scripts/feedback-history-distiller.js",
     "scripts/feedback-attribution.js",
+    "scripts/feedback-history-distiller.js",
     "scripts/feedback-loop.js",
     "scripts/feedback-paths.js",
     "scripts/feedback-quality.js",
@@ -120,36 +221,48 @@
     "scripts/feedback-to-rules.js",
     "scripts/feedback_quality_eval.py",
     "scripts/file-ledger-lock.js",
-    "scripts/financial-control-plane.js",
     "scripts/filesystem-search.js",
+    "scripts/find-dormant-requires.js",
+    "scripts/financial-control-plane.js",
     "scripts/fs-utils.js",
-    "scripts/grafana-revenue-evidence.js",
     "scripts/gate-stats.js",
     "scripts/gate-templates.js",
-    "scripts/harness-tool-names.js",
     "scripts/gates-engine.js",
     "scripts/gemini-embedding-policy.js",
+    "scripts/generate-case-study-outreach.js",
+    "scripts/generate-eval-scorecard.js",
+    "scripts/git-at-scale.js",
+    "scripts/governance-conflict-audit.js",
+    "scripts/governance-difficulty-curriculum.js",
+    "scripts/grafana-revenue-evidence.js",
+    "scripts/graphrag-retrieval.js",
     "scripts/growth-campaigns.js",
+    "scripts/gurobi-optimizer.js",
+    "scripts/gurobi_optimizer.py",
     "scripts/harness-selector.js",
+    "scripts/harness-tool-names.js",
     "scripts/hf-papers.js",
+    "scripts/hidden-entry-points.js",
     "scripts/hook-runtime.js",
     "scripts/hook-stop-anti-claim.js",
     "scripts/hook-thumbgate-cache-updater.js",
     "scripts/hosted-config.js",
     "scripts/human-escalation.js",
     "scripts/hybrid-feedback-context.js",
-    "scripts/imperative-detector.js",
     "scripts/hybrid-supervisor-agent.js",
+    "scripts/imperative-detector.js",
     "scripts/inference-cache-policy.js",
-    "scripts/install-shim.js",
     "scripts/install-mcp.js",
+    "scripts/install-shim.js",
     "scripts/internal-agent-bootstrap.js",
     "scripts/intervention-policy.js",
     "scripts/jsonl-watcher.js",
+    "scripts/jsonl-window.js",
     "scripts/judge-reward-function.js",
     "scripts/lesson-canonical.js",
     "scripts/lesson-db.js",
     "scripts/lesson-embedding-index.js",
+    "scripts/lesson-embedding-maintenance.js",
     "scripts/lesson-inference.js",
     "scripts/lesson-reranker.js",
     "scripts/lesson-retrieval.js",
@@ -163,33 +276,39 @@
     "scripts/long-running-agent-context-guardrails.js",
     "scripts/mailer/index.js",
     "scripts/mailer/resend-mailer.js",
+    "scripts/matryoshka-embedding.js",
     "scripts/mcp-config.js",
     "scripts/mcp-oauth.js",
     "scripts/mcp-policy.js",
+    "scripts/mcp-session-handles.js",
     "scripts/mcp-transport-strategy.js",
+    "scripts/mcp-wiring-doctor.js",
     "scripts/memory-firewall.js",
     "scripts/memory-scope-readiness.js",
+    "scripts/memory-vs-rag-route.js",
     "scripts/meta-agent-loop.js",
     "scripts/model-access-eligibility.js",
+    "scripts/model-eval.js",
     "scripts/model-migration-readiness.js",
     "scripts/model-tier-router.js",
     "scripts/multimodal-retrieval-plan.js",
     "scripts/native-messaging-audit.js",
     "scripts/natural-language-harness.js",
     "scripts/noop-detect.js",
+    "scripts/observability-env.js",
+    "scripts/observability-setup.js",
     "scripts/obsidian-export.js",
     "scripts/operational-integrity.js",
-    "scripts/observability-setup.js",
-    "scripts/observability-env.js",
-    "scripts/jsonl-window.js",
     "scripts/oss-pr-opportunity-scout.js",
     "scripts/otel-declarative-config.js",
+    "scripts/override-audit.js",
     "scripts/parallel-workflow-orchestrator.js",
     "scripts/perplexity-client.js",
     "scripts/plan-gate.js",
     "scripts/plausible-domain-config.js",
     "scripts/plausible-server-events.js",
     "scripts/pr-manager.js",
+    "scripts/pragmatic-hybrid-search.js",
     "scripts/private-core-boundary.js",
     "scripts/pro-local-dashboard.js",
     "scripts/proactive-agent-eval-guardrails.js",
@@ -200,55 +319,73 @@
     "scripts/prompt-guard.js",
     "scripts/prompt-programs.js",
     "scripts/prompting-operating-system.js",
+    "scripts/prove-herdr-adapter.js",
+    "scripts/prove-memory-pyramid-and-symbolic-canvas.js",
+    "scripts/prove-workos.js",
+    "scripts/provider-action-normalizer.js",
+    "scripts/provider-attestation-conformance.js",
     "scripts/provider-live-evidence.js",
     "scripts/provider-payment-reconciler.js",
+    "scripts/provider-receipt-contract.js",
     "scripts/provider-revenue-evidence.js",
-    "scripts/provider-action-normalizer.js",
     "scripts/proxy-pointer-rag-guardrails.js",
-    "scripts/qa-scenario-planner.js",
     "scripts/published-cli.js",
+    "scripts/qa-scenario-planner.js",
+    "scripts/qwen38-max-cost-optimizer.js",
+    "scripts/rag-document-pipeline.js",
+    "scripts/rag-embedding-identity.js",
     "scripts/rag-precision-guardrails.js",
+    "scripts/rag-structured-output.js",
+    "scripts/ragas-style-metrics.js",
     "scripts/rate-limiter.js",
     "scripts/reasoning-efficiency-guardrails.js",
+    "scripts/refresh-proof-pack.js",
+    "scripts/remote-feedback-capture.js",
     "scripts/repeat-metric.js",
+    "scripts/request-envelope.js",
     "scripts/rerank-pipeline.js",
     "scripts/rerank-quality-eval.js",
-    "scripts/request-envelope.js",
+    "scripts/research-agent-harness.js",
+    "scripts/retrieval-hybrid-ablation.js",
     "scripts/retrieval-quality-tier.js",
-    "scripts/tier-budget-guard.js",
     "scripts/revenue-action-eligibility.js",
     "scripts/revenue-evidence-remediation.js",
+    "scripts/revenue-offer-system.js",
     "scripts/reward-hacking-guardrails.js",
-    "scripts/model-eval.js",
     "scripts/risk-scorer.js",
     "scripts/rlaif-self-audit.js",
+    "scripts/rsi-safety-hillclimb.js",
     "scripts/rubric-engine.js",
+    "scripts/rule-sprawl.js",
     "scripts/rule-validator.js",
     "scripts/sales-pipeline.js",
     "scripts/schedule-manager.js",
-    "scripts/secret-scanner.js",
     "scripts/secret-fixture-tokens.js",
     "scripts/secret-redaction.js",
-    "scripts/self-protection.js",
+    "scripts/secret-scanner.js",
     "scripts/security-scanner.js",
     "scripts/self-distill-agent.js",
-    "scripts/self-heal.js",
     "scripts/self-harness-optimizer.js",
+    "scripts/self-heal.js",
     "scripts/self-healing-check.js",
+    "scripts/self-protection.js",
     "scripts/semantic-dedup.js",
     "scripts/semantic-layer.js",
     "scripts/seo-gsd.js",
+    "scripts/session-lease.js",
     "scripts/settings-hierarchy.js",
     "scripts/silent-failure-cluster.js",
+    "scripts/simatree-data-governance.js",
     "scripts/single-use-credential-gate.js",
     "scripts/skill-generator.js",
+    "scripts/skill-packs.js",
     "scripts/skill-rag-router.js",
-    "scripts/slow-loop.js",
     "scripts/slo-alert-engine.js",
+    "scripts/slow-loop.js",
+    "scripts/solver-parity.js",
     "scripts/spec-gate.js",
-    "scripts/stripe-credentials.js",
-    "scripts/statusline-cache-read.js",
     "scripts/statusline-cache-path.js",
+    "scripts/statusline-cache-read.js",
     "scripts/statusline-context.js",
     "scripts/statusline-lesson.js",
     "scripts/statusline-links.js",
@@ -256,23 +393,31 @@
     "scripts/statusline-meta.js",
     "scripts/statusline-tower.js",
     "scripts/statusline.sh",
+    "scripts/stealth-memory-injection-gate.js",
+    "scripts/stripe-credentials.js",
+    "scripts/stripe-revenue-catalog-audit.js",
+    "scripts/stripe-revenue-catalog.js",
     "scripts/structured-prompt-driven.js",
+    "scripts/switchyard-router.js",
     "scripts/sync-telemetry-from-prod.js",
     "scripts/synthetic-data-provenance.js",
     "scripts/task-context-result.js",
+    "scripts/task-outcomes.js",
     "scripts/telemetry-analytics.js",
+    "scripts/temporal-decay-weighting.js",
+    "scripts/test-all.js",
     "scripts/thompson-sampling.js",
     "scripts/thumbgate-bench.js",
     "scripts/thumbgate-search.js",
-    "scripts/trajectory-scorer.js",
+    "scripts/tier-budget-guard.js",
     "scripts/token-savings.js",
     "scripts/token-tco.js",
     "scripts/tool-contract-validator.js",
-    "scripts/tool-registry.js",
-    "scripts/task-outcomes.js",
     "scripts/tool-kpi-tracker.js",
-    "scripts/upstream-contribution-engine.js",
+    "scripts/tool-registry.js",
+    "scripts/trajectory-scorer.js",
     "scripts/universal-claim-evaluator.js",
+    "scripts/upstream-contribution-engine.js",
     "scripts/user-profile.js",
     "scripts/validate-workflow-contract.js",
     "scripts/vector-store.js",
@@ -280,89 +425,35 @@
     "scripts/verifier-scoring.js",
     "scripts/verify-marketing-pages-deployed.js",
     "scripts/visitor-journey.js",
+    "scripts/workflow-intake-queue.js",
+    "scripts/workflow-notebook.js",
     "scripts/workflow-runs.js",
     "scripts/workflow-sentinel.js",
-    "scripts/workflow-intake-queue.js",
+    "scripts/workos-production-guard.js",
     "scripts/workspace-agent-routines.js",
     "scripts/workspace-evolver.js",
     "scripts/xmemory-lite.js",
-    ".claude-plugin/plugin.json",
-    "hooks/hooks.json",
-    ".claude/commands/",
-    "commands/",
-    ".well-known/",
-    "LICENSE",
-    "README.md",
-    "docs/integrations/grafana/README.md",
-    "docs/integrations/grafana/thumbgate-revenue-evidence-dashboard.json",
-    "adapters/amp/skills/thumbgate-feedback/SKILL.md",
-    "adapters/claude/.mcp.json",
-    "adapters/codex/config.toml",
-    "adapters/forge/forge.yaml",
-    "adapters/gemini/function-declarations.json",
-    "adapters/letta/README.md",
-    "adapters/letta/thumbgate-letta-adapter.js",
-    "adapters/gcp/dfcx-webhook-gate.js",
-    "adapters/policy-engine/README.md",
-    "adapters/policy-engine/ethicore-guardian-client.js",
-    "adapters/policy-engine/thumbgate-policy-engine-adapter.js",
-    "adapters/mcp/server-stdio.js",
-    "adapters/opencode/opencode.json",
-    "bench/programbench-smoke.json",
-    "bench/prompt-eval-suite.json",
-    "bench/observability-eval-suite.json",
-    "bench/thumbgate-bench.json",
-    "bin/cli.js",
-    "bin/dashboard-cli.js",
-    "bin/postinstall.js",
-    "config/",
-    "openapi/",
-    "public/about.html",
-    "public/agent-manager.html",
-    "public/blog.html",
-    "public/blog/",
-    "public/codex-enterprise.html",
-    "public/agents-cost-savings.html",
-    "public/ai-malpractice-prevention.html",
-    "public/chatgpt-app.html",
-    "public/codex-plugin.html",
-    "public/compare.html",
-    "public/dashboard.html",
-    "public/diagnostic.html",
-    "public/federal.html",
-    "public/guide.html",
-    "public/install.html",
-    "public/index.html",
-    "public/learn.html",
-    "public/lessons.html",
-    "public/numbers.html",
-    "public/assets/diagrams/",
-    "public/whitepaper.html",
-    "public/evaluations.html",
-    "public/eval-scorecard.html",
-    "public/eval-scorecard.json",
-    "public/case-studies.html",
-    "public/architecture.html",
-    "public/partner-intake.html",
-    "public/pricing.html",
-    "public/pro.html",
-    "public/assets/brand/",
-    "!public/assets/brand/github-social-preview.png",
-    "public/assets/claude-thumbgate-statusbar.svg",
-    "public/assets/codex-thumbgate-statusbar-test.svg",
-    "public/assets/legal-intake-control-flow.svg",
-    "public/brand/",
-    "public/js/",
+    "server.json",
     "skills/thumbgate/SKILL.md",
+    "smithery.yaml",
     "src/",
-    "scripts/generate-eval-scorecard.js",
-    "scripts/refresh-proof-pack.js",
-    "scripts/generate-case-study-outreach.js",
-    "scripts/rag-structured-output.js",
-    "scripts/pragmatic-hybrid-search.js",
-    "server.json",
-    "glama.json",
-    "smithery.yaml"
+    "scripts/radware-threat-defense.js",
+    ".agents/skills/cyberstrike-compare-not-clone/",
+    "scripts/intent-governed-execution.js",
+    ".agents/skills/zvec-grep-compare-not-clone/",
+    "scripts/workspace-search-route.js",
+    ".agents/skills/jit-harness-compare-not-clone/",
+    "scripts/jit-harness-compose.js",
+    ".agents/skills/gitlab-sandbox-allowlist-not-trust/",
+    ".agents/skills/openui-catalog-compose-honesty/",
+    "scripts/cobble-hot-store-split.js",
+    ".agents/skills/cobble-hot-store-compare-not-clone/",
+    "scripts/token-shunt-honesty.js",
+    ".agents/skills/token-shunt-honesty-not-clone/",
+    "scripts/typesafe-typed-questions.js",
+    ".agents/skills/typesafe-typed-questions-not-clone/",
+    "scripts/colab-compute-honesty.js",
+    ".agents/skills/colab-compute-honesty-not-clone/"
   ],
   "scripts": {
     "canary:snapshot": "node scripts/gate-decision-canary.js --snapshot",
@@ -465,7 +556,45 @@
     "social:prospect:bluesky": "node scripts/social-bluesky-prospecting.js",
     "social:prospect:bluesky:dry": "node scripts/social-bluesky-prospecting.js --dry-run",
     "social:reply-publish:bluesky:dry": "node scripts/social-reply-monitor-bluesky.js --publish-approved --dry-run",
-    "test": "npm run test:python && npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:proof-pack-cadence && npm run test:grafana-revenue-evidence && npm run test:billing && npm run test:billing-setup && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:canary && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:release-window && npm run test:check-congruence && npm run test:tool-registry && npm run test:repeat-metric && npm run test:noop-detect && npm run test:action-receipts && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:memory-scope-readiness && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:mcp-tool-annotations && npm run test:mcp-oauth && npm run test:mcp-oauth-flow && npm run test:plan-gate && npm run test:ai-component-inventory && npm run test:verification-evidence && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:entitlement && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:imperative-detector && npm run test:audit-pr-bot-contamination && npm run test:stripe-bootstrap-saas-catalog && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:statusline-cache-aggregate && npm run test:public-repo-hygiene && npm run test:no-internal-orchestration-leaks && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:lesson-semantic-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:predictive-credible-range && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:vlt && npm run test:hf-context && npm run test:proof-common && npm run test:xss-checkout-escape && npm run test:security-scanner && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-archived-product-guard && npm run test:postgres-guard && npm run test:checkout-bot-guard && npm run test:checkout-pro-confirmation-gate && npm run test:pricing-page-telemetry && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:universal-claim-evaluator && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary && npm run test:hook-stop-verify-deploy && npm run test:hook-stop-anti-claim && npm run test:stop-hook-json-contract && npm run test:plausible-server-events && npm run test:activation-tracker && npm run test:activation-onboarding && npm run test:unified-revenue-rollup && npm run test:conversion-rate-stats && npm run test:external-customer-audit && npm run test:telemetry-export && npm run test:stripe-checkout-diagnostic && npm run test:stripe-business-identity-probe && npm run test:revenue-observability-doctor && npm run test:jsonl-window && npm run test:observability-env && npm run test:glama-mcp && npm run test:prove-glama-mcp && npm run test:public-bundle-ratchet && npm run test:pack-runtime-integrity && npm run test:hook-self-protection && npm run test:self-protect-enforcement && npm run test:never-bypass-branch-protection && npm run test:stripe-payment-link-update && npm run test:ci-cd-hygiene-audit && npm run test:verify-marketing-pages-deployed && npm run test:install-email-capture && npm run test:install-shim && npm run test:hook-runtime-subcommands && npm run test:implementation-notes && npm run test:daily-block-cap && npm run test:free-to-paid-conversion-units && npm run test:metrics-real-endpoint && npm run test:cli-trial-and-help && npm run test:cost-cli && npm run test:silent-failure-cluster && npm run test:proof:truth && node --test tests/adaptive-reliability.test.js && npm run test:mcp-oauth-reviewer && npm run test:dfcx-gate && npm run test:dfcx-gate-server && npm run test:vertex-scorer && npm run test:dashboard-chat && npm run test:gitar-integration && npm run test:secret-redaction && npm run test:discoverable-skills && npm run test:discoverable-skill-skills && npm run test:sync-telemetry && npm run test:leak-scanner && npm run test:team-sync && npm run test:rag-pipeline && npm run test:autonomous-reliability && npm run test:eval-rag && npm run test:async-eval-observability && npm run test:letta-adapter && npm run test:policy-engine-adapter && npm run test:tool-contract-validator && npm run test:check-update && npm run test:hermes-gate && npm run test:memory-provider-enforcement-bridge && npm run test:publisher-credential-guards && npm run test:reddit-browser-notification-watch && npm run test:payment-rails && npm run test:service-checkout-price-integrity && npm run test:cursor-marketplace-doctor && npm run test:plugin-hooks-manifest && npm run test:okara-money-promo-automation && npm run test:retrieval-window && npm run test:risk-quality && npm run test:eval-mining && npm run test:state-backup && npm run test:eval-golden && npm run test:task-scope-lease && npm run test:evaluations-page && npm run test:agent-install-paths && npm run test:mcp-gate-check && npm run test:adapter-pins && npm run test:secret-egress && npm run test:harness-tool-names && npm run test:feedback-reward && npm run test:capability-wiring",
+    "lint:dormant-requires": "node scripts/find-dormant-requires.js",
+    "test:all": "node scripts/test-all.js",
+    "test:orphans": "node scripts/test-all.js --orphans",
+    "test:tooling-scripts": "node --test tests/test-all-and-dormant-requires.test.js",
+    "stars:history": "node scripts/star-history.js",
+    "test:star-history": "node --test tests/star-history.test.js",
+    "github:achievements": "node scripts/github-achievement-honesty.js",
+    "test:github-achievement-honesty": "node --test tests/github-achievement-honesty.test.js",
+    "identity:checklist": "node scripts/ai-identity-checklist.js",
+    "graph:fuse": "node scripts/knowledge-graph-fuse.js",
+    "test:ai-identity-checklist": "node --test tests/ai-identity-checklist.test.js",
+    "test:knowledge-graph-fuse": "node --test tests/knowledge-graph-fuse.test.js",
+    "skill:library-compact": "node scripts/skill-library-compact.js",
+    "test:skill-library-compact": "node --test tests/skill-library-compact.test.js",
+    "intent:scope": "node scripts/intent-scope-runtime.js",
+    "test:intent-scope-runtime": "node --test tests/intent-scope-runtime.test.js",
+    "unicode:tag-block": "node scripts/unicode-tag-block-normalize.js",
+    "test:unicode-tag-block-normalize": "node --test tests/unicode-tag-block-normalize.test.js",
+    "test:issue-3702-action-not-substring": "node --test tests/issue-3702-action-not-substring.test.js",
+    "mantis:critic-review": "node scripts/mantis-critic-review.js",
+    "test:mantis-critic-review": "node --test tests/mantis-critic-review.test.js",
+    "break-glass:gates-propose": "node scripts/break-glass-gates-propose.js",
+    "test:break-glass-gates-propose": "node --test tests/break-glass-gates-propose.test.js",
+    "test:git-at-scale": "node --test tests/git-at-scale.test.js",
+    "test:rule-sprawl": "node --test tests/rule-sprawl.test.js",
+    "test:matryoshka-embedding": "node --test tests/matryoshka-embedding.test.js",
+    "test:autonomous-mandate": "node --test tests/autonomous-execution-mandate.test.js",
+    "test:legal-public-routes": "node --test tests/legal-public-routes.test.js",
+    "test:provider-receipt-contract": "node --test tests/provider-receipt-contract.test.js",
+    "test:actor-critic": "node --test tests/actor-critic-process-audit.test.js",
+    "test:infoq-engage": "node --test tests/infoq-engage.test.js",
+    "test:hermes-platform": "node --test tests/hermes-platform-protocol.test.js tests/hermes-sync-plane.test.js tests/hermes-hosted-server.test.js",
+    "test:alert-noise-ledger": "node --test tests/alert-noise-ledger.test.js",
+    "test:future-agi": "node --test tests/future-agi-bridge.test.js tests/future-agi-evaluator.test.js tests/future-agi-review-regressions.test.js",
+    "test:futureagi-prepost": "node --test tests/futureagi-prepost-gate.test.js",
+    "test:five-walls": "node --test tests/five-walls-governance.test.js",
+    "test:llm-surface-consistency": "node --test tests/llm-surface-consistency.test.js",
+    "test": "npm run test:python && npm run test:schema && npm run test:loop && npm run test:dpo && npm run test:kto && npm run test:api && npm run test:proof && npm run test:e2e && npm run test:rlaif && npm run test:attribution && npm run test:quality && npm run test:intelligence && npm run test:training-export && npm run test:deployment && npm run test:operational-integrity && npm run test:workflow && npm run test:proof-pack-cadence && npm run test:grafana-revenue-evidence && npm run test:billing && npm run test:billing-setup && npm run test:cli && npm run test:watcher && npm run test:autoresearch && npm run test:ops && npm run test:session-analyzer && npm run test:tessl && npm run test:canary && npm run test:gates && npm run test:evoskill && npm run test:gates-hardening && npm run test:workers && npm run test:social-analytics && npm run test:memalign && npm run test:xmemory-lite && npm run test:filesystem-search && npm run test:platform-limits && npm run test:post-video && npm run test:post-everywhere-instagram && npm run test:post-everywhere-channels && npm run test:obsidian-export && npm run test:lesson-db && npm run test:lesson-rotation && npm run test:memory-dedup && npm run test:feedback-quality && npm run test:sync-version && npm run test:release-window && npm run test:check-congruence && npm run test:tool-registry && npm run test:repeat-metric && npm run test:noop-detect && npm run test:action-receipts && npm run test:broker-execution-receipts && npm run test:provider-attestation && npm run test:feedback-to-rules && npm run test:memory-firewall && npm run test:memory-scope-readiness && npm run test:belief-update && npm run test:hosted-config && npm run test:operational-summary && npm run test:operational-dashboard && npm run test:operator-artifacts && npm run test:operator-key-auth && npm run test:cloudflare-sandbox && npm run test:mcp-config && npm run test:mcp-tool-annotations && npm run test:mcp-oauth && npm run test:mcp-oauth-flow && npm run test:plan-gate && npm run test:ai-component-inventory && npm run test:verification-evidence && npm run test:pulse && npm run test:semantic-layer && npm run test:data-pipeline && npm run test:optimize-context && npm run test:principle-extractor && npm run test:analytics-window && npm run test:funnel-analytics && npm run test:experiment-tracker && npm run test:build-metadata && npm run test:context-engine && npm run test:hf-papers && npm run test:marketing-experiment && npm run test:seo-gsd && npm run test:verify-run && npm run test:entitlement && npm run test:export-dpo-pairs && npm run test:export-hf-dataset && npm run test:license && npm run test:imperative-detector && npm run test:audit-pr-bot-contamination && npm run test:stripe-bootstrap-saas-catalog && npm run test:postinstall && npm run test:funnel-invariants && npm run test:cli-telemetry && npm run test:pro-parity && npm run test:model-tier-router && npm run test:computer-use-firewall && npm run test:skill-exporter && npm run test:statusline && npm run test:statusline-cache-aggregate && npm run test:public-repo-hygiene && npm run test:no-internal-orchestration-leaks && npm run test:evolution && npm run test:org-dashboard && npm run test:multi-hop-recall && npm run test:synthetic-dpo && npm run test:thumbgate-skill && npm run test:learn-hub && npm run test:feedback-fallback && npm run test:metaclaw && npm run test:server-lock && npm run test:control-tower && npm run test:pii-scanner && npm run test:data-governance && npm run test:lesson-inference && npm run test:semantic-dedup && npm run test:fs-utils && npm run test:cli-schema && npm run test:explore && npm run test:lesson-reranker && npm run test:lesson-retrieval && npm run test:lesson-semantic-retrieval && npm run test:cross-encoder && npm run test:reflector-agent && npm run test:feedback-session && npm run test:feedback-history-distiller && npm run test:hallucination-detector && npm run test:history-distiller && npm run test:predictive-insights && npm run test:predictive-credible-range && npm run test:prove-predictive-insights && npm run test:statusbar-cli && npm run test:generate-instagram-card && npm run test:instagram-thumbgate-post && npm run test:publish-instagram-thumbgate && npm run test:lesson-synthesis && npm run test:lesson-canonical && npm run test:background-governance && npm run test:memory-migration && npm run test:prompt-dlp && npm run test:ephemeral-store && npm run test:agent-security && npm run test:skill-progressive && npm run test:per-step-scoring && npm run test:weekly-auto-post && npm run test:social-post-hourly && npm run test:social-quality-gate && npm run test:a2ui-engine && npm run test:gate-satisfy && npm run test:money-watcher && npm run test:budget && npm run test:quick-start && npm run test:utm && npm run test:product-feedback && npm run test:feedback-root-consolidator && npm run test:engagement-audit && npm run test:install-growth-automation && npm run test:publish-thumbgate-launch && npm run test:reconcile-thumbgate-campaign && npm run test:reddit-publisher && npm run test:schedule-thumbgate-campaign && npm run test:social-reply-monitor && npm run test:sync-launch-assets && npm run test:ai-search-visibility && npm run test:perplexity && npm run test:vlt && npm run test:hf-context && npm run test:proof-common && npm run test:xss-checkout-escape && npm run test:security-scanner && npm run test:agent-security-central && npm run test:llm-client && npm run test:managed-lesson-agent && npm run test:self-distill && npm run test:meta-agent && npm run test:harness-selector && npm run test:thumbgate-bench && npm run test:seo-guides && npm run test:enforcement-loop && npm run test:cli-agent-experience && npm run test:bot-detection && npm run test:checkout-archived-product-guard && npm run test:postgres-guard && npm run test:checkout-bot-guard && npm run test:checkout-pro-confirmation-gate && npm run test:pricing-page-telemetry && npm run test:session-health && npm run test:session-episodes && npm run test:spec-gate && npm run test:decision-trace && npm run test:dashboard-insights && npm run test:telemetry-tracked-link-slug && npm run test:prompt-eval && npm run test:gate-coherence && npm run test:gate-eval && npm run test:high-roi && npm run test:public-static-assets && npm run test:token-savings && npm run test:numbers-page && npm run test:workflow-gate-checkpoint && npm run test:lesson-export-import && npm run test:landing-page-claims && npm run test:competitive-positioning-marketing && npm run test:medium-weekly && npm run test:dashboard-deeplink-e2e && npm run test:public-package-parity && npm run test:token-savings-dashboard && npm run test:cursor-wiring && npm run test:pretooluse-injection && npm run test:recent-corrective-context && npm run test:durability-step && npm run test:mailer && npm run test:brand-assets && npm run test:enforcement-teeth && npm run test:bayes-optimal-gate && npm run test:swarm-coordinator && npm run test:session-report && npm run test:agent-reasoning-traces && npm run test:judge-reward && npm run test:llm-behavior-monitor && npm run test:prompting-os && npm run test:single-use-credential-gate && npm run test:structured-prompt-driven && npm run test:require-evidence-gate && npm run test:universal-claim-evaluator && npm run test:rule-validator && npm run test:bluesky-atproto && npm run test:social-reply-monitor-bluesky && npm run test:bluesky-delete-replies && npm run test:architect-kit-memory-bridge && npm run test:sonar-review-hotspots && npm run test:actionable-remediations && npm run test:gemini-embedding-policy && npm run test:agent-design-governance && npm run test:public-core-boundary && npm run test:hook-stop-verify-deploy && npm run test:hook-stop-anti-claim && npm run test:stop-hook-json-contract && npm run test:plausible-server-events && npm run test:activation-tracker && npm run test:activation-onboarding && npm run test:unified-revenue-rollup && npm run test:conversion-rate-stats && npm run test:external-customer-audit && npm run test:telemetry-export && npm run test:stripe-checkout-diagnostic && npm run test:stripe-business-identity-probe && npm run test:revenue-observability-doctor && npm run test:jsonl-window && npm run test:observability-env && npm run test:glama-mcp && npm run test:prove-glama-mcp && npm run test:public-bundle-ratchet && npm run test:pack-runtime-integrity && npm run test:hook-self-protection && npm run test:self-protect-enforcement && npm run test:never-bypass-branch-protection && npm run test:stripe-payment-link-update && npm run test:ci-cd-hygiene-audit && npm run test:verify-marketing-pages-deployed && npm run test:install-email-capture && npm run test:install-shim && npm run test:hook-runtime-subcommands && npm run test:implementation-notes && npm run test:daily-block-cap && npm run test:free-to-paid-conversion-units && npm run test:metrics-real-endpoint && npm run test:cli-trial-and-help && npm run test:cost-cli && npm run test:silent-failure-cluster && npm run test:workos-production-guard && npm run test:partner-landing && npm run test:memory-pyramid && npm run test:proof:truth && node --test tests/adaptive-reliability.test.js && npm run test:mcp-oauth-reviewer && npm run test:dfcx-gate && npm run test:dfcx-gate-server && npm run test:vertex-scorer && npm run test:dashboard-chat && npm run test:gitar-integration && npm run test:secret-redaction && npm run test:discoverable-skills && npm run test:discoverable-skill-skills && npm run test:sync-telemetry && npm run test:leak-scanner && npm run test:team-sync && npm run test:rag-pipeline && npm run test:autonomous-reliability && npm run test:eval-rag && npm run test:async-eval-observability && npm run test:letta-adapter && npm run test:policy-engine-adapter && npm run test:tool-contract-validator && npm run test:check-update && npm run test:hermes-gate && npm run test:memory-provider-enforcement-bridge && npm run test:publisher-credential-guards && npm run test:reddit-browser-notification-watch && npm run test:payment-rails && npm run test:service-checkout-price-integrity && npm run test:cursor-marketplace-doctor && npm run test:github-marketplace-action && npm run test:plugin-hooks-manifest && npm run test:okara-money-promo-automation && npm run test:retrieval-window && npm run test:risk-quality && npm run test:eval-mining && npm run test:state-backup && npm run test:eval-golden && npm run test:task-scope-lease && npm run test:evaluations-page && npm run test:agent-install-paths && npm run test:mcp-gate-check && npm run test:adapter-pins && npm run test:secret-egress && npm run test:harness-tool-names && npm run test:feedback-reward && npm run test:capability-wiring && npm run test:autonomous-mandate && npm run test:memory-near-dupe && npm run test:lesson-retrieval-dedupe-backfill && npm run test:matryoshka-embedding && npm run test:rag-embedding-identity && npm run test:switchyard-router && npm run test:bulk-cloud-tier && npm run test:session-lease && npm run test:compare-agoragentic && npm run test:compare-dirac && npm run test:compare-aperture && npm run test:qwen-adapter && npm run test:qwen38-max-cost-optimizer && npm run test:openai-compatible-embed && npm run test:legal-public-routes && npm run test:gurobi && npm run test:mcp-session-handles && npm run test:agent-egress-policy && npm run test:budget-aware-gates-proof && npm run test:edotenv-rl-gateway && npm run test:rsi-safety-hillclimb && npm run test:research-agent-harness && npm run test:governance-curriculum && npm run test:provider-receipt-contract && npm run test:adaptive-governance-arena && npm run test:gpc-optout && npm run test:override-audit && npm run test:admin-override && npm run test:progressive-wiring && npm run test:security-questionnaire && npm run test:pipeline-compass && npm run test:guide-progressive && npm run test:git-at-scale && npm run test:rule-sprawl && npm run test:hidden-entry && npm run test:solver-parity && npm run test:mcp-writeguard && npm run test:latency-budget && npm run test:gates-tree-scope && npm run test:actor-critic && npm run test:infoq-engage && npm run test:hermes-platform && npm run test:future-agi && npm run test:futureagi-prepost && npm run test:five-walls && npm run test:llm-surface-consistency && npm run test:dashboard-oversized-logs && npm run test:agent-action-inventory && npm run test:simatree-data-governance && npm run test:governance-conflict-audit && npm run test:agent-identity-plane && npm run test:mcp-identity-bootstrap && npm run test:alert-noise-ledger && npm run test:webmcp && npm run test:perf-budget && npm run test:agent-loop && npm run test:nvhbm-base-die-gates && npm run test:graphrag-schema-first-multi-hop && npm run test:ai-governance-operating-plan && npm run test:claw-harness-production && npm run test:double-blind-eval-protocol && npm run test:codex-runbook-flywheel && npm run test:explainx-trending && npm run test:graphify && npm run test:tooling-scripts && npm run test:synthetic-customer-panel && npm run test:star-history && npm run test:github-achievement-honesty && npm run test:ai-identity-checklist && npm run test:knowledge-graph-fuse && npm run test:skill-library-compact && npm run test:intent-scope-runtime && npm run test:unicode-tag-block-normalize && npm run test:issue-3702-action-not-substring && npm run test:mantis-critic-review && npm run test:break-glass-gates-propose",
+    "test:dashboard-oversized-logs": "node --test tests/dashboard-oversized-log-resilience.test.js",
     "test:python": "python3 -m pytest tests/*.py",
     "test:check-update": "node --test tests/check-update.test.js",
     "test:hook-stop-verify-deploy": "node --test tests/hook-stop-verify-deploy.test.js",
@@ -526,6 +655,8 @@
     "test:metaclaw": "node --test tests/metaclaw-features.test.js",
     "test:server-lock": "node --test tests/server-stdio-lock.test.js",
     "test:org-dashboard": "node --test tests/org-dashboard.test.js",
+    "test:agent-identity-plane": "node --test tests/agent-identity-plane.test.js",
+    "test:mcp-identity-bootstrap": "node --test tests/mcp-identity-bootstrap.test.js",
     "test:multi-hop-recall": "node --test tests/multi-hop-recall.test.js",
     "test:synthetic-dpo": "node --test tests/synthetic-dpo.test.js",
     "test:thumbgate-skill": "node --test tests/thumbgate-skill.test.js",
@@ -535,6 +666,9 @@
     "test:statusline-cache-aggregate": "node --test tests/statusline-cache-aggregate.test.js",
     "test:no-internal-orchestration-leaks": "node --test tests/no-internal-orchestration-leaks.test.js",
     "test:memory-dedup": "node --test tests/memory-dedup.test.js",
+    "test:memory-near-dupe": "node --test tests/memory-near-dupe.test.js",
+    "test:lesson-retrieval-dedupe-backfill": "node --test tests/lesson-retrieval-dedupe-backfill.test.js",
+    "memory:compact": "node scripts/compact-memory-store.js",
     "test:lesson-db": "node --test tests/lesson-db.test.js",
     "test:lesson-rotation": "node --test tests/lesson-rotation.test.js",
     "test:feedback-quality": "node --test tests/feedback-quality.test.js tests/feedback-event-idempotency.test.js tests/feedback-capture-e2e.test.js",
@@ -550,6 +684,8 @@
     "test:repeat-metric": "node --test tests/repeat-metric.test.js",
     "test:noop-detect": "node --test tests/noop-detect.test.js",
     "test:action-receipts": "node --test tests/action-receipts.test.js",
+    "test:broker-execution-receipts": "node --test tests/broker-execution-receipts.test.js",
+    "test:provider-attestation": "node --test tests/provider-attestation-conformance.test.js",
     "test:learn-hub": "node --test tests/learn-hub.test.js",
     "test:feedback-to-rules": "node --test tests/feedback-to-rules.test.js",
     "test:memory-firewall": "node --test tests/memory-firewall.test.js",
@@ -570,6 +706,7 @@
     "test:plan-gate": "node --test tests/plan-gate.test.js",
     "test:pulse": "node --test tests/pulse.test.js",
     "test:semantic-layer": "node --test tests/semantic-layer.test.js",
+    "test:simatree-data-governance": "node --test tests/simatree-data-governance.test.js",
     "test:data-pipeline": "node --test tests/data-pipeline.test.js",
     "test:optimize-context": "node --test tests/optimize-context.test.js tests/context-footprint.test.js",
     "test:principle-extractor": "node --test tests/principle-extractor.test.js",
@@ -597,16 +734,16 @@
     "test:loop": "node scripts/feedback-loop.js --test",
     "test:dpo": "node scripts/export-dpo-pairs.js --test",
     "test:kto": "node --test tests/export-kto.test.js",
-    "test:proof": "node --test tests/prove-adapters.test.js tests/prove-attribution.test.js tests/prove-cloudflare-sandbox.test.js tests/prove-data-quality.test.js tests/prove-intelligence.test.js tests/prove-lancedb.test.js tests/prove-loop-closure.test.js tests/prove-training-export.test.js tests/prove-local-intelligence.test.js tests/prove-workflow-contract.test.js tests/prove-autoresearch.test.js tests/prove-claim-verification.test.js tests/prove-data-pipeline.test.js tests/prove-evolution.test.js tests/prove-harnesses.test.js tests/prove-packaged-runtime.test.js tests/prove-runtime.test.js tests/prove-seo-gsd.test.js tests/prove-settings.test.js tests/prove-xmemory.test.js && node --test tests/prove-automation.test.js",
+    "test:proof": "node --test tests/prove-adapters.test.js tests/prove-herdr-adapter.test.js tests/prove-attribution.test.js tests/prove-cloudflare-sandbox.test.js tests/prove-data-quality.test.js tests/prove-intelligence.test.js tests/prove-lancedb.test.js tests/prove-loop-closure.test.js tests/prove-training-export.test.js tests/prove-local-intelligence.test.js tests/prove-workflow-contract.test.js tests/prove-autoresearch.test.js tests/prove-claim-verification.test.js tests/prove-data-pipeline.test.js tests/prove-evolution.test.js tests/prove-harnesses.test.js tests/prove-packaged-runtime.test.js tests/prove-runtime.test.js tests/prove-seo-gsd.test.js tests/prove-settings.test.js tests/prove-xmemory.test.js && node --test tests/prove-automation.test.js",
     "test:e2e": "node --test tests/e2e-pipeline.test.js tests/e2e-product-flows.test.js tests/e2e-coverage-contract.test.js tests/interaction-model-e2e.test.js",
     "test:rlaif": "node --test tests/rlaif-self-audit.test.js tests/dpo-optimizer.test.js tests/meta-policy.test.js tests/agent-reward-model.test.js",
-    "test:attribution": "node --test tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/memory-guard-matching.test.js",
+    "test:attribution": "node --test tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/memory-guard-matching.test.js tests/memory-guard-envelope-tokens.test.js",
     "test:quality": "node --test tests/validate-feedback.test.js tests/feedback-quality-eval-python.test.js tests/eval-gate-classifier.test.js",
     "test:intelligence": "node --test tests/intelligence.test.js",
     "test:training-export": "node --test tests/training-export.test.js tests/databricks-export.test.js",
-    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/package-boundary.test.js tests/public-package-boundary.test.js tests/packed-feedback-retrieval-e2e.test.js tests/packed-provider-payment-reconciler-e2e.test.js tests/packed-revenue-remediation-e2e.test.js tests/prove-production-authenticated.test.js tests/verify-npm-githead.test.js",
-    "test:operational-integrity": "node --test tests/operational-integrity.test.js tests/sync-branch-protection.test.js",
-    "test:workflow": "node --test tests/parallel-workflow.test.js tests/parallel-workflow-public.test.js tests/workflow-contract.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/workflow-intake-queue.test.js tests/revenue-pack-utils.test.js tests/apollo-acquisition.test.js tests/sales-pipeline.test.js tests/provider-payment-reconciler.test.js tests/reddit-dm-outreach-evidence.test.js tests/gtm-sales-evidence-commands.test.js tests/revenue-action-eligibility.test.js tests/revenue-evidence-remediation.test.js tests/gtm-revenue-action-eligibility.test.js tests/revenue-offer-ladder.test.js tests/revenue-offer-system.test.js tests/buyer-paths.test.js tests/github-outreach.test.js tests/enterprise-story.test.js tests/guide-conversion-path.test.js tests/buyer-intent-revenue-assist.test.js && node --test tests/eval-proof-pack-pages.test.js && npm run test:proof-pack-cadence",
+    "test:deployment": "node --test tests/deployment.test.js tests/deploy-policy.test.js tests/publish-decision.test.js tests/changeset-check.test.js tests/release-notes.test.js tests/sonarcloud-workflow.test.js tests/codeql-workflow-lockstep.test.js tests/package-boundary.test.js tests/public-package-boundary.test.js tests/packed-feedback-retrieval-e2e.test.js tests/packed-provider-payment-reconciler-e2e.test.js tests/packed-revenue-remediation-e2e.test.js tests/ensure-production-search-corpus.test.js tests/prove-production-authenticated.test.js tests/verify-npm-githead.test.js tests/npm-oidc-sept2026-publish.test.js",
+    "test:operational-integrity": "node --test tests/operational-integrity.test.js tests/sync-branch-protection.test.js tests/sync-repository-rulesets.test.js",
+    "test:workflow": "node --test tests/parallel-workflow.test.js tests/parallel-workflow-public.test.js tests/workflow-contract.test.js tests/positioning-contract.test.js tests/docs-claim-hygiene.test.js tests/thumbgate-scope.test.js tests/workflow-runs.test.js tests/workflow-sprint-intake.test.js tests/workflow-intake-queue.test.js tests/workflow-notebook.test.js tests/revenue-pack-utils.test.js tests/apollo-acquisition.test.js tests/sales-pipeline.test.js tests/provider-payment-reconciler.test.js tests/reddit-dm-outreach-evidence.test.js tests/gtm-sales-evidence-commands.test.js tests/revenue-action-eligibility.test.js tests/revenue-evidence-remediation.test.js tests/gtm-revenue-action-eligibility.test.js tests/revenue-offer-ladder.test.js tests/revenue-offer-system.test.js tests/buyer-paths.test.js tests/github-outreach.test.js tests/enterprise-story.test.js tests/guide-conversion-path.test.js tests/buyer-intent-revenue-assist.test.js && node --test tests/eval-proof-pack-pages.test.js && npm run test:proof-pack-cadence",
     "test:revenue-evidence-remediation": "node --test tests/revenue-evidence-remediation.test.js",
     "test:grafana-revenue-evidence": "node --test tests/grafana-revenue-evidence.test.js",
     "test:sales-pipeline": "node --test tests/sales-pipeline.test.js tests/provider-payment-reconciler.test.js tests/reddit-dm-outreach-evidence.test.js tests/gtm-sales-evidence-commands.test.js",
@@ -616,10 +753,25 @@
     "test:evolution": "node --test tests/workspace-evolver.test.js",
     "test:watcher": "node --test tests/jsonl-watcher.test.js",
     "test:autoresearch": "node --test tests/autoresearch.test.js",
-    "test:ops": "node --test tests/qa-scenario-planner.test.js tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/decision-journal.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/financial-control-plane.test.js tests/financial-spend-attack-matrix.test.js tests/gate-stats.test.js tests/gates-engine-upgrade-cta.test.js tests/git-hook-installer.test.js tests/github-billing.test.js tests/intervention-policy.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/native-messaging-audit.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-revenue.test.js tests/stripe-webhook-route.test.js tests/stripe-webhook-rotation.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/workflow-sentinel.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js tests/auto-context-packs.test.js tests/daily-block-cap.test.js tests/auto-promote-regression-gate.test.js tests/install-spend-guard.test.js tests/spend-guard-path-precision.test.js tests/spend-guard-hook-contract.test.js tests/enforcement-provenance.test.js",
+    "test:ops": "node --test tests/qa-scenario-planner.test.js tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/decision-journal.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/financial-control-plane.test.js tests/financial-spend-attack-matrix.test.js tests/gate-stats.test.js tests/gates-engine-upgrade-cta.test.js tests/git-hook-installer.test.js tests/github-billing.test.js tests/intervention-policy.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/native-messaging-audit.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-revenue.test.js tests/stripe-webhook-route.test.js tests/stripe-webhook-rotation.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/workflow-sentinel.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js tests/auto-context-packs.test.js tests/daily-block-cap.test.js tests/auto-promote-regression-gate.test.js tests/install-spend-guard.test.js tests/spend-guard-path-precision.test.js tests/spend-guard-hook-contract.test.js tests/enforcement-provenance.test.js tests/compare-agoragentic.test.js tests/compare-dirac.test.js && node --test tests/qa-scenario-planner.test.js tests/adk-consolidator.test.js tests/anthropic-partner-strategy.test.js tests/auto-promote-gates.test.js tests/auto-wire-hooks.test.js tests/claude-skill.test.js tests/codegraph-context.test.js tests/commercial-signals.test.js tests/decision-journal.test.js tests/delegation-runtime.test.js tests/disagreement-mining.test.js tests/failure-diagnostics.test.js tests/financial-control-plane.test.js tests/financial-spend-attack-matrix.test.js tests/gate-stats.test.js tests/gates-engine-upgrade-cta.test.js tests/git-hook-installer.test.js tests/github-billing.test.js tests/intervention-policy.test.js tests/markdown-escape.test.js tests/mcp-tools-gates.test.js tests/native-messaging-audit.test.js tests/project-bayes-e2e.test.js tests/project-bayes.test.js tests/rate-limiter.test.js tests/schedule-manager.test.js tests/session-handoff.test.js tests/skill-generator.test.js tests/smart-learning.test.js tests/spike-and-sink.test.js tests/stripe-revenue.test.js tests/stripe-webhook-route.test.js tests/stripe-webhook-rotation.test.js tests/train-from-feedback.test.js tests/workflow-hardening-sprint.test.js tests/workflow-sentinel.test.js tests/test-suite-parity.test.js tests/a2ui-engine.test.js tests/webhook-delivery.test.js tests/auto-context-packs.test.js tests/daily-block-cap.test.js tests/auto-promote-regression-gate.test.js tests/install-spend-guard.test.js tests/spend-guard-path-precision.test.js tests/spend-guard-hook-contract.test.js tests/enforcement-provenance.test.js tests/git-at-scale.test.js",
     "test:session-analyzer": "node --test tests/session-analyzer.test.js",
     "test:tessl": "node --test tests/tessl-export.test.js",
-    "test:gates": "node --test --test-concurrency=1 tests/gate-templates.test.js tests/gates-engine.test.js tests/gates-engine-outbound-email.test.js tests/claim-verification.test.js tests/universal-claim-evaluator.test.js tests/secret-scanner.test.js tests/secret-fixture-safety.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js tests/workflow-sentinel.test.js tests/docker-sandbox-planner.test.js tests/mcp-tools-suggest-fix.test.js tests/deny-network-egress-pattern.test.js tests/git-pathspec-scope.test.js tests/git-global-option-bypass.test.js tests/gate-evasion-matrix.test.js",
+    "test:gates": "node --test --test-concurrency=1 tests/gate-templates.test.js tests/gates-engine.test.js tests/gates-engine-outbound-email.test.js tests/claim-verification.test.js tests/universal-claim-evaluator.test.js tests/secret-scanner.test.js tests/secret-fixture-safety.test.js tests/prompt-guard.test.js tests/audit-trail.test.js tests/profile-router.test.js tests/workflow-sentinel.test.js tests/docker-sandbox-planner.test.js tests/mcp-tools-suggest-fix.test.js tests/deny-network-egress-pattern.test.js tests/git-pathspec-scope.test.js tests/git-global-option-bypass.test.js tests/gate-evasion-matrix.test.js tests/stealth-memory-injection-gate.test.js tests/gates-tree-and-scope-isolation.test.js tests/mcp-writeguard.test.js tests/latency-budget.test.js tests/git-fast-cache.test.js tests/hash-anchored-edit.test.js tests/redteam-5-attacks.test.js tests/rendezvous-router.test.js tests/git-wal-sync.test.js tests/ppl-alert-pipeline.test.js tests/agent-retrieval-cache.test.js tests/iso42001-compliance-guard.test.js tests/agent-identity-boundary.test.js tests/miminions-adapter.test.js",
+    "test:gates-tree-scope": "node --test tests/gates-tree-and-scope-isolation.test.js",
+    "test:fast-cache": "node --test tests/git-fast-cache.test.js",
+    "test:hash-anchored-edit": "node --test tests/hash-anchored-edit.test.js",
+    "test:redteam": "node --test tests/redteam-5-attacks.test.js",
+    "test:mcp-writeguard": "node --test tests/mcp-writeguard.test.js",
+    "test:latency-budget": "node --test tests/latency-budget.test.js",
+    "test:perf-budget": "node --test tests/perf-budget.test.js",
+    "test:nvhbm-base-die-gates": "node --test tests/nvhbm-base-die-gates.test.js",
+    "test:graphrag-schema-first-multi-hop": "node --test tests/graphrag-schema-first-multi-hop.test.js",
+    "test:ai-governance-operating-plan": "node --test tests/ai-governance-operating-plan.test.js",
+    "test:codex-runbook-flywheel": "node --test tests/codex-runbook-flywheel.test.js",
+    "perf:budget": "node scripts/perf-budget-check.js",
+    "perf:budget:prod": "node scripts/perf-budget-check.js --prod",
+    "test:webmcp": "node --test tests/webmcp-governance.test.js",
+    "test:stealth-memory-injection": "node --test tests/stealth-memory-injection-gate.test.js",
     "test:budget": "node --test tests/budget-guard.test.js tests/budget-enforcer.test.js tests/tokenomics-cost-guard.test.js tests/hook-no-budget-lockout.test.js",
     "test:workers": "npm --prefix workers ci && npm --prefix workers test",
     "test:evoskill": "node --test tests/evoskill.test.js",
@@ -644,6 +796,8 @@
     "pr:manage": "node scripts/pr-manager.js",
     "branch-protection:check": "node scripts/sync-branch-protection.js --check",
     "branch-protection:sync": "node scripts/sync-branch-protection.js",
+    "rulesets:check": "node scripts/sync-repository-rulesets.js --check",
+    "rulesets:sync": "node scripts/sync-repository-rulesets.js",
     "self-heal:run": "node scripts/self-heal.js",
     "self-heal:check": "node scripts/self-healing-check.js",
     "skill:verify": "node scripts/tessl-export.js verify",
@@ -654,6 +808,7 @@
     "ops:integrity:ci": "node scripts/operational-integrity.js --ci",
     "prove:adapters": "node --test tests/prove-adapters.test.js",
     "prove:automation": "node --test tests/prove-automation.test.js",
+    "prove:provider-attestation": "node scripts/provider-attestation-conformance.js",
     "prove:workflow-contract": "node --test tests/prove-workflow-contract.test.js",
     "prove:evolution": "node scripts/prove-evolution.js",
     "prove:autoresearch": "node scripts/prove-autoresearch.js",
@@ -669,6 +824,10 @@
     "prove:tessl": "node scripts/prove-tessl.js",
     "prove:xmemory": "node scripts/prove-xmemory.js",
     "audit:stats": "node scripts/audit-trail.js --stats",
+    "inventory:agents": "node scripts/agent-action-inventory.js",
+    "test:agent-action-inventory": "node --test tests/agent-action-inventory.test.js",
+    "audit:conflicts": "node scripts/governance-conflict-audit.js",
+    "test:governance-conflict-audit": "node --test tests/governance-conflict-audit.test.js",
     "profile:route": "node scripts/profile-router.js",
     "test:platform-limits": "node --test tests/platform-limits.test.js",
     "test:durability-step": "node --test tests/durability-step.test.js",
@@ -762,6 +921,8 @@
     "test:enforcement-loop": "node --test tests/enforcement-loop-fixes.test.js",
     "test:ai-search-visibility": "node --test tests/ai-search-visibility.test.js",
     "test:security-scanner": "node --test tests/security-scanner.test.js",
+    "test:agent-security-central": "node --test tests/agent-security-central.test.js",
+    "security:central": "node scripts/agent-security-central.js",
     "test:llm-client": "node --test tests/llm-client.test.js",
     "test:model-candidates": "node --test tests/model-candidates.test.js",
     "test:managed-lesson-agent": "node --test tests/managed-lesson-agent.test.js",
@@ -808,8 +969,16 @@
     "test:vlt": "node --test tests/vlt-proof.test.js",
     "test:hf-context": "node --test tests/hf-context-course.test.js",
     "test:proof-common": "node --test tests/proof-common.test.js",
-    "test:high-roi": "node --test tests/high-roi.test.js tests/model-candidates.test.js tests/autonomous-workflow.test.js tests/high-roi-agent-workflows.test.js tests/interaction-model.test.js tests/interaction-model-e2e.test.js tests/code-graph-guardrails.test.js tests/proxy-pointer-rag-guardrails.test.js tests/rag-precision-guardrails.test.js tests/ai-engineering-stack-guardrails.test.js tests/long-running-agent-context-guardrails.test.js tests/reasoning-efficiency-guardrails.test.js tests/deepseek-v4-runtime-guardrails.test.js tests/upstream-contribution-engine.test.js tests/proactive-agent-eval-guardrails.test.js tests/reward-hacking-guardrails.test.js tests/chatgpt-ads-readiness-pack.test.js tests/oss-pr-opportunity-scout.test.js tests/agent-design-governance.test.js tests/gemini-embedding-policy.test.js tests/openclaw-agent-governance-kit.test.js tests/agent-operations-planner.test.js tests/aws-blocks-guardrails.test.js tests/vlt-proof.test.js tests/hf-context-course.test.js tests/proof-common.test.js",
-    "test:public-static-assets": "node --test tests/public-static-assets.test.js tests/public-checkout-intent-gate.test.js tests/public-enterprise-capability-boundary.test.js",
+    "test:mcp-session-handles": "node --test tests/mcp-session-handles.test.js",
+    "test:agent-egress-policy": "node --test tests/agent-egress-policy.test.js",
+    "test:allowlist-bridge-honesty": "node --test tests/allowlist-bridge-honesty.test.js",
+    "allowlist-bridge-honesty": "node scripts/allowlist-bridge-honesty.js",
+    "test:openui-catalog-compose-honesty": "node --test tests/openui-catalog-compose-honesty.test.js",
+    "openui-catalog-compose-honesty": "node scripts/openui-catalog-compose-honesty.js",
+    "test:budget-aware-gates-proof": "node --test tests/budget-aware-gates-proof.test.js",
+    "test:business-function-agents": "node --test tests/business-function-agent-team.test.js",
+    "test:high-roi": "node --test tests/high-roi.test.js tests/gurobi-optimizer.test.js tests/model-candidates.test.js tests/autonomous-workflow.test.js tests/high-roi-agent-workflows.test.js tests/business-function-agent-team.test.js tests/radware-threat-defense.test.js tests/interaction-model.test.js tests/interaction-model-e2e.test.js tests/code-graph-guardrails.test.js tests/proxy-pointer-rag-guardrails.test.js tests/rag-precision-guardrails.test.js tests/ai-engineering-stack-guardrails.test.js tests/long-running-agent-context-guardrails.test.js tests/reasoning-efficiency-guardrails.test.js tests/deepseek-v4-runtime-guardrails.test.js tests/nvidia-specdecode-al-doctor.test.js tests/package-manager-honesty-doctor.test.js tests/openui-catalog-compose-honesty.test.js tests/gist-prompt-budget.test.js tests/workload-identity-honesty.test.js tests/config-strict-parse.test.js tests/upstream-contribution-engine.test.js tests/proactive-agent-eval-guardrails.test.js tests/reward-hacking-guardrails.test.js tests/chatgpt-ads-readiness-pack.test.js tests/oss-pr-opportunity-scout.test.js tests/agent-design-governance.test.js tests/gemini-embedding-policy.test.js tests/rag-embedding-identity.test.js tests/openclaw-agent-governance-kit.test.js tests/agent-operations-planner.test.js tests/aws-blocks-guardrails.test.js tests/vlt-proof.test.js tests/hf-context-course.test.js tests/proof-common.test.js tests/mcp-session-handles.test.js tests/agent-egress-policy.test.js tests/allowlist-bridge-honesty.test.js tests/budget-aware-gates-proof.test.js tests/edotenv-rl-gateway.test.js tests/rsi-safety-hillclimb.test.js tests/research-agent-harness.test.js tests/rule-sprawl.test.js tests/solver-parity.test.js tests/six-function-agent-team.test.js && npm run test:jit-harness-compose && npm run test:workspace-search-route && npm run test:intent-governed-execution && npm run test:cobble-hot-store-split && npm run test:token-shunt-honesty && npm run test:typesafe-typed-questions && npm run test:colab-compute-honesty",
+    "test:public-static-assets": "node --test tests/public-static-assets.test.js tests/public-checkout-intent-gate.test.js tests/public-enterprise-capability-boundary.test.js tests/founders-conversion-page.test.js",
     "test:token-savings": "node --test tests/token-savings.test.js",
     "test:cost-cli": "node --test tests/cost-cli.test.js tests/conversion-receipt.test.js",
     "test:numbers-page": "node --test tests/numbers-page.test.js",
@@ -862,7 +1031,7 @@
     "test:mcp-oauth-reviewer": "node --test tests/mcp-oauth-reviewer.test.js",
     "test:dashboard-chat": "node --test tests/dashboard-chat.test.js",
     "test:gitar-integration": "node --test tests/gitar-integration.test.js",
-    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-events-sse.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/context-manager.test.js tests/contextfs.test.js tests/job-api.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-jsonl-bound.test.js tests/dashboard-limits.test.js tests/cli-progress.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/document-intake.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/gemini-embedding-policy.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/ide-marketplace-extensions.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/lessons-page.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js tests/classifier-routing.test.js",
+    "test:api": "node --test --test-concurrency=1 tests/api-server.test.js tests/api-events-sse.test.js tests/api-auth-config.test.js tests/mcp-server.test.js tests/adapters.test.js tests/openapi-parity.test.js tests/budget-guard.test.js tests/context-manager.test.js tests/contextfs.test.js tests/job-api.test.js tests/pack-templates.test.js tests/dashboard.test.js tests/dashboard-jsonl-bound.test.js tests/dashboard-limits.test.js tests/cli-progress.test.js tests/dashboard-render-spec.test.js tests/dashboard-html.test.js tests/agent-readiness.test.js tests/mcp-policy.test.js tests/subagent-profiles.test.js tests/intent-router.test.js tests/internal-agent-bootstrap.test.js tests/lesson-search.test.js tests/thumbgate-search.test.js tests/document-intake.test.js tests/rubric-engine.test.js tests/self-healing-check.test.js tests/self-heal.test.js tests/feedback-schema.test.js tests/thompson-sampling.test.js tests/feedback-sequences.test.js tests/diversity-tracking.test.js tests/vector-store.test.js tests/gemini-embedding-policy.test.js tests/feedback-attribution.test.js tests/hybrid-feedback-context.test.js tests/loop-closure.test.js tests/code-reasoning.test.js tests/feedback-loop.test.js tests/feedback-inbox-read.test.js tests/feedback-to-memory.test.js tests/test-coverage.test.js tests/version-metadata.test.js tests/claude-mcpb.test.js tests/claude-codex-bridge.test.js tests/cursor-plugin.test.js tests/codex-plugin.test.js tests/ide-marketplace-extensions.test.js tests/telemetry-analytics.test.js tests/public-landing.test.js tests/lessons-page.test.js tests/pro-landing.test.js tests/local-model-profile.test.js tests/risk-scorer.test.js tests/context-compaction.test.js tests/reminder-engine.test.js tests/verification-loop.test.js tests/async-job-runner.test.js tests/commerce-quality.test.js tests/recall-limit.test.js tests/problem-detail.test.js tests/natural-language-harness.test.js tests/settings-hierarchy.test.js tests/classifier-routing.test.js tests/dashboard-response-cache.test.js",
     "test:leak-scanner": "node --test tests/leak-scanner.test.js",
     "test:tool-contract-validator": "node --test tests/tool-contract-validator.test.js",
     "test:letta-adapter": "node --test tests/letta-adapter.test.js",
@@ -896,7 +1065,13 @@
     "test:state-backup": "node --test tests/state-backup.test.js",
     "eval:mine": "node scripts/mine-eval-set.js",
     "eval:baseline": "node scripts/eval-baseline.js",
-    "test:eval-golden": "node --test tests/gate-golden-set.test.js",
+    "eval:holdout:freeze": "node scripts/eval-holdout.js --freeze",
+    "eval:holdout:check": "node scripts/eval-holdout.js --check",
+    "eval:holdout:verify": "node scripts/eval-holdout.js --verify",
+    "panel:synthetic": "node scripts/synthetic-customer-panel.js",
+    "test:synthetic-customer-panel": "node --test tests/synthetic-customer-panel.test.js",
+    "workflow:notebook": "node scripts/workflow-notebook.js",
+    "test:eval-golden": "node --test tests/gate-golden-set.test.js tests/eval-holdout.test.js",
     "test:eval-mining": "node --test tests/mine-eval-set.test.js tests/eval-baseline.test.js",
     "test:task-scope-lease": "node --test tests/task-scope-lease.test.js",
     "eval-scorecard:generate": "node scripts/generate-eval-scorecard.js",
@@ -907,7 +1082,7 @@
     "test:proof-pack-cadence": "node --test tests/refresh-proof-pack.test.js tests/case-study-outreach.test.js",
     "test:evaluations-page": "node --test tests/evaluations-page.test.js",
     "prove:rag": "node -r dotenv/config scripts/prove-rag-pipeline.js",
-    "test:rag-pipeline": "node --require dotenv/config --test tests/rag-document-pipeline.test.js tests/rag-structured-output.test.js tests/rag-stage-contracts.test.js tests/prove-rag-pipeline.test.js tests/ir-metrics.test.js tests/retrieval-ranking-eval.test.js tests/pragmatic-hybrid-search.test.js",
+    "test:rag-pipeline": "node --require dotenv/config --test tests/rag-document-pipeline.test.js tests/rag-structured-output.test.js tests/rag-stage-contracts.test.js tests/prove-rag-pipeline.test.js tests/ir-metrics.test.js tests/retrieval-ranking-eval.test.js tests/pragmatic-hybrid-search.test.js tests/graphrag-retrieval.test.js",
     "eval:ranking": "node scripts/retrieval-ranking-eval.js",
     "test:ir-metrics": "node --test tests/ir-metrics.test.js tests/retrieval-ranking-eval.test.js",
     "test:pragmatic-hybrid": "node --test tests/pragmatic-hybrid-search.test.js",
@@ -940,7 +1115,89 @@
     "enforcement:provenance": "node scripts/enforcement-provenance-check.js",
     "prove:vlt": "node scripts/prove-vlt-dogfood.js",
     "test:vlt-dogfood": "node --test tests/prove-vlt-dogfood.test.js",
-    "test:context-engineering": "node --test tests/context-engineering-checklist.test.js"
+    "test:context-engineering": "node --test tests/context-engineering-checklist.test.js",
+    "test:workos-production-guard": "node --test tests/workos-production-guard.test.js",
+    "test:partner-landing": "node --test tests/partner-landing.test.js",
+    "test:memory-pyramid": "node --test tests/agent-memory-lifecycle.test.js",
+    "prove:workos": "node scripts/prove-workos.js",
+    "prove:herdr": "node --test tests/prove-herdr-adapter.test.js",
+    "prove:memory-pyramid": "node scripts/prove-memory-pyramid-and-symbolic-canvas.js",
+    "test:switchyard-router": "node --test tests/switchyard-router.test.js",
+    "test:bulk-cloud-tier": "node --test tests/bulk-cloud-tier.test.js",
+    "test:session-lease": "node --test tests/session-lease.test.js",
+    "test:compare-agoragentic": "node --test tests/compare-agoragentic.test.js",
+    "session:lease": "node scripts/session-lease.js",
+    "session:lease:claim": "node scripts/session-lease.js claim",
+    "session:lease:check": "node scripts/session-lease.js check",
+    "session:lease:release": "node scripts/session-lease.js release",
+    "test:qwen-adapter": "node --test tests/qwen-adapter.test.js",
+    "test:qwen38-max-cost-optimizer": "node --test tests/qwen38-max-cost-optimizer.test.js",
+    "test:openai-compatible-embed": "node --test tests/openai-compatible-embed.test.js",
+    "archive:pre-eci": "node scripts/create-pre-eci-archive.js",
+    "test:rag-embedding-identity": "node --test tests/rag-embedding-identity.test.js",
+    "test:gurobi": "node --test tests/gurobi-optimizer.test.js tests/solver-no-auto-apply.test.js",
+    "gurobi:install": "bash scripts/gurobi-systemwide-install.sh",
+    "gurobi:evaluate": "node scripts/gurobi-optimizer.js",
+    "test:github-marketplace-action": "node --test tests/github-marketplace-action.test.js",
+    "test:edotenv-rl-gateway": "node --test tests/edotenv-rl-gateway.test.js",
+    "test:rsi-safety-hillclimb": "node --test tests/rsi-safety-hillclimb.test.js",
+    "test:research-agent-harness": "node --test tests/research-agent-harness.test.js",
+    "test:governance-curriculum": "node --test tests/governance-difficulty-curriculum.test.js",
+    "test:adaptive-governance-arena": "node --test tests/adaptive-governance-arena.test.js",
+    "test:gpc-optout": "node --test tests/gpc-optout.test.js",
+    "thumbgate:arena": "node scripts/adaptive-governance-arena.js",
+    "test:solver-parity": "node --test tests/solver-parity.test.js",
+    "solver:parity": "node scripts/solver-parity.js",
+    "test:guide-progressive": "node --test tests/guide-progressive.test.js",
+    "test:override-audit": "node --test tests/override-audit.test.js",
+    "test:admin-override": "node --test tests/admin-override.test.js",
+    "test:progressive-wiring": "node --test tests/progressive-wiring.test.js",
+    "test:security-questionnaire": "node --test tests/security-questionnaire.test.js",
+    "test:pipeline-compass": "node --test tests/pipeline-compass.test.js",
+    "test:compare-dirac": "node --test tests/compare-dirac.test.js",
+    "test:compare-aperture": "node --test tests/compare-aperture.test.js",
+    "git:scale": "node scripts/git-at-scale.js",
+    "git:scale:scorecard": "node scripts/git-at-scale.js scorecard",
+    "git:scale:maintenance": "node scripts/git-at-scale.js maintenance",
+    "git:scale:prune": "node scripts/git-at-scale.js prune-worktrees",
+    "git:scale:tip": "node scripts/git-at-scale.js tip --branch main",
+    "git:scale:tune": "node scripts/git-at-scale.js tune",
+    "git:scale:check": "node scripts/git-at-scale.js check",
+    "git:scale:heal": "node scripts/git-at-scale.js heal",
+    "rule:sprawl": "node scripts/rule-sprawl.js",
+    "test:hidden-entry": "node --test tests/hidden-entry-points.test.js",
+    "hidden:entry": "node scripts/hidden-entry-points.js",
+    "test:six-function": "node --test tests/six-function-agent-team.test.js",
+    "test:double-blind-eval-protocol": "node --test tests/double-blind-eval-protocol.test.js",
+    "codex:runbook:dry-run": "node scripts/codex-runbook-flywheel.js --dry-run",
+    "codex:runbook:solve": "node scripts/codex-runbook-flywheel.js --solve",
+    "test:claw-harness-production": "node --test tests/claw-harness-production.test.js",
+    "test:agent-loop": "node --test tests/agent-loop-health.test.js",
+    "test:radware-threat-defense": "node --test tests/radware-threat-defense.test.js",
+    "explainx:trending": "node scripts/explainx-trending-honest.js",
+    "test:explainx-trending": "node --test tests/explainx-trending-honest.test.js",
+    "graphify:setup": "node scripts/graphify-setup.js",
+    "graphify:ready": "node scripts/graphify-readiness.js",
+    "graphify:stale": "node scripts/graphify-staleness-check.js",
+    "test:graphify": "node --test tests/graphify-readiness.test.js",
+    "test:jit-harness-compose": "node --test tests/jit-harness-compose.test.js",
+    "test:cobble-hot-store-split": "node --test tests/cobble-hot-store-split.test.js",
+    "cobble-hot-store-split": "node scripts/cobble-hot-store-split.js",
+    "test:token-shunt-honesty": "node --test tests/token-shunt-honesty.test.js",
+    "token-shunt-honesty": "node scripts/token-shunt-honesty.js",
+    "test:typesafe-typed-questions": "node --test tests/typesafe-typed-questions.test.js",
+    "typesafe-typed-questions": "node scripts/typesafe-typed-questions.js",
+    "test:colab-compute-honesty": "node --test tests/colab-compute-honesty.test.js",
+    "colab-compute-honesty": "node scripts/colab-compute-honesty.js",
+    "test:workspace-search-route": "node --test tests/workspace-search-route.test.js",
+    "test:intent-governed-execution": "node --test tests/intent-governed-execution.test.js",
+    "memory:vs-rag": "node scripts/memory-vs-rag-route.js",
+    "gist:prompt-budget": "node scripts/gist-prompt-budget.js",
+    "test:gist-prompt-budget": "node --test tests/gist-prompt-budget.test.js",
+    "workload-identity:honesty": "node scripts/workload-identity-honesty.js",
+    "test:workload-identity-honesty": "node --test tests/workload-identity-honesty.test.js",
+    "config:strict-parse": "node scripts/config-strict-parse.js",
+    "test:config-strict-parse": "node --test tests/config-strict-parse.test.js"
   },
   "keywords": [
     "mcp",
@@ -995,13 +1252,13 @@
     "node": ">=18.18.0"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "0.115.0",
-    "@google/genai": "2.7.0",
-    "@lancedb/lancedb": "^0.30.0",
+    "@anthropic-ai/sdk": "^0.122.0",
+    "@google/genai": "2.21.0",
+    "@lancedb/lancedb": "^0.38.0",
     "apache-arrow": "^18.1.0",
     "better-sqlite3": "^12.9.0",
     "dotenv": "^17.4.2",
-    "js-yaml": "4.3.0",
+    "js-yaml": "5.4.1",
     "playwright-core": "^1.59.1",
     "protobufjs": "^8.7.1",
     "stripe": "^22.2.0"
@@ -1018,16 +1275,17 @@
     "express@4.22.1": {
       "path-to-regexp": "0.1.13"
     },
-    "js-yaml": "4.3.0",
-    "undici": "8.10.0"
+    "js-yaml": "5.4.1",
+    "sharp": "0.35.4",
+    "undici": "8.10.2"
   },
   "mcpName": "io.github.IgorGanapolsky/thumbgate",
   "devDependencies": {
-    "@changesets/changelog-github": "^0.7.0",
-    "@changesets/cli": "^2.31.0",
-    "@playwright/test": "^1.60.0",
+    "@changesets/changelog-github": "^1.0.0",
+    "@changesets/cli": "^3.0.0",
+    "@playwright/test": "^1.62.1",
     "c8": "^12.0.0",
-    "undici": "8.10.0"
+    "undici": "8.10.2"
   },
   "hotfix": "gate-check-bypass-2026-06-03"
 }